Domain controller control system and method

By designing a domain controller control system, using IMR controller and electronic switching devices to achieve automatic restart and power outage protection, the problem of intelligent system failure caused by domain controller crashes is solved, and the stability, reliability and automation of the system are improved.

CN119987251APending Publication Date: 2025-05-13SAIC GM WULING AUTOMOBILE CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411873459.2
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-18
Publication Date
2025-05-13

AI Technical Summary

Technical Problem

The domain controller has a risk of crashing under long-term high load operation, resulting in the overall failure of the intelligent system. In an unattended environment, the reliability and operability of manual restart are low.

Method used

A domain controller control system is designed, including an IMR controller, a communication network, an electronic switching device, a domain controller and a power supply power supply. The IMR controller communicates with the domain controller through a communication network, and controls the power supply status of the domain controller through an electronic switching device to achieve automatic restart and power outage protection.

Benefits of technology

Through communication abnormality detection and power outage protection functions, the stability and reliability of the system are improved, the risk of equipment being damaged due to external abnormal environments is reduced, the security protection capability of the system is improved, the operation management of the domain controller is optimized, and the degree of automation of the system is improved.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119987251A_ABST
    Figure CN119987251A_ABST
Patent Text Reader

Abstract

The invention relates to a domain controller control system and method, and relates to the technical field of automatic driving. The system comprises an IMR controller, a communication network, an electronic switch device, a domain controller and a power supply. Wherein the communication end of the IMR controller is connected with the communication end of the domain controller through the communication network, and is used for bidirectional communication with the domain controller; the output end of the IMR controller is connected with the input contact of the electronic switch device and is used for controlling the on-off of the electronic switch device; a power supply is connected with a power connection contact of the electronic switch device, and a power supply contact of the electronic switch device is connected with a power supply enabling end of the domain controller and is used for supplying power to the domain controller under the condition that the electronic switch device is connected; the domain controller is powered off in the event that the electronic switching device is turned off. By adopting the method and the device, the domain controller can be automatically restarted under the abnormal condition, so that the time and the cost required by manual intervention are reduced.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of autonomous driving technology, and in particular to a domain controller control system and method. Background Art

[0002] At present, with the increasing application of intelligent systems in various vehicles and equipment, the domain controller, as the core processing unit, undertakes a large number of computing, data processing and equipment management tasks. In order to achieve reliable operation of the domain controller, CAN (Controller Area Network) is usually used to connect the IMR controller and the domain controller to achieve stable communication between the systems.

[0003] However, the domain controller has the risk of crashing under long-term high-load operation, which may cause the overall failure of the intelligent system. If the domain controller crashes, manual intervention is required to restart it. However, in an unattended environment, the reliability and operability of this method are greatly reduced. Summary of the invention

[0004] Based on this, it is necessary to provide a domain controller control system and method to address the above technical issues.

[0005] In a first aspect, a domain controller control system is provided, the system comprising an IMR controller, a communication network, an electronic switch device, a domain controller and a power supply; wherein:

[0006] The communication terminal of the IMR controller is connected to the communication terminal of the domain controller via the communication network for bidirectional communication with the domain controller;

[0007] The output end of the IMR controller is connected to the input contact of the electronic switch device, so as to control the on and off of the electronic switch device;

[0008] The power supply is connected to the power contact of the electronic switch device, and the power supply contact of the electronic switch device is connected to the power enable terminal of the domain controller, which is used to supply power to the domain controller when the electronic switch device is connected; and to cut off power to the domain controller when the electronic switch device is disconnected.

[0009] As an optional implementation, the communication network is a CAN network.

[0010] As an optional implementation, the electronic switch device is a relay.

[0011] In a second aspect, a domain controller control method is provided, the method being applied to the domain controller control system according to any one of the first aspects, the method comprising:

[0012] When the IMR controller meets a preset restart trigger condition, the IMR controller controls the electronic switch device to be disconnected so as to power off the domain controller;

[0013] The IMR controller controls the electronic switch device to be connected so as to restart the domain controller.

[0014] As an optional implementation, the method further includes:

[0015] When the IMR controller detects that the communication network is interrupted, starting timing;

[0016] When the first timing duration is greater than the preset communication interruption duration threshold, it is determined that the IMR controller meets the preset restart trigger condition.

[0017] As an optional implementation, the method further includes:

[0018] When the IMR controller detects that the domain controller sends a duplicate message, it starts timing;

[0019] When the second timing duration is greater than the preset communication abnormality duration threshold, it is determined that the IMR controller meets the preset restart trigger condition.

[0020] As an optional implementation, the method further includes:

[0021] When the IMR controller meets a preset power-off protection triggering condition, the IMR controller controls the electronic switch device to disconnect, so as to power off the domain controller.

[0022] As an optional implementation, the method further includes:

[0023] When the IMR controller detects that the system vibration amplitude is greater than a preset safety vibration amplitude threshold, it is determined that the IMR controller meets the preset power-off protection trigger condition.

[0024] As an optional implementation, the method further includes:

[0025] When the IMR controller detects that the light intensity is less than a preset light intensity threshold, it is determined that the IMR controller meets the preset power-off protection trigger condition.

[0026] As an optional implementation, the method further includes:

[0027] When the IMR controller detects that the current working moment is in a preset non-working period, it is determined that the IMR controller meets the preset power-off protection triggering condition.

[0028] The present application provides a domain controller control system and method. The technical solution provided by the embodiment of the present application brings at least the following beneficial effects: the system includes an IMR controller, a communication network, an electronic switch device, a domain controller and a power supply; wherein the communication end of the IMR controller is connected to the communication end of the domain controller through the communication network for bidirectional communication with the domain controller; the output end of the IMR controller is connected to the input contact of the electronic switch device for controlling the on and off of the electronic switch device; the power supply is connected to the power contact of the electronic switch device, and the power supply contact of the electronic switch device is connected to the power enable end of the domain controller for supplying power to the domain controller when the electronic switch device is connected; and for powering off the domain controller when the electronic switch device is disconnected. The present application improves the overall stability and reliability of the system through functions such as communication anomaly detection and power-off protection. The power-off protection function can effectively prevent equipment from being damaged by an external abnormal environment and improve the safety protection capability of the system. The electronic switch device is intelligently controlled by the IMR controller, which optimizes the operation management of the domain controller and improves the automation level of the system. The modular design facilitates functional expansion and reduces the time and cost required for manual intervention.

[0029] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0031] Figure 1 A schematic diagram of the structure of a domain controller control system provided in an embodiment of the present application;

[0032] Figure 2 A schematic diagram of an example of a domain controller control system provided in an embodiment of the present application;

[0033] Figure 3 A flowchart of a domain controller control method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0035] The following will describe in detail a domain controller control system provided by an embodiment of the present application in conjunction with a specific implementation method. Figure 1 A schematic diagram of the structure of a domain controller control system provided in an embodiment of the present application is shown in FIG. Figure 1 As shown, the system includes an IMR controller 110, a communication network 120, an electronic switch device 130, a domain controller 140 and a power supply 150; wherein,

[0036] The communication terminal of the IMR controller 110 is connected to the communication terminal of the domain controller 140 via the communication network 120 for bidirectional communication with the domain controller 140;

[0037] The output end of the IMR controller 110 is connected to the input contact of the electronic switch device 130 to control the on and off of the electronic switch device 130;

[0038] The power supply 150 is connected to the power contact of the electronic switch device 130, and the power contact of the electronic switch device 130 is connected to the power enable terminal of the domain controller 140, which is used to supply power to the domain controller 140 when the electronic switch device 130 is connected; and to cut off power to the domain controller 140 when the electronic switch device 130 is disconnected.

[0039] As an optional implementation, the communication network 120 is a CAN network.

[0040] As an optional implementation, the electronic switch device 130 is a relay.

[0041] As an optional implementation, Figure 2 This is a schematic diagram of an example of a domain controller control system provided in an embodiment of the present application, such as Figure 2 As shown, the details are as follows:

[0042] The IMR controller has multiple pins for power input, communication connection and control output. The electronic switch device consists of a relay K2 and a diode D2, which is used to control the on and off of the circuit. The domain controller is connected to the IMR controller and the electronic switch device and is responsible for the domain control task. Among them, pin 1 of the IMR controller is connected to the power supply VCC, and pin 2 is grounded. Contact 7 of relay K2 is connected to the power supply VCC, and contact 6 is connected to the power enable terminal EXT KL30 (pins 5 and 6) of the domain controller. Diode D2 is connected in parallel with the coil of relay K2 to eliminate the reverse electromotive force generated when relay K2 is switched on and off to protect the circuit. CAN1-H (pin 27) and CAN1-L (pin 28) of the IMR controller are respectively connected to CAN6-H (pin 20) and CAN6-L (pin 35) of the domain controller to achieve communication network connection. D09 (pin 3) of the IMR controller is connected to contact 1 of the relay K2 coil as an output signal to control the pull-in or disconnection of relay K2. The other end of the relay coil is connected to GND. When the relay coil is powered on, contacts 6 and 7 of relay K2 are disconnected, and the domain controller is powered off. When the relay coil is powered off, contacts 6 and 7 of relay K2 return to the normally closed state, and the domain controller is automatically restarted and communication is restored.

[0043] The embodiment of the present application provides a domain controller control system, the system includes an IMR controller, a communication network, an electronic switch device, a domain controller and a power supply; wherein the communication end of the IMR controller is connected to the communication end of the domain controller through the communication network, for bidirectional communication with the domain controller; the output end of the IMR controller is connected to the input contact of the electronic switch device, for controlling the on and off of the electronic switch device; the power supply is connected to the power contact of the electronic switch device, and the power supply contact of the electronic switch device is connected to the power enable end of the domain controller, for supplying power to the domain controller when the electronic switch device is connected; when the electronic switch device is disconnected, the domain controller is powered off. The embodiment of the present application improves the overall stability and reliability of the system through functions such as communication anomaly detection and power-off protection. The power-off protection function can effectively prevent equipment from being damaged by external abnormal environments and enhance the safety protection capabilities of the system. The electronic switch device is intelligently controlled by the IMR controller, which optimizes the operation and management of the domain controller and improves the automation level of the system. The modular design facilitates functional expansion while reducing the time and cost required for manual intervention.

[0044] It can be understood that the same / similar parts between the various embodiments of the above method in this specification can refer to each other, and each embodiment focuses on the differences from other embodiments. For related points, please refer to the description of other method embodiments.

[0045] The present application also provides a method for controlling a domain controller. Figure 3As shown, the method is applied to a domain controller control system, and the method includes:

[0046] Step 301: When the IMR controller meets a preset restart trigger condition, the IMR controller controls the electronic switch device to be disconnected to power off the domain controller.

[0047] In implementation, when the IMR controller detects that the restart trigger condition is met, it disconnects the power supply circuit of the domain controller by controlling the electronic switch device, so that the domain controller is powered off. This operation implements forced shutdown through hardware power off, avoids the situation where it cannot respond due to soft failure, and ensures that the domain controller can be restarted. For example, when the communication network is interrupted for a long time and the domain controller cannot work normally, the IMR controller triggers the restart condition and sends a signal to the relay to disconnect the power supply circuit, so that the domain controller is powered off and enters the restart process.

[0048] Step 302: The IMR controller controls the electronic switch device to be connected so as to restart the domain controller.

[0049] In implementation, after the IMR controller controls the electronic switch device to disconnect the power supply for a certain period of time, it controls the electronic switch device to connect the power supply circuit again, re-powers the domain controller, and completes the restart operation. For example: after the domain controller is powered off for 5 seconds, the IMR controller controls the relay to close through a signal, restores the power supply, and the domain controller restarts and loads the normal function module.

[0050] As an optional implementation, when the IMR controller detects that the communication network is interrupted, it starts timing; when the first timing duration is greater than a preset communication interruption duration threshold, it is determined that the IMR controller meets a preset restart trigger condition.

[0051] In practice, the IMR controller monitors the communication network status (such as CAN signals) in real time. If it finds that the communication interruption exceeds the preset time threshold, it will be judged as a network abnormality and trigger the restart operation of the domain controller to restore normal communication. For example: the IMR controller detects that the CAN network interruption exceeds 30 seconds, determines that the domain controller has a deadlock, and controls the relay to disconnect the power supply for 3 seconds and then reclose it. The domain controller successfully restarts and communication returns to normal. Another example: Figure 2 As shown in the figure, when the domain controller crashes, the IMR controller detects the CAN network interruption and starts timing. If the communication interruption lasts for 30 seconds, the IMR controller DO9 (pin 3) will output a low-level signal to energize the relay K2 coil and disconnect the relay K2 contacts 6 and 7, thereby cutting off the power supply of the domain controller and shutting down the power. Subsequently, the IMR controller sets the DO9 (pin 3) output level to high, the relay K2 coil is de-energized, the relay K2 contacts 6 and 7 are reset to the normally closed state, and the domain controller resumes power supply, realizing the automatic restart of the domain controller. After restarting, the domain controller resumes CAN communication.

[0052] As an optional implementation, when the IMR controller detects that the domain controller sends repeated messages, it starts timing; when the second timing duration is greater than the preset communication abnormality duration threshold, it is determined that the IMR controller meets the preset restart trigger condition.

[0053] In practice, when the domain controller frequently sends duplicate messages due to program logic anomalies, network resources may be occupied or deadlock may occur. The IMR controller monitors the duplication of message content to determine whether it is necessary to trigger a restart of the domain controller. For example, if the IMR controller detects that the domain controller has continuously sent duplicate messages for more than 10 minutes, it triggers the relay to control the power outage for 3 seconds and then restarts, restoring the normal state and reducing the network load.

[0054] As an optional implementation, when the IMR controller meets a preset power-off protection triggering condition, the IMR controller controls the electronic switch device to disconnect, so as to power off the domain controller.

[0055] In implementation, the IMR controller can determine whether it is necessary to power off the domain controller by disconnecting the electronic switch device according to the set power-off protection triggering conditions to avoid equipment damage or system loss of control.

[0056] As an optional implementation, when the IMR controller detects that the system vibration amplitude is greater than a preset safety vibration amplitude threshold, it is determined that the IMR controller meets a preset power-off protection trigger condition.

[0057] In practice, vibration in the system operating environment poses a threat to the stable operation of the domain controller (such as short circuit or loose hardware). The IMR controller monitors the system vibration amplitude through sensors and triggers power-off protection when abnormal vibration exceeds the safety threshold. For example: The IMR controller can receive vibration signals through an installed vibration sensor. When the vibration amplitude reaches 7g (exceeding the set threshold of 5g), the relay is triggered to disconnect the power supply to protect the domain controller.

[0058] As an optional implementation, when the IMR controller detects that the light intensity is less than a preset light intensity threshold, it is determined that the IMR controller meets a preset power-off protection trigger condition.

[0059] During implementation, the IMR controller can detect the lighting conditions of the system operating environment through an installed light sensor. When insufficient light indicates that the system is in an unattended scenario at night, the power-off protection mechanism is triggered to achieve energy saving.

[0060] As an optional implementation manner, when the IMR controller detects that the current working moment is in a preset non-working period, it is determined that the IMR controller meets a preset power-off protection triggering condition.

[0061] In practice, in order to save energy or avoid misoperation, the IMR controller can cut off the power supply to the domain controller according to the preset non-working hours. It is suitable for scenarios that require periodic sleep or non-continuous operation. For example: when the IMR controller is connected to the Internet, it determines that the current time is a non-working period (for example, from 11 pm to 6 am the next day), controls the relay to disconnect the power supply, stops the operation of the domain controller, saves energy and extends the life of the equipment.

[0062] An embodiment of the present application provides a domain controller control method, the method comprising: when the IMR controller meets a preset restart trigger condition, the IMR controller controls the electronic switch device to disconnect so as to power off the domain controller; the IMR controller controls the electronic switch device to connect so as to restart the domain controller. The embodiment of the present application improves the overall stability and reliability of the system through functions such as communication anomaly detection and power-off protection. The power-off protection function can effectively prevent equipment from being damaged by external abnormal environments and enhance the safety protection capabilities of the system. By intelligently controlling the electronic switch device through the IMR controller, the operation and management of the domain controller is optimized and the degree of automation of the system is improved. The modular design facilitates functional expansion while reducing the time and cost required for manual intervention.

[0063] It should be understood that although Figure 3 The steps in the flowchart are shown in sequence as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified in this document, there is no strict order restriction for the execution of these steps, and these steps can be executed in other orders. Moreover, Figure 3 At least part of the steps may include multiple steps or multiple stages. These steps or stages are not necessarily performed at the same time, but can be performed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed in turn or alternately with other steps or at least part of the steps or stages in other steps.

[0064] For the specific definition of the domain controller control system, please refer to the definition of the domain controller control method above, which will not be repeated here. Each module in the above-mentioned domain controller control system can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0065] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0066] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0067] It should also be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data for analysis, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0068] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0069] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0070] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A domain controller control system, characterized in that: The system includes an IMR controller, a communication network, an electronic switch device, a domain controller and a power supply; wherein, The communication terminal of the IMR controller is connected to the communication terminal of the domain controller via the communication network for bidirectional communication with the domain controller; The output end of the IMR controller is connected to the input contact of the electronic switch device, so as to control the on and off of the electronic switch device; The power supply is connected to the power contact of the electronic switch device, and the power supply contact of the electronic switch device is connected to the power enable terminal of the domain controller, which is used to supply power to the domain controller when the electronic switch device is connected; and to cut off power to the domain controller when the electronic switch device is disconnected.

2. The system according to claim 1, characterized in that The communication network is a CAN network.

3. The system according to claim 1, characterized in that The electronic switch device is a relay.

4. A domain controller control method, characterized in that: The method is applied to the domain controller control system according to any one of claims 1 to 3, and the method comprises: When the IMR controller meets a preset restart trigger condition, the IMR controller controls the electronic switch device to be disconnected so as to power off the domain controller; The IMR controller controls the electronic switch device to be connected so as to restart the domain controller.

5. The method according to claim 4, characterized in that The method further comprises: When the IMR controller detects that the communication network is interrupted, starting timing; When the first timing duration is greater than the preset communication interruption duration threshold, it is determined that the IMR controller meets the preset restart trigger condition.

6. The method according to claim 4, characterized in that The method further comprises: When the IMR controller detects that the domain controller sends a duplicate message, it starts timing; When the second timing duration is greater than the preset communication abnormality duration threshold, it is determined that the IMR controller meets the preset restart trigger condition.

7. The method according to claim 4, characterized in that The method further comprises: When the IMR controller meets a preset power-off protection triggering condition, the IMR controller controls the electronic switch device to disconnect, so as to power off the domain controller.

8. The method according to claim 7, characterized in that The method further comprises: When the IMR controller detects that the system vibration amplitude is greater than a preset safety vibration amplitude threshold, it is determined that the IMR controller meets the preset power-off protection trigger condition.

9. The method according to claim 7, characterized in that: The method further comprises: When the IMR controller detects that the light intensity is less than a preset light intensity threshold, it is determined that the IMR controller meets the preset power-off protection trigger condition.

10. The method according to claim 7, characterized in that The method further comprises: When the IMR controller detects that the current working moment is in a preset non-working period, it is determined that the IMR controller meets the preset power-off protection triggering condition.