Electronic and electrical system of a vehicle and vehicle

Abstract

The application relates to an electronic and electrical system of a vehicle and the vehicle, the system comprising a whole-vehicle domain controller, a first regional controller, a second regional controller, a third regional controller and a mobile data center, the first regional controller and the second regional controller comprising a main regional controller and a backup regional controller; the different regional controllers are in communication connection, the first regional controller and the second regional controller are in communication connection with the whole-vehicle domain controller; the mobile data center is in communication connection with the main regional controller; the third regional controller sends a third state signal to the main regional controller and the backup regional controller; when the communication connection with the main regional controller is interrupted, the whole-vehicle domain controller acquires the third state signal from the backup regional controller and performs vehicle control based on the third state signal; the mobile data center acquires state signals sent by the different regional controllers from the main regional controller and performs vehicle control based on the state signals. The scheme can realize redundant control of the vehicle.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to an electronic and electrical system for a vehicle and a vehicle. Background Technology

[0002] With the development of vehicle technology, intelligent driving technology has emerged that relies on the vehicle's electrical and electronic system (E / E system).

[0003] Among them, the vehicle's electronic and electrical system is essentially a physical coupling of hardware resources and functional requirements, and its operational stability has a huge impact on the safe driving of the vehicle.

[0004] Therefore, improving the stability and reliability of electronic and electrical systems to ensure their stable operation in the event of operational or communication failures in electronic control units has become a pressing technical problem that needs to be solved. Summary of the Invention

[0005] Therefore, it is necessary to provide an electronic and electrical system and a vehicle that can achieve redundant control of the vehicle, improve the stability and reliability of the electronic and electrical system, and thus improve the safety of vehicle operation.

[0006] In a first aspect, this application provides an electronic and electrical system for a vehicle, including a vehicle domain controller, a first area controller, a second area controller, a third area controller, and a mobile data center, wherein one of the first and second area controllers is a primary area controller, and the other is a backup area controller; wherein,

[0007] The different area controllers are connected to each other, and both the first area controller and the second area controller are connected to the vehicle domain controller.

[0008] The mobile data center communicates with the main area controller;

[0009] The third area controller is used to receive the third status signal sent by the connected vehicle components and send the third status signal to the main area controller and the backup area controller.

[0010] The main area controller is used to send third status signals to the vehicle domain controller;

[0011] The vehicle domain controller is used to obtain a third status signal from the backup domain controller and perform vehicle control based on the third status signal in the event of an interruption in the communication connection with the main domain controller.

[0012] The mobile data center is used to obtain status signals of vehicle components electrically connected to different area controllers from the main area controller, and to control the vehicle based on the obtained status signals.

[0013] In one embodiment, the backup area controller is used to receive a first status signal sent by the connected vehicle components and send the first status signal to the main area controller; the vehicle domain controller is used to obtain the first status signal from the main area controller and perform vehicle control based on the first status signal.

[0014] In one embodiment, the backup area controller is further configured to send a first status signal to the vehicle domain controller in the event of an interruption in the communication connection between the vehicle domain controller and the primary area controller; the vehicle domain controller is further configured to obtain the first status signal from the backup area controller in the event of an interruption in the communication connection with the primary area controller, and to perform vehicle control based on the first status signal.

[0015] In one embodiment, the primary area controller is configured to receive a second status signal sent by the connected vehicle components and send the second status signal to the backup area controller and the vehicle domain controller; the vehicle domain controller is configured to obtain the second status signal from the backup area controller and perform vehicle control based on the second status signal in the event of an interruption in the communication connection with the primary area controller.

[0016] In one embodiment, different area controllers are connected to each other via Ethernet communication links; and the first area controller and the second area controller are both connected to the vehicle domain controller via Ethernet communication links.

[0017] In one embodiment, the vehicle domain controller is configured to send a first Ethernet link configuration signal to a first area controller and a second Ethernet link configuration signal to a second area controller; the first area controller is configured to configure a communication port in response to the first Ethernet link configuration signal to establish an Ethernet communication link with the vehicle domain controller; the second area controller is configured to configure a communication port in response to the second Ethernet link configuration signal to establish an Ethernet communication link with the vehicle domain controller; wherein the first Ethernet link configuration signal and the second Ethernet link configuration signal respectively indicate the bandwidth of the corresponding established Ethernet communication link.

[0018] In one embodiment, any two of the first, second, and third area controllers are deployed on the front side of the vehicle body, and respectively on the left and right sides of the vehicle's longitudinal axis; and the remaining area controllers are deployed on the rear side of the vehicle body.

[0019] In one embodiment, different area controllers are deployed in different sub-regions of the vehicle, and each area controller is electrically connected to at least some of the vehicle components in the region where it is deployed.

[0020] In one embodiment, the system further includes a cockpit domain controller that is communicatively connected to the main area controller; the cockpit domain controller is used to obtain status signals of vehicle components electrically connected to different area controllers from the main area controller, and to perform vehicle control based on the obtained status signals.

[0021] Secondly, this application also provides a vehicle including the electronic and electrical system of any of the vehicles provided in the first aspect above.

[0022] The aforementioned vehicle's electronic and electrical system and the vehicle itself, by setting up a vehicle domain controller, a first area controller, a second area controller, a third area controller, and a mobile data center within the vehicle's electronic and electrical system, and designating one of the first and second area controllers as the master area controller and the other as a sub-area controller, and establishing network connections between the different area controllers, with both the first and second area controllers connected to the vehicle domain controller, and the mobile data center connected to the master area controller; wherein, the master area controller can serve as the data transmission medium between the third area controller and the vehicle domain controller, and as the data transmission medium between the mobile data center and each of the different area controllers, enabling the vehicle domain controller to receive third state signals collected by the vehicle components connected to the third area controller, thereby realizing vehicle control based on the third state signals, thus achieving communication redundancy for the third state signals, and enabling the mobile data center to obtain the state signals of the vehicle components electrically connected to different area controllers, and to perform vehicle control based on the obtained state signals. In this way, on the one hand, by deploying the first, second, and third area controllers, hardware redundancy can be achieved among the area controllers. Since the different area controllers are interconnected, and both the first and second area controllers are connected to the vehicle domain controller, a communication ring network is formed between the vehicle domain controller, the first area controller, the second area controller, and the third area controller. This enables communication link redundancy between different area controllers and the vehicle domain controller, supporting redundant data communication between them. Therefore, if the general communication link between any area controller and the vehicle domain controller is interrupted, redundant communication between that area controller and the vehicle domain controller can be achieved using other area controllers. This improves the stability and reliability of the electronic and electrical system in the event of operational or communication failures in electronic control units within the electronic and electrical system, thereby enhancing vehicle safety. On the other hand, the main area controller can serve as the data transmission medium between the other area controllers and the mobile data center, eliminating the need for separate communication lines between the other area controllers and the mobile data center. This reduces the number of communication lines in the electronic and electrical system, thereby reducing the complexity of the vehicle's electronic and electrical system and ultimately lowering the overall vehicle manufacturing cost. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0024] Figure 1 A structural block diagram of an electronic and electrical system provided for some embodiments of this application;

[0025] Figure 2 A structural block diagram of an electronic and electrical system provided for other embodiments of this application;

[0026] Figure 3 A schematic diagram illustrating vehicle area division provided for some embodiments of this application;

[0027] Figure 4 A structural block diagram of an electronic and electrical system provided in some embodiments of this application;

[0028] Figure 5 A structural block diagram of an electronic and electrical system provided for some embodiments of this application;

[0029] Figure 6 This is a schematic diagram of a vehicle provided for some embodiments of this application. Detailed Implementation

[0030] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0031] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application.

[0032] The terms "first," "second," etc., used herein may be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish one element from another. For example, without departing from the scope of this application, a first resistor may be referred to as a second resistor, and similarly, a second resistor may be referred to as a first resistor. Both the first resistor and the second resistor are resistors, but they are not the same resistor.

[0033] It is understood that the term "connection" in the following embodiments should be understood as "electrical connection," "communication connection," etc., if the connected circuits, modules, units, etc., have electrical signal or data transmission with each other.

[0034] It is understandable that "at least one" refers to one or more, and "multiple" refers to two or more. "At least a part of an element" refers to part or all of an element.

[0035] When used herein, the singular forms of “a,” “an,” and “the” may also include the plural forms unless the context clearly indicates otherwise. It should also be understood that the terms “comprising / including” or “having,” etc., specify the presence of the stated features, wholes, steps, operations, components, parts, or combinations thereof, but do not preclude the possibility of the presence or addition of one or more other features, wholes, steps, operations, components, parts, or combinations thereof. Meanwhile, the term “and / or” as used in this specification includes any and all combinations of the associated listed items.

[0036] With the development of vehicle technology, intelligent driving technology has emerged that relies on the vehicle's electrical and electronic system (E / E system). The vehicle's electrical and electronic system is essentially a physical coupling of hardware resources and functional requirements.

[0037] In traditional technology, the electronic control units in a vehicle's electrical and electronic system are located in dispersed positions, resulting in a large and complex wiring layout and making the system bulky and cumbersome. However, as vehicle functionality, features, and safety continue to improve, the electrical and electronic system needs to incorporate more new interfaces to connect to more electronic control units, in order to meet the demands of enhanced vehicle performance.

[0038] Therefore, how to reduce the complexity of electronic and electrical systems while reserving additional interfaces for improving vehicle performance has become a pressing technical problem that needs to be solved.

[0039] To address the aforementioned technical problems, in an exemplary embodiment, such as Figure 1 As shown, this application provides an electronic and electrical system for a vehicle, which includes a vehicle domain controller 10, a first area controller 11, a second area controller 12, a third area controller 13, and a mobile data center 15. One of the first area controller 11 and the second area controller 12 is a master area controller, and the other is a backup area controller. For example, the first area controller 11 is the master area controller and the second area controller 12 is the backup area controller; or, the first area controller 11 is the backup area controller and the second area controller 12 is the master area controller.

[0040] The different area controllers are connected to each other, and both the first area controller 11 and the second area controller 12 are connected to the vehicle domain controller 10.

[0041] Mobile Data Center 15 and Main Area Controller ( Figure 1 (Taking the second area controller 12 as the main area controller as an example) Communication connection.

[0042] The third area controller 13 is used to receive the third status signal sent by the connected vehicle components and send the third status signal to the main area controller and the backup area controller.

[0043] The main area controller is used to send the third status signal to the vehicle domain controller 10;

[0044] The vehicle domain controller 10 is used to obtain a third status signal from the backup domain controller in the event of an interruption in the communication connection with the main domain controller, and to perform vehicle control based on the third status signal.

[0045] Mobile data center 15 is used to obtain status signals of vehicle components electrically connected to different area controllers from the main area controller and to perform vehicle control based on the obtained status signals.

[0046] In other words, there is a communication connection between any two of the first area controller 11, the second area controller 12, and the third area controller 13. Specifically, there is a communication connection between the first area controller 11 and the second area controller 12, between the first area controller 11 and the third area controller 13, and between the second area controller 12 and the third area controller 13.

[0047] Optionally, different area controllers can communicate with each other through a first communication network, and both the first area controller 11 and the second area controller 12 can communicate with the vehicle domain controller 10 through the first communication network; for example, the first communication network can be an Ethernet communication link.

[0048] Optionally, the mobile data center 15 and the main area controller can communicate via the first communication network or other communication networks besides the first communication network.

[0049] Among them, the Vehicle Data Center (VDC), also known as the vehicle data center, is a vehicle-level domain controller that coordinates and controls the chassis domain drive-by-wire system such as drive, braking, steering, and suspension, as well as the power domain system such as battery. Based on the control commands sent by the upper-level controller and the real-time status of the vehicle, it determines and outputs vehicle motion control commands to control the vehicle's acceleration, braking, steering, and other driving behaviors.

[0050] The Vehicle Interface Unit (VIU), also known as the vehicle integration unit, is a regional-level control unit. It is connected to multiple CAN (Controller Area Network) / CANFD (Controller Area Network with Flexible Data-Rate) network segments, and is responsible for the integrated management and control of power functions and chassis functions. In addition, it can communicate with other parts of the vehicle through communication network, and directly drive or power systems with body control functions to achieve unified control of sensors and actuators in local areas of the vehicle body.

[0051] Optionally, the third area controller 13 sends a second status signal to the main area controller when the vehicle's electronic and electrical systems are operating normally, and sends a third status signal to the backup area controller when the communication connection between the third area controller 13 and / or the main area controller is interrupted. Optionally, when the communication connection between the third area controller 13 and / or the main area controller is interrupted, the backup area controller may obtain the third status signal from the third area controller 13 in response to a control command sent by the main area controller.

[0052] As mentioned earlier, under normal operating conditions of the vehicle's electronic and electrical systems, the main area controller sends various vehicle status signals to the vehicle domain controller 10. The third area controller 13 receives third status signals from connected vehicle components and sends these signals back to the main area controller. Furthermore, to achieve communication redundancy for the third status signals, the third area controller 13 simultaneously sends these signals to the backup area controller. Upon receiving the third status signals, the main area controller can then send them back to the vehicle domain controller 10. Thus, the vehicle domain controller 10 can obtain the third status signals from the main area controller and perform vehicle control based on these signals. Optionally, the vehicle components connected to the third area controller 13 collect the third status signals in real-time or periodically. The third area controller 13 sends the third status signals to the main area controller and the backup area controller in real-time, and the main area controller sends the third status signals to the vehicle domain controller 10 in real-time.

[0053] Furthermore, in the event of a failure of the main area controller and / or an interruption of the communication connection between the main area controller and the vehicle domain controller 10, since the main area controller is unable to continue sending the aforementioned third status signal to the vehicle domain controller 10, the vehicle domain controller 10 can directly obtain the third status signal from the backup area controller and perform vehicle control based on the third status signal when performing vehicle control.

[0054] Optionally, when the vehicle domain controller 10 detects an interruption in the communication connection with the primary domain controller, it sends a status signal request to the backup domain controller. Upon receiving the status signal request, the backup domain controller determines that the communication connection between the vehicle domain controller 10 and the primary domain controller is interrupted, and thus, in response to the status signal request, sends a third status signal to the vehicle domain controller 10.

[0055] Optionally, when the primary area controller detects an interruption in the communication connection with the vehicle domain controller 10, it sends an instruction to the backup area controller to instruct the backup area controller to send a third status signal to the vehicle domain controller 10. Upon receiving the instruction, the backup area controller determines that the communication connection between the vehicle domain controller 10 and the primary area controller is interrupted, and thus, in response to the instruction, sends a third status signal to the vehicle domain controller 10.

[0056] Optionally, the backup area controller is used to send a third status signal to the primary area controller and the vehicle domain controller 10 upon receiving the third status signal; or, the backup area controller is used to send a third status signal to the vehicle domain controller 10 upon receiving the third status signal (regardless of whether the communication connection between the vehicle domain controller 10 and the primary area controller is normal, the backup area controller sends the third status signal to both the primary area controller and the vehicle domain controller 10, or regardless of whether the communication connection between the vehicle domain controller 10 and the primary area controller is normal, the backup area controller sends the third status signal to the vehicle domain controller 10). When the communication connection between the vehicle domain controller 10 and the primary area controller is normal, the vehicle domain controller performs vehicle control based on the third status signal sent by the primary area controller. Even when the communication connection between the vehicle domain controller 10 and the primary area controller is interrupted, the vehicle domain controller 10 can still receive the third status signal sent by the backup area controller, thus continuing to perform vehicle control based on the third status signal, without being affected by the interruption of the communication connection between the vehicle domain controller 10 and the primary area controller.

[0057] As described above, the main area controller can serve as a data transmission medium between the third area controller 13 and the vehicle domain controller 10, enabling the vehicle domain controller 10 to receive the third state signal collected by the vehicle components connected to the third area controller 13, thereby achieving vehicle control based on the third state signal. Furthermore, communication redundancy for the third state signal can be implemented, ensuring that the vehicle domain controller 10 can still normally acquire the third state signal even if the communication connection between the vehicle domain controller 10 and the main area controller is interrupted. This avoids affecting vehicle control based on the third state signal, improves the fault tolerance of intelligent driving control, and enhances vehicle driving safety.

[0058] The Mobile Data Center (MDC), also known as the Intelligent Driving Domain Controller, is the central decision-making unit of the intelligent driving system, connecting multiple camera, millimeter-wave radar, ultrasonic radar, and lidar nodes. For example, the Mobile Data Center 15 uses LVDS (Low-Voltage Differential Signaling) to connect multiple cameras, Ethernet to connect lidar and mid-range millimeter-wave radar, and CANFD to connect short-range millimeter-wave radar and ultrasonic radar. Furthermore, the Mobile Data Center 15 can integrate and process data from various sensors to perform environmental perception, path planning, and decision-making, control vehicle movement, and coordinate communication with other systems to ensure driving safety and real-time performance. The Mobile Data Center 15 can also obtain status signals from vehicle components electrically connected to different domain controllers from the main domain controller and perform vehicle control based on these acquired status signals.

[0059] As previously described, the main area controller can acquire the status information reported by the vehicle components electrically connected to the first area controller 11, the second area controller 12, and the third area controller 13, respectively. The mobile data center 15 can then acquire the status signals of the vehicle components electrically connected to the different area controllers from the main area controller and perform vehicle control based on the acquired status signals. Optionally, when performing vehicle control, the mobile data center 15 may use the status signals of vehicle components electrically connected to at least one of the first area controller 11, the second area controller 12, and the third area controller 13.

[0060] The aforementioned vehicle's electronic and electrical system and the vehicle itself, by setting up a vehicle domain controller, a first area controller, a second area controller, a third area controller, and a mobile data center within the vehicle's electronic and electrical system, and designating one of the first and second area controllers as the master area controller and the other as a sub-area controller, and establishing network connections between the different area controllers, with both the first and second area controllers connected to the vehicle domain controller, and the mobile data center connected to the master area controller; wherein, the master area controller can serve as the data transmission medium between the third area controller and the vehicle domain controller, and as the data transmission medium between the mobile data center and each of the different area controllers, enabling the vehicle domain controller to receive third state signals collected by the vehicle components connected to the third area controller, thereby realizing vehicle control based on the third state signals, thus achieving communication redundancy for the third state signals, and enabling the mobile data center to obtain the state signals of the vehicle components electrically connected to different area controllers, and to perform vehicle control based on the obtained state signals. In this way, on the one hand, by deploying the first, second, and third area controllers, hardware redundancy can be achieved among the area controllers. Since the different area controllers are interconnected, and both the first and second area controllers are connected to the vehicle domain controller, a communication ring network is formed between the vehicle domain controller, the first area controller, the second area controller, and the third area controller. This enables communication link redundancy between different area controllers and the vehicle domain controller, supporting redundant data communication between them. Therefore, if the general communication link between any area controller and the vehicle domain controller is interrupted, redundant communication between that area controller and the vehicle domain controller can be achieved using other area controllers. This improves the stability and reliability of the electronic and electrical system in the event of operational or communication failures in electronic control units within the electronic and electrical system, thereby enhancing vehicle safety. On the other hand, the main area controller can serve as the data transmission medium between the other area controllers and the mobile data center, eliminating the need for separate communication lines between the other area controllers and the mobile data center. This reduces the number of communication lines in the electronic and electrical system, thereby reducing the complexity of the vehicle's electronic and electrical system and ultimately lowering the overall vehicle manufacturing cost.

[0061] Based on the above embodiments, in an optional embodiment, such as Figure 2 As shown, different area controllers are deployed in different sub-regions of the vehicle, and each area controller is electrically connected to at least a portion of the vehicle components 14 in the region where it is deployed.

[0062] In other words, the first area controller 11, the second area controller 12, and the third area controller 13 are respectively deployed in different sub-regions of the vehicle, and the first area controller 11, the second area controller 12, and the third area controller 13 are electrically connected to at least a portion of the vehicle components 14 in their respective deployed regions. For example, in this application, the vehicle can be divided into three non-overlapping sub-regions, and the first area controller 11, the second area controller 12, and the third area controller 13 can be deployed in different sub-regions. Thus, the first area controller 11, the second area controller 12, and the third area controller 13 are electrically connected to at least a portion of the vehicle components 14 in their deployed regions to integrate functions such as vehicle control, body control, thermal management, and power distribution in their respective deployed regions.

[0063] Optionally, the first area controller 11, the second area controller 12, and the third area controller 13 may be electrically connected to at least a portion of the vehicle components 14 of the deployed area via at least one of a LIN (Local Interconnect Network) bus, a CAN (Controller Area Network) bus, or a CANFD (Controller Area Network with Flexible Data-Rate) bus.

[0064] Optionally, the vehicle components 14 electrically connected to the first area controller 11, the second area controller 12, and the third area controller 13 include at least one of body control components, thermal management components, and power distribution control components. Examples include body control components such as door control components, sunroof controllers, headlight controllers, and seat control modules; thermal management components such as air conditioning compressor controllers, cooling fan control modules, and battery thermal management control components; and power distribution components such as area power distribution control units, low-voltage DC-DC converters (LDCs), and battery disconnect units (BDUs).

[0065] In one exemplary embodiment, the vehicle is divided into a front side and a rear side, and the front side is further divided into left and right sides (i.e., the left front side and the right front side) along the vehicle's longitudinal axis. Thus, any two of the first area controller 11, the second area controller 12, and the third area controller 13 are deployed on the front side of the vehicle and on the left and right sides of the vehicle's longitudinal axis (i.e., on the left front side and the right front side), respectively, and the remaining area controller is deployed on the rear side of the vehicle.

[0066] For example, such as Figure 3As shown, this application divides the vehicle into a first sub-region N1 (i.e., the left front side of the vehicle), a second sub-region N2 (i.e., the right front side of the vehicle), and a third sub-region N3 (i.e., the rear side of the vehicle) that do not overlap, and then deploys the first region controller 11 in the first sub-region N1, the second region controller 12 in the second sub-region N2, and the third region controller 13 in the third sub-region N3.

[0067] In one exemplary embodiment, different area controllers are connected via Ethernet communication links, and the first area controller 11 and the second area controller 12 are both connected to the vehicle domain controller 10 via Ethernet communication links. That is, the first area controller 11 and the second area controller 12 are connected via Ethernet communication links, the first area controller 11 and the third area controller 13 are connected via Ethernet communication links, and the second area controller 12 and the third area controller 13 are connected via Ethernet communication links.

[0068] In one optional embodiment, the Ethernet communication link between the first area controller 11 and the second area controller 12 and the vehicle domain controller 10 is established based on Ethernet link configuration signals. Specifically:

[0069] The vehicle domain controller 10 is used to send a first Ethernet link configuration signal to the first area controller 11; and to send a second Ethernet link configuration signal to the second area controller 12;

[0070] Furthermore, the first area controller 11 is configured, in response to the first Ethernet link configuration signal, to configure the communication port to establish an Ethernet communication link with the vehicle domain controller 10; and,

[0071] The second area controller 12 is used to configure the communication port in response to the second Ethernet link configuration signal to establish an Ethernet communication link with the vehicle domain controller 10.

[0072] The aforementioned Ethernet link configuration signals are essentially physical port definition signals, used to instruct the first area controller 11 and the second area controller 12 to configure their physical interfaces for communication with the vehicle domain controller 10 as Ethernet interfaces with corresponding bandwidths. For example, the first Ethernet link configuration signal is ETH (Ethernet)_1000M (1000Mbps, Gigabit Ethernet)_VDCtoVIU1; the second Ethernet link configuration signal is ETH_1000M_VDCtoVIU2. The vehicle domain controller 10 first initializes its local physical interfaces for communication with the first area controller 11 and the second area controller 12, and then binds the corresponding bandwidth transmission specifications (e.g., 1000M) to different physical interfaces. Upon receiving the corresponding Ethernet link configuration signal, the first area controller 11 and the second area controller 12 synchronize their physical interfaces for communication with the vehicle domain controller 10 to the same bandwidth transmission specification, thus completing the physical layer binding with the vehicle domain controller 10 and establishing an Ethernet communication link with the vehicle domain controller 10.

[0073] As mentioned above, the first Ethernet link configuration signal and the second Ethernet link configuration signal respectively indicate the bandwidth of the corresponding established Ethernet communication link. Optionally, the bandwidths indicated by the first Ethernet link configuration signal and the second Ethernet link configuration signal may be the same or different; optionally, the bandwidths indicated by the first Ethernet link configuration signal and the second Ethernet link configuration signal may be the same as or different from the bandwidth of the Ethernet communication link between different area controllers. For example, the bandwidth of the Ethernet communication link between different area controllers is 100 Mbps, and the bandwidths indicated by the first Ethernet link configuration signal and the second Ethernet link configuration signal are 1000 Mbps. The bandwidths mentioned above can be selected from the selectable bandwidths specified by the Ethernet communication standard according to the data transmission requirements of the vehicle's electronic and electrical system.

[0074] In the case where the first communication network is an Ethernet network, the placement of different area controllers and the routing of Ethernet cabling within the Ethernet network can create hardware redundancy in the electronic and electrical system. Specifically:

[0075] 1) When the main area controller (first area controller 11 or second area controller 12) fails or malfunctions, the vehicle domain controller 10 interacts with the main area controller's downstream CAN node (i.e., the electrically connected vehicle components) through the backup area controller (the area controller other than the main area controller in the first area controller 11 and the second area controller 12).

[0076] 2) When the Ethernet harness between the first area controller 11 and the third area controller 13 is interfered with or squeezed, the first area controller 11 realizes signal interaction through the Ethernet communication path of the first area controller 11-second area controller 12-third area controller 13;

[0077] 3) The first area controller 11, the second area controller 12 and the third area controller 13 implement hardware redundancy logic, which enhances hardware security; in the face of high voltage interference and partial wiring harness damage in electric vehicles, the vehicle has stronger risk resistance and can maintain normal safe driving.

[0078] Meanwhile, redundant information monitoring logic is added between nodes within the Ethernet ring network, resulting in higher information security and preventing abnormal data intrusion. For example, A+E2E (Advanced Encryption Standard + End-to-End Encryption) encrypted information is sent on the path from the primary area controller (first area controller 11 or second area controller 12) to the vehicle domain controller 10, and A+E2E encrypted information is also sent on the path from the backup area controller to the primary area controller to the vehicle domain controller 10, so as to ensure that no external access devices are detected through double encryption.

[0079] In this embodiment, by deploying different area controllers in different sub-regions of the vehicle, different area controllers can be electrically connected to vehicle components that are physically close to each other as much as possible, thereby reducing the length of communication lines between vehicle components and area controllers, reducing the complexity of the vehicle's electronic and electrical systems, and also reducing the overall vehicle manufacturing cost.

[0080] Based on the above embodiments, in an exemplary embodiment, the backup area controller is used to receive a first status signal sent by the connected vehicle component and send the first status signal to the main area controller;

[0081] The vehicle domain controller is used to obtain a first state signal from the main area controller and to control the vehicle based on the first state signal.

[0082] As mentioned above, the vehicle domain controller 10 controls the vehicle's driving behavior based on the vehicle's real-time status. The vehicle components in different sub-regions of the vehicle are used to collect corresponding vehicle status signals. Thus, the vehicle domain controller 10 can control the vehicle based on the vehicle status signals collected by the aforementioned vehicle components.

[0083] In this configuration, when the vehicle's electronic and electrical systems are operating normally, the primary area controller sends various vehicle status signals to the vehicle domain controller 10. Based on this, the backup area controller can receive the first status signal sent by the connected vehicle components and send this first status signal to the primary area controller via a first communication network. Upon receiving the first status signal, the primary area controller can then send it to the vehicle domain controller 10. Thus, the vehicle domain controller 10 can obtain the first status signal from the primary area controller and perform vehicle control based on the obtained first status signal. Optionally, the vehicle components connected to the backup area controller may collect the first status signal in real-time or periodically and send it to the backup area controller in real-time. The backup area controller then sends the first status signal to the primary area controller in real-time, and the primary area controller then sends the first status signal to the vehicle domain controller 10 in real-time.

[0084] In an optional embodiment, the backup area controller is further configured to send a first status signal to the vehicle domain controller 10 in the event of an interruption in the communication connection between the vehicle domain controller 10 and the main area controller.

[0085] The vehicle domain controller 10 is also used to obtain a first status signal from the backup domain controller in the event of an interruption in the communication connection with the primary domain controller, and to perform vehicle control based on the first status signal.

[0086] Since the different area controllers are connected via a first communication network, and both the first area controller 11 and the second area controller 12 are connected to the vehicle domain controller 10 via the same first communication network, a communication ring network is formed between the vehicle domain controller 10, the first area controller 11, the second area controller 12, and the third area controller 13. For example, when the first communication network is an Ethernet communication link, an Ethernet ring network architecture of vehicle domain controller-different area controllers-vehicle domain controller is formed between the vehicle domain controller 10, the first area controller 11, the second area controller 12, and the third area controller 13. Based on this, data communication redundancy can be achieved between the different area controllers and the vehicle domain controller 10.

[0087] Therefore, in the event of a failure of the main area controller and / or a failure of the first communication network between the main area controller and the vehicle domain controller 10, resulting in an interruption of the communication connection between the vehicle domain controller 10 and the main area controller, since the main area controller is unable to continue sending the aforementioned first status signal to the vehicle domain controller 10, the vehicle domain controller 10 can directly obtain the first status signal from the backup area controller and perform vehicle control based on the first status signal when performing vehicle control.

[0088] Optionally, when the vehicle domain controller 10 detects an interruption in the communication connection with the primary domain controller, it sends a status signal request to the backup domain controller. Upon receiving the status signal request, the backup domain controller determines that the communication connection between the vehicle domain controller 10 and the primary domain controller is interrupted, and thus, in response to the status signal request, sends a first status signal to the vehicle domain controller 10.

[0089] Optionally, when the primary area controller detects an interruption in the communication connection with the vehicle domain controller 10, it sends an instruction to the backup area controller to instruct the backup area controller to send a first status signal to the vehicle domain controller 10. Upon receiving the instruction, the backup area controller determines that the communication connection between the vehicle domain controller 10 and the primary area controller is interrupted, and thus, in response to the instruction, sends a first status signal to the vehicle domain controller 10.

[0090] Optionally, the backup area controller is used to send a first status signal to the primary area controller and the vehicle domain controller 10 upon receiving the first status signal. When the communication connection between the vehicle domain controller 10 and the primary area controller is normal, the vehicle domain controller performs vehicle control based on the first status signal sent by the primary area controller. Even if the communication connection between the vehicle domain controller 10 and the primary area controller is interrupted, the vehicle domain controller 10 can still receive the first status signal sent by the backup area controller, thus continuing to perform vehicle control based on the first status signal, without being affected by the interruption of the communication connection between the vehicle domain controller 10 and the primary area controller.

[0091] In this embodiment, the primary area controller can serve as a data transmission medium between the backup area controller and the vehicle domain controller. This allows the vehicle domain controller to receive the first state signal collected by the vehicle components connected to the backup area controller, thereby enabling vehicle control based on the first state signal. Furthermore, communication redundancy for the first state signal is achieved. This ensures that even if the communication connection between the vehicle domain controller and the primary area controller is interrupted, the vehicle domain controller can still normally acquire the first state signal, avoiding any impact on vehicle control based on the first state signal, improving the fault tolerance of intelligent driving control, and enhancing vehicle driving safety.

[0092] Based on the above embodiments, in an exemplary embodiment, the main area controller is used to receive a second status signal sent by the connected vehicle components, and to send the second status signal to the backup area controller and the vehicle domain controller.

[0093] The vehicle domain controller is used to obtain a second status signal from the backup domain controller in the event of an interruption in the communication connection with the primary domain controller, and to perform vehicle control based on the second status signal.

[0094] Optionally, the main area controller sends a second status signal to the vehicle domain controller 10 when the vehicle's electronic and electrical systems are operating normally, and sends a second status signal to the backup area controller when the main area controller fails and / or the first communication network between the main area controller and the vehicle domain controller 10 fails, causing the communication connection between the vehicle domain controller 10 and the main area controller to be interrupted.

[0095] As previously described, under normal operating conditions of the vehicle's electronic and electrical systems, the main area controller sends vehicle status signals to the vehicle domain controller 10. Considering that the main area controller is also electrically connected to some vehicle components in the deployed area, similar to the backup area controller, the main area controller can receive second status signals sent by the connected vehicle components and send these second status signals to the backup area controller and the vehicle domain controller 10 via the first communication network. In this way, the vehicle domain controller 10 can obtain the second status signals from the main area controller and perform vehicle control based on the obtained second status signals. Optionally, the vehicle components connected to the main area controller collect the second status signals in real time or periodically and send them to the main area controller in real time. The main area controller then sends these second status signals to the backup area controller and the vehicle domain controller 10 in real time.

[0096] Therefore, in the event of a failure of the main area controller and / or a failure of the first communication network between the main area controller and the vehicle domain controller 10, resulting in an interruption of the communication connection between the vehicle domain controller 10 and the main area controller, since the main area controller is unable to continue sending the aforementioned second status signal to the vehicle domain controller 10, the vehicle domain controller 10 can directly obtain the second status signal from the backup area controller and perform vehicle control based on the second status signal when performing vehicle control.

[0097] Optionally, when the vehicle domain controller 10 detects an interruption in the communication connection with the primary domain controller, it sends a status signal request to the backup domain controller. Upon receiving the status signal request, the backup domain controller determines that the communication connection between the vehicle domain controller 10 and the primary domain controller is interrupted, and thus, in response to the status signal request, sends a second status signal to the vehicle domain controller 10.

[0098] Optionally, when the primary area controller detects an interruption in the communication connection with the vehicle domain controller 10, it sends an instruction to the backup area controller to instruct the backup area controller to send a second status signal to the vehicle domain controller 10. Upon receiving the instruction, the backup area controller determines that the communication connection between the vehicle domain controller 10 and the primary area controller is interrupted, and thus, in response to the instruction, sends a second status signal to the vehicle domain controller 10.

[0099] Optionally, the backup area controller is used to send a second status signal to the vehicle domain controller 10 upon receiving the second status signal (regardless of whether the communication connection between the vehicle domain controller 10 and the primary area controller is normal, the backup area controller sends the second status signal to the vehicle domain controller). When the communication connection between the vehicle domain controller 10 and the primary area controller is normal, the vehicle domain controller performs vehicle control based on the second status signal sent by the primary area controller. Even if the communication connection between the vehicle domain controller 10 and the primary area controller is interrupted, the vehicle domain controller 10 can still receive the second status signal sent by the backup area controller, thus continuing to perform vehicle control based on the second status signal, without being affected by the interruption of the communication connection between the vehicle domain controller 10 and the primary area controller.

[0100] In this embodiment, the backup area controller can serve as a data transmission medium between the main area controller and the vehicle domain controller 10, enabling the vehicle domain controller 10 to receive the second state signal collected by the vehicle components connected to the main area controller from the backup area controller. This allows for vehicle control based on the second state signal, thus achieving communication redundancy for the second state signal. Consequently, even if the communication connection between the vehicle domain controller 10 and the main area controller is interrupted, the vehicle domain controller 10 can still obtain the second state signal normally, avoiding any impact on vehicle control based on the second state signal, improving the fault tolerance of intelligent driving control, and enhancing vehicle driving safety.

[0101] Based on the above embodiments, in an exemplary embodiment, the backup area controller is specifically configured to receive a first status signal sent by the connected vehicle components, a second status signal sent by the main area controller, and a third status signal sent by the third area controller 13, and, in the event of an interruption in the communication connection between the vehicle domain controller 10 and the main area controller, send at least one of the first, second, and third status signals to the vehicle domain controller 10, so that the vehicle domain controller 10 performs vehicle control based on the status signals obtained from the backup area controller.

[0102] Based on the above embodiments, in an exemplary embodiment, such as Figure 4 As shown, the electronic and electrical system also includes a cockpit domain controller 16 that is communicatively connected to the main area controller.

[0103] Correspondingly, the cockpit domain controller 16 is used to obtain status signals of vehicle components electrically connected to different domain controllers from the main domain controller, and to perform vehicle control based on the obtained status signals.

[0104] Optionally, when the cockpit domain controller 16 performs vehicle control, the status signal used may be the status signal of a vehicle component electrically connected to at least one of the first area controller 11, the second area controller 12, and the third area controller 13.

[0105] The Cockpit Domain Controller (CDC) is integrated with the instrument cluster (IC), head-up display (HUD), and external power amplifier (EPA), directly controlling the central control screen, rear-seat displays, driver monitoring system (DMS) facial recognition camera, and cabin monitoring system (CMS) in-vehicle monitoring camera. It also supports wireless Bluetooth connectivity with optional components such as child seats, second-row screen remote controls, and microphones. Furthermore, the Cockpit Domain Controller 16 can be configured as an integrated computing platform, software platform, display platform, and ecosystem, enabling interconnectivity and multi-functional coordination. The Cockpit Domain Controller 16 can obtain status signals from vehicle components electrically connected to different regional controllers from the main regional controller and perform vehicle control based on these acquired status signals.

[0106] As mentioned above, the main area controller can obtain the status information reported by the vehicle components electrically connected to the first area controller 11, the second area controller 12 and the third area controller 13 respectively. Then, the cockpit domain controller 16 can obtain the status signals of the vehicle components electrically connected to the different area controllers from the main area controller and perform vehicle control based on the obtained status signals.

[0107] In one alternative embodiment, such as Figure 5As shown, the first area controller 11 is also connected to the TBOX (Telematics BOX) and DLP (Digital Light Processing) laser projection headlights via Ethernet. The vehicle domain controller 10 is also connected to OBD (On-Board Diagnostics) via Ethernet. Furthermore, the mobile data center 15 is also connected to LiDAR (Light Detection and Range), LiDAR 1, LiDAR 2, and LiDAR 3 via Ethernet. This provides rich communication interfaces for the first area controller 11, the second area controller 12, the third area controller 13, the vehicle domain controller 10, and the mobile data center 15, thereby meeting the communication needs of the electronic control unit under high vehicle configuration.

[0108] Among them, TBOX, as an intelligent communication module, provides a transmission channel for vehicle-to-external interaction and enables data interaction with the cloud platform server; DLP laser projection headlights provide customized light projection in front of the vehicle to enable human-machine interaction in multiple scenarios; OBD, as an Ethernet diagnostic interface, provides an offline vehicle diagnostic access channel and supports fault diagnosis, software upgrades and calibration of various electronic control units (components).

[0109] For example, in the case where the main area controller is connected to the mobile data center 15 and the cockpit domain controller 16 via Ethernet communication, such as Figure 5 As shown, taking the second area controller 12 as the main area controller as an example, the first area controller 11 supports 3 Ethernet outputs, the second area controller 12 supports 5 Ethernet outputs, the third area controller 13 supports 2 Ethernet outputs, the vehicle domain controller 10 supports 3 Ethernet outputs, and the mobile data center 15 supports 4 Ethernet interfaces.

[0110] In this embodiment, the main area controller can serve as the data transmission medium between other area controllers and the cockpit domain controller 16, thereby eliminating the need to set up additional communication lines between other area controllers and the cockpit domain controller 16. This reduces the number of communication lines in the electronic and electrical system, thereby reducing the complexity of the vehicle's electronic and electrical system and ultimately lowering the overall vehicle manufacturing cost.

[0111] Based on the same inventive concept, this application also provides a vehicle, such as Figure 6 As shown, it includes the electronic and electrical systems of any of the vehicles provided in this application.

[0112] In this embodiment, by deploying the electronic and electrical system provided in this application in the vehicle, redundant control of the vehicle can be achieved, the stability and reliability of the electronic and electrical system operation can be improved, and the safety of vehicle driving can be enhanced. At the same time, it can reserve new interfaces for vehicle performance improvement while reducing the complexity of the electronic and electrical system.

[0113] In the description of this specification, references to terms such as "some embodiments," "other embodiments," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative descriptions of the above terms do not necessarily refer to the same embodiments or examples.

[0114] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0115] The embodiments described above illustrate several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this application. Those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these modifications and improvements all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. An electronic and electrical system for a vehicle, characterized in that, This includes a vehicle domain controller, a first area controller, a second area controller, a third area controller, and a mobile data center. One of the first and second area controllers is the primary area controller, and the other is a backup area controller. The different area controllers are connected to each other, and both the first area controller and the second area controller are connected to the vehicle domain controller. The mobile data center is communicatively connected to the main area controller; The third area controller is used to receive a third status signal sent by the connected vehicle components, and to send the third status signal to the main area controller and the backup area controller; The main area controller is used to send the third status signal to the vehicle domain controller; The vehicle domain controller is used to obtain the third status signal from the backup domain controller in the event of an interruption in the communication connection with the main domain controller, and to perform vehicle control based on the third status signal. The mobile data center is used to obtain status signals of vehicle components electrically connected to different area controllers from the main area controller, and to perform vehicle control based on the obtained status signals.

2. The system according to claim 1, characterized in that, The backup area controller is used to receive a first status signal sent by the connected vehicle components and send the first status signal to the main area controller. The vehicle domain controller is used to obtain the first status signal from the main area controller and perform vehicle control based on the first status signal.

3. The system according to claim 2, characterized in that, The backup area controller is also used to send the first status signal to the vehicle domain controller in the event that the communication connection between the vehicle domain controller and the main area controller is interrupted. The vehicle domain controller is also used to obtain the first status signal from the backup domain controller and perform vehicle control based on the first status signal in the event of an interruption in the communication connection with the primary domain controller.

4. The system according to claim 2, characterized in that, The main area controller is used to receive the second status signal sent by the connected vehicle components, and to send the second status signal to the backup area controller and the vehicle domain controller. The vehicle domain controller is used to obtain the second status signal from the backup domain controller in the event of an interruption in the communication connection with the primary domain controller, and to perform vehicle control based on the second status signal.

5. The system according to any one of claims 1-4, characterized in that, Different area controllers are connected via Ethernet communication links; and, Both the first and second area controllers are connected to the vehicle domain controller via Ethernet communication links.

6. The system according to claim 5, characterized in that, The vehicle domain controller is used to send a first Ethernet link configuration signal to the first area controller; and to send a second Ethernet link configuration signal to the second area controller; The first area controller is configured to configure the communication port in response to the first Ethernet link configuration signal to establish an Ethernet communication link with the vehicle domain controller; The second area controller is configured to configure the communication port in response to the second Ethernet link configuration signal to establish an Ethernet communication link with the vehicle domain controller; The first Ethernet link configuration signal and the second Ethernet link configuration signal respectively indicate the bandwidth of the corresponding established Ethernet communication link.

7. The system according to any one of claims 1-4, characterized in that, Any two of the first, second, and third area controllers are deployed on the front side of the vehicle body, and respectively on the left and right sides of the vehicle's longitudinal axis; and, The remaining area controllers are deployed at the rear of the vehicle.

8. The system according to any one of claims 1-4, characterized in that, Different area controllers are deployed in different sub-regions of the vehicle, and each area controller is electrically connected to at least some of the vehicle components in the region where it is deployed.

9. The system according to any one of claims 1-4, characterized in that, The system also includes a cockpit domain controller that is communicatively connected to the main area controller; The cockpit domain controller is used to obtain status signals of vehicle components electrically connected to different domain controllers from the main domain controller, and to perform vehicle control based on the obtained status signals.

10. A vehicle, characterized in that, Includes the electronic and electrical system of the vehicle as described in any one of claims 1-9.

Images