Fault processing method, device and system of high-voltage domain control system, vehicle and medium

Abstract

The invention relates to the technical field of domain control integration, and discloses a fault processing method, device and system of a high-voltage domain control system, a vehicle and a medium. All high-voltage part control units integrated by the high-voltage domain control system are divided into a power type control system and a non-power type control system according to rules related to power driving; different numbers of fault levels are set for the power type control system and the non-power type control system respectively, corresponding fault processing strategies are formulated, and when it is detected that the power type control system or the non-power type control system breaks down, corresponding fault processing can be carried out on the power type control system or the non-power type control system. Through the above system integration scheme and implementation of refined fault processing strategies on different fault levels of different types of control units, the effects of performance improvement, light weight, convenient management and control and the like brought by domain control integration can be obtained, the fault probability of vehicle power loss caused by high-voltage domain control can be reduced, and the vehicle safety is improved.

Description

Technical Field

[0001] The present invention relates to the field of domain control integration technology, and in particular to a fault handling method, device, system, vehicle, and medium for a high-voltage domain control system. Background Art

[0002] Domain control integration is one of the important development directions of electric vehicle integration. The domain control device is a device that unifies the management and coordination of a series of control units such as vehicle control unit, power electronic unit, DC / DC converter, battery control unit, etc. according to the functional domain of the whole vehicle, so as to realize the coordinated operation and information interaction of the whole vehicle functions. At present, there are integration methods such as power domain control, body domain control, and charging system domain control. However, they only analyze the benefits brought by domain control integration, such as performance improvement, cost reduction, lightweight, and easy control. They do not consider the potential single point failure risks and vehicle safety challenges due to high integration and system complexity. Summary of the Invention

[0003] In view of this, the present invention provides a fault handling method, device, system, vehicle and medium for a high-voltage domain control system to solve problems such as potential single-point failure risks and vehicle safety challenges that are not considered due to high integration and system complexity.

[0004] In a first aspect, the present invention provides a fault handling method for a high-voltage domain control system, the method comprising: dividing all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems according to the rule of whether each control unit is associated with power drive; setting different numbers of fault levels for the power control system and the non-power control system, respectively, and formulating corresponding fault handling strategies based on the fault severity corresponding to each fault level; monitoring the working status of the power control system and the non-power control system; determining the corresponding fault level when a fault is detected in the power control system and / or the non-power control system; and performing corresponding fault handling on the power control system and / or the non-power control system based on the corresponding fault level.

[0005] The fault handling method of the high-voltage domain control system provided in this embodiment divides all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems according to the rule of whether each control unit is associated with the power drive, and sets different numbers of fault levels for the power control system and the non-power control system respectively. Based on the fault severity corresponding to each fault level, a corresponding fault handling strategy is formulated. When a fault is detected in the power control system and / or the non-power control system, the corresponding fault level can be determined, and based on the determined fault level, corresponding fault handling is performed on the power control system and / or the non-power control system. Through the above-mentioned system integration solution and the implementation of refined fault handling strategies for different fault levels of different categories of control units, not only the performance improvement, lightweight and easy control brought by domain control integration can be obtained, but also the failure probability of high-voltage domain control causing power loss of the whole vehicle can be reduced, thereby improving the safety of the whole vehicle.

[0006] In an optional embodiment, the non-power control system includes a power supply control system and other types of control systems. All high-voltage component control units integrated in the high-voltage domain control system are divided into power control systems and non-power control systems according to the rule of whether each control unit is associated with the power drive, including: based on the rule of whether each control unit is associated with the power drive, all high-voltage component control units integrated in the high-voltage domain control system are classified to obtain power control systems that directly participate in the power drive, power supply control systems that indirectly affect the power drive, and other types of control systems that are not directly involved in the power drive.

[0007] The present invention divides each control unit into power type, power supply type and other types based on the correlation between the control unit and the power drive, which can accurately divide the functional boundaries and improve the system management efficiency.

[0008] In an optional embodiment, the fault levels corresponding to the power control system include at least the first fault, the second fault and the third fault, wherein the fault severity is ranked from large to small as: the first fault, the second fault and the third fault. Based on the corresponding fault levels, corresponding fault processing is performed on the power control system, including: when it is determined that the fault level corresponding to the power control system is the first fault, the whole vehicle is powered off; when it is determined that the fault level corresponding to the power control system is the second fault, the output performance parameters of the power control system are reduced, and a preset self-recovery strategy is executed; when it is determined that the fault level corresponding to the power control system is the third fault, the preset self-recovery strategy is executed.

[0009] The present invention adopts differentiated processing measures for power control systems according to different fault levels, accurately matches the fault severity with the fault processing intensity, and achieves targeted and accurate fault processing.

[0010] In an optional embodiment, the fault level corresponding to the power supply type control system includes at least the fourth fault and the fifth fault, and the fault level corresponding to the other type control system is the sixth fault, wherein the fault severity is sorted from large to small as the fourth fault and the fifth fault, and based on the corresponding fault level, corresponding fault processing is performed on the power supply type control system or other type control system, including: when it is determined that the fault level corresponding to the power supply type control system is the fourth fault or the fifth fault, executing a preset self-recovery strategy; or, when it is determined that the fault level corresponding to the other type control system is the sixth fault, executing a preset self-recovery strategy.

[0011] The present invention sets different fault levels according to the degree of impact on the driving function of the entire vehicle, and sets different fault handling strategies based on the different fault levels to ensure that the handling strategies match the risk severity.

[0012] In an optional embodiment, the method also includes: determining whether the corresponding fault is recovered after executing the preset self-recovery strategy; if the corresponding fault has not yet recovered, increasing the number of self-recovery times currently recorded, and determining whether the increased number of self-recovery times reaches the preset number threshold; if the increased number of self-recovery times does not reach the preset number threshold, re-executing the preset self-recovery strategy, and returning to the step of determining whether the corresponding fault is recovered after executing the preset self-recovery strategy.

[0013] In an optional embodiment, the method further includes: if the increased number of self-recovery times reaches a preset number threshold, for the second fault or the third fault corresponding to the power control system, a prompt message is sent to the user that there is a fault in the power control system; for the fourth fault corresponding to the power supply control system, the output performance parameters of the power supply control system are reduced, and a prompt message is sent to the user that there is a fault in the power supply control system; for the fifth fault corresponding to the power supply control system or the sixth fault corresponding to other types of control systems, the power supply to the power supply and other types of control systems is cut off, and a prompt message is sent to the user that there is a fault in the power supply control system or other types of control systems.

[0014] The present invention implements efficient fault management and control and reduces risks by performing corresponding fault prompt processing when it is determined that the fault has not been recovered.

[0015] In a second aspect, the present invention provides a fault handling device for a high-voltage domain control system, the device comprising: a control unit division module for dividing all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems according to the rule of whether each control unit is associated with power drive; a fault level setting module for setting different numbers of fault levels for the power control system and the non-power control system, respectively, and formulating corresponding fault handling strategies based on the fault severity corresponding to each fault level; a working status monitoring module for monitoring the working status of the power control system and the non-power control system; a fault level determination module for determining the corresponding fault level when a fault is detected in the power control system and / or the non-power control system; a fault handling module for performing corresponding fault handling on the power control system and / or the non-power control system based on the corresponding fault level.

[0016] In a third aspect, the present invention provides a high-voltage domain control system, which includes a high-voltage domain control main control board and all integrated high-voltage component control units; the high-voltage domain control main control board includes: a memory and a processor, the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the computer instructions to execute the fault handling method of the high-voltage domain control system of the above-mentioned first aspect or any corresponding embodiment thereof.

[0017] In an optional embodiment, the high-voltage domain control system integrates high-voltage component units that are not related to power drive on the main control and drive integrated board of the non-power control unit, and the integrated high-voltage component units that are related to power drive are integrated on the drive board of the power control unit, wherein the high-voltage domain control main control board exchanges information with the drive board of the power control unit and the main control and drive integrated board of the non-power control unit respectively, and the system also includes a low-voltage power supply circuit, which provides low-voltage power supply for the high-voltage domain control system, and a power supply switch is provided on the circuit branch of the low-voltage power supply circuit that supplies power to the main control and drive integrated board of the non-power control unit.

[0018] In an optional embodiment, the system also includes a high-voltage power supply circuit, which provides high-voltage power supply to the high-voltage domain control system, and a fuse is provided on the circuit branch of the high-voltage power supply circuit that supplies power to the non-power control unit main control and drive integrated board.

[0019] In a fourth aspect, the present invention provides a vehicle comprising the high-voltage domain control system of the third aspect or any corresponding embodiment thereof.

[0020] In a fifth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the fault handling method for a high-voltage domain control system of the above-mentioned first aspect or any corresponding embodiment thereof.

[0021] The present invention has the following technical effects:

[0022] The fault handling method of the high-voltage domain control system provided in this embodiment divides all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems according to the rule of whether each control unit is associated with the power drive, and sets different numbers of fault levels for the power control system and the non-power control system respectively. Based on the fault severity corresponding to each fault level, a corresponding fault handling strategy is formulated. When a fault is detected in the power control system and / or the non-power control system, the corresponding fault level can be determined, and based on the determined fault level, corresponding fault handling is performed on the power control system and / or the non-power control system. Through the above-mentioned system integration solution and the implementation of refined fault handling strategies for different fault levels of different categories of control units, not only the performance improvement, lightweight and easy control brought by domain control integration can be obtained, but also the failure probability of high-voltage domain control causing power loss of the whole vehicle can be reduced, thereby improving the safety of the whole vehicle. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0024] Figure 1 is a flowchart of a method for troubleshooting a high-voltage domain control system according to an embodiment of the present invention;

[0025] Figure 2 is a flowchart of another method for troubleshooting a high-voltage domain control system according to an embodiment of the present invention;

[0026] Figure 3 This is a structural example diagram of a high-voltage domain control system according to an embodiment of the present invention;

[0027] Figure 4 This is an example diagram of an electrical integration solution for a high-voltage domain control system architecture according to an embodiment of the present invention;

[0028] Figure 5 is an example diagram of fault classification according to an embodiment of the present invention;

[0029] Figure 6 is a flowchart illustrating a method for troubleshooting a power control system according to an embodiment of the present invention;

[0030] Figure 7 is a flowchart of a fault handling method for a non-power control system according to an embodiment of the present invention;

[0031] Figure 8 is a flowchart of a method for troubleshooting a high-voltage domain control system according to an embodiment of the present invention;

[0032] Figure 9 is a structural diagram of a high-voltage domain control system according to an embodiment of the present invention;

[0033] Figure 10 is a schematic structural diagram of a vehicle according to an embodiment of the present invention;

[0034] Figure 11 is a structural block diagram of a fault handling device for a high-voltage domain control system according to an embodiment of the present invention;

[0035] Figure 12 It is a schematic diagram of the hardware structure of the high-voltage domain control main control board according to an embodiment of the present invention. DETAILED DESCRIPTION

[0036] To make the purpose, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative efforts shall fall within the scope of protection of the present invention.

[0037] According to an embodiment of the present invention, an embodiment of a fault handling method for a high-voltage domain control system is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0038] In this embodiment, a method for troubleshooting a high-voltage domain control system is provided, which can be used for a high-voltage domain main control board in the above-mentioned high-voltage domain control system. Figure 1 FIG. 1 is a flow chart of a method for troubleshooting a high-voltage domain control system according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0039] In step S101, all high-voltage component control units integrated in the high-voltage domain control system are divided into power control systems and non-power control systems according to the rule of whether each control unit is associated with power drive.

[0040] The high-voltage domain control system of an embodiment of the present invention integrates new energy vehicle high-voltage component control units such as the main drive motor control unit, the auxiliary drive motor control unit, the generator control unit, the electric compressor control unit, the positive temperature coefficient control unit (PTC control unit), alternating current / direct current (AC / DC), direct current / direct current (DC / DC) and DC / AC (direct current / alternating current), and can be divided into power control systems and non-power control systems according to the rule of whether each control unit is directly related to power drive. Among them, the main drive motor control unit and the auxiliary drive motor control unit are directly involved in the vehicle drive and can be defined as a power control system; the generator control unit, the motor compressor control unit, the PTC control unit, AC / DC, DC / DC and DC / AC are not directly involved in the vehicle power output and can be defined as a non-power control system.

[0041] In step S102 , different numbers of fault levels are set for the power control system and the non-power control system, and corresponding fault handling strategies are formulated based on the fault severity corresponding to each fault level.

[0042] In an embodiment of the present invention, a corresponding number of fault levels can be set for a power control system and a non-power control system respectively. There is no limit on the number of fault levels and the range of fault severity, and they can be set according to the actual fault handling situation and the driving situation of the control system. For example, considering that a fault in the power control system may directly threaten the driving safety of the vehicle, causing the failure of core functions or a significant reduction in operating efficiency, more fault levels and a wider range of fault severity can be divided accordingly. For example, three fault levels can be set for the power control system, which are divided into serious faults, derated faults and general faults, and a corresponding fault handling strategy can be formulated based on each fault level. For example, when a serious fault occurs, the entire vehicle may be unable to drive or key functions may fail, posing a greater safety risk. The vehicle must be immediately powered off and stopped, and corresponding safety measures must be taken. When a derated fault occurs, the vehicle can still continue to drive under certain conditions, and a series of restrictive measures must be taken, and a self-recovery strategy must be implemented, such as reducing the vehicle speed. When a general fault occurs, it has no direct impact on the driving safety of the vehicle, and the vehicle can still drive normally. Accordingly, a self-recovery strategy can be directly adopted. This is just an example.

[0043] The embodiments of the present invention take into account that failures of non-power control systems usually do not directly affect the core functional operation or safety of the entire vehicle, but more affect the comfort and availability of auxiliary functions. Therefore, a simpler fault level and severity can be divided. For example, two fault levels are set for the non-power control system, namely, derating fault and general fault. When a derating fault occurs, the self-recovery strategy can be executed first. If the self-recovery strategy is executed and still cannot be restored, the operation can be reduced, and the user can be prompted that a derating fault has occurred and go to a repair shop for repair as soon as possible. When a general fault occurs, the self-recovery strategy can also be executed. If it still cannot be restored, the power supply of the non-power control unit can be cut off, and the user can be prompted that the function is limited and go to a repair shop for repair as soon as possible. This is just an example.

[0044] Step S103: monitoring the working status of the power control system and the non-power control system.

[0045] The embodiment of the present invention can read the working status of the power control system and the non-power control system, and is used to monitor whether the current working status of each control system is normal, and can determine whether the power control system and / or the non-power control system has a fault based on the read working status.

[0046] Step S104 : When a fault is detected in the power control system and / or the non-power control system, a corresponding fault level is determined.

[0047] When a fault is detected in a power control system and / or a non-power control system, an embodiment of the present invention can extract fault characteristics through the detected working status signal, match the fault characteristics with preset rules / models, and combine with redundancy verification to determine the corresponding fault level. The method of determining the fault level is not limited and is only used as an example.

[0048] Step S105 : performing corresponding fault processing on the power control system and / or the non-power control system based on the corresponding fault level.

[0049] The embodiment of the present invention can perform corresponding fault processing on the power control system and / or the non-power control system based on the determined fault level and the pre-established fault processing strategy.

[0050] The fault handling method of the high-voltage domain control system provided in this embodiment divides all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems according to the rule of whether each control unit is associated with the power drive, and sets different numbers of fault levels for the power control system and the non-power control system respectively. Based on the fault severity corresponding to each fault level, a corresponding fault handling strategy is formulated. When a fault is detected in the power control system and / or the non-power control system, the corresponding fault level can be determined, and based on the determined fault level, corresponding fault handling is performed on the power control system and / or the non-power control system. Through the above-mentioned system integration solution and the implementation of refined fault handling strategies for different fault levels of different categories of control units, not only the performance improvement, lightweight and easy control brought by domain control integration can be obtained, but also the failure probability of high-voltage domain control causing power loss of the whole vehicle can be reduced, thereby improving the safety of the whole vehicle.

[0051] In this embodiment, a method for troubleshooting a high-voltage domain control system is provided, which can be used for a high-voltage domain main control board in the above-mentioned high-voltage domain control system. Figure 2 FIG. 1 is a flow chart of a method for troubleshooting a high-voltage domain control system according to an embodiment of the present invention. Figure 2 As shown, the process includes the following steps:

[0052] In step S201, all high-voltage component control units integrated in the high-voltage domain control system are divided into power control systems and non-power control systems according to the rule of whether each control unit is associated with power drive.

[0053] Specifically, the non-power control system includes a power supply control system and other control systems. Step S201 includes:

[0054] In step S2011, based on the rule of whether each control unit is associated with the power drive, all high-voltage component control units integrated in the high-voltage domain control system are classified to obtain power control systems that directly participate in the power drive, power supply control systems that indirectly affect the power drive, and other types of control systems that are not directly involved in the power drive.

[0055] like Figure 3 As shown, in the embodiment of the present invention, the main drive motor control unit and the auxiliary drive motor control unit can be defined as power control systems, which directly participate in the power drive of the whole vehicle and affect the power output; since the generator control unit and DC / DC are responsible for high-voltage and low-voltage power supply respectively, they will indirectly affect the power output of the whole vehicle, and can be classified as power supply control systems; other high-voltage component control units are grouped as other types of control systems, including the compressor control unit, PTC control unit, AC / DC and DC / AC that are not directly involved in the drive of the whole vehicle, just as an example.

[0056] The present invention divides each control unit into power type, power supply type and other types based on the correlation between the control unit and the power drive, which can accurately divide the functional boundaries and improve the system management efficiency.

[0057] Furthermore, the embodiment of the present invention can integrate the control units of the divided power control system on the power control unit drive board, and integrate the control units of the divided non-power control system on the non-power control unit main control and drive integrated board, such as Figure 4 As shown, the high-voltage domain control system 4 includes a high-voltage domain control main control board 41, a power control unit driver board 42 and a non-power control unit main control and driver integrated board 43, wherein the high-voltage domain control main control board 41 is mainly responsible for control algorithm implementation, communication and coordination, fault monitoring and diagnosis, and power management functions, and is used to execute the fault handling method of the high-voltage domain control system, and the power control unit driver board 42 is responsible for power amplification and drive, motor control, signal conversion and processing, overcurrent protection and other functions; the high-voltage domain control main control board 41 and the power control unit driver board 42 communicate and interact through a signal interaction structure 44, and the high-voltage domain control main control board 41 and the non-power control unit main control and driver integrated board 43 communicate and interact through a signal interaction structure 45.

[0058] The high-voltage domain control system 4 of the embodiment of the present invention also includes a low-voltage power supply circuit 46, which is responsible for providing low-voltage 12V power supply for the high-voltage domain control system, and a power supply switch 47 is provided on the circuit branch for the low-voltage power supply circuit 46 to supply power to the main control and drive integrated board 43 of the non-power control unit. It is used to power on and off the main control and drive integrated board 43 of the non-power control unit separately during global self-recovery, so as to avoid affecting the power supply status of the power control system and causing restart failures and driving safety of the entire vehicle.

[0059] The high-voltage domain control system 4 of the embodiment of the present invention also includes a high-voltage power supply circuit 48, which is responsible for providing high-voltage power supply to the high-voltage domain control system, and a separate fuse 49 is provided on the circuit branch of the high-voltage power supply circuit 48 that supplies power to the main control and drive integrated board 43 of the non-power control unit, which is used to play a protective role when the main control and drive integrated board 43 of the non-power control unit fail, and support the safety of the entire vehicle during global self-recovery of the main control and drive integrated board 43 of the non-power control unit.

[0060] In step S202 , different numbers of fault levels are set for the power control system and the non-power control system, and corresponding fault handling strategies are formulated based on the fault severity corresponding to each fault level.

[0061] Specifically, the fault levels corresponding to the power control system include at least the first fault, the second fault and the third fault, among which the faults are ranked from large to small according to their severity: the first fault, the second fault and the third fault. When it is determined that the fault level corresponding to the power control system is the first fault, the whole vehicle is powered off; when it is determined that the fault level corresponding to the power control system is the second fault, the output performance parameters of the power control system are reduced, and the preset self-recovery strategy is executed; when it is determined that the fault level corresponding to the power control system is the third fault, the preset self-recovery strategy is executed.

[0062] like Figure 5 As shown, the embodiment of the present invention can define the fault levels corresponding to the power control system as three fault levels, including the first fault (i.e., serious fault), which will cause the entire vehicle to be unable to drive normally or the key functions to fail, posing a large safety risk and even endangering the safety of people's lives, and it is necessary to stop the vehicle immediately and take corresponding safety measures; the second fault (i.e., derating fault), which will have a certain impact on the vehicle's driving performance and pose a certain safety hazard, but it can still continue to drive under certain conditions, and the driver is required to take some restrictive measures, such as reducing the speed; the third fault (i.e., general fault), which has no direct impact on the vehicle's driving safety, and the vehicle can still drive normally, but it may affect the driving experience or some comfort functions of the vehicle.

[0063] When the embodiment of the present invention determines that the fault level corresponding to the power control system is a serious fault, the vehicle power-off process can be executed; when the fault level corresponding to the power control system is determined to be a derating fault, the output performance parameters of the power control system are reduced (derating) and a self-recovery strategy is tried. If recovery is not possible, the user is prompted that the system has a corresponding fault and limited functions / performance, and the user is advised to go to a repair shop for inspection as soon as possible; when the fault level corresponding to the power control system is determined to be a general fault, the self-recovery strategy can be tried. If recovery is not possible, the user is prompted that the system has a corresponding fault and the user is advised to go to a repair shop for inspection as soon as possible. This is just an example.

[0064] The present invention adopts differentiated processing measures for power control systems according to different fault levels, accurately matches the fault severity with the fault processing intensity, and achieves targeted and accurate fault processing.

[0065] Specifically, the fault levels corresponding to the power supply control system include at least the fourth fault and the fifth fault, among which the faults are ranked from large to small according to their severity. When it is determined that the fault level corresponding to the power supply control system is the fourth fault or the fifth fault, the preset self-recovery strategy is executed.

[0066] like Figure 5 As shown, the embodiment of the present invention takes into account that the power supply control system will indirectly affect the power output but does not directly affect the operation of the core functions of the entire vehicle. It can be divided into relatively simple fault levels and severity, and correspondingly two fault levels of the power supply control system can be defined, including the fourth fault (derating fault), which will have a certain impact on the vehicle's driving performance and pose certain safety hazards, but the vehicle can still continue to drive under certain conditions; the fifth fault (general fault), which has no direct impact on the vehicle's driving safety, and the vehicle can still drive normally, but may affect the driving experience or some comfort functions of the vehicle, just as an example.

[0067] In an embodiment of the present invention, when it is determined that a derating fault occurs in the power supply category, the non-power control unit main control and the drive integrated board will first perform power-off and power-on again, and execute a global self-recovery strategy. If recovery is not possible, the operation will be derated, and the user will be prompted that the power supply system has a fault and the function / performance is limited. The user is restricted to go to a repair shop for inspection as soon as possible within a certain time. After the time limit is reached, the vehicle power-off process will be executed; when it is determined that a general fault occurs in the power supply category, the non-power control unit main control and the drive integrated board will first perform power-off and power-on again, and execute a global self-recovery strategy. If recovery is not possible, the power supply to the non-power control unit main control and the drive integrated board will be cut off, and the user will be prompted that the function is limited and go to a repair shop for inspection as soon as possible. This is just an example.

[0068] Specifically, the fault level corresponding to the other types of control systems is the sixth fault. When it is determined that the fault level corresponding to the other types of control systems is the sixth fault, the preset self-recovery strategy is executed.

[0069] The embodiment of the present invention takes into account that other types of control systems have a greater impact on the comfort of vehicle driving and the availability of auxiliary functions. The corresponding fault levels that can be defined for other types of control systems only include the sixth fault (general fault), which has no direct impact on the vehicle's driving safety. The vehicle can still drive normally, but it may affect the driving experience or some comfort functions of the vehicle. When it is determined that other types of control systems have general faults, the non-power control unit main control and drive integrated board can first be powered off and powered on again, and a global self-recovery strategy can be executed. If recovery is not possible, the power supply to the non-power control unit main control and drive integrated board will be cut off, and the user will be prompted that the function is limited and to go to a repair shop for repair as soon as possible. This is just an example.

[0070] The present invention sets different fault levels according to the degree of impact on the driving function of the entire vehicle, and sets different fault handling strategies based on the different fault levels to ensure that the handling strategies match the risk severity.

[0071] Step S203: Monitor the working status of the power control system and the non-power control system. Figure 1 Step S103 of the illustrated embodiment will not be described in detail here.

[0072] Step S204: When a fault is detected in the power control system and / or the non-power control system, the corresponding fault level is determined. Figure 1 Step S104 of the illustrated embodiment will not be described in detail here.

[0073] Step S205: Based on the corresponding fault level, perform corresponding fault processing on the power control system and / or non-power control system. Figure 1 Step S105 of the illustrated embodiment will not be described in detail here.

[0074] Furthermore, it is determined whether the corresponding fault is recovered after executing the preset self-recovery strategy; if the corresponding fault is still not recovered, the number of self-recovery times currently recorded is increased, and it is determined whether the increased number of self-recovery times reaches the preset number threshold; if the increased number of self-recovery times does not reach the preset number threshold, the preset self-recovery strategy is re-executed, and the step of determining whether the corresponding fault is recovered after executing the preset self-recovery strategy is returned.

[0075] Furthermore, if the increased number of self-recovery times reaches a preset threshold, for the second fault or the third fault corresponding to the power control system, a prompt message indicating that there is a fault in the power control system is sent to the user; for the fourth fault corresponding to the power supply control system, the output performance parameters of the power supply control system are reduced, and a prompt message indicating that there is a fault in the power supply control system is sent to the user; for the fifth fault corresponding to the power supply control system or the sixth fault corresponding to other types of control systems, the power supply to the power supply and other types of control systems is cut off, and a prompt message indicating that there is a fault in the power supply control system or other types of control systems is sent to the user.

[0076] like Figure 6 As shown, an embodiment of fault diagnosis and processing for a power control system is as follows: an embodiment of the present invention can obtain status signals of each control unit fed back by the power control system to monitor the operating status of each control unit in the power control system (including the operating status of the main drive motor control unit and the operating status of the auxiliary drive motor control unit), and determine whether there is a fault in each control unit in the power control system. If there is a fault, the fault level can be determined. When it is determined that the fault level of the power control system is the first fault, the whole vehicle power-off processing can be directly executed, or, when it is determined that the fault level of the power control system is the second fault or the third fault, a self-recovery strategy is executed, wherein the self-recovery strategy execution method can be to set all request signals of the power control unit to 0, wait 0.1s, and set all enable signals of the power control unit to 0, just as an example, and then it can be determined whether all power control units are in a non-working state.

[0077] In an embodiment of the present invention, if all power control units are in a non-working state, the enable and request signals of all power control units are restored, and then it can be determined whether the fault is recovered after the self-recovery strategy is executed. If the corresponding fault is recovered successfully, the vehicle continues driving and the fault handling process ends. If the corresponding fault is not recovered successfully, or if a control unit is still in a working state after the self-recovery strategy is executed, the currently recorded self-recovery times are increased (for example, the currently recorded self-recovery times are increased by one), and it can be determined whether the currently increased self-recovery times reach a preset times threshold (for example, the threshold is set to 3 times). If the increased self-recovery times do not reach the preset times threshold, the self-recovery strategy is re-executed, and it is determined whether the corresponding fault is recovered after the preset self-recovery strategy is executed, until the increased self-recovery times reach the preset times threshold, or the self-recovery is successful.

[0078] In the embodiment of the present invention, if the number of self-recovery times reaches a preset threshold and the corresponding fault has not been restored, a prompt message can be sent to the user that there is a fault in the power control system and the user should go to a repair shop for inspection as soon as possible.

[0079] like Figure 7As shown, an embodiment of fault diagnosis and processing for non-power control systems is as follows: an embodiment of the present invention can obtain status information of each control unit fed back by the non-power control system to monitor the operating status of each control unit in the non-power control system (including the operating status of the electric compressor, the operating status of the PTC, the operating status of the AC / DC, the operating status of the DC / DC and the DC / AC operating status), and determine whether there is a fault in each control unit in the non-power control system. If there is a fault, the fault level can be determined. When it is determined that the fault level of the power supply type control unit is a derating fault or a general fault, or when it is determined that the fault level of other types of control units is a general fault, a global self-recovery strategy is executed, wherein the self-recovery strategy execution method can be to set all request signals of the non-power control units to 0, wait 0.1s, and set all enable signals of the non-power control units to 0, just as an example, and then it can be determined whether all non-power control units are in a non-working state; if there are non-power control units that are still in a working state, the global self-recovery process is exited.

[0080] In an embodiment of the present invention, if all non-power control units are in a non-working state, the low-voltage power supply of the non-power control units is turned off through the power switch, and after waiting for 0.1s, the low-voltage power supply of the non-power control units is restored, as well as the enable and work request signals of all non-power control units. After the self-recovery strategy is completed, it can be determined whether the corresponding fault is restored. If the corresponding fault is successfully restored, the vehicle continues driving and the fault handling process ends. If the corresponding fault is not restored successfully, the currently recorded self-recovery times can be increased (for example, the currently recorded self-recovery times are increased by one), and it can be determined whether the currently increased self-recovery times reaches a preset number threshold (for example, the threshold is set to 3 times). If the increased self-recovery times does not reach the preset self-recovery times threshold, the self-recovery strategy is tried again, and it is determined whether the corresponding fault is restored after executing the preset self-recovery strategy, until the increased self-recovery times reaches the preset number threshold, or the self-recovery is successful.

[0081] In an embodiment of the present invention, if it is determined that the increased number of self-recovery times reaches a preset threshold and the corresponding fault has not been restored, for the fourth fault of the power supply control system, the output performance parameters of the power supply control system can be reduced (derating processing), and the user is prompted at the same time that there is a fault in the power supply control system and the function / performance is limited, and the user is restricted to go to a repair shop for repair as soon as possible within a certain time. After the restricted time is reached, the whole vehicle power-off process is executed; for the fifth fault of the power supply control system, the power supply of the power supply and other types of control systems can be cut off, and the user is prompted that the function is limited and to go to a repair shop for inspection as soon as possible; for the sixth fault of other types of control systems, the power supply of the power supply and other types of control systems can be switched, and the user is prompted that the function is limited and to go to a repair shop for repair as soon as possible, for example only.

[0082] In a specific embodiment, Figure 8 As shown, the high-voltage domain control main control board can read the working status of each internal control unit and is used to monitor whether the current working status of each control unit is normal. If there is no fault, it can continue to monitor. If there is a fault, it can determine the type of fault, whether it is a power control system fault, a power supply control system fault or other control system fault.

[0083] For power control system faults, the fault level of the control unit can be judged. When it is determined that the fault level corresponding to the power control system is a serious fault, the vehicle power-off process can be executed; when it is determined that the fault level corresponding to the power control system is a derating fault, the output performance parameters of the power control system are reduced (derating) and the self-recovery strategy is tried. After the self-recovery strategy ends, it is judged whether the corresponding fault is restored. If the corresponding fault is not restored, the self-recovery times are increased, and it is judged whether the self-recovery times reach the preset times threshold. If it exceeds the preset times threshold, the user is prompted to repair as soon as possible. If the self-recovery times do not reach the preset times threshold, the self-recovery strategy is continued to be tried; when it is determined that the fault level corresponding to the power control system is a general fault, the self-recovery strategy can be executed, and after the self-recovery strategy ends, it is judged whether the corresponding fault is restored. If the corresponding fault is not restored, the self-recovery times are increased, and it is judged whether the self-recovery times reach the preset times threshold. If it exceeds the preset times threshold, the user is prompted to repair as soon as possible. If the self-recovery times do not reach the preset times threshold, the self-recovery strategy is continued to be tried.

[0084] For power supply control system faults, the fault level of the control unit can be judged. When it is determined that a derating fault occurs in the power supply, the non-power control unit main control and drive integrated board will first power off and power on again, execute the global self-recovery strategy, and after the self-recovery strategy ends, determine whether the corresponding fault has been restored. If the corresponding fault has not been restored, increase the self-recovery times, and determine whether the self-recovery times have reached the preset times threshold. If the preset times threshold is reached, it means that the fault cannot be restored, and then the derating strategy will be executed to prompt the user that there is a power supply control system fault, and limit the user to go to the repair shop for repair as soon as possible within a certain time; when it is determined that a general fault occurs in the power supply, execute the self-recovery strategy, and after the self-recovery strategy ends, determine whether the corresponding fault has been restored. If the corresponding fault has not been restored, increase the self-recovery times, and determine whether the self-recovery times have reached the preset times threshold. If the preset times threshold is reached, it means that the fault cannot be restored, and the user can be prompted to repair it as soon as possible.

[0085] When a general fault occurs in other control systems, a self-recovery strategy is executed. After the self-recovery strategy ends, it is determined whether the corresponding fault has been recovered. If the corresponding fault has not been recovered, the self-recovery count is increased, and it is determined whether the self-recovery count has reached a preset threshold. If the preset threshold is reached, it indicates that the fault cannot be recovered, and the user can be prompted to repair it as soon as possible. Detailed descriptions can be found in the above embodiment and will not be repeated here.

[0086] In this embodiment, a high voltage domain control system is also provided. Figure 9 As shown, the high-voltage domain control system 4 includes a high-voltage domain control main control board 41 and all integrated high-voltage component control units (including high-voltage component control unit 1, high-voltage component control unit 2...high-voltage component control unit n). The high-voltage domain control main control board 41 includes a memory and a processor. The memory and the processor are communicatively connected to each other. Computer instructions are stored in the memory. The processor executes the computer instructions to execute the fault handling method of the high-voltage domain control system.

[0087] Furthermore, the high-voltage domain control system 4 integrates high-voltage component units that are not related to power drive on the main control and drive integrated board 43 of the non-power control unit, and the integrated high-voltage component units that are related to power drive are integrated on the power control unit drive board 42. Among them, the high-voltage domain control main control board exchanges information with the power control unit drive board 42 and the non-power control unit main control and drive integrated board 43 respectively. The system also includes a low-voltage power supply circuit 46, which provides low-voltage power supply for the high-voltage domain control system, and a power supply switch 47 is provided on the circuit branch for the low-voltage power supply circuit 46 to supply power to the main control and drive integrated board of the non-power control unit.

[0088] Furthermore, the high-voltage domain control system also includes a high-voltage power supply circuit 48, which provides high-voltage power to the high-voltage domain control system. A fuse 49 is provided on the branch circuit that supplies power to the main control unit and driver integrated board of the non-power control unit. For detailed descriptions, please refer to the above embodiment and will not be repeated here.

[0089] In this embodiment, a high voltage domain control system is also provided. Figure 10 As shown, the vehicle includes a high voltage domain control system 4 .

[0090] In this embodiment, a fault handling device for a high-voltage domain control system is also provided. The device is used to implement the above-mentioned embodiments and preferred implementation methods. The details that have been described will not be repeated here. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

[0091] This embodiment provides a fault handling device for a high-voltage domain control system. Figure 11 As shown, it includes: a control unit division module 1101, which is used to divide all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems according to the rule of whether each control unit is associated with the power drive; a fault level setting module 1102, which is used to set different numbers of fault levels for the power control system and the non-power control system, and formulate corresponding fault handling strategies based on the fault severity corresponding to each fault level; a working status monitoring module 1103, which is used to monitor the working status of the power control system and the non-power control system; a fault level determination module 1104, which is used to determine the corresponding fault level when a fault is detected in the power control system and / or the non-power control system; a fault handling module 1105, which is used to perform corresponding fault handling on the power control system and / or the non-power control system based on the corresponding fault level.

[0092] In some optional embodiments, the non-power control system includes a power supply control system and other types of control systems, and the control unit division module 1101 includes: a control unit classification unit, which is used to classify all high-voltage component control units integrated in the high-voltage domain control system based on the rule of whether each control unit is associated with the power drive, and obtain power control systems that directly participate in the power drive, power supply control systems that indirectly affect the power drive, and other types of control systems that do not directly participate in the power drive.

[0093] In some optional embodiments, the fault levels corresponding to the power control system include at least the first fault, the second fault and the third fault, wherein the fault severity is ranked from large to small as follows: the first fault, the second fault and the third fault, and the fault level setting module 1102 includes: a power-off processing unit, for executing vehicle power-off processing when it is determined that the fault level corresponding to the power control system is the first fault; a derating processing unit, for reducing the output performance parameters of the power control system and executing a preset self-recovery strategy when it is determined that the fault level corresponding to the power control system is the second fault; and a self-recovery processing unit, for executing a preset self-recovery strategy when it is determined that the fault level corresponding to the power control system is the third fault.

[0094] In some optional embodiments, the fault levels corresponding to the power supply type control system include at least the fourth fault and the fifth fault, and the fault level corresponding to other types of control systems is the sixth fault, wherein the faults are sorted from large to small in order of severity as the fourth fault and the fifth fault, and the fault level setting module 1102 includes: a self-recovery execution unit, which is used to execute a preset self-recovery strategy when it is determined that the fault level corresponding to the power supply type control system is the fourth fault or the fifth fault; or, a self-recovery execution unit, which is used to execute a preset self-recovery strategy when it is determined that the fault level corresponding to other types of control systems is the sixth fault.

[0095] In some optional embodiments, the fault handling device of the high-voltage domain control system includes: a fault recovery judgment module, which is used to judge whether the corresponding fault is recovered after executing the preset self-recovery strategy; a recovery times increasing module, which is used to increase the self-recovery times of the current record if the corresponding fault has not yet recovered, and judge whether the increased self-recovery times reaches the preset times threshold; a self-recovery execution module, which is used to re-execute the preset self-recovery strategy if the increased self-recovery times does not reach the preset times threshold, and return to the step of judging whether the corresponding fault is recovered after executing the preset self-recovery strategy.

[0096] In some optional embodiments, the fault handling device of the high-voltage domain control system includes: a first fault prompt module, which is used to send a prompt message to the user that there is a fault in the power control system for the second fault or the third fault corresponding to the power control system if the increased number of self-recovery times reaches a preset number threshold; a second fault prompt module, which is used to reduce the output performance parameters of the power supply control system for the fourth fault corresponding to the power supply control system, and send a prompt message to the user that there is a fault in the power supply control system; a third fault prompt module, which is used to cut off the power supply to the power supply and other types of control systems for the fifth fault corresponding to the power supply control system or the sixth fault corresponding to other types of control systems, and send a prompt message to the user that there is a fault in the power supply control system or other types of control systems.

[0097] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0098] The fault handling device of the high-voltage domain control system in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0099] The embodiment of the present invention also provides a high voltage domain control main control board having the above Figure 11The fault handling device of the high-voltage domain control system is shown.

[0100] See also Figure 12 , Figure 12 This is a structural diagram of a high-voltage domain control main control board provided by an optional embodiment of the present invention. Figure 12 As shown, the high-voltage domain control main control board includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. The various components are connected to each other using different buses and can be installed on a common main board or in other ways as needed. The processor can process instructions executed within the high-voltage domain control main control board, including instructions stored in or on the memory to display graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple high-voltage domain control main control boards can be connected, and each device provides some of the necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 12 A processor 10 is taken as an example.

[0101] The processor 10 may be a central processing unit, a network processor, or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be an application-specific integrated circuit, a programmable logic device, or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic, or any combination thereof.

[0102] The memory 20 stores instructions that can be executed by at least one processor 10, so as to enable at least one processor 10 to execute the method shown in the above embodiment.

[0103] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and application programs required for at least one function; the data storage area may store data created according to the use of the high-voltage domain control main control board, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely located relative to the processor 10, and these remote memories may be connected to the high-voltage domain control main control board via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0104] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid-state drive; the memory 20 may also include a combination of the above types of memory.

[0105] The high voltage domain control main control board also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 can be connected through a bus or other means. Figure 12 The bus connection is taken as an example.

[0106] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the high-voltage domain control main control board, such as a touch screen, a keypad, a mouse, a trackpad, a touchpad, an indicator stick, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device may be a touch screen.

[0107] The embodiment of the present invention also provides a computer-readable storage medium. The above-mentioned method according to the embodiment of the present invention can be implemented in hardware, firmware, or implemented as a computer code that can be recorded in a storage medium, or implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and downloaded through a network and will be stored in a local storage medium, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor or hardware, the method shown in the above embodiment is implemented.

[0108] A portion of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the form in which the computer program instruction exists in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc. Accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium that can be accessed by the computer.

[0109] Although the embodiments of the present invention have been described with reference to the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention. Such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for troubleshooting a high-voltage domain control system, characterized in that: The method comprises: All high-voltage component control units integrated in the high-voltage domain control system are divided into power control systems and non-power control systems according to whether each control unit is related to the power drive; Setting different numbers of fault levels for the power control system and the non-power control system, and formulating corresponding fault handling strategies based on the fault severity corresponding to each fault level; Monitor the working status of the power control system and the non-power control system; When a fault is detected in the power control system and / or the non-power control system, determining a corresponding fault level; Based on the corresponding fault level, corresponding fault processing is performed on the power control system and / or the non-power control system.

2. The method according to claim 1, characterized in that The non-power control system includes power supply control systems and other control systems. All high-voltage component control units integrated into the high-voltage domain control system are divided into power control systems and non-power control systems according to whether each control unit is related to the power drive, including: Based on the rule of whether each control unit is related to the power drive, all high-voltage component control units integrated in the high-voltage domain control system are classified to obtain power control systems that directly participate in the power drive, power supply control systems that indirectly affect the power drive, and other types of control systems that are not directly involved in the power drive.

3. The method according to claim 1, characterized in that The fault levels corresponding to the power control system include at least a first fault, a second fault, and a third fault, wherein the faults are ranked from greatest to least severe as follows: a first fault, a second fault, and a third fault. Based on the corresponding fault levels, corresponding fault processing is performed on the power control system, including: When it is determined that the fault level corresponding to the power control system is the first fault, the whole vehicle is powered off; When it is determined that the fault level corresponding to the power control system is the second fault, reducing the output performance parameter of the power control system and executing a preset self-recovery strategy; When it is determined that the fault level corresponding to the power control system is the third fault, a preset self-recovery strategy is executed.

4. The method according to claim 2, characterized in that The fault levels corresponding to the power supply control system include at least the fourth fault and the fifth fault, and the fault level corresponding to the other control systems is the sixth fault. The faults are ranked from greatest to least severe as the fourth fault and the fifth fault. Based on the corresponding fault levels, corresponding fault processing is performed on the power supply control system or other control systems, including: When it is determined that the fault level corresponding to the power supply control system is the fourth fault or the fifth fault, a preset self-recovery strategy is executed; or, When it is determined that the fault level corresponding to other types of control systems is the sixth fault, the preset self-recovery strategy is executed.

5. The method according to claim 3 or 4, characterized in that The method further comprises: Determine whether the corresponding fault is recovered after executing the preset self-recovery strategy; If the corresponding fault has not been restored, increase the number of self-recovery times currently recorded, and determine whether the increased number of self-recovery times reaches the preset number threshold; If the increased number of self-recovery times does not reach the preset number threshold, the preset self-recovery strategy is executed again, and the process returns to the step of determining whether the corresponding fault is recovered after executing the preset self-recovery strategy.

6. The method according to claim 5, characterized in that The method further comprises: If the increased number of self-recovery times reaches a preset threshold, a prompt message indicating a fault in the power control system is sent to the user for the second fault or the third fault corresponding to the power control system; For the fourth fault corresponding to the power supply control system, reducing the output performance parameters of the power supply control system and sending a prompt message to the user indicating that the power supply control system has a fault; For the fifth fault corresponding to the power supply control system or the sixth fault corresponding to other types of control systems, the power supply to the power supply and other types of control systems is cut off, and a prompt message is sent to the user that there is a fault in the power supply control system or other types of control systems.

7. A fault handling device for a high-voltage domain control system, characterized in that: The device comprises: The control unit division module is used to divide all high-voltage component control units integrated in the high-voltage domain control system into power control systems and non-power control systems based on whether each control unit is related to the power drive; a fault level setting module, configured to set different numbers of fault levels for the power control system and the non-power control system, and formulate corresponding fault handling strategies based on the fault severity corresponding to each fault level; A working status monitoring module, used to monitor the working status of the power control system and the non-power control system; a fault level determination module, configured to determine a corresponding fault level when a fault is detected in the power control system and / or the non-power control system; The fault processing module is configured to perform corresponding fault processing on the power control system and / or the non-power control system based on the corresponding fault level.

8. A high voltage domain control system, characterized in that: The high-voltage domain control system includes a high-voltage domain control main control board and all integrated high-voltage component control units; the high-voltage domain control main control board includes: a memory and a processor, the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the computer instructions to execute the fault handling method of the high-voltage domain control system described in any one of claims 1 to 6.

9. The system according to claim 8, characterized in that The high-voltage domain control system integrates high-voltage component units that are not related to power drive on the main control and drive integrated board of the non-power control unit, and the integrated high-voltage component units related to power drive are integrated on the drive board of the power control unit. The high-voltage domain control main control board exchanges information with the drive board of the power control unit and the main control and drive integrated board of the non-power control unit respectively. The system also includes a low-voltage power supply circuit, which provides low-voltage power supply for the high-voltage domain control system, and a power supply switch is provided on the circuit branch of the low-voltage power supply circuit that supplies power to the main control and drive integrated board of the non-power control unit.

10. The system according to claim 9, characterized in that The system also includes a high-voltage power supply circuit, which provides high-voltage power supply to the high-voltage domain control system, and a fuse is provided on the circuit branch of the high-voltage power supply circuit that supplies power to the main control and drive integrated board of the non-power control unit.

11. A vehicle, characterized in that: The vehicle includes the high-voltage domain control system according to any one of claims 8 to 10.

12. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the fault handling method for a high-voltage domain control system according to any one of claims 1 to 6.

Images