Vehicle-mounted hardware restart method, electronic device, and vehicle

Abstract

The embodiment of the application provides a kind of vehicle-mounted hardware restart method, electronic equipment and vehicle, the initial work partition and initial background partition of synchronous operation vehicle-mounted hardware, control initial background partition work in minimum operating mode;When identifying the fault signal of initial work partition, according to the fault signal trigger vehicle-mounted hardware restart work;During the execution of vehicle-mounted hardware restart work, initial work partition is switched to new background partition, initial background partition is switched to new work partition, at least one of vehicle data and work partition operating data is accessed to new work partition, at least one of vehicle data and operating data is handled using new work partition, so as to significantly shorten system interruption time, avoid data loss, maintain vehicle function continuity, reduce user's perceptible degree and security risk, effectively improve user experience.

Description

Technical Field

[0001] This application relates to the field of vehicle hardware fault recovery technology, and in particular to a vehicle hardware restart method, electronic device and vehicle. Background Technology

[0002] The intelligent forward-facing camera, acting as a smart driving assistance controller, has a built-in microcontroller that runs continuously, relying on a watchdog mechanism to detect faults and trigger a reset. However, if the onboard hardware fails, a complete reboot is required, resulting in prolonged system interruption and data loss, affecting functional continuity and safety. Summary of the Invention

[0003] This application provides a method for restarting vehicle hardware, an electronic device, and a vehicle, aiming to improve the problem in related technologies where a complete restart is required after a vehicle hardware failure, resulting in long system interruption time and data loss, which affects the continuity of vehicle functions and safety.

[0004] In a first aspect, a method for restarting vehicle hardware is provided, comprising: synchronously running an initial working partition and an initial background partition of the vehicle hardware, and controlling the initial background partition to operate in the lowest operating mode; when a fault signal is detected in the initial working partition, triggering a restart action of the vehicle hardware according to the fault signal; during the restart action of the vehicle hardware, switching the initial working partition to a new background partition, switching the initial background partition to a new working partition, connecting at least one of the vehicle data and the operating data of the working partition to the new working partition, and using the new working partition to process at least one of the vehicle data and the operating data.

[0005] Through the above technical solution, the embodiments of the present invention synchronously run the initial working partition and the initial background partition, and control the background partition to be in the lowest operating mode. This allows the system to switch directly to the already running background partition as the new working partition instead of starting from scratch when the initial working partition is restarted due to a fault. At the same time, the vehicle data and / or the running data of the original working partition are connected to the new working partition for continued processing. This significantly shortens the system interruption time, avoids data loss, maintains the continuity of vehicle functions, reduces user perception and safety risks, and improves the user experience.

[0006] In conjunction with the first aspect, some possible implementations include, before synchronously running the initial working partition and the initial background partition of the vehicle hardware, reading the computing resources corresponding to the vehicle hardware; and determining the minimum operating mode of the initial background partition based on the computing resources.

[0007] Through the above technical solution, before synchronously running the initial working partition and the initial background partition, the embodiments of the present invention read the computing resources of the vehicle hardware and determine the minimum operating mode of the initial background partition accordingly. This ensures that the background partition only occupies necessary resources while ensuring switchability and availability, avoiding performance interference with the working partition. At the same time, it ensures that the system can quickly take over during fault switching, balancing resource efficiency and restart reliability.

[0008] In conjunction with the first aspect, in some possible implementations, controlling the initial background partition to operate in the minimum operating mode includes: identifying the functional modules that are allowed to operate in the initial background partition in the minimum operating mode; controlling the functional modules that are allowed to operate to be in an operating state, and prohibiting the functional modules that are allowed to operate from receiving vehicle data and processing vehicle data at least one.

[0009] Through the above technical solution, the embodiments of the present invention identify the functional modules that are allowed to work in the initial background partition under the minimum operating mode, and control these functional modules to be in working state, while prohibiting them from receiving and / or processing vehicle data. This allows the initial background partition to maintain a switchable and available state while maintaining only minimal resource consumption, thus avoiding unnecessary system overhead.

[0010] In conjunction with the first aspect, in some possible implementations, before triggering the restart action of the vehicle hardware based on the fault signal, the following is also included: a triggering mechanism for identifying the fault signal of the initial working partition; if the triggering mechanism is a watchdog mechanism, then the restart action of the vehicle hardware is triggered based on the fault signal.

[0011] Through the above technical solution, the embodiments of the present invention identify the triggering mechanism of the fault signal of the initial working partition, and trigger the restart action of the vehicle hardware when the triggering mechanism is the watchdog mechanism, so that the system can perform a fast switching restart based on the already running background partition in the watchdog reset scenario, avoiding long-term interruption of function caused by a complete restart.

[0012] In conjunction with the first aspect, in some possible implementations, triggering the vehicle hardware restart action based on the fault signal includes: identifying fault information in the fault signal; and triggering the vehicle hardware restart action when it is determined from the fault information that the vehicle hardware meets preset conditions.

[0013] Through the above technical solution, when the vehicle hardware is triggered to restart based on a fault signal, the present invention identifies the fault information in the fault signal and determines that the vehicle hardware meets the preset conditions before triggering the restart action. This ensures that the system only performs a restart in fault scenarios that meet the preset conditions, avoiding direct response to unexpected abnormal signals.

[0014] In conjunction with the first aspect, some possible implementations, after switching the initial working partition to the new background partition, also include: controlling the new background partition to perform a recovery action; if the recovery of the new background partition is detected as successful, controlling the new background partition to work in the minimum operating mode; if the recovery of the new background partition is detected as unsuccessful, continuing to perform the recovery action after the vehicle is powered on again.

[0015] Through the above technical solution, after switching the initial working partition to a new background partition, the embodiment of the present invention controls the new background partition to perform a recovery action, and when the recovery is successful, it makes it work in the lowest operating mode. If the recovery fails, the recovery action will continue to be performed after the vehicle is powered on again. At the same time, before triggering the restart action, the fault information in the fault signal is identified, and the restart action is only triggered when the vehicle hardware meets the preset conditions based on the fault information, thereby avoiding a complete restart of the original working partition, reducing the number and duration of system function interruptions, and improving availability.

[0016] In conjunction with the first aspect, in some possible implementations, before continuing to perform the recovery action after the vehicle is powered on again, the following steps are also included: obtaining the actual number of times the recovery action was performed in the new background partition; if the actual number is less than the number threshold, then triggering to continue performing the recovery action after the vehicle is powered on again; if the actual number is greater than or equal to the number threshold, then generating fault information for the new background partition and using the fault information to provide a fault reminder.

[0017] Through the above technical solution, the present invention obtains the actual number of times the recovery action is performed in the new background partition before continuing to perform the recovery action after the vehicle is powered on again. When the actual number is less than the number threshold, the recovery is continued. When the actual number reaches or exceeds the number threshold, fault information is generated and a fault reminder is given. This allows the system to output a fault prompt after multiple recovery failures, making it easier for users or maintenance personnel to identify that the partition can no longer be recovered normally.

[0018] In conjunction with the first aspect, in some possible implementations, controlling the new background partition to operate in the minimum operating mode includes: identifying the functional modules that are allowed to operate in the new background partition in the minimum operating mode; controlling the functional modules that are allowed to operate to be in an operating state, and prohibiting the functional modules that are allowed to operate from receiving vehicle data and processing vehicle data at least one.

[0019] Through the above technical solution, when the new background partition is controlled to the lowest operating mode, the present invention identifies the functional modules that are allowed to work in this mode, controls these functional modules to be in working state, and prohibits them from receiving and / or processing vehicle data. This allows the new background partition to maintain basic operating capabilities in preparation for subsequent switching while not participating in vehicle data processing, thereby reducing system resource consumption.

[0020] In a second aspect, an electronic device is provided, including a processor and a memory, wherein the memory is used to store computer programs; and the processor is used to execute the programs stored in the memory to implement the methods in the first aspect or any possible implementation thereof.

[0021] Thirdly, a vehicle is provided that includes the electronic equipment described in the second aspect. Attached Figure Description

[0022] Figure 1 This is a flowchart of the vehicle hardware restart method provided in the embodiments of this application; Figure 2 This is a flowchart illustrating the implementation of an embodiment of the vehicle hardware restart method provided in this application; Figure 3 This is a structural diagram of the electronic device provided in the embodiments of this application. Detailed Implementation

[0023] To make the technical problems, technical solutions, and beneficial effects solved by this application clearer, the following detailed description is provided in conjunction with embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0024] Figure 1 This is a flowchart of an in-vehicle hardware restart method according to an embodiment of the present invention.

[0025] like Figure 1 As shown, the vehicle hardware restart method according to an embodiment of the present invention includes the following steps: Step S110: Synchronously run the initial working partition and the initial background partition of the vehicle hardware, and control the initial background partition to work in the lowest operating mode.

[0026] Step S120: When a fault signal of the initial working partition is detected, the vehicle hardware is restarted based on the fault signal.

[0027] Step S130: During the vehicle hardware restart process, the initial working partition is switched to a new background partition, the initial background partition is switched to a new working partition, at least one of the vehicle data and the running data of the working partition is connected to the new working partition, and at least one of the vehicle data and the running data is processed using the new working partition.

[0028] It should be noted that: the initial working partition refers to the main operating partition in the vehicle hardware that currently undertakes the main functional tasks; the initial background partition refers to the partition that runs synchronously with the initial working partition and is in a standby state for redundant operation; the minimum operating mode refers to a low resource consumption state that only maintains the minimum operation of necessary functional modules and does not process vehicle data; the fault signal refers to the signal generated by the initial working partition abnormally and used to trigger a restart; the new background partition refers to the background role of the original initial working partition after the switch; the new working partition refers to the original initial background partition that has been promoted to the primary working role after the switch; vehicle data refers to the bus or control-related data generated during vehicle operation; and operating data refers to the operating status or context data of the initial working partition before the fault.

[0029] Specifically, a working zone refers to the zone where in-vehicle hardware such as the Intelligent Front Camera (IFC) primarily operates, including the IFC's perception module, planning module, and control module.

[0030] It is understood that by synchronously running the initial working partition and the initial background partition, and controlling the background partition to be in the lowest operating mode, this invention enables the system to switch directly to the already running background partition as the new working partition when the initial working partition is restarted due to a fault, without having to start the system from scratch. At the same time, the vehicle data and / or the running data of the original working partition are connected to the new working partition for continued processing. This significantly shortens the system interruption time, avoids data loss, maintains the continuity of vehicle functions, reduces user perception and safety risks, and improves the user experience.

[0031] Before step S110, before synchronizing the initial working partition and initial background partition of the vehicle hardware, the process further includes: reading the computing resources corresponding to the vehicle hardware; and determining the minimum operating mode of the initial background partition based on the computing resources.

[0032] Among them, computing resources refer to the processor computing power, memory capacity and storage resources of the vehicle hardware.

[0033] It is understood that, before synchronizing the initial working partition and the initial background partition, this embodiment of the invention reads the computing resources of the vehicle hardware and determines the minimum operating mode of the initial background partition accordingly. This ensures that the background partition only occupies necessary resources while maintaining switchability and availability, avoiding performance interference with the working partition. At the same time, it ensures that the system can quickly take over during fault switching, balancing resource efficiency and restart reliability.

[0034] In step S110, controlling the initial background partition to operate in the minimum operating mode includes: identifying the functional modules that are allowed to operate in the initial background partition in the minimum operating mode; controlling the functional modules that are allowed to operate to be in a working state, and prohibiting the functional modules that are allowed to operate from receiving vehicle data and processing vehicle data at least one.

[0035] It is understood that, by identifying the functional modules that are allowed to work in the initial background partition under the minimum operating mode and controlling these functional modules to be in working state, while prohibiting them from receiving and / or processing vehicle data, the initial background partition maintains a switchable and available state while only maintaining a minimum resource consumption, thus avoiding unnecessary system overhead.

[0036] Specifically, when the working partition is in normal working condition, the relevant basic modules in the background partition simultaneously run in the lowest operating mode without affecting the overall computing power resources, and report their operating status to the working partition through internal interfaces. At this time, no actual perception data or vehicle control inputs, such as camera image signals or CAN bus signals, are connected; only the module is kept in a ready state. The working partition only connects to the above signals and performs actual processing tasks.

[0037] Before step S120, before triggering the restart action of the vehicle hardware based on the fault signal, the method further includes: identifying the triggering mechanism of the fault signal of the initial working partition; if the triggering mechanism is a watchdog mechanism, then triggering the restart action of the vehicle hardware based on the fault signal.

[0038] The watchdog mechanism refers to a hardware or software module used to monitor the running status of a microcontroller program and trigger a system reset when an abnormality occurs.

[0039] It is understood that the embodiments of the present invention identify the triggering mechanism of the fault signal of the initial working partition, and trigger the restart action of the vehicle hardware when the triggering mechanism is the watchdog mechanism, so that the system can perform a fast switch restart based on the already running background partition in the watchdog reset scenario, avoiding long-term interruption of function caused by a complete restart.

[0040] Specifically, when the IFC is operating in the working partition, a runtime error triggers the watchdog mechanism, causing a restart. The watchdog mechanism displays "running error" and triggers a restart, directly switching to the background partition. At least one of the corresponding vehicle data and the running data in the working partition is simultaneously switched to this background partition. At this point, the background partition becomes the new working partition, and the original working partition will trigger a restart in the background to attempt recovery and automatically switch to the new background partition, operating in the lowest possible mode.

[0041] It should be noted that when the IFC needs to perform a software reset due to a software malfunction that triggers the watchdog mechanism, the IFC uses its internal time synchronization mechanism to ensure that the signal inputs received by each module before and after the switching process are aligned. Instead of performing a real reset, the IFC directly switches the input signals to the background partition, which then becomes the working partition to maintain normal operation. The original working partition is converted into a background partition for background operation after the background partition resets itself.

[0042] In step S120, the vehicle hardware is restarted based on the fault signal, including: identifying fault information in the fault signal; and when the vehicle hardware meets the preset conditions based on the fault information, the vehicle hardware is restarted.

[0043] Among them, fault information refers to the data contained in the fault signal that is used to characterize the abnormal state of the vehicle hardware; preset conditions refer to the fault judgment rules that are pre-set and used to determine whether to perform a restart action.

[0044] It is understood that, in the embodiments of the present invention, when the vehicle hardware is triggered to restart based on a fault signal, the fault information in the fault signal is identified, and the vehicle hardware is determined to meet the preset conditions before the restart action is triggered. This ensures that the system only performs a restart in fault scenarios that meet the preset conditions, thus avoiding direct response to unexpected abnormal signals.

[0045] In step S130, after switching the initial working partition to the new background partition, the method further includes: controlling the new background partition to perform a recovery action; if the recovery of the new background partition is successfully detected, controlling the new background partition to work in the lowest operating mode; if the recovery of the new background partition fails, continuing to perform the recovery action after the vehicle is powered on again.

[0046] It is understood that, in this embodiment of the invention, after switching the initial working partition to a new background partition, the new background partition is controlled to perform a recovery action, and if the recovery is successful, it is made to work in the minimum operating mode. If the recovery fails, the recovery action is continued to be performed after the vehicle is powered on again. At the same time, before triggering the restart action, the fault information in the fault signal is identified, and the restart action is only triggered when the vehicle hardware meets the preset conditions based on the fault information, thereby avoiding a complete restart of the original working partition, reducing the number and duration of system function interruptions, and improving availability.

[0047] Specifically, if the original working partition fails to recover, that is, the relevant modules do not start working, and the new working partition cannot obtain the working status of the original partition through the internal interface within a certain period of time, the original partition will automatically trigger a reset request to recover itself on each subsequent startup. This process does not affect the new working partition from continuing to work.

[0048] In this embodiment of the invention, before continuing to perform the recovery action after the vehicle is powered on again, the method further includes: obtaining the actual number of times the recovery action is performed in the new background partition; if the actual number is less than the number threshold, then triggering to continue performing the recovery action after the vehicle is powered on again; if the actual number is greater than or equal to the number threshold, then generating fault information for the new background partition and using the fault information to provide a fault reminder.

[0049] The actual number of times refers to the cumulative number of times the recovery action has been performed in the new backend partition; the number threshold refers to the maximum number of recovery attempts that are preset and used to determine whether to stop the recovery attempt.

[0050] It is understood that, in this embodiment of the invention, before continuing to perform the recovery action after the vehicle is powered on again, the actual number of times the recovery action is performed in the new background partition is obtained, and the recovery is continued when the actual number is less than the number threshold. When the actual number reaches or exceeds the number threshold, fault information is generated and a fault reminder is given, so that the system can output a fault prompt after multiple recovery failures, making it easy for users or maintenance personnel to identify that the partition can no longer be recovered normally.

[0051] In this embodiment of the invention, controlling the new background partition to operate in the minimum operating mode includes: identifying the functional modules that are allowed to operate in the new background partition in the minimum operating mode; controlling the functional modules that are allowed to operate to be in a working state, and prohibiting the functional modules that are allowed to operate from receiving vehicle data and processing at least one of the vehicle data.

[0052] It is understood that, in the embodiments of the present invention, when the new background partition is controlled to the lowest operating mode, the functional modules that are allowed to work in this mode are identified, these functional modules are controlled to be in working state, and they are prohibited from receiving and / or processing vehicle data. This allows the new background partition to maintain basic operating capabilities in preparation for subsequent switching while not participating in vehicle data processing, thereby reducing system resource consumption.

[0053] Furthermore, based on the aforementioned vehicle hardware restart method, the overall operational logic of this application includes: the working partition receives camera perception data and sends it to the perception module, and receives vehicle-related signals and sends them to the planning module. These signals are then combined with the perception module's results for functional logic judgment. Finally, the control module sends corresponding interactive and control signals to the vehicle for display and control of intelligent driving functions. When some modules within the IFC malfunction and trigger a watchdog mechanism restart, the camera perception data and vehicle-related signals will be directly switched to the background partition via an internal interface. A time synchronization mechanism ensures continuity before and after the input switch. Simultaneously, the control module will perform logical judgment based on the new input and output corresponding control signals. For intelligent driving system functions, triggering a restart inevitably leads to temporary exit or degradation of the system's functions. However, the optimizations in this application significantly shorten the restart time, optimizing it from process restart to input signal switching, thereby minimizing the duration of intelligent driving system malfunctions.

[0054] Specifically, such as Figure 2 As shown, the implementation process for restarting the vehicle hardware includes: In step 201, the initial working partition and the initial background partition are run synchronously, and the initial background partition is controlled to work in the lowest operating mode.

[0055] In step 202, it is determined whether the watchdog mechanism has been triggered. If it has not been triggered, the process returns to step 201; otherwise, it proceeds to the next step.

[0056] In step 203, if the watchdog mechanism has been triggered, it is determined whether a restart is required. If a restart is not required, the process returns to step 201; otherwise, it proceeds to the next step.

[0057] In step 204, if a restart is required, the initial working partition is switched to the new background partition.

[0058] In step 205, it is determined whether the recovery was successful. If the recovery was unsuccessful, step 206 is executed; otherwise, the next step is performed.

[0059] In step 206, if the recovery fails, the recovery action for the new background partition will be performed on the next power-on.

[0060] If the recovery is successful in step 207, normal operation will resume.

[0061] According to the vehicle hardware restart method proposed in this invention, the initial working partition and the initial background partition of the vehicle hardware are run synchronously, and the initial background partition is controlled to operate in the lowest operating mode. When a fault signal is detected in the initial working partition, the vehicle hardware restart action is triggered according to the fault signal. During the vehicle hardware restart action, the initial working partition is switched to a new background partition, and the initial background partition is switched to a new working partition. At least one of the vehicle data and the operating data of the working partition is connected to the new working partition, and at least one of the vehicle data and the operating data is processed using the new working partition. This significantly shortens the system interruption time, avoids data loss, maintains the continuity of vehicle functions, reduces user perception and safety hazards, and effectively improves the user experience.

[0062] This application also provides an electronic device 30, please refer to... Figure 3 It includes a memory 310 and a processor 320, wherein the memory 310 is used to store computer programs; and the processor 320 is used to execute the programs stored in the memory 310 to implement the vehicle hardware restart method described in the above embodiments of this application.

[0063] In this application, "multiple" refers to two or more.

[0064] In this application, unless otherwise expressly defined, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection between two components. Those skilled in the art can understand the specific meaning of the above terms in this application based on the specific circumstances.

[0065] The terms “first,” “second,” “third,” “fourth,” etc., in this application (if any) are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0066] In this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, in this application, the character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0067] Unless otherwise specified, all steps in this application may be performed sequentially or randomly. For example, if a method includes steps A and B, it means that the method may include steps A and B performed sequentially, or it may include steps B and A performed sequentially. For example, if a method may also include step C, it means that step C may be added to the method in any order. For example, the method may include steps A, B, and C, or it may include steps A, C, and B, or it may include steps C, A, and B, etc.

[0068] The above are merely preferred embodiments of this application and are not intended to limit this application. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A method for restarting vehicle-mounted hardware, characterized in that, include: The initial working partition and initial background partition of the vehicle hardware are run synchronously, and the initial background partition is controlled to work in the lowest operating mode. Upon detecting a fault signal in the initial working partition, the vehicle hardware is triggered to restart based on the fault signal. During the vehicle hardware reboot process, the initial working partition is switched to a new background partition, the initial background partition is switched to a new working partition, at least one of the vehicle data and the running data of the working partition is connected to the new working partition, and at least one of the vehicle data and the running data is processed using the new working partition.

2. The vehicle hardware restart method according to claim 1, characterized in that, Before synchronizing the initial working partition and initial background partition of the onboard hardware, the following is also included: Read the computing resources corresponding to the vehicle-mounted hardware; The minimum operating mode of the initial background partition is determined based on the computing resources.

3. The vehicle hardware restart method according to claim 1 or 2, characterized in that, The control of the initial background partition to operate in the lowest operating mode includes: Identify the functional modules that are allowed to work in the initial background partition under the minimum operating mode; The system controls the enabled functional modules to be in a working state and prohibits the enabled functional modules from receiving the vehicle data and processing at least one of the vehicle data.

4. The vehicle hardware restart method according to claim 1, characterized in that, Before triggering the restart action of the vehicle hardware based on the fault signal, the method further includes: The triggering mechanism for identifying fault signals in the initial working partition; If the triggering mechanism is a watchdog mechanism, then the vehicle hardware will be restarted based on the fault signal.

5. The vehicle hardware restart method according to claim 1 or 4, characterized in that, The step of triggering the restart action of the vehicle hardware based on the fault signal includes: Identify the fault information in the fault signal; When the vehicle hardware meets the preset conditions based on the fault information, the vehicle hardware is triggered to restart.

6. The vehicle hardware restart method according to claim 1, characterized in that, After switching the initial working partition to the new background partition, the process also includes: Control the new background partition to perform the recovery action; If the new background partition is successfully restored, then the new background partition is controlled to work in the lowest operating mode; If the recovery of the new background partition fails, the recovery process will continue after the vehicle is powered on again.

7. The vehicle hardware restart method according to claim 5, characterized in that, Before continuing the recovery process after the vehicle is powered on again, it also includes: Obtain the actual number of times the recovery action was performed on the new background partition; If the actual number of times is less than the number of times threshold, the recovery action will continue to be executed when the vehicle is powered on again. If the actual number of occurrences is greater than or equal to the number of occurrences threshold, then fault information for the new backend partition is generated, and the fault information is used to provide a fault alert.

8. The vehicle hardware restart method according to claim 5, characterized in that, The control of the new background partition to operate in the lowest operating mode includes: Identify the functional modules that are allowed to work in the new background partition under the minimum operating mode; The system controls the enabled functional modules to be in a working state and prohibits the enabled functional modules from receiving the vehicle data and processing at least one of the vehicle data.

9. An electronic device, characterized in that, Including processor and memory, among which Memory, used to store computer programs; A processor for executing a program stored in memory to implement the method described in any one of claims 1-8.

10. A vehicle, characterized in that, It includes the electronic device as described in claim 9.

Images