Extended-range commercial vehicle fault processing method and system based on multi-level grading and safety degradation control

By constructing a fault assessment model and a fault handling priority matrix, combined with a multi-level fault association knowledge graph, the system achieves refined classification and differentiated handling of faults in range-extended commercial vehicles. This solves the problem of imprecise fault handling in existing technologies, improves fault identification accuracy and systematicity, and ensures driving safety and operational efficiency.

CN121635265APending Publication Date: 2026-03-10NANJING AE SYST TECH CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-12-09
Publication Date
2026-03-10

AI Technical Summary

Technical Problem

Existing fault handling methods for range-extended commercial vehicles lack a systematic multi-level classification model, which makes it impossible to make precise classification judgments and differentiated treatments. This results in performance loss under minor faults or insufficient response to serious faults, affecting driving safety.

Method used

By constructing a fault assessment model and a fault handling priority matrix, we can achieve refined hierarchical management of fault information. Combined with multi-level fault association knowledge graph technology, we can dynamically adjust the degradation control strategy, including power limiting and vehicle speed limiting, to ensure safety and efficiency.

Benefits of technology

It enables accurate identification and differentiated handling of faults in range-extended commercial vehicles, improves fault identification accuracy and systematicity, ensures driving safety and operational efficiency, and provides intuitive fault status feedback and adaptive optimization.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121635265A_ABST
    Figure CN121635265A_ABST
Patent Text Reader

Abstract

The invention discloses an extended-range commercial vehicle whole vehicle fault processing method and system based on multistage grading and safety degradation control, and relates to the technical field of new energy vehicle control and whole vehicle fault diagnosis. Meanwhile, a system priority identifier to which a fault source controller unit belongs is obtained, a degradation control strategy type is determined through a constructed fault processing priority matrix, corresponding limiting parameters are matched, and hierarchical control is carried out on the extended-range power system; and sending the fault grade and degradation control state information to an instrument for display, monitoring the state change of the fault source controller unit, and dynamically updating the fault evaluation model. According to the invention, safe and stable operation of the extended-range commercial vehicle in a complex fault environment is realized.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the field of new energy vehicle control and vehicle fault diagnosis, in particular to a range-extended commercial vehicle whole vehicle fault processing method and system based on multi-level grading and safe degradation control. BACKGROUND

[0002] With the rapid development of new energy industry, range-extended commercial vehicles gradually become an important path for commercial vehicle electrification transformation due to their dual advantages of electric drive and engine auxiliary power generation. Compared with traditional pure electric vehicles, range-extended commercial vehicles can rely on the range extender to provide additional energy when the battery power is insufficient, thereby effectively alleviating range anxiety and improving adaptability in long-distance transportation scenarios. However, under complex operating conditions, the whole vehicle is coordinated by multiple control systems, and high-voltage power systems, high-voltage accessory systems, and range extension control systems may all produce faults of varying degrees, directly affecting the safety and operating efficiency of the vehicle. Existing fault processing methods are mostly based on a single mapping relationship, i.e., "a certain fault corresponds to a certain strategy", lacking comprehensive consideration of fault levels, vehicle operating conditions, and control system priorities, often leading to overly conservative or insufficient processing measures. For example, when a minor fault occurs, excessive restrictions may affect transportation efficiency, while in the case of a serious fault, failure to respond quickly may endanger road safety. Therefore, how to achieve multi-level grading processing and safe degradation control has become a key problem in the whole vehicle fault management of range-extended commercial vehicles.

[0003] CN116714571A Range-extended vehicle fault processing method, device, equipment and medium, discloses a fault processing mechanism for range-extended vehicles. This method can analyze fault codes when detecting controller abnormalities, and determine corresponding processing strategies according to the fault priority of the range extension controller or other controllers, improving processing capabilities under single or concurrent faults. However, this method mainly focuses on static decision-making of fault priorities of the range extension controller and other controllers, lacking a linkage adjustment mechanism for multi-dimensional control parameters such as power output and speed limit, making it difficult to achieve graded and differentiated dynamic control in different scenarios.

[0004] CN120245938A Range-extended commercial vehicle energy management method based on fuzzy control, proposes a method of using a fuzzy controller to optimize auxiliary unit power distribution in different working modes, which can balance the high power demand of the range extender and the charging demand when the battery is low, and has certain effect in energy management. However, this method focuses on energy optimization distribution and does not involve systematic fault processing strategies, making it impossible to achieve safe degradation control in the case of multiple system concurrent faults.

[0005] In summary, the existing fault handling method of the extended range commercial vehicle has deficiencies in the refinement of fault level division, the differentiation of control strategy and the transparency of information; first, there is a lack of systematic multi-level classification model, which leads to the inability to respond to faults of different severity levels; second, the existing strategy relies too much on single-dimensional priority judgment and fails to model the importance of the control system and the fault level comprehensively; third, there is a lack of linkage control of power limitation parameters and vehicle speed limitation parameters, which easily causes unnecessary performance loss under minor faults or insufficient response under serious faults, affecting driving safety. Therefore, the present application proposes an extended range commercial vehicle whole vehicle fault handling method and system based on multi-level classification and safety degradation control; by establishing a fault evaluation model and combining the controller system priority, a fault handling priority matrix is constructed, and then the corresponding degradation control strategy and limitation parameters are matched to realize dynamic classification regulation and safety degradation processing of the whole vehicle. SUMMARY

[0006] This section is intended to summarize some aspects of the embodiments of the present application and briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the abstract and title of the specification to avoid obscuring the purpose of this section, the abstract and the title, and such simplifications or omissions cannot be used to limit the scope of the present application.

[0007] In view of the problems of rough fault classification, static and single handling strategy and insufficient dynamic adaptability of the existing extended range commercial vehicle in the fault handling process, the present application is proposed.

[0008] Therefore, the problem to be solved by the present application is how to realize refined classification judgment and differentiated processing of the whole vehicle fault of the extended range commercial vehicle through a multi-level classification model and a safety degradation control mechanism, so as to ensure driving safety while taking into account the running efficiency of the whole vehicle.

[0009] To solve the above technical problems, the present application provides the following technical solutions: In a first aspect, the embodiments of the present application provide an extended range commercial vehicle whole vehicle fault handling method based on multi-level classification and safety degradation control, which comprises, According to the fault evaluation model, the fault code information is classified by level, and the system priority identifier to which the fault source controller unit belongs is obtained; Based on the fault level and the system priority identifier, the degradation control strategy type is determined through the constructed fault handling priority matrix, and the corresponding limitation parameters are matched, wherein the limitation parameters include power limitation parameters and vehicle speed limitation parameters ; Based on the degradation control strategy type and the limitation parameters, the extended range power system is controlled by level. The fault level and the degradation control state information are sent to an instrument display, while monitoring the fault source controller unit state changes and dynamically updating the fault assessment model.

[0010] As a preferred scheme of the whole vehicle fault handling method of the extended-range commercial vehicle based on multi-level hierarchical and safe degradation control, wherein: the hierarchical control is performed on the extended-range power system, including: According to the position relationship of each matrix element in the fault handling priority matrix, the degradation control strategy type is prioritized; When the degradation control strategy type is the emergency shutdown strategy type and the system priority identifier is the first system priority identifier or the second system priority identifier, a drive end torque zero command is sent to the motor controller MCU; When the degradation control strategy type is the emergency shutdown strategy type and the system priority identifier is the third system priority identifier, a double shutdown control operation is performed; When the degradation control strategy type is the power limitation strategy type, the corresponding power limitation parameter is selected for differential control according to the system priority identifier, and the corresponding vehicle speed limitation control is performed synchronously; When the fault source controller unit identifier corresponds to the extended range control system and the degradation control strategy type is the power limitation strategy type, the generator maximum output power limitation instruction based on the generator power limitation parameter is issued to the extended range controller EMU while performing drive end power limitation and vehicle speed limitation; After issuing each control instruction, the motor controller MCU, the transmission controller TCU, and the extended range controller EMU are continuously monitored through the CAN bus to obtain control instruction execution state feedback information; Based on the monitored control execution state feedback information, the degradation control strategy type is dynamically adjusted.

[0011] As a preferred scheme of the whole vehicle fault handling method of the extended-range commercial vehicle based on multi-level hierarchical and safe degradation control, wherein: the degradation control strategy type is determined by a fault handling priority matrix, including: Based on the combination relationship of the fault level and the system priority identifier, the corresponding degradation control strategy type is determined in the fault handling priority matrix, wherein the emergency shutdown strategy type, the power limitation strategy type, the vehicle speed limitation strategy type, and the warning prompt strategy type; Based on the degradation control strategy type, a differential limitation parameter combination is configured for different system priority identifiers; Based on the fault level and the system priority identifier, the power limitation parameter and the vehicle speed limitation parameter are gradient set. The logical verification is performed on the degradation control strategy type and the corresponding limit parameter combination, to ensure that the values of the power limit parameter and the vehicle speed limit parameter meet the requirements for safe operation of the vehicle.

[0012] As a preferred scheme of the range-extender commercial vehicle whole vehicle fault processing method based on multi-level grading and safe degradation control, wherein: based on the fault information comprehensive data set, a fault processing priority matrix is constructed with the first fault level to the third fault level as the row dimension and the first system priority identifier to the third system priority identifier as the column dimension.

[0013] As a preferred scheme of the range-extender commercial vehicle whole vehicle fault processing method based on multi-level grading and safe degradation control, wherein: the fault information comprehensive data set is obtained by The vehicle control unit VCU receives the fault code information sent by each controller unit through the CAN bus, and performs protocol analysis on the fault code information to extract the fault description information corresponding to the fault code identifier; The historical fault data is input into a fault evaluation model for evaluation processing, and a fault comprehensive score value is output. The fault comprehensive score value is compared with a preset fault threshold to determine the fault level corresponding to the fault description information; Based on the fault level judgment result, the fault source controller unit identifier is used to query a preset controller unit system attribution mapping table to determine the control system type to which the fault source controller unit belongs, and a corresponding system priority identifier is generated; The fault level corresponding to the fault description information, the fault source controller unit identifier, and the system priority identifier are associated and stored to form a fault information comprehensive data set.

[0014] As a preferred scheme of the range-extender commercial vehicle whole vehicle fault processing method based on multi-level grading and safe degradation control, wherein: the specific formula of the fault comprehensive score value is as follows: ; Wherein, is the fault comprehensive score value, is the monitoring time window length, n is the total number of fault nodes, is the attention weight of fault node i, is the graph embedding vector of fault node i, is the exponential decay coefficient, is the system priority identifier matrix, is the propagation path influence vector of fault node i, is the Gamma normalization function, for adjusting parameters, for a Mahalanobis distance-based information filtering function, for a fault severity attribute vector, for a reference vector, for a spectral norm of a fault influence factor matrix, for a noise variance, t is an integral variable; When the fault comprehensive score value is greater than the first fault threshold value, the fault code information is classified into a first fault level; when the fault comprehensive score value is between the second fault threshold value and the first fault threshold value, the fault code information is classified into a second fault level; when the fault comprehensive score value is lower than the second fault threshold value, the fault code information is classified into a third fault level.

[0015] As a preferred scheme of the whole vehicle fault processing method of the extended-range commercial vehicle based on multi-level grading and safe degradation control, wherein: the establishment method of the fault evaluation model, A fault domain knowledge ontology including a vehicle control unit VCU, a high-pressure accessory system, a high-pressure power system, and an extended-range control system is constructed. A mapping knowledge base of fault code identification and fault description information is established through CAN bus protocol analysis rules. Based on the fault domain knowledge ontology and the mapping knowledge base, a multi-level fault correlation knowledge graph with fault description information as nodes and fault propagation paths as edges is constructed through a knowledge extraction algorithm to identify the correlation between faults. The fault nodes in the multi-level fault correlation knowledge graph are mapped into low-dimensional vector representations using a graph embedding method, the importance weight of the fault description information in the graph is calculated through an attention mechanism, and a fault evaluation model is formed by combining the fault severity attribute and the system impact degree attribute.

[0016] In a second aspect, an embodiment of the present application provides a whole vehicle fault processing system of an extended-range commercial vehicle based on multi-level grading and safe degradation control, which comprises: A fault diagnosis and level evaluation module is configured to divide fault code information into levels according to a fault evaluation model and obtain a system priority identifier to which a fault source controller unit belongs. A degradation strategy decision module is configured to determine a degradation control strategy type through a constructed fault processing priority matrix based on the fault level and the system priority identifier, and match corresponding limit parameters, wherein the limit parameters include a power limit parameter and a vehicle speed limit parameter . A grading control execution module is configured to perform grading control on an extended-range power system based on the degradation control strategy type and the limit parameters. A state monitoring and human-computer interaction module is configured to send fault level and degraded control state information to an instrument display, while monitoring fault source controller unit state changes and dynamically updating the fault assessment model.

[0017] In a third aspect, an embodiment of the present application provides a computer device, comprising a memory and a processor, and the memory stores a computer program, wherein: the processor implements any step of the fault handling method for the range-extender commercial vehicle based on multi-level grading and safe degradation control when executing the computer program.

[0018] In a fourth aspect, an embodiment of the present application provides a computer readable storage medium, which stores a computer program, wherein: the computer program is executed by a processor to implement any step of the fault handling method for the range-extender commercial vehicle based on multi-level grading and safe degradation control.

[0019] Compared with the prior art, the present application has the following beneficial effects: The step of constructing a fault assessment model to classify fault code information and obtain system priority identification realizes intelligent grading management and system importance identification of fault information, can accurately quantify the severity and propagation impact of faults, and effectively identifies the correlation and propagation path between faults by combining multi-level fault correlation knowledge graph technology, thereby providing scientific and accurate basic data for subsequent differentiated control strategy formulation, and significantly improving the accuracy and system of fault identification. The step of determining the degradation control strategy type and matching the restriction parameter through the fault handling priority matrix realizes the standardization and parameterization configuration of fault handling decision, and the matrix is designed as a two-dimensional structure with fault level as row dimension and system priority identification as column dimension, which can automatically match four strategy types of emergency cut-off, power limitation, speed limitation and warning prompt according to the combination relationship of different fault levels and system priorities, and gradiently set the power limitation parameter and the speed limitation parameter, ensuring the pertinence and accuracy of the control strategy and avoiding the one-size-fits-all rough handling mode in the traditional scheme. The step of performing hierarchical control on the range-extender power system realizes a fine fault response mechanism of multi-controller cooperation, which adopts differentiated control strategies according to different characteristics of fault sources: for the emergency cut-off of the first and second system priorities, a torque zero instruction is sent to the MCU, for the third system priority, a more strict double cut-off control is performed, and for the range-extender control system fault, a generator power limitation instruction for the EMU is added. This hierarchical control architecture not only ensures the rapid response of key safety functions, but also realizes accurate response to different fault scenarios, effectively improving the safety and controllability of the whole vehicle in the fault state. By displaying fault information and updating the dynamic model, closed-loop management and adaptive optimization of fault handling are achieved. This process not only provides the driver with intuitive status information by feeding back the fault level and degraded control status to the instrument display system in real time, but also continuously monitors the execution status feedback of each controller through the CAN bus and dynamically adjusts the degraded control strategy based on the monitoring results. At the same time, the fault assessment model is updated. This continuous learning and adaptive mechanism enables the system to continuously optimize the fault handling effect according to the actual operating conditions, improve the system's intelligence level and long-term reliability, and achieve safe and stable operation of range-extended commercial vehicles in complex fault environments. Attached Figure Description

[0020] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. Wherein: Fig. 1 This is an overall flowchart of a fault handling method for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control.

[0021] Fig. 2 This is a structural diagram of the vehicle controller (VCU) of a range-extended commercial vehicle fault handling system based on multi-level hierarchical and safety degradation control.

[0022] Fig. 3 This is a structural diagram of a fault handling system for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control. Detailed Implementation

[0023] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments.

[0024] Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without inventive effort should fall within the scope of protection of this invention.

[0025] Many specific details are set forth in the following description in order to provide a full understanding of the invention. However, the invention may also be practiced in other ways different from those described herein, and those skilled in the art can make similar extensions without departing from the spirit of the invention. Therefore, the invention is not limited to the specific embodiments disclosed below.

[0026] As mentioned in the background section, existing fault handling methods for range-extended commercial vehicles have shortcomings in terms of the refinement of fault level classification, the differentiation of control strategies, and information transparency. Firstly, the lack of a systematic multi-level hierarchical model makes it impossible to respond hierarchically to faults of varying severity. Secondly, existing strategies rely too heavily on single-dimensional priority judgments, failing to comprehensively model the importance of the control system and the fault level. Thirdly, the lack of coordinated control of power limiting parameters and vehicle speed limiting parameters can easily lead to unnecessary performance losses under minor faults or insufficient response under severe faults, affecting driving safety. To address these problems, this invention provides a fault handling method for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control.

[0027] Reference Figs. 1-3 , Fig. 1 This is a flowchart illustrating a method for handling vehicle faults in a range-extended commercial vehicle based on multi-level hierarchical and safety degradation control, according to an embodiment of the present invention. Fig. 1 As shown, a method for handling vehicle faults in a range-extended commercial vehicle based on multi-level hierarchical and safety degradation control includes: S1: Classify the fault code information according to the fault assessment model, and obtain the system priority identifier to which the fault source controller unit belongs; S2: Based on the fault level and system priority identifier, the degradation control strategy type is determined through the constructed fault handling priority matrix, and corresponding limiting parameters are matched, including power limiting parameters. and vehicle speed limit parameters ; S3: Based on the degradation control strategy type and limiting parameters, perform hierarchical control on the range-extended power system; S4: Send the fault level and degraded control status information to the instrument display, while monitoring the status changes of the fault source controller unit and dynamically updating the fault assessment model.

[0028] In this embodiment of the application, step S1 includes: S1.1: The vehicle control unit (VCU) receives fault code information sent by each controller unit via the CAN bus, performs protocol parsing on the fault code information, and extracts the fault description information corresponding to the fault code identifier. It should be noted that a correspondence between fault code identifiers and fault description information is established. The fault code information includes the fault code identifier, the fault occurrence timestamp, and the fault source controller unit identifier.

[0029] S1.2: Input historical fault data into the fault assessment model for evaluation and processing, output a comprehensive fault score, and compare the comprehensive fault score with a preset fault threshold to determine the fault level corresponding to the fault description information; In an optional implementation, the fault assessment model is established by constructing a fault domain knowledge ontology including the vehicle control unit (VCU), high-voltage accessory system, high-voltage power system, and range extender control system; establishing a mapping knowledge base between fault code identifiers and fault description information through CAN bus protocol parsing rules; based on the fault domain knowledge ontology and the mapping knowledge base, identifying the correlation between faults through a knowledge extraction algorithm, and constructing a multi-level fault association knowledge graph with fault description information as nodes and fault propagation paths as edges; using a graph embedding method to map fault nodes in the multi-level fault association knowledge graph into low-dimensional vector representations, calculating the importance weight of fault description information in the graph through an attention mechanism, and combining the fault severity attribute and system impact attribute to form a fault assessment model.

[0030] Specifically, the formula for the comprehensive fault score is as follows: ; in, This is the overall fault score. The monitoring time window length is given by n, where n is the total number of faulty nodes. Let i be the attention weight of the faulty node. Let i be the graph embedding vector of the faulty node i. The exponential decay coefficient is... For the system priority identifier matrix, Let i be the propagation path influence vector of the fault node i. The Gamma normalization function, To adjust the parameters, This is an information filtering function based on Mahalanobis distance. This is a vector representing the severity of the fault. As the reference vector, Let be the spectral norm of the fault influence factor matrix. Let t be the noise variance and t be the integral variable.

[0031] It should be noted that the range of the comprehensive fault score formula is [missing information]. The meaning of the value range: when When the value is zero, it indicates that there is no fault or the impact of the fault is negligible; the larger the value, the higher the overall severity of the fault.

[0032] Preferably, the fault domain knowledge ontology defines the hierarchical and causal relationships between fault type entities, fault component entities, and fault phenomenon entities, and sets fault severity attributes and system impact attributes for each entity; the mapping knowledge base includes the hexadecimal encoding of fault codes, the corresponding fault description text, the identifier of the fault-occurring component, and the fault type classification, forming a structured set of fault information entities; the multi-level fault association knowledge graph includes fault impact weights and propagation delay information.

[0033] It should be noted that the fault assessment model includes a safety hazard dimension, a performance impact dimension, and a functional impact dimension. The safety hazard dimension is used to assess the degree of threat that the fault poses to the occupants and driving safety. The performance impact dimension is used to assess the degree of impact of the fault on the output performance of the vehicle's battery or motor. The functional impact dimension is used to assess the degree of impact of the fault on the normal driving function of the entire vehicle and the fault's self-recovery capability.

[0034] Furthermore, when the comprehensive fault score is greater than the first fault threshold, the fault code information is classified into the first fault level; when the comprehensive fault score is between the second fault threshold and the first fault threshold, the fault code information is classified into the second fault level; when the comprehensive fault score is lower than the second fault threshold, the fault code information is classified into the third fault level. The first fault level is the most serious fault, the second fault level is a relatively serious fault, and the third fault level is the least serious fault. The priority order for fault level response and processing is the first fault level > the second fault level > the third fault level.

[0035] In an optional implementation, the preset fault threshold is determined based on a dynamic quantification model driven by multi-dimensional historical fault data. The dynamic quantification model uses machine learning algorithms to perform regression and cluster analysis on a historical fault case library, thereby outputting a threshold range with statistical significance and engineering applicability. The first fault threshold is determined based on system safety boundary conditions and fault propagation critical points. Its core is to calculate the lower limit of the comprehensive fault score by analyzing fault cases in historical data that lead to immediate speed limits, shutdowns, or loss of critical functions of the vehicle. The second fault threshold is determined based on performance degradation inflection points and maintenance economy. This threshold is obtained by clustering fault cases in historical data that lead to a significant decline in vehicle performance (such as reduced power output and increased energy consumption) but have not yet triggered safety protection. When determining the threshold, the K-means clustering algorithm is used to identify the dense boundary region between normal performance and severe performance degradation of the comprehensive fault score. At the same time, it is weighted and corrected by factors such as maintenance costs and component lifespan to achieve the optimal balance between performance and cost. The third fault threshold is determined based on the potential fault development rate and noise signal baseline. This threshold is set by monitoring early fault signals in historical data that do not immediately affect performance but have potential development risks (such as intermittent communication failures or slight sensor drift). Time series analysis is applied to determine this threshold, calculating the trend slope of the overall fault score and the upper bound (e.g., the 95th percentile) of the statistical confidence interval for background noise (such as normal system fluctuations or false alarms), thereby effectively separating persistent weak signals from random noise.

[0036] For example, when the Battery Management System (BMS) detects an excessively high battery cell voltage, it sends a fault code (e.g., 0x101) to the Vehicle Control Unit (VCU) via the CAN bus. After parsing the fault code, the VCU, based on the fault assessment model, determines that the fault belongs to the safety hazard dimension (potentially causing thermal runaway), with a comprehensive score of 85 points (out of 100). Since this value is higher than the first fault threshold (e.g., 80 points), it is classified as the first fault level. At the same time, according to the controller unit system affiliation mapping table, the BMS belongs to the high-voltage power system, corresponding to the first system priority identifier. The VCU associates and stores the fault level, system priority identifier, and fault code to form a complete fault information record.

[0037] S1.3: Based on the fault level judgment result, query the preset controller unit system affiliation mapping table according to the fault source controller unit identifier to determine the control system type to which the fault source controller unit belongs, and generate the corresponding system priority identifier.

[0038] It should be noted that, as Fig. 2 As shown, the control system types include a high-voltage power system, a high-voltage accessory system, and a range extender control system. The high-voltage power system includes a motor controller (MCU), a transmission controller (TCU), a battery management system (BMS), and a high-voltage control board (PDU). The high-voltage accessory system includes an air pump controller (AP) and a power steering pump controller (EPS). The range extender control system includes a range extender controller (EMU). The high-voltage power system corresponds to the first system priority identifier, the high-voltage accessory system corresponds to the second system priority identifier, and the range extender control system corresponds to the third system priority identifier. The system priority identifiers indicate the processing priority order of each control system during fault handling, with the first system priority identifier having the highest processing priority.

[0039] S1.4: Establish an association and storage relationship between the fault level, fault source controller unit identifier, and system priority identifier corresponding to the fault description information to form a comprehensive fault information dataset.

[0040] It should be noted that the comprehensive fault information dataset includes fault code identifiers, one of the fault levels from the first fault level to the third fault level, and one of the system priority identifiers from the first system priority identifier to the third system priority identifier.

[0041] In this embodiment of the application, step S2 includes: S2.1: Based on the combination relationship between fault level and system priority identifier, determine the corresponding degradation control strategy type in the fault handling priority matrix, including emergency cut-off strategy type, power limiting strategy type, vehicle speed limiting strategy type, and warning prompt strategy type; Specifically, based on the comprehensive fault information dataset, a fault handling priority matrix is ​​constructed with the first fault level to the third fault level as the row dimension and the first system priority identifier to the third system priority identifier as the column dimension.

[0042] It should be noted that each element in the fault handling priority matrix corresponds to a specific degradation control strategy type.

[0043] Preferably, when the first fault level is combined with the first system priority identifier, an emergency cut-off strategy type is matched; when the second fault level is combined with the first system priority identifier, a power limiting strategy type and a speed limiting strategy type are matched; when the third fault level is combined with any system priority identifier, a warning prompt strategy type is matched.

[0044] S2.2: Based on the degradation control strategy type, configure differentiated combinations of restriction parameters for different system priority identifiers; In an optional implementation, if the second fault level corresponds to the first system priority identifier, then a power limiting parameter is configured. and vehicle speed limit parameters If the second fault level corresponds to the second system priority identifier, then configure the power limiting parameters. and vehicle speed limit parameters If the first fault level corresponds to the third system priority identifier, then configure the power limiting parameters. and vehicle speed limit parameters If the second fault level corresponds to the third system priority identifier, then configure the power limiting parameters. and vehicle speed limit parameters .

[0045] S2.3: Power limiting parameters based on fault level and system priority identifier. and vehicle speed limit parameters Configure the gradient; It should be noted that the power limiting parameters For the most stringent power limiting level, the power limiting parameters are... Corresponding to a relatively lenient power limit level, vehicle speed limit parameters Corresponding to the strictest speed limit level, speed limit parameters This corresponds to a relatively lenient speed limit level.

[0046] In an optional implementation, when the fault source controller unit identifier corresponds to the range extender control system, a special control strategy including generator power limitation is generated based on the fault level; if the first fault level corresponds to the third system priority identifier, then in addition to configuring power limitation parameters... and vehicle speed limit parameters In addition, torque zeroing control parameters and range extender high-voltage relay cut-off control parameters are generated; if the second fault level corresponds to the third system priority identifier, then in addition to configuring power limiting parameters... and vehicle speed limit parameters In addition, generator power limiting parameters are also generated. .

[0047] Specifically, the degradation control strategy type is associated with the corresponding timing control parameters. When the degradation control strategy type is the emergency cut-off strategy type, the torque zeroing timing parameter Time1 and the torque zeroing timing parameter Time2 are configured. The torque zeroing timing parameter Time1 is used to control the delay time of cutting off the battery high-voltage relay after the drive torque is zeroed, and the torque zeroing timing parameter Time2 is used to control the delay time of cutting off the range extender high-voltage relay after the generator torque is zeroed.

[0048] S2.4: Perform logical verification on the degradation control strategy type and the corresponding combination of limiting parameters to ensure the power limiting parameters are correct. and vehicle speed limit parameters The numerical settings meet the requirements for safe vehicle operation; However, it should be noted that the combination of limiting parameters is checked to ensure that it meets the minimum safety margin requirements under different fault scenarios, and the verified degradation control strategy type and combination of limiting parameters are stored in the control strategy parameter library.

[0049] For example, if the vehicle control unit (VCU) determines that the current fault is of the first fault level and the system is a high-voltage power system (first system priority identifier), then according to the fault handling priority matrix, the emergency cut-off strategy type is matched, and the corresponding limiting parameters are configured: after the drive-end torque is cleared to zero, the battery high-voltage relay is cut off after a delay of Time1=3 seconds; if the fault is of the second fault level and the system is a range extender control system (third system priority identifier), then the power limiting strategy type is matched, and the power limiting parameters are configured. Vehicle speed limit parameters Additionally, generator power limit parameters are generated. .

[0050] In this embodiment of the application, step S3 includes: S3.1: Prioritize the degradation control strategy types according to the positional relationship of each matrix element in the fault handling priority matrix; Preferably, if the downgraded control strategy type is an emergency cut-off strategy type, it is set to the highest execution priority; if the downgraded control strategy type is a power limiting strategy type or a speed limiting strategy type, it is set to a medium execution priority; if the downgraded control strategy type is a warning prompt strategy type, it is set to the lowest execution priority.

[0051] S3.2: When the degradation control strategy type is the emergency cut-off strategy type and the system priority identifier is the first system priority identifier or the second system priority identifier, a drive-end torque zeroing command is sent to the motor controller MCU. It should be noted that the timing function of the vehicle controller VCU starting torque zeroing timing parameter Time1, after the torque zeroing timing parameter Time1 ends, cuts off the battery high-voltage relay through the high-voltage control board PDU, disconnecting the power supply circuit of the high-voltage power system.

[0052] S3.3: When the degradation control strategy type is the emergency disconnection strategy type and the system priority identifier is the third system priority identifier, then the dual disconnection control operation is executed; Specifically, the vehicle control unit (VCU) sends power limiting parameters to the motor control unit (MCU). Power limit directives and speed limit parameters The system sends a speed limit command and simultaneously sends a torque zeroing command to the generator end to the range extender controller (EMU). It also starts the timing function of the torque zeroing timing parameter Time2. After the torque zeroing timing parameter Time2 finishes timing, the range extender high voltage relay is cut off through the range extender controller (EMU).

[0053] S3.4: When the downgraded control strategy type is the power limiting strategy type, the corresponding power limiting parameter is selected according to the system priority identifier for differentiated control, and the corresponding vehicle speed limiting control is executed synchronously. Furthermore, when the system priority identifier is the first system priority identifier, the vehicle controller (VCU) sends a power limiting parameter-based command to the motor controller (MCU). The maximum output power limit command for the drive motor is issued; when the system priority identifier is the second system priority identifier, the vehicle controller (VCU) sends a command based on the power limit parameters to the motor controller (MCU). The maximum output power limit command for the drive motor is issued; when the system priority identifier is the third system priority identifier, the vehicle controller (VCU) sends a command based on the power limit parameters to the motor controller (MCU). The maximum output power limit command for the drive motor.

[0054] Furthermore, if the system priority identifier is the first system priority identifier, then a speed limit parameter-based command is sent to the transmission controller TCU. The system sends a command to limit the maximum vehicle speed; if the system priority identifier is the second system priority identifier, it sends a command based on the vehicle speed limit parameters to the transmission controller TCU. The system sends a command to limit the maximum vehicle speed; if the system priority identifier is the third system priority identifier, it sends a command based on the vehicle speed limit parameters to the transmission controller TCU. The maximum speed limit for the entire vehicle.

[0055] S3.4: When the fault source controller unit identifier corresponds to the range extender control system and the degradation control strategy type is the power limiting strategy type, then while executing the drive-side power limiting and vehicle speed limiting, a generator power limiting parameter is sent to the range extender controller EMU. 1. Generator maximum output power limit command; S3.5: After issuing various control commands, continuously monitor the execution status feedback information of the motor controller MCU, gearbox controller TCU, and range extender controller EMU via the CAN bus.

[0056] It should be noted that by coordinating the control of the drive-end power limit and the generator-end power limit, the energy balance of the range-extended power system is maintained in the degraded state; the power limit execution confirmation information, vehicle speed limit execution confirmation information, and torque zeroing execution confirmation information returned by each controller unit are received to verify whether the execution effect of the degraded control strategy type meets the expected control objectives.

[0057] S3.6: Based on the monitored control execution status feedback information, dynamically adjust the degradation control strategy type.

[0058] Preferably, when the fault condition is detected to worsen, the current power limiting strategy type or vehicle speed limiting strategy type is upgraded to an emergency cut-off strategy type; when the fault condition is detected to ease, the corresponding limiting parameters are rematched according to the latest fault level, and the control intensity is adjusted to an appropriate level to avoid excessively limiting the vehicle's operating performance.

[0059] For example, when the vehicle control unit (VCU) executes an emergency shutdown strategy, it first sends a torque zeroing command to the motor control unit (MCU) and starts a 3-second timer. After the timer expires, the battery high-voltage relay is disconnected via the power distribution unit (PDU), and the vehicle enters a power-off protection state. If, during execution, the VCU detects a new fault reported by the battery management system (BMS) (such as "sharp rise in battery temperature"), it dynamically upgrades the control strategy to a more stringent power limiting strategy and adjusts the power limiting parameters accordingly. Speed ​​limit to In order to deal with the worsening of the fault.

[0060] In this embodiment of the application, step S4 includes: S4.1: Based on the execution result of the degradation control strategy type, encapsulate the fault level, fault code identifier, system priority identifier and the execution status of the degradation control strategy type into data; In an optional implementation, the fault description information corresponding to the fault level, the status of the currently effective limiting parameters, and the execution status of the emergency cut-off strategy type or power limiting strategy type are encapsulated into a standardized display data packet according to a preset instrument communication protocol format.

[0061] S4.2: Determine the corresponding instrument display strategy based on the fault level; In an optional implementation, if the fault level is the first fault level, a red warning display command and an audible alarm command are generated; if the fault level is the second fault level, a yellow warning display command and a limit status display command are generated; if the fault level is the third fault level, a blue prompt display command is generated, which includes the current limit status of the power limit parameter and the vehicle speed limit parameter in the display command.

[0062] S4.3: Send comprehensive display information to the instrument display unit via the CAN bus; Specifically, the instrument display unit receives comprehensive display information and presents fault source location information, current restriction status information, and suggested operation information on the display screen according to the display strategy. At the same time, it sends the fault occurrence timestamp and estimated fault duration information to the instrument display unit.

[0063] S4.4: After the instrument information is sent, establish a continuous monitoring mechanism for the controller corresponding to the fault source controller unit identifier; Furthermore, the system periodically receives operating status information from the fault source controller unit via the CAN bus, including fault code update information, controller operating parameter change information, and fault self-recovery status information; and continuously collects status data from the fault source controller unit according to the time interval of the set monitoring cycle parameter.

[0064] S4.5: Perform trend analysis on the status data of the fault source controller unit to identify whether the fault status has changed; In an optional implementation, if a new fault code is detected, it is marked as a worsening of the fault condition; if an existing fault code is detected to have disappeared or the fault parameters have returned to the normal range, it is marked as an improved fault condition; if a change in the fault code type is detected, it is marked as a change in the nature of the fault; the vehicle control unit (VCU) initiates the corresponding fault classification reassessment process based on the type of fault condition change.

[0065] S4.6: Dynamically adjust the fault assessment model based on the monitored changes in fault status; In an optional implementation, when the fault condition worsens, the weight coefficients of the corresponding fault codes in the relevant dimensions of the safety hazard dimension, performance impact dimension, and functional impact dimension are adjusted; when the fault condition improves, the weight coefficients of the corresponding dimensions are reduced; when a new fault mode occurs, new fault code evaluation rules are added to the multi-dimensional fault evaluation model.

[0066] S4.7: Using the updated fault assessment model, recalculate the comprehensive fault score for the current fault code information.

[0067] Preferably, the recalculated comprehensive fault score is compared with the preset fault threshold to determine the updated fault level; when the fault level changes, the fault handling priority matrix matching process in step S2 is re-executed to generate the adjusted degradation control strategy type and limiting parameters.

[0068] Furthermore, based on the reassessed fault level and the updated degraded control strategy type, the currently executed control strategy is adjusted; when the fault level is upgraded, stricter limiting parameter control is immediately implemented or the emergency cut-off strategy type is upgraded; when the fault level is downgraded, the corresponding power limiting parameters and vehicle speed limiting parameters are gradually relaxed. The vehicle control unit (VCU) resends the adjusted control status information to the instrument display unit to keep the displayed information synchronized with the actual control status.

[0069] For example, the vehicle control unit (VCU) encapsulates the current fault level (Level 1), fault code (0x101), and the status of the executed emergency shutdown strategy and sends them to the instrument panel. The instrument panel displays a red warning icon and the text "High-voltage system fault, please stop the vehicle safely immediately," and plays an alarm sound. At the same time, the VCU continuously monitors the BMS status. If the voltage is subsequently detected to return to normal and the fault code disappears, it is marked as an improvement in the fault status, and the fault level is reassessed. If the score drops below Level 2, the VCU gradually relaxes the restrictions, restores some power output, and updates the instrument panel with a yellow warning message.

[0070] In summary, this invention achieves intelligent hierarchical management of fault information and identification of system importance by constructing a fault assessment model to classify fault code information and obtain system priority identifiers. This enables precise quantification of the severity and propagation impact of faults. Furthermore, by combining multi-level fault association knowledge graph technology, it effectively identifies the relationships and propagation paths between faults. The steps of determining the degradation control strategy type and matching constraint parameters through a fault handling priority matrix achieve standardization and parameterized configuration of fault handling decisions. The step of implementing hierarchical control on the range-extended powertrain system realizes a refined fault response mechanism with multi-controller collaboration. Finally, the steps of fault information display and dynamic model updating achieve closed-loop management and adaptive optimization of fault handling.

[0071] Under the teachings of the above embodiments, such as Fig. 3 As shown, other aspects disclosed in the embodiments of the present invention also propose a vehicle fault handling system for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control, including: The fault diagnosis and level assessment module is used to classify fault code information into levels according to the fault assessment model, and at the same time obtain the system priority identifier to which the fault source controller unit belongs. The degradation strategy decision module, based on the fault level and the system priority identifier, determines the degradation control strategy type through a constructed fault handling priority matrix and matches corresponding limiting parameters, including power limiting parameters. and vehicle speed limit parameters ; The hierarchical control execution module performs hierarchical control on the range-extended power system based on the degradation control strategy type and the limiting parameters. The status monitoring and human-machine interaction module is used to send fault level and degradation control status information to the instrument display, while monitoring the status changes of the fault source controller unit and dynamically updating the fault assessment model.

[0072] This embodiment also provides a computer device applicable to the fault handling method for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control, including a memory and a processor; the memory is used to store computer-executable instructions, and the processor is used to execute the computer-executable instructions to realize the fault handling method for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control proposed in the above embodiment.

[0073] The computer device can be a terminal, comprising a processor, memory, communication interface, display screen, and input devices connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, carrier networks, NFC (Near Field Communication), or other technologies. The display screen can be an LCD screen or an e-ink screen. The input devices can be a touch layer covering the display screen, buttons, a trackball, or a touchpad on the computer device's casing, or an external keyboard, touchpad, or mouse.

[0074] This embodiment also provides a storage medium storing a computer program that, when executed by a processor, implements the vehicle fault handling method for range-extended commercial vehicles based on multi-level hierarchical and safety degradation control as proposed in the above embodiments.

[0075] The storage medium proposed in this embodiment and the data storage method proposed in the above embodiments belong to the same inventive concept. Technical details not described in detail in this embodiment can be found in the above embodiments, and this embodiment has the same beneficial effects as the above embodiments.

[0076] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention, and all such modifications or substitutions should be covered within the scope of the claims of the present invention.

Claims

1. A method for handling faults of an extended-range commercial vehicle based on multi-level hierarchical and security degradation control, characterized in that: Comprising, According to the fault evaluation model, the fault code information is classified, and the system priority identifier to which the fault source controller unit belongs is obtained; Based on the failure level and the system priority identifier, a degradation control strategy type is determined through a constructed failure handling priority matrix, and a corresponding limit parameter is matched, wherein the limit parameter includes a power limit parameter and a vehicle speed limit parameter ​ Based on the degradation control strategy type and the limit parameter, hierarchical control is performed on the extended range power system; The fault level and degradation control state information are sent to the instrument display, and the state change of the fault source controller unit is monitored and the fault evaluation model is dynamically updated.

2. The multi-stage hierarchical and security degradation control based extended-range commercial vehicle overall fault handling method according to claim 1, characterized in that: The hierarchical control of the extended range power system includes: According to the position relationship of each matrix element in the fault handling priority matrix, the priority of the degradation control strategy type is sorted; When the degradation control strategy type is the emergency shutdown strategy type and the system priority identifier is the first system priority identifier or the second system priority identifier, a drive end torque zero command is sent to the motor controller MCU; When the degradation control strategy type is the emergency shutdown strategy type and the system priority identifier is the third system priority identifier, a double shutdown control operation is performed; When the degradation control strategy type is the power limit strategy type, the corresponding power limit parameter is selected for differential control according to the system priority identifier, and the corresponding vehicle speed limit control is performed synchronously; When the fault source controller unit identifies a corresponding extended range control system and the degraded control strategy type is a power limit strategy type, then a generator maximum output power limit instruction based on a generator power limit parameter is issued to the extended range controller EMU while performing drive end power limit and vehicle speed limit. After issuing each control instruction, the motor controller MCU, transmission controller TCU, and extended range controller EMU are continuously monitored through the CAN bus to obtain control instruction execution state feedback information; Based on the monitored control execution state feedback information, the degradation control strategy type is dynamically adjusted.

3. The multi-stage hierarchical and security degradation control based extended-range commercial vehicle overall fault handling method according to claim 2, characterized in that: The degradation control strategy type is determined through the fault handling priority matrix, including: Based on the combination of fault level and system priority identifier, the corresponding degradation control strategy type is determined in the fault handling priority matrix, including the emergency shutdown strategy type, the power limit strategy type, the vehicle speed limit strategy type, and the warning prompt strategy type; Based on the degradation control strategy type, different limit parameter combinations are configured for different system priority identifiers; Gradient setting based on fault level and system priority identification, power limiting parameter and vehicle speed limiting parameter are performed; logical verification is performed on the degradation control strategy type and corresponding limit parameter combination to ensure that the power limit parameter and the vehicle speed limit parameter value setting conforms to the vehicle safety operation requirements.

4. The multi-stage hierarchical and security degradation control based extended-range commercial vehicle overall fault handling method according to claim 3, characterized in that: Based on the fault information comprehensive data set, the fault handling priority matrix is constructed with the first fault level to the third fault level as the row dimension and the first system priority identifier to the third system priority identifier as the column dimension.

5. The multi-stage hierarchical and security degradation control based extended-range commercial vehicle overall fault handling method according to claim 4, characterized in that: The acquisition method of the fault information comprehensive data set is, The vehicle control unit VCU receives the fault code information sent by each controller unit through the CAN bus, and performs protocol analysis on the fault code information to extract the fault description information corresponding to the fault code identifier; The historical fault data is input into the fault evaluation model for evaluation processing, and the fault comprehensive score value is output. The fault comprehensive score value is compared with the preset fault threshold to determine the fault level of the fault description information; Based on the fault level judgment result, the controller unit system attribution mapping table is queried according to the fault source controller unit identifier to determine the control system type to which the fault source controller unit belongs, and the corresponding system priority identifier is generated; The fault level corresponding to the fault description information, the fault source controller unit identifier, and the system priority identifier are associated and stored to form the fault information comprehensive data set.

6. The multi-stage hierarchical and security degradation control based extended-range commercial vehicle overall failure handling method according to claim 5, characterized in that: The specific formula of the fault comprehensive score value is as follows: ; wherein, is a failure comprehensive score value, is a monitoring time window length, n is a total number of failure nodes, is an attention weight of failure node i, is a graph embedding vector of failure node i, is an exponential decay coefficient, is a system priority identification matrix, is a propagation path influence vector of failure node i, is a Gamma normalization function, is a tuning parameter, is a information filtering function based on Mahalanobis distance, is a failure severity attribute vector, is a reference vector, is a spectral norm of failure influence factor matrix, is a noise variance, t is an integral variable; When the fault comprehensive score value is greater than the first fault threshold value, the fault code information is divided into a first fault level; when the fault comprehensive score value is between the second fault threshold value and the first fault threshold value, the fault code information is divided into a second fault level; and when the fault comprehensive score value is lower than the second fault threshold value, the fault code information is divided into a third fault level.

7. The multi-stage hierarchical and security degradation control based extended-range commercial vehicle overall failure handling method according to claim 5, characterized in that: The method for establishing the fault evaluation model, A fault domain knowledge ontology including a vehicle control unit VCU, a high-voltage accessory system, a high-voltage power system, and an extended-range control system is constructed. A mapping knowledge base of fault code identification and fault description information is established through CAN bus protocol analysis rules. Based on the fault domain knowledge ontology and the mapping knowledge base, a knowledge extraction algorithm is used to identify the correlation between faults, and a multi-level fault correlation knowledge graph is constructed, with fault description information as nodes and fault propagation paths as edges. A graph embedding method is used to map the fault nodes in the multi-level fault correlation knowledge graph into low-dimensional vector representations, the importance weight of the fault description information in the graph is calculated through an attention mechanism, and a fault evaluation model is formed by combining the fault severity attribute and the system impact degree attribute.

8. A system for handling vehicle faults of a range-extended commercial vehicle based on multi-level hierarchical and safe degradation control, based on the method for handling vehicle faults of a range-extended commercial vehicle based on multi-level hierarchical and safe degradation control according to any one of claims 1-7, characterized in that: The method comprises, A fault diagnosis and level evaluation module is configured to divide fault code information into levels according to a fault evaluation model, and to obtain a system priority identifier to which a fault source controller unit belongs; a degradation policy decision module, configured to determine a degradation control policy type and match corresponding limit parameters based on the fault level and the system priority identifier through the constructed fault handling priority matrix, wherein the limit parameters comprise a power limit parameter and a vehicle speed limit parameter ; A hierarchical control execution module is configured to perform hierarchical control on an extended-range power system based on a degradation control strategy type and a limit parameter. A state monitoring and human-computer interaction module is configured to send fault level and degradation control state information to an instrument display, and to monitor state changes of a fault source controller unit and dynamically update the fault evaluation model. 9.A computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the computer device is characterized in that: The processor executes the computer program to implement the steps of the method for handling faults of an extended-range commercial vehicle based on multi-level hierarchical and safe degradation control according to any one of claims 1-7.

10. A computer readable storage medium having stored thereon a computer program, characterized in that: The computer program is executed by the processor to implement the steps of the method for handling faults of an extended-range commercial vehicle based on multi-level hierarchical and safe degradation control according to any one of claims 1-7.

Citation Information

Patent Citations

  • Fuzzy control-based extended-range commercial vehicle energy management method

    CN120245938A