An intelligent protection method and system for master power supply abnormal power-off and a vehicle

Abstract

The application provides a kind of intelligent protection method, system and vehicle of master control power supply abnormal power-down, which comprises the following steps: if the vehicle is in the starting state, the voltage data of the vehicle body control module power supply, battery management system and vehicle control module are collected to determine whether the vehicle master control power supply has abnormal power-down fault;When it is determined that the power supply has abnormal power-down fault, the vehicle control module is controlled to send a power-on request to the vehicle body control module within a predetermined time threshold;Based on the response of the vehicle body control module to the power-on request, the ignition relay is controlled to re-attract to restore the vehicle master control power supply. By collecting multiple power supply data in real time and calculating the comprehensive abnormal score, early risk prediction is realized;The adaptive adjustment of the dynamic threshold improves the prediction accuracy, and the independent power supply design of the electronic gear shifter maintains the gear stable in the event of power failure, effectively avoiding the risk of accidental gear shifting, thereby improving the accuracy and reliability of the protection as a whole.

Description

Technical Field

[0001] This invention relates to the field of vehicle management technology, and in particular to an intelligent protection method, system, and vehicle for abnormal power failure of the main control power supply. Background Technology

[0002] With the rapid development of new energy vehicles in the fields of electrification, intelligence, and connectivity, electronic control units (ECUs) are accelerating their transformation towards a highly integrated development model. The increasing complexity of system functions places more stringent reliability requirements on the hardware architecture and software algorithms of the controller, especially in key indicators such as real-time performance, fault tolerance, and coordination.

[0003] If the vehicle's main power controller (ECU) software or hardware experiences an abnormal reset, it may cause the entire vehicle to lose power and the power system to be cut off during driving. This safety hazard not only threatens driving safety but also significantly reduces the user experience.

[0004] The existing vehicle main control power system adopts a single-point voltage monitoring mechanism based on a fixed threshold. For example, it triggers recovery or safety measures by detecting whether the power supply voltage of the VCU itself is lower than a preset value. However, it has the disadvantage of a single monitoring dimension, lack of real-time monitoring mechanism, and inability to provide early warning of potential faults. Summary of the Invention

[0005] In view of the shortcomings of the prior art, the purpose of this invention is to provide an intelligent protection method, system and vehicle for abnormal power failure of the main control power supply, which aims to solve the technical problem of poor security of the solutions in the prior art.

[0006] To achieve the above objectives, in a first aspect, the present invention provides: an intelligent protection method for abnormal power failure of the main control power supply, comprising the following steps:

[0007] The vehicle control module monitors the status of the vehicle system to determine whether the vehicle is in the starting state.

[0008] If the vehicle is in the starting state, collect voltage data of the body control module power supply, battery management system and vehicle control module to determine whether the vehicle main control power supply has experienced an abnormal power failure.

[0009] When a power failure is detected, the vehicle control module sends a power-on request to the body control module within a preset time threshold.

[0010] Based on the body control module's response to the power-on request, the ignition relay is re-engaged to restore the vehicle's main control power.

[0011] If the vehicle's main control power fails to recover, a safety control strategy is executed based on the vehicle control module. The safety control strategy includes linear speed reduction control and safety warning based on the current vehicle speed.

[0012] According to one aspect of the above technical solution, the steps of collecting voltage data from the body control module power supply, battery management system, and vehicle control module to determine whether the vehicle's main control power supply has experienced an abnormal power failure specifically include:

[0013] Wavelet decomposition was performed on the energy spectrum of each power supply voltage data, and the Mahalanobis distance between each voltage data and historical data was combined to calculate the comprehensive anomaly score.

[0014] The preset threshold is adaptively adjusted based on the historical comprehensive anomaly score, and the main control power supply of the vehicle is judged to have experienced an abnormal power failure based on whether the adjusted threshold is greater than the comprehensive anomaly score.

[0015] According to one aspect of the above technical solution, the calculation expression for the comprehensive anomaly score is as follows:

[0016] ;

[0017] ;

[0018] ;

[0019] ;

[0020] In the formula, S is the comprehensive anomaly score. The Mahalanobis distance is... For energy spectrum, and These are the weighting coefficients for the Mahalanobis distance and the energy spectrum, respectively. This represents the current voltage vector corresponding to each voltage data point. This is the mean vector of historical voltage data. Let covariance matrix be the variance matrix. Here are the detail coefficients after wavelet decomposition, where n is the number of coefficients, and v... n Rated voltage, , , These are the voltage data for the body control module, battery management system, and vehicle control module, respectively, with T representing the transpose symbol.

[0021] According to one aspect of the above technical solution, the calculation expression for the adaptively adjusted preset threshold is as follows:

[0022] ;

[0023] In the formula, The preset threshold is adaptively adjusted. This is the moving average of the comprehensive anomaly score. denoted as standard deviation, and k as the sensitivity factor.

[0024] According to one aspect of the above technical solution, the steps for determining whether the vehicle's main control power supply has experienced an abnormal power failure also include:

[0025] Calculate the deviation between the voltage data of each power supply and its rated value. If the deviation is greater than the judgment value, it is determined that the main control power supply of the vehicle has experienced an abnormal power failure.

[0026] According to one aspect of the above technical solution, the electronic shifter is powered by the vehicle control module through an independent power supply circuit. When an abnormal power failure occurs, the independent power supply circuit maintains continuous power supply to the electronic shifter, so that the gear position signal remains in the current state at the time of the failure.

[0027] Secondly, this solution also provides an intelligent protection system for abnormal power failure of the main control power supply, including:

[0028] The monitoring module is used to monitor the status of the vehicle system through the vehicle control module and determine whether the vehicle is in the starting state.

[0029] The judgment module is used to collect voltage data of the body control module power supply, battery management system and vehicle control module if the vehicle is in the starting state, so as to determine whether the main power supply of the vehicle has experienced an abnormal power failure.

[0030] The power-on module is used to control the vehicle control module to send a power-on request to the body control module within a preset time threshold when a power failure is detected.

[0031] The recovery module is used to control the ignition relay to re-engage based on the power-on request from the body control module, so as to restore the main control power of the vehicle.

[0032] The safety module is used to execute a safety control strategy based on the vehicle control module if the vehicle's main control power fails to recover. The safety control strategy includes linear speed reduction control based on the current vehicle speed and safety warning.

[0033] According to one aspect of the above technical solution, the judgment module is specifically used for:

[0034] Wavelet decomposition was performed on the energy spectrum of each power supply voltage data, and the Mahalanobis distance between each voltage data and historical data was combined to calculate the comprehensive anomaly score.

[0035] The preset threshold is adaptively adjusted based on the historical comprehensive anomaly score, and the main control power supply of the vehicle is judged to have experienced an abnormal power failure based on whether the adjusted threshold is greater than the comprehensive anomaly score.

[0036] According to one aspect of the above technical solution, the judgment module is further configured to:

[0037] Calculate the deviation between the voltage data of each power supply and its rated value. If the deviation is greater than the judgment value, it is determined that the main control power supply of the vehicle has experienced an abnormal power failure.

[0038] Thirdly, the present invention also provides a vehicle including the intelligent protection system for abnormal power failure of the main control power supply as described in the above technical solution.

[0039] Compared with the prior art, the beneficial effects of the present invention are as follows: by collecting multi-power source data in real time and calculating a comprehensive anomaly score, early risk prediction is achieved; the adaptively adjusted dynamic threshold improves the prediction accuracy; and the independent power supply design of the electronic shifter maintains gear stability in the event of a power failure, effectively avoiding the risk of accidental gear slippage, thereby improving the overall accuracy and reliability of protection. Attached Figure Description

[0040] Figure 1 This is a flowchart illustrating the intelligent protection method for abnormal power failure of the main control power supply in the first embodiment of the present invention.

[0041] Figure 2 This is a structural block diagram of the intelligent protection system for abnormal power failure of the main control power supply in the fourth embodiment of the present invention;

[0042] The following detailed description, in conjunction with the accompanying drawings, will further illustrate the present invention. Detailed Implementation

[0043] To facilitate understanding of the present invention, a more complete description will be given below with reference to the accompanying drawings. Several embodiments of the invention are illustrated in the drawings. However, the invention can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete.

[0044] It should be noted that when a component is said to be "fixed to" another component, it can be directly on the other component or there may be an intervening component. When a component is said to be "connected to" another component, it can be directly connected to the other component or there may be an intervening component. The terms "vertical," "horizontal," "left," "right," and similar expressions used in this document are for illustrative purposes only.

[0045] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used herein in the description of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The term "and / or" as used herein includes any and all combinations of one or more of the associated listed items.

[0046] Example 1

[0047] Please see Figure 1 The figure shows a flowchart of the intelligent protection method for abnormal power failure of the main control power supply in the first embodiment of the present invention. As shown in the figure, the method includes the following steps:

[0048] Step S100 involves monitoring the vehicle system status through the vehicle control module to determine whether the vehicle is in the start-up state. Specifically, in this embodiment, the vehicle control module (VCU) integrates multiple sensors and controller networks (such as the CAN bus) to collect key parameters in real time, including ignition switch signals, high-voltage system status, motor operation indicators, and feedback data from the battery management system (BMS). Based on this data, the VCU performs logical judgments. For example, when it detects that the ignition switch is in the "ON" position, the high-voltage system is powered on and has no fault codes, and the motor is in standby or running mode, it determines that the vehicle is in the READY state. This process ensures that subsequent multi-power source checks and fault protection mechanisms are triggered only when the vehicle is active and drivable, avoiding erroneous operations when the vehicle is off or in a dormant state.

[0049] Step S200: If the vehicle is in the started state, collect voltage data from the body control module power supply, battery management system, and vehicle control module to determine whether an abnormal power failure has occurred in the vehicle's main control power supply. Specifically, the steps of collecting voltage data from the body control module power supply, battery management system, and vehicle control module to determine whether an abnormal power failure has occurred in the vehicle's main control power supply include:

[0050] Wavelet decomposition was performed on the energy spectrum of each power supply voltage data, and the Mahalanobis distance between each voltage data and historical data was combined to calculate the comprehensive anomaly score.

[0051] The preset threshold is adaptively adjusted based on the historical comprehensive anomaly score, and the main control power supply of the vehicle is judged to have experienced an abnormal power failure based on whether the adjusted threshold is greater than the comprehensive anomaly score.

[0052] Preferably, the calculation expression for the above-mentioned comprehensive anomaly score is as follows:

[0053] ;

[0054] ;

[0055] ;

[0056] ;

[0057] In the formula, S is the comprehensive anomaly score. The Mahalanobis distance is... For energy spectrum, and These are the weighting coefficients for the Mahalanobis distance and the energy spectrum, respectively. This represents the current voltage vector corresponding to each voltage data point. This is the mean vector of historical voltage data. Let covariance matrix be the variance matrix. Here are the detail coefficients after wavelet decomposition, where n is the number of coefficients, and v... n Rated voltage, , , These are the voltage data for the body control module, battery management system, and vehicle control module, respectively, with T representing the transpose symbol.

[0058] In this plan, Based on the assumption of multivariate normal distribution, through the covariance matrix The deviation of the current voltage vector V from the historical normal distribution μ is quantified; the larger the value, the higher the risk of systemic anomalies. High-frequency detail components of the voltage signal are extracted using wavelet transform. An increase in energy value indicates the presence of latent faults such as transient pulses or oscillations in the power supply. α and β control the contribution of the two types of features to the overall score, and their values ​​are determined through training with historical fault data. When the system focuses more on persistent voltage drift, α is set to > β (e.g., α = 0.6, β = 0.4); when the focus is on capturing instantaneous voltage spikes, β is set to > α.

[0059] The formula for calculating the adaptively adjusted preset threshold is:

[0060] ;

[0061] In the formula, The preset threshold is adaptively adjusted. This is the moving average of the comprehensive anomaly score. denoted as standard deviation, and k as the sensitivity factor.

[0062] Furthermore, the steps to determine whether the vehicle's main control power supply has experienced an abnormal power failure also include:

[0063] Calculate the deviation between the voltage data of each power supply and its rated value. If the deviation is greater than the judgment value, it is determined that the main control power supply of the vehicle has experienced an abnormal power failure.

[0064] The VCU (Vehicle Control Unit) synchronously acquires the power supply voltage of the Body Control Module (BCM) via multiple high-precision ADCs (Analog-to-Digital Converters). Battery Management System (BMS) power supply voltage and VCU's own power supply voltage Specifically, in some application scenarios of this embodiment, the VCU synchronously acquires three voltage data streams at a sampling frequency of not less than 100Hz, and performs anomaly detection through the following multi-source verification mechanism: First, it calculates the voltage of each power supply relative to its rated value v. n The instantaneous deviation is measured; when any deviation exceeds the judgment value, a primary anomaly flag is triggered. To further reduce the false alarm rate, the VCU combines historical data and calculates a multivariate anomaly score S using the Mahalanobis distance algorithm. When S > 0.05, the score is determined by the instantaneous deviation. It was eventually confirmed that the main control power supply had experienced an abnormal power failure.

[0065] Step S300: When a power failure is detected, the vehicle control module sends a power-on request to the body control module within a preset time threshold. In some application scenarios of this implementation, when the vehicle control module (VCU) detects a power failure (abnormal power-off condition) of the KL15 power supply through multi-power supply verification, it sends a power-on request to the body control module (BCM) within 200ms.

[0066] In step S400, based on the body control module's response to the power-on request, the ignition relay is re-engaged to restore the vehicle's main control power. The BCM then re-engages the ignition relay, restoring the vehicle's power supply within a transient time, ensuring that the vehicle's continued normal operation is unaffected.

[0067] Preferably, in this embodiment, the electronic shifter is powered by the vehicle control module through an independent power supply circuit. When an abnormal power failure occurs, the independent power supply circuit maintains a continuous power supply to the electronic shifter, ensuring the gear position signal remains in its current state at the time of the failure. The electronic shifter is powered independently by the VCU. In the event of a KL15 power failure, its power supply circuit remains normal, and the gear position signal will be stably maintained in its current state, effectively avoiding the risk of accidental gear disengagement due to power fluctuations.

[0068] Step S500: If the vehicle main control power fails to recover, a safety control strategy is executed based on the vehicle control module. The safety control strategy includes linear speed reduction control and safety warning based on the current vehicle speed.

[0069] Specifically, when the Vehicle Control Unit (VCU) is unable to restore the vehicle's main control power through the Body Control Module (BCM), the VCU will execute the following safety control strategies:

[0070] Based on the current vehicle speed, linear speed reduction control is implemented to eventually stabilize the vehicle speed at 30km / h, ensuring a smooth and shock-free deceleration process.

[0071] Immediately activate the hazard warning lights (double flashers) to send a clear warning signal to vehicles behind;

[0072] A fault alarm is issued to the driver via a human-machine interface (such as an instrument panel alert sound / text), clearly stating "Main control relay malfunction, please pull over and request assistance."

[0073] The driver should be continuously reminded to keep the steering wheel steady and gradually move to a safe area on the right side of the road to stop.

[0074] In summary, the intelligent protection method for abnormal power failure of the main control power supply in the above embodiments of the present invention achieves early risk prediction by collecting multi-power supply data in real time and calculating a comprehensive anomaly score; the adaptively adjusted dynamic threshold improves the prediction accuracy; and the independent power supply design of the electronic shifter maintains gear stability in the event of a power failure, effectively avoiding the risk of accidental gear slippage, thereby improving the overall accuracy and reliability of the protection.

[0075] Example 2

[0076] The second embodiment of this application also provides an intelligent protection system for abnormal power failure of the main control power supply. This system is used to implement the embodiments and preferred embodiments described above, and will not be repeated hereafter. As used below, the terms "module," "unit," "subunit," etc., can refer to a combination of software and / or hardware that performs a predetermined function. Although the system described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0077] like Figure 2 As shown, the system includes: a monitoring module 100, a judgment module 200, a power-on module 300, a recovery module 400, and a safety module 500.

[0078] The monitoring module 100 is used to monitor the status of the vehicle system through the vehicle control module and determine whether the vehicle is in the start-up state.

[0079] The judgment module 200 is used to collect voltage data of the body control module power supply, battery management system and vehicle control module if the vehicle is in the starting state, so as to determine whether the main control power supply of the vehicle has experienced an abnormal power failure.

[0080] The power-on module 300 is used to control the vehicle control module to send a power-on request to the body control module within a preset time threshold when a power failure is detected.

[0081] The recovery module 400 is used to control the ignition relay to re-engage based on the power-on request from the body control module, so as to restore the main control power of the vehicle.

[0082] The safety module 500 is used to execute a safety control strategy based on the vehicle control module if the vehicle main control power fails to recover. The safety control strategy includes linear speed reduction control based on the current vehicle speed and safety warning.

[0083] Preferably, in this embodiment, the judgment module 200 is specifically used for:

[0084] Wavelet decomposition was performed on the energy spectrum of each power supply voltage data, and the Mahalanobis distance between each voltage data and historical data was combined to calculate the comprehensive anomaly score.

[0085] The preset threshold is adaptively adjusted based on the historical comprehensive anomaly score, and the main control power supply of the vehicle is judged to have experienced an abnormal power failure based on whether the adjusted threshold is greater than the comprehensive anomaly score.

[0086] Preferably, in this embodiment, the judgment module 200 is further configured to:

[0087] Calculate the deviation between the voltage data of each power supply and its rated value. If the deviation is greater than the judgment value, it is determined that the main control power supply of the vehicle has experienced an abnormal power failure.

[0088] It should be noted that the modules can be functional modules or program modules, and can be implemented in software or hardware. For modules implemented in hardware, the modules can reside in the same processor; or the modules can be located in different processors in any combination.

[0089] The third embodiment of this application provides a vehicle including the intelligent protection system for abnormal power failure of the main control power supply in the above embodiments.

[0090] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this patent application should be determined by the appended claims.

Claims

1. An intelligent protection method for abnormal power failure of the main control power supply, characterized in that, Includes the following steps: The vehicle control module monitors the status of the vehicle system to determine whether the vehicle is in the starting state. If the vehicle is in the starting state, collect voltage data of the body control module power supply, battery management system and vehicle control module to determine whether the vehicle main control power supply has experienced an abnormal power failure. When a power failure is detected, the vehicle control module sends a power-on request to the body control module within a preset time threshold. Based on the body control module's response to the power-on request, the ignition relay is re-engaged to restore the vehicle's main control power. If the vehicle's main control power fails to recover, a safety control strategy is executed based on the vehicle control module. The safety control strategy includes linear speed reduction control based on the current vehicle speed and a safety warning. The specific steps involved in collecting voltage data from the body control module power supply, battery management system, and vehicle control module to determine whether the vehicle's main control power supply has experienced an abnormal power failure include: Wavelet decomposition was performed on the energy spectrum of each power supply voltage data, and the Mahalanobis distance between each voltage data and historical data was combined to calculate the comprehensive anomaly score. The preset threshold is adaptively adjusted based on the historical comprehensive anomaly score, and the main control power supply of the vehicle is judged to have experienced an abnormal power failure based on whether the adjusted threshold is greater than the comprehensive anomaly score.

2. The intelligent protection method for abnormal power failure of the main control power supply according to claim 1, characterized in that, The formula for calculating the comprehensive anomaly score is as follows: ； ； ； ； In the formula, S is the comprehensive anomaly score. The Mahalanobis distance is... For energy spectrum, and These are the weighting coefficients for the Mahalanobis distance and the energy spectrum, respectively. This represents the current voltage vector corresponding to each voltage data point. This is the mean vector of historical voltage data. Let covariance matrix be the variance matrix. Here are the detail coefficients after wavelet decomposition, where n is the number of coefficients, and v... n Rated voltage, , , These are the voltage data for the body control module, battery management system, and vehicle control module, respectively, with T representing the transpose symbol.

3. The intelligent protection method for abnormal power failure of the main control power supply according to claim 1, characterized in that, The formula for calculating the adaptively adjusted preset threshold is: ； In the formula, The preset threshold is adaptively adjusted. This is the moving average of the comprehensive anomaly score. denoted as standard deviation, and k as the sensitivity factor.

4. The intelligent protection method for abnormal power failure of the main control power supply according to claim 1, characterized in that, The steps to determine whether the vehicle's main control power supply has experienced an abnormal power failure also include: Calculate the deviation between the voltage data of each power supply and its rated value. If the deviation is greater than the judgment value, it is determined that the main control power supply of the vehicle has experienced an abnormal power failure.

5. The intelligent protection method for abnormal power failure of the main control power supply according to claim 1, characterized in that, The electronic shifter is powered by the vehicle control module through an independent power supply circuit. When an abnormal power failure occurs, the independent power supply circuit maintains a continuous power supply to the electronic shifter, so that the gear position signal remains in the current state at the time of the failure.

6. An intelligent protection system for abnormal power failure of the main control power supply, characterized in that, include: The monitoring module is used to monitor the status of the vehicle system through the vehicle control module and determine whether the vehicle is in the starting state. The judgment module is used to collect voltage data of the body control module power supply, battery management system and vehicle control module if the vehicle is in the starting state, so as to determine whether the main power supply of the vehicle has experienced an abnormal power failure. The power-on module is used to control the vehicle control module to send a power-on request to the body control module within a preset time threshold when a power failure is detected. The recovery module is used to control the ignition relay to re-engage based on the power-on request from the body control module, so as to restore the main control power of the vehicle. The safety module is used to execute a safety control strategy based on the vehicle control module if the main power supply of the vehicle fails to recover. The safety control strategy includes linear speed reduction control based on the current vehicle speed and safety warning. Specifically, the judgment module is used for: Wavelet decomposition was performed on the energy spectrum of each power supply voltage data, and the Mahalanobis distance between each voltage data and historical data was combined to calculate the comprehensive anomaly score. The preset threshold is adaptively adjusted based on the historical comprehensive anomaly score, and the main control power supply of the vehicle is judged to have experienced an abnormal power failure based on whether the adjusted threshold is greater than the comprehensive anomaly score.

7. The intelligent protection system for abnormal power failure of the main control power supply according to claim 6, characterized in that, The judgment module is also used for: Calculate the deviation between the voltage data of each power supply and its rated value. If the deviation is greater than the judgment value, it is determined that the main control power supply of the vehicle has experienced an abnormal power failure.

8. A vehicle, characterized in that, The intelligent protection system for abnormal power failure of the main control power supply as described in claim 6 or 7.

Images