Commercial vehicle automatic emergency braking system function safety implementation method and commercial vehicle

Abstract

The invention discloses a commercial vehicle automatic emergency braking system function safety implementation method, a whole vehicle level automatic emergency braking control system and a commercial vehicle, and the commercial vehicle automatic emergency braking system function safety implementation method comprises the steps that an automatic emergency braking system controller is configured to be in an ASIL B level, and a boundary system of an automatic emergency braking system is configured to be in an ASIL A level; and the brake control module is configured to be in an ASIL D level. According to the method, the function safety requirement of the commercial vehicle automatic emergency braking system can be developed on the whole vehicle level, the stability and reliability of parts are improved, faults caused by systematic failure and random hardware failure of the commercial vehicle automatic emergency braking system are solved, and safety risks caused by the faults of the commercial vehicle automatic emergency braking system are avoided or reduced.

Description

Technical Field

[0001] The present invention relates to the field of vehicles, and more particularly to an implementation method for the functional safety of an automatic emergency braking system of a commercial vehicle, as well as a vehicle-level automatic emergency braking control system and a commercial vehicle. Background Art

[0002] In the related art, for commercial vehicles that are required by regulations to be equipped with an automatic emergency braking system as a standard, although they are equipped with an automatic emergency braking system, the automatic emergency braking system may malfunction. To solve the problem of the failure of the automatic emergency braking system, vehicle manufacturers generally improve the quality of the components of the automatic emergency braking system through quality control, adopt a redundancy scheme in the vehicle integration design, improve communication anti-interference or optimize the system, etc. to solve the problem of the failure of the automatic emergency braking system, but cannot comprehensively consider the impact of other boundary systems of the vehicle. Summary of the Invention

[0003] The present invention aims to at least solve one of the technical problems existing in the prior art. For this reason, an object of the present invention is to propose an implementation method for the functional safety of an automatic emergency braking system of a commercial vehicle, which can develop the functional safety requirements of the automatic emergency braking system of a commercial vehicle at the vehicle level, improve the stability and reliability of components, solve the failures of the automatic emergency braking system of a commercial vehicle caused by systematic failures and random hardware failures, and avoid or reduce the safety risks caused by the failures of the automatic emergency braking system of a commercial vehicle.

[0004] A second object of the present invention is to propose a vehicle-level automatic emergency braking control system.

[0005] A third object of the present invention is to propose a commercial vehicle.

[0006] To solve the above problems, an embodiment of the first aspect of the present invention provides an implementation method for the functional safety of an automatic emergency braking system of a commercial vehicle, including: configuring the automatic emergency braking system controller as ASIL B level, configuring the boundary system of the automatic emergency braking system as ASIL A level, and configuring the brake control module as ASIL D level.

[0007] According to the implementation method for the functional safety of the automatic emergency braking system of a commercial vehicle according to the embodiment of the present invention, the functional safety requirements of the automatic emergency braking system are developed at the vehicle level, and different devices are configured with different functional safety levels according to safety standards. Among them, the automatic emergency braking system controller is configured as ASIL B level, the boundary system of the automatic emergency braking system is configured as ASIL A level, and the brake control module is configured as ASIL D level, which can improve the stability and reliability of components, solve the failures of the automatic emergency braking system caused by systematic failures and random hardware failures, and avoid or reduce the safety risks caused by the failures of the automatic emergency braking system.

[0008] In some embodiments, the hardware parameters of the automatic emergency braking system controller satisfy that the random hardware failure metric is less than 100 FIT, the single point of failure metric is greater than 90%, and the latent failure metric is greater than 60%.

[0009] In some embodiments, when the boundary system communicates with the automatic emergency braking system controller, end-to-end communication protection is performed between the boundary system and the automatic emergency braking system controller.

[0010] In some embodiments, the boundary system includes at least one of a body controller, an electro-hydraulic steering gear, a vehicle controller, a transmission controller, and an instrument; the implementation method further includes at least one of the following: when the body controller sends an enable switch signal of the automatic emergency braking system to the automatic emergency braking system controller, end-to-end communication protection is performed between the body controller and the automatic emergency braking system controller; when the electro-hydraulic steering gear sends steering wheel steering information to the automatic emergency braking system controller, end-to-end communication protection is performed between the electro-hydraulic steering gear and the automatic emergency braking system controller; when the vehicle controller sends engine information and an accelerator pedal opening signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the vehicle controller and the automatic emergency braking system controller; when the transmission controller sends a current gear signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the transmission controller and the automatic emergency braking system controller; when the automatic emergency braking function is triggered, the automatic emergency braking system controller sends a braking request signal and a vehicle dynamic control activation signal to the brake control module, and end-to-end communication protection is performed between the automatic emergency braking system controller and the brake control module; when the automatic emergency braking function is triggered or an alarm is issued, the automatic emergency braking system controller sends an alarm signal to the instrument, and end-to-end communication protection is performed between the automatic emergency braking system controller and the instrument.

[0011] In some embodiments, the boundary system further includes an automatic emergency braking enable switch, and the implementation method further includes at least one of the following: when the automatic emergency braking enable switch sends an automatic emergency braking enable switch signal to the body controller, end-to-end communication protection is performed between the body controller and the automatic emergency braking enable switch; when the body controller sends the automatic emergency braking enable switch signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the automatic emergency braking system controller and the body controller.

[0012] In the second aspect of the embodiments of the present invention, a vehicle-level automatic emergency braking control system is provided, including: an automatic emergency braking system controller configured at ASIL B level; a braking control module configured at ASIL D level; a boundary system configured at ASIL A level; the braking control module and the boundary system are respectively connected to the automatic emergency braking system controller to implement the method for implementing the functional safety of the commercial vehicle automatic emergency braking system described in the above embodiments.

[0013] According to the vehicle-level automatic emergency braking control system of the embodiments of the present invention, the functional safety requirements of the automatic emergency braking control system are developed at the vehicle level, and different devices are configured with different functional safety levels according to safety standards, improving the stability and reliability of components, solving the faults caused by systematic failures and random hardware failures of the vehicle-level automatic emergency braking control system, and avoiding or reducing the safety risks caused by the faults of the vehicle-level automatic emergency braking control system.

[0014] In some embodiments, the boundary system includes at least one of a body controller, an electro-hydraulic steering gear, a vehicle controller, a transmission controller, and an instrument.

[0015] In some embodiments, the body controller, the electro-hydraulic steering gear, the vehicle controller, the transmission controller, and the instrument are respectively communicatively connected to the automatic emergency braking system controller through CAN (Controller Area Network), and end-to-end communication protection is performed during communication.

[0016] In some embodiments, the boundary system further includes an automatic emergency braking enable switch controller, and the automatic emergency braking enable switch controller is communicatively connected to the body controller through LIN (Local Interconnect Network), and end-to-end communication protection is performed during communication.

[0017] In the third aspect of the embodiments of the present invention, a commercial vehicle is provided, including: an automatic emergency braking enable switch and an automatic emergency braking system; the vehicle-level automatic emergency braking control system described in the above embodiments, and the vehicle-level automatic emergency braking control system is respectively connected to the automatic emergency braking enable switch and the automatic emergency braking system.

[0018] According to the commercial vehicle of the embodiments of the invention, different devices in the vehicle-level automatic emergency braking control system are configured with different functional safety levels according to safety standards, ensuring that the vehicle-level automatic emergency braking control system stably and reliably controls the automatic emergency braking system during automatic emergency braking, avoiding faults during the emergency braking of the commercial vehicle, and improving safety.

[0019] Additional aspects and advantages of the present invention will be given in part in the following description, become apparent in part from the following description, or be learned through the practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The above and / or additional aspects and advantages of the present invention will become apparent and be readily understood from the description of embodiments in conjunction with the following drawings, in which: Figure 1 is a schematic diagram of the functional safety configuration of a commercial vehicle automatic emergency braking system according to an embodiment of the present invention; Figure 2 is a block diagram of the structure of a vehicle-level automatic emergency braking control system according to an embodiment of the present invention; Figure 3 is a block diagram of the structure of a commercial vehicle according to an embodiment of the present invention.

[0021] Reference Signs: Commercial vehicle 200; Automatic emergency braking enable switch 201; Automatic emergency braking system 202; Vehicle-level automatic emergency braking control system 100; Automatic emergency braking system controller 110; Braking control module 120; Boundary system 130; Body controller 131; Electro-hydraulic steering gear 132; Vehicle controller 133; Transmission controller 134; Instrument 135; Automatic emergency braking enable switch controller 136. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0022] Embodiments of the present invention will be described in detail below. The embodiments described with reference to the drawings are exemplary. Embodiments of the present invention will be described in detail below.

[0023] An embodiment of the first aspect of the present invention provides a method for implementing the functional safety of a commercial vehicle automatic emergency braking system. This method can develop the functional safety requirements of the commercial vehicle automatic emergency braking system at the vehicle level, improve the stability and reliability of components, solve the problems of the commercial vehicle automatic emergency braking system caused by systematic failures and random hardware failures, and avoid or reduce the safety risks caused by the failures of the commercial vehicle automatic emergency braking system.

[0024] As Figure 1 shown, the automatic emergency braking system controller is configured with an ASIL B rating, the boundary system of the automatic emergency braking system is configured with an ASIL A rating, and the braking control module is configured with an ASIL D rating.

[0025] Specifically, ASIL stands for (Automotive Safety Integrity Level); the ASIL classification is as follows: ASIL A, ASIL B, ASIL C, and ASIL D, a total of 4 levels, increasing in order from A to D. The ASIL level is determined based on three indicators: severity, exposure, and controllability. ASIL A is the lowest level and applies to fault situations that do not result in serious consequences. This level requires basic safety performance analysis and verification of system performance; the ASIL B level applies to fault situations that may cause minor injuries. This level requires safety performance analysis and verification of the system and the adoption of some safety measures to reduce risks; the ASIL C level applies to fault situations that may cause major injuries. This level requires more stringent safety performance analysis and verification of the system and the adoption of more safety measures to reduce risks; ASIL D is the highest level and applies to fault situations that may cause fatal injuries. This level requires the most stringent safety performance analysis and verification of the system and the adoption of the most safety measures to reduce risks.

[0026] Since the present invention considers from the vehicle level, conducts hazard analysis and risk assessment on each component in the automatic emergency braking system in the constructed scenario, and derives the functional safety requirements of the automatic emergency braking system, including expected functions, fault diagnosis, fault handling, fault alarm, and hardware indicators, so that each component in the automatic emergency braking system meets the functional safety requirements; since the vehicle can brake normally after the automatic emergency braking system controller in the automatic emergency braking system is damaged, but the automatic emergency braking function cannot be used normally, there is a certain accident risk. Therefore, the automatic emergency braking system controller is configured as the ASIL B level; the boundary system in the automatic emergency braking system includes multiple components, and the failure of a certain component has little impact on the operation of the automatic emergency braking system and will not cause serious consequences. Therefore, the boundary system of the automatic emergency braking system is configured as the ASIL A level; the braking control module needs to control vehicle braking. If the vehicle cannot brake during driving, it will cause a major accident and may cause serious injuries or even endanger the lives of the driver and other traffic participants. Therefore, the braking control module is configured as the ASIL D level.

[0027] According to the functional safety implementation method of the automatic emergency braking system for commercial vehicles according to the embodiments of the present invention, the functional safety requirements of the automatic emergency braking system are developed at the vehicle level. Among them, the controller of the automatic emergency braking system is configured with an ASIL B level, the boundary system of the automatic emergency braking system is configured with an ASIL A level, and the brake control module is configured with an ASIL D level. Different devices are configured with different functional safety levels according to safety standards, improving the stability and reliability of components, solving the failures of the automatic emergency braking system caused by systematic failures and random hardware failures, and avoiding or reducing the safety risks caused by the failures of the automatic emergency braking system.

[0028] In some embodiments, the hardware parameters of the controller of the automatic emergency braking system satisfy: the random hardware failure metric is less than 100 FIT, the single-point failure metric is greater than 90%, and the latent failure metric is greater than 60%.

[0029] Specifically, FIT (Failure in Time) is a unit for measuring the failure rate of a product. Among them, 1 FIT means that a failure occurs once within 1,000,000,000 hours (i.e., one billion hours). Therefore, 100 FIT can be understood as that within the same time range, the number of failures of the product is 100 times. This unit is used to measure the failure rate of a product, especially in the reliability assessment of electronic products.

[0030] In the design and production of electronic devices, it is very important to understand and use appropriate failure rate units (such as FIT) because it can help evaluate the reliability of products and ensure that products can operate stably in the expected working environment; since the automatic emergency braking function of the vehicle cannot be used normally after the controller of the automatic emergency braking system in the automatic emergency braking system is damaged, there is a certain accident risk. Therefore, the random hardware failure metric of the controller of the automatic emergency braking system is less than 100 FIT.

[0031] A single-point failure refers to a local failure in a system or product. This failure may cause the entire system or product to fail, and there is no redundant or alternative working procedure for remedy. This failure mode usually refers to the failure of a key component or link, which can cause the failure of the entire system or product, and there is no other part or measure to compensate for or recover this failure. The existence of a single-point failure increases the risk of the system because it may reduce the overall availability of the system or even cause a complete failure.

[0032] A latent fault refers to a fault that already exists but has not manifested itself during the operation of a system or device; such a fault may suddenly occur after the system or device has been operating for some time, causing serious consequences; the main characteristics of latent faults are as follows: concealment, latent faults are not easily detected during the operation of the system or device and require specialized detection and diagnostic means to be discovered; suddenness, latent faults may suddenly occur after the system or device has been operating for some time, causing serious consequences; unpredictability, due to the concealment of latent faults, it is difficult to predict the time and degree of their occurrence. In the field of functional safety, latent faults may lead to serious safety accidents. For example, in a vehicle's automatic emergency braking system, due to design or manufacturing defects, the automatic emergency braking system controller may not work properly when the vehicle performs an emergency braking, and ultimately a collision may occur, failing to protect the vehicle occupants.

[0033] During the design and development stage of the whole vehicle, various faults and impacts should be fully considered to ensure the reliability and safety of the commercial vehicle's automatic emergency braking system. When designing the automatic emergency braking system controller, the hardware parameters of the automatic emergency braking system controller should meet the following requirements: the random hardware failure metric is less than 100 FIT, the single-point fault metric is greater than 90%, and the latent fault metric is greater than 60%.

[0034] In some embodiments, when the boundary system communicates with the automatic emergency braking system controller, end-to-end communication protection is carried out between the boundary system and the automatic emergency braking system controller.

[0035] Specifically, the end-to-end protection mechanism is mainly used to protect communication data and ensure that the data is not damaged during transmission. It belongs to the category of functional safety and is different from information security. It can be transmitted in plain text without compression or encryption. As long as the transmitted data is not damaged, even if it is intercepted by a third party, it doesn't matter because the data is not damaged, so the function can still be executed normally. The goal of end-to-end protection is to ensure the integrity of the data during transmission and avoid data corruption or distortion caused by noise, interference, or software errors. It includes two core elements: by calculating and verifying the checksum or cyclic redundancy check, ensuring that the data has not been tampered with or damaged during transmission; by using a sequence counter to ensure that messages arrive in the expected order, capable of detecting lost messages or duplicate messages. If the counter value at the receiving end does not match the expectation, this may be due to a lost message or a duplicate message.

[0036] For the automatic emergency braking system, if the data received by the automatic emergency braking system controller is intermittent when the automatic emergency braking system controller communicates with the boundary system, it may lead to inappropriate or delayed responses, preventing the vehicle from braking normally and causing accidents; therefore, end-to-end communication protection is carried out between the boundary system and the automatic emergency braking system controller to ensure data integrity and reduce the risk of accidents.

[0037] In some embodiments, such as Figure 1 shown, the boundary system includes at least one of a body controller, an electro-hydraulic steering gear, a vehicle controller, a transmission controller, and an instrument.

[0038] Specifically, after receiving the enable switch signal, the body controller sends the enable switch signal to the automatic emergency braking system controller, enabling the automatic emergency braking system controller to operate according to the enable switch signal. When the body controller sends the enable switch signal of the automatic emergency braking system to the automatic emergency braking system controller, end-to-end communication protection is performed between the body controller and the automatic emergency braking system controller to ensure that the data transmission process is not damaged and to ensure the functional safety of the automatic emergency braking system; The electro-hydraulic steering gear generates steering wheel steering information based on the rotation angle of the steering wheel. When the electro-hydraulic steering gear sends the steering wheel steering information to the automatic emergency braking system controller, end-to-end communication protection is performed between the electro-hydraulic steering gear and the automatic emergency braking system controller to ensure that the data transmission process is not damaged and to ensure the functional safety of the automatic emergency braking system; After receiving the engine information and the accelerator pedal opening signal, the vehicle controller sends the engine information and the accelerator pedal opening signal to the automatic emergency braking system controller. When the vehicle controller sends the engine information and the accelerator pedal opening signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the vehicle controller and the automatic emergency braking system controller to ensure that the data transmission process is not damaged and to ensure the functional safety of the automatic emergency braking system; The transmission controller generates a current gear signal based on the current gear and sends the current gear signal to the automatic emergency braking system controller. When the transmission controller sends the current gear signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the transmission controller and the automatic emergency braking system controller to ensure that the data transmission process is not damaged and to ensure the functional safety of the automatic emergency braking system; When the automatic emergency braking function is triggered, the automatic emergency braking system controller sends a braking request signal and a vehicle dynamic control activation signal to the brake control module, and the brake control module controls the vehicle to perform emergency braking. End-to-end communication protection is performed between the automatic emergency braking system controller and the brake control module to ensure that the data transmission process is not damaged and to ensure the functional safety of the automatic emergency braking system; The automatic emergency braking system controller receives the signal sent by the boundary system, determines whether to trigger the automatic emergency braking function, and makes the vehicle perform emergency braking after triggering the automatic emergency braking function. When the automatic emergency braking function is triggered or an alarm occurs, the automatic emergency braking system controller sends an alarm signal to the instrument, and end-to-end communication protection is carried out between the automatic emergency braking system controller and the instrument to ensure that the data transmission process is not damaged and to ensure the functional safety of the automatic emergency braking system.

[0039] According to the above design, the automatic emergency braking system meets the ASIL B level requirements on the vehicle, which can avoid or keep within an acceptable range the risks caused by electronic device failures in the automatic emergency braking system.

[0040] In some embodiments, as Figure 1 shown, the boundary system further includes an automatic emergency braking enable switch, and the implementation method further includes at least one of the following: when the automatic emergency braking enable switch sends an automatic emergency braking enable switch signal to the body controller, end-to-end communication protection is carried out between the body controller and the automatic emergency braking enable switch; when the body controller sends the automatic emergency braking enable switch signal to the automatic emergency braking system controller, end-to-end communication protection is carried out between the automatic emergency braking system controller and the body controller.

[0041] Specifically, the automatic emergency braking system is controlled to be turned on or off through the automatic emergency braking enable switch. When the automatic emergency braking enable switch is turned on, the automatic emergency braking enable switch sends an automatic emergency braking enable switch signal to the body controller, and the body controller then sends the automatic emergency braking enable switch signal to the automatic emergency braking system controller to make the automatic emergency braking system start working. End-to-end communication protection is carried out between the body controller and the automatic emergency braking enable switch controller, and end-to-end communication protection is carried out between the automatic emergency braking system controller and the body controller to ensure that the automatic emergency braking enable switch signal is not damaged during the transmission to the automatic emergency braking system controller and to ensure the functional safety of the automatic emergency braking system.

[0042] An embodiment of the second aspect of the present invention provides a vehicle-level automatic emergency braking control system, as Figure 2 shown, the vehicle-level automatic emergency braking control system 100 includes: an automatic emergency braking system controller 110, a braking control module 120, and a boundary system 130.

[0043] Among them, the automatic emergency braking system controller 110 is configured with an ASIL B rating, the braking control module 120 is configured with an ASIL D rating, and the boundary system 130 is configured with an ASIL A rating; the braking control module 120 and the boundary system 130 are respectively connected to the automatic emergency braking control system controller 110 to implement the method for functional safety of the commercial vehicle automatic emergency braking system.

[0044] Specifically, the automatic emergency braking system controller 110 receives the signal sent by the boundary system 130. The automatic emergency braking system controller 110 determines whether to perform emergency braking based on the received signal. When emergency braking is required, the automatic emergency braking system controller 110 sends a signal to the braking control module 120, and the braking control module 120 controls the vehicle to perform emergency braking.

[0045] For the vehicle-level automatic emergency braking control system according to the embodiment of the present invention, the functional safety requirements of the automatic emergency braking control system are developed at the vehicle level. Different devices are configured with different functional safety ratings according to safety standards, improving the stability and reliability of components, solving the faults of the vehicle-level automatic emergency braking control system caused by systematic failures and random hardware failures, and avoiding or reducing the safety risks caused by the faults of the vehicle-level automatic emergency braking control system.

[0046] In some embodiments, as Figure 2 shown, the boundary system 130 includes at least one of a body controller 131, an electro-hydraulic steering gear 132, a vehicle controller 133, a transmission controller 134, and an instrument 135.

[0047] Specifically, the boundary system 130 is connected to the automatic emergency braking system controller 110. The body controller 131, the electro-hydraulic steering gear 132, the vehicle controller 133, the transmission controller 134, and the instrument 135 in the boundary system 130 can all send corresponding signals to the automatic emergency braking system controller 110. After receiving the signal sent by the boundary system 130, the automatic emergency braking system controller 110 determines whether emergency braking is required.

[0048] In some embodiments, as Figure 2 shown, the body controller 131, the electro-hydraulic steering gear 132, the vehicle controller 133, the transmission controller 134, and the instrument 135 are respectively connected to the automatic emergency braking system controller 110 through CAN communication, and end-to-end communication protection is performed during communication.

[0049] Specifically, when inputting signals: The electro-hydraulic steering gear 132 sends the steering feedback angle and angular velocity signals of the steering wheel to the automatic emergency braking system controller 110 through CAN communication, and end-to-end communication protection is carried out between the electro-hydraulic steering gear 132 and the automatic emergency braking system controller 110; The vehicle controller 133 sends the engine speed, torque, and accelerator pedal opening signals to the automatic emergency braking system controller 110 through CAN communication, and end-to-end communication protection is carried out between the vehicle controller 133 and the automatic emergency braking system controller 110; The transmission controller 134 sends the current gear signal to the automatic emergency braking system controller 110 through CAN communication, and end-to-end communication protection is carried out between the transmission controller 134 and the automatic emergency braking system controller 110; The brake control module 120 sends the wheel speed signal to the automatic emergency braking system controller 110 through CAN communication, and end-to-end communication protection is carried out between the brake control module 120 and the automatic emergency braking system controller 110.

[0050] When outputting signals: When the automatic emergency braking system controller 110 is triggered, the automatic emergency braking system controller 110 sends the braking request signal and the vehicle driving dynamic activation signal to the brake control module 120 through CAN communication, and end-to-end communication protection is carried out between the automatic emergency braking system controller 110 and the brake control module 120; When the automatic emergency braking system controller 110 is triggered or alarms, the automatic emergency braking system controller 110 sends the alarm signal to the instrument 135 through CAN communication, and end-to-end communication protection is carried out between the automatic emergency braking system controller 110 and the instrument 135.

[0051] In some embodiments, as Figure 2 shown, the boundary system 130 further includes an automatic emergency braking enable switch controller 136.

[0052] Among them, the automatic emergency braking enable switch controller 136 is connected to the body controller 131 through LIN communication, and end-to-end communication protection is carried out during communication.

[0053] Specifically, the automatic emergency braking enable switch controller 136 sends the automatic emergency braking enable switch signal to the body controller 131 through LIN communication, and end-to-end communication protection is carried out between the automatic emergency braking enable switch controller 136 and the body controller 131. The body controller 131 forwards the automatic emergency braking enable switch signal to the automatic emergency braking system controller 110 through CAN communication, and end-to-end communication protection is carried out between the body controller 131 and the automatic emergency braking system controller 110.

[0054] The third aspect embodiment of the present invention provides a commercial vehicle, as Figure 3As shown, the commercial vehicle 200 includes: an automatic emergency braking enable switch 201, an automatic emergency braking system 202, and a vehicle-level automatic emergency braking control system 100.

[0055] Among them, the vehicle-level automatic emergency braking control system 100 is respectively connected to the automatic emergency braking enable switch 201 and the automatic emergency braking system 202.

[0056] Specifically, the automatic emergency braking enable switch 201 is used to control the working state of the automatic emergency braking system 202. After the automatic emergency braking enable switch 201 sends an enable signal to the vehicle-level automatic emergency braking control system 100, the vehicle-level automatic emergency braking control system 100 controls the automatic emergency braking system 202. The vehicle-level automatic emergency braking control system 100 controls the automatic emergency braking system 202 according to the signal received from the boundary system 130 to implement the automatic emergency braking function of the vehicle.

[0057] According to the commercial vehicle of the invention embodiment, different devices in the vehicle-level automatic emergency braking control system are configured with different functional safety levels according to safety standards, ensuring that the vehicle-level automatic emergency braking control system stably and reliably controls the automatic emergency braking system during automatic emergency braking, avoiding failures during the emergency braking of the commercial vehicle, and improving safety.

[0058] In the description of this specification, the description with reference to terms such as "one embodiment", "some embodiments", "schematic embodiments", "examples", "specific examples", or "some examples" means that the specific features, substrates, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic expressions of the above terms do not necessarily refer to the same embodiment or example.

[0059] Although the embodiments of the present invention have been shown and described, those of ordinary skill in the art can understand that various changes, modifications, substitutions, and variations can be made to these embodiments without departing from the principles and purposes of the present invention. The scope of the present invention is defined by the claims and their equivalents.

Claims

1. An implementation method for the functional safety of an automatic emergency braking system for commercial vehicles, characterized in that, Comprising: The automatic emergency braking system controller is configured to be of ASIL B level, the boundary system of the automatic emergency braking system is configured to be of ASIL A level, and the brake control module is configured to be of ASIL D level.

2. The implementation method according to claim 1, wherein The hardware parameters of the automatic emergency braking system controller satisfy: the random hardware failure metric is less than 100 FIT, the single-point fault metric is greater than 90%, and the latent fault metric is greater than 60%.

3. The implementation method according to claim 1, characterized in that, The implementation method further comprises: When the boundary system communicates with the automatic emergency braking system controller, end-to-end communication protection is performed between the boundary system and the automatic emergency braking system controller.

4. The implementation method according to claim 3, wherein: The boundary system includes at least one of a body controller, an electro-hydraulic steering gear, a vehicle controller, a transmission controller, and an instrument; The implementation method further comprises at least one of the following: When the body controller sends an enable switch signal of the automatic emergency braking system to the automatic emergency braking system controller, end-to-end communication protection is performed between the body controller and the automatic emergency braking system controller; When the electro-hydraulic steering gear sends steering wheel steering information to the automatic emergency braking system controller, end-to-end communication protection is performed between the electro-hydraulic steering gear and the automatic emergency braking system controller; When the vehicle controller sends engine information and an accelerator pedal opening signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the vehicle controller and the automatic emergency braking system controller; When the transmission controller sends a current gear signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the transmission controller and the automatic emergency braking system controller; When the automatic emergency braking function is triggered, the automatic emergency braking system controller sends a braking request signal and a vehicle dynamic control activation signal to the brake control module, and end-to-end communication protection is performed between the automatic emergency braking system controller and the brake control module; When the automatic emergency braking function is triggered or an alarm is issued, the automatic emergency braking system controller sends an alarm signal to the instrument, and end-to-end communication protection is performed between the automatic emergency braking system controller and the instrument.

5. The implementation method according to claim 4, wherein The boundary system further includes an automatic emergency braking enable switch, and the implementation method further comprises at least one of the following: When the automatic emergency braking enable switch sends an automatic emergency braking enable switch signal to the body controller, end-to-end communication protection is performed between the body controller and the automatic emergency braking enable switch; When the body controller sends the automatic emergency braking enable switch signal to the automatic emergency braking system controller, end-to-end communication protection is performed between the automatic emergency braking system controller and the body controller.

6. A vehicle-level automatic emergency braking control system, characterized in that, Comprising: An automatic emergency braking system controller, the automatic emergency braking system controller being configured to be of ASIL B level; A brake control module, the brake control module being configured to be of ASIL D level; The boundary system is configured at ASIL A level; The braking control module and the boundary system are respectively connected to the controller of the automatic emergency braking control system to implement the method for implementing the functional safety of the automatic emergency braking system for commercial vehicles according to any one of claims 1-5.

7. The vehicle-level automatic emergency braking control system according to claim 6, characterized in that The boundary system includes at least one of a body controller, an electro-hydraulic steering gear, a vehicle controller, a transmission controller, and an instrument panel.

8. The vehicle-level automatic emergency braking control system according to claim 7, wherein The body controller, the electro-hydraulic steering gear, the vehicle controller, the transmission controller, and the instrument panel are respectively connected to the controller of the automatic emergency braking system through CAN communication and perform end-to-end communication protection during communication.

9. The vehicle-level automatic emergency braking control system according to claim 8, wherein The boundary system further includes an automatic emergency braking enable switch controller, and the automatic emergency braking enable switch controller is connected to the body controller through LIN communication and performs end-to-end communication protection during communication.

10. A commercial vehicle, characterized in that, Comprising: An automatic emergency braking enable switch and an automatic emergency braking system; The vehicle-level automatic emergency braking control system according to any one of claims 6-9, and the vehicle-level automatic emergency braking control system is respectively connected to the automatic emergency braking enable switch and the automatic emergency braking system.

Images