Redundant door unlocking system, vehicle door unlocking methods and vehicle

Abstract

This invention relates to a redundant door unlocking system, a method for unlocking vehicle doors, and a vehicle. The system includes a physical reset button, a power supply unit, and a control unit connected to the power supply unit. The physical reset button is located on the exterior of the vehicle body, and the control unit is connected to the vehicle's domain controller. In response to a user's operation of the physical reset button, the control unit sends a restart signal to the domain controller. If the control unit determines that the domain controller has successfully restarted, it pushes a domain controller restart success indication, allowing the user to unlock the door. This invention addresses the issue of door unlocking failure in keyless entry vehicles when the main control board malfunctions, by sending a restart command to the domain controller through an independent control unit when the domain controller fails to execute the unlocking command. This ensures the security and reliability of the vehicle door lock design.

Description

Technical Field

[0001] This invention relates to the field of vehicle electronic control, specifically to a redundant door unlocking system, a vehicle door unlocking method, and a vehicle. Background Technology

[0002] With the accelerated development of intelligent technology in new energy vehicles, keyless design has become the industry mainstream. Core functions such as door unlocking and vehicle start in these models rely entirely on the electronic control logic of the vehicle's main control system (such as a domain controller). Because the mechanical keyhole has been eliminated, a backup unlocking solution is typically required to prevent occupants from being trapped or the vehicle from becoming unusable due to the time-sensitive nature of the electronic unlocking method.

[0003] Currently, some technologies address the issue of electronic control failure caused by battery depletion through emergency jump-starting; existing cloud-based unlocking methods require the main control system's communication module to transmit commands for unlocking. It's clear that existing backup unlocking methods all rely on the central control system. However, when the vehicle's main control board malfunctions, the main control system cannot respond to any regular unlocking commands (including remote control via mobile app, Bluetooth key sensing, door handle touch sensing, etc.), causing backup unlocking methods to also fail.

[0004] Therefore, there is an urgent need for a redundant unlocking solution with independent power supply, independent communication, and independent execution capabilities to solve the technical challenge of emergency unlocking in the event of a main control board malfunction in vehicles without mechanical keys. Summary of the Invention

[0005] One objective of this invention is to provide a redundant door unlocking system to solve the problem that the doors of vehicles without mechanical keys cannot be opened in non-power-out scenarios due to the main control system of the vehicle being in a frozen state; a second objective is to provide a vehicle door unlocking method; a third objective is to provide a vehicle door unlocking device; a fourth objective is to provide a control unit; and a fifth objective is to provide a vehicle.

[0006] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0007] A redundant door unlocking system includes: a physical reset button, a power supply unit, and a control unit connected to the power supply unit; wherein the physical reset button is located on the exterior of the vehicle body, and the control unit is connected to the vehicle's domain controller; in response to a user's operation of the physical reset button, the control unit sends a restart signal to the domain controller; if the control unit determines that the domain controller has restarted successfully, it pushes a domain controller restart success indication to enable the user to unlock the door.

[0008] Based on the aforementioned technical means, an independent power supply unit and control unit are designed so that after the user operates the physical reset button, the power supply unit supplies power and the control unit responds to the user's operation, sending a restart signal to the domain controller to attempt to restart the domain controller and restore its unlocking function. This achieves the effect of unlocking the car door when the domain controller crashes (such as due to a software fault like a program crash), ensuring the safety and reliability of the vehicle.

[0009] Furthermore, the redundant door unlocking system also includes: a verification unit connected to the power supply unit, and a hardware direct drive circuit; the verification unit is also connected to the control unit, and the hardware direct drive circuit is also connected to the control unit and the vehicle's door lock motor; if the control unit determines that the domain controller has failed to restart, it pushes an authentication instruction to the user; the user's identity is verified by the verification unit, and after the control unit determines that the verification is successful, it controls the hardware direct drive circuit to control the door lock motor to unlock the door.

[0010] Based on the aforementioned technical means, the independently configured verification unit and hardware direct-drive circuit, together with the control unit and power supply unit, can control the door lock motor to unlock the door after the domain controller fails to restart. This successfully establishes an unlocking link completely independent of the main control system, enabling unlocking even when the domain controller cannot restart successfully (e.g., the domain controller crashes due to hardware faults such as poor soldering of chip pins). Specifically, the verification unit effectively ensures the security of the unlocking scheme, guaranteeing that the user information opening the door matches the vehicle owner information. Simultaneously, by controlling the hardware direct-drive circuit through the control unit, the power supply unit and door lock motor can be connected, enabling power supply to the door lock motor and thus unlocking the door.

[0011] Furthermore, the redundant door unlocking system also includes: a signal interaction unit connected between the domain controller and the control unit, wherein the signal interaction unit is an optocoupler; the control unit sends a restart signal to the domain controller through the optocoupler channel of the signal interaction unit, and monitors the restart result of the domain controller through the optocoupler channel.

[0012] Based on the above technical means, by setting up a signal interaction unit between the domain controller and the control unit and using an optical coupling connection to connect the signal interaction unit and the domain controller, the voltage backflow path can be blocked when the domain controller crashes, preventing the domain controller's fault from being transmitted to the control unit, thereby ensuring that the control unit can work normally in the event of a domain controller crash.

[0013] Furthermore, the power supply unit includes a battery and a supercapacitor, wherein the battery is used to charge the supercapacitor; and the supercapacitor is used to supply power to the door lock motor through the hardware direct drive circuit.

[0014] Based on the above technical means, by supplying power to the door lock motor through a supercapacitor, the instantaneous high power demand of the door lock motor can be met while avoiding the size problem of large-capacity batteries, thus achieving instantaneous high power output in a limited space. At the same time, by using a smaller battery to continuously recharge the supercapacitor, the supercapacitor is kept fully charged in its normal state (i.e., dormant state), which solves the self-discharge problem of the supercapacitor and achieves the goal of long-term battery life.

[0015] Furthermore, the restart signal is a reset pulse; and / or, the control unit obtains the restart result by listening to the heartbeat signal of the domain controller through the optical coupling channel of the signal interaction unit.

[0016] Based on the above technical means, directly using the reset pulse as the restart signal can ensure the domain controller's accurate response to the restart signal; in addition, directly obtaining the restart result by listening to the domain controller's heartbeat eliminates the need for active feedback from the domain controller, improving the speed of obtaining the restart result and providing an accurate and reliable decision-making basis for the control unit's response control.

[0017] Furthermore, the verification unit includes an RFID unit and a processing unit. The RFID unit is used to read the first vehicle identification information in the RFID key, and the processing unit is used to compare and verify the first vehicle identification information and the pre-stored second vehicle identification information, and feed back the verification result to the control unit.

[0018] Based on the aforementioned technical means, the RFID unit and processing unit are used to identify the first vehicle identification information in the key held by the user, and the processing unit verifies the user's identity based on the first vehicle identification information, thus ensuring the reliability and security of the door unlocking operation and preventing the vehicle from being maliciously unlocked.

[0019] Furthermore, the verification unit includes an NFC tag and a communication module; the NFC tag stores cloud verification webpage information; the communication module is used to receive the verification result returned from the cloud and feed the verification result back to the control unit.

[0020] Based on the aforementioned technical means, by using NFC tags pre-installed in the vehicle and employing cloud-based identity verification, the problem of being unable to verify identity due to the user not wearing an RFID key is avoided, ensuring the diversity, reliability, and security of the verification process.

[0021] A method for unlocking a vehicle door includes, in response to detecting a user's operation on a physical reset button, sending a restart signal to the vehicle's domain controller; obtaining the restart result of the domain controller; and if the restart result indicates that the domain controller has restarted successfully, pushing a domain controller restart success indication to enable the user to unlock the vehicle door.

[0022] Based on the above technical means, when the domain controller is unable to respond normally to the door unlocking operation due to a system crash, a restart signal is sent to the domain controller by an independently designed control unit to attempt to restart the domain controller and restore its normal function, so that the door can be unlocked smoothly. This effectively solves the problem of door unlocking failure in keyless vehicles when the main control board crashes, thereby improving the security and reliability of vehicle door lock design.

[0023] Furthermore, the method also includes: if the restart result indicates that the domain controller has failed to restart, pushing an authentication instruction to the user; obtaining the authentication result for the user; and after the authentication result indicates that the authentication is successful, controlling the hardware direct drive circuit in the redundant unlocking system of the vehicle door to control the door lock motor to unlock the vehicle door.

[0024] Based on the above technical means, the door can be unlocked smoothly when the domain controller crashes due to hardware failure, and the security of the unlocking process is ensured through an authentication process.

[0025] Furthermore, obtaining the verification result for the user includes: obtaining the verification result of the vehicle identification information in the RFID key sent by the verification unit; or, receiving the verification result of the user's identity sent by the verification unit communication module.

[0026] Based on the above methods, verification results are obtained through multiple channels, ensuring the diversity of identity verification methods and improving the convenience of the verification process.

[0027] Furthermore, the step of pushing an authentication instruction to the user includes: controlling an indicator light located on the exterior of the vehicle to flash or a buzzer to emit a prompt sound.

[0028] By employing the methods described above, users can be effectively reminded, thus avoiding the waste of time caused by continuously waiting due to not receiving instructions.

[0029] A vehicle door unlocking device, comprising:

[0030] The sending module is used to send a restart signal to the vehicle's domain controller in response to the detection of user operation on the physical reset button;

[0031] The first acquisition module is used to acquire the restart result of the domain controller;

[0032] The first push module is used to push a domain controller restart success indication if the restart result indicates that the domain controller has restarted successfully, so that the user can unlock the car door.

[0033] Furthermore, the device also includes:

[0034] The second push module is used to push an authentication instruction to the user if the restart result indicates that the domain controller has failed to restart;

[0035] The second acquisition module is used to acquire the verification result of the user;

[0036] The control module is used to control the hardware direct drive circuit in the redundant unlocking system of the vehicle door to control the door lock motor to unlock the door after the verification result indicates that the verification is passed.

[0037] Furthermore, the second acquisition module is specifically used for:

[0038] Obtain the verification result of the vehicle identification information in the RFID key sent by the verification unit;

[0039] or,

[0040] The user's identity is verified by the verification unit communication module.

[0041] Furthermore, the second push module is specifically used for:

[0042] The control is set to flash an indicator light or emit a buzzer sound on the exterior of the vehicle.

[0043] A control unit includes: a communication module, a memory, and a processor;

[0044] The memory stores computer-executed instructions;

[0045] The processor executes computer execution instructions stored in the memory, causing the processor to perform the vehicle door unlocking method as described above.

[0046] A vehicle, including a body and the aforementioned redundant door unlocking system.

[0047] The beneficial effects of this invention are:

[0048] The redundant door unlocking system, vehicle door unlocking method, and vehicle provided by this invention completely eliminate the dependence of door unlocking operations on the domain controller (i.e., the main control system) through an independently redundantly designed redundant door unlocking system. This ensures that unlocking can still be achieved even when the main control board is completely frozen, solving the core problem of existing solutions where "main control failure leads to system-wide paralysis," and guaranteeing the safety and reliability of the vehicle door unlocking design. Attached Figure Description

[0049] Figure 1 This is a schematic diagram of a redundant door unlocking system provided in Embodiment 1 of the present invention;

[0050] Figure 2 This is a schematic diagram of a redundant door unlocking system provided in Embodiment 1 of the present invention;

[0051] Figure 3 This is a flowchart illustrating a vehicle door unlocking method according to Embodiment 3 of the present invention;

[0052] Figure 4 This is a flowchart illustrating a vehicle door unlocking method provided in Embodiment 4 of this application;

[0053] Figure 5 This is a schematic diagram of the structure of a vehicle door unlocking device provided in Embodiment 5 of the present invention;

[0054] Figure 6 This is a schematic diagram of the structure of a vehicle door unlocking device provided in Embodiment Six of this application;

[0055] Figure 7 This is a schematic diagram of the control unit provided in this application. Detailed Implementation

[0056] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0057] Based on the above background information, the inventors discovered during their research that a domain controller that has crashed can be restarted using an independently designed control unit and power supply unit. Upon successful restart, the domain controller's unlocking function can be restored, effectively solving the problem of the domain controller crashing due to partial software faults and thus being unable to control door unlocking. Therefore, this invention provides a redundant door unlocking system, a vehicle door unlocking method, and a vehicle.

[0058] The embodiments of the present invention will be described below with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are only for illustrating the present invention and not for limiting the scope of protection of the present invention.

[0059] It should be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of the present invention. Therefore, the drawings only show the components related to the present invention and are not drawn according to the actual number, shape and size of the components in the actual implementation. In the actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0060] Figure 1 This is a schematic diagram of a redundant door unlocking system provided in Embodiment 1 of the present invention, as shown below. Figure 1 As shown, the redundant door unlocking system 10 includes:

[0061] The system includes a physical reset button 101, a power supply unit 102, and a control unit 103 connected to the power supply unit 102.

[0062] The physical reset button 101 is located on the outside of the vehicle body, and the control unit 103 is connected to the vehicle's domain controller 20.

[0063] In response to the user's operation of the physical reset button 101, the control unit 103 sends a restart signal to the domain controller 20. If the control unit 103 determines that the domain controller 20 has restarted successfully, it pushes a domain controller 20 restart success indication so that the user can unlock the car door.

[0064] In the above system, the physical reset button is electrically connected to the control unit. In practical applications, the physical reset button has a built-in limit switch, which sends a low-level trigger signal to the control unit after the user presses the button to the desired position (e.g., press and hold for 3 seconds). Correspondingly, the control unit will respond to the trigger signal sent by the physical reset button and restart the domain controller.

[0065] For example, the physical reset button can be any control that has the function of "sending an electrical signal to the control unit in response to the user's operation", such as a capacitive touch button, a metal sensor button, etc., and this application does not impose any specific limitations on it.

[0066] Additionally, in the aforementioned system, the power supply unit includes a battery to power the control unit, enabling it to send a restart signal to the domain controller and, upon confirming a successful restart, push a restart success indication to the user. The domain controller is the main control system in the vehicle used to control door unlocking, such as the Vehicle Interface Unit (VIU) domain controller in Changan Automobile's Self-Driving Automobile (SDA) architecture.

[0067] The control unit, upon receiving an electrical signal from the physical reset button, sends a restart signal to the domain controller and obtains the restart result to determine whether the domain controller has restarted successfully. After confirming a successful restart, it pushes a restart success indication to the user. For example, the restart success indication can be presented through a carrier such as a light or a sound-emitting component mounted on the vehicle body. For instance, after confirming a successful restart of the domain controller, the control unit can control a buzzer to emit a "beep" sound.

[0068] It should be understood that after receiving the successful confirmation, the user can unlock the car door using conventional methods (such as Bluetooth key, door handle sensor, etc.).

[0069] It should be noted that after the control unit confirms that the domain controller has restarted successfully, the door redundancy unlocking system will return to sleep state.

[0070] In the redundant door unlocking system provided in this embodiment, the power supply unit and control unit are independently designed. This allows the user to operate the physical reset button, and based on the power supply unit, the control unit responds to the user's operation and sends a restart signal to the domain controller to attempt to restart the domain controller and restore its unlocking function. This achieves the goal of unlocking the door even when the domain controller crashes (such as due to a software failure like a program crash), ensuring the safety and reliability of the vehicle.

[0071] Figure 2 This is a schematic diagram of a redundant door unlocking system provided in Embodiment 1 of the present invention, as shown below. Figure 2 As shown, based on the above embodiments, the redundant door unlocking system 10 further includes:

[0072] The system includes a verification unit 104, a hardware direct drive circuit 105, and a signal interaction unit 106.

[0073] The verification unit 104 is connected to the power supply unit 102 and the control unit 103 respectively, and is used to verify the user's identity based on the power supply of the power supply unit, and send the verification result to the control unit.

[0074] The hardware direct drive circuit 105 is connected to the control unit 103, the power supply unit 102 and the door lock motor 30 respectively, and is used to connect the power supply unit and the door lock motor in response to the control of the control unit.

[0075] The signal interaction unit 106 is connected between the control unit 103 and the domain controller 20. This signal interaction unit is an optocoupler, used to block the physical connection between the control unit and the domain controller, and to transmit the interaction signals between the control unit and the domain controller through the optocoupler channel.

[0076] It should be understood that the design of the signal interaction unit enables complete isolation between the control unit and the domain controller. This allows for the blocking of the voltage backflow path when the domain controller experiences a crash, preventing the fault from propagating to the control unit and ensuring the control unit can function normally even in the event of a domain controller crash.

[0077] In the above system, if the control unit 103 determines that the domain controller 20 has failed to restart, it pushes an authentication instruction to the user; the user's identity is verified by the authentication unit 104, and after the control unit 103 determines that the verification is successful, it controls the hardware direct drive circuit 105 to control the door lock motor 30 to unlock the door.

[0078] As a specific example, the control unit is an ultra-low power microprocessor STM32L051 (operating current ≤15mA@3V). This processor integrates communication interfaces such as Serial Peripheral Interface (SPI) and Universal Asynchronous Receiver / Transmitter (UART) for receiving and sending signals from other units.

[0079] The signal interaction unit is a TLP785 optocoupler with an optocoupler isolation voltage ≥2500V, which can block the voltage backflow path of the domain controller.

[0080] The hardware direct drive circuit includes a relay. Specifically, after the controller determines that the domain controller has failed to restart, it will control the relay in the hardware direct drive circuit to connect the power supply circuit between the power supply unit and the door lock motor.

[0081] Furthermore, in one possible implementation, the restart signal is a reset pulse; and / or, the control unit obtains the restart result by listening to the heartbeat signal of the domain controller through the optocoupler channel of the signal interaction unit.

[0082] Specifically, in response to the user's operation of the physical reset button, the control unit will be woken up from the sleep state. After being woken up, the control unit will output a reset pulse (such as a 5V / 100ms reset pulse) to the watchdog chip of the domain controller through the optocoupler channel of the signal interaction unit to attempt to trigger the domain controller to restart. At the same time, it will listen to the heartbeat signal of the domain controller through the optocoupler channel. If the heartbeat signal of the domain controller is heard within a preset listening time, it is determined that the domain controller has restarted successfully. If the heartbeat signal of the domain controller is not heard within the preset time, it is determined that the domain controller has failed to restart.

[0083] For example, in practical applications, the master control heartbeat signal can be monitored once every 1 second through the optical coupler channel within a preset monitoring time.

[0084] Optionally, the preset listening time must be longer than the normal time for a domain controller to restart, such as 20s or 25s. This application does not impose any restrictions on the specific value.

[0085] The method provided in this implementation directly uses the reset pulse as the restart signal, which can ensure the domain controller's accurate response to the restart signal. In addition, the restart result is obtained directly by listening to the domain controller's heartbeat, without the need for active feedback from the domain controller, which improves the speed of obtaining the restart result and provides an accurate and reliable decision-making basis for the control unit's response control.

[0086] Furthermore, in one possible implementation, the verification unit 104 includes a radio frequency identification (RFID) unit and a processing unit.

[0087] The RFID unit is used to read the first vehicle identification information from the RFID key; the processing unit is used to compare and verify the first vehicle identification information and the pre-stored second vehicle identification information, and to feed back the verification result to the control unit.

[0088] Specifically, an RFID key refers to a key carrying an RFID tag, which includes first vehicle identification information. In practical applications, the RFID unit reads RFID tags within a preset distance to obtain the first vehicle identification information. Additionally, the second vehicle identification information refers to the unique identification information bound to the current vehicle, such as the vehicle identification number (VIN). The preset distance, for example, is 10cm, 15cm, etc., and can be determined according to the actual application; this application does not impose specific limitations on this.

[0089] It should be understood that the verification result indicates that the verification is successful only when the first vehicle identification information matches the second vehicle identification information.

[0090] Optionally, to further enhance the security of the authentication process, the first vehicle identification information can be encrypted. The encryption algorithm could be, for example, a hash algorithm (such as SHA-256). It should be understood that by encrypting the vehicle identification information using an encryption algorithm and carrying it as an RFID tag in the key, illegal interception of the vehicle identification information can be prevented, thus avoiding its use in forging illegal RFID keys.

[0091] Accordingly, the processing unit will be equipped with an encryption chip (e.g., the national standard SM4). The processing unit first uses the encryption chip to decrypt the acquired first vehicle identification information to obtain the decrypted first vehicle identification information; then, it compares the decrypted first vehicle identification information with the pre-stored second vehicle identification information for consistency, and feeds back the verification result to the control unit. If the information is completely consistent, the verification result indicates that the verification has passed; otherwise, the verification result indicates that the verification has failed.

[0092] Optionally, the processing unit may send the verification result to the control unit only when the verification is successful.

[0093] In practical applications, the verification result indicating successful verification can be fed back to the control unit by outputting a 3.3V high-level trigger signal.

[0094] As a specific example, the RFID unit is configured with a 125kHz low-frequency reader (such as the NXP RC522), a sensing distance ≤10cm, and a transmission power ≤10mW, used to read the RFID tag in the RFID key when the distance between the RFID key and the reader is less than the sensing distance.

[0095] Optionally, after the distance between the user's RFID key and the RFID unit is less than a preset distance, a tag reading success indication can be sent to the user to prompt the user to take away the RFID key, thereby improving user experience satisfaction.

[0096] The verification unit provided in this implementation is suitable for everyday key-carrying scenarios and features a short verification response time. Through the established RFID unit and processing unit, the first vehicle identification information in the user's key is identified, and the user's identity is verified based on this information by the processing unit. This ensures the reliability and security of the door unlocking operation and prevents the vehicle from being maliciously unlocked.

[0097] In one possible implementation, the verification unit includes a Near Field Communication (NFC) tag and a communication module.

[0098] The NFC tag stores information from a cloud-based verification webpage; the communication module receives the verification results returned from the cloud and sends the results back to the control unit.

[0099] Optionally, to facilitate the sensing of the NFC tag, it can be affixed to a identifiable area such as the outside of the driver's side door handle. This application does not impose specific limitations on its placement. In practical applications, the NFC tag should conform to the ISO 14443 Type A standard.

[0100] Specifically, the user uses a smart terminal with NFC reading capability, brings it close to the location where the NFC tag is placed on the vehicle, activates the tag via the NFC radio frequency field, and reads the cloud verification webpage information stored on it. The cloud verification webpage information serves as an interface for verifying the identity of the user's smart terminal. The smart terminal can be, for example, a mobile phone or a smart bracelet; this application does not impose specific limitations on this.

[0101] Furthermore, the communication module may be a separate wireless communication module (e.g., a fourth-generation mobile communication technology (4G) communication module, specifically such as the Quectel EC200S, with a standby current ≤5mA, etc.), or a module with specific signal receiving and transmitting functions. This application does not impose specific limitations on such modules. It should be understood that by designing a separate communication module, the reliability of communication can be guaranteed.

[0102] As a specific example, cloud verification webpage information may be a Uniform Resource Locator (URL) link used for authentication. This link pre-stores a unique identifier for the vehicle, such as the vehicle's VIN, to explicitly identify the vehicle for authentication in the cloud. The URL link must be valid indefinitely, with a format such as https: / / xxx.com / verify?vin=xxxx.

[0103] Correspondingly, after the user places their mobile phone close to the location set on the NFC tag in the vehicle body, the mobile phone will automatically read the URL tag in the NFC tag and automatically redirect to the cloud verification interface. After the user successfully verifies the information on the cloud verification interface, the verification result will be transmitted to the communication unit in the verification unit, so that the communication unit can receive the returned verification result and feed the verification result back to the control unit.

[0104] Alternatively, for example, users can authenticate their identity on the cloud verification interface as follows: The user enters their primary identity information (the user's ID card number or mobile phone number, etc.) and submits it; the cloud server verifies the user's identity based on the consistency between the pre-stored secondary identity information bound to the vehicle and the primary identity information. After successful verification, the server generates and pre-stores a verification code and a dynamic code encrypted with an encryption algorithm (such as AES-256), and sets the validity period of the dynamic code (e.g., 2 hours); it then sends the encrypted dynamic code and verification code to the pre-bound terminal; the user enters the dynamic code and verification code into the cloud verification interface; the cloud server performs a secondary authentication based on the received dynamic code and verification code, as well as the pre-stored dynamic code and verification code. If the validity and consistency of the dynamic code, and the consistency of the verification code, meet the requirements, the user's authentication is successful; otherwise, the user's authentication is unsuccessful. It should be understood that authentication based on a time-sensitive dynamic code can further ensure the security of the verification process.

[0105] The verification method provided in this implementation obtains cloud verification information through NFC tags, providing users with a cloud verification channel without the need for additional projection equipment, which can effectively reduce costs and technical difficulties.

[0106] Furthermore, in one possible implementation, the power supply unit 102 includes a battery and a supercapacitor. The battery is used to charge the supercapacitor; the supercapacitor is used to power the door lock motor via a hardware direct-drive circuit.

[0107] It should be noted that, in order to balance the battery size and the power supply requirements of the door lock motor, this invention is designed to use a smaller battery (such as a button battery) to charge the supercapacitor in normal state (i.e., dormant state). When the hardware direct drive circuit is turned on, the supercapacitor will output a high-power current to the door lock motor through the hardware direct drive circuit to drive the door lock motor to control the door to unlock.

[0108] As a specific example, the power supply unit includes a control-level power supply module and a power-level energy storage module.

[0109] The control-level power supply module provides a stable 3.3V operating voltage to the control unit and verification unit, and charges the supercapacitor via trickle charging. This module consists of two CR2032 coin cells connected in series (total voltage 6V, capacity 440mAh) and a miniature power management chip, the TI TPS62130 (3mm × 3mm in size).

[0110] The power management chip is used to optimize battery power consumption. Specifically, through the Pulse Frequency Modulation (PFM) mode of the power management chip, the total current in the sleep state of each unit is controlled to ≤8μA (to ensure a battery life of ≥3 years), and the current in the active state (such as when the 4G module is working) is controlled to ≤35mA. It should be understood that in practical applications, when it is necessary to control the power supply unit to change from the sleep state to the active state, the control unit needs to send a power enable to the power supply unit.

[0111] Optionally, the battery pack can be stacked (e.g., 20mm in diameter and 6mm in thickness) to make the overall control-level power supply module volume ≤2cm³, which can be embedded in the reserved space inside the door handle.

[0112] In addition, the power-stage energy storage module is used to output current to the door lock motor to meet its instantaneous power requirements when the hardware direct drive circuit is turned on. This power-stage energy storage module includes two 5.5V / 1.5F supercapacitors connected in series (total capacity 0.75F, operating voltage 11V). The module is only 10mm×10mm×5mm in size and can be integrated using a miniature printed circuit board (PCB).

[0113] It should be noted that the power-stage energy storage module is trickle-charged by the control-stage power supply module, and the supercapacitor will be fully charged in the dormant state. At the instant the hardware direct drive circuit is turned on, the power-stage energy storage module can output a peak current of 12V / 2A to the door lock motor for a duration of 1 second, which meets the instantaneous power requirement of the door lock motor (12V×1.5A=18W).

[0114] In practical applications, since the overall volume of the power stage energy storage module is ≤1cm³, it can be integrated with the hardware direct drive circuit on the same miniature PCB.

[0115] The power supply unit provided by this implementation effectively solves the problem of matching a small-volume power supply with the instantaneous high-power demand of a door lock motor. Specifically, by supplying power to the door lock motor through a supercapacitor, the instantaneous high-power demand of the door lock motor can be met while avoiding the size constraints of a large-capacity battery, achieving instantaneous high-power output within a limited space. At the same time, by using a smaller battery to continuously recharge the supercapacitor, the supercapacitor is kept at a full charge, solving the self-discharge problem of the supercapacitor and achieving the goal of long-term battery life.

[0116] The redundant unlocking system for car doors provided in this embodiment of the invention has at least the following outstanding advantages: (1) The redundant unlocking system for car doors provided in this embodiment is an independent redundant design, completely eliminating the dependence on the main control: through physical isolation design (signal interaction unit makes the domain controller and the redundant unlocking system for car doors have no physical connection), independent power supply (not dependent on the vehicle body power supply), independent communication (such as using a 4G module to directly connect to the cloud) and independent execution (hard wire direct drive door lock), an unlocking link completely independent of the main control system is constructed. Even if the main control board is completely dead, unlocking can still be achieved, solving the core pain point of "the entire system is paralyzed when the main control fails" in the existing solution. (2) The dual-path verification method provided in this embodiment includes direct verification through RFID key and cloud verification based on smart terminals such as mobile phones, which takes into account both the security and convenience of the verification process. (3) The power supply unit provided in this embodiment achieves the dual goal of "instantaneous high power + long-term battery life" in a limited space through the cooperation of supercapacitor and small-volume battery.

[0117] Figure 3 This is a flowchart illustrating a door unlocking method according to Embodiment 3 of the present invention. This method is applied to the control unit in the redundant door unlocking system described in the above system embodiments, such as... Figure 3 As shown, the method includes:

[0118] S401. In response to detecting user operation on the physical reset button, a restart signal is sent to the vehicle's domain controller.

[0119] In this step, when the control unit detects the electrical signal sent to it by the physical reset button, it sends a restart signal to the vehicle's domain controller. This restart signal is used to trigger a restart of the domain controller.

[0120] In one possible implementation, the restart signal can be a reset pulse.

[0121] For example, if a user is unable to unlock the car door using the conventional unlocking method, they can press and hold the physical reset button on the inside of the driver's side door handle for 3 seconds. The physical reset button will then send an electrical signal to the control unit to wake it up. Once the control unit is woken up, it will immediately send a 5V / 100ms reset pulse to the watchdog chip on the main control board through the optocoupler channel of the signal interaction unit, forcing the domain controller to restart.

[0122] S402. Obtain the restart result of the domain controller.

[0123] In this step, the control unit will determine the restart result based on the restart status of the domain controller.

[0124] In one possible implementation, the control unit will obtain the restart result by listening to the heartbeat signal of the domain controller. Specifically, the heartbeat signal of the domain controller will be monitored through an optocoupler channel. If the heartbeat signal of the domain controller is detected within a preset monitoring time, the domain controller is determined to have restarted successfully; if the heartbeat signal of the domain controller is not detected within the preset time, the domain controller is determined to have failed to restart.

[0125] It should be understood that if the domain controller restarts successfully within the preset time, it will begin sending a 500Hz standard heartbeat signal. After receiving the heartbeat signal, the signal interaction unit will convert the heartbeat signal into an electrical signal and transmit it to the control unit.

[0126] S403. If the restart result indicates that the domain controller has restarted successfully, a domain controller restart success indication will be pushed to allow the user to unlock the car door.

[0127] In this step, after confirming that the domain controller has restarted successfully, a domain controller restart success indication will be pushed to the user so that the user can unlock the car door using the normal unlocking method.

[0128] In one possible implementation, a domain controller restart success indication can be sent to the user by controlling an indicator light flashing or a buzzer sounding on the exterior of the vehicle.

[0129] For example, the buzzer located in the control unit emits a "beep" sound.

[0130] The vehicle door unlocking method provided in this embodiment, when the domain controller is unable to respond normally to the door unlocking operation due to a system crash, sends a restart signal to the domain controller through an independently designed control unit to attempt to restart the domain controller and restore its normal function, so that the door can be unlocked smoothly. This effectively solves the problem of door unlocking failure in keyless vehicles when the main control board is crashed, thereby improving the security and reliability of vehicle door lock design.

[0131] Furthermore, Figure 4 This is a flowchart illustrating a door unlocking method provided in Embodiment 4 of this application. This method is applied to the control unit in the redundant door unlocking system described in the above system embodiments, such as... Figure 4 As shown, based on the above embodiments, the method further includes:

[0132] S501. If the restart result indicates that the domain controller failed to restart, push an authentication instruction to the user.

[0133] In this step, after confirming that the domain controller has restarted successfully, in order to guide the user to take other measures to unlock the device, an authentication instruction needs to be pushed to the user to enable the user to proceed with the authentication-based unlocking method.

[0134] In one possible implementation, authentication instructions can be sent to the user by controlling indicator lights flashing or a buzzer sounding on the exterior of the vehicle.

[0135] For example, the LED indicator (red) on the sensor area outside the door handle can be controlled to start flashing (frequency 1Hz) to prompt the user to verify.

[0136] It should be noted that the "Push Domain Controller Restart Success Indication" and the "Push Authentication Indication" should be presented differently so that users can distinguish the meaning of the different indications and thus guide them to perform the corresponding subsequent operations. For example, they can be distinguished by changing the indicator light color, or by using different carriers for the prompt (such as one using an indicator light and the other using a buzzer). This application does not impose specific restrictions on the specific push format.

[0137] S502, Obtain the user's verification result.

[0138] In this step, the verification result from the verification unit will be received.

[0139] In one possible implementation, this step specifically includes: obtaining the verification result of the vehicle identification information in the RFID key sent by the verification unit; or, receiving the verification result of the user's identity sent by the verification unit communication module.

[0140] It should be understood that, based on the redundant door unlocking system provided in Embodiment 2, the verification unit will provide at least two verification methods, and the user can choose either method for identity verification.

[0141] As a specific example, when a user selects RFID key-based verification, the user places the vehicle RFID key close to the sensing area (distance ≤ 5cm). When the RFID unit successfully reads the VIN encrypted data in the RFID key, the LED indicator light turns solid (blue) to indicate that the user has successfully read the data. The processing unit decrypts the encrypted data using the national cryptographic SM4 chip and compares it with the pre-stored VIN. If the decrypted VIN matches the pre-stored VIN, the processing unit sends a verification result indicating that the verification has passed to the control unit.

[0142] As another specific example, when a user chooses the cloud-based verification method, the user places their mobile phone close to the NFC tag recognition area in the vehicle (distance ≤ 2cm), and the phone will automatically redirect to the cloud verification webpage. The user enters the last four digits of their bound mobile phone number on the webpage and clicks "Get Verification Code". After the cloud server verifies that the identity information is correct, it pushes a 6-digit dynamic code encrypted with AES-256 (valid for 2 minutes) and an SMS verification code to the mobile webpage. After the user enters the dynamic code and the verification code on the webpage and submits, the cloud server compares the timeliness and consistency of the dynamic code with the consistency of the verification code to obtain the verification result, and sends the verification result to the 4G module of the verification unit, so that the 4G module can send the verification result to the control unit.

[0143] S503. After the verification result indicates that the verification is successful, the hardware direct drive circuit in the redundant unlocking system of the vehicle door controls the door lock motor to unlock the vehicle door.

[0144] In this step, after the control unit confirms that the verification is successful, it will close the relay in the hardware direct drive circuit to enable the power supply unit to supply power to the door lock motor, thereby driving the door to unlock.

[0145] As a specific example, when the power supply unit includes a battery and a supercapacitor, after the relay in the hardware direct drive circuit is closed, the supercapacitor releases its stored energy and outputs 11V voltage to the hard-wired direct drive circuit; the door lock motor rotates in the forward direction and completes the unlocking action within 0.8 seconds (during this process, the voltage of the supercapacitor drops from 11V to 8V, which is still higher than the motor's operating threshold); the motor's built-in Hall sensor sends an unlocking completion signal back to the control unit.

[0146] Optionally, after the car door is successfully unlocked, a notification can be sent to the user, such as by controlling the LED indicator to flash green three times and then turn off, while the buzzer emits two "beep" sounds.

[0147] Optionally, when the power supply unit includes a battery and a supercapacitor, after the door is unlocked, the control unit will cut off the power supply from the supercapacitor to the door lock motor, initiate the supercapacitor recharging program (i.e., restore the battery's trickle charging of the supercapacitor), and then return to sleep mode. After the user opens the door, the main control failure can be handled through other means (such as jump-starting or reporting a repair).

[0148] The vehicle door unlocking method provided in this embodiment of the invention enables the smooth unlocking of the vehicle door when the domain controller crashes due to hardware failure or other reasons, and ensures the security of the unlocking process through an authentication process.

[0149] Figure 5 This is a schematic diagram of the structure of a vehicle door unlocking device provided in Embodiment 5 of the present invention, as shown below. Figure 5 As shown, the vehicle door unlocking device 60 includes:

[0150] The sending module 601 is used to send a restart signal to the vehicle's domain controller in response to detecting a user's operation on the physical reset button;

[0151] The first acquisition module 602 is used to acquire the restart result of the domain controller;

[0152] The first push module 603 is used to push a domain controller restart success indication if the restart result indicates that the domain controller has restarted successfully, so that the user can unlock the car door.

[0153] The vehicle door unlocking device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0154] Figure 6 This is a schematic diagram of the structure of a vehicle door unlocking device provided in Embodiment Six of this application, as shown below. Figure 6 As shown, based on the above embodiment, the vehicle door unlocking device 60 further includes:

[0155] The second push module 604 is used to push an authentication instruction to the user if the restart result indicates that the domain controller has failed to restart.

[0156] The second acquisition module 605 is used to acquire the verification result of the user;

[0157] The control module 606 is used to control the hardware direct drive circuit in the redundant unlocking system of the vehicle door to control the door lock motor to unlock the vehicle door after the verification result indicates that the verification is passed.

[0158] In one possible implementation, the second acquisition module 605 is specifically used for:

[0159] The system acquires the verification result of the vehicle identification information in the RFID key sent by the verification unit; or, it receives the verification result of the user's identity sent by the verification unit communication module.

[0160] In one possible implementation, the second push module 604 is specifically used to: control an indicator light located on the exterior of the vehicle body to flash or a buzzer to emit a prompt sound.

[0161] The vehicle door unlocking device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0162] Figure 7 This is a schematic diagram of the control unit provided in this application. Figure 7As shown, the control unit 103 provided in this embodiment includes at least one processor 1031 and a memory 1032. Optionally, the control unit 103 further includes a communication component 1033. The processor 1031, the memory 1032, and the communication component 1033 are connected via a bus 1034.

[0163] In a specific implementation, at least one processor 1031 executes computer execution instructions stored in memory 1032, causing at least one processor 1031 to perform the above-described method.

[0164] The specific implementation process of processor 1031 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0165] In the above embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0166] The memory may include read-only memory and random access memory. The memory may be volatile or non-volatile, or may include both. Non-volatile memory may include read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory may include random access memory (RAM), which serves as an external cache. Many forms of RAM are available by way of example, but not limitation. Examples include Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), Synchronous DRAM (SDRAM), Double Data Rate SDRAM (DDR SDRAM), Enhanced Synchronous DRAM (ESDRAM), Sync Link DRAM (SLDRAM), and Direct Rambus RAM (DR RAM).

[0167] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0168] This application also provides a vehicle including a body and the aforementioned redundant door unlocking system.

[0169] This application also provides a computer program product, including a computer program that, when executed, implements the above-described method.

[0170] This application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed, implement the above-described method.

[0171] The aforementioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as SRAM, EEPROM, EPROM, PROM, ROM, magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0172] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside within an ASIC. Alternatively, the processor and the readable storage medium can exist as discrete components in a device.

[0173] The division of units is merely a logical functional division; in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0174] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0175] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0176] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, ROM, RAM, magnetic disks, or optical disks.

[0177] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0178] The above embodiments are merely preferred embodiments provided to fully illustrate the present invention, and the scope of protection of the present invention is not limited thereto. Equivalent substitutions or modifications made by those skilled in the art based on the present invention are all within the scope of protection of the present invention.

[0179] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.

Claims

1. A redundant unlocking system for vehicle doors, characterized in that, include: A physical reset button, a power supply unit, and a control unit connected to the power supply unit; The physical reset button is located on the exterior of the vehicle body, and the control unit is connected to the vehicle's domain controller. In response to the user's operation of the physical reset button, the control unit sends a restart signal to the domain controller. If the control unit determines that the domain controller has restarted successfully, it pushes a domain controller restart success indication to allow the user to unlock the car door. The redundant unlocking system for the vehicle doors also includes: a verification unit connected to the power supply unit, and a hardware direct drive circuit; The verification unit is also connected to the control unit, and the hardware direct drive circuit is also connected to the control unit and the door lock motor of the vehicle. If the control unit determines that the domain controller has failed to restart, it pushes an authentication instruction to the user; The user's identity is verified by the verification unit. After the control unit confirms that the verification is successful, it controls the hardware direct drive circuit to control the door lock motor to unlock the car door.

2. The redundant unlocking system for vehicle doors according to claim 1, characterized in that, The redundant unlocking system for the vehicle doors further includes: a signal interaction unit connected between the domain controller and the control unit, wherein the signal interaction unit is an optocoupler; The control unit sends a restart signal to the domain controller through the optical coupling channel of the signal interaction unit, and monitors the restart result of the domain controller through the optical coupling channel.

3. The redundant unlocking system for vehicle doors according to claim 1, characterized in that, The power supply unit includes a battery and a supercapacitor. The battery is used to charge the supercapacitor, and the supercapacitor is used to supply power to the door lock motor through the hardware direct drive circuit.

4. The redundant unlocking system for vehicle doors according to claim 2, characterized in that, The restart signal is a reset pulse; and / or, The control unit obtains the restart result by listening to the heartbeat signal of the domain controller through the optical coupling channel of the signal interaction unit.

5. The redundant unlocking system for vehicle doors according to claim 1, characterized in that, The verification unit includes an RFID unit and a processing unit. The RFID unit is used to read the first vehicle identification information in the RFID key, and the processing unit is used to compare and verify the first vehicle identification information and the pre-stored second vehicle identification information, and feed back the verification result to the control unit.

6. The redundant unlocking system for vehicle doors according to claim 1, characterized in that, The verification unit includes an NFC tag and a communication module; the NFC tag stores cloud verification webpage information; the communication module is used to receive the verification result returned from the cloud and feed the verification result back to the control unit.

7. A method for unlocking a vehicle door, characterized in that, The method, applied to the control unit in the redundant door unlocking system according to any one of claims 1 to 6, comprises: In response to detecting user operation on the physical reset button, a restart signal is sent to the vehicle's domain controller; Obtain the restart result of the domain controller; If the restart result indicates that the domain controller has restarted successfully, a domain controller restart success indication is pushed to allow the user to unlock the car door.

8. The method according to claim 7, characterized in that, The method further includes: If the restart result indicates that the domain controller failed to restart, an authentication instruction is pushed to the user; Obtain the verification result for the user; After the verification result indicates that the verification is successful, the hardware direct drive circuit in the redundant unlocking system controls the door lock motor to unlock the door.

9. The method according to claim 8, characterized in that, Obtaining the verification result for the user includes: Obtain the verification result of the vehicle identification information in the RFID key sent by the verification unit; or, The user's identity is verified by the verification unit communication module.

10. The method according to claim 8 or 9, characterized in that, The step of pushing an authentication instruction to the user includes: The control is set to flash an indicator light or emit a buzzer sound on the exterior of the vehicle.

11. A vehicle door unlocking device, characterized in that, include: The sending module is used to send a restart signal to the vehicle's domain controller in response to the detection of user operation on the physical reset button; The first acquisition module is used to acquire the restart result of the domain controller; The first push module is used to push a domain controller restart success indication if the restart result indicates that the domain controller restarted successfully, so that the user can unlock the car door; the second push module is used to push an authentication indication to the user if the restart result indicates that the domain controller restarted failed. The second acquisition module is used to acquire the verification result of the user; The control module is used to control the hardware direct drive circuit in the redundant unlocking system of the vehicle door to control the door lock motor to unlock the door after the verification result indicates that the verification is passed.

12. A control unit, characterized in that, include: Memory and processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory, causing the processor to perform the vehicle door unlocking method as described in any one of claims 7-10.

13. A vehicle, characterized in that, include: The vehicle body and the redundant unlocking system for the doors as described in any one of claims 1 to 6.

Images