High-voltage control method and system for fuel cell vehicle

Abstract

The invention provides a fuel cell vehicle high-voltage control method and system. The method comprises the steps that an FCU main core, an FCU standby core and a target controlled module continuously detect whether a VCU is in a reset state or not in the vehicle driving process; when the VCU is in the reset state, the FCU main core and the target controlled module maintain the control state of the previous stage; the FCU standby core periodically sends a first message to the VCU when the VCU is in the reset state, and the first message is used for controlling the VCU to skip a high-voltage power-on process and continue to send a control instruction message at the last moment before resetting after the VCU is successfully reset. By means of the method and device, in the VCU resetting period, the vehicle can keep the previous driving state, and normal high-pressure control can be rapidly recovered after VCU resetting succeeds, so that the influence of VCU resetting on the driving safety of the whole vehicle is reduced.

Description

Technical Field

[0001] The present application relates to the field of vehicle control technology, and in particular to a high-voltage control method and system for fuel cell vehicles. Background Art

[0002] As a sub-segment of new energy vehicles, fuel cell vehicles are mainly powered by fuel cell stacks. The hydrogen reaction is controlled by the FCU (fuel cell controller) to convert it into electricity, and the voltage level of the vehicle's power system is matched through the DCDC (direct current-direct current converter) boost module. The FCU interacts with the VCU (vehicle controller) to achieve this. The VCU feeds back the vehicle's power demand to the FCU to achieve vehicle power control. At the same time, the high-voltage management part of each link of the vehicle is still controlled by the VCU.

[0003] The VCU (Voltage Control Unit) is still the primary controller for the vehicle's high voltage in existing fuel cell vehicles. However, this solution has significant flaws. In practice, due to environmental factors, electromagnetic interference, potential software vulnerabilities, and internal chip issues, the VCU may occasionally reset, leading to communication loss. This communication loss causes the high-voltage components to fail to receive signals, rendering the entire system uncontrollable. This can lead to abnormal disconnection of the vehicle's high voltage, resulting in power loss and compromising vehicle safety. Summary of the Invention

[0004] The present application provides a high-voltage control method and system for a fuel cell vehicle, which can solve the technical problem in the prior art that VCU reset affects the driving safety of the entire vehicle.

[0005] In a first aspect, an embodiment of the present application provides a high-voltage control method for a fuel cell vehicle, the high-voltage control method for a fuel cell vehicle comprising: The FCU main core, FCU backup core and target controlled module continuously detect whether the VCU is in the reset state during vehicle driving; The FCU main core and the target controlled module maintain the control state of the previous stage while the VCU is in the reset state; When the VCU is in the reset state, the FCU standby core periodically sends a first message to the VCU, wherein the first message is used to control the VCU to skip the high-voltage power-on process after the reset is successful and continue to send the control instruction message at the last moment before the reset.

[0006] Furthermore, in one embodiment, the step of maintaining the control state of the previous stage by the FCU main core and the target controlled module while the VCU is in the reset state includes: When the VCU is in the reset state, if the FCU main core and the target controlled module do not receive any new control instruction message, they will maintain the control state of the previous stage. The fuel cell vehicle high voltage control method further includes: When the duration of the VCU single reset state lasts longer than a first preset time, the FCU standby core determines that the VCU has a serious fault; After determining that a serious fault has occurred in the VCU, the FCU backup core stops sending the first message to the VCU, periodically sends the second message to the VCU, and replaces the VCU in sending the third message, prompting the driver to perform parking control and requesting high voltage power to be disconnected after parking is completed. The second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

[0007] Furthermore, in one embodiment, the fuel cell vehicle high voltage control method further includes: The FCU spare core counts moderate faults. If the moderate fault count is greater than the preset number, the VCU is judged to have a serious fault. Among them, if the duration of the VCU single reset state is greater than the second preset duration and less than or equal to the first preset duration, it is considered a moderate fault.

[0008] Furthermore, in one embodiment, the step of maintaining the control state of the previous stage by the FCU main core and the target controlled module while the VCU is in the reset state includes: When the VCU is in the reset state, if the FCU main core and the target controlled module do not receive any new control instruction message, they will maintain the control state of the previous stage. The fuel cell vehicle high voltage control method further includes: The FCU standby core counts moderate faults. If the moderate fault count exceeds a preset number, the VCU is considered to have a serious fault. If the duration of a single VCU reset state is greater than a second preset duration and less than or equal to a first preset duration, it is considered a moderate fault. After determining that a serious fault has occurred in the VCU, the FCU backup core stops sending the first message to the VCU, periodically sends the second message to the VCU, and replaces the VCU in sending the third message, prompting the driver to perform parking control and requesting high voltage power to be disconnected after parking is completed. The second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

[0009] Furthermore, in one embodiment, the first preset time length is 10 seconds, the second preset time length is 5 seconds, and the preset number of times is 10 times.

[0010] Furthermore, in one embodiment, the fuel cell vehicle high voltage control method further includes: After the FCU backup core determines that a serious fault has occurred in the VCU, it records the serious fault time; The FCU backup core detects whether the software and hardware version of the VCU is updated after a serious fault time in the high-voltage power-on process, and terminates the high-voltage power-on process if the software and hardware version of the VCU is not updated.

[0011] Further, in an embodiment, the third message includes a high-voltage control instruction message, an auxiliary drive control message, and a main drive control message.

[0012] Further, in an embodiment, the target controlled module includes a BMS, a PDU, and an MCU.

[0013] Further, in an embodiment, the step of detecting whether the VCU is in a reset state includes: periodically checking a Counter data segment and a CheckSum data segment of a message from the VCU; if the checking fails in a preset number of periods, determining that the VCU is in a reset state; if the checking succeeds in any period, determining that the VCU is not in a reset state.

[0014] In a second aspect, the embodiments of the present application further provide a high-voltage control system of a fuel cell vehicle, the high-voltage control system of the fuel cell vehicle including a VCU, an FCU, and a target controlled module, the FCU having a main core and a backup core. The FCU main core, the FCU backup core, and the target controlled module are configured to continuously detect whether the VCU is in a reset state during vehicle driving; The FCU main core and the target controlled module are further configured to maintain a control state of a previous stage during the VCU is in a reset state; The FCU backup core is configured to periodically send a first message to the VCU during the VCU is in a reset state, wherein the first message is configured to control the VCU to skip a high-voltage power-on process and continue to send a control instruction message at a last moment before the reset after the reset is successful.

[0015] In the present application, the FCU main core, the FCU backup core, and the target controlled module continuously detect whether the VCU is in a reset state during vehicle driving; the FCU main core and the target controlled module maintain a control state of a previous stage during the VCU is in a reset state; and the FCU backup core periodically sends a first message to the VCU during the VCU is in a reset state, wherein the first message is configured to control the VCU to skip a high-voltage power-on process and continue to send a control instruction message at a last moment before the reset after the reset is successful. Through the present application, the vehicle can maintain a previous driving state during the VCU reset and quickly recover normal high-voltage control after the VCU reset is successful, thereby reducing the influence of the VCU reset on the driving safety of the vehicle. BRIEF DESCRIPTION OF DRAWINGS

[0016] Figure 1This is a flow chart of a high-voltage control method for a fuel cell vehicle according to an embodiment of the present application; Figure 2 This is a schematic diagram of the architecture of a high-voltage control system for a fuel cell vehicle in one embodiment of the present application; Figure 3 Schematic diagram of the working process of the FCU spare core in one embodiment of the present application. DETAILED DESCRIPTION

[0017] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0018] In order to make the objectives, technical solutions and advantages of this application clearer, the implementation methods of this application will be further described in detail below with reference to the accompanying drawings.

[0019] In a first aspect, an embodiment of the present application provides a high-voltage control method for a fuel cell vehicle.

[0020] Figure 1 A flow chart of a high-voltage control method for a fuel cell vehicle in one embodiment of the present application is shown.

[0021] Reference Figure 1 In one embodiment, a high-voltage control method for a fuel cell vehicle includes the following steps: S1, the FCU main core, the FCU standby core, and the target controlled module continuously detect whether the VCU is in the reset state while the vehicle is driving.

[0022] Specifically, this solution is implemented based on a multi-core FCU architecture. The FCU master core is used to implement the control logic of the fuel cell system, and the FCU backup core is used to implement additional safety control logic for VCU reset. The target controlled module is the module that operates based on the control command message issued by the VCU.

[0023] For example, the target controlled modules include a BMS (Battery Management System), a PDU (High Voltage Power Distribution Unit), and an MCU (Motor Controller).

[0024] Figure 2 A schematic diagram of the architecture of a high-voltage control system for a fuel cell vehicle in one embodiment of the present application is shown.

[0025] Reference Figure 2In one embodiment, the high-voltage control system of a fuel cell vehicle includes hardware such as BMS, VCU, PDU, FCU, and MCU, which are consistent with the existing vehicle architecture, but the FCU needs to be a multi-core FCU. The BMS, VCU, PDU, FCU, and MCU communicate through the CAN bus. In the initial stage, the system initializes and performs self-tests on the controller, which mainly involves the self-tests of the FCU, BMS, and VCU. The passing of the self-tests of the FCU and BMS indicates that the fuel cell system and the power battery system are available. The self-test of the FCU includes the inspection of the related functions of the main core and the backup core. While the VCU is self-testing, other modules will also detect the communication status of the VCU. When the VCU self-test passes, it determines whether the current state is driving or non-driving. If it is in the non-driving state, it determines whether there is a high-voltage request by judging the key K15 status signal. If there is a request, the normal high-voltage process is followed.

[0026] Furthermore, in one embodiment, the step of detecting whether the VCU is in a reset state includes: Periodically check the Counter data segment and CheckSum data segment of the message from the VCU; If the verification fails for the latest preset number of cycles, the VCU is judged to be in the reset state; If any periodic check succeeds, it is determined that the VCU is not in the reset state.

[0027] In this embodiment, the specific means of detecting the VCU status is to detect the Counter data segment and the CheckSum data segment. The Counter data segment is used to determine whether frame loss occurs during message transmission. Under normal circumstances, each time a message is sent, the counter is incremented by 1, accumulating from 0 to 15, and then continuously looping. If the counter is discontinuous or the first and last values ​​are incorrect, the receiver will consider it a frame loss and report a message loss or timeout fault code. For example, if the same Counter value appears five times in a row, or the Counter difference between two consecutive frames is greater than 2 for three consecutive times, it can be determined that a counter error has occurred. The CheckSum data segment is used to determine whether there is an error in CAN message transmission. The sender calculates the CRC check code according to a specific check algorithm, places it in the CAN message, and sends it to the CAN bus together with other signals in the message. The receiver will also use the same algorithm to calculate the CRC check code based on the received CAN message (except the CRC check bit), and compare the check code with the check code in the received CAN message. If the two are consistent, it means that there is no error in the message transmission process. Otherwise, it is considered that the message transmission is erroneous and the message is unreliable. At the same time, a CRC check error fault code is reported.

[0028] For example, the preset number is equal to 3.

[0029] Optionally, the FCU main core and the target controlled module detect whether the VCU is in the reset state by periodically checking the Counter data segment and CheckSum data segment of the message from the VCU. The FCU standby core can obtain the detection result of the FCU main core on the VCU communication status through inter-core communication.

[0030] S2, the FCU main core and the target controlled module maintain the control state of the previous stage while the VCU is in the reset state.

[0031] Specifically, when the target controlled modules include BMS, PDU and MCU, the PDU and BMS still maintain the high-voltage control state at the previous moment and do not perform cut-off processing. The MCU output torque still maintains the state value before the message is lost, waiting for the VCU to be reset successfully.

[0032] S3. When the VCU is in the reset state, the FCU standby core periodically sends a first message to the VCU. The first message is used to control the VCU to skip the high-voltage power-on process after the reset is successful and continue to send the control instruction message at the last moment before the reset.

[0033] Specifically, during a VCU reset, the VCU's CAN controller is reset to its default state and cannot recognize the message frame structure on the bus. Messages sent to the VCU by other modules will disappear after the bus transmission is complete. After a successful VCU reset, the VCU can only receive messages sent by other modules after the reset is complete. Therefore, messages that the VCU hopes to receive immediately after a successful reset need to be sent multiple times, such as the first message in this embodiment and the second message in subsequent embodiments.

[0034] It should be noted that for the FCU main core, FCU backup core, and target controlled module, "VCU in reset state" is a detection result and does not represent the actual VCU status. In other words, there is a certain delay relative to the actual VCU status. Therefore, of the messages periodically sent by the FCU backup core to the VCU while the VCU is in reset state, at least some are sent after the VCU has actually been successfully reset but before the FCU backup core detects the VCU reset success. These messages can be received normally by the VCU, thus performing its functions.

[0035] Therefore, in this embodiment, the FCU main core, FCU backup core, and target controlled module continuously detect whether the VCU is in a reset state while the vehicle is in motion. While the VCU is in the reset state, the FCU main core and target controlled module maintain the control state of the previous stage. While the VCU is in the reset state, the FCU backup core periodically sends a first message to the VCU. The first message is used to control the VCU to skip the high-voltage power-up process after a successful reset and continue to send the control instruction message at the last moment before the reset. Through this embodiment, the vehicle can maintain its previous driving state during the VCU reset and quickly resume normal high-voltage control after a successful VCU reset, thereby reducing the impact of the VCU reset on the vehicle's driving safety.

[0036] Furthermore, in one embodiment, the step of maintaining the control state of the previous stage by the FCU main core and the target controlled module while the VCU is in the reset state includes: When the VCU is in the reset state, if the FCU main core and the target controlled module do not receive any new control instruction message, they will maintain the control state of the previous stage. The fuel cell vehicle high voltage control method further includes: When the duration of the VCU single reset state lasts longer than a first preset time, the FCU standby core determines that the VCU has a serious fault; After determining that a serious fault has occurred in the VCU, the FCU backup core stops sending the first message to the VCU, periodically sends the second message to the VCU, and replaces the VCU in sending the third message, prompting the driver to perform parking control and requesting high voltage power to be disconnected after parking is completed. The second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

[0037] In this embodiment, the FCU backup core implements different safety control logic based on the duration of the VCU single reset state. If the VCU single reset state lasts for a short period of time, the FCU backup core periodically sends a first message to help the VCU quickly resume normal high-voltage control after a successful reset. If the VCU single reset state lasts for an extended period of time, the FCU backup core temporarily replaces the VCU to maintain normal vehicle operation and prompts the driver to perform parking control to quickly power down the high voltage, thereby better ensuring driving safety.

[0038] The second message is used to prevent the control instruction message sent after the VCU is successfully reset from conflicting with the third message sent by the FCU standby core.

[0039] Optionally, the method of prompting the driver to perform parking control may be an instrument reminder, a voice reminder, etc.

[0040] For example, the third message includes a high-voltage control instruction message, an auxiliary drive control message, and a main drive control message. When the VCU is in normal operation, the VCU also sends control instruction messages such as an energy and thermal management coordination message and a charging control message.

[0041] Further, in an embodiment, the step of maintaining the control state of the last stage by the FCU master core and the target controlled module during the reset state of the VCU includes: If no new control instruction message is received by the FCU master core and the target controlled module during the reset state of the VCU, the control state of the last stage is maintained. The fuel cell vehicle high-voltage control method further includes: The FCU backup core counts the number of moderate faults, and if the number of moderate faults is greater than a preset number, it is determined that the VCU has a serious fault. If the duration of a single reset state of the VCU is greater than a second preset duration and less than or equal to a first preset duration, it is considered as a moderate fault. After determining that the VCU has a serious fault, the FCU backup core stops sending the first message to the VCU, periodically sends the second message to the VCU, replaces the VCU to send the third message, prompts the driver to perform parking control, and requests high-voltage power down after parking is completed. The second message is used to prohibit the VCU from sending control instruction messages, and the third message is a control instruction message used to maintain normal driving of the vehicle.

[0042] In the previous embodiment, the FCU backup core determines that the VCU has a serious fault based on the duration of a single reset state of the VCU being too long. In this embodiment, the FCU backup core determines that the VCU has a serious fault based on the VCU experiencing multiple reset states with a long duration. These are different dimensions of judgment.

[0043] For example, the first preset duration is 10 seconds, the second preset duration is 5 seconds, and the preset number is 10.

[0044] Figure 3 A working flow diagram of the FCU backup core in an embodiment of the application is shown.

[0045] Referring to Figure 3 The working flow of the FCU backup core is as follows: Detect whether the VCU is in a reset state. If yes, periodically send the first message to the VCU. If no, continue to detect whether the VCU is in a reset state.

[0046] Detect whether the VCU resets successfully within the second preset duration. If yes, continue to detect whether the VCU is in a reset state. If no, detect whether the VCU resets successfully within the first preset duration. If yes, increase the moderate fault count by one. If no, determine that the VCU has a serious fault.

[0047] After the moderate fault count is increased by one, it is detected whether the moderate fault count is greater than the preset number. If so, it is determined that a serious fault occurs in the VCU. If not, it continues to detect whether the VCU is in a reset state.

[0048] After determining that a serious fault has occurred in the VCU, the first message is stopped from being sent to the VCU, and the second message is sent to the VCU regularly. The third message is sent instead of the VCU to remind the driver to perform parking control and detect whether the parking is completed. If so, the high voltage power is requested to be cut off. If not, the parking is continued to be detected.

[0049] In this embodiment, whether a serious fault occurs in the VCU is comprehensively judged from two dimensions, and the detection logic is improved, thereby better ensuring driving safety.

[0050] Optionally, the moderate fault count may be reset at regular intervals, or reset each time the high voltage is powered off, thereby preventing historical records that are too old from affecting the accuracy of severe fault judgment.

[0051] Furthermore, in one embodiment, the fuel cell vehicle high voltage control method further includes: After the FCU backup core determines that a serious fault has occurred in the VCU, it records the serious fault time; During the high-voltage power-on process, the FCU standby core detects whether the software and hardware versions of the VCU are updated after the critical failure time. If no update occurs, the high-voltage power-on process is terminated.

[0052] In this embodiment, after the FCU standby core determines that a serious fault has occurred in the VCU, it not only realizes high-voltage power-off as soon as possible while ensuring driving safety, but also manages the vehicle's next high-voltage power-on process. After detecting that the VCU's software and hardware versions have been updated, it is considered that the serious fault of the VCU has been resolved, and the entire vehicle is allowed to be powered on normally at high voltage. Otherwise, high-voltage power-on is prohibited to prevent the vehicle from driving in the event of a serious VCU fault, thereby better ensuring driving safety.

[0053] Furthermore, in one embodiment, the step of detecting whether the software and hardware versions of the VCU are updated after the critical failure time, and if not, terminating the high-voltage power-on process includes: Check whether there is a serious fault time. If there is a serious fault time, check whether the software and hardware versions of the VCU are updated after the serious fault time. If no update occurs, terminate the high-voltage power-on process. If an update occurs, clear the serious fault time.

[0054] In this embodiment, the FCU spare core does not need to perform version verification operations in each high-voltage power-on process. It only needs to perform version verification operations when there is a serious failure time, thereby avoiding unnecessary repeated detection operations and shortening the time of the high-voltage power-on process.

[0055] In a second aspect, an embodiment of the present application also provides a high-voltage control system for a fuel cell vehicle.

[0056] In one embodiment, a fuel cell vehicle high-voltage control system includes a VCU, an FCU, and a target controlled module, wherein the FCU has a main core and a backup core; The FCU main core, FCU standby core and target controlled module are used to continuously detect whether the VCU is in the reset state during vehicle driving; The FCU main core and the target controlled module are also used to maintain the control state of the previous stage while the VCU is in the reset state; The FCU standby core is used to periodically send a first message to the VCU while the VCU is in a reset state, wherein the first message is used to control the VCU to skip the high-voltage power-on process after a successful reset and continue to send the control instruction message at the last moment before the reset.

[0057] Furthermore, in one embodiment, the FCU main core and the target controlled module are configured to maintain the control state of the previous stage if no new control instruction message is received during the period when the VCU is in the reset state; The FCU standby core is further configured to determine that a serious fault has occurred in the VCU when the duration of the VCU single reset state exceeds a first preset duration; The FCU backup core is also used to stop sending the first message to the VCU after determining that a serious fault has occurred in the VCU, and regularly send the second message to the VCU, and replace the VCU to send the third message to prompt the driver to perform parking control and request high voltage power to be disconnected after parking is completed. Among them, the second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

[0058] Furthermore, in one embodiment, the FCU spare core is also used to count moderate faults. If the moderate fault count is greater than a preset number of times, it is determined that a serious fault has occurred in the VCU. Among them, if the duration of the VCU single reset state is greater than the second preset duration and less than or equal to the first preset duration, it is regarded as a moderate fault.

[0059] Furthermore, in one embodiment, the FCU main core and the target controlled module are configured to maintain the control state of the previous stage if no new control instruction message is received during the period when the VCU is in the reset state; The FCU spare core is also used to count moderate faults. If the moderate fault count exceeds a preset number, the VCU is considered to have a serious fault. If the duration of a single VCU reset state is greater than a second preset duration and less than or equal to the first preset duration, it is considered a moderate fault. The FCU backup core is also used to stop sending the first message to the VCU after determining that a serious fault has occurred in the VCU, and regularly send the second message to the VCU, and replace the VCU to send the third message to prompt the driver to perform parking control and request high voltage power to be disconnected after parking is completed. Among them, the second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

[0060] Furthermore, in one embodiment, the first preset time length is 10 seconds, the second preset time length is 5 seconds, and the preset number of times is 10 times.

[0061] Furthermore, in one embodiment, the FCU spare core is further configured to record the critical failure time after determining that a critical failure has occurred in the VCU; The FCU spare core is also used to detect whether the VCU software and hardware versions have been updated after the serious failure time during the high-voltage power-on process. If no update has occurred, the high-voltage power-on process is terminated.

[0062] Furthermore, in one embodiment, the third message includes a high-voltage control instruction message, an auxiliary drive control message, and a main drive control message.

[0063] Furthermore, in one embodiment, the target controlled modules include a BMS, a PDU, and an MCU.

[0064] Furthermore, in one embodiment, the step of detecting whether the VCU is in a reset state includes: Periodically check the Counter data segment and CheckSum data segment of the message from the VCU; If the verification fails for the latest preset number of cycles, the VCU is judged to be in the reset state; If any periodic check succeeds, it is determined that the VCU is not in the reset state.

[0065] Among them, the functional implementation of each module in the above-mentioned fuel cell vehicle high-voltage control system corresponds to the various steps in the above-mentioned fuel cell vehicle high-voltage control method embodiment, and their functions and implementation processes will not be repeated here one by one.

[0066] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0067] The terms “include,” “comprise,” “have,” and any variations thereof, in the specification and in the claims of the present application, and the above-described drawings, are intended to cover a non-exclusive inclusion. For example, a process, method, system, product, or device that includes a list of steps or units is not limited to the listed steps or units, but can optionally further include steps or units not listed, or can optionally further include other steps or units inherent to such processes, methods, products, or devices. The terms “first”, “second”, and “third” and the like descriptions are used to distinguish different objects, and do not represent the order or limit the types of “first”, “second”, and “third”.

[0068] In the description of the embodiments of the present application, “exemplary”, “for example”, or “for instance” is used to represent an example, illustration, or description. Any embodiment or design scheme described as “exemplary”, “for example”, or “for instance” in the embodiments of the present application should not be interpreted as more preferred or more advantageous than other embodiments or design schemes. Rather, the words “exemplary”, “for example”, or “for instance” are intended to present the relevant concept in a specific manner.

[0069] In the description of the embodiments of the present application, unless otherwise specified, “ / ” represents the meaning of or, for example, A / B can represent A or B; “and / or” in the text only represents a description of the relationship between the associated objects, which means that there can be three relationships, for example, A and / or B, which means that there are three cases of A alone, A and B together, and B alone. In addition, in the description of the embodiments of the present application, “multiple” means two or more than two.

[0070] In some of the processes described in the embodiments of the present application, a plurality of operations or steps are included in a specific order, but it should be understood that these operations or steps can be executed or performed in parallel or in an order different from that in which they appear in the embodiments of the present application. The serial number of the operation is only used to distinguish different operations, and the serial number itself does not represent any execution order. In addition, these processes can include more or fewer operations, and these operations or steps can be executed in sequence or in parallel, and these operations or steps can be combined.

[0071] From the above description of the embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment method can be realized by means of software and a general hardware platform as required, of course, it can also be realized by hardware, but in many cases the former is a better embodiment. Based on such understanding, the technical solutions of the present application can be embodied in the form of a software product, which is stored in a storage medium (such as a ROM / RAM, a magnetic disk, an optical disk) as described above, and includes a plurality of instructions for causing a terminal device to execute the methods described in the embodiments of the present application.

[0072] The above are only preferred embodiments of the present application and do not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A high-voltage control method for a fuel cell vehicle, characterized in that: The fuel cell vehicle high voltage control method includes: The FCU main core, FCU backup core and target controlled module continuously detect whether the VCU is in the reset state during vehicle driving; The FCU main core and the target controlled module maintain the control state of the previous stage while the VCU is in the reset state; When the VCU is in the reset state, the FCU standby core periodically sends a first message to the VCU, wherein the first message is used to control the VCU to skip the high-voltage power-on process after the reset is successful and continue to send the control instruction message at the last moment before the reset.

2. The high-voltage control method for a fuel cell vehicle according to claim 1, wherein: The steps of maintaining the control state of the previous stage by the FCU main core and the target controlled module while the VCU is in the reset state include: When the VCU is in the reset state, if the FCU main core and the target controlled module do not receive any new control instruction message, they will maintain the control state of the previous stage. The fuel cell vehicle high voltage control method further includes: When the duration of the VCU single reset state lasts longer than a first preset time, the FCU standby core determines that the VCU has a serious fault; After determining that a serious fault has occurred in the VCU, the FCU backup core stops sending the first message to the VCU, periodically sends the second message to the VCU, and replaces the VCU in sending the third message, prompting the driver to perform parking control and requesting high voltage power to be disconnected after parking is completed. The second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

3. The high-voltage control method for a fuel cell vehicle according to claim 2, wherein: The fuel cell vehicle high voltage control method further includes: The FCU spare core counts moderate faults. If the moderate fault count is greater than the preset number, the VCU is judged to have a serious fault. Among them, if the duration of the VCU single reset state is greater than the second preset duration and less than or equal to the first preset duration, it is considered a moderate fault.

4. The high-voltage control method for a fuel cell vehicle according to claim 1, wherein: The steps of maintaining the control state of the previous stage by the FCU main core and the target controlled module while the VCU is in the reset state include: When the VCU is in the reset state, if the FCU main core and the target controlled module do not receive any new control instruction message, they will maintain the control state of the previous stage. The fuel cell vehicle high voltage control method further includes: The FCU standby core counts moderate faults. If the moderate fault count exceeds a preset number, the VCU is considered to have a serious fault. If the duration of a single VCU reset state is greater than a second preset duration and less than or equal to a first preset duration, it is considered a moderate fault. After determining that a serious fault has occurred in the VCU, the FCU backup core stops sending the first message to the VCU, periodically sends the second message to the VCU, and replaces the VCU in sending the third message, prompting the driver to perform parking control and requesting high voltage power to be disconnected after parking is completed. The second message is used to prohibit the VCU from sending control command messages, and the third message is a control command message used to keep the vehicle running normally.

5. The high-voltage control method for a fuel cell vehicle according to claim 3 or 4, wherein: The first preset time length is 10 seconds, the second preset time length is 5 seconds, and the preset number of times is 10 times.

6. The high-voltage control method for a fuel cell vehicle according to any one of claims 2 to 4, characterized in that: The fuel cell vehicle high voltage control method further includes: After the FCU backup core determines that a serious fault has occurred in the VCU, it records the serious fault time; During the high-voltage power-on process, the FCU standby core detects whether the software and hardware versions of the VCU are updated after the critical failure time. If no update occurs, the high-voltage power-on process is terminated.

7. The high-voltage control method for a fuel cell vehicle according to any one of claims 2 to 4, characterized in that: The third message includes a high-voltage control instruction message, an auxiliary drive control message, and a main drive control message.

8. The high-voltage control method for a fuel cell vehicle according to any one of claims 1 to 5, characterized in that: The target controlled modules include BMS, PDU and MCU.

9. The high-voltage control method for a fuel cell vehicle according to any one of claims 1 to 5, characterized in that: The step of detecting whether the VCU is in a reset state comprises: Periodically check the Counter data segment and CheckSum data segment of the message from the VCU; If the verification fails for the latest preset number of cycles, the VCU is judged to be in the reset state; If any periodic check succeeds, it is determined that the VCU is not in the reset state.

10. A fuel cell vehicle high-voltage control system, characterized in that: The fuel cell vehicle high-voltage control system includes a VCU, an FCU and a target controlled module, and the FCU has a main core and a backup core; The FCU main core, FCU standby core and target controlled module are used to continuously detect whether the VCU is in the reset state during vehicle driving; The FCU main core and the target controlled module are also used to maintain the control state of the previous stage while the VCU is in the reset state; The FCU standby core is used to periodically send a first message to the VCU while the VCU is in a reset state, wherein the first message is used to control the VCU to skip the high-voltage power-on process after a successful reset and continue to send the control instruction message at the last moment before the reset.

Images