Execution control system, braking system and vehicle

Abstract

The invention provides an execution control system, a braking system and a vehicle, and relates to the technical field of vehicle braking control, the execution control system comprises a load, a micro-control processing module, a first power supply module, a second power supply module, a communication module, a safety diagnosis module and a control execution module, the safety diagnosis module is used for detecting a first running state when the control execution module runs; the micro-control processing module is used for detecting a second operation state of the first power supply module and the second power supply module, and switching to a preset power supply mode according to the second operation state; the micro-control processing module is further configured to receive a preset instruction of the communication module, receive the first operation state, and control operation of the load according to a preset strategy by controlling the execution module based on the preset instruction and the first operation state. The problem that in the prior art, an execution control system is low in safety is solved.

Description

Technical Field

[0001] This disclosure relates to the field of vehicle braking control technology, and in particular to an execution control system, a braking system, and a vehicle. Background Technology

[0002] As a core component of automotive safety, the reliability, real-time performance, and fault tolerance of the vehicle braking system directly affect the safety of drivers and passengers. With the popularization of electronic control technology, traditional purely mechanical or hydraulic braking systems have been gradually replaced by electronically controlled braking systems (such as EHB and EMB). These systems rely heavily on the precise control of actuators (such as hydraulic valves and motors) by the electronic control unit (ECU).

[0003] However, existing vehicle braking control systems cannot meet the highest safety integrity level requirements for controlling systemic failures and random hardware failures.

[0004] Therefore, there is an urgent need to develop a vehicle braking control system with higher safety performance to provide a solid safety guarantee for vehicle driving. Summary of the Invention

[0005] In view of the shortcomings of the prior art, this disclosure provides an execution control system, a braking system and a vehicle, which solves the problem of low safety of the execution control system in the prior art.

[0006] At least one embodiment of this application provides an execution control system, including: a load, a microcontroller processing module, and a first power supply module, a second power supply module, a communication module, a safety diagnostic module, and a control execution module connected to the microcontroller processing module, wherein... The security diagnostic module and the load are respectively connected to the control execution module, and the security diagnostic module is configured to detect the first running state of the control execution module during operation. The microcontroller processing module is configured to detect the second operating state of the first power module and the second power module, and switch to a preset power supply mode according to the second operating state. The preset power supply mode includes power supply based on the first power module, power supply based on the second power module, or power supply based on the first power module and the second power module working together. The microcontroller processing module is also configured to receive preset instructions from the communication module and receive the first operating state, and based on the preset instructions and the first operating state, control the operation of the load according to a preset strategy through the control execution module.

[0007] The technical solution provided in this application has at least the following beneficial effects: This application monitors the second operating state of the dual power supply in real time through a microcontroller processing module and switches to three preset power supply modes based on the second operating state. This enables immediate switching to other effective power supplies when any power supply module fails, avoiding power failure of the braking system. At the same time, the coordinated power supply mode of the first and second power supply modules can also cope with instantaneous high power demand (such as ABS high-frequency actuation) and prevent overload of a single power supply. The safety diagnostic module directly connects to the control execution module, collects the first operating status in real time, and transmits the data directly to the microcontroller processing module to achieve early and accurate fault identification. Based on the preset instructions and the first operating status, the preset instructions can be executed in a targeted manner according to the abnormal status of the current control execution module to control the load according to the preset strategy, thereby further improving the security of the system.

[0008] In one embodiment of this application, an execution control system is provided, wherein the communication module includes: a first communication unit and a second communication unit, wherein, Both the first communication unit and the second communication unit are connected to the microcontroller processing module to transmit the preset instructions to the microcontroller processing module respectively; The microcontroller processing module is also configured to detect communication anomalies between the first communication unit and the second communication unit, so as to receive a preset instruction from the second communication unit when the first communication unit experiences a communication anomaly, or to receive a preset instruction from the first communication unit when the second communication unit experiences a communication anomaly.

[0009] In one embodiment of the execution control system provided in this application, the safety diagnostic module is also connected to the load to monitor the third operating state of the load and send the third operating state to the microcontroller processing module; The microcontroller processing module is also configured to cross-validate the first operating state through the third operating state. If the validation passes, the control execution module controls the operation of the load according to a preset strategy, in conjunction with the preset instruction and the first operating state.

[0010] In one embodiment of this application, an execution control system is provided, wherein the safety diagnostic module is used to collect electrical information on the control execution module, and to determine the first operating state of the control execution module based on a comparison of the electrical information with a preset value.

[0011] In one embodiment of this application, an execution control system is provided, wherein determining the first operating state of the control execution module based on a comparison between the electrical information and a preset value includes: If the electrical information is less than or equal to the first preset value and greater than or equal to the second preset value, the first operating state is determined to be the first preset state. The preset strategy includes: When the control execution module is in the first preset state, the operation of the load is controlled by the control execution module based on the preset instructions.

[0012] In one embodiment of the execution control system provided in this application, the step of determining the first operating state of the control execution module based on the comparison between the electrical information and a preset value further includes: If the electrical information is greater than the first preset value, the first operating state is determined to be the second preset state; The preset strategy also includes: When the control execution module is in the second preset state, the number of times the load is controlled to run by the control execution module according to the preset instructions is limited based on a preset number of times.

[0013] In one embodiment of the execution control system provided in this application, the step of determining the first operating state of the control execution module based on the comparison between the electrical information and a preset value further includes: If the electrical information is less than the second preset value, the first operating state is determined to be the third preset state; The preset strategy also includes: When the control execution module is in the third preset state, the microcontroller processing module refuses to execute the received preset instruction.

[0014] In one embodiment of the execution control system provided in this application, the step of switching to a preset power supply mode according to the second operating state includes: When the second operating state indicates that the second power module is abnormal and the first power module is normal, power is supplied based on the first power module. When the second operating state indicates that the first power module is abnormal and the second power module is normal, power is supplied based on the second power module. When the second operating state indicates that both the first power module and the second power module are functioning normally, power is supplied in coordination between the first power module and the second power module.

[0015] This application also provides a braking system, including: a braking control module and a plurality of execution control systems as described above that are communicatively connected to the braking control module.

[0016] This application also provides a vehicle, including: a vehicle body, and a braking system as described above disposed on the vehicle body. Attached Figure Description

[0017] Figure 1 This is a schematic diagram of the structure of an execution control system provided in an embodiment of the present disclosure; Figure 2 This is a schematic diagram of the structure of a braking system provided in an embodiment of the present disclosure; Figure 3 for Figure 2 The control flowchart of the braking system is shown. Detailed Implementation

[0018] The principles and features of this disclosure are described below. The examples given are for illustrative purposes only and are not intended to limit the scope of this disclosure.

[0019] This application provides an execution control system, please refer to [reference here]. Figure 1 As shown, it includes: a load, a microcontroller processing module, and a first power supply module, a second power supply module, a communication module, a safety diagnostic module, and a control execution module connected to the microcontroller processing module, wherein... The security diagnostic module and the load are respectively connected to the control execution module, and the security diagnostic module is configured to detect the first running state of the control execution module during operation. The microcontroller processing module is configured to detect the second operating state of the first power module and the second power module, and switch to a preset power supply mode according to the second operating state. The preset power supply mode includes power supply based on the first power module, power supply based on the second power module, or power supply based on the first power module and the second power module working together. The microcontroller processing module is also configured to receive preset instructions from the communication module and receive the first operating state, and based on the preset instructions and the first operating state, control the operation of the load according to a preset strategy through the control execution module.

[0020] This application monitors the second operating state of the dual power supply in real time through a microcontroller processing module and switches to three preset power supply modes based on the second operating state. This enables immediate switching to other effective power supplies when any power supply module fails, avoiding power failure of the braking system. At the same time, the mode of the first power supply module and the second power supply module working together can also cope with instantaneous high power demand (such as ABS high-frequency actuation) and prevent overload of a single power supply. The safety diagnostic module directly connects to the control execution module, collects the first operating status in real time, and transmits the data directly to the microcontroller processing module to achieve early and accurate fault identification. Based on the preset instructions and the first operating status, the preset instructions can be executed in a targeted manner according to the abnormal status of the current control execution module to control the load according to the preset strategy, thereby further improving the security of the system.

[0021] In one exemplary embodiment provided in this application, the communication module includes: a first communication unit and a second communication unit, wherein both the first communication unit and the second communication unit are CAN communication.

[0022] Both the first communication unit and the second communication unit are connected to the microcontroller processing module to transmit the preset instructions to the microcontroller processing module respectively; The microcontroller processing module is also configured to detect communication anomalies between the first communication unit and the second communication unit, so as to receive a preset instruction from the second communication unit when the first communication unit experiences a communication anomaly, or to receive a preset instruction from the first communication unit when the second communication unit experiences a communication anomaly.

[0023] By setting up the first communication unit and the second communication unit, network data security can be guaranteed when a single CAN communication fails. For the execution control system provided in this application, the security and reliability of external communication can be improved.

[0024] In one exemplary embodiment provided in this application, the security diagnostic module is also connected to the load to monitor a third operating state of the load and send the third operating state to the microcontroller processing module; The microcontroller processing module is also configured to cross-validate the first operating state through the third operating state. If the validation passes, the control execution module controls the operation of the load according to a preset strategy, in conjunction with the preset instruction and the first operating state.

[0025] By collecting the third operating state on the load, the first operating state can be cross-validated using the third operating state to determine whether the security diagnostic module has any abnormal issues, thereby improving the system's security redundancy.

[0026] In an exemplary embodiment provided in this application, the safety diagnostic module is used to collect electrical information on the control execution module, so as to determine the first operating state of the control execution module based on the comparison between the electrical information and a preset value; Specifically, determining the first operating state of the control execution module based on a comparison between the electrical information and a preset value includes: If the electrical information is less than or equal to the first preset value and greater than or equal to the second preset value, the first operating state is determined to be the first preset state. The preset strategy includes: When the control execution module is in a first preset state, the operation of the load is controlled by the control execution module based on the preset instructions; If the electrical information is greater than the first preset value, the first operating state is determined to be the second preset state; The preset strategy also includes: When the control execution module is in the second preset state, the number of times the load is controlled to run by the control execution module according to the preset instructions is limited based on a preset number of times. If the electrical information is less than the second preset value, the first operating state is determined to be the third preset state; The preset strategy also includes: When the control execution module is in the third preset state, the microcontroller processing module refuses to execute the received preset instruction.

[0027] When the control execution module is determined to be in different preset states, the microcontroller can execute preset instructions accordingly, thereby ensuring the system's security.

[0028] In an exemplary embodiment provided in this application, the step of switching to a preset power supply mode according to the second operating state includes: When the second operating state indicates that the second power module is abnormal and the first power module is normal, power is supplied based on the first power module. When the second operating state indicates that the first power module is abnormal and the second power module is normal, power is supplied based on the second power module. When the second operating state indicates that both the first power module and the second power module are functioning normally, power is supplied based on the coordinated operation of the first power module and the second power module.

[0029] This application also provides a braking system, which can be found here. Figure 2 As shown, it includes: a braking control module and multiple execution control systems as described above that are communicatively connected to the braking control module; In this embodiment, there are four execution control systems. Figure 2 The three systems are represented by Intelligent Execution Control System 1#, Intelligent Execution Control System 2#, Intelligent Execution Control System 3#, and Intelligent Execution Control System 4#, respectively. The braking control module also includes two power supply circuits and two communication units. The switching logic of its power supply circuits is the same as that in the above-mentioned execution control system. That is, when the braking control module detects that one of the power supply circuits is abnormal, it switches to the other power supply circuit to provide power. When it detects that both power supply circuits are working normally, the two power supply circuits work together to provide power. One of the communication units in the braking control module is connected to the first and second communication units in the intelligent execution control system 1# and intelligent execution control system 2# respectively, so as to send preset commands to them; the other communication unit in the braking control module is connected to the first and second communication units in the intelligent execution control system 3# and intelligent execution control system 4# respectively, so as to send preset commands to them.

[0030] In summary, the working process of this braking system is as follows: Figure 3 As shown, firstly, the execution control system receives preset instructions from the vehicle braking control system, executes the control module, and drives the load to work according to the request of the vehicle braking control module.

[0031] When the microcontroller processing module in this execution control system detects an abnormality in the first or second communication unit, it simultaneously uses the safety diagnostic module to determine whether it and the control execution module are functioning normally. If they are functioning normally, the control execution module executes the intelligent control logic set by the microcontroller processing module according to the preset instructions.

[0032] When the microcontroller processing module receives electrical information from the safety diagnostic module (in this embodiment, this electrical information refers to the ratio of voltage information to current information), Figure 3 The first operating state of the control execution module (represented by V / I) is detected and diagnosed, and execution control is performed according to the safety policy. When the control execution module is detected to be in a first preset state, i.e., Min≤V / I≤Max, the load is controlled to run by the control execution module based on the preset instruction. When the electrical information is greater than the first preset value, i.e., V / I>Max, the first operating state is determined to be a second preset state. At this time, the number of times the load is controlled to run by the control execution module according to the preset instruction is limited based on a preset number of times. When the electrical information is less than the second preset value, i.e., V / I<Min, the first operating state is determined to be a third preset state. At this time, the microcontroller refuses to execute the received preset instruction and issues a safety alarm.

[0033] When the microcontroller processing module detects an abnormality in the first communication unit, it receives the corresponding preset instruction information through the second communication unit and issues an alarm for the first communication unit abnormality; when the microcontroller processing module detects an abnormality in the second communication unit, it receives the corresponding preset instruction information through the first communication unit and issues an alarm for the second communication unit abnormality.

[0034] Based on this, the execution control system provided in this application is not only an actuator, but also has certain intelligent control functions and strategies when the vehicle braking control module communicates abnormally or disconnects, which can improve the braking safety of the vehicle system. The braking system and execution control system in this application both adopt dual power supply. Firstly, this ensures the safety of the intelligent execution control system's power supply in the event of a single point of failure. Secondly, it can appropriately reduce the current of a single power supply during operation, thereby reducing power consumption. The dual CANFD communication in this application can ensure network data security in the event of a single CANFD failure. For the intelligent execution control system itself, this can improve the security and reliability of external communication. The intelligent execution control system adopts a modular design concept, which can be modularly added or removed according to the actual needs of the vehicle braking system, enabling multi-scenario applications of the braking system.

[0035] This application also provides a vehicle, including: a vehicle body, and a braking system as described above disposed on the vehicle body.

[0036] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this disclosure, "a plurality of" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0037] In this disclosure, unless otherwise expressly specified and limited, the terms "installation," "connection," "linking," "fixing," etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components, unless otherwise expressly limited. Those skilled in the art can understand the specific meaning of the above terms in this disclosure according to the specific circumstances.

[0038] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this disclosure. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0039] Although embodiments of the present disclosure have been shown and described above, it is to be understood that the above embodiments are exemplary and should not be construed as limiting the present disclosure. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of the present disclosure.

Claims

1. An execution control system, characterized in that, include: The system includes a load, a microcontroller processing module, and a first power supply module, a second power supply module, a communication module, a safety diagnostic module, and a control execution module connected to the microcontroller processing module. The security diagnostic module and the load are respectively connected to the control execution module, and the security diagnostic module is configured to detect the first running state of the control execution module during operation. The microcontroller processing module is configured to detect the second operating state of the first power module and the second power module, and switch to a preset power supply mode according to the second operating state. The preset power supply mode includes power supply based on the first power module, power supply based on the second power module, or power supply based on the first power module and the second power module working together. The microcontroller processing module is also configured to receive preset instructions from the communication module and receive the first operating state, and based on the preset instructions and the first operating state, control the operation of the load according to a preset strategy through the control execution module.

2. The execution control system according to claim 1, characterized in that, The communication module includes: a first communication unit and a second communication unit, wherein... Both the first communication unit and the second communication unit are connected to the microcontroller processing module to transmit the preset instructions to the microcontroller processing module respectively; The microcontroller processing module is also configured to detect communication anomalies between the first communication unit and the second communication unit, so as to receive a preset instruction from the second communication unit when the first communication unit experiences a communication anomaly, or to receive a preset instruction from the first communication unit when the second communication unit experiences a communication anomaly.

3. The execution control system according to claim 1, characterized in that: The safety diagnostic module is also connected to the load to monitor the third operating state of the load and send the third operating state to the microcontroller processing module. The microcontroller processing module is also configured to cross-validate the first operating state through the third operating state. If the validation passes, the control execution module controls the operation of the load according to a preset strategy, in conjunction with the preset instruction and the first operating state.

4. The execution control system according to claim 1, characterized in that: The safety diagnostic module is used to collect electrical information from the control execution module, and to determine the first operating state of the control execution module based on the comparison between the electrical information and a preset value.

5. An execution control system according to claim 4, characterized in that, The step of determining the first operating state of the control execution module based on the comparison between the electrical information and a preset value includes: If the electrical information is less than or equal to the first preset value and greater than or equal to the second preset value, the first operating state is determined to be the first preset state. The preset strategy includes: When the control execution module is in the first preset state, the operation of the load is controlled by the control execution module based on the preset instructions.

6. An execution control system according to claim 5, characterized in that, The step of determining the first operating state of the control execution module based on the comparison between the electrical information and a preset value further includes: If the electrical information is greater than the first preset value, the first operating state is determined to be the second preset state; The preset strategy also includes: When the control execution module is in the second preset state, the number of times the load is controlled to run by the control execution module according to the preset instructions is limited based on a preset number of times.

7. An execution control system according to claim 5, characterized in that, The step of determining the first operating state of the control execution module based on the comparison between the electrical information and a preset value further includes: If the electrical information is less than the second preset value, the first operating state is determined to be the third preset state; The preset strategy also includes: When the control execution module is in the third preset state, the microcontroller processing module refuses to execute the received preset instruction.

8. An execution control system according to claim 1, characterized in that, The step of switching to a preset power supply mode according to the second operating state includes: When the second operating state indicates that the second power module is abnormal and the first power module is normal, power is supplied based on the first power module. When the second operating state indicates that the first power module is abnormal and the second power module is normal, power is supplied based on the second power module. When the second operating state indicates that both the first power module and the second power module are functioning normally, power is supplied based on the coordinated operation of the first power module and the second power module.

9. A braking system, characterized in that, include: A braking control module and a plurality of execution control systems as described in any one of claims 1 to 8, which are communicatively connected to the braking control module.

10. A vehicle, characterized in that, include: The vehicle body, and a braking system as described in claim 9 disposed on the vehicle body.

Images