Hybrid electric vehicle power safety redundancy control method and device and hybrid electric vehicle

Abstract

The invention relates to a hybrid electric vehicle power safety redundancy control method and device and a hybrid electric vehicle, and the method comprises the steps: obtaining the communication result of each power part controller in a power domain control network of the hybrid electric vehicle; selecting a corresponding degradation control strategy based on the communication condition of each power part controller in the communication result; carrying out degradation control on the hybrid electric vehicle based on the selected degradation control strategy; the degradation control strategy comprises a first-level control strategy for switching a communication link, a second-level control strategy for switching a power source and a third-level control strategy for switching to a default control mode. According to the method and the device, the problems of poor power control effect and driving risk caused by the fact that only protection processing on the power part with the fault is considered in the related technology are solved, and through the degradation control strategy of the multi-stage redundancy design, the coordination processing capability of a single or multiple controllers during communication failure is realized, and the driving safety is improved.

Description

Technical Field

[0001] The present application relates to the technical field of new energy vehicles, and particularly to a power safety redundancy control method and device for a hybrid vehicle, and a hybrid vehicle. Background Art

[0002] The control system of a hybrid vehicle is very complex. The power system includes multiple core components such as an internal combustion engine, a drive motor, a power battery, a generator, and a power distributor (such as a transmission). A failure of any one component may cause a decline in the overall performance of the power system or even a loss of power. Among them, the loss of communication in the power system is a serious failure, which may lead to various consequences, such as limited vehicle speed, or loss of power, and even reduce the stability of the hybrid vehicle in an emergency, increasing the risk of traffic accidents.

[0003] The solution adopted in the prior art is: when the local area network communication fails, the output of the power source is restricted, and after the hybrid vehicle idles to a safe area, the output of the power source is stopped. For example, when the power domain master controller and the drive motor controller lose communication on the CAN network, the power domain master controller cannot receive the drive motor status information. For the safety of components, the hybrid vehicle is prohibited from driving, and the driver needs to use auxiliary equipment such as a tow truck to tow the hybrid vehicle to a repair point for repair, which causes great inconvenience to the driver and also brings certain driving risks.

[0004] Aiming at the problem in the related technology that only the protection of the faulty power components is considered, resulting in poor power control effect and driving risks; there is currently no effective solution. Summary of the Invention

[0005] In this embodiment, a power safety redundancy control method, device and hybrid vehicle for a hybrid vehicle are provided to solve the problem in the related technology that only the protection of the faulty power components is considered, resulting in poor power control effect and driving risks.

[0006] In a first aspect, in this embodiment, a power safety redundancy control method for a hybrid vehicle is provided, including:

[0007] Obtaining the communication results of each power component controller in the power domain control network of the hybrid vehicle;

[0008] Based on the communication conditions of each power component controller in the communication results, selecting a corresponding degradation control strategy; and based on the selected degradation control strategy, performing degradation control on the hybrid vehicle; the degradation control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to the default control mode.

[0009] In some of these embodiments, the power domain control network is composed of a power domain controller and each of the power component controllers;

[0010] The power component controllers include a power supply component controller, a drive component controller, a transmission component controller, and a driving safety component controller.

[0011] In some of these embodiments, the power domain controller is connected to the generator controller in the power supply component controller through a main communication link or a backup communication link;

[0012] The power domain controller is connected to the front drive motor controller in the drive component controller through a main communication link or a backup communication link;

[0013] The power domain controller is connected to the rear drive motor controller in the drive component controller through a main communication link or a backup communication link.

[0014] In some of these embodiments, based on the communication conditions of each power component controller in the communication result, a corresponding downgrade control strategy is selected; and based on the selected downgrade control strategy, the hybrid vehicle is downgraded, including:

[0015] When the communication result is a main communication failure of the power component controller having a backup communication link in the power domain control network, a corresponding downgrade control strategy constructed by the first-level control strategy, the second-level control strategy, and the third-level control strategy is selected;

[0016] The hybrid vehicle is downgraded.

[0017] In some of these embodiments, based on the communication conditions of each power component controller in the communication result, a corresponding downgrade control strategy is selected; and based on the selected downgrade control strategy, the hybrid vehicle is downgraded, including:

[0018] When the communication result is a communication failure of any one of the engine controller, the power battery controller, and the transmission controller in the power domain control network, a corresponding downgrade control strategy constructed by the second-level control strategy and the third-level control strategy is selected;

[0019] The hybrid vehicle is downgraded.

[0020] In some of these embodiments, based on the communication conditions of each power component controller in the communication result, a corresponding downgrade control strategy is selected; and based on the selected downgrade control strategy, the hybrid vehicle is downgraded, including:

[0021] When the communication result is a communication fault of the engine controller, control the engine to shut down and select the corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy;

[0022] Perform degradation control on the hybrid vehicle.

[0023] In some embodiments, based on the communication conditions of each power component controller in the communication result, select the corresponding degradation control strategy; and based on the selected degradation control strategy, perform degradation control on the hybrid vehicle, including:

[0024] When the communication result is a communication fault of the power battery controller, control the generator to shut down, turn off the coasting energy recovery, and select the corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy;

[0025] Perform degradation control on the hybrid vehicle.

[0026] In some embodiments, based on the communication conditions of each power component controller in the communication result, select the corresponding degradation control strategy; and based on the selected degradation control strategy, perform degradation control on the hybrid vehicle, including:

[0027] When the communication result is a communication fault of the transmission controller, determine whether it is possible to maintain the current gear and drive directly with the engine;

[0028] If it is possible to maintain the current gear and drive directly with the engine, control the hybrid vehicle to drive normally;

[0029] If it is not possible to maintain the current gear and drive directly with the engine, select the corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy;

[0030] Perform degradation control on the hybrid vehicle.

[0031] In some embodiments, based on the communication conditions of each power component controller in the communication result, select the corresponding degradation control strategy; and based on the selected degradation control strategy, perform degradation control on the hybrid vehicle, including:

[0032] When the communication result is a communication fault of the vehicle safety component controller, select the corresponding degradation control strategy constructed by the third-level control strategy;

[0033] Perform degradation control on the hybrid vehicle.

[0034] In a second aspect, in the present embodiment, a power safety redundancy control device for a hybrid vehicle is provided, including: an acquisition module and a redundancy control module;

[0035] The acquisition module is configured to acquire the communication results of each power component controller in the power domain control network of the hybrid vehicle;

[0036] The redundancy control module is configured to select a corresponding downgrade control strategy based on the communication conditions of each power component controller in the communication results; and perform downgrade control on the hybrid vehicle based on the selected downgrade control strategy; the downgrade control strategy includes a first-level control strategy for switching communication links, a second-level control strategy for switching power sources, and a third-level control strategy for switching to a default control mode.

[0037] In a third aspect, in the present embodiment, a hybrid vehicle is provided, including a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the computer program, the power safety redundancy control method for the hybrid vehicle described in the first aspect above is implemented.

[0038] Compared with the related art, in the power safety redundancy control method, device, and hybrid vehicle provided in the present embodiment, by acquiring the communication results of each power component controller in the power domain control network of the hybrid vehicle; selecting a corresponding downgrade control strategy based on the communication conditions of each power component controller in the communication results; and performing downgrade control on the hybrid vehicle based on the selected downgrade control strategy; the downgrade control strategy includes a first-level control strategy for switching communication links, a second-level control strategy for switching power sources, and a third-level control strategy for switching to a default control mode, the problem in the related art that only the protection processing of the faulty power components is considered, resulting in poor power control effect and driving risks, is solved. Through the downgrade control strategy with multi-level redundancy design, the coordinated processing ability of single or multiple controllers in case of communication failure is realized, and driving safety is improved.

[0039] The details of one or more embodiments of the present application are set forth in the following drawings and description, so that the other features, objects, and advantages of the present application become more concise and understandable. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] The drawings described herein are used to provide a further understanding of the present application and form a part of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation of the present application. In the drawings:

[0041] Figure 1 is a flowchart of a power safety redundancy control method for a hybrid vehicle provided in an embodiment of the present application;

[0042] Figure 2 It is a schematic diagram of the power domain control network;

[0043] Figure 3 It is a flowchart of step S220 related to the power component controller with a backup communication link;

[0044] Figure 4 It is a schematic diagram of the processing flow of the communication failure of the generator controller provided by an embodiment of the present application;

[0045] Figure 5 It is a schematic diagram of the processing flow of the communication failure of the front drive motor controller / rear drive motor controller provided by an embodiment of the present application;

[0046] Figure 6 It is a schematic diagram of the processing flow of the communication failure of the engine controller provided by an embodiment of the present application;

[0047] Figure 7 It is a schematic diagram of the processing flow of the communication failure of the power battery controller provided by an embodiment of the present application;

[0048] Figure 8 It is a schematic diagram of the processing flow of the communication failure of the transmission controller provided by an embodiment of the present application;

[0049] Figure 9 It is a schematic diagram of the processing flow of the communication failure of the electronic shift controller provided by an embodiment of the present application;

[0050] Figure 10 It is a schematic diagram of the processing flow of the communication failure of the parking controller provided by an embodiment of the present application;

[0051] Figure 11 It is a schematic diagram of the processing flow of the communication failure of the chassis controller provided by an embodiment of the present application;

[0052] Figure 12 It is a structural block diagram of the power safety redundancy control device for a hybrid vehicle provided by an embodiment of the present application.

[0053] In the figure: 210, acquisition module; 220, redundancy control module. Detailed implementation manners

[0054] For a clearer understanding of the purpose, technical solution and advantages of the present application, the present application will be described and illustrated below with reference to the accompanying drawings and embodiments.

[0055] Unless otherwise defined, technical or scientific terms used in this application shall have the ordinary meanings understood by those of ordinary skill in the technical field to which this application pertains. In this application, words such as "a", "an", "one kind", "the", "these", etc. do not indicate a limitation in quantity and can be singular or plural. The terms "including", "containing", "having" and any variants thereof used in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product or device that includes a series of steps or modules (units) is not limited to the listed steps or modules (units), but may include unlisted steps or modules (units), or may include other steps or modules (units) inherent to these processes, methods, products or devices. The terms "connected", "coupled", etc. used in this application do not limit to physical or mechanical connections, but may include electrical connections, whether directly or indirectly. The term "plural" used in this application means two or more. "And / or" describes the association relationship of associated objects and indicates that three relationships can exist. For example, "A and / or B" can mean: A exists alone, A and B exist simultaneously, and B exists alone. Usually, the character " / " indicates that the objects associated before and after are in an "or" relationship. The terms "first", "second", "third", etc. used in this application only distinguish similar objects and do not represent a specific order for the objects.

[0056] In this embodiment, a power safety redundancy control method for a hybrid vehicle is provided. Figure 1 It is a flowchart of the power safety redundancy control method for the hybrid vehicle in this embodiment, as Figure 1 shown. The process includes the following steps:

[0057] Step S210, obtaining the communication results of each power component controller in the power domain control network of the hybrid vehicle;

[0058] Step S220, based on the communication conditions of each power component controller in the communication results, selecting a corresponding degradation control strategy; and based on the selected degradation control strategy, performing degradation control on the hybrid vehicle; the degradation control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to the default control mode.

[0059] Specifically, the power domain control network of a hybrid vehicle is an intelligent control system built based on a centralized electronic and electrical architecture (EEA). Among them, each power component controller includes a power domain controller (PDCS) and controllers of other powertrains; the power domain controller communicates and collaborates with the controllers of other powertrains to coordinate the work of components such as the generator controller, motor controller, and battery controller, ensuring the coordinated operation of the overall vehicle state, and at the same time ensuring that the hybrid vehicle can operate efficiently, safely, and environmentally friendly under various driving conditions to achieve the collaborative management of each power component controller.

[0060] Each controller can be regarded as a node in the power domain control network, and CAN bus is used for information interaction between nodes. Specifically, if one CAN bus is used between two nodes, a main communication link will be formed; if two independent CAN buses are used between two nodes, a main communication link and a backup communication link will be formed; compared with the main and backup communication links, the two sending and receiving controllers are the same, but the transmitted network segments are different; among them, the backup communication link is a redundant design and will only be enabled after a communication failure of the main communication link. And to reduce the communication network load, the period of the signal transmitted by the backup communication link is longer than that of the signal transmitted by the main communication link, and the signal quality level is reduced. The specific setting method of the main and backup communication links can be selected according to the application scenario, and there is no restriction on this. For example: a main communication link and a backup communication link can be built between the power domain controller and the generator controller in the power domain control network, etc.

[0061] Among them, the communication result of each power component controller refers to the communication situation of the main communication link between each power component controller, whether the communication is successful or a communication failure. The downgrade control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to the default control mode; the first-level control strategy is the control strategy for switching the main communication link to the backup communication link; the second-level control strategy is the control strategy for switching the current power source to another power source (such as switching the engine to the generator); the third-level control strategy is the control strategy for switching to the default control mode of controlling the driving speed. The priorities of the first-level control strategy, the second-level control strategy, and the third-level control strategy gradually decrease. The downgrade control strategy is pre-set, and the relationship between each communication situation and the downgrade control strategy is pre-set through a configuration table or a mapping relationship, etc. Then, after determining the communication situation, the corresponding downgrade control strategy can be quickly selected by looking up the table, etc.

[0062] After selecting the corresponding degradation control strategy, the corresponding control strategy can be executed step by step according to the priority of each control strategy in the degradation control strategy to perform degradation control on the hybrid vehicle. For example, the degradation control strategy includes a first-level control strategy, a second-level control strategy, and a third-level control strategy. For the first degradation, trigger the switching of the communication link to allow the hybrid vehicle to drive normally. If the corresponding controller has no backup communication link, or the switched backup communication link still has a communication failure, then for the second degradation: switch the power source. For example, when the communication of the motor controller fails, first trigger the use of the backup communication link. After the backup signal is unavailable, consider switching the power source. Another example is that when the communication of the engine controller fails, switch to generator drive. If the communication corresponding to the new power source still fails, then for the third degradation: switch to the default control mode, limit the driving power and vehicle speed of the hybrid vehicle to facilitate safe parking. Through the way of degradation control, the capabilities of other normally operating controllers can be fully utilized, realizing the coordinated processing ability of single or multiple controllers in case of communication failure and improving driving safety.

[0063] The solution adopted in the related technology is as follows: when the local area network communication fails, limit the output of the power source so that the hybrid vehicle idles to a safe area and then stops the output of the power source. For example, when the power domain master controller and the drive motor controller lose communication on the CAN network, the power domain master controller cannot receive the drive motor status information. For the safety of components, the hybrid vehicle is prohibited from driving, and the driver needs to use auxiliary equipment such as a trailer to tow the hybrid vehicle to a repair point for repair, which causes great inconvenience to the driver and also brings certain driving risks. In this application, by obtaining the communication results of each power component controller in the power domain control network of the hybrid vehicle; based on the communication conditions of each power component controller in the communication results, select the corresponding degradation control strategy; and based on the selected degradation control strategy, perform degradation control on the hybrid vehicle. The degradation control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to the default control mode, which solves the problem in the related technology that only the protection of the faulty power components is considered, resulting in poor power control effect and driving risks. Through the way of degradation control, the capabilities of other normally operating controllers can be fully utilized, realizing the coordinated processing ability of single or multiple controllers in case of communication failure and improving driving safety.

[0064] The following is a detailed description of each of the above steps:

[0065] In some of the embodiments, the power domain control network is composed of a power domain controller and each power component controller;

[0066] The power component controller includes a power supply component controller, a drive component controller, a transmission component controller, and a driving safety component controller.

[0067] Specifically, as Figure 2 shown, each power component controller can be divided into a power supply component controller, a drive component controller, a transmission component controller, and a driving safety component controller according to its function; among them, the power supply component controller can be a generator controller and a power battery controller. The drive component controller can be an engine controller, a front-wheel drive controller, and a rear-wheel drive controller. The transmission component controller can be a transmission controller. The driving safety component controller can be an electronic shift controller, a parking controller, and a chassis controller.

[0068] Among them, the uses of the power battery controller include monitoring the state, voltage, current, temperature, and remaining capacity (SOC) of the battery; managing the charging and discharging process of the battery to ensure the safety and lifespan of the battery; preventing overcharging, over-discharging, and unbalanced charging and discharging.

[0069] Among them, the generator controller is mainly responsible for controlling and optimizing the operation of the generator to achieve efficient energy recovery and storage. It can adjust the output power of the generator in real time to ensure its operation within a safe and efficient range.

[0070] Among them, the front axle drive motor controller is mainly responsible for controlling the front axle motor and optimizing the operation of the motor to achieve efficient power output and energy recovery.

[0071] Among them, the rear axle drive motor controller is mainly responsible for controlling the rear axle motor and optimizing the operation of the rear axle motor to achieve efficient power output and energy recovery.

[0072] Among them, the engine controller is mainly responsible for optimizing the operation of the engine to ensure that it provides the necessary power for the hybrid vehicle on the premise of being efficient, environmentally friendly, and safe.

[0073] Among them, the uses of the transmission controller include optimizing the shift strategy of the transmission, selecting the most suitable gear ratio according to the power demand and driving conditions, and ensuring the efficient and smooth power transmission to ensure the efficient power transmission and reasonable energy distribution.

[0074] Among them, the electronic shift controller is a key component for precisely controlling the position and movement of the shift lever, accurately identifying the position and movement of the shift lever, monitoring the shift lever state, and ensuring that the shift direction is consistent with the moving direction of the hybrid vehicle and meets the driver's expectations.

[0075] Among them, the parking controller is used to manage and control the parking function of a hybrid vehicle. The parking controller realizes the operations of parking and releasing parking through electronic signals and actuators. Especially during parking or starting on a slope, the parking controller needs to automatically apply or release braking force to improve the convenience and safety of the operation.

[0076] Among them, the chassis controller is used in multiple aspects such as improving the stability and handling performance of a hybrid vehicle, optimizing energy management, coordinating the chassis system to enhance the safety of a hybrid vehicle, and supporting intelligent driving functions.

[0077] The above-mentioned power domain controller and each power component controller cooperate with each other through relevant hardware and software to realize the relevant functions of each controller above, and no limitation is imposed on this.

[0078] Through this embodiment, the power component controllers are divided according to functions, so that the overall implementation logic of the safety redundancy control method can be simplified, and the operation stability can be improved.

[0079] In some of these embodiments, the power domain controller is connected to the generator controller in the power supply component controller through a main communication link or a backup communication link;

[0080] The power domain controller is connected to the front-wheel drive motor controller in the drive component controller through a main communication link or a backup communication link;

[0081] The power domain controller is connected to the rear-wheel drive motor controller in the drive component controller through a main communication link or a backup communication link.

[0082] In order to balance the resource occupancy and coordination processing ability of the communication link, only the key main communication link is set with a backup communication link. The key main communication link specifically refers to the connection between the power domain controller and the generator controller in the power supply component controller, between the power domain controller and the front-wheel drive motor controller in the drive component controller, and between the power domain controller and the rear-wheel drive motor controller in the drive component controller. In addition to the main communication link, a backup communication link is also set. This is because the generator, the front-wheel drive motor, and the rear-wheel drive motor are key components for a hybrid vehicle to maintain driving. As long as at least one path can work normally, the driving state of the hybrid vehicle can be relatively controlled; and considering the hardware cost of the backup communication link and the optimization of the coordination processing ability; therefore, the backup communication link is selected between the above three controllers (generator controller, front-wheel drive motor controller, and rear-wheel drive motor controller) and the power domain controller, so as to balance the resource occupancy and coordination processing ability.

[0083] Preferably, only a few key signals in the relevant backup communication link can be backed up to further reduce the occupancy of transmission resources. Among them, backing up a few key signals means realizing the basic functions of the relevant components.

[0084] For example, for the backup signals of the front motor, it includes the target speed and the actual speed, the target torque and the actual torque, the target working mode and the actual working mode, and the functional safety level enables the torque of the motor.

[0085] In some of these embodiments, as Figure 3 shown, based on the communication status of each power component controller in the communication result in step S220, select the corresponding downgrade control strategy; and based on the selected downgrade control strategy, perform downgrade control on the hybrid vehicle, including the following steps:

[0086] Step S221, when the communication result is a primary communication failure (i.e., the primary communication link fails) of the power component controller with a backup communication link in the power domain control network, select the corresponding downgrade control strategy constructed by the first-level control strategy, the second-level control strategy, and the third-level control strategy;

[0087] Step S222, perform downgrade control on the hybrid vehicle.

[0088] Specifically, in order for the hybrid vehicle to be able to keep running, at least one of the power supply component and the drive component can work normally, and the driving safety state of the hybrid vehicle is also controllable. That is, when there is a primary communication failure of the power component controller with a backup communication link (a failure of one of the generator controller, the front motor controller, and the rear motor controller), select the corresponding downgrade control strategy constructed by the first-level control strategy, the second-level control strategy, and the third-level control strategy; then, according to the first-level control strategy, the second-level control strategy, and the third-level control strategy, perform downgrade control on the hybrid vehicle. This specific process is as follows: First, for the first downgrade, trigger the first-level control strategy, switch the current primary communication link to the backup communication link, and let the hybrid vehicle run normally; if the backup communication link still has a communication failure, then for the second downgrade, trigger the second-level control strategy and switch the power source; if the communication corresponding to the new power source is still faulty, then for the third downgrade, trigger the third-level control strategy and switch to the default control mode, restricting the driving power and speed of the hybrid vehicle to facilitate safe parking.

[0089] The following describes the processing flow for the communication failures corresponding to the generator controller, the front motor controller, and the rear motor controller:

[0090] As Figure 4 shown, the processing flow for the communication failure of the generator controller:

[0091] When the communication result is the main communication failure of the generator controller, select the corresponding degradation control strategy constructed by the first-level control strategy, the second-level control strategy, and the third-level control strategy; trigger the first-level control strategy and determine whether to switch to the backup communication link; if it is determined to switch to the backup communication link, keep the hybrid vehicle running normally; if it is determined that the communication link cannot be switched (for example: the CAN communication chip of the generator controller fails, and neither the main signal nor the backup signal can be sent or received), then trigger the second-level control strategy and determine whether to switch the power source; if it can be switched, switch to other power sources (for example: the switched engine can start and meet the requirements of parallel or sliding mode drive (sliding mode drive is used when the vehicle speed is below 20 km / h; parallel drive is used when the vehicle speed exceeds 20 km / h), and the hybrid vehicle is directly driven by the engine), keep the hybrid vehicle running normally; if it is determined that the power source cannot be switched (for example: the engine fails to start), then trigger the third-level control strategy and determine whether to switch to the default control mode (pure electric limp mode); if it is switched to the default control mode, the hybrid vehicle is directly driven by the generator to ensure that the hybrid vehicle can drive to a safe position; if it cannot be switched to the default control mode, then stop the vehicle.

[0092] As Figure 5 shown, it is the processing flow of the communication failure of the front motor controller / rear motor controller:

[0093] When the communication result is the main communication failure of the front motor controller / rear motor controller, select the corresponding degradation control strategy constructed by the first-level control strategy, the second-level control strategy, and the third-level control strategy; trigger the first-level control strategy and determine whether to switch to the backup communication link (for example: for the main communication failure of the front motor controller, determine whether to switch to the backup communication link of the front motor controller); if it is determined to switch to the backup communication link, keep the hybrid vehicle running normally; then trigger the second-level control strategy and determine whether to switch the power source; if it can be switched, switch to other power sources (for example: the switched engine can start and meet the requirements of parallel or sliding mode drive, and the hybrid vehicle is directly driven by the engine), keep the hybrid vehicle running normally; if it is determined that the power source cannot be switched (for example: the engine fails to start), then trigger the third-level control strategy and determine whether to switch to the default control mode (for example: switch to the rear drive mode when the front drive fails, and the vehicle speed does not exceed 72 km / h at this time; switch to the front drive mode when the rear drive fails, and the vehicle speed does not exceed 100 km / h at this time). If it can be switched to the default control mode, the hybrid vehicle is directly driven by the motor to ensure that the hybrid vehicle can drive to a safe position; if it cannot be switched to the default control mode, then stop the vehicle.

[0094] Through this embodiment, by adopting the backup communication link and cooperating with the degradation control strategy, the coordination processing ability of the hybrid vehicle is further improved, and the driving experience is enhanced.

[0095] In some of these embodiments, based on the communication status of each power component controller in the communication result in step S220, a corresponding degradation control strategy is selected; and based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including the following steps:

[0096] When the communication result is a communication failure of any one of the engine controller, the power battery controller, and the transmission controller in the power domain control network, a corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy is selected;

[0097] The hybrid vehicle is subjected to degradation control.

[0098] Specifically, for these three controllers, namely the engine controller, the power battery controller, and the transmission controller, there is only one communication link for each of them, and no backup communication link is set; when there is a communication failure in these three controllers, the two-level solution is: select a corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy; and then the hybrid vehicle is subjected to degradation control.

[0099] Through this embodiment, a two-level degradation control strategy is adopted, which further improves the coordination processing ability of the hybrid vehicle and enhances the driving experience.

[0100] The processing flow for the communication failures corresponding to the engine controller, the power battery controller, and the transmission controller is described below:

[0101] In some of these embodiments, based on the communication status of each power component controller in the communication result in step S220, a corresponding degradation control strategy is selected; and based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including the following steps:

[0102] When the communication result is a communication failure of the engine controller, the engine is controlled to stop, and a corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy is selected;

[0103] The hybrid vehicle is subjected to degradation control.

[0104] Specifically, as Figure 6 shown, it is the processing flow for the communication failure of the engine controller:

[0105] The engine controller has no backup communication link. When the communication result indicates a communication failure of the engine controller, it controls the engine to shut down and selects a corresponding degraded control strategy constructed from the second-level control strategy and the third-level control strategy; triggers the second-level control strategy. Since it is a communication failure of the engine controller, it can directly switch to the generator as the power source; then triggers the third-level control strategy to determine whether to switch to the default control mode (the default control mode is the generator drive mode, driven by the generator front-wheel drive or generator rear-wheel drive. Since the engine and the generator are controlled by a clutch; after disconnecting the clutch, the engine failure will not affect the motor drive, so the vehicle speed or power is not restricted); if it can switch to the generator drive mode, the hybrid vehicle is directly driven by the generator to ensure that the hybrid vehicle can drive to a safe position; if it cannot switch to the generator drive mode, it stops.

[0106] Among them, for the switching judgment of the generator drive mode, specifically: first judge whether it can switch to the front-axle drive. If it can switch to the front-axle drive, the generator drives the front axle to ensure that the hybrid vehicle can drive to a safe position; if it cannot switch to the front-axle drive, then judge whether it can switch to the rear-axle drive; if it can switch to the rear-axle drive, the generator drives the rear axle to ensure that the hybrid vehicle can drive to a safe position; otherwise, it stops.

[0107] Through this embodiment, by adopting the degraded control strategy, the coordination processing ability of the hybrid vehicle is further improved, enhancing the driving experience.

[0108] In some of these embodiments, based on the communication status of each power component controller in the communication result in step S220, a corresponding degraded control strategy is selected; and based on the selected degraded control strategy, the hybrid vehicle is subjected to degraded control, including the following steps:

[0109] When the communication result indicates a communication failure of the power battery controller, it controls the generator to shut down, turns off the coasting energy recovery, and selects a corresponding degraded control strategy constructed from the second-level control strategy and the third-level control strategy;

[0110] Perform degraded control on the hybrid vehicle.

[0111] Specifically, as Figure 7 shown, it is the processing flow for the communication failure of the power battery controller:

[0112] The power battery controller has no backup communication link. When the communication result indicates a communication failure of the power battery controller, the generator shuts down and the coasting energy recovery shuts down (at this time, the battery state is unknown, and there is a safety risk in forced battery charging). The corresponding degradation control strategy is selected from the second-level control strategy and the third-level control strategy; the second-level control strategy is triggered to determine whether to switch the power source; if it can be switched, switch to another power source (for example: the switched engine can start and meet the requirements of parallel or sliding mode drive (sliding mode drive is used when the vehicle speed is below 20 km / h; parallel drive is used when the vehicle speed exceeds 20 km / h), and the hybrid vehicle is directly driven by the engine), and keep the hybrid vehicle running normally; if the power source cannot be switched (for example: the engine fails to start), then the third-level control strategy is triggered to determine whether to switch to the default control mode (at this time, it is the pure electric limp mode, which limits the motor drive power, and the preferred drive power does not exceed 10 kw; the vehicle speed does not exceed 30 km / h, and the power battery performs a self-protection strategy. If the power battery is over-discharged, the power battery controller forcibly cuts off the main relay); if it is switched to the default control mode, the hybrid vehicle is directly driven by the generator (switching to the front-wheel drive or rear-wheel drive control mode) to ensure that the hybrid vehicle can drive to a safe position; if it cannot be switched to the default control mode, then stop the vehicle.

[0113] Through this embodiment, by adopting the degradation control strategy, the coordination processing ability of the hybrid vehicle is further improved, and the driving experience is enhanced.

[0114] In some of these embodiments, based on the communication status of each power component controller in the communication result in step S220, the corresponding degradation control strategy is selected; and based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including the following steps:

[0115] When the communication result indicates a communication failure of the transmission controller, it is determined whether the current gear can be maintained and the vehicle can be directly driven by the engine;

[0116] If the current gear can be maintained and the vehicle can be directly driven by the engine, then control the hybrid vehicle to run normally;

[0117] If the current gear cannot be maintained and the vehicle cannot be directly driven by the engine, select the corresponding degradation control strategy constructed from the second-level control strategy and the third-level control strategy;

[0118] Perform degradation control on the hybrid vehicle.

[0119] Specifically, the communication failure of the transmission controller can be regarded as the communication failure of the transmission components. The transmission controller is not involved in power output, but is involved in the efficiency and smoothness of power transmission. Therefore, when a communication failure occurs, it is preferred to maintain the current gear and drive directly with the engine. The corresponding degradation control strategies include the second-level control strategy and the third-level control strategy; that is, first switch the power source; if the power source cannot be switched, the default control mode is adopted. As Figure 8 shown, it is the processing flow of the communication failure of the transmission controller:

[0120] The transmission controller does not have a backup communication link. When the communication result is a communication failure of the transmission controller, it is judged whether the current gear can be maintained and the vehicle can be driven directly with the engine; if the current gear can be maintained and the vehicle can be driven directly with the engine, the hybrid vehicle is controlled to run normally; if the current gear cannot be maintained and the vehicle cannot be driven directly with the engine, a corresponding degradation control strategy constructed by the second-level control strategy and the third-level control strategy is selected; the second-level control strategy is triggered, and it is judged whether to switch the power source; if it cannot be switched, the vehicle stops; if the power source can be switched, the third-level control strategy is triggered, and it is judged whether to switch to the default control mode (switch the front-wheel drive or rear-wheel drive control mode); if it is switched to the default control mode, the hybrid vehicle is directly driven by the generator (switch the front-wheel drive or rear-wheel drive control mode) to ensure that the hybrid vehicle can drive to a safe position; if it cannot be switched to the default control mode, the vehicle stops.

[0121] Through this embodiment, by first maintaining direct drive in the gear and then cooperating with the degradation control strategy, the coordination processing ability of the hybrid vehicle is further improved, and the driving experience is enhanced.

[0122] In some of these embodiments, based on the communication conditions of each power component controller in the communication result in step S220, the corresponding degradation control strategy is selected; and based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including the following steps:

[0123] When the communication result is a communication failure of the driving safety component controller in the power domain control network, a corresponding degradation control strategy constructed by the third-level control strategy is selected;

[0124] The hybrid vehicle is subjected to degradation control.

[0125] Specifically, the driving safety component controller is one of the electronic shift controller, the parking controller, and the chassis controller; the driving safety component controller is not involved in power output, but is involved in driving safety. Therefore, when a communication failure occurs during driving, the power output is restricted to ensure that the hybrid vehicle can drive to a safe position; if a failure occurs in place, for safety reasons, the vehicle driving can be directly restricted.

[0126] The processing procedures for communication faults corresponding to the electronic shift controller, parking controller, and chassis controller are described below:

[0127] As Figure 9 shown, it is the processing procedure for the communication fault of the electronic shift controller:

[0128] The electronic shift controller is not involved in power output, but is involved in the position recognition of the shift lever and the movement direction of the hybrid vehicle; when the communication result is a communication fault of the electronic shift controller, select the corresponding degraded control strategy constructed by the third-level control strategy; trigger the third-level control strategy to determine whether to switch to the default control mode (whether to maintain the current gear); if the current gear can be maintained, ensure that the hybrid vehicle can drive to a safe position; if the default control mode cannot be switched (the current gear cannot be maintained), then stop the vehicle. And if this fault occurs after the hybrid vehicle stops and exits the current gear or when the vehicle is stationary without moving, driving is restricted for safety reasons.

[0129] As Figure 10 shown, it is the processing procedure for the communication fault of the parking controller:

[0130] The parking controller is not involved in power output and mainly realizes parking and releasing parking; when the communication result is a communication fault of the parking controller, select the corresponding degraded control strategy constructed by the third-level control strategy; trigger the third-level control strategy to determine whether to switch to the default control mode; the current default control mode is specifically: determine whether to continue driving, if continue driving, the hybrid vehicle drives normally; if not continue driving, then stop the vehicle and forcefully pull up the brake; during the process of continuing to drive, continuously determine whether the driver stops (the vehicle speed drops below 3 km / h), if it is determined that the driver stops, then stop the vehicle and forcefully pull up the brake.

[0131] As Figure 11 shown, it is the processing procedure for the communication fault of the chassis controller:

[0132] The chassis controller is not involved in power output, but is involved in the recognition of the brake signal and the calculation of the vehicle speed signal; when the communication result is a communication fault of the chassis controller, select the corresponding degraded control strategy constructed by the third-level control strategy; trigger the third-level control strategy to determine whether to switch to the default control mode; the current default control mode is specifically: determine whether the brake signal and the vehicle speed signal switch to the backup communication link that meets the same functional safety level, if switched, the hybrid vehicle drives normally; if not switched, then determine whether to switch to the safe degraded mode, if switched to the safe degraded mode, that is, the signal does not meet the safety level requirement; then limit the power and vehicle speed of the hybrid vehicle to ensure that the hybrid vehicle can drive to a safe position; if the switch to the safe degraded mode fails, the hybrid vehicle coasts to a safe position.

[0133] Through this embodiment, by adopting a degradation control strategy, the coordination processing ability of the hybrid vehicle is further improved, and the driving experience is enhanced.

[0134] It should be noted that for the communication failures of single or multiple controllers in the power domain control network, the above corresponding execution logics can be combined and executed, and no repeated description will be given here.

[0135] It should be noted that the steps shown in the above process or the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. And although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order than here.

[0136] In this embodiment, a power safety redundancy control device for a hybrid vehicle is further provided. This device is used to implement the above-mentioned embodiments and preferred implementation manners, and those that have been described will not be repeated here. The following terms such as "module", "unit", "sub-unit", etc. can be a combination of software and / or hardware that can achieve a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

[0137] Figure 12 is the structural block diagram of the power safety redundancy control device for the hybrid vehicle in this embodiment, as Figure 12 shown, the device includes: an acquisition module 210 and a redundancy control module 220;

[0138] The acquisition module 210 is configured to acquire the communication results of each power component controller in the power domain control network of the hybrid vehicle;

[0139] The redundancy control module 220 is configured to select a corresponding degradation control strategy based on the communication conditions of each power component controller in the communication results; and perform degradation control on the hybrid vehicle based on the selected degradation control strategy; the degradation control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to the default control mode.

[0140] Through the above device, the problem in the related art that only the protection processing of the faulty power components is considered, resulting in poor power control effect and driving risks, is solved. Through the degradation control strategy of multi-level redundancy design, the coordination processing ability of single or multiple controllers in case of communication failure is realized, and driving safety is improved.

[0141] In some of these embodiments, the power domain control network is composed of a power domain controller and each power component controller;

[0142] The power component controller includes a power supply component controller, a drive component controller, a transmission component controller, and a driving safety component controller.

[0143] In some embodiments, the power domain controller is connected to the generator controller in the power supply component controller through a main communication link or a backup communication link;

[0144] The power domain controller is connected to the front drive motor controller in the drive component controller through a main communication link or a backup communication link;

[0145] The power domain controller is connected to the rear drive motor controller in the drive component controller through a main communication link or a backup communication link.

[0146] In some embodiments, the redundant control module 220 is further configured to select a corresponding degraded control strategy constructed by the first-level control strategy, the second-level control strategy, and the third-level control strategy when the communication result is a main communication failure of a power component controller with a backup communication link in the power domain control network;

[0147] Perform degraded control on the hybrid vehicle.

[0148] In some embodiments, the redundant control module 220 is further configured to select a corresponding degraded control strategy constructed by the second-level control strategy and the third-level control strategy when the communication result is a communication failure of any one of the engine controller, the power battery controller, and the transmission controller in the power domain control network;

[0149] Perform degraded control on the hybrid vehicle.

[0150] In some embodiments, the redundant control module 220 is further configured to control the engine to stop and select a corresponding degraded control strategy constructed by the second-level control strategy and the third-level control strategy when the communication result is a communication failure of the engine controller;

[0151] Perform degraded control on the hybrid vehicle.

[0152] In some embodiments, the redundant control module 220 is further configured to control the generator to stop, turn off the coasting energy recovery, and select a corresponding degraded control strategy constructed by the second-level control strategy and the third-level control strategy when the communication result is a communication failure of the power battery controller;

[0153] Perform degraded control on the hybrid vehicle.

[0154] In some embodiments, the redundant control module 220 is further configured to determine whether it is possible to maintain the current gear position and drive directly with the engine when the communication result is a communication failure of the transmission controller;

[0155] If the current gear can be maintained and the engine is directly driven, the hybrid vehicle is controlled to run normally;

[0156] If the current gear cannot be maintained and the engine is directly driven, a corresponding degraded control strategy constructed by the second-level control strategy and the third-level control strategy is selected;

[0157] The hybrid vehicle is subjected to degraded control.

[0158] In some of the embodiments, the redundancy control module 220 is further configured to select a corresponding degraded control strategy constructed by the third-level control strategy when the communication result is a communication failure of the vehicle safety component controller;

[0159] The hybrid vehicle is subjected to degraded control.

[0160] It should be noted that the above-mentioned various modules can be functional modules or program modules, and can be implemented either by software or by hardware. For the modules implemented by hardware, the above-mentioned various modules can be located in the same processor; or the above-mentioned various modules can also be located in different processors in any combined form.

[0161] In this embodiment, a hybrid vehicle is further provided, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0162] Optionally, the above computer device may further include a transmission device and an input / output device, wherein the transmission device is connected to the above processor, and the input / output device is connected to the above processor.

[0163] Optionally, in this embodiment, the above processor may be configured to execute the following steps through a computer program:

[0164] S1, obtaining the communication results of each power component controller in the power domain control network of the hybrid vehicle;

[0165] S2, based on the communication conditions of each power component controller in the communication result, selecting a corresponding degraded control strategy; and based on the selected degraded control strategy, performing degraded control on the hybrid vehicle; the degraded control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to the default control mode.

[0166] It should be noted that the specific examples in this embodiment can refer to the examples described in the above embodiments and optional implementation manners, and will not be repeated in this embodiment.

[0167] In addition, in combination with the hybrid vehicle power safety redundancy control method provided in the above embodiments, a storage medium can also be provided in this embodiment to implement it. A computer program is stored on the storage medium; when the computer program is executed by a processor, any one of the hybrid vehicle power safety redundancy control methods in the above embodiments is implemented.

[0168] It should be noted that the information and data involved in this application are all information and data authorized by users or fully authorized by all parties, and will be used legally.

[0169] It should be understood that the specific embodiments described here are only used to explain this application, rather than to limit it. According to the embodiments provided in this application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of this application.

[0170] Obviously, the drawings are only some examples or embodiments of this application. For those of ordinary skill in the art, this application can also be applied to other similar situations based on these drawings without creative work. In addition, it can be understood that although the work done during the development process here may be complex and time-consuming, for those of ordinary skill in the art, certain design, manufacturing, or production changes based on the technical content disclosed in this application are only conventional technical means and should not be regarded as insufficient disclosure of this application.

[0171] The term "embodiment" in this application means that the specific features, structures, or characteristics described in combination with the embodiment may be included in at least one embodiment of this application. The phrase appears in various positions in the specification does not necessarily mean the same embodiment, nor does it mean being independent or alternative to other embodiments and mutually exclusive. Those of ordinary skill in the art can clearly or implicitly understand that the embodiments described in this application can be combined with other embodiments without conflict.

[0172] The above-described embodiments only represent several implementation manners of this application, and their descriptions are relatively specific and detailed, but they should not be construed as limitations on the patent protection scope. It should be pointed out that for those of ordinary skill in the art, without departing from the concept of this application, several modifications and improvements can still be made, and these all belong to the protection scope of this application. Therefore, the protection scope of this application should be subject to the appended claims.

Claims

1. A hybrid electric vehicle power safety redundancy control method, characterized in that: include: Acquiring communication results of controllers of various power components in a power domain control network of the hybrid electric vehicle; Based on the communication status of each power component controller in the communication result, a corresponding degradation control strategy is selected; and based on the selected degradation control strategy, the hybrid vehicle is degraded; the degradation control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to a default control mode.

2. The hybrid vehicle power safety redundancy control method according to claim 1, characterized in that: The power domain control network is composed of a power domain controller and each of the power component controllers; The power component controller includes a power supply component controller, a drive component controller, a transmission component controller and a driving safety component controller.

3. The hybrid vehicle power safety redundancy control method according to claim 2, characterized in that: The power domain controller and the generator controller in the power supply component controller are connected via a main communication link or a backup communication link; The power domain controller and the front drive motor controller in the drive component controller are connected via a main communication link or a backup communication link; The power domain controller and the rear drive motor controller in the drive component controller are connected via a main communication link or a backup communication link.

4. The hybrid vehicle power safety redundancy control method according to claim 1, characterized in that: Selecting a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; Based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including: When the communication result is a main communication failure of the power component controller having a backup communication link in the power domain control network, selecting the first level control strategy, the second level control strategy and the third level control strategy to construct the corresponding degraded control strategy; Degradation control is performed on the hybrid vehicle.

5. The hybrid vehicle power safety redundancy control method according to claim 1, characterized in that: Selecting a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; Based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including: When the communication result is a communication failure of any one of the engine controller, the power battery controller and the transmission controller in the power domain control network, the corresponding degraded control strategy is constructed by the second-level control strategy and the third-level control strategy; Degradation control is performed on the hybrid vehicle.

6. The hybrid vehicle power safety redundancy control method according to claim 5, characterized in that: Selecting a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; Based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including: When the communication result is a communication failure of the engine controller, the engine is controlled to stop, and the corresponding degraded control strategy is constructed by selecting the second-level control strategy and the third-level control strategy; Degradation control is performed on the hybrid vehicle.

7. The hybrid vehicle power safety redundancy control method according to claim 5, characterized in that: Selecting a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; Based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including: When the communication result is a communication failure of the power battery controller, the generator is controlled to shut down, the coasting energy recovery is turned off, and the corresponding degradation control strategy is constructed by the second-level control strategy and the third-level control strategy; Degradation control is performed on the hybrid vehicle.

8. The hybrid vehicle power safety redundancy control method according to claim 5, characterized in that: Selecting a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; Based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including: When the communication result is a communication failure of the transmission controller, determining whether the current gear can be maintained by direct engine drive; If the current gear can be maintained and the engine can be directly driven, the hybrid vehicle is controlled to run normally; If the current gear cannot be maintained by direct engine drive, the corresponding downgrade control strategy is constructed by the second-level control strategy and the third-level control strategy; Degradation control is performed on the hybrid vehicle.

9. The hybrid electric vehicle power safety redundancy control method according to claim 1, characterized in that: Selecting a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; Based on the selected degradation control strategy, the hybrid vehicle is subjected to degradation control, including: When the communication result is a communication failure of the driving safety component controller in the power domain control network, selecting the corresponding degraded control strategy constructed by the third-level control strategy; Degradation control is performed on the hybrid vehicle.

10. A hybrid electric vehicle power safety redundancy control device, characterized in that: include: Acquisition module and redundant control module; The acquisition module is used to acquire the communication results of each power component controller in the power domain control network of the hybrid electric vehicle; The redundant control module is used to select a corresponding degradation control strategy based on the communication status of each power component controller in the communication result; and based on the selected degradation control strategy, perform degradation control on the hybrid vehicle; the degradation control strategy includes a first-level control strategy for switching the communication link, a second-level control strategy for switching the power source, and a third-level control strategy for switching to a default control mode.

11. A hybrid electric vehicle, comprising a memory and a processor, characterized in that: The memory stores a computer program, and the processor is configured to run the computer program to execute the steps of the hybrid electric vehicle power safety redundancy control method according to any one of claims 1 to 9.

Images