Mode switching circuit, control method, device and vehicle

Abstract

A mode switching circuit, control method, device, and vehicle are disclosed, relating to the field of energy-saving technology, to improve the safety of the mode switching process. The mode switching circuit includes a control device, a first chip, and a second chip. The first chip implements a first safety function and a second safety function, and the second chip implements a third function, which includes the second safety function and / or a non-safety function. The control device supports the first and third safety functions in a first mode, and supports both the first and second safety functions when switching from the first mode to the second mode. By pre-deploying the second safety function in the first chip, and directly activating the second safety function in the first chip after the second mode is triggered, all active safety functions can be implemented in conjunction with the first safety function in the first chip. Thus, even during mode switching, the device can maintain active safety functions, improving the safety of the mode switching process.

Description

Technical Field

[0001] This application relates to the field of energy-saving technology, and in particular to a mode switching circuit, control method, device and vehicle. Background Technology

[0002] With the continuous development of automotive technology, high-density, high-concurrency, and long-term continuous operation system environments are becoming the norm in the automotive field, placing higher demands on vehicle range. Energy-saving mode is a range-priority operating mode provided collaboratively by the automated driving system (ADS). It achieves simultaneous power reduction at both the intelligent driving domain and the vehicle side through strategies such as dynamically scheduling computing power, adjusting vehicle load and power constraints, and enabling high energy recovery. This prioritizes range assurance and significantly reduces energy consumption while preserving basic safety and necessary intelligent driving capabilities.

[0003] However, under the existing mode-switching strategy, the Adaptive Safety System (ADS) is inactive during the transition to energy-saving mode, rendering all ADS functions unavailable, including the vehicle's active safety features. Generally, the delay between switching from normal driving mode to energy-saving mode or exiting energy-saving mode is approximately 10 seconds, and even switching from sleep mode to energy-saving mode takes at least 7 seconds. During this period, the vehicle lacks active safety features, posing a higher safety risk. For example, in a scenario of driving at 100 kph on a highway, the vehicle travels 28 meters per second, covering approximately 300 meters in 10 seconds. Within these 300 meters, the vehicle lacks active safety features and cannot proactively avoid potential accidents, resulting in a higher safety risk and negatively impacting the user experience.

[0004] In summary, improving the safety of mode switching is a critical technical issue that urgently needs to be addressed in the development of autonomous driving technology. Summary of the Invention

[0005] This application provides a mode switching circuit, control method, device, and vehicle to improve the safety of the mode switching process.

[0006] In a first aspect, this application provides a mode switching circuit, which includes a control device, a first chip, and a second chip, both of which are coupled to the control device; the first chip is used to implement a first security function and a second security function, and the second chip is used to implement a third function, the third function including the second security function and / or a non-security function; the control device is used to: support the first security function and the third function in a first mode, and support the first security function and the second security function when switching from the first mode to the second mode.

[0007] Based on the above mode switching circuit, by pre-deploying the second security function in the first chip, after the power-saving mode is triggered, the pre-deployed second security function in the first chip is directly activated. This allows it to work in conjunction with the already operational first security function in the first chip to provide all active security functions without having to perform the process of migrating the second security function or related models from the second chip to the first chip. This saves time and latency such as model migration, ensuring that the device containing the mode switching circuit has complete active security functions even during mode switching, effectively improving the security of the mode switching process.

[0008] In the above description, switching from the first mode to the second mode includes at least the process of switching from the first mode to the second mode. Optionally, it also includes the period after switching from the first mode to the second mode. For example, both the first security function and the second security function may be supported during and after the switch from the first mode to the second mode. In this way, the device always has security functions, whether during the mode switch or after a successful mode switch, ensuring the security of the device throughout its operation.

[0009] In the above content, the first safety function and the second safety function are different safety functions. Examples of such safety functions include, but are not limited to, at least one of the following: automatic emergency braking, brake assist, forward collision warning, rear collision warning, lane departure warning, and lane keeping assist.

[0010] For example, the first safety function includes automatic emergency braking and brake assist, while the second safety function includes forward collision warning, rear collision warning, lane departure warning, or lane keeping assist. Another example: the first safety function includes automatic emergency braking and forward collision warning, while the second safety function includes brake assist and rear collision warning. Yet another example: the first safety function includes forward collision warning, rear collision warning, and lane departure warning, while the second safety function includes automatic emergency braking, brake assist, and lane keeping assist. These are just a few examples.

[0011] In one possible design, the chip power consumption in the second mode is lower than that in the first mode. In some examples, the first mode may also be called the standard mode, normal mode, or high-power mode, and the second mode may also be called the power-saving mode, energy-saving mode, or low-power mode, etc. For example, in the field of in-vehicle intelligent driving, the first mode is the standard driving mode or standard intelligent driving mode, and the second mode is the human-driven power-saving mode or energy-saving mode.

[0012] Based on the above design, the strategy of ensuring uninterrupted safety functions during switching is applied to high- and low-power mode switching scenarios. This not only ensures that the device's safety functions are uninterrupted during switching but also reduces the device's power consumption, achieving the dual effect of energy saving and safety.

[0013] In one possible design, the third function includes the second security function and / or non-security functions, and has the following three deployment methods: In deployment method one, the third function only includes non-security functions and does not include the second security function. In this case, the control device enables the first security function, the second security function, and the non-security function in the first chip in the first mode. When switching from the first mode to the second mode, for example, the non-security function in the second chip can be disabled at the moment the second mode is triggered, or at the start of the switch.

[0014] The first deployment method is equivalent to separating security functions and non-security functions and deploying them on different chips. In this way, when it is necessary to switch to the second mode, the chip with only non-security functions can be directly shut down, while the chip with security functions can continue to provide security functions, thus achieving the effect of uninterrupted security functions during the switch.

[0015] In the second deployment method, the third function includes both the non-security function and the second security function. In this case, in the first mode, the control device enables the first security function in the first chip, the second security function in the second chip, and the non-security function in the second chip. When switching from the first mode to the second mode, for example, the second security function in the first chip can be enabled and the second security function and the non-security function in the second chip can be disabled at the moment the second mode is triggered or at the start of the switch.

[0016] The second deployment method essentially backs up the second security function in the second chip to the first chip in advance. In normal operation mode, the two chips work together in a load-balanced manner to achieve complete security functions. When it is necessary to switch to low-power mode, the second chip is turned off to reduce power consumption, while the second security function backed up in the first chip is directly activated to continue providing complete security functions. Even if an interruption is involved, it is only for a very short period of time when the second security function is activated directly, which approximately ensures that the security functions are uninterrupted during the switching process.

[0017] In deployment method three, the third function only includes the second security function and does not include non-security functions, which are exemplarily deployed in the first chip. In this case, in the first mode, the control device enables the first security function in the first chip, the second security function in the second chip, and the non-security function in the first chip. When switching from the first mode to the second mode, for example, at the moment the second mode is triggered, or at the start of the switch, the second security function in the first chip is enabled, and the second security function in the second chip and the non-security function in the first chip are disabled.

[0018] By adopting deployment method three, the first and second chips can be combined to achieve complete active security functions in normal working mode, so as to minimize the power consumption of the first chip. At the same time, during the switching to low power mode, the two security functions in the first chip can maintain almost uninterrupted active security functions, and the security functions can be uninterrupted during the switching.

[0019] In one example of deployment method one to three above, all non-security functions are deployed on the second chip.

[0020] Based on the above examples, security functions and non-security functions can be deployed separately, thereby improving the management flexibility of different types of functions.

[0021] In another example of deployment methods one through three above, some non-security functions are deployed on the second chip, while other non-security functions are deployed on the first chip.

[0022] Based on the above example, by distributing all non-security functions across two chips, load balancing between the two chips can be achieved, thereby avoiding excessive power consumption on one chip.

[0023] In one possible design, when a non-security function is deployed on the first chip, the control device can also enable the non-security function in the first chip in the first mode, and, for example, disable the non-security function in the first chip at the start of the switch when switching from the first mode to the second mode.

[0024] Based on the above design, in the first mode, not only all safety functions but also all non-safety functions can be implemented to ensure the device has the richest operational capabilities and improve the user experience. During and after switching to the second mode, only safety functions are activated, while non-safety functions cease operation, thus ensuring uninterrupted safety while reducing energy consumption.

[0025] In one possible design, the non-safety functions mentioned above include, but are not limited to, at least one of the following: a first parking function, a second parking function, a first cruise function, and a second cruise function.

[0026] The first parking function and the second parking function are different parking functions. "Different" here means at least partially different, including both completely different and partially different scenarios. For example, the first parking function is applicable to all scenarios, while the second parking function is limited to parking in specific environmental markings. Or, the first parking function is applicable to parallel parking spaces on the side of a road, while the second parking function is applicable to perpendicular parking spaces in a parking lot. Or, the first parking function is remote parking, while the second parking function is memory parking. These are just a few examples.

[0027] Similarly, the first cruise control function and the second cruise control function are different cruise control functions. "Different" here means at least partially different, including both completely different and partially different scenarios. For example, the first cruise control function is suitable for highway cruise control, while the second cruise control function is suitable for urban road cruise control. Or, the first cruise control function is suitable for cruise control where road markings are present, while the second cruise control function is suitable for cruise control where road markings are absent. Or, the first cruise control function is constant speed cruise control, while the second cruise control function is full-speed range adaptive cruise control. These are just a few examples.

[0028] Based on the above design, in the first mode, by supporting all safety functions and all non-safety functions, complete safety, parking, and cruise control functions can be achieved. However, during and after switching to the second mode, by supporting only the safety functions while disabling the computationally intensive parking and cruise control functions, both uninterrupted safety functions and power saving are achieved.

[0029] In one possible design, the first chip and the second chip also include a sensing module, which includes a model for supporting the operation of functions in the chip. In this case, the control device can also control the sensing module in the first chip and the second chip to work in the first mode, and control the sensing module in the first chip to work when switching from the first mode to the second mode, for example, during the process of switching from the first mode to the second mode, and after switching to the second mode.

[0030] Based on the above design, controlling all sensing modules in the first mode allows both chips to perform all functions. During and after the switch from the first to the second mode, only the sensing modules in the first chip are controlled. This allows the first chip to perform all security functions while simultaneously saving unnecessary power by disabling the sensing modules in the second chip.

[0031] In one possible design, where security functions are deployed on a first chip and non-security functions are deployed on a second chip, both the first and second chips also include a perception module. The perception module in the first chip includes a security class model to support the operation of security functions, and the perception module in the second chip includes a non-security class model to support the operation of non-security functions.

[0032] Based on the above design, when security functions and non-security functions are deployed separately on different chips, the security perception models and non-security perception models are also deployed separately. In this way, there is no need to deploy unnecessary perception models on each chip, which can save space and avoid unnecessary perception model operations, thereby achieving the effect of saving resources and power consumption.

[0033] In one possible design, the control device can determine to switch from the first mode to the second mode when it detects that the device status meets at least one of the following conditions: receiving an instruction to enter the second mode; the device power is lower than a set power; the battery discharge voltage is lower than a set voltage; or the startup time of the electrical components inside the device exceeds a set time.

[0034] Based on the above design, mode switching can support multiple triggering conditions, including manual triggering and automatic triggering, which can meet the switching needs of different scenarios and improve the application flexibility and versatility of mode switching strategies.

[0035] In one possible design, the control device can determine to exit the second mode when it detects that the device status meets at least one of the following conditions: receiving a command to exit the second mode; the device gear is switched to parking gear; the device is in charging state; the device power is greater than or equal to the set power; the battery discharge voltage is greater than or equal to the set voltage; or the device restarts.

[0036] Based on the above design, the mode exit can support multiple triggering conditions, including manual and automatic triggering, which can meet the exit requirements of different scenarios and improve the application flexibility and versatility of the mode exit strategy.

[0037] In one example of the above design, after at least one of the conditions for exiting the mode is met, it can also be determined whether the device gear has been switched to parking gear and / or whether the device is in charging state. If so, the operation of exiting the second mode is performed; otherwise, the second mode is not exited.

[0038] Based on the above example, this is equivalent to setting strict exit conditions. The energy-saving mode can only be exited after the vehicle is parked or charged. It cannot be exited when the vehicle is not parked or charged, in order to reduce the probability of safety and user experience risks.

[0039] In one possible design, the control device may also enable functions in the first chip and the second chip associated with the first mode when it determines to exit the second mode. For example, it may enable all functions in the first chip except for the second security function, and all functions in the second chip.

[0040] Based on the above design, it can be ensured that after exiting the second mode, the security functions are not interrupted while the original non-security functions are restored, so as to meet the functional requirements of the first mode for complete non-security functions and complete security functions.

[0041] In one possible design, the control device may also control the display device to display a prompt message during the switching from the first mode to the second mode. This prompt message indicates the remaining switching time and that the device's functionality is limited during the remaining switching time.

[0042] Based on the above design, by prompting users on the interface about the switching time and the limited functions, users can understand the progress of the mode switching in a timely manner, and know which functions are restricted during the current switching process. This helps to remind users to drive carefully, which can indirectly improve safety.

[0043] In one example of the above design, the switching duration can be a pre-configured duration, such as a pre-calibrated duration, or a duration calculated by the control device based on the functions that need to be disabled or enabled during the switching period.

[0044] Based on the above examples, if the duration is pre-configured, the display device can start showing the switching duration and counting down at the moment the switching begins, making the prompts more timely and improving the user's experience of efficiency. If the duration is calculated in real time, it ensures a more accurate displayed switching duration, improving the user's experience of accuracy.

[0045] Secondly, this application provides a control method, which includes: in a first mode, controlling a first chip to support a first security function and a second chip to support a third function; when switching from the first mode to the second mode, exemplary including during and after the switching process, controlling the first chip to support the first security function and the second security function; wherein the third function includes the second security function and / or a non-security function.

[0046] In one possible design, the chip power consumption of the second mode is less than that of the first mode.

[0047] In one possible design, the third function is a non-security function. In this case, in the first mode, the first chip is controlled to support the first security function and the second chip is controlled to support the third function. Specifically, this may include: in the first mode, the first security function, the second security function, and the non-security function are controlled to be enabled; when switching from the first mode to the second mode, the first chip is controlled to support the first security function and the second security function. Specifically, this may include: when switching from the first mode to the second mode, the non-security function is controlled to be disabled.

[0048] In one possible design, the third function includes a non-security function and a second security function. In this case, in the first mode, controlling the first chip to support the first security function and the second chip to support the third function can specifically include: in the first mode, controlling the first security function, the second security function in the second chip, and the non-security function to be enabled; when switching from the first mode to the second mode, controlling the first chip to support the first security function and the second security function can specifically include: when switching from the first mode to the second mode, controlling the second security function in the first chip to be enabled, and controlling the second security function and the non-security function in the second chip to be disabled.

[0049] In one possible design, all non-security functions are deployed on the second chip; or, some non-security functions are deployed on the second chip, and other non-security functions are deployed on the first chip.

[0050] In one possible design, if the first chip has non-security functions deployed, the method further includes: in a first mode, controlling the non-security functions in the first chip to be enabled; and when switching from the first mode to the second mode, for example, at the start of the switch, controlling the non-security functions in the first chip to be disabled.

[0051] In one possible design, the non-safety functions mentioned above may include, but are not limited to, at least one of the following: first parking function, second parking function, first cruise function, and second cruise function.

[0052] In one possible design, the first safety function and the second safety function mentioned above are different safety functions, which may include, but are not limited to, at least one of the following: automatic emergency braking, brake assist, forward collision warning, rear collision warning, lane departure warning, and lane keeping assist.

[0053] In one possible design, the first chip and the second chip further include a sensing module, which includes a model for supporting the operation of functions in the chip. In this case, the method may further include: controlling the sensing module in the first chip and the second chip to operate in a first mode, and, exemplary, controlling the sensing module in the first chip to operate during and after the switching from the first mode to the second mode.

[0054] In one possible design, when security functions are deployed on the first chip and non-security functions are deployed on the second chip, both the first and second chips also contain perception modules. The perception module in the first chip includes a security class model, which is used to support the operation of security functions. The perception module in the second chip includes a non-security class model, which is used to support the operation of non-security functions.

[0055] In one possible design, in the first mode, when the device status is detected to meet at least one of the following conditions, the switch from the first mode to the second mode is determined: receiving an instruction to enter the second mode; the device power is lower than the set power; the battery discharge voltage is lower than the set voltage; the startup time of the electrical components in the device exceeds the set time.

[0056] In one possible design, after switching from the first mode to the second mode, the device can exit the second mode if it detects that the device status meets at least one of the following conditions: receiving an instruction to exit the second mode; the device gear is switched to parking gear; the device is in charging state; the device power is greater than or equal to the set power; the battery discharge voltage is lower than the set voltage; or the device restarts.

[0057] In one possible design, upon determining whether to exit the second mode, it is also possible to control the activation of functions in the first chip and the second chip associated with the first mode. For example, controlling the activation of functions in the first chip other than the second security function, and all functions in the second chip.

[0058] In one possible design, during the transition from the first mode to the second mode, the display device can also be controlled to display a prompt message indicating the remaining switching time and the limited functionality of the device during the remaining switching time.

[0059] In one example of the above design, the switching duration is either a pre-configured duration or a duration calculated based on the functions that need to be disabled or enabled during the switching period.

[0060] Thirdly, this application provides a control device that has the function of implementing the control method described in the second aspect or any of the designs in the second aspect. For example, the control device includes modules, units or means for performing the operations involved in the control method in the second aspect or any of the designs or examples in the second aspect. The modules, units or means can be implemented by software, or by hardware, or by a combination of software and hardware.

[0061] In one possible design, the control device may include a determining unit and a controlling unit, which can be used to perform various steps of the second aspect or any of the designs or examples in the second aspect above. For example, the determining unit is used to determine the moment of switching from a first mode to a second mode, and the controlling unit is used to control the first chip to support a first security function and the second chip to support a third function in the first mode, and to control the first chip to support the first security function and the second security function when switching from the first mode to the second mode, such as during and after the switching. The third function includes the second security function and / or a non-security function.

[0062] Fourthly, this application provides a control device that may include at least one processor, and optionally, may also include a memory (or storage medium). The memory is used to store program instructions; the at least one processor can read the program instructions from the memory, causing the control device to execute the methods provided in the second aspect or any of the designs or examples in the second aspect above.

[0063] Optionally, at least one processor refers to one or more processors, and memory may also be one or more memory units.

[0064] Optionally, the memory can be integrated with at least one processor, or the memory can be set separately from at least one processor.

[0065] In one possible design, the control device may further include a transceiver. The transceiver is used to receive and transmit signals; at least one processor is used to execute program instructions in response to signals received by the transceiver, causing the control device to perform the methods provided in the second aspect or any of the designs or examples in the second aspect above. Optionally, the transceiver may include a transmitter and a receiver.

[0066] In another possible design, the control device also includes a communication interface, with at least one processor coupled to the communication interface. The at least one processor reads program instructions from memory, invokes the communication interface to communicate with other devices, and executes the methods provided in the second aspect or any of the designs or examples in the second aspect above.

[0067] Optionally, in one example, the communication interface can be a transceiver, or an input / output interface. Optionally, the transceiver can be a transceiver circuit. Optionally, the input / output interface can be an input / output circuit.

[0068] Optionally, in another example, when the control device is a chip or chip system, the communication interface can be an input / output interface, interface circuit, output circuit, input circuit, pin, or related circuit on the chip or chip system. At least one processor can also be embodied as at least one processing circuit or at least one logic circuit.

[0069] Fifthly, this application provides a terminal device including the mode switching circuit described in the first aspect or any of the designs or examples of the first aspect, or including a control device described in the third or fourth aspect. The mode switching circuit or control device is used to control the operation of a first chip and a second chip in a first mode, and to control the operation of security functions in the first chip during the process of switching from the first mode to the second mode and after switching to the second mode.

[0070] The terminal devices mentioned above can be any type of device that requires mode switching, including but not limited to: vehicles, robots, mobile phones, computers, wearable devices, servers, computers, medical equipment, smart home devices, etc.

[0071] Sixthly, this application provides a vehicle that includes the mode switching circuit of the first aspect or any of the designs or examples of the first aspect, or includes a first chip, a second chip, and a control device of any of the designs or examples of the third or fourth aspect.

[0072] Optionally, the vehicle also includes sensors coupled to a first chip and a second chip. The sensors are used to collect vehicle driving information and send it to the first chip and the second chip. The first chip and the second chip are used to implement at least one of the vehicle's active safety functions, parking functions, and cruise functions based on the vehicle driving information.

[0073] Furthermore, optionally, the first chip and the second chip are used to: realize the vehicle's active safety functions, parking functions and cruise functions in the first mode, and realize the vehicle's active safety functions during and after switching from the first mode to the second mode.

[0074] Optionally, when the vehicle includes a control device, the control device can be a component within the vehicle, such as a computing platform. Alternatively, it can be an external device, such as a cloud server, user terminal, roadside unit, or other vehicle, or a component within these devices, such as a processor, chip, or chip system. External devices or components can connect to relevant components within the vehicle to be controlled, such as the first chip and the second chip, to assist the vehicle in implementing a mode-switching strategy for uninterrupted safety functions.

[0075] In a seventh aspect, this application provides a computer-readable storage medium storing a computer program that, when executed by a computer, causes the computer to perform the method provided in the second aspect or any of the designs or examples in the second aspect. Optionally, the computer may be a control device or a component thereof, such as a computing platform or a component thereof in a vehicle.

[0076] Eighthly, this application provides a computer program product that, when run on a computer, causes the computer to perform the method provided in the second aspect or any of the designs or examples in the second aspect. Optionally, the computer may be a control device or a component thereof, such as a computing platform or a component thereof in a vehicle.

[0077] Ninthly, this application provides a chip that includes the mode switching circuit of the first aspect or any design or example of the first aspect, or the chip is used to read a computer program stored in a memory and execute the method provided by the second aspect or any design or example of the second aspect.

[0078] Alternatively, the chip can be a chip for a terminal device, such as a computing platform chip for a vehicle.

[0079] Optionally, the chip may include at least one processor coupled to a memory for reading a computer program stored in the memory to implement the methods provided in the second aspect or any of the designs or examples in the second aspect above.

[0080] Optionally, the chip may also include an interface circuit for providing program instructions or data to at least one processing unit, which executes the program instructions to implement the method provided in the second aspect or any of the designs or examples in the second aspect above.

[0081] Optionally, the chip may also include components such as memory, communication interface, and power supply module. The memory is used to store computer programs; the communication interface is used to receive and send data; and the power supply unit is used to supply power to the processor.

[0082] In a tenth aspect, this application provides a chip system including a processor for supporting a computer in implementing the methods provided in the second aspect or any of the designs or examples in the second aspect.

[0083] In one possible design, the chip system also includes memory for storing the computer's necessary programs and data. The chip system can consist of one or more chips, or it can include one or more chips and other discrete components.

[0084] The technical effects that can be achieved in aspects two through ten above can be referred to the description of the beneficial effects in aspect one above, and will not be repeated here. Attached Figure Description

[0085] Figure 1 An exemplary schematic diagram illustrates a possible application scenario provided by this application; Figure 2 An exemplary schematic diagram of a vehicle system architecture provided in this application is shown; Figure 3a An exemplary diagram illustrates the circuit architecture of a computing platform provided by related technologies before mode switching; Figure 3b An exemplary schematic diagram of the circuit architecture of a computing platform during mode switching provided by related technologies is shown. Figure 3c An exemplary diagram illustrates the circuit architecture of a computing platform provided by related technologies after mode switching; Figure 4 An exemplary schematic diagram of a mode switching circuit provided in this application is shown; Figure 5 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 6 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 7 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 8 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 9 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 10 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 11 An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 12An exemplary schematic diagram of another mode switching circuit provided in this application is shown; Figure 13a An exemplary schematic diagram of the circuit architecture of a computing platform provided in this application in standard driving mode is shown; Figure 13b An exemplary schematic diagram of the circuit architecture of a computing platform provided in this application during switching and in power-saving mode is shown; Figure 14a An exemplary schematic diagram of the circuit architecture of another computing platform provided in this application in standard driving mode is shown; Figure 14b An exemplary schematic diagram of the circuit architecture of another computing platform provided in this application during switching and in power-saving mode is shown; Figure 15 An exemplary schematic diagram of the execution flow of a control method provided in this application is shown; Figure 16 An exemplary diagram illustrating the execution flow of an interface prompting method provided in this application is shown. Figure 17 An exemplary schematic diagram of a control device provided in this application is shown; Figure 18 An exemplary schematic diagram of another control device provided in this application is shown; Figure 19 An exemplary schematic diagram of a terminal device provided in this application is shown. Detailed Implementation

[0086] The embodiments of this application will now be described in detail with reference to the accompanying drawings.

[0087] The following provides explanations for some of the terms used in this application. It should be noted that these explanations are for the convenience of those skilled in the art and do not constitute a limitation on the scope of protection claimed in this application.

[0088] I. Energy-saving mode.

[0089] Energy-saving mode, also known as power-saving mode, is a mode provided to prevent vehicles from breaking down when the battery is low.

[0090] In energy-saving mode, the vehicle will implement relevant strategies from both the vehicle-wide and intelligent driving domains to reduce overall vehicle energy consumption.

[0091] On the vehicle side, hard constraints are applied to energy and load, such as limiting power speed, smoothing torque output, and prioritizing economical power. Comfort features such as heated and ventilated seats, heated steering wheel, and ambient lighting are disabled in the cabin; air conditioning power and airflow are limited; and heated exterior mirrors are turned off as needed. The vehicle employs advanced or very strong energy recovery strategies, maximizing battery recharge through coasting or braking.

[0092] On the intelligent driving side, the computing platform performs low-power scheduling of the system-on-chip (SoC). It controls the power-off of most modules within the SoC, leaving only critical modules such as the memory controller and wake-up logic powered. Unnecessary functions are disabled or downgraded, including high-precision map rendering, automatic parking, lane change assist, and sentry mode, retaining only basic safety functions such as electronic stability control, automatic emergency braking, forward collision warning, lane keeping assist, and lane departure warning. Unnecessary clocks are disconnected from the power supply modules to reduce dynamic power consumption. The system context is preserved to maintain the system state, supporting millisecond-level fast wake-up without cold start re-initialization. It supports wake-up from external events such as sensor triggers, meeting standby response requirements. Dynamic matching of computing power is performed, automatically reducing the frequency in low-load scenarios such as high-speed constant-speed driving, and increasing the frequency as needed in high-load scenarios such as complex urban road conditions, to balance driving performance and system energy consumption.

[0093] II. Operators.

[0094] An operator is an execution unit in a chip that performs a single, atomic computational function; it represents the implementation of a function within the chip. When an operator is enabled, the chip supports the corresponding function. When an operator is disabled, the chip does not support the corresponding function.

[0095] Since functions are deployed in the form of operators within the chip, each operator needs to contain all the software logic to support the implementation of its corresponding function, including but not limited to models and / or algorithms. For example, safety operators contain safety models and / or safety algorithms that implement safety functions. Parking operators contain parking models and / or parking algorithms that implement parking functions. Cruise operators contain cruise models and / or cruise algorithms that implement cruise functions. In some scenarios, safety operators can also be considered a subset of cruise operators, as the computational power requirements of safety operators are less than those of cruise operators.

[0096] The preceding text introduced some of the terms used in this application. The following text introduces the possible application scenarios of this application.

[0097] In one possible implementation, the mode switching circuit provided in this application can be integrated into a vehicle, which can be any type of vehicle, including but not limited to: cars, trucks, buses, trains, recreational vehicles, station wagons, vans, amusement park vehicles, construction vehicles, trams, golf carts, sightseeing vehicles, patrol cars, smart cars, and digital cars.

[0098] Please see Figure 1 The illustration shows a possible application scenario of this application. In this scenario, vehicle 100 is a sedan, which is driving on a road. The sedan integrates an intelligent driving system, such as an automated driving system (ADS) or an advanced driving assistance system (ADAS). The user controls vehicle 100 to drive in standard driving mode by triggering the intelligent driving system.

[0099] To prevent breakdowns due to low battery, when vehicle 100 meets the switching conditions for energy-saving mode, or when the user triggers the energy-saving mode switching instruction, the mode switching circuit in vehicle 100 will assist vehicle 100 in switching from the current standard driving mode to energy-saving mode. Furthermore, during the switching process, the active safety functions of vehicle 100 can remain uninterrupted, or even if interruptions occur, the interruption time can be greatly reduced, for example, from 10 seconds to 1 second or even less, so that vehicle 100 can promptly avoid various safety risks during the switching process, improving driving safety.

[0100] It should be noted that the above-mentioned vehicles 100 may include, but are not limited to: pure electric vehicles (pure EVs / battery EVs), hybrid electric vehicles (HEVs), range-extended electric vehicles (REEVs), plug-in hybrid electric vehicles (PHEVs), or other new energy vehicles (NEVs). These vehicles can be used in fields such as intelligent driving, assisted driving, or connected vehicles.

[0101] It should also be noted that the application scenarios mentioned above are merely examples. The mode switching circuit provided in this application can also be applied to other possible scenarios, and is not limited to those listed above. For example, the mode switching circuit can also be integrated into other types of transportation, such as subways, high-speed trains, ships, ferries, passenger ships, airplanes, or helicopters, to assist these vehicles in smoothly switching to energy-saving modes while achieving uninterrupted or almost uninterrupted active safety functions. As another example, the mode switching circuit can also be applied in robotics scenarios, such as integrating it into delivery robots or medical robots to ensure the robot's safety during mode switching. Furthermore, the mode switching circuit can also be applied in smart living scenarios, such as integrating it into automatically following suitcases, smart wheelchairs, or smart mobility tools, to provide users with a continuous mode switching experience for active safety functions. Moreover, the mode switching circuit can also be applied in user terminals, medical scenarios, industrial scenarios, smart home scenarios, and so on. These will not be listed exhaustively here.

[0102] It should be noted that the application scenarios described in this application are for the purpose of more clearly illustrating the technical solutions of this application, and do not constitute a limitation on the technical solutions provided in this application.

[0103] For example, taking the application of a mode switching circuit in vehicle 100 as an example, the overall architecture of vehicle 100 will be described below.

[0104] Please see Figure 2 This diagram illustrates a functional architecture of a vehicle 100 provided in this application.

[0105] like Figure 2 As shown, the vehicle 100 may include multiple subsystems, such as a sensing system 120 and a computing platform 130. Optionally, the vehicle 100 may also include more or fewer subsystems, and each subsystem may include one or more components. Furthermore, each subsystem and component of the vehicle 100 may be interconnected via wired or wireless means.

[0106] The perception system 120 may include several types of sensors for sensing information about the environment surrounding the vehicle 100. For example, the perception system 120 may include a positioning system, which may be a global positioning system (GPS), a BeiDou system, or another positioning system. The perception system 120 may include one or more of the following: an inertial measurement unit (IMU), lidar, millimeter-wave radar, ultrasonic radar, and a camera device.

[0107] Some or all of the functions of vehicle 100 can be controlled by computing platform 130. Computing platform 130 may include processor 131, processor 132, ..., processor 13n (n is a positive integer), where any processor is a circuit with signal processing capabilities.

[0108] In one implementation, the processor can be a circuit with instruction read and execute capabilities, such as a central processing unit (CPU), a microprocessor unit (MPU), a graphics processing unit (GPU) (which can be understood as a type of microprocessor), or a digital signal processor (DSP).

[0109] In another implementation, the processor can achieve certain functions through the logical relationships of hardware circuits. These logical relationships can be fixed or reconfigurable. For example, the processor can be implemented using application-specific integrated circuits (ASICs) or programmable logic devices (PLDs), such as field-programmable gate arrays (FPGAs). In reconfigurable hardware circuits, the process of the processor loading a configuration document and configuring the hardware circuit can be understood as the processor loading instructions to implement some or all of the functions of the aforementioned units.

[0110] In addition, a processor can also be a hardware circuit designed for artificial intelligence, which can be understood as a type of ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0111] In addition, the computing platform 130 may also include a memory for storing instructions, and some or all of the processors 131 to 13n may call the instructions in the memory to perform the corresponding functions.

[0112] For example, computing platform 130 can control the functions of vehicle 100 based on inputs received from various subsystems, such as sensing system 120. In some embodiments, computing platform 130 can be used to provide control over many aspects of vehicle 100 and its subsystems.

[0113] It should be understood that the components in each module of the vehicle 100 described above are merely examples. In actual applications, components in each module may be added or removed as needed, without specific restrictions.

[0114] Furthermore, the vehicle 100 in this application may include: road vehicles, water vehicles, air vehicles, industrial equipment, agricultural equipment, or entertainment equipment, etc. For example, the vehicle 100 may be a means of transportation (such as commercial vehicles, passenger cars, motorcycles, flying cars, trains, etc.), industrial vehicles (such as forklifts, trailers, tractors, etc.), engineering vehicles (such as excavators, bulldozers, cranes, etc.), agricultural equipment (such as lawnmowers, harvesters, etc.), amusement equipment, toy vehicles, etc.; or the vehicle 100 may include a wheeled device, which may be a robot, mobile medical equipment, or experimental platform. The embodiments of this application do not specifically limit the type of vehicle 100.

[0115] Next, we will introduce the electronic and electrical architecture of Vehicle 100 from another perspective, which includes distributed architecture, domain-centralized architecture, and centralized architecture.

[0116] Distributed architecture: To meet functional requirements, electronic devices are added to the vehicle, such as sensors and electronic control units (ECUs). Almost every function has its own ECU, and as functional requirements increase, the vehicle system becomes increasingly complex.

[0117] Domain-centralized architecture: The functions of the vehicle are divided into domains, and centralized control is implemented within each domain to reduce the number of ECUs and reduce system complexity.

[0118] Traditional architectures include five domain controllers: powertrain domain, chassis domain, body domain, intelligent driving domain, and cockpit domain.

[0119] The current development trend is to divide the domains into three main areas: vehicle control domain, autonomous driving domain (or intelligent driving domain), and intelligent cockpit domain. Each domain is centrally controlled by a domain controller. The vehicle control domain can be understood as integrating the powertrain domain, chassis domain, and body domain, with the vehicle domain controller (VDC) responsible for overall vehicle control, demanding high real-time performance and safety. The intelligent driving domain controller (ADAS / AD domain controller, ADC) is responsible for intelligent driving-related perception, decision-making, and control functions. The intelligent cockpit domain controller (CDC) is responsible for cockpit intelligence functions such as human-machine interaction.

[0120] Domain controllers have different names on different manufacturers' platforms. For example, the E3 architecture of one manufacturer's Modular Electric Drive Matrix (MEB) platform (the first car, ID.3) is a domain-centralized EEA consisting of three in-car application servers (ICAS): Vehicle Control Server ICAS1, Intelligent Driving Server ICAS2, and Infotainment Server ICAS3. Another manufacturer's iNEXT model's EEA includes three domain controllers: Body Domain Controller (BDC) (corresponding to VDC), Safety Assist System (SAS) (corresponding to ADC), and Media Graphics Unit (MGU) (corresponding to CDC).

[0121] In some three-domain EEA solutions, the three domain controllers are Body Super Core (corresponding to VDC), ADAS Super Core (corresponding to ADC), and Cockpit Super Core (corresponding to CDC). Others refer to the ADC as Mobile Data Center (MDC).

[0122] The CC architecture is introduced below. The CC architecture adopts a distributed network + domain controller architecture, which divides the control of the vehicle into three parts: driving, cockpit and vehicle control, and introduces three major platforms: MDC (as an intelligent driving platform), CDC (as an intelligent cockpit platform) and VDC (as a vehicle control platform).

[0123] The CC architecture network primarily consists of a backbone network and multiple intra-area networks. MDC, CDC, and VDC are connected to the backbone network and communicate with each other through it. Multiple intra-area networks form a distributed network, connected to the backbone network via a distributed gateway. The distributed gateway can also be called a vehicle integration unit (VIU). The VIU functions as a gateway, connecting its intra-area network to the backbone network. It can perform data format conversion (or encapsulation) and forwarding functions. For example, it can convert data from the intra-area network into a data format supported by the backbone network for forwarding, or encapsulate data from the backbone network into a data format supported by the intra-area network for forwarding. This format conversion process can be a process of encapsulating data according to supported protocols, and therefore can also be called an encapsulation process or a protocol conversion process. In addition to gateway functions, the VIU can also have electronic control functions, providing partial or complete data processing and / or control functions for at least one vehicle component. In other words, a VIU (Variable Identity Utility) can implement the electronic control functions provided by some or all of the electronic control units (ECUs) of vehicle components. This means it can have some or all of the data processing and / or control functions of at least one vehicle component's ECU, thus reducing the number of ECUs required. Furthermore, a VIU can also have data processing capabilities across vehicle components, such as processing and calculating data obtained from actuators of multiple vehicle components.

[0124] The backbone network can adopt a ring topology network structure, enabling communication between various domain controllers and between the intranet and domain controllers via vehicle-mounted Ethernet. In addition, the CC architecture can also include a telematics box (T-BOX) (or vehicle communication unit). The T-BOX connects to the backbone network to enable communication between the vehicle 100 and the cloud, other terminals (such as other vehicles, mobile phones, etc.), or roadside equipment.

[0125] It should be noted that the intelligent driving mentioned above refers to a comprehensive system that enables vehicles to have environmental perception, decision-making and planning, and / or autonomous control capabilities through technologies such as artificial intelligence, sensor fusion processing, and network information collaboration. Its core goal is to ultimately achieve a gradual transformation from human driving to machine autonomous driving. The functions implemented mainly include, but are not limited to: adaptive cruise control (ACC), automatic emergency braking (AEB), automatic parking assist (AP), navigation cruise assist (NCA), blind spot monitoring (BSM), front cross traffic alert / braking (FCTA / B), rear cross traffic alert / braking (RCTA / B), forward collision warning (FCW), lane departure warning (LDW), lane keeping assist (LKA), rear collision warning (RCW), brake assist (BA), traffic sign recognition (TSR), traffic jam assist (TJA), and highway assist (HWA).

[0126] It should be understood that the various functions mentioned above may have their own specific requirements and content at different levels of autonomous driving (L0-L5). Intelligent driving focuses on driving technology and functions, while autonomous driving focuses on driving capabilities. Intelligent driving can include driver assistance, conditional autonomous driving, highly automated driving, and fully automated driving.

[0127] The ECUs in the distributed architecture, the various domain controllers in the domain-centralized architecture, and the various platforms in the centralized architecture, such as the MDC platform, VDC platform, and CDC platform, can all be categorized as follows: Figure 2 The computing platform 130 shown.

[0128] As energy-saving demands increase, vehicle computing platforms are gradually supporting standard driving mode and human-driven power-saving mode, the latter being called energy-saving mode.

[0129] As described in the background art, according to the existing mode switching strategy, the vehicle has no active safety functions during the process of switching to energy-saving mode. This is mainly due to the circuit architecture adopted by the existing mode switching strategy.

[0130] For example, please see Figures 3a to 3c , Figure 3a The diagram shown is a schematic of the circuit architecture of a computing platform provided by related technologies before mode switching. Figure 3b What is shown is Figure 3a The diagram shown illustrates the circuit architecture of the computing platform during mode switching. Figure 3c What is shown is Figure 3a The diagram shows the circuit architecture of the computing platform after mode switching.

[0131] Combination Figures 3a to 3c and Figure 2 Let's take a look. Figures 3a to 3c The computing platform in the text can be considered as or attributed to Figure 2 The computing platform 130 in the middle, Figures 3a to 3c The intelligent driving sensors in the system can be considered as or attributed to Figure 2 The sensing system 120 in the middle.

[0132] like Figure 3a or Figure 3b As shown, when performing intelligent driving functions, considering that high-priority models need to use resources and computing power first, and the computing power and latency of a single SOC cannot meet the computing power and latency requirements of high-priority models, the computing platform adopts a multi-SOC architecture.

[0133] For example, in Figures 3a to 3c In the example, the computing platform is configured with a dual-SoC architecture, comprising two SoCs: SoC A and SoC B. It also includes a microcontroller unit (MCU). SoC A and SoC B are coupled to the intelligent driving sensors and the MCU.

[0134] SOC A is responsible for running the basic perception module, image processing module, safety operator-A, parking operator-A, and cruise operator-A based on the sensor signals collected by the intelligent driving sensors, and sending the perception and decision results obtained from the operation to the MCU.

[0135] SOC B is responsible for running the basic perception module, image processing module, safety operator-B, parking operator-B, and cruise operator-B based on the sensor signals collected by the intelligent driving sensors, and sending the perception and decision results obtained from the operation to the MCU.

[0136] The MCU is responsible for fusing the perception and decision results from the two SOCs and outputting the final vehicle control commands, including but not limited to the execution signals of functions such as Automatic Emergency Braking (AEB) and Navigation Cruise Assist (NCA).

[0137] This dual-SOC architecture is equivalent to distributing all safety operators, parking operators, and cruise operators across two SOCs to balance the model load as much as possible and reduce processing latency.

[0138] In the above content, safety operators, parking operators, and cruise operators represent the deployment forms of safety functions, parking functions, and cruise functions within a System-on-Chip (SOC), respectively. Taking safety operators as an example, a SOC deploys safety operators, and the SOC supports the implementation of safety functions. When all safety operators are deployed across SOC A and SOC B, SOC A is responsible for implementing some safety functions, while SOC B is responsible for implementing the remaining safety functions. Furthermore, the safety functions implemented by SOC A and SOC B are different; only by combining SOC A and SOC B can the complete safety functionality be achieved.

[0139] Under this deployment method, when the vehicle is in standard driving mode, it needs to support full safety functions, full parking functions, and full cruise control functions. Therefore, if Figure 3a As shown, the MCU controls all modules and operators in SOC A and SOC B to work.

[0140] When the vehicle is in energy-saving mode, the single-chip SOC, such as SOC A, operates. In energy-saving mode, it needs to support full safety functions, as well as other functions such as around view monitor (AVM), electronic exterior rearview mirrors, digital video recorder (DVR), human-machine navigation, turn signal activated image, high beam assist (HMA), and reversing radar.

[0141] To ensure complete safety features in energy-saving mode, such as Figure 3b As shown, during the switching process, the MCU needs to first start and stop all processes in SOC A and shut down SOC B, which is equivalent to shutting down all operators in SOC A and all modules and operators in SOC B. Then, the MCU migrates the safety operator-B and some video streams from SOC B to SOC A, and then starts up the safety operators-A and-B in SOC A. Thus, when the vehicle enters energy-saving mode, as... Figure 3cAs shown, the basic perception module, image processing module, safety operator-A and safety operator-B in SOC A are all in working state, while parking operator-A and cruise operator-A in SOC A, as well as all modules and all operators in SOC B, are in sleep state.

[0142] Following the above switching process, the video stream can switch quickly when switching to energy-saving mode, but operator migration, especially model migration within operators, takes a relatively long time. For example, switching from standard driving mode to energy-saving mode requires approximately 6 seconds for ADS to load the algorithm, and approximately 4 seconds for the computing platform to execute the start / stop of SOC A process and the shutdown of SOC B. Therefore, the total switching time is approximately 10 seconds. During this period, due to the need for intelligent driving SOC switching and model migration, safety operators-A and-B are both disabled, intelligent driving safety functions are not working, the vehicle has no active safety functions, and only video display functionality is supported.

[0143] Since the vehicle has no active safety functions during the switching period, it cannot avoid potential accidents, posing a significant safety risk. Therefore, some strategies need to be considered to mitigate the problem of intelligent driving safety functions not working during the switching period.

[0144] In view of this, this application provides a mode switching circuit that, when applied to intelligent driving scenarios, can achieve uninterrupted intelligent driving safety functions. Thus, even when the vehicle switches to energy-saving mode, the vehicle's intelligent driving safety functions can continue to operate, ensuring their normal operation during mode switching and reducing the probability of safety risks occurring during mode switching.

[0145] Based on the above, the following is in conjunction with the appendix. Figure 4 To be continued Figure 19 This application describes the mode switching circuit and related solutions provided.

[0146] It should be noted that, in this application, unless otherwise expressly specified and limited, the terms "connection" and "coupling," etc., should be interpreted broadly. For example, "connection" can mean a direct connection or an indirect connection through an intermediate medium; in short, it can transmit relevant signals. Those skilled in the art can understand the specific meaning of the above terms in this application according to the specific circumstances.

[0147] Furthermore, in this application, any references to "quantity," "location," "time," or similar terms do not refer to absolute quantities, locations, or times, and are permissible to have some degree of variation. For example, other quantities, other locations, or other times may be used, depending on the specific needs of the actual application scenario, and are not restricted.

[0148] Please see Figure 4 The diagram shows a schematic representation of a mode switching circuit provided in this application. Figure 4 As shown, the mode switching circuit 400 includes a control device 410, a first chip 421, and a second chip 422. Both the first chip 421 and the second chip 422 are connected to the control device 410, for example, via a hard wire or a communication line; in short, they can transmit electrical signals.

[0149] The first chip 421 supports a first security function and a second security function, and the second chip 422 supports a third function, which includes the second security function and / or a non-security function. For example, the third function may only include a non-security function. Alternatively, the third function may only include a second security function. Or, the third function may include both a non-security function and a second security function.

[0150] like Figure 4 As shown, the control device 410 is connected to the first chip 421 and the second chip 422, and has the ability to control the activation and deactivation of various functions in the first chip 421 and the second chip 422. By controlling the activation or deactivation of various functions in the first chip 421 and the second chip 422, the control device 410 enables the first chip 421 and the second chip 422 to implement the following functional logic: in the first mode, it supports the first security function and the third function; when switching from the first mode to the second mode, it supports the first security function and the second security function.

[0151] Here, switching from the first mode to the second mode includes at least the process of switching from the first mode to the second mode. Optionally, it also includes the period after switching from the first mode to the second mode.

[0152] For example, in the first mode, all security features and all non-security features are enabled. During the transition from the first mode to the second mode, or even after the transition to the second mode, at least all security features are enabled.

[0153] For example, in the first mode, at least the first security function in the first chip 421 and the third function in the second chip 422 are enabled. The second security function in the first chip 421 may or may not be enabled, depending on whether the third function in the second chip 422 includes the second security function. For example, when the third function includes the second security function, only the first security function in the first chip 421 and the third function in the second chip 422 are enabled. When the third function does not include the second security function, the first security function in the first chip 421, the second security function in the first chip 421, and the third function in the second chip 422 are all enabled. In summary, in the first mode, the device containing the first chip 421 and the second chip 422 has complete security functions and complete non-security functions, providing a user experience with the highest performance.

[0154] Furthermore, during the transition from the first mode to the second mode, the first security function and the second security function in the first chip 421 are activated. The first and second security functions combine to provide complete security functionality. Thus, even during mode switching, the device containing the first chip 421 and the second chip 422 still possesses complete security functionality, preventing security risks due to the malfunction of security functions and improving the security of the mode switching process.

[0155] Understandably, after switching from the first mode to the second mode, the first security function and the second security function in the first chip 421 are still enabled to ensure that the device containing the first chip 421 and the second chip 422 can still have complete security functions in the second mode and meet the security requirements of the second mode.

[0156] In the above, the first mode and the second mode can be understood as modes with different power consumption requirements. For example, the chip power consumption corresponding to the second mode is less than that corresponding to the first mode. In some scenarios, the first mode may also be called the standard power consumption mode, normal power consumption mode, or high power consumption mode, while the second mode may also be called the energy-saving mode, power-saving mode, or low power consumption mode.

[0157] For example, taking an in-vehicle intelligent driving scenario, the first mode is the standard driving mode or the standard intelligent driving mode, and the second mode is the human-driven power-saving mode or the energy-saving mode. During the process of switching the vehicle from the standard driving mode to the energy-saving mode, since both the first and second safety functions are activated, the vehicle has complete active safety functions and can avoid potential safety risks. Therefore, even during the process of switching from the standard driving mode to the energy-saving mode, the vehicle can still have good safety.

[0158] In the above content, the first security function and the second security function are different security functions. "Different" here is understood to mean at least partially different, including both completely different and partially different situations.

[0159] For example, if both the first and second security functions contain only one security function, the unique security function contained in the first security function is different from the unique security function contained in the second security function.

[0160] When at least one of the first security function and the second security function includes two or more security functions, all the security functions in the first security function and the second security function may be different, or some of the security functions in the first security function and the second security function may be the same, while the other part of the security functions may be different.

[0161] Optionally, the above safety functions may include, but are not limited to, at least one of the following: Automatic Emergency Braking (AEB), Forward Collision Warning (FCW), Rear Collision Warning (RCW), Brake Assist (BA), Lane Departure Warning (LDW), and Lane Keeping Assist (LKA).

[0162] For example, the first security function and the second security function can be combined to cover all of the above security functions.

[0163] For example, the first safety features include Automatic Emergency Braking (AEB), Forward Collision Warning (FCW), and Rear Collision Warning (RCW), while the second safety features include Brake Assist (BA), Lane Departure Warning (LDW), and Lane Keeping Assist (LKA).

[0164] Alternatively, the first safety features include Automatic Emergency Braking (AEB) and Brake Assist (BA), and the second safety features include Forward Collision Warning (FCW), Rear Collision Warning (RCW), Lane Departure Warning (LDW), and Lane Keeping Assist (LKA).

[0165] Alternatively, the first safety features include forward collision warning (FCW) and rear collision warning (RCW), and the second safety features include automatic emergency braking (AEB), brake assist (BA), lane departure warning (LDW), and lane keeping assist (LKA).

[0166] Alternatively, there may be other situations, which will not be listed here.

[0167] It should be understood that the above does not list all security features. Alternatively, some scenarios may require even fewer security features. The security features covered by the first and second security features are related to device configuration or user needs, and this application does not impose specific limitations on them.

[0168] In the above content, the third function includes the second security function and / or non-security function, and has at least two of the following deployment methods: Deployment method one, combined with Figure 5 and Figure 4 Let's take a closer look. The third function is a non-security function. In other words, only non-security functions are deployed in the second chip 422; no security functions are deployed. Furthermore, security functions are only deployed in the first chip 421, not in the second chip 422.

[0169] In this case, in the first mode, the control device 410 enables the first security function in the first chip 421, the second security function in the first chip 421, and the non-security function in the second chip 422. When switching from the first mode to the second mode, for example, during the process of switching from the first mode to the second mode, the non-security function in the second chip 422 is disabled.

[0170] Here, the moment when the non-security functions in the second chip 422 are disabled can be any moment during the process of switching from the first mode to the second mode. In some examples, it can be configured to be the moment the switching begins. This is equivalent to immediately disabling the non-security functions in the second chip 422 after determining that the switch to the second mode is to be made, so as to put the second chip 422 into sleep mode as soon as possible and shorten the latency of entering the second mode.

[0171] By adopting deployment method one, since the two security functions in the first chip are already enabled in the first mode, there is no need to migrate or restart the security functions during the switching process. Therefore, even during the switching process, the complete security functions are always available, which can achieve the effect of uninterrupted complete security functions during the switching process and solve the problem of security functions not working due to function migration during mode switching.

[0172] Deployment method two, combined with Figure 6 and Figure 4 Let's take a closer look. The third function includes the second security function and non-security functions. In other words, the second security function is deployed in both the first chip 421 and the second chip 422. The first security function, however, is deployed only in the first chip 421.

[0173] In this case, in the first mode, the control device 410 enables the first security function in the first chip 421, the second security function in the second chip 422, and the non-security function in the second chip 422. When switching from the first mode to the second mode, the control device 410 enables the second security function in the first chip 421 and disables the second security function and the non-security function in the second chip 422.

[0174] Here, "switching from the first mode to the second mode" can be understood as an earlier moment in the process of switching from the first mode to the second mode, and can be configured, for example, as the moment when the switching begins. This is equivalent to immediately enabling the second security function in the first chip 421 and simultaneously disabling the second security function and non-security functions in the second chip 422 after determining that the switch to the second mode is to be made.

[0175] Thus, during the switching process, the complete security function is only absent during the time interval when the second security function in the first chip is activated. This time interval is very short compared to the entire switching process and can be ignored. It can be considered that the effect of having complete security function uninterrupted during the switching process is approximately achieved, ensuring that the complete security function is almost uninterrupted during the switching process.

[0176] The second deployment method is equivalent to backing up the second security function in the second chip to the first chip in advance. In the first mode, the second security function backed up in the first chip does not run. However, when the second mode is triggered, the second security function backed up in the first chip is directly activated, similar to a hot backup. This eliminates the need to migrate the second security function from the second chip to the first chip, saving the latency of function migration and ensuring that the complete security function is still available during the mode switching process or most of the process. This solves the problem of security functions not working due to function migration during the mode switching process.

[0177] It should be noted that the above content only illustrates two possible functional deployment methods of the second chip 422. Both deployment methods are designed based on balancing the load of the first chip 411 and the second chip 422 to ensure the load balance of the two chips.

[0178] However, in other examples, if load balancing is not considered, the second chip 422 may only deploy the second security function, while all non-security functions are deployed in the first chip 421. In other words, the first chip 421 deploys both the first and second security functions, as well as the non-security functions. In this case, in the first mode, the control device 410 enables the first security function in the first chip 421, the non-security functions in the first chip 421, and the second security function in the second chip 422. When switching to the second mode, for example, at the trigger moment of the switch, the second security function in the first chip 421 is enabled, and the non-security functions in the first chip 421 and the second security function in the second chip 422 are disabled. In this way, the same technical effect as the second deployment method described above can be achieved, which will not be repeated here.

[0179] For ease of understanding, the following text will use the format of "foreign language". Figure 5 and Figure 6Using the two deployment methods shown as examples, we will further introduce the functional deployment method.

[0180] Optionally, in Figure 5 and Figure 6 In the deployment method, the second chip 422 is equipped with non-security functions. These non-security functions can be all non-security functions or only some non-security functions.

[0181] For example, in one example, such as Figure 5 or Figure 6 As shown, all non-security functions are deployed in the second chip 422, while the first chip 421 only deploys security functions, including the first security function and the second security function.

[0182] in the case of Figure 5 The deployment method shown is equivalent to separating security functions and non-security functions, deploying security functions on the first chip 421 and non-security functions on the second chip 422, so as to achieve the effect of managing different types of functions on separate chips.

[0183] According to this deployment method, in the first mode, all functions of the first chip 421 and the second chip 422 are directly enabled, so that all security functions of the first chip 421 and all non-security functions of the second chip 422 are operational. However, after the second mode is triggered, for example, at the start of the trigger, the second chip 422 is directly disabled, while the first chip 421 remains enabled, so that all security functions of the first chip 421 continue to operate, and all non-security functions of the second chip 422 are disabled.

[0184] Thus, during mode switching, the switch can be completed simply by shutting down the second chip, without affecting the functionality of the first chip. This simplifies the control logic and makes it easy to implement. Furthermore, this deployment method allows for the deployment of roughly the same number of functional modules on both chips, achieving a load-balanced deployment effect.

[0185] And if it is Figure 6 The deployment shown is equivalent to deploying all security functions on the first chip 421 and non-security functions and some security functions on the second chip 422.

[0186] According to this deployment method, in the first mode, the first security function in the first chip 421 and the entire second chip 422 are activated, so that the first security function in the first chip 421 and all non-security functions and the second security function in the second chip 422 are working. However, after the second mode is triggered, for example, at the start of the trigger, the second chip 422 is directly shut down, while the second security function in the first chip 421 is activated, so that all security functions in the first chip 421 are working, and all functions of the second chip 422 are disabled.

[0187] Thus, although the control logic is relatively complex due to the need to intermittently disable or enable some security functions in the first chip 421 during the first mode and mode switching, a backup of the second security function can be achieved by deploying a second security function in both chips. In this way, even if the second security function in one chip fails in either the first or second mode, the second security function in the other chip can be activated to ensure that all security functions are available, thereby improving the security of operation in either mode.

[0188] In another example, such as Figure 7 or Figure 8 As shown, some non-security functions are deployed in the second chip 422, and some non-security functions are deployed in the first chip 421. For ease of description, the non-security functions deployed in the first chip 421 are referred to as the first non-security functions, and the non-security functions deployed in the second chip 422 are referred to as the second non-security functions.

[0189] in the case of Figure 7 The deployment shown is equivalent to deploying all security functions and some non-security functions in the first chip 421, and only deploying the other part of the non-security functions in the second chip 422.

[0190] In this deployment method, in the first mode, all functions of the first chip 421 and the second chip 422 are directly enabled, so that the first and second security functions, as well as the first non-security function and the second non-security function in the first chip 421, are all operational, achieving full security and full non-security functionality. However, upon triggering the second mode, for example at the start of the trigger, all functions of the second chip 422 and the first non-security function of the first chip 421 are disabled. The first and second security functions of the first chip 421 remain enabled, allowing the first chip 421 to provide full security functionality. Simultaneously, all non-security functions in both chips 421 and 422 are put to sleep, thus achieving energy savings while maintaining uninterrupted security. Since the number of non-security functions is greater than the number of security functions, distributing all non-security functions across the two chips helps achieve load balancing.

[0191] And if it is Figure 8 The deployment shown is equivalent to deploying all security functions and some non-security functions in the first chip 421, and deploying some security functions and another part of non-security functions in the second chip 422.

[0192] According to this deployment method, in the first mode, the first security function and the first non-security function in the first chip 421 are activated, as are the second security function and the second non-security function in the second chip 422, so that the first chip 421 and the second chip 422 work together to achieve all security functions and all non-security functions. When the second mode is triggered, for example, at the start of the trigger, all functions in the second chip 422 are disabled, including the second non-security function and the second security function in the second chip 422, and the first non-security function in the first chip 421 is disabled. Simultaneously, the second security function in the first chip 421 is activated. This allows all security functions to be achieved through the first chip 421 while all non-security functions in the first chip 421 and the second chip 422 are put to sleep, thereby achieving energy savings and load balancing while maintaining almost uninterrupted security functions.

[0193] In other examples, if the second chip 422 contains only the second security function and not the non-security functions, then the non-security functions can also be deployed in the first chip 421, such as... Figure 9As shown. In this case, in the first mode, the control device 410 enables the first security function and non-security function in the first chip 421, and the second security function in the second chip 422, to achieve all security and non-security functions. After the second mode is triggered, for example at the start of the trigger, the second security function in the first chip 421 is enabled, while the non-security function in the first chip 421 and the second security function in the second chip 422 are disabled, so as to utilize the backup second security function in the first chip 421 to achieve almost uninterrupted security during mode switching.

[0194] In the above content, the first non-security function and the second non-security function are different non-security functions. "Different" here is understood to mean at least partially different, including both completely different and partially different cases.

[0195] For example, if both the first and second non-safety functions contain only one type of non-safety function, the single non-safety function contained in the first non-safety function is different from the single non-safety function contained in the second non-safety function.

[0196] When at least one of the first non-safety functions and the second non-safety functions includes two or more non-safety functions, it is possible that all the non-safety functions in the first non-safety function and the second non-safety function are different, or it is possible that some of the non-safety functions in the first non-safety function and the second non-safety function are the same, while the other part of the non-safety functions are different.

[0197] Optionally, the non-safety functions mentioned above may include, but are not limited to, at least one of the following: first parking function, second parking function, first cruise function, second cruise function, etc.

[0198] The first parking function differs from the second parking function. For example, the first parking function applies to all scenarios, while the second parking function is limited to parking in specific environmental locations. Alternatively, the first parking function applies to parallel parking spaces on the side of a road, while the second parking function applies to perpendicular parking spaces in a parking lot. Or, the first parking function is remote parking, and the second parking function is memory parking. Or, any parking function may include at least two of the parking functions listed above, or may include other types of parking, which will not be listed here.

[0199] Similarly, the first cruise control function differs from the second cruise control function. For example, the first cruise control function is suitable for highways, while the second cruise control function is suitable for urban roads. Or, the first cruise control function is suitable for the presence of road markings, while the second cruise control function is suitable for the absence of road markings. Or, the first cruise control function is constant speed cruise, while the second cruise control function is full-speed range adaptive cruise. Or, any cruise control function includes at least two of the cruise control functions listed above, or includes other types of cruise control, which will not be listed here.

[0200] For example, the combination of the first and second non-security functions can cover all of the above non-security functions.

[0201] For example, the first non-safety function includes the first parking function and the first cruise control function, and the second non-safety function includes the second parking function and the second cruise control function. Alternatively, the first non-safety function includes the first parking function, and the second safety function includes the second parking function, the first cruise control function, and the second cruise control function. Or, there may be other possibilities, which will not be listed here.

[0202] It should be noted that the above does not list all non-security features. Furthermore, some scenarios may include even fewer non-security features. Specific non-security features are related to device configuration or user needs, and this application does not impose specific limitations on them.

[0203] It should also be noted that all descriptions of "all non-safety functions" in this application refer only to the cases that include the various non-safety functions listed herein, and do not limit non-safety functions not listed. For example, this application considers the inclusion of a first parking function, a second parking function, a first cruise function, and a second cruise function as including all non-safety functions. As for whether other types of non-safety functions are included, this application does not limit this, and specific adjustments or optimizations can be made flexibly according to the actual application scenario or user needs.

[0204] In some scenarios, in addition to the aforementioned security and non-security functions, the first chip 421 and the second chip 422 can also deploy a preprocessing module. This preprocessing module is used to preprocess the sensor data to obtain preprocessed results that support the operation of security and / or non-security functions. The preprocessing module may include, but is not limited to, a sensing module and / or an image processing module.

[0205] For example, with Figure 7 For example, please refer to the functional deployment method shown below. Figure 10This diagram illustrates a circuit architecture of another mode switching circuit 400 provided in this application. In this example, the first chip 421 and the second chip 422 may further include a sensing module, which includes a model for supporting the operation of functions within the chip. For example, the sensing module in the first chip 421 includes a model for supporting the operation of a first security function, a second security function, and a first non-security function in the first chip 421, while the sensing module in the second chip 422 includes a model for supporting the operation of a second non-security function in the second chip 422. In other words, the sensing model in the first chip 421 includes both security and non-security models, while the sensing model in the second chip 422 may only include the non-security model.

[0206] according to Figure 10 In the circuit architecture shown, in the first mode, the control device 410 can control the sensing module in the first chip 421 to operate, and simultaneously enable the first security function, the second security function, and the first non-security function in the first chip 421; and control the sensing module in the second chip 422 to operate, and simultaneously enable the second non-security function in the second chip 422. When switching from the first mode to the second mode, including during the switch and after switching to the second mode, the control device 410 can continue to control the sensing module in the first chip 421 to operate, and continue to use the first security function and the second security function in the first chip 421; and control the sensing module in the second chip 422 to not operate, and simultaneously disable the first non-security function in the first chip 421 and the second non-security function in the second chip 422.

[0207] When the sensing module in the first chip 421 is working, it acquires sensor data related to perception collected by the sensor 500, such as radar data and map information. It then processes this sensor data using internal security and non-security models to obtain perception results. These results are then input to the security algorithms corresponding to the first and second security functions, as well as the non-security algorithm corresponding to the first non-security function. In the first mode, since the first security function and the first non-security function in the first chip 421 are enabled, the security algorithm corresponding to the first security function and the non-security algorithm corresponding to the first non-security function process the received perception results to obtain control signals corresponding to the first security function and the first non-security function. These signals are then sent to the control device 410, causing the control device 410 to execute the first security function and the first non-security function based on these control signals. During the switching process or after switching to the second mode, since the first security function and the second security function in the first chip 421 are enabled, the security algorithms corresponding to the first security function and the second security function perform algorithm processing based on the received perception results to obtain the control signals corresponding to the first security function and the second security function, and send them to the control device 410 so that the control device 410 executes the first security function and the second security function according to these control signals.

[0208] Similarly, when the sensing module in the second chip 422 is working, it also acquires sensor data related to sensing collected by the sensor 500, processes this sensor data using its internal non-safety class model to obtain sensing results, and inputs these results into the non-safety algorithm corresponding to the local second non-safety function to implement the second non-safety function. The second non-safety function is only enabled in the first mode. Therefore, in the first mode, the non-safety algorithm corresponding to the second non-safety function processes the received sensing results to obtain the control signal corresponding to the second non-safety function, and sends it to the control device 410 so that the control device 410 executes the second non-safety function according to the control signal. During the switching process and after switching to the second mode, both the sensing module and the second non-safety function in the second chip 422 are turned off. Therefore, the sensing module in the second chip 422 does not work, and the second non-safety function is not implemented.

[0209] For example, let's take... Figure 8 For example, please refer to the functional deployment method shown below. Figure 11 This illustrates a schematic diagram of the circuit architecture of another mode switching circuit 400 provided in this application. This example is related to... Figure 7The difference in the deployment methods shown is that the perception module in the first chip 421 includes a model for supporting the operation of the first security function, the second security function, and the first non-security function in the first chip 421, while the perception module in the second chip 422 includes a model for supporting the operation of the second security function and the second non-security function in the second chip 422. Both the perception module in the first chip 421 and the perception module in the second chip 422 contain both security and non-security models.

[0210] according to Figure 11 The circuit architecture shown allows the control device 410, in a first mode, to control the operation of the sensing module in the first chip 421, simultaneously enabling the first security function and the first non-security function in the first chip 421, and to control the operation of the sensing module in the second chip 422, simultaneously enabling the second security function and the second non-security function in the second chip 422. Thus, in the first mode, the sensing module in the first chip 421 processes the sensing-related sensor data collected by the sensor 500 to obtain sensing results supporting the implementation of the first security function and the first non-security function. Similarly, the sensing module in the second chip 422 processes the sensing-related sensor data collected by the sensor 500 to obtain sensing results supporting the implementation of the second security function and the second non-security function. The combination of the first chip 421 and the second chip 422 enables all security functions and all non-security functions.

[0211] When switching from the first mode to the second mode, including during and after the switch, the control device 410 can continue to control the sensing module in the first chip 421 to operate, while simultaneously enabling the second safety function in the first chip 421, continuing to use the first safety function in the first chip 421, and controlling the sensing module in the second chip 422 to not operate, while simultaneously disabling the first non-safety function in the first chip 421 and the second safety and second non-safety functions in the second chip 422. Thus, during the switch to the second mode, the sensing module in the first chip 421 processes the sensing-related sensor data collected by the sensor 500 to obtain sensing results that support the implementation of the first and second safety functions, ensuring that all safety functions are not interrupted during the switch and improving the safety of the switch process. Simultaneously, the sensing module in the second chip 422 does not operate to save power.

[0212] For example, let's take... Figure 5 For example, please refer to the functional deployment method shown below. Figure 12 This diagram illustrates a circuit architecture schematic of another mode switching circuit 400 provided in this application. This example is related to... Figure 7The difference in the deployment methods shown lies in the fact that security functions and non-security functions are deployed separately in the first chip 421 and the second chip 422. Therefore, the perception module in the first chip 421 includes models to support the operation of the first and second security functions in the first chip 421, that is, it only contains security-type models. The perception module in the second chip 422 includes models to support the operation of the non-security functions in the second chip 422, that is, it only contains non-security-type models. Essentially, the security-type perception model and the non-security-type perception model are separated and deployed separately in the first chip 421 and the second chip 422. Thus, when entering the second mode, only the security-type perception model can operate, while the non-security-type perception model remains inactive.

[0213] according to Figure 12 The circuit architecture shown allows the control device 410, in a first mode, to control the operation of the sensing module in the first chip 421, simultaneously enabling the first and second security functions in the first chip 421, and to control the operation of the sensing module in the second chip 422, simultaneously enabling the non-security functions in the second chip 422. The sensing module in the first chip 421 contains only a security-type sensing model. In the first mode, this security-type sensing model processes the sensing-related sensor data collected by the sensor 500 to obtain sensing results supporting the implementation of the first and second security functions. The sensing module in the second chip 422 contains only a non-security-type sensing model. This non-security-type sensing model processes the sensing-related sensor data collected by the sensor 500 to obtain sensing results supporting the implementation of the non-security functions. The combination of the first chip 421 and the second chip 422 implements all security functions and all non-security functions.

[0214] When switching from the first mode to the second mode, including during and after the switch, the control device 410 can continue to control the sensing module in the first chip 421 to operate, while continuing to use the first and second safety functions in the first chip 421, and controlling the sensing module in the second chip 422 to not operate, while disabling the non-safety functions in the second chip 422. Thus, during and after the switch to the second mode, the safety-related sensing model in the first chip 421 continues to process the sensing-related sensor data collected by the sensor 500 to obtain sensing results that support the implementation of the first and second safety functions, ensuring that all safety functions are not interrupted during the switch. The sensing module in the second chip 422, however, does not operate to save power.

[0215] For example, in combination Figures 10 to 12Let's take a closer look. The first chip 421 and the second chip 422 may also include an image processing module. This module acquires sensor data related to image processing, such as camera data, collected by the sensor 500, and processes this data to obtain an image processing result. This result can also be used to support various security and / or non-security functions within the chip. For example, in some scenarios, the image processing result can serve as input data for the perception module, used in conjunction with the perception results to determine a comprehensive result, which then serves as input data for various security and / or non-security functions within the chip. Alternatively, in other scenarios, the image processing result, along with the perception results from the perception module, serves as input data for various security and / or non-security functions within the chip; the specifics are not limited.

[0216] Optionally, after switching to the second mode, if it is necessary to exit the second mode, the control device 410 can re-enable the functions associated with the first mode in the first chip 421 and the second chip 422. For example, if the second chip 422 does not contain a second security function, such as... Figure 5 , Figure 7 , Figure 10 or Figure 12 As shown, all functions currently disabled in the first chip 421 and all functions in the second chip 422 can be reactivated. If the second chip 422 includes a second security function, such as... Figure 6 , Figure 8 , Figure 9 or Figure 11 As shown, all currently disabled functions in the first chip 421 can be reactivated, while the second security function in the first chip can be disabled, and all functions in the second chip 422 can be reactivated. In either case, both the first and second chips can regain full security and non-security functions after exiting the second mode, thus meeting the requirements of the first mode.

[0217] It should be noted that the above are merely examples of several possible functional deployment architectures to illustrate some possible circuit layouts of the first chip 421 and the second chip 422. However, in actual application scenarios, there may be other functional deployment methods and / or other circuit layout methods. This application does not impose any specific restrictions on this.

[0218] It should also be noted that, in addition to the modules and functions shown above, the first chip 421 or the second chip 422 may include other modules or functions, or include fewer modules or functions than those shown above, and this application does not impose any specific restrictions on this.

[0219] To facilitate understanding, the following section uses the mode switching circuit 400 applied to a computing platform in a vehicle as an example to introduce several possible circuit architectures.

[0220] In the vehicle's computing platform, the control device 410 described above can be, for example, an MCU. The first mode described above can be a standard driving mode, and the second mode described above can be an energy-saving mode. The perception module described above can be a basic perception module. The first chip and the second chip described above can be two different SOCs in the computing platform, referred to as SOC A and SOC B, respectively.

[0221] Assume that all the above safety and non-safety functions are deployed as operators on SOC A and SOC B, referred to as safety operators and non-safety operators, respectively. All safety operators include safety-class operator-A and safety-class operator-B, and all non-safety operators include parking-class operator-A, parking-class operator-B, cruise-class operator-A, and cruise-class operator-B. Here, -A can be understood as the first one mentioned above, and -B can be understood as the second one mentioned above. For example, safety-class operator-A corresponds to the first safety function, and safety-class operator-B corresponds to the second safety function.

[0222] Furthermore, cruise operators have relatively high computational requirements, while safety operators are a subset of cruise operators and have relatively lower computational requirements. Therefore, in energy-saving mode, cruise operators are not activated, while safety operators are activated.

[0223] Circuit architecture of computing platform

[0224] Please see Figure 13a and Figure 13b This diagram illustrates a circuit architecture of a computing platform provided in this application. Figure 13a This illustrates how the dry computing platform operates in standard driving mode. Figure 13b This illustrates how the computing platform operates during and after the switch from standard driving mode to energy-saving mode. Figure 13a and Figure 13b In the diagram, the black boxes represent disabled operators or modules, while the white boxes represent enabled operators or modules.

[0225] like Figure 13a and Figure 13bAs shown, in circuit architecture one, MDC adopts a dual-SOC architecture, with all safety operators and all non-safety operators being distributed evenly across SOC A and SOC B. For example, SOC A deploys the basic perception module, image processing module, safety operator-A, parking operator-A, and cruise operator-A, while SOC B deploys the basic perception module, image processing module, safety operator-B, parking operator-B, and cruise operator-B. The safety operator-B in SOC B is also backed up in SOC A.

[0226] In addition, Figure 13a and Figure 13b In the example, the basic perception module and image processing module in SOC A and SOC B are both connected to the intelligent driving sensor. Exemplary intelligent driving sensors include, but are not limited to, cameras, LiDAR (Light Detection and Ranging), radar, and map information.

[0227] The basic perception modules in SOC A and SOC B process perception data collected by intelligent driving sensors, such as LiDAR data, radar data, and map information, to obtain perception results. The image processing modules in SOC A and SOC B process image data collected by intelligent driving sensors, such as camera data, to obtain processing results. Both the perception results from the basic perception modules and the processing results from the image processing modules are fed into the various operators within their respective chips to support the corresponding functions of each operator.

[0228] Optionally, when the computing platform is in standard driving mode, such as Figure 13a As shown, the MCU enables all modules and operators in SOC A except for safety operator-B, and enables all modules and operators in SOC B, including the basic perception module, image processing module, safety operator-A, parking operator-A, and cruise operator-A in SOC A, and the basic perception module, image processing module, safety operator-B, parking operator-B, and cruise operator-B in SOC B, so that the MDC supports active safety functions, cruise functions, and parking functions.

[0229] When the computing platform switches from standard driving mode to energy-saving mode, including during the switching process and after switching to energy-saving mode, for example at the start of the switching, such as... Figure 13bAs shown, the MCU enables safety operator-B in SOC A and shuts down or suspends unnecessary processes and models in both SOC A and SOC B, including parking operator-A and cruise operator-A in SOC A, and basic perception module, image processing module, safety operator-B, parking operator-B, and cruise operator-B in SOC B, to disable cruise and parking functions, reducing computing power requirements and power consumption. Simultaneously, by activating the backup safety operator-B in SOC A, active safety functions are quickly restored, ensuring driving safety during and after the switchover.

[0230] When a computing platform needs to exit power-saving mode, for example, at the moment the exit is triggered, such as... Figure 13a As shown, the MCU re-enables all operators in SOC A except for safety operator-B, and enables all modules and operators in SOC B. For example, it disables safety operator-B in SOC A, while simultaneously enabling parking operator-A and cruise operator-A in SOC A, and enabling the basic perception module, image processing module, safety operator-B, parking operator-B, and cruise operator-B in SOC B. Meanwhile, the basic perception module, image processing module, and safety operator-A in SOC A remain enabled, restoring cruise and parking functions without interrupting active safety features. Essentially, after the condition for exiting energy-saving mode is triggered, while the safety operators in SOC A are working, all models in SOC B and some models in SOC A are loaded. Once the models in SOC A and SOC B are loaded, the energy-saving mode is exited.

[0231] By adopting the circuit architecture described above, it's equivalent to performing a hot backup of the safety operators of one SOC within the computing platform. In standard driving mode, the backup safety operators are inactive. However, when switching to energy-saving mode is required, the backup safety operators are directly activated to maintain complete safety functions, avoiding the unavailability of safety functions during the switch and ensuring vehicle safety during transitions. This solves the problem of intelligent driving safety functions failing due to SOC switching and model migration, thus ensuring that intelligent driving safety functions can operate normally during transitions.

[0232] Circuit architecture of computing platform II

[0233] Please see Figure 14a and Figure 14b This diagram illustrates the circuit architecture of another computing platform provided in this application. Figure 14a This illustrates how the computing platform operates in standard driving mode. Figure 14bThis illustrates how the computing platform operates during and after the switch from standard driving mode to energy-saving mode. Figure 14a and Figure 14b In the diagram, the black boxes represent disabled operators or modules, while the white boxes represent enabled operators or modules.

[0234] like Figure 14a and Figure 14b As shown, in circuit architecture two, MDC adopts a dual-SOC architecture. Safety operators are deployed only in SOC A, cruise operators are deployed only in SOC B, and other operators, such as parking operators, are distributed across SOC A and SOC B. For example, SOC A deploys the basic perception module, image processing module, safety operator-A, safety operator-B, and parking operator-A; SOC B deploys the basic perception module, image processing module, cruise operator-A, cruise operator-B, and parking operator-B. No safety operators are deployed in SOC B. No cruise operators are deployed in SOC A. Safety operators are a subset of cruise operators.

[0235] Optionally, when the computing platform is in standard driving mode, such as Figure 14a As shown, the MCU enables all modules and operators in SOC A and all modules and operators in SOC B, including the basic perception module, image processing module, safety operator-A, safety operator-B, and parking operator-A in SOC A, and the basic perception module, image processing module, cruise operator-A, cruise operator-B, and parking operator-B in SOC B, so that the MDC supports active safety functions, cruise functions, and parking functions.

[0236] When the computing platform switches from standard driving mode to energy-saving mode, including during the switching process and after switching to energy-saving mode, for example at the start of the switching, such as... Figure 14b As shown, the MCU shuts down or suspends unnecessary processes and models in SOC A and SOC B, including parking operator-A in SOC A, and basic perception module, image processing module, cruise operator-A, cruise operator-B and parking operator-B in SOC B, to disable cruise and parking functions, reduce computing power requirements and power consumption, while retaining active safety functions to ensure uninterrupted active safety functions during switching, and ensure driving safety during and after switching.

[0237] When a computing platform needs to exit power-saving mode, for example, at the moment the exit is triggered, such as... Figure 14aAs shown, the MCU re-enables all disabled operators in SOC A and enables all modules and operators in SOC B. For example, it activates parking operator-A in SOC A, and activates the basic perception module, image processing module, cruise operator-A, cruise operator-B, and parking operator-B in SOC B. Meanwhile, the basic perception module, image processing module, safety operator-A, and safety operator-B in SOC A remain activated to restore cruise and parking functions while maintaining uninterrupted active safety features. Essentially, after the condition for exiting energy-saving mode is triggered, while the two safety operators in SOC A are working, all models in SOC B and SOC A are loaded. Once all models in SOC A and SOC B are loaded, the energy-saving mode is exited.

[0238] By adopting the above circuit architecture two, it is equivalent to separating the safety-type operators and cruise-type operators and deploying them in different SOCs. When it is necessary to switch to energy-saving mode, the SOC with cruise-type operators is directly turned off, while the SOC with safety-type operators is kept on. This ensures uninterrupted safety functions during the switching process, guarantees vehicle safety during the switching period, solves the problem of intelligent driving safety functions not working due to intelligent driving SOC switching and model migration, and ensures that intelligent driving safety functions can work normally during the switching period.

[0239] It should be noted that in circuit architecture two, since safety-type operators and cruise-type operators are deployed in different SOCs, the basic sensing module can also separate the safety-type and cruise-type sensing models and deploy them in different SOCs. For example, the safety-type sensing model and safety-type operators are deployed in SOC A, and the cruise-type sensing model and cruise-type operators are deployed in SOC B. When entering power-saving mode, only the safety-type sensing model and safety-type operators work, while the cruise-type sensing model and cruise-type operators do not work, in order to further save unnecessary power consumption of the basic sensing module when switching to power-saving mode.

[0240] It should also be noted that both of the above circuit architectures are deployed under the premise of ensuring load balance between the two SOCs. This is equivalent to distributing all operators across the two SOCs, while trying to ensure that the number of operators in the two SOCs is similar, such as the same number of operators or a difference of 1, so as to avoid the phenomenon that one SOC has very high power consumption while the other SOC has very low power consumption.

[0241] However, in other examples, if load balancing between the two SOCs is not considered, any number of operators can be deployed in either SOC. For example, safety operator-A and safety operator-B can be deployed in SOC A, while all other operators, including parking operator-A, parking operator-B, cruise operator-A, cruise operator-B, and optionally, safety operator-B, can be deployed in SOC B. Alternatively, safety operator-A, safety operator-B, cruise operator-A, and cruise operator-B can be deployed in SOC A, while parking operator-A and parking operator-B can be deployed in SOC B. There are many other possible circuit layouts, which will not be listed here.

[0242] Furthermore, the above content is merely an example of a vehicle usage scenario to illustrate the specific implementation scheme of the mode switching circuit.

[0243] However, it should be understood that this application does not limit the application scenarios to which the mode switching circuit is applicable, nor does it limit the use of every device and every implementation logic in the above circuit architecture. Any solution that can achieve uninterrupted active safety functions through multiple safety functions deployed in a single chip during the mode switching process, including other modifications and technical means of this application, are within the protection scope of this application and are not specifically limited.

[0244] Furthermore, as system architecture evolves and new scenarios emerge, the mode switching circuit provided in this application is also applicable to similar technical problems, and this application does not impose any specific limitations on it.

[0245] Based on the mode switching circuit described above, this application can also provide a control method, such as... Figure 15 As shown. This control method can be considered as achieving the effect of uninterrupted active safety function during switching by means of software, as achieved by the above-mentioned circuit improvement structure.

[0246] This control method can be executed by a control device, which can be exemplified by the control device or MCU described above, for example... Figures 4 to 12 Control device 410 in, or Figures 13a to 14b The MCU in the control device. This control device can perform the control operations performed by the control device 410 or the MCU in the above embodiments.

[0247] For example, such as Figure 15 As shown, the control method mainly includes the following steps: Step 1501: In the first mode, control the first chip to support the first security function and the second chip to support the third function.

[0248] Here, the first chip is used to implement the first security function and the second security function. The second chip is used to implement the third function. The third function includes the second security function and / or non-security functions.

[0249] Optionally, in the first mode, the control device controls the first chip to support at least the first security function.

[0250] For example, in cases where the third function only includes non-security functions, such as Figure 5 As shown, in the first mode, the control device controls the first chip to support a first security function and a second security function, and controls the second chip to support a non-security function. For example, the first security function, the second security function, and the non-security function in the first chip are enabled.

[0251] When the third function includes both non-security functions and the second security functions, such as Figure 6 As shown, in the first mode, the control device controls the first chip to support a first security function but not a second security function. It also controls the second chip to support both the non-security function and the second security function. For example, the first security function in the first chip, the second security function in the second chip, and the non-security function in the second chip are enabled, while the second security function in the first chip is disabled.

[0252] Step 1502: When switching from the first mode to the second mode, control the first chip to support the first security function and the second security function.

[0253] Here, the first safety function and the second safety function are different safety functions. For example, the first safety function may include automatic emergency braking and forward collision warning, while the second safety function may include brake assist and rear collision warning. Or, the first safety function may include automatic emergency braking and lane departure warning, while the second safety function may include brake assist and lane keeping assist. As mentioned above, further details will not be provided.

[0254] Here, switching from the first mode to the second mode includes at least the process of switching from the first mode to the second mode. Optionally, it also includes the process after switching from the first mode to the second mode.

[0255] For example, during the process of switching from the first mode to the second mode, and after switching to the second mode, the control device controls the first chip to support the first security function and the second security function, and controls the second chip to no longer support the third function.

[0256] Optionally, when the third function only includes non-security functions, such as Figure 5As shown, since the control device controls the first security function, the second security function, and the non-security function in the first chip to be enabled in the first mode, during the process of switching from the first mode to the second mode, the control device, for example, controls the non-security function in the second chip to be disabled at the start time of determining the switch, while the first security function and the second security function in the first chip remain enabled, so as to maintain the effect of uninterrupted active security function during the switch.

[0257] When the third function includes both non-security functions and the second security functions, such as Figure 6 As shown, since the control device controls the first security function in the first chip, the second security function in the second chip, and the non-security function in the second chip to be enabled in the first mode, during the process of switching from the first mode to the second mode, the control device, for example, controls the second security function in the second chip and the non-security function in the second chip to be disabled at the start time of determining the switch, and controls the second security function in the first chip to be enabled, while the first security function in the first chip also remains enabled, so as to maintain the effect of uninterrupted active security function during the switch.

[0258] In some examples, the first chip also includes some non-security functions. For example, the first chip contains a first security function, a second security function, and a first non-security function, while the second chip contains a second non-security function, or also contains a second security function. In this case: If it is the former, that is, the second chip only contains the second non-security function, such as Figure 7 As shown, in the first mode, the control device can not only enable the first security function, the second security function, and the second non-security function in the first chip, but also enable the first non-security function in the first chip to achieve all non-security functions. When switching from the first mode to the second mode, for example, at the start time of the switch, the first non-security function in the first chip and the second non-security function in the second chip are both disabled to reduce power consumption by turning off the various functions of the second chip. If it is the latter, that is, the second chip contains both a second non-security function and a second security function, such as... Figure 8As shown, in the first mode, the control device can not only enable the first security function in the first chip, the second security function in the second chip, and the second non-security function in the second chip, but also enable the first non-security function in the first chip to achieve all non-security functions. When switching from the first mode to the second mode, for example, at the start time of the switch, the control device controls the first non-security function in the first chip, the second security function in the second chip, and the second non-security function in the second chip to be disabled, and enables the second security function in the first chip, thereby reducing power consumption by disabling various functions of the second chip.

[0259] In some examples, when exiting the second mode, such as at the start of exiting the second mode, the control device can enable various functions in the first chip and the second chip associated with the first mode. For instance, if the second chip does not include a second security function, it can enable all currently disabled functions in the first chip and all functions in the second chip. If the second chip includes a second security function, it can enable all currently disabled functions in the first chip and all functions in the second chip, while simultaneously disabling the second security function in the first chip.

[0260] In some examples, the first and second chips also include a sensing module, such as... Figures 10 to 12 As shown, the sensing module includes a model for supporting the operation of functions within the chip. In this scenario, in the first mode, the control device can not only control the various functions to be enabled or disabled as described above, but also control both the sensing modules in the first chip and the sensing modules in the second chip to operate. When switching from the first mode to the second mode, for example during and after the switch, only the sensing module in the first chip is controlled to operate, while the sensing module in the second chip is disabled, thereby further reducing power consumption by shutting down the sensing module in the second chip. When exiting the second mode, for example during and after the exit, both the sensing modules in the first and second chips are controlled to operate to restore full sensing capabilities, thereby supporting full security functions and full non-security functions.

[0261] By adopting the above control method and configuring the first chip to support two safety functions, even during the process of switching from the first mode to the second mode, the two safety functions in the first chip can be enabled to ensure that all safety functions are uninterrupted, thereby improving the safety of the switching process.

[0262] In the above content, the specific timing of switching from the first mode to the second mode can be determined by the control device based on the equipment status.

[0263] For ease of understanding, let's take a vehicle as an example. The first mode will be called the standard driving mode, and the second mode will be called the energy-saving mode.

[0264] For example, when the vehicle is in standard driving mode, if the control device detects that the vehicle status meets at least one of the following conditions, it can determine that the vehicle needs to switch from standard driving mode to energy-saving mode: Condition A1: Receive a command to enter energy-saving mode. This command can be, for example, issued by the user. For instance, in a human-driven scenario, the user actively configures the vehicle's driving mode to energy-saving mode, such as selecting energy-saving mode on the vehicle's infotainment screen, issuing a voice command to enter energy-saving mode, or triggering energy-saving mode via gesture. The control device detects that the user has made an action indicating energy-saving mode, including but not limited to interface instructions, voice instructions, or gesture instructions, and determines that it has received the command to enter energy-saving mode to support the user's proactive power-saving needs. Condition A2: The vehicle's battery level is lower than the set battery level. For example, during vehicle use, the control device monitors the vehicle's battery level in real time or periodically. When it detects that the battery level is lower than the set battery level, it indicates that the battery is currently low on power. At this time, the control device can automatically trigger the energy-saving mode to prevent the vehicle from breaking down due to low battery. Condition A3: The battery discharge voltage is lower than the set voltage. For example, during vehicle use, the control device acquires the vehicle's battery terminal voltage in real time or periodically. When it detects that the battery terminal voltage is lower than the set voltage, it indicates that the battery's current discharge capacity is insufficient, further indicating that the battery power is low. At this time, the control device can automatically trigger the energy-saving mode to avoid the vehicle from breaking down due to low battery power. Condition A4: The start-up time of electrical components in the vehicle exceeds the set time. For example, after the vehicle starts, the control device records the usage time of electrical components in the vehicle. When the recorded usage time exceeds the set time, it indicates that the vehicle has been running for too long, and the vehicle battery is likely to be low on power. At this time, the control device can automatically trigger the energy-saving mode to prevent the vehicle from breaking down due to low battery.

[0265] It should be noted that condition A1 above is triggered by user instruction to switch to energy-saving mode, while conditions A2 to A4 above automatically switch to energy-saving mode. The latter can achieve automatic mode switching without the user's awareness, thus improving the user experience.

[0266] However, in other examples, a user confirmation step can be added after conditions A2-A4 above. For instance, when the vehicle is low on battery power (e.g., the battery level is below a set level, the battery discharge voltage is below a set voltage, or the startup time of electrical components exceeds a set time), the user can be prompted to confirm whether to enter energy-saving mode via a pop-up window on the vehicle's infotainment system, a voice message, or flashing headlights. Upon receiving the user's confirmation, the process of switching to energy-saving mode can be initiated. This is equivalent to confirming with the user before automatically triggering energy-saving mode, improving the user experience.

[0267] Optionally, after the vehicle enters energy-saving mode, if the control device detects that the vehicle status meets at least one of the following conditions, it can determine that the vehicle needs to exit energy-saving mode; in other words, it needs to switch back to standard driving mode from energy-saving mode: Condition B1: Receive a command to exit energy-saving mode. This command can be, for example, issued by the user. For instance, in a scenario where energy-saving mode is currently active, the user actively configures the vehicle's driving mode to standard driving mode, such as by selecting to exit energy-saving mode or enter standard driving mode on the vehicle's infotainment screen, issuing a voice message to exit energy-saving mode, or triggering the exit via gesture. The control device detects that the user has made an action instructing to exit energy-saving mode, including but not limited to interface instructions, voice instructions, or gesture instructions, and determines that it has received a command to enter or exit energy-saving mode to support the user's active exit request. Condition B2: The vehicle gear is switched to park (P). When the vehicle is in P gear, it means that the vehicle is currently parked and no longer needs to run in energy-saving mode. At this time, the control device can automatically exit energy-saving mode so that the vehicle will default to standard driving mode the next time it is started, thus improving the user's driving experience. Condition B3: The vehicle is in charging mode. When the vehicle is in charging mode, it means that the vehicle is currently charging and has sufficient power for use, and there is no longer a need for energy saving. At this time, the control device can automatically exit the energy saving mode, so as to achieve the strategy of automatic exit without the user's notice, thereby improving the user's driving experience. Condition B4: The vehicle's battery level is greater than or equal to the set battery level. For example, after entering energy-saving mode, the control device can obtain the vehicle's battery level in real time or periodically. When it detects that the battery level is no longer lower than the set battery level, it means that the vehicle battery has been charged and there is sufficient power available, so there is no need to save power. At this time, the control device can automatically exit energy-saving mode to improve the user's experience with energy-saving mode. Condition B5: The battery discharge voltage is greater than or equal to the set voltage. For example, after entering energy-saving mode, the control device can acquire the vehicle's battery terminal voltage in real time or periodically. When it detects that the battery terminal voltage is no longer lower than the set voltage, it indicates that the battery's current discharge capacity is sufficient, further indicating that the battery has been recharged. At this time, the control device can automatically exit energy-saving mode to avoid the vehicle from breaking down due to low battery. Condition B6: Vehicle off or restarted. Here, "vehicle off" means that upon receiving a power-down instruction, the vehicle automatically switches from its current energy-saving mode back to intelligent driving mode, so that it can automatically use intelligent driving mode the next time it is powered on, without requiring user intervention, thus improving the user experience. "Vehicle restarted" means that the vehicle remains in energy-saving mode when powered off, and automatically switches back to intelligent driving mode after restarting, also ensuring automatic use of intelligent driving mode upon restarting, further enhancing the user experience.

[0268] It should be noted that condition B1 above is triggered by user instruction to exit energy-saving mode, while conditions B2 to B6 above are automatic exits from energy-saving mode. The latter can achieve automatic mode switching without the user's awareness, thus improving the user experience.

[0269] However, in other examples, a user confirmation step can be added after conditions B2 to B6 above. For example, when the vehicle is switched to P gear, or the vehicle enters charging mode, or the vehicle's battery level is no longer lower than the set level, or the vehicle's battery discharge voltage is no longer lower than the set voltage, or the vehicle is turned off, or the vehicle is restarted, the control device can prompt the user to confirm whether to exit energy-saving mode through pop-up windows on the vehicle's infotainment system, voice messages, flashing headlights, etc., and after receiving the user's confirmation, initiate the operation to exit energy-saving mode to improve the user experience.

[0270] Furthermore, some examples can strictly define the conditions for exiting the energy-saving mode. For instance, exiting the energy-saving mode is only permitted if at least one of the conditions B2 to B5 is met. If conditions B2 to B5 are not met, but other conditions such as condition B1 or condition B6 are met, exiting the energy-saving mode is not permitted. For example, after receiving a user's instruction to exit the energy-saving mode, the control device does not immediately exit the energy-saving mode but instead determines whether the vehicle is currently in Park (P) or charging mode. If so, the operation to exit the energy-saving mode is initiated. If not, the energy-saving mode is not exited. Optionally, a prompt message can also be sent to the user to indicate that the current vehicle status does not meet the conditions for exiting the energy-saving mode, thereby reducing potential safety or user experience risks from exiting the energy-saving mode in unsuitable usage scenarios.

[0271] For example, when determining to exit power-saving mode, if a second security function is deployed in the second chip, such as... Figure 6 , Figure 8 , Figure 9 , Figure 11 As shown, the control device can enable all functions of the first chip except the second security function, as well as all functions of the second chip. If the second security function is not deployed in the second chip, and only non-security functions are deployed, such as... Figure 5 , Figure 7 , Figure 10 , Figure 12 As shown, the control device can enable all functions in the first chip and all functions in the second chip.

[0272] In some examples, after the energy-saving mode is triggered, the control device can also control the display device, such as the vehicle's infotainment system, to display a prompt message during the switch from standard driving mode to energy-saving mode. This prompt message indicates the remaining switching time and that vehicle functions are limited during the remaining switching time.

[0273] Optionally, considering that the switching time is mainly determined by the function migration, especially the model migration time, between the two chips, a possible interface prompting process can be found in [reference needed]. Figure 16 The main steps include the following: Step 1601: Power on the vehicle.

[0274] Here, the vehicle defaults to standard driving mode after power-on.

[0275] Step 1602, the chip is fully operational.

[0276] Here, in standard driving mode, all chips in the MDC are active, including the first and second chips.

[0277] Optionally, while both the first and second chips are operating, if no safety functions are deployed in the second chip, then all safety functions, non-safety functions in the first chip, and non-safety functions in the second chip are enabled, so that the vehicle operates in a full-function mode with all safety functions and all non-safety functions. Conversely, if safety functions are deployed in the second chip, then all non-safety functions, safety functions, safety functions in the first chip (excluding those included in the second chip), and non-safety functions in the first chip are enabled, so that the vehicle operates in a full-function mode with all safety functions and all non-safety functions.

[0278] Step 1603: Energy-saving mode is triggered.

[0279] Here, the user can actively trigger the vehicle's energy-saving mode, or the vehicle can automatically trigger the energy-saving mode when it detects that its own status, such as battery level, has reached the conditions for entering the energy-saving mode, or the vehicle can prompt the user to choose whether to enter the energy-saving mode when it detects that its own status has reached the conditions for entering the energy-saving mode, etc., without specific restrictions.

[0280] Step 1604, Model transfer countdown X seconds.

[0281] Here, after the energy-saving mode is triggered, the control device automatically starts or instructs the vehicle system to start the countdown, for example, automatically starts the timer, or instructs the vehicle system to start the timer. The timing duration of the timer is equal to the model migration duration, which is the switching duration mentioned above.

[0282] Optionally, the switching duration can be a pre-configured duration, such as a duration pre-measured and configured in the control device or vehicle infotainment system through calibration, or it can be a duration calculated by the control device based on the functions that need to be disabled or enabled during the switching period. If the latter, the control device can calculate a duration more suitable for the current switching scenario based on the functions that need to be disabled or enabled during this switching and send it to the vehicle infotainment system, which then starts a timer based on the duration sent by the control device. Alternatively, the control device can also start a timer automatically based on the calculated duration and send an instruction to the vehicle infotainment system to instruct it to display a prompt message that includes the calculated duration and updates the duration in real time.

[0283] Step 1605: Determine if the countdown has ended. If not, proceed to step 1606; if yes, proceed to step 1607.

[0284] Taking the vehicle's infotainment system starting a timer as an example, after starting the timer, the system determines that the countdown has not ended before the timer reaches the set switching duration, and determines that the countdown has ended after the timer reaches the set switching duration.

[0285] Step 1606 indicates that some functions are unavailable.

[0286] Here, while the countdown is still running, the vehicle's infotainment system continuously displays a notification message to remind the user that some vehicle functions are unavailable during the countdown period. Furthermore, the countdown displayed on the screen updates in real time as the timer's duration changes.

[0287] Optionally, the specific content of the prompt message is related to whether or not the circuit improvement structure mentioned above is adopted.

[0288] In one example, if the circuit improvement structure described above is not adopted, but the circuit structure in the related technology is continued to be used, such as... Figures 3a to 3cAs shown, the vehicle's active safety features remain unavailable during the switching process. In this situation, to improve vehicle safety during the switching period, the prompt may specifically inform the user that the vehicle's safety features are unavailable during the switching, or may also include information about the unavailability of some non-safety features. Optionally, the user may also be informed of the remaining switching time in approximately a certain number of seconds. Optionally, the user may also be reminded to drive cautiously to reduce safety risks.

[0289] In another example, if the circuit improvement structure described above is adopted, such as... Figures 4 to 14b As shown, the vehicle's active safety functions remain available during the switching process. In this scenario, vehicle safety is guaranteed during the switching period. However, since some non-safety functions are unavailable, a prompt message can be displayed on the vehicle's infotainment screen to improve the user experience. The message can then be changed to indicate which non-safety functions are unavailable during the switching process. Optionally, the remaining switching time (approximately how many seconds) can also be displayed to inform the user of the duration of the unavailability of vehicle functions, preventing unnecessary triggering.

[0290] Step 1607 prompts you to exit and enter energy-saving mode.

[0291] Here, after the countdown completes, it indicates that the vehicle has entered energy-saving mode. The vehicle's active safety features and other functions in energy-saving mode are now operating normally. In this case, the vehicle's infotainment system can stop displaying a notification on the screen to exit the notification. Optionally, before exiting the notification, the infotainment system can also display a reminder to the user that energy-saving mode has been successfully entered, so that the user is aware of whether the energy-saving mode has been successfully triggered, improving the user's switching experience.

[0292] By adopting the above interface prompt method, it is equivalent to introducing a countdown mechanism into the vehicle's user interface. The countdown duration covers the model migration delay, so as to remind users to drive carefully when switching through interface reminders, thereby reducing the safety risks for users when switching.

[0293] It should be noted that the interface prompting method shown above can be applied to the improved mode switching circuit structure in the foregoing embodiments, as well as to the mode switching circuit in related technologies. As mentioned above, this application does not impose any specific limitations on this.

[0294] Based on the control method described above, this application can also provide a control device that can be used to execute the above control method. The relevant features can be found in the above method embodiments, and will not be repeated here.

[0295] In one possible implementation, please refer to Figure 17This diagram illustrates a possible structural design of the control device. The control device 410 may include various units or modules for implementing the control method shown in any of the above embodiments, for example, implementing... Figure 15 or Figure 16 The various units or modules of the control method shown.

[0296] For example, such as Figure 17 As shown, the control device 410 includes a determining unit 1710 and a control unit 1720. The determining unit 1710 and the control unit 1720 can be used to implement... Figure 15 or Figure 16 The control method in the illustrated embodiment. For example, to achieve... Figure 15 Taking the control method shown as an example, the determining unit 1710 is used to determine the time of switching from the first mode to the second mode, and the control unit 1720 is used to control the first chip to support the first security function and the second chip to support the third function in the first mode. Furthermore, according to the switching time determined by the determining unit 1710, when switching from the first mode to the second mode, the control unit 1720 controls the first chip to support the first security function and the second security function. The third function includes the second security function and / or a non-security function.

[0297] It should be noted that the determining unit 1710 and the control unit 1720 can be implemented using virtual modules. For example, the determining unit 1710 can be implemented using a software functional unit or a virtual device, and the control unit 1720 can be implemented using a software function or a virtual device. Alternatively, the determining unit 1710 and the control unit 1720 can also be implemented using physical devices. For example, if the control device 410 is implemented using a chip / chip circuit, the determining unit 1710 and the control unit 1720 can be integrated processors, microprocessors, or integrated circuits.

[0298] The unit division in this application embodiment is illustrative and only represents one logical functional division. In actual implementation, other division methods may be used. Furthermore, the functional units in each embodiment of this application can be integrated into a single processor, exist as separate physical units, or two or more units can be integrated into a single module. The integrated module can be implemented in hardware or as a software functional module.

[0299] In another possible implementation, please refer to Figure 18 The diagram illustrates another possible structural schematic of the control device. The control device 410 can be, exemplarily, a chip or chip system for implementing the functions of the control device or its modules (such as processors, chips, or chip systems), MCUs, or their modules described in the foregoing embodiments. Optionally, the chip system may consist of chips or include chips and other discrete devices.

[0300] like Figure 18 As shown, the control device 410 may include at least one processor 1810, which is coupled to a memory. Optionally, the memory may be located within the control device 410, integrated with the processor, or located outside the control device 410. For example, the control device 410 may also include at least one memory 1820. The at least one memory 1820 stores the necessary computer programs (or instructions) and / or data for implementing any of the above embodiments; the at least one processor 1810 can execute the computer programs (or instructions) and / or data stored in the at least one memory 1820 to complete the seat control method in any of the above embodiments.

[0301] Optionally, the control device 410 may further include a communication interface 1830, through which the control device 310 interacts with other devices. For example, the communication interface 1830 may be a transceiver, circuit, bus, module, pin, or other type of communication interface. When the control device 410 is a chip-type device or circuit, the communication interface 1830 in the control device 410 may also be an input / output circuit, capable of inputting information (or receiving information) and outputting information (or sending information). The processor 1810 may be an integrated processor, microprocessor, integrated circuit, or logic circuit, and the processor 1810 may determine the output information based on the input information.

[0302] The coupling in this embodiment is an indirect coupling or communication connection between devices, units, or modules, which can be electrical, mechanical, or other forms, used for information exchange between devices, units, or modules. The processor 1810 may operate in conjunction with the memory 1820 and the communication interface 1830. This embodiment does not limit the connection medium between the processor 1810, the memory 1820, and the communication interface 1830.

[0303] Optional, see Figure 18 The processor 1810, memory 1820, and communication interface 1830 are interconnected via a bus. This bus can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be categorized as an address bus, data bus, control bus, etc. For ease of representation, Figure 11 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0304] In the embodiments of this application, the processor 1810 may be a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, capable of implementing or executing the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly manifested as being executed by a hardware processor, or executed by a combination of hardware and software modules within the processor.

[0305] In this embodiment, the memory 1820 can be non-volatile memory, such as a hard disk drive (HDD) or a solid-state drive (SSD), or it can be volatile memory, such as random-access memory (RAM). The memory 1820 can be any other medium capable of carrying or storing desired program code in the form of instructions or data structures, and accessible by a computer, but is not limited thereto. The memory 1820 in this embodiment can also be a circuit or any other device capable of implementing storage functions for storing program instructions and / or data.

[0306] As one possible implementation, the control device 410 can be a physical device. For example, the control device 410 may include one or more of the following modules: central processing unit, microprocessor, application-specific integrated circuit, field-programmable gate array, complex programmable logic device (CPLD), coprocessor (assisting the central processing unit in completing corresponding processing and applications), microcontroller unit (MCU), domain controller (DC), vehicle domain controller unit (VDC), electronic control unit (ECU), cockpit domain controller (CDC), vehicle integrated unit (VIU), vehicle control unit (VCU), motor control unit (MCU), etc. Furthermore, the control device 410 includes at least one processor integrated in the form of a system-on-chip (SOC), which is commonly referred to as an SOC by those skilled in the art. The SOC may include at least one processor, and when the SOC includes multiple processors, the types of processors may be different.

[0307] Optionally, the control device 410 may be located in Figure 1 or Figure 2 Of the 100 vehicles.

[0308] Optionally, the control device 410 can be Figure 2 The control unit, such as an MCU, in the computing platform 130 of the vehicle 100 shown.

[0309] Based on the above-described mode switching circuit, control method, and control device, this application can also provide a terminal device, such as... Figure 19 As shown. The terminal device 1900 includes the above mode switching circuit, such as... Figures 4 to 14b The mode switching circuit 400 shown in any of the attached figures, or including the above control device, such as Figure 17 or Figure 18 The control device 410 shown. Figure 19 The former is used as an example.

[0310] Optionally, such as Figure 19 As shown, in addition to the mode switching circuit 400, the terminal device 1900 may also include a sensor 500. The sensor 500 is coupled to the first chip 421 and the second chip 422 in the mode switching circuit 400. The sensor 500 is used to collect the status information of the terminal device and send it to the first chip 421 and the second chip 422. The first chip 421 and the second chip 422 are used to perform local functions based on the status information of the terminal device, realizing at least one of the active safety function, parking function, and cruise function of the terminal device.

[0311] In one example, in the first mode, the first chip 421 and the second chip 422 are used to implement the active safety function, parking function and cruise function of the terminal device. During the switching from the first mode to the second mode, and after switching to the second mode, the active safety function of the terminal device is implemented.

[0312] For example, the terminal device 1900 mentioned above can be a vehicle, such as a car, truck, motorcycle, bus, recreational vehicle, amusement park vehicle, construction equipment, tram, toy car, golf cart, train, etc., without any particular limitation. In addition, the vehicle can be a new energy vehicle, including electric vehicles, such as two-wheel drive electric vehicles or four-wheel drive electric vehicles, or a fuel vehicle, which is not limited in this application.

[0313] Optionally, when the terminal device 1900 is a vehicle, the control device 410 can be a module in the vehicle, such as a computing platform, including but not limited to MDC, vehicle controller, area controller, or other vehicle control units. Alternatively, it can be a device applied to or used in conjunction with a vehicle or its module, capable of implementing the above control methods performed by the vehicle or its module.

[0314] Optionally, when the terminal device 1900 is a vehicle, the terminal device may also include components such as the vehicle body, wheels, and windows.

[0315] Alternatively, the terminal device 1900 could be other means of transportation, such as trains, high-speed trains, or engineering vehicles.

[0316] Alternatively, the terminal device 1900 can also be a non-transportation vehicle with mode switching requirements, such as a robot or a smart wheelchair, without limitation.

[0317] Alternatively, the terminal device 1900 can also be an electronic device connected to the vehicle or non-vehicle to be controlled, for communicating with the vehicle or non-vehicle to assist in implementing the above-mentioned mode-switching control method. For example, the electronic device can be a user equipment, roadside unit, cloud server, or other vehicle. The electronic device includes units or modules for implementing the above control method, such as... Figure 17 or Figure 18 The control device 410 shown in any of the attached figures.

[0318] Based on the above, this application also provides a computer-readable storage medium storing instructions that, when executed, cause the method provided in any of the above-described method embodiments to be implemented. The computer-readable storage medium may include various media capable of storing program code, such as a USB flash drive, portable hard drive, read-only memory, random access memory, magnetic disk, or optical disk.

[0319] Based on the above, this application also provides a computer program product, which includes a computer program (also referred to as code or instructions) that, when run on a computer, causes the computer to perform the method provided in any of the above method embodiments.

[0320] Based on the above, this application also provides a chip, which includes at least one processing unit and an interface circuit. The interface circuit is used to provide program instructions or data to the at least one processing unit, and the at least one processing unit is used to execute the program instructions to implement the method provided in any of the above method embodiments.

[0321] The personal information and data processing involved in this application, which are protected by the laws and regulations of the relevant countries and regions, such as collection, storage, use, processing, transmission, provision and disclosure, comply with the relevant laws and regulations of the relevant countries and regions.

[0322] It should be noted that, unless otherwise specified or there is a logical conflict, the terms and / or descriptions of different embodiments of this application are consistent and can be referenced by each other. The technical features of different embodiments can be combined into new embodiments according to their inherent logical relationships.

[0323] In this application, "at least one" means one or more, and "more than one" means two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B means: A exists alone, A and B exist simultaneously, or B exists alone, where A and B can be singular or plural. The terms "optionally" or "exemplary" are used to indicate examples, illustrations, or explanations. Any embodiment or scheme described as "optional" or "exemplary" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or schemes. Alternatively, it can be understood that the use of the terms "exemplary" or "optional" is intended to present concepts in a specific manner and does not constitute a limitation on the embodiments of this application.

[0324] It is understood that the various numerical designations used in the embodiments of this application are merely for descriptive convenience and are not intended to limit the scope of the embodiments of this application. The order of the process numbers does not imply the order of execution; the execution order of each process should be determined by its function and inherent logic. Terms such as "first," "second," etc., are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion, such as including a series of steps or units. A method, system, product, or device is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to these processes, methods, products, or devices.

[0325] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, compact disc read-only memory (CD-ROM), optical storage, etc.) containing computer-usable program code.

[0326] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing device, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0327] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0328] These computer program instructions can also be loaded onto a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable device for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

Claims

1. A mode switching circuit, characterized in that, include: A control device, and a first chip and a second chip respectively coupled to the control device; The first chip is used to implement the first security function and the second security function, and the second chip is used to implement the third function; The third function includes the second security function and / or non-security function; The control device is used for: In the first mode, both the first security function and the third function are supported; When switching from the first mode to the second mode, both the first security function and the second security function are supported.

2. The circuit as described in claim 1, characterized in that, The chip power consumption of the second mode is less than that of the first mode.

3. The circuit as described in claim 1 or 2, characterized in that, The third function is a non-safety function; the control device is specifically used for: In the first mode, the first security function, the second security function, and the non-security function are enabled; When switching from the first mode to the second mode, the non-security functions are disabled.

4. The circuit as described in claim 1 or 2, characterized in that, The third function includes both the non-security function and the second security function; The control device is specifically used for: In the first mode, the first security function, the second security function in the second chip, and the non-security function are enabled. When switching from the first mode to the second mode, the second security function in the first chip is enabled, and the second security function and the non-security function in the second chip are disabled.

5. The circuit as described in claim 3 or 4, characterized in that, All non-security functions are deployed in the second chip; or, Some non-security functions are deployed on the second chip, while other non-security functions are deployed on the first chip.

6. The circuit as described in any one of claims 1 to 5, characterized in that, The first chip also includes non-security features; The control device is also used for: In the first mode, the non-security functions in the first chip are enabled; When switching from the first mode to the second mode, the non-security functions in the first chip are disabled.

7. The circuit as described in any one of claims 3 to 6, characterized in that, The non-security functions include at least one of the following: First parking function, second parking function, first cruise control function, second cruise control function.

8. The circuit as described in any one of claims 1 to 7, characterized in that, The first security function and the second security function are different security functions, and the security function includes at least one of the following: Automatic emergency braking, brake assist, forward collision warning, rear collision warning, lane departure warning, and lane keeping assist.

9. The circuit as described in any one of claims 1 to 8, characterized in that, The first chip and the second chip further include a sensing module, the sensing module including a model for supporting the operation of functions within the chip; the control device is further used for: In the first mode, the sensing modules in the first chip and the second chip are controlled to operate. When switching from the first mode to the second mode, the sensing module in the first chip is controlled to work.

10. The circuit as described in any one of claims 1 to 9, characterized in that, In the case where security functions are deployed on the first chip and non-security functions are deployed on the second chip, the first chip and the second chip also include a sensing module. The sensing module in the first chip includes a security class model, which is used to support the operation of security functions; The sensing module in the second chip includes a non-security class model, which is used to support the operation of non-security functions.

11. The circuit as described in any one of claims 1 to 10, characterized in that, The control device is also used for: The system determines to switch from the first mode to the second mode when it detects that the device status meets at least one of the following conditions: The device receives a command to enter the second mode; the device's battery level is lower than the set level; the battery discharge voltage is lower than the set voltage; or the startup time of the electrical components inside the device exceeds the set time.

12. The circuit as described in any one of claims 1 to 11, characterized in that, The control device is also used for: The device will exit the second mode if at least one of the following conditions is met: Receives an instruction to exit the second mode; the device shifts to parking mode; the device is in charging mode; the device's battery level is greater than or equal to the set battery level; the battery discharge voltage is greater than or equal to the set voltage; the device restarts.

13. The circuit as described in any one of claims 1 to 12, characterized in that, The control device is also used for: When it is determined to exit the second mode, the functions of the first chip and the second chip associated with the first mode are enabled.

14. The circuit as described in any one of claims 1 to 13, characterized in that, The control device is also used for: During the transition from the first mode to the second mode, the control display device displays a prompt message indicating the remaining switching time and the limited functionality of the device during the remaining switching time.

15. The circuit as described in claim 14, characterized in that, The switching duration is a pre-configured duration, or a duration calculated by the control device based on the functions that need to be disabled or enabled during the switching period.

16. A control method, characterized in that, include: In the first mode, the first chip supports the first security function and the second chip supports the third function; When switching from the first mode to the second mode, control the first chip to support the first security function and the second security function; The third function includes the second security function and / or non-security function.

17. The method as described in claim 16, characterized in that, The third function is a non-security function; In the first mode, controlling the first chip to support the first security function and the second chip to support the third function includes: in the first mode, controlling the first security function, the second security function and the non-security function to be enabled. The step of controlling the first chip to support the first security function and the second security function when switching from the first mode to the second mode includes: controlling the non-security function to switch to a disabled state when switching from the first mode to the second mode.

18. The method as described in claim 16, characterized in that, The third function includes both the non-security function and the second security function; In the first mode, controlling the first chip to support the first security function and the second chip to support the third function includes: in the first mode, controlling the first security function, the second security function in the second chip, and the non-security function to be enabled. When switching from the first mode to the second mode, controlling the first chip to support the first security function and the second security function includes: when switching from the first mode to the second mode, controlling the second security function in the first chip to be enabled, and controlling the second security function and the non-security function in the second chip to be disabled.

19. The method according to any one of claims 16 to 18, characterized in that, The first chip also includes non-security features; The method further includes: In the first mode, the non-security functions in the first chip are enabled. When switching from the first mode to the second mode, the non-security functions in the first chip are switched to a disabled state.

20. The method according to any one of claims 16 to 19, characterized in that, After switching from the first mode to the second mode, the method further includes: The device will exit the second mode if at least one of the following conditions is met: Receives command to exit second mode; device gear shifts to parking; device is charging; device battery level is greater than or equal to set battery level; battery discharge voltage is lower than set voltage; device restarts.

21. The method according to any one of claims 16 to 20, characterized in that, The method further includes: When it is determined to exit the second mode, the functions associated with the first mode in the first chip and the second chip are enabled.

22. The method according to any one of claims 16 to 21, characterized in that, The method further includes: During the transition from the first mode to the second mode, the control display device displays a prompt message indicating the remaining switching time and the limited functionality of the device during the remaining switching time.

23. The method as described in claim 22, characterized in that, The switching duration is a pre-configured duration or a duration calculated based on the functions that need to be disabled or enabled during the switching period.

24. A control device, characterized in that, Includes units and / or modules for performing the method as described in any one of claims 16 to 23.

25. A control device, characterized in that, include: A processor coupled to a memory for storing computer programs or instructions, the processor for executing the computer programs or instructions to implement the method as described in any one of claims 16 to 23.

26. A vehicle, characterized in that, It includes the mode switching circuit as described in any one of claims 1 to 15; or, it includes a first chip, a second chip, and the control device as described in claim 24 or 25. The control device or the mode switching circuit is used to control the operation of the first chip and the second chip in the first mode, and to control the safety functions in the first chip to operate during the process of switching from the first mode to the second mode and after switching to the second mode.

27. The vehicle as claimed in claim 26, characterized in that, It also includes sensors; The sensor is used to collect vehicle driving information and send it to the first chip and the second chip; The first chip and the second chip are used to implement at least one of the vehicle's active safety function, parking function, and cruise function based on the vehicle driving information.

28. The vehicle as claimed in claim 27, characterized in that, The first chip and the second chip are specifically used for: In the first mode, the vehicle's active safety functions, parking function, and cruise function are realized; Active safety functions of the vehicle are implemented during and after switching from the first mode to the second mode.

29. A computer-readable storage medium, characterized in that, The storage medium stores a computer program or instructions, which, when executed, implement the method of any one of claims 16 to 23.

30. A computer program product, characterized in that, The computer program product includes instructions that, when executed, implement the method of any one of claims 16 to 23.

Images