Vehicle time system, method, device, equipment, vehicle, medium and product

Abstract

The invention relates to intelligent operation capable of achieving time decoupling between different control domains of a vehicle, in particular to a vehicle time system, method, device and equipment, a vehicle, a medium and a product. The system comprises a first time domain and a second time domain, the first time domain comprises a first master node and a first slave node, and the second time domain comprises a second master node and a second slave node; the first master node is used for performing time synchronization of a first time domain based on an external clock source; and the second master node is used for performing time synchronization of the second time domain and the first time domain through the first slave node, or performing time synchronization of the second time domain based on an external clock source when the time synchronization of the second time domain and the first time domain is abnormal. According to the embodiment of the invention, since the two mutually independent time domains are used, the time systems of the two domains are decoupled, and the fault of the time system of one domain does not affect the other domain, so that the safety of the vehicle is improved.

Description

Technical Field

[0001] The present disclosure relates to the technical field of vehicles, and in particular, to a vehicle time system, method, device, equipment, vehicle, medium, and product. Background Art

[0002] In the related art, an automotive intelligent cockpit domain and an autonomous driving domain often require a unified time system and need to be synchronized with UTC (Coordinated Universal Time). The domain controller of the traditional time synchronization system based on gPTP (generalized Precision Time Protocol) has only one time domain. Different control domains of the vehicle use the same clock source and belong to the same clock domain. The time systems of different control domains cannot be decoupled. When a fault occurs in the time system, it will affect the operation of all control domain functions, posing a potential hazard to the safe operation of the vehicle and reducing the safety of the vehicle. Summary of the Invention

[0003] To overcome the problems existing in the related art, the present disclosure provides a vehicle time system, method, device, equipment, intelligent cockpit, vehicle, medium, product, and chip.

[0004] According to the first aspect of the embodiments of the present disclosure, a vehicle time system is provided, including: a first time domain and a second time domain. The first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node;

[0005] The first master node is configured to perform time synchronization of the first time domain based on an external clock source;

[0006] The second master node is configured to perform time synchronization between the second time domain and the first time domain through the first slave node, or perform time synchronization of the second time domain based on the external clock source when an abnormality occurs in the time synchronization between the second time domain and the first time domain.

[0007] In an implementation manner, the first master node includes a first domain controller of a first control domain. The first slave node includes a first repeater and a first time synchronization slave node of the first control domain, and a second repeater of a second control domain. The first domain controller is configured to forward a time synchronization message of the external clock source to the first time synchronization slave node through the first repeater to perform time synchronization with the first time synchronization slave node;

[0008] The second master node includes a domain controller of a second control domain, and the second slave node includes a second time synchronization slave node of the second control domain. The second domain controller is configured to forward, through the second repeater, time synchronization messages from the first repeater or the external clock source to the second time synchronization slave node to perform time synchronization with the second time synchronization slave node.

[0009] In one embodiment, the second domain controller serves as the first time synchronization slave node.

[0010] In one embodiment, the second domain controller includes a time management module. An anomaly in the time synchronization between the second time domain and the first time domain includes an anomaly in the health status of the first time domain. The time management module is configured to:

[0011] Monitor the health status of the first time domain;

[0012] Based on the external clock source, perform time synchronization of the second time domain when the health status of the first time domain is abnormal.

[0013] In one embodiment, an anomaly in the health status of the first time domain includes at least one of the following:

[0014] The time of the first time domain fails;

[0015] The time difference between the first time domain and the second time domain exceeds a first set threshold.

[0016] In one embodiment, the second domain controller includes a time management module. The time management module is configured to:

[0017] Monitor the time of the first time domain and the second time domain;

[0018] When it is detected that the time of the first time domain and / or the second time domain is abnormal, perform at least one of the following operations:

[0019] Report a fault.

[0020] Perform a downgrade operation and / or an alarm operation on a specified functional module.

[0021] In one embodiment, the time anomaly includes at least one of the following situations:

[0022] The time of the first time domain or the time of the second time domain has a jump.

[0023] The time of the first time domain or the time of the second time domain has a rollback.

[0024] The time difference between domains of the first time domain and the second time domain exceeds a first set threshold.

[0025] The time difference between the time of the first time domain and / or the time of the second time domain and the external clock source exceeds a second set threshold.

[0026] In one embodiment, the second domain controller includes a time management module; the time management module is configured to:

[0027] According to service parameters, provide time management services to the first control domain and / or the second control domain through a service-oriented architecture, where the service parameters include the time difference between the first time domain and the second time domain obtained periodically, and the time management services include aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

[0028] In one embodiment, the second transponder supports isolating the time synchronization message of the first control domain and the time synchronization message of the second control domain when forwarding the time synchronization messages of the first control domain and the second control domain.

[0029] In one embodiment, the security specification level of the second control domain is higher than that of the first control domain.

[0030] In one embodiment, the first control domain includes an intelligent cockpit domain, and the second control domain includes an intelligent driving domain.

[0031] According to a second aspect of the embodiments of the present disclosure, a vehicle time management method is provided, which is applied to a vehicle time system. The vehicle time system includes a first time domain and a second time domain. The first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node; the method includes:

[0032] The first master node synchronizes the time of the first time domain based on an external clock source;

[0033] The second master node synchronizes the time of the second time domain with the first time domain through the first slave node, or synchronizes the time of the second time domain based on the external clock source when the time synchronization between the second time domain and the first time domain is abnormal.

[0034] In one embodiment, the first master node includes a first domain controller of a first control domain, the first slave node includes a first repeater and a first time synchronization slave node of the first control domain, and a second repeater of a second control domain; the second master node includes a second domain controller of the second control domain, and the second slave node includes a second time synchronization slave node of the second control domain;

[0035] The first master node performs time synchronization of the first time domain based on an external clock source, including:

[0036] The first domain controller forwards the time synchronization message of the external clock source to the first time synchronization slave node through the first repeater, so as to perform time synchronization with the first time synchronization slave node;

[0037] The second master node performs time synchronization of the second time domain and the first time domain through the first slave node, including:

[0038] The second domain controller forwards the time synchronization message from the first repeater or the external clock source to the second time synchronization slave node through the second repeater to perform time synchronization with the second time synchronization slave node.

[0039] In one embodiment, the second domain controller serves as the first time synchronization slave node and includes a time management module. An abnormality in the time synchronization between the second time domain and the first time domain includes an abnormality in the health status of the first time domain. The method includes:

[0040] The time management module monitors the health status of the first time domain;

[0041] When the health status of the first time domain is abnormal, the time management module performs time synchronization of the second time domain based on the external clock source.

[0042] In one embodiment, an abnormality in the health status of the first time domain includes at least one of the following:

[0043] The time of the first time domain fails;

[0044] The time difference between the first time domain and the second time domain exceeds a first set threshold.

[0045] In one embodiment, the second domain controller includes a time management module; the method further includes:

[0046] The time management module monitors the time of the first time domain and the second time domain;

[0047] When the time management module detects that the time in the first time domain and / or the second time domain is abnormal, at least one of the following operations is performed:

[0048] Report a fault;

[0049] Perform a downgrade operation and / or an alarm operation on a specified functional module.

[0050] In one implementation, the abnormal time includes at least one of the following situations:

[0051] The time in the first time domain or the time in the second time domain has a jump;

[0052] The time in the first time domain or the time in the second time domain has a rollback;

[0053] The inter-domain time difference between the first time domain and the second time domain exceeds a first set threshold;

[0054] The time difference between the time in the first time domain and / or the time in the second time domain and the external clock source exceeds a second set threshold.

[0055] In one implementation, the second domain controller includes a time management module; the method further includes:

[0056] The time management module provides time management services to the first control domain and / or the second control domain through a service-oriented architecture according to service parameters, where the service parameters include the periodically obtained time difference between the first time domain and the second time domain, and the time management services include aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

[0057] In one implementation, the method further includes:

[0058] When the second forwarder forwards the time synchronization messages of the first control domain and the second control domain, it isolates the time synchronization messages of the first control domain and the time synchronization messages of the second control domain.

[0059] In one implementation, the first control domain includes an intelligent cockpit domain, and the second control domain includes an intelligent driving domain.

[0060] According to a third aspect of the embodiments of the present disclosure, a vehicle time management device is provided, including: applied to a vehicle time system having a first time domain and a second time domain, the first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node; the device includes:

[0061] The first synchronization module is configured to perform time synchronization of the first time domain by the first master node based on an external clock source;

[0062] The second synchronization module is configured to perform time synchronization between the second time domain and the first time domain through the first slave node based on the second master node, or perform time synchronization of the second time domain based on the external clock source when an abnormality occurs in the time synchronization between the second time domain and the first time domain.

[0063] In one embodiment, the first master node includes a first domain controller of a first control domain, the first slave node includes a first forwarder and a first time synchronization slave node of the first control domain, and a second forwarder of a second control domain; the second master node includes a second domain controller of the second control domain, and the second slave node includes a second time synchronization slave node of the second control domain;

[0064] The first synchronization module is further configured to:

[0065] The first domain controller forwards a time synchronization message of the external clock source to the first time synchronization slave node through the first forwarder to perform time synchronization with the first time synchronization slave node;

[0066] The second synchronization module is further configured to:

[0067] The second domain controller forwards a time synchronization message from the first forwarder or the external clock source to the second time synchronization slave node through the second forwarder to perform time synchronization with the second time synchronization slave node.

[0068] In one embodiment, the second domain controller includes a time management module; the second synchronization module is further configured to:

[0069] The time management module monitors the time of the first time domain and the second time domain;

[0070] When the time management module detects an abnormality in the time of the first time domain and / or the second time domain, perform at least one of the following operations:

[0071] Perform a fault report;

[0072] Perform a downgrade operation and / or an alarm operation on a specified functional module.

[0073] In one embodiment, the second domain controller includes a time management module; the second synchronization module is further configured to:

[0074] The time management module provides time management services to the first control domain and / or the second control domain through a service-oriented architecture according to service parameters, where the service parameters include the time difference between the first time domain and the second time domain obtained periodically, and the time management services include aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

[0075] In one implementation, the second synchronization module is further configured to:

[0076] When the second transponder forwards the time synchronization messages of the first control domain and the second control domain, it isolates the time synchronization messages of the first control domain and the time synchronization messages of the second control domain.

[0077] According to a fourth aspect of the embodiments of the present disclosure, there is provided an electronic device, including:

[0078] A processor;

[0079] A memory for storing instructions executable by the processor;

[0080] Wherein, the processor is configured to: execute the executable instructions to implement the method described in any one of the second aspects.

[0081] According to a fifth aspect of the embodiments of the present disclosure, there is provided an intelligent cockpit, characterized by including:

[0082] A processor;

[0083] A memory for storing instructions executable by the processor;

[0084] Wherein, the processor is configured to: execute the executable instructions to implement the method described in any one of the second aspects.

[0085] According to a sixth aspect of the embodiments of the present disclosure, there is provided a vehicle, including the electronic device described in the fourth aspect, the intelligent cockpit described in the fifth aspect, and / or the system described in any one of the first aspects.

[0086] According to a seventh aspect of the embodiments of the present disclosure, there is provided a computer-readable storage medium, on which computer program instructions are stored, and when the program instructions are executed by a processor, the steps of the method described in any one of the second aspects are implemented.

[0087] According to an eighth aspect of the embodiments of the present disclosure, there is provided a computer program product, including a computer program, and when the computer program is executed by a processor, the steps of the method described in any one of the second aspects are implemented.

[0088] According to a ninth aspect of the embodiments of the present disclosure, a chip is provided, including a processor and an interface; the processor is configured to read instructions to execute the method described in any one of the second aspect.

[0089] In summary, the embodiments of the present disclosure provide a vehicle time system, including: a first time domain and a second time domain, the first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node; the first master node is configured to perform time synchronization of the first time domain based on an external clock source; the second master node is configured to perform time synchronization between the second time domain and the first time domain through the first slave node, or when there is an abnormality in the time synchronization between the second time domain and the first time domain, perform time synchronization of the second time domain based on the external clock source. Since the embodiments of the present disclosure use two mutually independent time domains, decoupling of the time systems of the two domains is achieved, and a failure of one domain time system will not affect the other domain, thereby improving the safety of the vehicle.

[0090] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0091] The accompanying drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with the present disclosure, and are used together with the specification to explain the principles of the present disclosure.

[0092] Figure 1 is a schematic diagram of a vehicle time system shown according to an exemplary embodiment.

[0093] Figure 2 is a schematic diagram of a vehicle time system shown according to an exemplary embodiment.

[0094] Figure 3 is a flowchart of a vehicle time management method shown according to an exemplary embodiment.

[0095] Figure 4 is a flowchart of a vehicle time management method shown according to an exemplary embodiment.

[0096] Figure 5 is a flowchart of a vehicle time management method shown according to an exemplary embodiment.

[0097] Figure 6 is a flowchart of a vehicle time management method shown according to an exemplary embodiment.

[0098] Figure 7 is a flowchart of a vehicle time management method shown according to an exemplary embodiment.

[0099] Figure 8 It is a flowchart of a vehicle time management method shown according to an exemplary embodiment.

[0100] Figure 9 It is a block diagram of a vehicle time management device shown according to an exemplary embodiment.

[0101] Figure 10 It is a block diagram of an electronic device shown according to an exemplary embodiment.

[0102] Figure 11 It is a block diagram of an intelligent cockpit shown according to an exemplary embodiment.

[0103] Figure 12 It is a block diagram of a vehicle shown according to an exemplary embodiment. Detailed implementation manners

[0104] Here, the exemplary embodiments will be described in detail, and examples thereof are shown in the drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. On the contrary, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0105] It should be understood that the term "including" and its variants used herein are open-ended, that is, "including but not limited to". The term "based on" is "at least partially based on". The term "an embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description.

[0106] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order of functions performed by these devices, modules or units or their interdependent relationships. The modifications of "one" and "multiple" mentioned in the present disclosure are illustrative rather than restrictive. Those skilled in the art should understand that, unless otherwise clearly stated in the context, it should be understood as "one or more". In the description of the present disclosure, unless otherwise specified, "multiple" means two or more, and other quantifiers are similar; "at least one (item)", "one (item) or more (items)" or similar expressions refer to any combination of these items (items), including any combination of single items (items) or plural items (items).

[0107] In the embodiments of the present disclosure, although operations or steps are described in a specific order in the drawings, it should not be understood that these operations or steps are required to be performed in the specific order shown or in a serial order, or that all the operations or steps shown are required to obtain the desired result. In the embodiments of the present disclosure, these operations or steps can be performed serially; they can also be performed in parallel; or a part of these operations or steps can be performed.

[0108] The names of the messages or information exchanged between multiple devices in the embodiments of the present disclosure are only for illustrative purposes and do not limit the scope of these messages or information. It can be understood that before using the technical solutions disclosed in the embodiments of the present disclosure, the types, usage scopes, usage scenarios, etc. of the personal information involved in the present disclosure should be informed to users and user authorization should be obtained in an appropriate manner according to relevant laws and regulations. The present disclosure will be described below with reference to specific embodiments.

[0109] Figure 1 It is a schematic diagram of a vehicle time system shown according to an exemplary embodiment. As Figure 1 shown, the embodiments of the present disclosure provide a vehicle time system, which may include: a first time domain 10 and a second time domain 20. The first time domain 10 may include a first master node 101 and a first slave node 102. The second time domain 20 may include a second master node 201 and a second slave node 202.

[0110] The first master node 101 is used to synchronize the time of the first time domain 10 based on an external clock source 30.

[0111] The second master node 201 is used to synchronize the time of the second time domain 20 with the first time domain 10 through the first slave node 102, or when the time synchronization between the second time domain 20 and the first time domain 10 is abnormal, synchronize the time of the second time domain 20 based on the external clock source 30.

[0112] In summary, the embodiments of the present disclosure provide a vehicle time system, including: a first time domain and a second time domain. The first time domain includes a first master node and a first slave node. The second time domain includes a second master node and a second slave node. The first master node is used to synchronize the time of the first time domain based on an external clock source. The second master node is used to synchronize the time of the second time domain with the first time domain through the first slave node, or when the time synchronization between the second time domain and the first time domain is abnormal, synchronize the time of the second time domain based on the external clock source. Since the embodiments of the present disclosure use two independent time domains, the decoupling of the time systems of the two domains is realized, and the failure of one domain time system will not affect the other domain, so the safety of the vehicle is improved.

[0113] Figure 2 It is a schematic diagram of a vehicle time system shown according to an exemplary embodiment. As Figure 2 shown, the first master node 101 may include a first domain controller 401 of the first control domain 40. The first slave node 102 may include a first repeater 402 and a first time synchronization slave node 403 of the first control domain 40, and a second repeater 502 of the second control domain 50. The first domain controller 401 is configured to forward the time synchronization message of the external clock source 30 to the first time synchronization slave node 403 through the first repeater 402 to perform time synchronization with the first time synchronization slave node 403.

[0114] The second master node 201 includes a second domain controller 501 of the second control domain 50. The second slave node 202 includes a second time synchronization slave node 503 of the second control domain 50. The second domain controller 501 is configured to forward the time synchronization message from the first repeater 402 or the external clock source 30 to the second time synchronization slave node 503 through the second repeater 502 to perform time synchronization with the second time synchronization slave node 503.

[0115] Exemplarily, the first control domain 40 may include an intelligent cockpit domain, and the second control domain 50 may include an intelligent driving domain. The external clock source 30 may include a GNSS (Global Navigation Satellite System) 301, an NTP (Network Time Protocol) 302, or an RTC (Real Time Clock) 303.

[0116] In the figure, M (Master) represents the master node, and S (Slave) represents the slave node.

[0117] Referring to Figure 2 , in a possible implementation manner, the second domain controller 501 may serve as the first time synchronization slave node 403.

[0118] Referring to Figure 2 , in a possible implementation manner, the second domain controller 501 includes a time management module (not shown in the figure). The abnormal time synchronization between the second time domain 20 and the first time domain 10 may include an abnormal health state of the first time domain 10. The time management module may be used for:

[0119] Monitor the health status of the first time domain 10, and perform time synchronization for the second time domain 20 based on the external clock source 30 when the health status of the first time domain 10 is abnormal. In this way, it is possible to avoid the entire vehicle losing the system time due to the abnormal health status of the first time domain 10, thereby avoiding potential uncontrollable safety risks.

[0120] In a possible implementation manner, the abnormal health status of the first time domain 10 may include at least one of the following:

[0121] The time of the first time domain 10 fails;

[0122] The time difference between the first time domain 10 and the second time domain 20 exceeds a first set threshold. Exemplarily, the first set threshold may be 0.1 second.

[0123] Refer to Figure 2 , in a possible implementation manner, the second domain controller 501 may include a time management module (not shown in the figure); the time management module may also be used for:

[0124] Monitor the time of the first time domain 10 and the second time domain 20. When it is detected that the time of the first time domain 10 and / or the second time domain 20 is abnormal, perform at least one of the following operations:

[0125] Perform fault reporting;

[0126] Perform a downgrade operation and / or an alarm operation on a specified functional module. Exemplarily, the specified functional module may include time-dependent functional modules, such as map navigation, central control surrounding environment display rendering in the intelligent cockpit domain, high-precision positioning, target fusion, and vehicle motion control in autonomous driving, etc. Functional modules. By performing fault reporting and performing a downgrade operation and / or an alarm operation on the specified functional module, the safety of the vehicle can be further improved.

[0127] In a possible implementation manner, the abnormal time may include at least one of the following situations:

[0128] The time of the first time domain 10 or the time of the second time domain 20 has a jump;

[0129] The time of the first time domain 10 or the time of the second time domain 20 has a rollback;

[0130] The inter-domain time difference between the first time domain 10 and the second time domain 20 exceeds the first set threshold;

[0131] The time difference between the time of the first time domain 10 and / or the time of the second time domain 20 and the external clock source 30 exceeds a second set threshold. Exemplarily, the second set threshold may be 0.1 second.

[0132] In a possible implementation, the second domain controller 501 may include a time management module; the time management module may also be used for:

[0133] According to service parameters, provide time management services to the first control domain 40 and / or the second control domain 50 through a service-oriented architecture, where the service parameters may include the time difference between the first time domain 10 and the second time domain 20 obtained periodically, and the time management service may include aligning the timestamps of cross-domain data between the first control domain 40 and the second control domain 50 through this time difference. In this way, the safety of the vehicle can be further improved.

[0134] In a possible implementation, the second transponder 402 is configured with a first virtual local area network and a second virtual local area network; the first virtual local area network is used to transmit time synchronization messages of the first control domain 40; the second virtual local area network is used to transmit time synchronization messages of the second control domain 50; the second transponder 502 supports isolating the time synchronization messages of the first control domain 40 and the time synchronization messages of the second control domain 50 when forwarding the time synchronization messages of the first control domain 40 and the second control domain 50. In this way, it can be ensured that the times of different control domains are independent of each other and do not affect each other, realizing the time decoupling of different control domains.

[0135] In a possible implementation, the security specification level of the second control domain 50 is higher than that of the first control domain 40. Configuring a time management module on a system with a higher functional safety ASIL (Automotive Safety Integrity Level) (such as the domain controller MCU of the intelligent driving domain 50) to be responsible for maintaining the health status of the time systems in different time domains and the system time difference, and being able to detect and report faults in a timely manner when the time system is abnormal can further improve the safety and availability of the vehicle.

[0136] In a possible implementation, the first control domain 40 may include an intelligent cockpit domain, and the second control domain 50 may include an intelligent driving domain.

[0137] In summary, the embodiments of the present disclosure provide a vehicle time system, including: a first time domain and a second time domain, where the first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node; the first master node is configured to perform time synchronization of the first time domain based on an external clock source; the second master node is configured to perform time synchronization between the second time domain and the first time domain through the first slave node, or perform time synchronization of the second time domain based on the external clock source when an abnormality occurs in the time synchronization between the second time domain and the first time domain. Since the embodiments of the present disclosure use two independent time domains, decoupling of the time systems of the two domains is achieved, and a failure of one time system will not affect the other, thereby improving the safety of the vehicle.

[0138] Figure 3 is a flowchart of a vehicle time management method shown according to an exemplary embodiment. As Figure 3 shown, the embodiments of the present disclosure provide a vehicle time management method, which is applied to a vehicle time system. The vehicle time system includes a first time domain and a second time domain. The first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node. The method may include the following steps:

[0139] In step S110, the first master node performs time synchronization of the first time domain based on an external clock source.

[0140] In this step, the first master node 101 performs time synchronization of the first time domain 10 based on the external clock source 30. Exemplarily, the first master node 101 may perform time synchronization of the first time domain 10 based on the external clock source 30 and the gPTP time synchronization protocol. The external clock source 30 may include GNSS 301, NTP 302, or RTC 303.

[0141] In step S120, the second master node performs time synchronization between the second time domain and the first time domain through the first slave node, or performs time synchronization of the second time domain based on the external clock source when an abnormality occurs in the time synchronization between the second time domain and the first time domain.

[0142] In this step, the second master node 201 can perform time synchronization between the second time domain 20 and the first time domain 10 through the first slave node 102, or when the time synchronization between the second time domain 20 and the first time domain 10 is abnormal, perform time synchronization of the second time domain 20 based on the external clock source 30. Exemplarily, the first slave node 102 can provide timing for the second master node 201 through the first repeater 402 and the second repeater 502, and the second master node 201 can perform time synchronization for the second time domain 20 through the second repeater 502. When the time synchronization between the second time domain 20 and the first time domain 10 is abnormal, the second master node 201 can perform time synchronization of the second time domain 20 based on the external clock source 30. In this way, it is possible to avoid the entire vehicle losing the system time due to an abnormal health state of the first time domain 10, thus presenting potential uncontrollable safety risks.

[0143] In summary, the embodiments of the present disclosure provide a vehicle time management method, which is applied to a vehicle time system. The vehicle time system includes a first time domain and a second time domain. The first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node. The method includes: the first master node performs time synchronization of the first time domain based on an external clock source; the second master node performs time synchronization between the second time domain and the first time domain through the first slave node, or when the time synchronization between the second time domain and the first time domain is abnormal, performs time synchronization of the second time domain based on the external clock source. Since the embodiments of the present disclosure use two independent time domains, the time systems of the two domains are decoupled, and a failure of one domain time system will not affect the other domain. Therefore, the safety of the vehicle is improved.

[0144] Figure 4 is a flowchart of a vehicle time management method shown according to an exemplary embodiment. The first master node includes a first domain controller of a first control domain. The first slave node includes a first repeater and a first time synchronization slave node of the first control domain, and a second repeater of a second control domain. The second master node includes a second domain controller of a second control domain, and the second slave node includes a second time synchronization slave node of the second control domain.

[0145] As Figure 4 shown, the first master node performing time synchronization of the first time domain based on an external clock source may include the following steps:

[0146] In step S210, the first domain controller forwards the time synchronization message of the external clock source to the first time synchronization slave node through the first repeater to perform time synchronization with the first time synchronization slave node.

[0147] In this step, the first domain controller 401 forwards the time synchronization message of the external clock source 30 to the first time synchronization slave node 403 through the first repeater 402, so as to synchronize the time with the first time synchronization slave node 403.

[0148] The second master node synchronizes the time of the second time domain and the first time domain through the first slave node, which may include the following steps:

[0149] In step S220, the second domain controller forwards the time synchronization message from the first repeater or the external clock source to the second time synchronization slave node through the second repeater, to synchronize the time with the second time synchronization slave node.

[0150] In this step, the second domain controller 501 forwards the time synchronization message from the first repeater 402 or the external clock source 30 to the second time synchronization slave node 503 through the second repeater 502, to synchronize the time with the second time synchronization slave node 503.

[0151] Figure 5 It is a flowchart of a vehicle time management method shown according to an exemplary embodiment. The second domain controller serves as the first time synchronization slave node and includes a time management module, as Figure 5 shown, an abnormality in the time synchronization between the second time domain and the first time domain includes an abnormality in the health status of the first time domain, which may include the following steps:

[0152] In step S310, the time management module monitors the health status of the first time domain.

[0153] In this step, the time management module monitors the health status of the first time domain 10 in real time.

[0154] In step S320, when the health status of the first time domain is abnormal, the time management module synchronizes the time of the second time domain based on the external clock source.

[0155] In this step, when the health status of the first time domain 10 is abnormal, the time management module synchronizes the time of the second time domain 20 based on the external clock source 30.

[0156] In a possible implementation manner, an abnormality in the health status of the first time domain 10 includes at least one of the following:

[0157] The time of the first time domain 10 fails.

[0158] The time difference between the first time domain 10 and the second time domain 20 exceeds a first set threshold. Exemplarily, the first set threshold can be 0.1 second. In this way, it is possible to avoid the entire vehicle losing the system time due to an abnormal health state of the first time domain 10, thus preventing potential uncontrollable safety risks and improving vehicle safety.

[0159] Figure 6 is a flowchart of a vehicle time management method shown according to an exemplary embodiment. The second domain controller includes a time management module; as Figure 6 shown, the method may further include the following steps:

[0160] In step S410, the time management module monitors the time of the first time domain and the second time domain.

[0161] In this step, the time management module monitors the time of the first time domain 10 and the second time domain 20 in real time.

[0162] In step S420, when the time management module detects that the time of the first time domain and / or the second time domain is abnormal, at least one of the following operations is performed:

[0163] Report a fault.

[0164] Perform a downgrade operation and / or an alarm operation on a specified functional module.

[0165] In this step, when the time management module detects that the time of the first time domain 10 and / or the second time domain 20 is abnormal, at least one of the following operations is performed:

[0166] Report a fault.

[0167] Perform a downgrade operation and / or an alarm operation on a specified functional module. In this way, by reporting a fault and performing a downgrade operation and / or an alarm operation on a specified functional module, the vehicle safety can be further improved.

[0168] In a possible implementation, the time abnormality includes at least one of the following situations:

[0169] The time of the first time domain 10 or the second time domain 20 has a jump.

[0170] The time of the first time domain 10 or the second time domain 20 has a rollback.

[0171] The inter-domain time difference between the first time domain 10 and the second time domain 20 exceeds a first set threshold.

[0172] The time difference between the time of the first time domain 10 and / or the time of the second time domain 20 and the external clock source 30 exceeds a second set threshold. Exemplarily, the second set threshold may be 0.1 second.

[0173] Figure 7 is a flowchart of a vehicle time management method shown according to an exemplary embodiment. The second domain controller includes a time management module; as Figure 7 shown, the method may further include the following steps:

[0174] In step S510, the time management module provides time management services to the first control domain and / or the second control domain through a service-oriented architecture according to service parameters, where the service parameters include the time difference between the first time domain and the second time domain obtained periodically, and the time management services include aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

[0175] In this step, the time management module may provide time management services to the first control domain 40 and / or the second control domain 50 through a service-oriented architecture according to service parameters. The service parameters include the time difference between the first time domain 10 and the second time domain 20 obtained periodically, and the time management services include aligning the timestamps of cross-domain data between the first control domain 40 and the second control domain 50 through the time difference. In this way, the safety of the vehicle can be further improved.

[0176] Figure 8 is a flowchart of a vehicle time management method shown according to an exemplary embodiment. As Figure 8 shown, the method may further include the following steps:

[0177] In step S610, when the second transponder forwards the time synchronization messages of the first control domain and the second control domain, it isolates the time synchronization message of the first control domain and the time synchronization message of the second control domain.

[0178] In this step, when the second transponder 502 forwards the time synchronization messages of the first control domain 40 and the second control domain 50, it isolates the time synchronization message of the first control domain 40 and the time synchronization message of the second control domain 50. It can ensure that the times of different control domains are independent of each other and do not affect each other, realizing the time decoupling of different control domains, thereby further improving the safety of the vehicle.

[0179] In a possible implementation manner, the first control domain 40 includes an intelligent cockpit domain, and the second control domain 50 includes an intelligent driving domain.

[0180] In summary, the embodiments of the present disclosure provide a vehicle time management method, which is applied to a vehicle time system. The vehicle time system includes a first time domain and a second time domain. The first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node. The method includes: the first master node synchronizes the time of the first time domain based on an external clock source; the second master node synchronizes the time of the second time domain with the first time domain through the first slave node, or synchronizes the time of the second time domain based on the external clock source when an abnormality occurs in the time synchronization between the second time domain and the first time domain. Since the embodiments of the present disclosure use two independent time domains, decoupling of the time systems of the two domains is achieved, and a failure of one time system will not affect the other, thereby improving the safety of the vehicle.

[0181] Figure 9 is a block diagram of a vehicle time management device shown according to an exemplary embodiment. As Figure 9 shown, the embodiments of the present disclosure provide a vehicle time management device, which is applied to a vehicle time system having a first time domain and a second time domain. The first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node. The device 900 may include the following modules:

[0182] A first synchronization module 910, configured to synchronize the time of the first time domain through the first master node based on an external clock source.

[0183] A second synchronization module 920, configured to synchronize the time of the second time domain with the first time domain based on the second master node through the first slave node, or synchronize the time of the second time domain based on the external clock source when an abnormality occurs in the time synchronization between the second time domain and the first time domain.

[0184] In a possible implementation manner, the first master node includes a first domain controller of a first control domain, and the first slave node includes a first forwarder and a first time synchronization slave node of the first control domain, and a second forwarder of a second control domain; the second master node includes a second domain controller of a second control domain, and the second slave node includes a second time synchronization slave node of the second control domain;

[0185] The first synchronization module 910 is further configured to:

[0186] The first domain controller forwards a time synchronization message of the external clock source to the first time synchronization slave node through the first forwarder to synchronize time with the first time synchronization slave node;

[0187] The second synchronization module 920 is further configured to:

[0188] The second domain controller forwards the time synchronization message from the first repeater or the external clock source to the second time synchronization slave node through the second repeater for time synchronization with the second time synchronization slave node.

[0189] In a possible implementation manner, the second domain controller serves as the first time synchronization slave node and includes a time management module. An exception in the time synchronization between the second time domain and the first time domain includes an exception in the health status of the first time domain;

[0190] The second synchronization module 920 is further configured to:

[0191] The time management module monitors the health status of the first time domain;

[0192] When the health status of the first time domain is abnormal, the time management module performs time synchronization of the second time domain based on the external clock source.

[0193] In a possible implementation manner, an exception in the health status of the first time domain includes at least one of the following:

[0194] The time of the first time domain fails;

[0195] The time difference between the first time domain and the second time domain exceeds a first set threshold.

[0196] In a possible implementation manner, the second domain controller includes a time management module; the second synchronization module 920 is further configured to:

[0197] The time management module monitors the time of the first time domain and the second time domain;

[0198] When the time management module detects an exception in the time of the first time domain and / or the second time domain, at least one of the following operations is performed:

[0199] Perform fault reporting;

[0200] Perform a downgrade operation and / or an alarm operation on a specified functional module.

[0201] In a possible implementation manner, an exception in the time includes at least one of the following situations:

[0202] The time of the first time domain or the time of the second time domain has a jump;

[0203] The time in the first time domain or the time in the second time domain regresses;

[0204] The time difference between the first time domain and the second time domain exceeds a first set threshold;

[0205] The time difference between the time in the first time domain and / or the time in the second time domain and the external clock source exceeds a second set threshold.

[0206] In a possible implementation manner, the second domain controller includes a time management module; the second synchronization module 920 is further configured to:

[0207] The time management module provides time management services to the first control domain and / or the second control domain through a service-oriented architecture according to service parameters, the service parameters include the time difference between the first time domain and the second time domain obtained periodically, and the time management services include aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

[0208] In a possible implementation manner, the second synchronization module 920 is further configured to:

[0209] When the second repeater forwards the time synchronization messages of the first control domain and the second control domain, it isolates the time synchronization messages of the first control domain and the time synchronization messages of the second control domain.

[0210] In a possible implementation manner, the first control domain includes an intelligent cockpit domain, and the second control domain includes an intelligent driving domain.

[0211] Regarding the device in the above embodiments, the specific manners in which each module performs operations have been described in detail in the embodiments related to the method, and will not be elaborated here.

[0212] The present disclosure further provides a computer-readable storage medium, on which computer program instructions are stored, and when the program instructions are executed by a processor, the steps of the vehicle time management method provided by the present disclosure are implemented.

[0213] Figure 10 is a block diagram of an electronic device shown according to an exemplary embodiment. For example, the electronic device 1000 may be the time management module in the above embodiments.

[0214] Refer to Figure 10, the electronic device 1000 may include one or more of the following components: a processing component 1002, a memory 1004, a power component 1006, a multimedia component 1008, an audio component 1010, an input / output interface 1012, a sensor component 1014, and a communication component 1016.

[0215] The processing component 1002 generally controls the overall operation of the electronic device 1000, such as operations associated with display, telephone calls, data communication, camera operations, and recording operations. The processing component 1002 may include one or more processors 1020 to execute instructions to complete all or part of the steps of the above methods. In addition, the processing component 1002 may include one or more modules to facilitate the interaction between the processing component 1002 and other components. For example, the processing component 1002 may include a multimedia module to facilitate the interaction between the multimedia component 1008 and the processing component 1002.

[0216] The memory 1004 is configured to store various types of data to support the operation of the electronic device 1000. Examples of such data include instructions for any application or method operating on the electronic device 1000, contact data, phone book data, messages, pictures, videos, etc. The memory 1004 may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, a magnetic disk, or an optical disk.

[0217] The power component 1006 provides power to various components of the electronic device 1000. The power component 1006 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the electronic device 1000.

[0218] The multimedia component 1008 includes a screen that provides an output interface between the electronic device 1000 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen can be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors can sense not only the boundaries of the touch or swipe actions but also detect the duration and pressure associated with the touch or swipe operations. In some embodiments, the multimedia component 1008 includes a front camera and / or a rear camera. When the electronic device 1000 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera can receive external multimedia data. Each of the front camera and the rear camera can be a fixed optical lens system or have a focal length and optical zoom capabilities.

[0219] The audio component 1010 is configured to output and / or input audio signals. For example, the audio component 1010 includes a microphone (MIC) that is configured to receive external audio signals when the electronic device 1000 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals can be further stored in the memory 1004 or transmitted via the communication component 1016. In some embodiments, the audio component 1010 further includes a speaker for outputting audio signals.

[0220] The input / output interface 1012 provides an interface between the processing component 1002 and a peripheral interface module, which can be a keyboard, a click wheel, buttons, etc. These buttons can include, but are not limited to: a home button, a volume button, a power button, and a lock button.

[0221] The sensor assembly 1014 includes one or more sensors for providing status assessment of various aspects for the electronic device 1000. For example, the sensor assembly 1014 can detect the on / off state of the electronic device 1000, the relative positioning of components, such as the display and keypad of the electronic device 1000. The sensor assembly 1014 can also detect a change in the position of the electronic device 1000 or a component of the electronic device 1000, the presence or absence of user contact with the electronic device 1000, the orientation or acceleration / deceleration of the electronic device 1000, and the temperature change of the electronic device 1000. The sensor assembly 1014 can include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 1014 can also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 1014 can further include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0222] The communication component 1016 is configured to facilitate communication between the electronic device 1000 and other devices in a wired or wireless manner. The electronic device 1000 can access a wireless network based on communication standards, such as WiFi, 2G, or 3G, or a combination thereof. In an exemplary embodiment, the communication component 1016 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 1016 further includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0223] In an exemplary embodiment, the electronic device 1000 can be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components for performing the above method.

[0224] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as the memory 1004 including instructions, and the above instructions can be executed by the processor 1020 of the electronic device 1000 to complete the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, and an optical data storage device, etc.

[0225] In addition to being an independent electronic device, the above device can also be a part of an independent electronic device. For example, in one embodiment, the device can be an integrated circuit (IC) or a chip. The integrated circuit can be a single IC or a collection of multiple ICs. The chip can include, but is not limited to, the following types: GPU (Graphics Processing Unit), CPU (Central Processing Unit), FPGA (Field Programmable Gate Array), DSP (Digital Signal Processor), ASIC (Application Specific Integrated Circuit), SOC (System on Chip), etc. The above integrated circuit or chip can be used to execute executable instructions (or code) to implement the above vehicle time management method. The executable instructions can be stored in the integrated circuit or chip, or obtained from other devices or equipment. For example, the integrated circuit or chip includes a processor, a memory, and an interface for communicating with other devices. The executable instructions can be stored in the memory and, when executed by the processor, implement the above vehicle time management method. Alternatively, the integrated circuit or chip can receive the executable instructions through the interface and transmit them to the processor for execution to implement the above vehicle time management method.

[0226] In another exemplary embodiment, a computer program product is also provided. The computer program product includes a computer program executable by a programmable device, and the computer program has a code portion for executing the above vehicle time management method when executed by the programmable device.

[0227] Figure 11 is a block diagram of an intelligent cockpit shown according to an exemplary embodiment. Referring to Figure 11 , the intelligent cockpit 1100 may include one or more of the following components: a processing component 1102, a memory 1104, a power supply component 1106, a multimedia component 1108, an audio component 1110, an input / output interface 1112, a sensor component 1114, and a communication component 1116.

[0228] The processing component 1102 generally controls the overall operation of the intelligent cockpit 1100, such as operations associated with display, phone calls, data communication, camera operations, and recording operations. The processing component 1102 may include one or more processors 1120 to execute instructions to complete all or part of the steps of the above methods. In addition, the processing component 1102 may include one or more modules to facilitate the interaction between the processing component 1102 and other components. For example, the processing component 1102 may include a multimedia module to facilitate the interaction between the multimedia component 1108 and the processing component 1102.

[0229] The memory 1104 is configured to store various types of data to support the operation of the intelligent cockpit 1100. Examples of such data include instructions for any application or method operating on the intelligent cockpit 1100, contact data, phone book data, messages, pictures, videos, etc. The memory 1104 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk, or optical disk.

[0230] The power supply component 1106 provides power to various components of the intelligent cockpit 1100. The power supply component 1106 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the intelligent cockpit 1100.

[0231] The multimedia component 1108 includes a screen that provides an output interface between the intelligent cockpit 1100 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen can be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors can not only sense the boundaries of touch or swipe actions but also detect the duration and pressure associated with the touch or swipe operation. In some embodiments, the multimedia component 1108 includes a front camera and / or a rear camera. When the intelligent cockpit 1100 is in an operation mode, such as a shooting mode or a video mode, the front camera and / or the rear camera can receive external multimedia data. Each front camera and rear camera can be a fixed optical lens system or have focal length and optical zoom capabilities.

[0232] The audio component 1110 is configured to output and / or input audio signals. For example, the audio component 1110 includes a microphone (MIC) that is configured to receive external audio signals when the intelligent cockpit 1100 is in an operation mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals can be further stored in the memory 1104 or transmitted via the communication component 1116. In some embodiments, the audio component 1110 further includes a speaker for outputting audio signals.

[0233] The input / output interface 1112 provides an interface between the processing component 1102 and a peripheral interface module, and the peripheral interface module can be a keyboard, a click wheel, buttons, etc. These buttons can include but are not limited to: a home button, a volume button, a start button, and a lock button.

[0234] The sensor component 1114 includes one or more sensors for providing status assessments of various aspects of the intelligent cockpit 1100. For example, the sensor component 1114 can detect the open / closed state of the intelligent cockpit 1100, the relative positioning of components, such as the display and keypad of the intelligent cockpit 1100. The sensor component 1114 can also detect a change in the position of the intelligent cockpit 1100 or a component of the intelligent cockpit 1100, the presence or absence of user contact with the intelligent cockpit 1100, the orientation or acceleration / deceleration of the intelligent cockpit 1100, and the temperature change of the intelligent cockpit 1100. The sensor component 1114 can include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor component 1114 can also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor component 1114 can further include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0235] The communication component 1116 is configured to facilitate communication between the intelligent cockpit 1100 and other devices in a wired or wireless manner. The intelligent cockpit 1100 can access a wireless network based on a communication standard, such as WiFi, 2G, or 3G, or a combination thereof. In an exemplary embodiment, the communication component 1116 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 1116 further includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0236] In an exemplary embodiment, the intelligent cockpit 1100 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components for performing the above method.

[0237] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 1104 including instructions, and the above instructions can be executed by a processor 1120 of the intelligent cockpit 1100 to complete the above method. For example, the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0238] In addition to being an independent electronic device, the above device may also be a part of an independent electronic device. For example, in one embodiment, the device may be an integrated circuit (IC) or a chip. The integrated circuit may be a single IC or a collection of multiple ICs. The chip may include, but is not limited to, the following types: GPU (Graphics Processing Unit, graphics processor), CPU (Central Processing Unit, central processor), FPGA (Field Programmable Gate Array, programmable logic array), DSP (Digital Signal Processor, digital signal processor), ASIC (Application Specific Integrated Circuit, application-specific integrated circuit), SOC (System on Chip, SoC, system-on-chip or system-level chip), etc. The above integrated circuit or chip may be used to execute executable instructions (or code) to implement the above vehicle time management method. The executable instructions may be stored in the integrated circuit or chip or obtained from other devices or equipment. For example, the integrated circuit or chip includes a processor, a memory, and an interface for communicating with other devices. The executable instructions may be stored in the memory, and when the executable instructions are executed by the processor, the above vehicle time management method is implemented; or, the integrated circuit or chip may receive the executable instructions through the interface and transmit them to the processor for execution to implement the above vehicle time management method.

[0239] In another exemplary embodiment, a computer program product is further provided. The computer program product includes a computer program executable by a programmable device, and the computer program has a code portion for performing the above-described vehicle time management method when executed by the programmable device.

[0240] Figure 12 is a block diagram of a vehicle shown according to an exemplary embodiment. Referring to Figure 12 , vehicle 1200 may include the electronic device 1000, the intelligent cockpit 1100, and / or the vehicle time system in the above embodiments, as well as various subsystems, for example, an infotainment system 1210, a perception system 1220, a decision control system 1230, a drive system 1240, and a computing platform 1250. Among them, vehicle 1200 may further include more or fewer subsystems, and each subsystem may include multiple components. In addition, each subsystem and each component of vehicle 1200 may be interconnected in a wired or wireless manner.

[0241] In some embodiments, the infotainment system 1210 may include a communication system, an entertainment system, a navigation system, and the like.

[0242] The perception system 1220 may include several sensors for sensing information about the environment around vehicle 1200. For example, the perception system 1220 may include a global positioning system (the global positioning system may be a GPS system, or a Beidou system, or other positioning systems), an inertial measurement unit (IMU), a lidar, a millimeter-wave radar, an ultrasonic radar, and a camera device.

[0243] The decision control system 1230 may include a computing system, a vehicle controller, a steering system, an accelerator, and a braking system.

[0244] The drive system 1240 may include components that provide power motion for vehicle 1200. In one embodiment, the drive system 1240 may include an engine, an energy source, a powertrain, and wheels. The engine may be one or a combination of an internal combustion engine, an electric motor, and an air compression engine. The engine can convert the energy provided by the energy source into mechanical energy.

[0245] Some or all functions of vehicle 1200 are controlled by the computing platform 1250. The computing platform 1250 may include at least one processor 1251 and a memory 1252, and the processor 1251 may execute instructions 1253 stored in the memory 1252.

[0246] The processor 1251 can be any conventional processor, such as a commercially available CPU. The processor may also include, for example, a Graphic Process Unit (GPU), a Field Programmable Gate Array (FPGA), a System on Chip (SOC), an Application Specific Integrated Circuit (ASIC), or a combination thereof.

[0247] The memory 1252 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic memory, flash memory, a magnetic disk, or an optical disk.

[0248] In addition to the instructions 1253, the memory 1252 can also store data, such as road maps, route information, data on the position, direction, speed, etc. of the vehicle. The data stored in the memory 1252 can be used by the computing platform 1250.

[0249] In an embodiment of the present disclosure, the processor 1251 can execute the instructions 1253 to complete all or part of the steps of the above vehicle time management method.

[0250] In another exemplary embodiment, a computer program product is also provided. The computer program product includes a computer program that can be executed by a programmable device, and the computer program has a code portion for executing the above vehicle time management method when executed by the programmable device.

[0251] Those skilled in the art will readily conceive of other embodiments of the present disclosure after considering the specification and practicing the present disclosure. This application is intended to cover any variations, uses, or adaptations of the present disclosure, which follow the general principles of the present disclosure and include known common general knowledge or conventional technical means in the technical field not disclosed in the present disclosure. The specification and embodiments are only regarded as exemplary, and the true scope and spirit of the present disclosure are pointed out by the following claims.

[0252] It should be understood that the present disclosure is not limited to the exact structures described above and shown in the drawings, and various modifications and changes can be made without departing from its scope. The scope of the present disclosure is only limited by the appended claims.

Claims

1. A vehicle time system, characterized in that: include: a first time domain and a second time domain, the first time domain including a first master node and a first slave node, the second time domain including a second master node and a second slave node; The first master node is used to perform time synchronization of the first time domain based on an external clock source; The second master node is used to synchronize the second time domain with the first time domain through the first slave node, or to synchronize the second time domain based on the external clock source when there is an abnormality in the synchronization between the second time domain and the first time domain.

2. The system according to claim 1, characterized in that The first master node includes a first domain controller of a first control domain, the first slave node includes a first repeater and a first time synchronization slave node of the first control domain, and a second repeater of a second control domain, the first domain controller is used to forward the time synchronization message of the external clock source to the first time synchronization slave node through the first repeater, so as to perform time synchronization with the first time synchronization slave node; The second master node includes a second domain controller of the second control domain, and the second slave node includes a second time synchronization slave node of the second control domain. The second domain controller is used to forward the time synchronization message from the first repeater or the external clock source to the second time synchronization slave node through the second repeater to perform time synchronization with the second time synchronization slave node.

3. The system according to claim 2, characterized in that The first time synchronization slave node includes the second domain controller.

4. The system according to claim 2, characterized in that The second domain controller includes a time management module, and the abnormality in time synchronization between the second time domain and the first time domain includes an abnormality in the health state of the first time domain; the time management module is used to: Monitoring the health status of the first time domain; When the health status of the first time domain is abnormal, time synchronization of the second time domain is performed based on the external clock source.

5. The system according to claim 4, characterized in that The abnormality of the health status in the first time domain includes at least one of the following: The time expiration of the first time domain; The time difference between the first time domain and the second time domain exceeds a first set threshold.

6. The system according to claim 2, characterized in that The second domain controller includes a time management module; the time management module is used to: monitoring time in the first time domain and the second time domain; When it is detected that the time in the first time domain and / or the second time domain is abnormal, at least one of the following operations is performed: Report faults; Perform downgrade operations and / or alarm operations on the specified functional modules.

7. The system according to claim 6, characterized in that The abnormal time includes at least one of the following situations: The time in the first time domain or the time in the second time domain jumps; The time in the first time domain or the time in the second time domain rolls back; The time difference between the first time domain and the second time domain exceeds a first set threshold; A time difference between the time in the first time domain and / or the time in the second time domain and the external clock source exceeds a second set threshold.

8. The system according to claim 2, characterized in that The second domain controller includes a time management module; the time management module is used to: According to service parameters, time management services are provided to the first control domain and / or the second control domain through a service-oriented architecture, the service parameters include a periodically acquired time difference between the first time domain and the second time domain, and the time management service includes aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

9. The system according to any one of claims 2 to 8, characterized in that: The second forwarder supports isolating the time synchronization message of the first control domain and the time synchronization message of the second control domain when forwarding the time synchronization messages of the first control domain and the second control domain.

10. The system according to any one of claims 2 to 8, characterized in that: The security specification level of the second control domain is higher than the security specification level of the first control domain.

11. The system according to any one of claims 2 to 8, characterized in that: The first control domain includes an intelligent cockpit domain, and the second control domain includes an intelligent driving domain.

12. A vehicle time management method, characterized in that: Applied to a vehicle time system, the vehicle time system includes a first time domain and a second time domain, the first time domain includes a first master node and a first slave node, the second time domain includes a second master node and a second slave node; the method includes: The first master node performs time synchronization of the first time domain based on an external clock source; The second master node performs time synchronization between the second time domain and the first time domain through the first slave node, or when there is an abnormality in the time synchronization between the second time domain and the first time domain, performs time synchronization between the second time domain based on the external clock source.

13. The method according to claim 12, characterized in that The first master node includes a first domain controller of a first control domain, the first slave node includes a first forwarder and a first time synchronization slave node of the first control domain, and a second forwarder of a second control domain; the second master node includes a second domain controller of a second control domain, and the second slave node includes a second time synchronization slave node of the second control domain; The first master node performs time synchronization of the first time domain based on an external clock source, including: The first domain controller forwards the time synchronization message of the external clock source to the first time synchronization slave node through the first forwarder, so as to perform time synchronization with the first time synchronization slave node; The second master node performs time synchronization between the second time domain and the first time domain through the first slave node, including: The second domain controller forwards the time synchronization message from the first repeater or the external clock source to the second time synchronization slave node through the second repeater to perform time synchronization with the second time synchronization slave node.

14. The method according to claim 13, characterized in that The second domain controller serves as the first time synchronization slave node, including a time management module, and an abnormality in time synchronization between the second time domain and the first time domain includes an abnormality in the health state of the first time domain. The method includes: The time management module monitors the health status of the first time domain; When the health status of the first time domain is abnormal, the time management module performs time synchronization of the second time domain based on the external clock source.

15. The method according to claim 14, characterized in that The abnormality of the health status in the first time domain includes at least one of the following: The time expiration of the first time domain; The time difference between the first time domain and the second time domain exceeds a first set threshold.

16. The method according to claim 13, characterized in that The second domain controller includes a time management module; the method further includes: The time management module monitors the time of the first time domain and the second time domain; When the time management module detects that the time in the first time domain and / or the second time domain is abnormal, at least one of the following operations is performed: Report faults; Perform downgrade operations and / or alarm operations on the specified functional modules.

17. The method according to claim 16, characterized in that The abnormal time includes at least one of the following situations: The time in the first time domain or the time in the second time domain jumps; The time in the first time domain or the time in the second time domain rolls back; The time difference between the first time domain and the second time domain exceeds a first set threshold; A time difference between the time in the first time domain and / or the time in the second time domain and the external clock source exceeds a second set threshold.

18. The method according to claim 13, characterized in that The second domain controller includes a time management module; the method further includes: The time management module provides time management services to the first control domain and / or the second control domain through a service-oriented architecture based on service parameters, wherein the service parameters include a periodically acquired time difference between the first time domain and the second time domain, and the time management service includes aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

19. The method according to any one of claims 13 to 18, characterized in that: The method further comprises: When forwarding the time synchronization messages of the first control domain and the second control domain, the second forwarder isolates the time synchronization messages of the first control domain and the time synchronization messages of the second control domain.

20. The method according to any one of claims 13 to 18, characterized in that: The first control domain includes an intelligent cockpit domain, and the second control domain includes an intelligent driving domain.

21. A vehicle time management device, characterized in that: include: Applicable to a vehicle time system having a first time domain and a second time domain, wherein the first time domain includes a first master node and a first slave node, and the second time domain includes a second master node and a second slave node; the device comprises: A first synchronization module, configured to perform time synchronization of the first time domain based on an external clock source through the first master node; The second synchronization module is configured to perform time synchronization between the second time domain and the first time domain based on the second master node through the first slave node, or to perform time synchronization between the second time domain and the first time domain based on the external clock source when there is an abnormality in the time synchronization between the second time domain and the first time domain.

22. The device according to claim 21, characterized in that The first master node includes a first domain controller of a first control domain, the first slave node includes a first forwarder and a first time synchronization slave node of the first control domain, and a second forwarder of a second control domain; the second master node includes a second domain controller of a second control domain, and the second slave node includes a second time synchronization slave node of the second control domain; The first synchronization module is further configured to: The first domain controller forwards the time synchronization message of the external clock source to the first time synchronization slave node through the first forwarder, so as to perform time synchronization with the first time synchronization slave node; The second synchronization module is further configured to: The second domain controller forwards the time synchronization message from the first repeater or the external clock source to the second time synchronization slave node through the second repeater to perform time synchronization with the second time synchronization slave node.

23. The device according to claim 22, characterized in that The second domain controller includes a time management module; the second synchronization module is further configured to: The time management module monitors the time of the first time domain and the second time domain; When the time management module detects that the time in the first time domain and / or the second time domain is abnormal, at least one of the following operations is performed: Report faults; Perform downgrade operations and / or alarm operations on the specified functional modules.

24. The device according to claim 22, characterized in that The second domain controller includes a time management module; the second synchronization module is further configured to: The time management module provides time management services to the first control domain and / or the second control domain through a service-oriented architecture based on service parameters, wherein the service parameters include a periodically acquired time difference between the first time domain and the second time domain, and the time management service includes aligning the timestamps of cross-domain data between the first control domain and the second control domain through the time difference.

25. The device according to claim 22, characterized in that The second synchronization module is further configured to: When forwarding the time synchronization messages of the first control domain and the second control domain, the second forwarder isolates the time synchronization messages of the first control domain and the time synchronization messages of the second control domain.

26. An electronic device, characterized in that: include: processor; a memory for storing processor-executable instructions; Wherein, the processor is configured to: execute the executable instructions to implement the method according to any one of claims 13-20.

27. A smart cockpit, characterized in that: include: processor; a memory for storing processor-executable instructions; Wherein, the processor is configured to: execute the executable instructions to implement the method according to any one of claims 13-20.

28. A vehicle, characterized in that: It comprises the electronic device described in claim 26, the smart cockpit described in claim 27 and / or the system described in any one of claims 1-11.

29. A computer-readable storage medium having computer program instructions stored thereon, characterized in that: When the program instructions are executed by a processor, the steps of the method according to any one of claims 13 to 20 are implemented.

30. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 13 to 20 are implemented.

31. A chip, characterized in that: The method comprises a processor and an interface; the processor is used to read instructions to execute the method according to any one of claims 13 to 20.

Images