Vehicle gear control system and gear control method

Abstract

The invention provides a vehicle gear control system and a gear control method. The functional layer comprises a gear control module which is used for generating a first gear signal according to the target gear CAN signal; the function monitoring layer comprises a gear control monitoring module and is used for generating a second gear signal and a comparison result signal of the first gear signal and the second gear signal according to the target gear CAN signal; the interface layer comprises a fault management module and is used for generating a function prohibition indication signal according to the comparison result signal; the control system monitoring layer comprises a program flow monitoring module and is used for monitoring code program running conditions of the function layer, the interface layer and the function monitoring layer; the functional layer further comprises a gear control output signal module which is used for generating a first gear state signal according to the first gear signal and the function prohibition indication signal; the interface layer further comprises an output signal module which is used for outputting a target gear signal according to the first gear state signal and the function prohibition indication signal.

Description

Technical Field

[0001] The present invention relates to the field of vehicle technology, and in particular to a vehicle gear control system and a gear control method. Background Art

[0002] Vehicle gear control is one of the core control functions of an automotive powertrain. Its accuracy and reliability are directly related to vehicle safety. Traditional gear control systems typically use a single control path and lack effective monitoring and troubleshooting mechanisms. When a control module malfunctions, it can lead to incorrect gear shifts, posing a safety hazard.

[0003] With the advancement of automotive electronics, the safety and reliability requirements for gear control systems are becoming increasingly stringent. While existing technologies offer some monitoring mechanisms, these are mostly simple fault detection mechanisms that lack a comprehensive, multi-layered monitoring and fault response system. This makes it difficult to achieve comprehensive safety protection while ensuring control accuracy. Summary of the Invention

[0004] This application provides a vehicle gear control system and a gear control method. The technical solutions adopted in this application are as follows:

[0005] In the first aspect, a vehicle gear control system is provided, comprising: a functional layer, including a gear control module, for generating a first gear signal according to a target gear CAN signal; a functional monitoring layer, including a gear control monitoring module, for generating a second gear signal according to the target gear CAN signal, and a comparison result signal between the first gear signal and the second gear signal; an interface layer, including a fault management module, for generating a function prohibition indication signal according to the comparison result signal, wherein the function prohibition indication signal is used to indicate whether a function prohibition flag is triggered; a control system monitoring layer, including a program flow monitoring module, for monitoring the code program execution status of the functional layer, the interface layer and the function monitoring layer; the functional layer also includes a gear control output signal module, for generating a first gear status signal according to the first gear signal and the function prohibition indication signal; the interface layer also includes an output signal module, for outputting a neutral signal and the first gear signal as a target gear signal when the function prohibition flag is triggered or not triggered, respectively.

[0006] The aforementioned technical approach, combined with the introduction of a multi-layered monitoring and fault management mechanism, establishes two independent and redundant safety shutdown paths, ensuring that the system can reliably place the vehicle in a safe state in the event of a failure at the functional or monitoring layer. This control system effectively identifies and responds to system failures, preventing gear shift errors caused by functional layer anomalies, significantly improving the safety and reliability of the vehicle's gear control system.

[0007] In some embodiments, the interface layer also includes an input signal module for receiving the target gear CAN signal from the CAN transceiver, and sending the target gear CAN signal to the gear control module and the gear control monitoring module; the output signal module is also used to send the target gear signal to the CAN transceiver so that the CAN transceiver controls the gear actuator to perform target gear switching.

[0008] According to the above technical means, by introducing the input signal module at the interface layer, a complete signal input and output link of the vehicle gear control system is constructed; the distribution mechanism constructed based on the connection relationship between the interface layer and the CAN transceiver, the gear control module and the gear control monitoring module ensures that different processing units within the system can synchronously obtain consistent input data, providing a data basis for gear logic processing and monitoring; enabling the system to effectively interact with the external environment, thereby improving the integrity and closed-loop control capability of the gear control system.

[0009] In some embodiments, the fault management module includes a fault management unit and a function disabling unit; the fault management unit is used to: generate a fault indication signal based on the comparison result signal, and the fault indication signal is used to indicate whether there is a fault in the functional layer; the function disabling unit is used to: generate the function disabling indication signal based on the fault indication signal; the fault management unit is also used to: when the comparison result indicates that the first gear signal and the second gear signal are different, determine that there is a fault in the functional layer, store the diagnostic fault code of the functional layer, and send a first fault indication signal to the function disabling module.

[0010] According to the above technical means, the internal structure of the fault management module is refined, and the fault identification, diagnostic information storage and function prohibition signal generation processes are clarified, which significantly improves the system's recognition accuracy and response speed to functional layer faults. By generating a special fault indication signal and storing diagnostic fault codes, the system can more accurately locate the source of the fault and provide a clear basis for subsequent fault tracing and maintenance. The function prohibition unit generates a function prohibition indication signal based on the fault indication signal, ensuring that the triggering of the function prohibition is based on a clear fault state, thereby improving the accuracy and reliability of the function prohibition logic. When the first gear signal and the second gear signal are detected to be inconsistent, the system can promptly determine that there is a fault in the functional layer and quickly start the function prohibition process, thereby effectively reducing potential safety risks and improving the functional safety and reliability of the vehicle gear control system.

[0011] In some embodiments, the function disabling unit is further used to: in response to the first fault indication signal, send a first function disabling indication signal to the gear control output signal module and the output signal module to trigger the function disabling flag; the fault management unit is used to: when the comparison result indication signal shows that the first gear signal and the second gear signal are the same, determine that there is no obstacle in the functional layer, and send a second fault indication signal to the function disabling module; the function disabling unit is further used to: in response to the second fault indication signal, send a second function disabling indication signal to the gear control output signal module and the output signal module to prevent the function disabling flag from being triggered.

[0012] According to the above technical measures, when a functional layer fault occurs, the function disable module can quickly respond to the first fault indication signal, triggering the function disable flag, thereby promptly activating the safety protection mechanism and preventing the output of incorrect gears due to the functional layer fault, significantly improving system safety. At the same time, when the functional layer is operating normally, the fault management module can send a second fault indication signal, which the function disable module responds to, ensuring that the function disable flag is not triggered or is correctly released. This avoids unnecessary safety restrictions, improves system availability, and ensures that the vehicle gear control system maintains high reliability under various operating conditions.

[0013] In some embodiments, the gear control output signal module is also used to: determine the sending priority of the first gear status signal based on the function disable indication signal and the first gear signal; when the function disable indication signal is the first function disable indication signal, determine that the first gear status signal is a neutral signal; when the function disable indication signal is the second function disable indication signal, determine that the first gear status signal is the first gear signal.

[0014] According to the above technical means, the gear control output signal module determines the transmission priority of the first gear state signal based on the function disable indication signal and the first gear signal. When the function disable indication signal is the first function disable indication signal, the first gear state signal is determined to be the neutral signal. When the function disable indication signal is the second function disable indication signal, the first gear state signal is determined to be the first gear signal. This ensures that when the system detects a fault, the vehicle gear can be promptly and effectively switched to a safe neutral state, avoiding potential dangers caused by incorrect gear output. At the same time, when the system is operating normally without faults, it can accurately output the target gear signal calculated by the functional layer, maintaining the normal driving function and control accuracy of the vehicle.

[0015] In some embodiments, the output signal module is further used to: output a neutral signal to the CAN transceiver when the function disable indication signal is the first function disable indication signal; and output the first gear signal to the CAN transceiver when the function disable indication signal is the second function disable indication signal.

[0016] Based on the above technical measures, by forcibly outputting a neutral signal when the function disable indication signal is the first function disable indication signal, and outputting a first gear signal when the function disable indication signal is the second function disable indication signal, this solution provides a clear and redundant final output control mechanism. This ensures that the vehicle gear can be reliably switched to the safe neutral state when the system detects a functional safety fault, significantly improving the overall functional safety and operational reliability of the vehicle gear control system.

[0017] In a second aspect, a vehicle gear control method is provided, the method being applied to a vehicle gear control system, the control system comprising a functional layer, a functional monitoring layer, an interface layer, and a control system monitoring layer, the functional layer comprising a gear control module and a gear control output signal module, the functional monitoring layer comprising a gear control monitoring module, the interface layer comprising a fault management module and an output signal module, the control system monitoring layer comprising a program flow monitoring module, the method comprising: the gear control module generating a first gear signal according to a target gear CAN signal; the gear control monitoring module generating a second gear signal according to the target gear CAN signal, and a comparison result signal between the first gear signal and the second gear signal; the fault management module generates a function disable indication signal according to the comparison result signal, and the function disable indication signal is used to indicate whether the function disable flag is triggered; the gear control output signal module generates a first gear status signal according to the first gear signal and the function disable indication signal; the output signal module outputs a neutral signal and the first gear signal as a target gear signal when the function disable flag is triggered and not triggered respectively; the program flow monitoring module monitors the code program running status of the functional layer, the interface layer and the function monitoring layer.

[0018] In some embodiments, the interface layer also includes an input signal module, and the method also includes: the input signal module receives the target gear CAN signal from the CAN transceiver, and sends the target gear CAN signal to the gear control module and the gear control monitoring module; the output signal module sends the target gear signal to the CAN transceiver so that the CAN transceiver controls the gear actuator to perform target gear switching.

[0019] In some embodiments, the fault management module includes a fault management unit and a function disabling unit, and the method further includes: the fault management unit generates a fault indication signal based on the comparison result signal, and the fault indication signal is used to indicate whether there is a fault in the functional layer; the function disabling unit generates the FIM function disabling indication signal based on the fault indication signal; the fault management unit determines that there is a fault in the functional layer when the comparison result indicates that the first gear signal and the second gear signal are different, stores the diagnostic fault code of the functional layer, and sends a first fault indication signal to the function disabling module.

[0020] In some embodiments, the method also includes: the function prohibition unit sends a first function prohibition indication signal to the gear control output signal module and the output signal module in response to the first fault indication signal to trigger the function prohibition flag; the fault management unit determines that there is no obstacle in the functional layer when the comparison result indicates that the first gear signal and the second gear signal are the same, and sends a second fault indication signal to the function prohibition module; the function prohibition unit sends a second function prohibition indication signal to the gear control output signal module and the output signal module in response to the second fault indication signal to prevent the function prohibition flag from being triggered.

[0021] In some embodiments, the method further includes: the gear control output signal module determines the sending priority of the first gear status signal based on the function disable indication signal and the first gear signal; when the function disable indication signal is the first function disable indication signal, determines that the first gear status signal is a neutral signal; when the function disable indication signal is the second function disable indication signal, determines that the first gear status signal is the first gear signal.

[0022] In some embodiments, the method further includes: the output signal module outputs a neutral signal to the CAN transceiver when the function disable indication signal is the first function disable indication signal; and outputs the first gear signal to the CAN transceiver when the function disable indication signal is the second function disable indication signal. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A schematic diagram of the architecture of a vehicle gear control system provided in one embodiment of the present application;

[0024] Figure 2 A schematic diagram of the architecture of a vehicle gear control system provided in another embodiment of the present application;

[0025] Figure 3A schematic diagram of the architecture of a vehicle gear control system provided in yet another embodiment of the present application;

[0026] Figure 4 A flow chart of a gear control method provided in one embodiment of the present application;

[0027] Figure 5 A flowchart of a gear control method provided in another embodiment of the present application. DETAILED DESCRIPTION

[0028] The following describes the embodiments of the present invention with reference to the accompanying drawings and preferred embodiments. Those skilled in the art will readily appreciate the other advantages and benefits of the present invention from the disclosure herein. The present invention may also be implemented or applied through various other specific embodiments, and the various details in this specification may be modified or altered based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are intended only to illustrate the present invention and are not intended to limit the scope of protection of the present invention.

[0029] It should be noted that the illustrations provided in the following embodiments are merely schematic illustrations of the basic concept of the present invention. Therefore, the illustrations only show components related to the present invention and are not drawn according to the number, shape, and size of components in actual implementation. In actual implementation, the type, quantity, and proportion of each component may be changed arbitrarily, and the component layout may also be more complex.

[0030] Vehicle gear control is one of the core control functions of an automotive powertrain. Its accuracy and reliability are directly related to vehicle safety. Traditional gear control systems typically use a single control path and lack effective monitoring and troubleshooting mechanisms. When a control module malfunctions, it can lead to incorrect gear shifts, posing a safety hazard.

[0031] With the advancement of automotive electronics, the safety and reliability requirements for gear control systems are becoming increasingly stringent. While existing technologies offer some monitoring mechanisms, these are mostly simple fault detection mechanisms that lack a comprehensive, multi-layered monitoring and fault response system. This makes it difficult to achieve comprehensive safety protection while ensuring control accuracy.

[0032] At present, the trend of software-defined cars in new energy intelligent connected vehicles is becoming increasingly stronger. Software architecture design plays an important guiding role in functional safety. The functional safety framework based on the E-GAS three-layer hierarchical architecture has been widely used.

[0033] The Vehicle Control Unit (VCU) is a core component in new energy connected vehicles. During vehicle operation, the VCU is responsible for the normal driving of the vehicle, brake energy feedback, energy management of the vehicle drive system and power battery, network management, fault diagnosis and processing, vehicle status monitoring, etc., thereby ensuring the normal and stable operation of the vehicle with good power, economy and reliability. At the same time, the VCU also includes a gear control function. The specific working principle is: the VCU recognizes the driver's operating intention and makes a judgment based on the movement of the gear lever and related signals, and then controls the vehicle status to be in one of the following gears: parking gear (P gear), reverse gear (R gear), neutral gear (N gear) and forward gear (D gear).

[0034] In order to achieve safe control of vehicle gear positions, a vehicle controller functional safety architecture system is proposed in the relevant technology, including a level 1 functional layer, a level 2 functional monitoring layer and a level 3 controller monitoring layer.

[0035] Among them, the level 1 functional layer is used to complete the execution of the basic functions of the vehicle controller, such as outputting a gear control signal according to the gear signal input by the user to control the vehicle gear.

[0036] The Level 2 function monitoring layer is used to monitor the operating status of the Level 1 function layer in real time to ensure its normal operation; this includes checking and determining safety-related signals during the execution of the basic functions of the Level 1 function layer, as well as monitoring the software architecture during the execution of the basic functions of the Level 1 function layer.

[0037] The Level3 controller monitoring layer is used to monitor whether the basic functions of the Level1 functional layer are running normally, and whether the monitoring programs of the Level2 functional monitoring layer are running normally. When faults occur in the Level1 functional layer and the Level2 functional monitoring layer, Level3 can detect them and take corresponding measures.

[0038] The problems with the above three-layer safety architecture are: first, the above safety architecture can only perform inherent logical judgments, resulting in low flexibility; second, the safety architecture only monitors the operation process, outputs a fault signal and displays an alarm message when a functional layer fails, and does not control the gear output of the vehicle controller. The fault response system is not perfect, so the vehicle still has safety risks.

[0039] In view of the above problems, the embodiments of the present application provide a vehicle gear control system and a gear control method. The technical solution of the application will be described in detail with reference to the accompanying drawings.

[0040] Figure 1Schematic diagram of the vehicle gear control system provided in the embodiment of the present application. Figure 1 The control system architecture includes: a function layer 110 , a function monitoring layer 120 , an interface layer 130 and a control system monitoring layer 140 .

[0041] The functional layer 110 includes a gear control module 111 , which is used to generate a first gear signal according to a target gear CAN signal.

[0042] Functional layer 110 is the core logic of vehicle gear control, which can be implemented using software modules, hardware circuits or a combination of software and hardware, such as through a specific program segment on a microcontroller or a dedicated integrated circuit. Its main function is to generate the first gear signal on the main control path based on the target gear CAN signal. This is the basis for realizing vehicle gear switching and provides the original gear instruction for subsequent monitoring and safety processing.

[0043] In an embodiment of the present application, the target gear CAN signal is used to indicate the gear position desired by the driver. For example, when the driver needs to switch the vehicle from P gear to D gear, he will push the gear lever downward, and a corresponding signal will be generated at this time. This signal is then converted into a signal suitable for transmission on the CAN bus and recorded as the corresponding target gear CAN signal, which indicates that the driver's desired gear position is D gear. Alternatively, as a possible implementation method, the target CAN signal can also be sent by other controllers in the vehicle. For example, when the vehicle uses the intelligent assisted driving function for automatic parking, the intelligent driving domain controller can send the corresponding target gear CAN signal when the gear position needs to be switched from D gear to R gear.

[0044] The function monitoring layer 120 includes a gear control monitoring module 121 for generating a second gear signal and a comparison result signal between the first gear signal and the second gear signal according to the target gear CAN signal.

[0045] Functional monitoring layer 120, a monitoring unit independent of functional layer 110, also receives the same target gear position CAN signal and independently generates a second gear position signal. By comparing the first gear position signal generated by functional layer 110 with the second gear position signal generated by functional layer 110, the correctness of the calculation results of functional layer 110 can be verified in real time and redundantly.

[0046] In an embodiment of the present application, the gear control monitoring module 121 can adopt an algorithm that is the same as or different from the aforementioned gear control module 111 to perform redundant calculations on the gear signal based on the independently received target gear signal; and by comparing the calculated second gear signal with the aforementioned first gear signal, potential calculation deviations can be discovered.

[0047] The interface layer 130 is an intermediate layer that connects the functional modules within the system and the external interface, and is connected to the functional layer 110 and the functional monitoring layer 120 respectively.

[0048] The interface layer 130 includes a fault management module 131, which is used to generate a function prohibition indication signal according to the comparison result signal, and the function prohibition indication signal is used to indicate whether to trigger a function prohibition flag.

[0049] The fault management module 131 is connected to the gear control monitoring module 121 and can receive the comparison result signal provided by the functional monitoring layer 120. When the comparison result shows that there is a difference between the first gear signal and the second gear signal, it indicates that there may be a fault in the functional layer 110. The fault management module 131 generates a fault indication accordingly and decides whether to trigger the safety mechanism.

[0050] The function disable indication signal is generated by the fault management module 131 and is a control signal used to indicate whether it is necessary to enter a safe state. It can be implemented in a variety of different forms of encoding. For example, 0x0 indicates normal, and 0x1 indicates that the function needs to be disabled. It is mainly to clearly inform the relevant modules whether it is necessary to start the function disable flag.

[0051] The function disable flag refers to a state variable or register within the system used to mark whether a function is forcibly disabled. It can be implemented as a bit in memory, a flag register, or a hardware latch. For example, when the system detects a serious fault, the flag is set to force the system and each layer to enter a preset safe state.

[0052] The control system monitoring layer includes a program flow monitoring module 141 for monitoring the code program running status of the function layer 110 , the interface layer 130 and the function monitoring layer 120 .

[0053] The control system monitoring layer 140 is a level that performs macroscopic monitoring of the operating status of the entire software system. The program flow monitoring module 141 can implement monitoring through a program flow monitoring algorithm or a task scheduling monitoring mechanism. For example, by periodically checking the code execution path of each functional module, this is primarily to ensure that the software programs in each functional layer 110, interface layer 130, and functional monitoring layer 120 can operate normally. Alternatively, the program flow monitoring module 141 can be implemented through program counter monitoring, checksum checking, or control flow graph analysis. For example, by detecting whether the program is stuck in an infinite loop or jumps to an incorrect address, this is primarily to monitor the integrity and correctness of the software program and prevent system failures caused by software anomalies.

[0054] The functional layer 110 further includes a gear control output signal module 112 for generating a first gear status signal according to the first gear signal and the function disable indication signal.

[0055] The aforementioned gear control output signal module 112 can be understood as a logic unit within the functional layer 110 responsible for ultimately outputting the gear status signal. As an example, the gear control output signal module 112 can be implemented using a signal arbitrator, priority determination logic, or a state converter. For example, it can adjust the main gear signal based on the function disable indication signal. This is primarily to arbitrate the main gear signal based on the system safety status and generate the final gear status signal.

[0056] For example, when the function disable signal indicates that there is no fault, the gear control output signal module 112 can generate a corresponding gear status signal (for example, D gear) based on the target gear CAN signal; and when the function disable indication signal indicates that there is a fault, the module can forcibly adjust the first gear status signal to a safe state (for example, N gear), thereby providing a safe shutdown path that can respond quickly.

[0057] The interface layer 130 further includes an output signal module 132 for outputting a neutral gear signal and a first gear signal as a target gear signal when the function prohibition flag is triggered or not triggered, respectively.

[0058] The output signal module 132 in the interface layer 130 serves as the final execution unit for the system to output the gear signal to the outside. It can determine the gear signal that is ultimately output to the outside based on the state of the function prohibition flag controlled by the fault management module 131. Specifically, when the function prohibition flag is triggered (i.e., the system detects a fault and needs to enter a safe state), the output signal module 132 forcibly outputs a neutral signal to put the vehicle into a safe state; when the function prohibition flag is not triggered, the normal first gear signal is output as the target gear signal. The control logic of the output signal module 132 provides another independent and redundant safety shutdown path to ensure that when a fault occurs in the functional layer 110 or the monitoring layer, the system can reliably put the vehicle into a safe state (neutral), thereby effectively solving the problem that the traditional system cannot intervene in the gear output when a fault occurs, which poses a safety risk, and greatly improves the safety of vehicle driving.

[0059] The operating logic of the above-mentioned vehicle gear control system provided in the embodiment of the present application revolves around multi-level coordination and redundant safety mechanisms.

[0060] First, when the system receives an external target gear CAN signal, the signal is simultaneously sent to the gear control module 111 in the functional layer 110 and the gear control monitoring module 121 in the functional monitoring layer 120 .

[0061] Based on this signal, the gear control module 111 generates a first gear signal, representing the gear command for the main control path. Simultaneously, the gear control monitoring module 121 independently generates a second gear signal based on the same target gear CAN signal. It then compares the first and second gear signals to generate a comparison result signal. This comparison result signal is then sent to the fault management module 131 in the interface layer 130. Based on this comparison result signal, the fault management module 131 determines whether a fault exists in the functional layer 110 and generates a function disable indication signal accordingly. This signal directly determines whether the function disable flag is triggered, thereby providing instructions for the system to take mandatory safety measures after a fault is detected.

[0062] During system operation, the program flow monitoring module 141 in the control system monitoring layer 140 continuously monitors the code program running status of the function layer 110, the interface layer 130 and the function monitoring layer 120 to ensure the integrity of the software at each layer.

[0063] When the function disable flag is not triggered, the gear control output signal module 112 in the functional layer 110 generates a first gear status signal according to the normal first gear signal, and the output signal module 132 in the interface layer 130 outputs it as a target gear signal.

[0064] When the function disable flag is triggered, meaning the system detects a fault and needs to enter a safe state, the gear control output signal module 112 in the functional layer 110 responds to the function disable indication signal and forcibly adjusts the first gear state signal to a neutral signal. Simultaneously, the output signal module 132 in the interface layer 130 also responds to the triggering of the function disable flag and forcibly outputs a neutral signal. This dual-redundant intervention path ensures that the vehicle enters a safe neutral state even if a fault occurs in the primary functional layer 110, thereby mitigating potential safety risks.

[0065] The aforementioned technical approach, combined with the introduction of a multi-layered monitoring and fault management mechanism, establishes two independent and redundant safety shutdown paths, ensuring that the system can reliably place the vehicle in a safe state in the event of a failure at the functional or monitoring layer. This control system effectively identifies and responds to system failures, preventing gear shift errors caused by functional layer anomalies, significantly improving the safety and reliability of the vehicle's gear control system.

[0066] In some embodiments, see Figure 2The interface layer 130 further includes an input signal module 132 for receiving a target gear position CAN signal from the CAN transceiver and sending the target gear position CAN signal to the gear control module 111 and the gear control monitoring module 121. The output signal module 132 is further used to send the target gear position signal to the CAN transceiver so that the CAN transceiver controls the gear actuator to execute the target gear switching.

[0067] The input signal module 132 is connected to the CAN transceiver, the gear control module 111 and the gear control monitoring module. The connection between the input signal module 132 and the CAN transceiver provides an input channel for the external template gear command, ensuring that the system can receive the gear switching intention sent by the driver or other control systems. Specifically, the target gear CAN signal is received through the vehicle's CAN bus and converted by the CAN transceiver into an internally processable signal. The input signal module 132 receives the target gear CAN signal based on the connection with the CAN transceiver, and distributes it synchronously to the gear control module 111 and the gear control monitoring module, thereby ensuring that the gear control module and the gear control monitoring module can synchronously obtain the same gear instruction.

[0068] At the same time, the output signal module 132 of the interface layer 130 is configured to transmit the final target gear position signal (e.g., the first gear position signal after arbitration) generated by the system's internal processing back to the CAN transceiver via the CAN bus. After receiving the target gear position signal, the CAN transceiver converts it into a physical electrical signal and activates the vehicle's gear actuator. For example, if the target gear position signal indicates "D gear," the CAN transceiver transmits the instruction to the gear actuator, prompting the actuator to shift the vehicle's transmission into forward gear.

[0069] According to the above technical means, by introducing the input signal module 132 in the interface layer 130, a complete signal input and output link of the vehicle gear control system is constructed; the distribution mechanism constructed based on the connection relationship between the interface layer 130 and the CAN transceiver, the gear control module 111 and the gear control monitoring module ensures that different processing units within the system can synchronously obtain consistent input data, providing a data basis for gear logic processing and monitoring; enabling the system to effectively interact with the external environment, thereby improving the integrity and closed-loop control capability of the gear control system.

[0070] In some embodiments, see Figure 3 The fault management module 131 includes a fault management unit 1311 and a function prohibition unit 1312 .

[0071] The fault management unit 1311 is used to generate a fault indication signal based on the comparison result signal, and the fault indication signal is used to indicate whether there is a fault in the functional layer 110; the function prohibition unit 1312 is used to: generate a function prohibition indication signal based on the fault indication signal; the fault management unit 1311 is also used to: when the comparison result indicates that the first gear signal and the second gear signal are different, determine that there is a fault in the functional layer 110, store the diagnostic fault code of the functional layer 110, and send a first fault indication signal to the function prohibition module.

[0072] In the embodiment of the present application, the fault management unit 1311 and the function prohibition unit 1312 can be understood as a logical or physical module inside the fault management module 131.

[0073] The fault management unit 1311 is used to identify, diagnose, and manage faults. It can identify faults based on the comparison result signal provided by the functional layer 110 and generate a corresponding fault indication signal based on the presence or absence of a fault in the functional layer 110. The fault indication signal can be represented by hexadecimal 0s and 1s. For example, 0x1 indicates that a fault has occurred in the functional layer 110, and 0x0 indicates that no fault has occurred in the functional layer 110.

[0074] After determining the fault indication signal, the fault management unit 1311 connects to the function disabling unit 1312 and sends the fault indication signal to the function disabling unit 1312, causing the function disabling unit 1312 to generate a function disabling indication signal based on the fault condition. This signal interacts with the function disabling management (FIM) mechanism to trigger or control the function disabling behavior in the system. Specifically, this signal determines the trigger state of the function disabling flag. When the function disabling flag is triggered, the system can enter a safe state or restrict its functions to prevent unsafe operations.

[0075] When the fault management unit 1311 determines that a fault exists in the functional layer 110, it can generate and store a fault diagnostic code. The fault diagnostic code is used to record and store fault information detected by the system, enabling tracing, interruption, and maintenance after the fault occurs. The fault diagnostic code can be stored in the non-volatile memory of the vehicle controller so that it can be read and analyzed during subsequent diagnostic processes. The fault management unit 1311 is also configured to determine that a fault exists in the functional layer 110 when the comparison result signal indicates that the first gear position signal and the second gear position signal are different, store the diagnostic fault code, and send a first fault indication signal to the function prohibition module to indicate the current fault state.

[0076] According to the above technical means, the internal structure of the fault management module is refined, and the fault identification, diagnostic information storage and function prohibition signal generation processes are clarified, which significantly improves the system's recognition accuracy and response speed to functional layer 110 faults. By generating a special fault indication signal and storing diagnostic fault codes, the system can more accurately locate the source of the fault and provide a clear basis for subsequent fault tracing and maintenance. The function prohibition unit generates a function prohibition indication signal based on the fault indication signal, ensuring that the triggering of the function prohibition is based on a clear fault state, thereby improving the accuracy and reliability of the function prohibition logic. When the first gear signal and the second gear signal are detected to be inconsistent, the system can promptly determine that there is a fault in the functional layer 110 and quickly start the function prohibition process, thereby effectively reducing potential safety risks and improving the functional safety and reliability of the vehicle gear control system.

[0077] In some embodiments, the function disabling unit 1312 is also used to: in response to the first fault indication signal, send a first function disabling indication signal to the gear control output signal module 112 and the output signal module 132 to trigger the function disabling flag; the fault management unit 1311 is also used to: when the comparison result indicates that the first gear signal and the second gear signal are the same, determine that there is no obstacle in the functional layer 110, and send a second fault indication signal to the function disabling module; the function disabling unit 1312 is also used to: in response to the second fault indication signal, send a second function disabling indication signal to the gear control output signal module 112 and the output signal module 132 to prevent the function disabling flag from being triggered.

[0078] Specifically, the function disabling unit 1312 sends a first function disabling indication signal based on the first fault signal, addressing the issue of how the system can quickly respond and enter a safe state when a fault occurs in the functional layer 110. In response to the first fault indication signal issued by the fault management module 131 (which indicates a difference between the first gear signal and the second gear signal, i.e., a fault in the functional layer 110), the function disabling module immediately sends the first function disabling indication signal to the key gear control output signal module 112 and the output signal module 132. This indication signal can clearly trigger the function disabling flag, thereby ensuring that the system can promptly activate safety protection mechanisms when a fault is detected, such as forcing the gear to neutral, thereby avoiding incorrect gear output caused by a fault in the functional layer 110.

[0079] The fault management 1311 unit also determines that there is no obstacle in the functional layer 110 when the comparison result signal indicates that the first gear signal and the second gear signal are the same, and sends a second fault indication signal to the function prohibition unit 1312. The second fault indication signal gives a clear indication of a fault-free state when the functional layer 110 is in normal operating condition.

[0080] In response to the second fault indication signal, the function disabling unit 1312 sends a second function disabling indication signal to the gear control output signal module 112 and the output signal module 132 to prevent the function disabling flag from being triggered. This second function disabling signal ensures that the function disabling flag is not erroneously triggered when the functional layer 110 operates normally or the fault is resolved.

[0081] As a possible implementation manner, the first function disable signal and the second function disable signal may be represented by hexadecimal 0 and 1, that is, the first function disable signal is 0x1, and the second function disable signal is 0x0.

[0082] According to the above technical measures, when a fault occurs in functional layer 110, the function disable module can quickly respond to the first fault indication signal and trigger the function disable flag, thereby promptly activating the safety protection mechanism and preventing the output of an incorrect gear position due to a fault in functional layer 110, significantly improving system safety. Furthermore, when functional layer 110 is operating normally, the fault management module 131 can send a second fault indication signal, which the function disable module responds to, ensuring that the function disable flag is not triggered or is correctly released. This avoids unnecessary safety restrictions, improves system availability, and ensures that the vehicle gear control system maintains high reliability under various operating conditions.

[0083] In some embodiments, the aforementioned gear control output signal module 112 is also used to: determine the sending priority of the first gear status signal based on the function prohibition indication signal and the first gear signal; when the function prohibition indication signal is the first function prohibition indication signal, determine the first gear status signal as a neutral signal; when the function prohibition indication signal is the second function prohibition indication signal, determine the first gear status signal as the first gear signal.

[0084] Among them, determining the sending priority of the first gear status signal refers to the logical process in which the gear control output signal module 112 arbitrates and selects the final output gear status signal according to different input signals (such as the function prohibition indication signal and the first gear signal), which can be implemented by conditional judgment based on preset rules, state machine switching or priority arbitration algorithm.

[0085] If the function disable signal is the aforementioned first function disable signal, it indicates a fault at the current application layer, requiring the activation of a safety mechanism. In this case, regardless of the first gear position signal calculated by the functional layer 110, the gear control output signal module 112 will forcibly set the output gear position to a neutral signal. This measure ensures that in the event of a system failure, the vehicle can quickly enter a safe, non-driving state, avoiding potential dangers caused by incorrect gear output.

[0086] If the function disable signal is the second function disable signal, the gear control output signal module 112 determines the first gear state signal as the first gear state signal. When the system is operating normally and no fault in the functional layer 110 (indicated by the second function disable indication signal) is detected, the gear control output signal module 112 directly outputs the first gear state signal calculated by the functional layer 110 as the first gear state signal. This ensures that the driver's gear operation intentions are accurately executed when the system is operating normally, maintaining the vehicle's normal driving function and control accuracy.

[0087] According to the above technical means, the gear control output signal module determines the transmission priority of the first gear state signal based on the function disable indication signal and the first gear signal. When the function disable indication signal is the first function disable indication signal, the first gear state signal is determined to be the neutral signal. When the function disable indication signal is the second function disable indication signal, the first gear state signal is determined to be the first gear signal. This ensures that when the system detects a fault, the vehicle gear can be promptly and effectively switched to a safe neutral state, avoiding potential dangers caused by incorrect gear output. At the same time, when the system is operating normally without faults, it can accurately output the target gear signal calculated by the functional layer 110, maintaining the normal driving function and control accuracy of the vehicle.

[0088] In some embodiments, the output signal module 132 is further used to: output a neutral signal to the CAN transceiver when the function disable indication signal is a first function disable signal, and output a first gear signal to the CAN transceiver when the function disable indication signal is a second function disable signal.

[0089] When the function disable indication signal is the first function disable indication signal, the output signal module 132 will output a neutral signal to the CAN transceiver. Even if the gear control output signal module 112 inside the functional layer 110 also indicates neutral, the output signal module 132 of the interface layer 130 provides an independent, redundant path to ensure the sending of the neutral signal, thereby enhancing the safety of the system in the event of a fault.

[0090] On the other hand, when the function disable indication signal is the second function disable indication signal, the normal gear signal (first gear signal) generated by the functional layer 110 can be accurately sent to the CAN transceiver through the output signal module 132. This mechanism ensures that in a fault-free state, the system can normally perform gear shifts according to the driver's intention or control logic, maintaining the normal operation of the vehicle.

[0091] Based on the above technical measures, by forcibly outputting a neutral signal when the function disable indication signal is the first function disable indication signal, and outputting a first gear signal when the function disable indication signal is the second function disable indication signal, this solution provides a clear and redundant final output control mechanism. This ensures that the vehicle gear can be reliably switched to the safe neutral state when the system detects a functional safety fault, significantly improving the overall functional safety and operational reliability of the vehicle gear control system.

[0092] Combined with the previous article Figure 1-Figure 3 Having described the system embodiment of the present application, the following will describe the device embodiment of the present application in detail with reference to the accompanying drawings. It should be understood that the description of the device embodiment corresponds to the system embodiment in the foregoing text, and therefore, for parts not described in detail, reference can be made to the system embodiment in the foregoing text.

[0093] Figure 4 This is a schematic flow chart of a vehicle gear control method according to one embodiment of the present application. This control method is applied to a vehicle gear control system. The control system comprises a functional layer, a functional monitoring layer, an interface layer, and a control system monitoring layer. The functional layer comprises a gear control module and a gear control output signal module. The functional monitoring layer comprises a gear control monitoring module. The interface layer comprises a fault management module and an output signal module. The control system monitoring layer comprises a program flow monitoring module. This control system may be the control system 100 described in any of the preceding embodiments. Figure 4 The method includes steps S410-S460.

[0094] In step S410 , the gear control module generates a first gear signal according to the target gear CAN signal.

[0095] In step S420 , the gear control monitoring module generates a second gear signal and a comparison result signal between the first gear signal and the second gear signal according to the target gear CAN signal.

[0096] In step S430 , the fault management module generates a function disable indication signal according to the comparison result signal, where the function disable indication signal is used to indicate whether the function disable flag is triggered.

[0097] In step S440 , the gear control output signal module generates a first gear status signal according to the first gear signal and the function disable indication signal.

[0098] In step S450 , the output signal module outputs a neutral signal and a first gear signal as the target gear signal when the function prohibition flag is triggered or not triggered, respectively.

[0099] In step S460, the program flow monitoring module monitors the code program running status of the function layer, the interface layer and the function monitoring layer.

[0100] In some embodiments, the interface layer further includes an input signal module, and the method further includes:

[0101] The input signal module receives the target gear position CAN signal from a CAN transceiver, and sends the target gear position CAN signal to the gear control module and the gear control monitoring module.

[0102] The output signal module sends the target gear signal to the CAN transceiver, so that the CAN transceiver controls the gear actuator to perform target gear switching.

[0103] In some embodiments, the fault management module includes a fault management unit and a function disabling unit, and the method further includes:

[0104] The fault management unit generates a fault indication signal according to the comparison result signal, and the fault indication signal is used to indicate whether the functional layer has a fault.

[0105] The function prohibition unit generates the FIM function prohibition indication signal according to the fault indication signal.

[0106] When the comparison result indicates that the first gear position signal and the second gear position signal are different, the fault management unit determines that a fault exists in the functional layer, stores a diagnostic fault code of the functional layer, and sends a first fault indication signal to the function disabling module.

[0107] In some embodiments, the method further comprises:

[0108] The function prohibition unit sends a first function prohibition indication signal to the gear control output signal module and the output signal module in response to the first fault indication signal to trigger the function prohibition flag.

[0109] When the comparison result indicates that the first gear position signal and the second gear position signal are the same, the fault management unit determines that there is no failure in the functional layer and sends a second fault indication signal to the function prohibition module.

[0110] The function prohibition unit sends a second function prohibition indication signal to the gear control output signal module and the output signal module in response to the second fault indication signal, so that the function prohibition flag is not triggered.

[0111] In some embodiments, the method further comprises:

[0112] The gear control output signal module determines a sending priority of the first gear status signal according to the function prohibition indication signal and the first gear signal.

[0113] When the function prohibition indication signal is the first function prohibition indication signal, it is determined that the first gear state signal is a neutral signal.

[0114] When the function prohibition indication signal is the second function prohibition indication signal, the first gear position state signal is determined to be the first gear position signal.

[0115] In some embodiments, the method further comprises:

[0116] The output signal module outputs a neutral signal to the CAN transceiver when the function disable indication signal is the first function disable indication signal.

[0117] When the function disable indication signal is the second function disable indication signal, the first gear position signal is output to the CAN transceiver.

[0118] The following combination Figure 5 The gear control method provided in the embodiment of the present application is described in more detail. Figure 5 This description is based on the interaction between the various modules of the control system. The control system includes a functional layer, a functional monitoring layer, an interface layer, and a control system monitoring layer. The functional layer includes a gear control module and a gear control output signal module. The functional monitoring layer includes a gear control monitoring module. The interface layer includes an input signal module, a fault management module (including a fault management unit and a function disable unit), and an output signal module. The control system monitoring layer includes a program flow monitoring module. This control system can be the control system described in the previous embodiment.

[0119] Figure 5 The method includes steps S501-S520.

[0120] Step S501: the interface layer input signal module receives a target gear position CAN signal from a CAN transceiver.

[0121] Step S502: The input signal module sends a target gear position CAN signal to the functional layer gear position control module.

[0122] Step S503: the input signal module sends a target gear position CAN signal to the gear position control monitoring module of the functional monitoring layer.

[0123] Step S504: The gear control module generates a first gear signal according to the target gear CAN signal.

[0124] Step S505: The gear control module sends a first gear signal to the gear control and monitoring module.

[0125] Step S506: The gear control module sends a first gear signal to the gear control output signal module.

[0126] Step S507: The gear control monitoring module generates a second gear signal according to the target gear CAN signal.

[0127] In step S508 , the gear control monitoring module compares the first gear signal and the second gear signal to generate a comparison result signal.

[0128] Step S509: the gear control monitoring module sends a comparison result signal to the fault management unit.

[0129] Step S510: The fault management unit determines a fault indication signal according to the comparison result signal.

[0130] Step S511: The fault management unit sends a fault indication signal to the function prohibition unit.

[0131] Step S512: The function disabling unit generates a function disabling indication signal according to the fault indication signal.

[0132] Step S513: the function prohibition unit sends a function prohibition instruction signal to the gear control output signal module.

[0133] Step S514: the function prohibition unit sends a function prohibition indication signal to the output signal module.

[0134] Step S515 : The gear control output signal determines the signal sending priority and the first gear status signal according to the function prohibition indication signal and the first gear signal.

[0135] Step S516: The gear control output signal module sends a first gear status signal to the output signal module.

[0136] Step S517 : the output signal module arbitrates according to the first gear status signal and the function disable indication signal to generate a target gear signal.

[0137] Step S518: the output signal module sends the target gear position signal to the CAN transceiver.

[0138] Step S519: During the execution of the above steps, the program flow monitoring module monitors the code program execution status of the function layer, the interface layer and the function monitoring layer.

[0139] The above method further includes an optional step S520 , when the comparison result signal in step S509 indicates that the first gear position signal is different from the second gear position signal, a functional layer fault is determined and a fault code DTC is stored.

[0140] The following is a further description of the technical solution provided by this application. The technical solution of this application provides a functional safety monitoring software architecture and algorithm for the gear control function. The software architecture of the gear control function includes a Level 1 functional layer, a custom interface layer, a Level 2 functional monitoring layer, and a Level 3 controller monitoring layer, which are described in detail as follows:

[0141] Level 1 functional layer: Functional safety level ASIL QM, including the gear control module and the gear control output signal module. The gear control module is responsible for the core logic and basic algorithm of the gear control function; the gear control output signal module is responsible for sending the gear control signal and performing signal arbitration priority processing based on the function disable flag.

[0142] Customized interface layer: Functional safety level ASIL QM, including input signal module, fault management module, function disable module, and output signal module. The input signal module is responsible for receiving CAN signals; the fault management module is responsible for fault status management and DTC storage; the function disable module is responsible for sending the FIM function disable flag, that is, performing fault post-processing and triggering the function disable flag based on the fault status; the output signal module is responsible for sending the gear control CAN signal.

[0143] Level 2 functional monitoring layer: Functional safety level ASIL C, including the gear control monitoring module. The gear control monitoring module is responsible for monitoring the calculation results of the important output signals of the Level 1 gear control module and sending the monitoring result signals to the fault management module of the customized interface layer.

[0144] Level 3 controller monitoring layer: Functional safety level ASIL C, including program flow monitoring module, which is mainly responsible for monitoring whether the code programs of Level 1 functional layer and Level 2 functional monitoring layer are running normally.

[0145] The gear control method based on the above software architecture includes:

[0146] In the first step, the input signal module (custom interface layer) receives the target gear CAN signal, converts the signal name, and sends the target gear signal to the gear control module (Level 1) and the gear control monitoring module (Level 2). At the same time, the program flow monitoring module (Level 3) starts monitoring whether the code programs in Level 1, the custom interface layer, and Level 2 are running normally.

[0147] In the second step, the gear control module (Level 1) calculates the L1 vehicle gear position based on the received target gear signal and sends the L1 vehicle gear position signal to the gear control monitoring module (Level 2) and the gear control output signal module (Level 1). Simultaneously, the gear control monitoring module (Level 2) calculates the L2 vehicle gear position based on the received target gear signal and sends a signal comparing the L1 and L2 vehicle gear positions to the fault management module (custom interface layer).

[0148] In the third step, the fault management module (custom interface layer) stores the DTC fault code based on the received comparison result signal. If the comparison result signal = 0x1, it will send the current fault signal to the function disable module (custom interface layer). The function disable module (custom interface layer) sends the FIM function disable signal to the gear control output signal module (Level 1) and the output signal module (custom interface layer) based on the received current fault signal status. If the current fault signal = 0x1, it will send the FIM function disable signal to the gear control output signal module (Level 1) and the output signal module (custom interface layer).

[0149] In the fourth step, the gear control output signal module (Level 1) determines the priority of sending the vehicle gear signal based on the received FIM function prohibition signal and L1 vehicle gear signal; when the FIM function prohibition signal = 0x1, the L1 vehicle gear status signal = N gear is sent to the output signal module (customized interface layer); when the FIM function prohibition signal = 0x0, the L1 vehicle gear status signal = L1 vehicle gear is sent to the output signal module (customized interface layer).

[0150] In the fifth step, the output signal module (customized interface layer) arbitrates the vehicle gear CAN signal according to the received FIM function disable signal and L1 vehicle gear status signal; when the FIM function disable signal = 0x1, the L1 vehicle gear status signal = N gear is sent to the CAN transceiver; when the FIM function disable signal = 0x0, the L1 vehicle gear CAN signal = L1 vehicle gear status is sent to the CAN transceiver.

[0151] The technical effects of the above-mentioned technical solution provided in this application are: establishing a software architecture for gear control functions that meets the functional safety ASIL level; the Level 1 functional layer, customized interface layer and Level 2 functional monitoring layer are all developed in accordance with the Simulink graphical modeling method, which is simple, easy to understand and easy to maintain; according to the development requirements of functional safety FuSa, ASIL levels are assigned to each software layer and software module of the architecture; when Level 2 monitors a functional safety fault, dual redundant measures (Level 1 gear control output signal module, customized interface layer output signal module) are used to intervene in the vehicle gear CAN signal transmission.

[0152] An embodiment of the present application provides a vehicle, including the vehicle gear control system described in any of the above embodiments.

[0153] An embodiment of the present application provides a computer storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors to implement the steps of the method of any of the above embodiments.

[0154] It should be noted that the description of the above storage medium and device embodiments is similar to the description of the above method embodiments and has similar beneficial effects as the method embodiments. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0155] The processor may be at least one of an application specific integrated circuit (ASIC), a digital signal processor (DSP), a digital signal processing device (DSPD), a programmable logic device (PLD), a field programmable gate array (FPGA), a central processing unit (CPU), a controller, a microcontroller, and a microprocessor. It is understood that the electronic device that implements the functions of the processor may also be other electronic devices, which are not specifically limited in the embodiments of the present application.

[0156] The computer storage medium / memory may be a read-only memory, a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface mount memory, an optical disc, or a compact disc read-only memory (CD ROM).

[0157] An embodiment of the present application provides a computer program, including computer-readable code. When the computer-readable code runs in an electronic device, a processor in the electronic device executes some or all of the steps for implementing the above method.

[0158] An embodiment of the present application provides a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program, and when the computer program is read and executed by a computer, implements some or all of the steps in the above method. The computer program product can be implemented specifically through hardware, software, or a combination thereof. In some embodiments, the computer program product is specifically embodied as a computer storage medium. In other embodiments, the computer program product is specifically embodied as a software product, such as a software development kit (SDK), etc.

[0159] It should be understood that "one embodiment" or "an embodiment" mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned steps / processes does not mean the order of execution, and the execution order of each step / process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application. The above-mentioned serial numbers of the embodiments of the present application are for description only and do not represent the advantages and disadvantages of the embodiments.

[0160] It should be noted that, in this document, the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus comprising a series of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or apparatus comprising the element.

[0161] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of units is merely a logical function division. In actual implementation, there may be other division methods, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0162] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed across multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the scheme of this embodiment.

[0163] In addition, all functional units in the embodiments of the present application can be integrated into one processing unit, or each unit can be a separate unit, or two or more units can be integrated into one unit; the above-mentioned integrated units can be implemented in the form of hardware or in the form of hardware plus software functional units.

[0164] Those skilled in the art will understand that all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: mobile storage devices, read-only memories (ROM), magnetic disks or optical disks, and other media that can store program codes.

[0165] Alternatively, if the above-mentioned integrated unit of the present application is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can essentially or in other words, the part that contributes to the relevant technology can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for enabling an on-board terminal (which can be a personal computer, server, or network device, etc.) to execute all or part of the methods of each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROMs, magnetic disks or optical disks.

[0166] The above are only implementation methods of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with this technical field can easily think of changes or replacements within the technical scope disclosed in this application, which should be covered by the protection scope of the present application.

Claims

1. A vehicle gear control system, characterized in that: include; The functional layer includes a gear control module for generating a first gear signal according to a target gear CAN signal; a function monitoring layer, comprising a gear control monitoring module, configured to generate a second gear position signal and a comparison result signal between the first gear position signal and the second gear position signal according to the target gear position CAN signal; The interface layer includes a fault management module, which is used to generate a function prohibition indication signal according to the comparison result signal, and the function prohibition indication signal is used to indicate whether to trigger a function prohibition flag bit; The control system monitoring layer includes a program flow monitoring module for monitoring the code program running status of the functional layer, the interface layer and the functional monitoring layer; The functional layer further includes a gear control output signal module, configured to generate a first gear status signal according to the first gear signal and the function prohibition indication signal; The interface layer further includes an output signal module for outputting a neutral signal and the first gear signal as a target gear signal when the function prohibition flag is triggered or not triggered, respectively.

2. The vehicle gear control system according to claim 1, characterized in that: The interface layer further comprises an input signal module for receiving the target gear position CAN signal from a CAN transceiver, and sending the target gear position CAN signal to the gear control module and the gear control monitoring module; The output signal module is further configured to send the target gear signal to the CAN transceiver, so that the CAN transceiver controls the gear actuator to execute target gear switching.

3. The vehicle gear control system according to claim 2, characterized in that: The fault management module includes a fault management unit and a function prohibition unit; The fault management unit is configured to generate a fault indication signal according to the comparison result signal, wherein the fault indication signal is configured to indicate whether the functional layer has a fault; The function prohibition unit is used to: generate the function prohibition indication signal according to the fault indication signal; The fault management unit is further configured to: When the comparison result indicates that the first gear position signal and the second gear position signal are different, it is determined that a fault exists in the functional layer, a diagnostic fault code of the functional layer is stored, and a first fault indication signal is sent to the function prohibition module.

4. The vehicle gear control system according to claim 3, characterized in that: The function prohibition unit is further configured to: in response to the first fault indication signal, send a first function prohibition indication signal to the gear control output signal module and the output signal module to trigger the function prohibition flag; The fault management unit is configured to: determine that there is no failure in the functional layer when the comparison result indicates that the first gear signal and the second gear signal are the same, and send a second fault indication signal to the function prohibition module; The function prohibition unit is further configured to: in response to the second fault indication signal, send a second function prohibition indication signal to the gear control output signal module and the output signal module, so that the function prohibition flag is not triggered.

5. The vehicle gear control system according to claim 4, characterized in that: The gear control output signal module is further configured to: determine a sending priority of the first gear status signal according to the function prohibition indication signal and the first gear signal; When the function prohibition indication signal is the first function prohibition indication signal, determining that the first gear state signal is a neutral signal; When the function prohibition indication signal is the second function prohibition indication signal, the first gear position state signal is determined to be the first gear position signal.

6. The vehicle gear control system according to claim 4 or 5, characterized in that: The output signal module is further used for: When the function disable indication signal is the first function disable indication signal, outputting a neutral signal to the CAN transceiver; When the function disable indication signal is the second function disable indication signal, the first gear position signal is output to the CAN transceiver.

7. A vehicle gear control method, characterized in that: The method is applied to a vehicle gear control system, the control system comprising a functional layer, a functional monitoring layer, an interface layer, and a control system monitoring layer. The functional layer comprises a gear control module and a gear control output signal module. The functional monitoring layer comprises a gear control monitoring module. The interface layer comprises a fault management module and an output signal module. The control system monitoring layer comprises a program flow monitoring module. The method comprises: The gear control module generates a first gear signal according to the target gear CAN signal; The gear control monitoring module generates a second gear signal and a comparison result signal between the first gear signal and the second gear signal according to the target gear CAN signal; The fault management module generates a function prohibition indication signal according to the comparison result signal, wherein the function prohibition indication signal is used to indicate whether a function prohibition flag is triggered; The gear control output signal module generates a first gear status signal according to the first gear signal and the function prohibition indication signal; The output signal module outputs a neutral signal and the first gear signal as a target gear signal when the function prohibition flag is triggered and not triggered respectively; The program flow monitoring module monitors the code program running status of the functional layer, the interface layer and the functional monitoring layer.

8. The control method according to claim 7, characterized in that: The interface layer further includes an input signal module, and the method further includes: The input signal module receives the target gear CAN signal from the CAN transceiver, and sends the target gear CAN signal to the gear control module and the gear control monitoring module; The output signal module sends the target gear signal to the CAN transceiver, so that the CAN transceiver controls the gear actuator to perform target gear switching.

9. The control method according to claim 8, characterized in that: The fault management module includes a fault management unit and a function prohibition unit, and the method further includes: The fault management unit generates a fault indication signal according to the comparison result signal, wherein the fault indication signal is used to indicate whether there is a fault in the functional layer; The function prohibition unit generates the function prohibition indication signal according to the fault indication signal; When the comparison result indicates that the first gear position signal and the second gear position signal are different, the fault management unit determines that a fault exists in the functional layer, stores a diagnostic fault code of the functional layer, and sends a first fault indication signal to the function disabling module.

10. The control method according to claim 9, characterized in that: The method further comprises: The function prohibition unit sends a first function prohibition indication signal to the gear control output signal module and the output signal module in response to the first fault indication signal to trigger the function prohibition flag; The fault management unit determines that there is no failure in the functional layer when the comparison result indicates that the first gear signal and the second gear signal are the same, and sends a second fault indication signal to the function prohibition module; The function prohibition unit sends a second function prohibition indication signal to the gear control output signal module and the output signal module in response to the second fault indication signal, so that the function prohibition flag is not triggered.

11. The control method according to claim 10, characterized in that: The method further comprises: The gear control output signal module determines the sending priority of the first gear status signal according to the function prohibition indication signal and the first gear signal; When the function prohibition indication signal is the first function prohibition indication signal, determining that the first gear state signal is a neutral signal; When the function prohibition indication signal is the second function prohibition indication signal, the first gear position state signal is determined to be the first gear position signal.

12. The control method according to claim 10 or 11, characterized in that: The method further comprises: The output signal module outputs a neutral signal to the CAN transceiver when the function disable indication signal is the first function disable indication signal; When the function disable indication signal is the second function disable indication signal, the first gear position signal is output to the CAN transceiver.

Images