A control method of an airbag controller, an airbag controller, and an airbag device

Abstract

The application provides a control method of a safety airbag controller, the safety airbag controller and device, and is applied to the safety airbag controller, wherein six-axis acceleration data of a vehicle is acquired based on a rolling data acquisition module; a main control verification module and an auxiliary verification module both receive the data, so that the two modules respectively perform safety verification on the data, if both pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal; an airbag ignition driving module receives the signals, when the conditions are met, the airbag ignition driving module outputs an ignition current, and the safety airbag is ignited. The control method of the safety airbag controller, the safety airbag controller and device provided by the application avoid mis-ignition or missed ignition caused by the absence or failure of the safety verification mechanism of the ignition chip, realize the ignition of the safety airbag, and guarantee the safety of the driver and passengers in the rolling working condition.

Description

Technical Field

[0001] This invention relates to the field of automotive airbag testing, and in particular to a control method, airbag controller, and device for an airbag controller. Background Technology

[0002] As a core component of a vehicle's passive safety system, the airbag controller's primary function is to control the inflation and deployment of airbags during a vehicle collision (including rollover). This buffers the impact force on occupants as they slam into hard objects like the steering wheel and dashboard, preventing or mitigating direct injury. To meet the airbag deployment requirements in rollover scenarios, automakers generally use an architecture combining foreign main control chips, foreign rollover IMU chips, and foreign ignition chips. The core working logic is as follows: First, the rollover IMU chip collects six-axis acceleration data, then transmits the data directly to the ignition chip. The ignition chip then performs data security checks, including format verification, integrity verification, and threshold matching. Only after passing these checks can it output an ignition signal, triggering the deployment of side airbags or side curtain airbags. The ignition chip's primary safety verification mode is crucial for ensuring the functional safety level of the airbag controller. Meanwhile, with the gradual advancement of domestic production regulations, the increasing risks in the global supply chain, and the growing demand for vehicle cost control, automakers have begun developing controller solutions based on the domestically produced CCL1600B ignition chip to break free from dependence on foreign chips.

[0003] Under the current technological background, the controller solution based on the domestically produced ignition chip CCL1600B still has many technical defects, making it difficult to meet mass production and functional safety requirements. On the one hand, mainstream rollover IMU chips on the market (such as Bosch SMI860) are available in out-frame and in-frame versions. Currently, only the out-frame version can be stably obtained domestically. However, the domestically produced ignition chip CCL1600B cannot recognize the data stream format of this version of the chip, resulting in the inability to complete the safety verification interaction between the two. If the verification is forcibly bypassed, the functional safety will not meet the standards. On the other hand, the domestic supply of the in-frame version is scarce and cannot support mass production. On the other hand, although the domestically produced Mattel IMU chip MTI270 can meet the rollover data acquisition requirements, its SPI communication protocol is incompatible with the domestically produced ignition chip CCL1600B and cannot pass the ignition chip safety verification. If the safety verification is bypassed by software, the functional safety level requirements of the side airbags / side curtain airbags cannot be met, especially the Level D requirements of high-end vehicles. Summary of the Invention

[0004] The present invention aims to provide a control method, airbag controller and device for airbag controller, so as to solve the above-mentioned technical problems, avoid mis-ignition or leakage ignition due to the lack or failure of the ignition chip safety verification mechanism, realize the ignition of airbag and ensure the safety of passengers in rollover conditions.

[0005] To address the aforementioned technical problems, this invention provides a control method for an airbag controller, applied to an airbag controller. The airbag controller includes a rollover data acquisition module, a main control verification module, an auxiliary verification module, and an airbag ignition drive module, wherein: The original six-axis acceleration data of the vehicle is obtained based on the rollover data acquisition module; The main control verification module and the auxiliary verification module are both controlled to receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform safety verification on the original vehicle six-axis acceleration data respectively. If the safety verification is passed, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal. The airbag ignition drive module receives the ignition control signal and the hardware pull-down signal. When the ignition control signal meets the first ignition condition and the hardware pull-down signal meets the first trigger condition, the airbag ignition drive module outputs ignition current based on the ignition control signal to activate the vehicle's airbag.

[0006] In the above scheme, acquiring raw six-axis acceleration data of the vehicle provides raw sensing data for the airbag controller, supporting subsequent safety verification and ignition decisions. Next, both the main control verification module and the auxiliary verification module receive the raw six-axis acceleration data and perform safety verification separately to ensure that the cross-safety verification by the main control verification module and the auxiliary verification module meets the functional safety level D requirements, ensuring the accuracy and reliability of the safety verification results. Then, after both the main control verification module and the auxiliary verification module pass the safety verification, the auxiliary verification module outputs a data normal signal, and the main control verification module, upon receiving the data normal signal, outputs an ignition control signal and a hardware pull-down signal, providing control commands and hardware support for the ignition action. Subsequently, by controlling the airbag ignition drive module to receive the ignition control signal and the hardware pull-down signal, the ignition trigger conditions are double-confirmed, preventing false ignition or missed ignition. Finally, when the ignition control signal meets the first ignition condition and the hardware pull-down signal meets the first trigger condition, the airbag ignition drive module is controlled to output ignition current to deploy the vehicle's airbag and ensure the safety of passengers in rollover situations.

[0007] Furthermore, the control module and the auxiliary verification module both receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform safety verification on the original vehicle six-axis acceleration data respectively. If both safety verifications pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The main control verification module and the auxiliary verification module are both controlled to receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform format conversion on the original vehicle six-axis acceleration data respectively to obtain the first vehicle six-axis acceleration data. The main control verification module and the auxiliary verification module are controlled to perform safety verification on the six-axis acceleration data of the first vehicle. If the safety verification is passed, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal.

[0008] In the above scheme, by controlling the main control verification module and the auxiliary verification module to synchronously receive the original vehicle six-axis acceleration data, a data benchmark is provided for the subsequent safety verification, improving the reliability of the airbag controller. Next, the main control verification module and the auxiliary verification module convert the format of the original data, uniformly converting the original vehicle six-axis acceleration data output by the rollover data acquisition module into a processable standardized data format. This solves the problem of the airbag ignition drive module and the rollover data acquisition module failing the safety verification due to communication protocol incompatibility. Then, by controlling the main control verification module and the auxiliary verification module to perform safety verification respectively, it is ensured that the cross-safety verification by the main control verification module and the auxiliary verification module meets the functional safety level D requirements, ensuring that the obtained safety verification results are accurate and reliable.

[0009] Further, the main control verification module and the auxiliary verification module respectively perform safety verification on the six-axis acceleration data of the first vehicle. If both safety verifications pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The security verification includes data integrity verification and operating condition verification; The main control verification module and the auxiliary verification module are controlled to perform data integrity verification and operating condition verification on the six-axis acceleration data of the first vehicle, respectively. If both the data integrity verification and the operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal.

[0010] In the above scheme, by controlling the main control verification module and the auxiliary verification module to perform data integrity verification on the six-axle acceleration data of the first vehicle in parallel, it is possible to verify whether the data has been lost, misplaced, or tampered with during transmission, thereby ensuring the reliability of the data entering the operating condition verification and eliminating the risk of misjudgment due to data anomalies. At the same time, operating condition verification is performed in parallel on the six-axle acceleration data of the first vehicle after the data integrity verification has been performed to identify whether the vehicle is in a real rollover hazard state and avoid accidental ignition under non-rollover operating conditions.

[0011] Further, the main control verification module and the auxiliary verification module perform data integrity verification and operating condition verification on the six-axis acceleration data of the first vehicle, respectively; if both the data integrity verification and the operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The main control verification module and the auxiliary verification module are controlled to filter abnormal data from the six-axis acceleration data of the first vehicle and obtain the six-axis acceleration data of the second vehicle. The main control verification module and the auxiliary verification module are controlled to perform data integrity verification and operating condition verification on the six-axis acceleration data of the second vehicle, respectively. If both data integrity verification and operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal.

[0012] In the above scheme, before performing data integrity verification and operating condition verification, the main control verification module and the auxiliary verification module are controlled to filter abnormal data of the first vehicle's six-axis acceleration data. This can identify and remove abnormal data, so that the obtained second vehicle's six-axis acceleration data can more accurately reflect the vehicle's real motion state. This provides a high-quality data foundation for subsequent data integrity verification and operating condition verification, and improves the accuracy and reliability of the verification results.

[0013] Furthermore, the main control verification module adopts the CCFC2012BC50L1 chip.

[0014] The above solution utilizes the domestically produced CCFC2012BC50L1 chip, ensuring the self-sufficiency and controllability of the supply chain. Simultaneously, through the multi-channel SPI and other communication interfaces built into the CCFC2012BC50L1 chip, it can quickly receive the raw six-axis acceleration data of the vehicle collected by the rollover data acquisition module and complete safety verification. It also receives the normal data signal output from the auxiliary verification module, forming a cross-verification mechanism that ensures the accurate output of ignition control signals and hardware pull-down signals, providing control support for airbag deployment.

[0015] Furthermore, the auxiliary verification module uses the KF32A146IQS chip.

[0016] The above solution utilizes the domestically produced KF32A146IQS chip, breaking the dependence on foreign chips and ensuring the self-sufficiency and controllability of the supply chain. Simultaneously, through the KF32A146IQS chip's built-in SPI communication interface, it can quickly receive raw six-axis acceleration data of the vehicle collected by the rollover data acquisition module and complete safety verification, outputting a normal data signal to the main control verification module to form cross-validation. This ensures that the functional safety level D requirements are met, improving the airbag controller's anti-interference capability and reliability in complex in-vehicle environments.

[0017] This invention provides an airbag controller, applied to a control method for an airbag controller as described above, wherein: The first output terminal of the tumbling data acquisition module is electrically connected to the first input terminal of the main control verification module, the first output terminal of the tumbling data acquisition module is electrically connected to the first input terminal of the auxiliary verification module, the first input terminal of the tumbling data acquisition module is electrically connected to the first output terminal of the main control verification module, the second input terminal of the tumbling data acquisition module is electrically connected to the second output terminal of the main control verification module, the second input terminal of the tumbling data acquisition module is electrically connected to the first output terminal of the auxiliary verification module, the third input terminal of the tumbling data acquisition module is electrically connected to the third output terminal of the main control verification module, and the fourth input terminal of the tumbling data acquisition module is used to receive external tumbling power supply. The first input terminal of the main control verification module is electrically connected to the first input terminal of the airbag ignition drive module; the second input terminal of the main control verification module is used to receive external main control power supply; the third input terminal of the main control verification module is electrically connected to the second output terminal of the auxiliary verification module; the fourth input terminal of the main control verification module is electrically connected to the fourth output terminal of the auxiliary verification module; the fifth input terminal of the main control verification module is electrically connected to the third output terminal of the auxiliary verification module; the first output terminal of the main control verification module is electrically connected to the first output terminal of the airbag ignition drive module; the first output terminal of the main control verification module is electrically connected to the auxiliary verification module. The second input terminal of the module is electrically connected; the second output terminal of the main control verification module is electrically connected to the second input terminal of the airbag ignition drive module; the fourth output terminal of the main control verification module is electrically connected to the third input terminal of the airbag ignition drive module; the fifth output terminal of the main control verification module is electrically connected to the fourth input terminal of the airbag ignition drive module; the fifth output terminal of the main control verification module is electrically connected to the fifth output terminal of the auxiliary verification module; the sixth output terminal of the main control verification module is electrically connected to the fifth input terminal of the airbag ignition drive module; and the sixth output terminal of the main control verification module is electrically connected to the sixth output terminal of the auxiliary verification module. The sixth input terminal of the airbag ignition drive module is used to receive external ignition drive power supply, and the second output terminal of the airbag ignition drive module is used to output ignition current.

[0018] This invention provides an airbag controller that, in practical applications, only requires electrically connecting a rollover data acquisition module to both the main control verification module and the auxiliary verification module. This enables the main control verification module and the auxiliary verification module to synchronously acquire the original six-axis acceleration data of the vehicle, ensuring consistency and data homogeneity in safety verification. Next, by receiving an external rollover power supply, the rollover data acquisition module can be independently powered, avoiding interference with power supplies to other modules and ensuring continuous and accurate data acquisition. Then, by receiving an external main control power supply, the main control verification module achieves independent power supply, providing stable energy support for safety verification and ignition control signal output. Finally, by cross-connecting multiple sets of input / output terminals of the main control verification module and the auxiliary verification module, the safety verification results obtained by the two modules can be exchanged in real time. When all safety verifications pass, the auxiliary verification module outputs a data normal signal to the main control verification module, improving fault identification and fault tolerance capabilities. Next, by electrically connecting the output of the main control verification module to the input of the airbag ignition drive module, the ignition control signal and hardware pull-down signal can be accurately delivered to the airbag ignition drive module, triggering the deployment of the vehicle's airbags. Then, by electrically connecting the outputs of the main control verification module and the auxiliary verification module to the input of the airbag ignition drive module, the main control verification module and the auxiliary verification module can coordinately manage the airbag ignition drive module, providing the ignition control signal and hardware pull-down signal only after passing dual verification by both modules. Subsequently, by receiving an external ignition drive power supply at the input of the airbag ignition drive module, it can be independently powered, providing energy for the ignition current output and ensuring reliable airbag deployment. Finally, the ignition current is output through the second output of the airbag ignition drive module, ensuring accurate airbag deployment when conditions are met, effectively protecting the safety of the occupants.

[0019] Furthermore, the main control verification module includes a main control verification MCU chip, a first transistor, a second transistor, a first resistor, a second resistor, a third resistor, and a fourth resistor, specifically: The first input terminal of the main control verification MCU chip serves as the first input terminal of the main control verification module; the second input terminal of the main control verification MCU chip serves as the second input terminal of the main control verification module; the first output terminal of the main control verification MCU chip serves as the first output terminal of the main control verification module; the second output terminal of the main control verification MCU chip serves as the second output terminal of the main control verification module; the third output terminal of the main control verification MCU chip serves as the third output terminal of the main control verification module; and the fourth output terminal of the main control verification MCU chip serves as the fourth output terminal of the main control verification module. The fifth output terminal of the main control verification MCU chip is electrically connected to one end of the first resistor, the fifth output terminal of the main control verification MCU chip is electrically connected to the fifth output terminal of the auxiliary verification module, the sixth output terminal of the main control verification MCU chip is electrically connected to one end of the second resistor, and the sixth output terminal of the main control verification MCU chip is electrically connected to the sixth output terminal of the auxiliary verification module. The other end of the first resistor is electrically connected to the base of the first transistor, and the other end of the first resistor is electrically connected to one end of the third resistor; The other end of the third resistor is grounded; The collector of the first transistor is electrically connected to the fourth input of the airbag ignition drive module as the fifth output terminal of the main control verification module, and the emitter of the first transistor is grounded. The other end of the second resistor is electrically connected to the base of the second transistor, and the other end of the second resistor is electrically connected to one end of the fourth resistor; The other end of the fourth resistor is grounded; The collector of the first transistor is electrically connected to the fifth input of the airbag ignition drive module as the sixth output terminal of the main control verification module, and the emitter of the first transistor is grounded.

[0020] In the above scheme, by electrically connecting the output terminal of the main control verification MCU chip to the first resistor and the second resistor respectively, the current flowing into the base of the first transistor and the second transistor can be limited, preventing the first and second transistors from burning out or the I / O port of the main control verification MCU chip from being damaged. Next, electrically connecting the output terminal of the main control verification MCU chip to the output terminal of the auxiliary verification module allows for dual verification of the hardware pull-down signal of the main control verification MCU chip through the normal data signal output by the auxiliary verification module, improving the reliability of the hardware pull-down signal. Then, by electrically connecting the first resistor to the third resistor and the second resistor to the fourth resistor, with the other ends of the third and fourth resistors both grounded, the base potential of the first and second transistors can be stabilized, preventing false turn-on due to interference from floating pins when there is no control signal at the base, thus reducing the risk of false ignition. Subsequently, by electrically connecting the collectors of the first and second transistors to the input terminals of the airbag ignition drive module, and grounding both the emitters of the first and second transistors, the ignition control signal output by the main control verification MCU chip can be converted into an effective control signal required by the airbag ignition drive module, ensuring the reliable implementation of the ignition enable logic.

[0021] Furthermore, the auxiliary verification module includes an auxiliary verification MCU chip, a third transistor, a fourth transistor, a fifth resistor, a sixth resistor, a seventh resistor, and an eighth resistor, specifically: The first input terminal of the auxiliary verification MCU chip serves as the first input terminal of the auxiliary verification module, the second input terminal of the auxiliary verification MCU chip serves as the second input terminal of the auxiliary verification module, the first output terminal of the auxiliary verification MCU chip serves as the first output terminal of the auxiliary verification module, the second output terminal of the auxiliary verification MCU chip serves as the second output terminal of the auxiliary verification module, the third output terminal of the auxiliary verification MCU chip serves as the third output terminal of the auxiliary verification module, and the fourth output terminal of the auxiliary verification MCU chip serves as the fourth output terminal of the auxiliary verification module. The fifth output terminal of the auxiliary verification MCU chip is electrically connected to one end of the fifth resistor, and the sixth output terminal of the auxiliary verification MCU chip is electrically connected to one end of the sixth resistor. The other end of the fifth resistor is electrically connected to the base of the third transistor; The collector of the third transistor is electrically connected to the fifth output terminal of the auxiliary verification module and the fifth output terminal of the main control verification module, and the emitter of the third transistor is electrically connected to one end of the seventh resistor. The other end of the seventh resistor is grounded; The other end of the sixth resistor is electrically connected to the base of the fourth transistor; The collector of the fourth transistor is electrically connected to the sixth output terminal of the auxiliary verification module and the sixth output terminal of the main control verification module, and the emitter of the fourth transistor is electrically connected to one end of the eighth resistor. The other end of the eighth resistor is grounded.

[0022] In the above scheme, by electrically connecting the output of the auxiliary verification MCU chip to the fifth and sixth resistors respectively, the current flowing into the bases of the third and fourth transistors can be limited, preventing the third and fourth transistors from burning out or the I / O ports of the auxiliary verification MCU chip from being damaged, thus providing protection. Next, by electrically connecting the emitter of the third transistor to the seventh resistor and the emitter of the fourth transistor to the eighth resistor, with the other ends of both the seventh and eighth resistors grounded, the base potentials of the third and fourth transistors can be stabilized, preventing false triggering due to interference from floating pins when there is no control signal at the base, reducing the risk of false ignition. Subsequently, by electrically connecting the output of the auxiliary verification MCU chip to the output of the main control verification MCU chip, the normal data signal output by the auxiliary verification module can be used to double-verify the hardware pull-down signal of the main control verification MCU chip, improving the reliability of the hardware pull-down signal. Finally, if the security checks of the main control verification MCU chip and the auxiliary verification MCU chip fail to pass, the auxiliary verification MCU chip can force the ignition control signal to be pulled low through the third and fourth transistors to avoid the risk of misfire.

[0023] This invention provides an airbag control device, including a housing, within which an airbag controller as described above is disposed; the housing includes a first input interface, a second input interface, a third input interface, and an ignition signal output interface; wherein: The fourth input terminal of the rollover data acquisition module is electrically connected to the first input interface; the second input terminal of the main control verification module is electrically connected to the second input interface; and the sixth input terminal of the airbag ignition drive module is electrically connected to the third input interface. The first input interface is used to receive external rollover power supply; the second input interface is used to receive external main control power supply; and the third input interface is used to receive external ignition drive power supply. The second output terminal of the airbag ignition drive module is electrically connected to the ignition signal output interface, which is used to output ignition current.

[0024] The present invention provides an airbag control device that, in practical applications, only requires connection to the fourth input terminal of the rollover data acquisition module via a first input interface, connection to the second input terminal of the main control verification module via a second input interface, and connection to the second output terminal of the airbag ignition drive module via an ignition signal output interface. This airbag control device avoids mis-ignition or missed ignition due to the lack or failure of the ignition chip safety verification mechanism, thereby enabling the airbag to deploy and ensuring the safety of passengers in rollover conditions. Attached Figure Description

[0025] Figure 1A flowchart of a control method for an airbag controller provided in an embodiment of the present invention; Figure 2 This is an architectural diagram of an airbag controller provided in an embodiment of the present invention; Figure 3 This is a circuit diagram of an airbag controller provided in one embodiment of the present invention. Detailed Implementation

[0026] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0027] This embodiment provides a control method for an airbag controller. Please refer to [link to relevant documentation]. Figure 1 This technology is applied to airbag controllers, which include a rollover data acquisition module, a main control verification module, an auxiliary verification module, and an airbag ignition drive module. Please refer to the airbag controller architecture diagram. Figure 2 ,in: Step S1: Obtain the original six-axis acceleration data of the vehicle based on the rollover data acquisition module; Step S2: Control both the main control verification module and the auxiliary verification module to receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform safety verification on the original vehicle six-axis acceleration data respectively. If the safety verification passes, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal. Step S3: Control the airbag ignition drive module to receive the ignition control signal and the hardware pull-down signal. When the ignition control signal meets the first ignition condition and the hardware pull-down signal meets the first trigger condition, control the airbag ignition drive module to output ignition current based on the ignition control signal to realize the deployment of the car airbag.

[0028] In this embodiment, the rollover data acquisition module uses an MTI270 IMU chip. By acquiring raw vehicle six-axis acceleration data, it provides raw sensing data for the airbag controller, supporting subsequent safety verification and ignition decisions. Next, both the main control verification module and the auxiliary verification module receive the raw vehicle six-axis acceleration data and perform safety verification separately. This ensures that the cross-verification by the main control verification module and the auxiliary verification module meets the functional safety level D requirements. This addresses the issue in current domestically produced airbag controllers where bypassing the ignition chip's safety verification results in a missing critical safety element, leading to the risk of false or missed ignition and failing to meet functional safety level D requirements. This fills an application gap and ensures accurate and reliable safety verification results. Then, after both the main control verification module and the auxiliary verification module pass the safety verification, meeting the rollover requirement, the auxiliary verification module outputs a data normal signal, and the main control verification module, upon receiving the data normal signal, outputs an ignition control signal and a hardware pull-down signal, providing control commands and hardware support for the ignition action. Subsequently, by controlling the airbag ignition drive module to receive the ignition control signal and the hardware pull-down signal, the ignition triggering conditions can be double-confirmed to avoid false ignition or missed ignition. Finally, the airbag ignition drive module uses a CCL1600B2L4 chip, which can control the airbag ignition drive module to output ignition current when the ignition control signal meets the first ignition condition and the hardware pull-down signal meets the first triggering condition, thereby igniting the vehicle's airbag and ensuring the safety of the occupants in rollover situations.

[0029] Furthermore, the control module and the auxiliary verification module both receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform safety verification on the original vehicle six-axis acceleration data respectively. If both safety verifications pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The main control verification module and the auxiliary verification module are both controlled to receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform format conversion on the original vehicle six-axis acceleration data respectively to obtain the first vehicle six-axis acceleration data. The main control verification module and the auxiliary verification module are controlled to perform safety verification on the six-axis acceleration data of the first vehicle. If the safety verification is passed, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal.

[0030] In this embodiment, by controlling the main control verification module and the auxiliary verification module to synchronously receive the original vehicle six-axis acceleration data, a data benchmark is provided for the subsequent simultaneous safety verification, improving the reliability of the airbag controller. Next, the main control verification module and the auxiliary verification module perform format conversion on the original data, uniformly converting the original vehicle six-axis acceleration data output by the rollover data acquisition module into a processable standardized data format. This solves the problem of the airbag ignition drive module and the rollover data acquisition module failing safety verification due to communication protocol incompatibility. Then, by controlling the main control verification module and the auxiliary verification module to perform safety verification respectively, it is ensured that the cross-safety verification by the main control verification module and the auxiliary verification module meets the functional safety level D requirements, ensuring that the obtained safety verification results are accurate and reliable.

[0031] Further, the main control verification module and the auxiliary verification module respectively perform safety verification on the six-axis acceleration data of the first vehicle. If both safety verifications pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The security verification includes data integrity verification and operating condition verification; The main control verification module and the auxiliary verification module are controlled to perform data integrity verification and operating condition verification on the six-axis acceleration data of the first vehicle, respectively. If both the data integrity verification and the operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal.

[0032] In this embodiment, by controlling the main control verification module and the auxiliary verification module to perform parallel data integrity verification on the six-axis acceleration data of the first vehicle, it is possible to verify whether the data has been lost, misplaced, or tampered with during transmission, thereby ensuring the reliability of the data entering the operating condition verification and eliminating the risk of misjudgment due to data anomalies. Simultaneously, operating condition verification is performed in parallel on the six-axis acceleration data of the first vehicle after the data integrity verification to identify whether the vehicle is in a real rollover hazard state, avoiding accidental ignition under non-rollover operating conditions.

[0033] Further, the main control verification module and the auxiliary verification module perform data integrity verification and operating condition verification on the six-axis acceleration data of the first vehicle, respectively; if both the data integrity verification and the operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The main control verification module and the auxiliary verification module are controlled to filter abnormal data from the six-axis acceleration data of the first vehicle and obtain the six-axis acceleration data of the second vehicle. The main control verification module and the auxiliary verification module are controlled to perform data integrity verification and operating condition verification on the six-axis acceleration data of the second vehicle, respectively. If both data integrity verification and operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal.

[0034] In this embodiment, before performing data integrity verification and operating condition verification, the main control verification module and the auxiliary verification module are controlled to filter abnormal data in the first vehicle six-axis acceleration data. This can identify and remove abnormal data, so that the obtained second vehicle six-axis acceleration data can more accurately reflect the vehicle's real motion state. This provides a high-quality data foundation for subsequent data integrity verification and operating condition verification, and improves the accuracy and reliability of the verification results.

[0035] Furthermore, the main control verification module adopts the CCFC2012BC50L1 chip.

[0036] In this embodiment, the domestically produced CCFC2012BC50L1 chip, an MCU chip, is used to ensure the self-controllability of the supply chain and promote the domestic substitution of airbag controllers. The main control verification module acts as the master, while the rollover data acquisition module, auxiliary verification module, and airbag ignition drive module act as slaves, all using the same SPI channel for data transmission. Through the multi-channel SPI and other communication interfaces built into the CCFC2012BC50L1 chip, the original six-axis acceleration data of the vehicle collected by the rollover data acquisition module can be quickly received and safety verified. Simultaneously, the normal data signal output from the auxiliary verification module is received, forming a cross-verification mechanism that ensures the accurate output of ignition control signals and hardware pull-down signals, providing control support for airbag deployment.

[0037] Furthermore, the auxiliary verification module uses the KF32A146IQS chip.

[0038] In this embodiment, the use of the domestically produced KF32A146IQS chip, an MCU chip, breaks the dependence on foreign chips and ensures the self-controllability of the supply chain. Simultaneously, through the built-in SPI communication interface of the KF32A146IQS chip, it can quickly receive the raw six-axis acceleration data of the vehicle collected by the rollover data acquisition module and complete safety verification. Furthermore, the CCFC2012BC50L1 chip and the KF32A146IQS chip can communicate via serial port to determine whether the safety verification of both MCU chips has passed. If both pass, a data normal signal is output to the main control verification module, forming cross-verification to ensure that the functional safety level D requirements are met, thus improving the airbag controller's anti-interference capability and reliability in complex vehicle environments.

[0039] This embodiment uses a domestically produced MCU chip to replace the airbag ignition IMU chip for safety verification, and forces the airbag ignition chip to ignite through ignition control signals and hardware pull-down signals. This not only ensures compatibility with existing mainstream tumble IMU chips such as the Bosch SMI860 out-frame and MTI270, but also effectively avoids the supply shortage of the mainstream tumble IMU chip SMI860 in-frame version. Furthermore, it eliminates the need to adjust the airbag ignition chip or core circuitry due to IMU model changes, shortening the adaptation cycle by more than 50% and reducing iteration costs. Simultaneously, compared to traditional foreign chip solutions, hardware costs are reduced by 20%-30%, eliminating dependence on imported chips, mitigating supply chain risks, and aligning with the "self-reliant and controllable" industrial policy.

[0040] This embodiment provides an airbag controller; please refer to [link / reference]. Figure 2 The method is applied to a control method for an airbag controller as described above, wherein: The first output terminal of the tumbling data acquisition module is electrically connected to the first input terminal of the main control verification module, the first output terminal of the tumbling data acquisition module is electrically connected to the first input terminal of the auxiliary verification module, the first input terminal of the tumbling data acquisition module is electrically connected to the first output terminal of the main control verification module, the second input terminal of the tumbling data acquisition module is electrically connected to the second output terminal of the main control verification module, the second input terminal of the tumbling data acquisition module is electrically connected to the first output terminal of the auxiliary verification module, the third input terminal of the tumbling data acquisition module is electrically connected to the third output terminal of the main control verification module, and the fourth input terminal of the tumbling data acquisition module is used to receive external tumbling power supply. The first input terminal of the main control verification module is electrically connected to the first input terminal of the airbag ignition drive module; the second input terminal of the main control verification module is used to receive external main control power supply; the third input terminal of the main control verification module is electrically connected to the second output terminal of the auxiliary verification module; the fourth input terminal of the main control verification module is electrically connected to the fourth output terminal of the auxiliary verification module; the fifth input terminal of the main control verification module is electrically connected to the third output terminal of the auxiliary verification module; the first output terminal of the main control verification module is electrically connected to the first output terminal of the airbag ignition drive module; the first output terminal of the main control verification module is electrically connected to the auxiliary verification module. The second input terminal of the module is electrically connected; the second output terminal of the main control verification module is electrically connected to the second input terminal of the airbag ignition drive module; the fourth output terminal of the main control verification module is electrically connected to the third input terminal of the airbag ignition drive module; the fifth output terminal of the main control verification module is electrically connected to the fourth input terminal of the airbag ignition drive module; the fifth output terminal of the main control verification module is electrically connected to the fifth output terminal of the auxiliary verification module; the sixth output terminal of the main control verification module is electrically connected to the fifth input terminal of the airbag ignition drive module; and the sixth output terminal of the main control verification module is electrically connected to the sixth output terminal of the auxiliary verification module. The sixth input terminal of the airbag ignition drive module is used to receive external ignition drive power supply, and the second output terminal of the airbag ignition drive module is used to output ignition current.

[0041] This embodiment provides an airbag controller. The rollover data acquisition module uses an MTI270 chip. The first output of the rollover data acquisition module is the master-slave data interface of the MTI270 chip. In practical applications, by electrically connecting the rollover data acquisition module to the main control verification module and the auxiliary verification module respectively, the MTI270 chip can output the acquired raw vehicle six-axis acceleration data from the master-slave data interface, so that the main control verification module and the auxiliary verification module can synchronously acquire the raw vehicle six-axis acceleration data, ensuring the consistency and data homogeneity of safety verification. The first input of the rollover data acquisition module is the master-slave data interface of the MTI270 chip, which can receive configuration commands sent by the main control verification module and the auxiliary verification module. The second input of the rollover data acquisition module is the clock signal interface of the MTI270 chip, which can receive the clock signal of the main control verification module to synchronize the data transmission timing. The third input of the rollover data acquisition module is the chip select control interface of the MTI270 chip, which is used to receive the chip select signal of the main control verification module and activate the MTI270 chip to participate in SPI communication. The fourth input terminal of the rollover data acquisition module is the digital power interface of the MTI270 chip, used to receive external rollover power supply. This allows for independent power supply to the rollover data acquisition module, avoiding interference with power supplies from other modules and ensuring continuous and accurate data acquisition. The first input terminal, second input terminal, and first output terminal of the airbag ignition drive module are the SPI communication interface of the CCL1600B2L4 chip. This allows for coordinated control of the airbag ignition drive module via the SPI channel through the main control verification module and the auxiliary verification module. During dual verification by both the main control verification module and the auxiliary verification module, the airbag ignition drive module provides the ignition control signal, and the main control verification module provides the hardware pull-down signal. The third input terminal of the airbag ignition drive module is the chip select control interface of the CCL1600B2L4 chip, capable of receiving the chip select signal output by the main control verification module to respond to the ignition control signal from the SPI channel. The fourth and fifth input terminals of the airbag ignition drive module are ignition enable interfaces of the CCL1600B2L4 chip, used to receive hardware pull-down signals from the main control verification module. The sixth input terminal of the airbag ignition drive module is the power interface of the CCL1600B2L4 chip, used to receive external ignition drive power, enabling independent power supply to the airbag ignition drive module and providing energy for the ignition current output, ensuring reliable airbag deployment. The second output terminal of the airbag ignition drive module is the ignition current output pin of the CCL1600B2L4 chip, used to output the ignition current through the second output terminal of the airbag ignition drive module, ensuring accurate airbag deployment when conditions are met, effectively protecting the safety of occupants.

[0042] Further, please see Figure 3 The main control verification module includes a main control verification MCU chip, a first transistor Q1, a second transistor Q2, a first resistor R1, a second resistor R2, a third resistor R3, and a fourth resistor R4, specifically: The first input terminal of the main control verification MCU chip serves as the first input terminal of the main control verification module; the second input terminal of the main control verification MCU chip serves as the second input terminal of the main control verification module; the first output terminal of the main control verification MCU chip serves as the first output terminal of the main control verification module; the second output terminal of the main control verification MCU chip serves as the second output terminal of the main control verification module; the third output terminal of the main control verification MCU chip serves as the third output terminal of the main control verification module; and the fourth output terminal of the main control verification MCU chip serves as the fourth output terminal of the main control verification module. The fifth output terminal of the main control verification MCU chip is electrically connected to one end of the first resistor R1, the fifth output terminal of the main control verification MCU chip is electrically connected to the fifth output terminal of the auxiliary verification module, the sixth output terminal of the main control verification MCU chip is electrically connected to one end of the second resistor R2, and the sixth output terminal of the main control verification MCU chip is electrically connected to the sixth output terminal of the auxiliary verification module. The other end of the first resistor R1 is electrically connected to the base of the first transistor Q1, and the other end of the first resistor R1 is electrically connected to one end of the third resistor R3. The other end of the third resistor R3 is grounded; The collector of the first transistor Q1 is electrically connected to the fourth input of the airbag ignition drive module as the fifth output terminal of the main control verification module, and the emitter of the first transistor Q1 is grounded. The other end of the second resistor R2 is electrically connected to the base of the second transistor Q2, and the other end of the second resistor R2 is electrically connected to one end of the fourth resistor R4. The other end of the fourth resistor R4 is grounded; The collector of the first transistor Q1 is electrically connected to the fifth input of the airbag ignition drive module as the sixth output terminal of the main control verification module, and the emitter of the first transistor Q1 is grounded.

[0043] In this embodiment, the main control verification MCU chip CCFC2012BC50L1 chip, the first transistor Q1 and the second transistor Q2 are NPN type, and the first resistor R1 and the third resistor R3 are both NPN type ... The second resistor R2 and the fourth resistor R4 are both The first input terminal of the main control verification module is a general-purpose I / O expansion interface of the main control verification MCU chip. It is used to acquire the raw vehicle six-axis acceleration data transmitted via the SPI channel, perform data parsing and format conversion within the chip, and then replace the ignition chip CCL1600B2L4 to perform safety verification. The second input terminal of the main control verification module is the power interface of the main control verification MCU chip, used to receive external main control power supply, achieving independent power supply and providing stable energy support for safety verification and outputting ignition control signals. The third, fourth, and fifth input terminals of the main control verification module are general-purpose I / O expansion interfaces of the main control verification MCU chip. They are used to cross-connect multiple sets of input / output terminals of the main control verification module and the auxiliary verification module, enabling real-time interaction of the safety verification results obtained between the main control verification module and the auxiliary verification module. When all safety verifications pass, the auxiliary verification module outputs a data normal signal to the main control verification module, improving fault identification and fault tolerance capabilities. The first, second, and third output terminals of the main control verification module serve as general-purpose I / O expansion interfaces for the main control verification MCU chip. The fourth output terminal of the main control verification module also serves as a general-purpose I / O expansion interface. By electrically connecting the output terminal of the main control verification module to the input terminal of the airbag ignition drive module, it ensures that the ignition control signal and hardware pull-down signal are accurately delivered to the airbag ignition drive module, thereby triggering the deployment of the vehicle's airbag. The fifth and sixth output terminals of the main control verification MCU chip are also general-purpose I / O expansion interfaces. By electrically connecting the output terminals of the main control verification MCU chip to the first resistor R1 and the second resistor R2, respectively, it limits the current flowing into the bases of the first transistor Q1 and the second transistor Q2, preventing the first transistor Q1 and the second transistor Q2 from burning out or the I / O ports of the main control verification MCU chip from being damaged. Next, the output of the main control verification MCU chip is electrically connected to the output of the auxiliary verification module. This allows for dual verification of the hardware pull-down signal of the main control verification MCU chip through the normal data signal output by the auxiliary verification module, improving the reliability of the hardware pull-down signal. Then, by electrically connecting the first resistor R1 to the third resistor R3, and the second resistor R2 to the fourth resistor R4, with the other ends of the third resistor R3 and the fourth resistor R4 both grounded, the base potentials of the first transistor Q1 and the second transistor Q2 can be kept stable. This prevents false triggering due to interference caused by the pins being floating when there is no control signal at the base, reducing the risk of false ignition.Simultaneously, when the hardware pull-down signals output from the fifth and sixth output terminals of the main control verification MCU chip meet the first trigger condition, the base potentials of the first transistor Q1 and the second transistor Q2 are set to high, turning on the first transistor Q1 and the second transistor Q2. Subsequently, by electrically connecting the collectors of the first transistor Q1 and the second transistor Q2 to the input terminal of the airbag ignition drive module, and grounding both the emitters of the first transistor Q1 and the second transistor Q2, when the first transistor Q1 and the second transistor Q2 are turned on, the collectors of the first transistor Q1 and the second transistor Q2 are pulled low, thus satisfying the ignition requirement. This allows the ignition control signal output from the main control verification MCU chip to be converted into the effective control signal required by the airbag ignition drive module, ensuring the reliable implementation of the ignition enable logic.

[0044] Furthermore, the auxiliary verification module includes an auxiliary verification MCU chip, a third transistor Q3, a fourth transistor Q4, a fifth resistor R5, a sixth resistor R6, a seventh resistor R7, and an eighth resistor R8, specifically: The first input terminal of the auxiliary verification MCU chip serves as the first input terminal of the auxiliary verification module, the second input terminal of the auxiliary verification MCU chip serves as the second input terminal of the auxiliary verification module, the first output terminal of the auxiliary verification MCU chip serves as the first output terminal of the auxiliary verification module, the second output terminal of the auxiliary verification MCU chip serves as the second output terminal of the auxiliary verification module, the third output terminal of the auxiliary verification MCU chip serves as the third output terminal of the auxiliary verification module, and the fourth output terminal of the auxiliary verification MCU chip serves as the fourth output terminal of the auxiliary verification module. The fifth output terminal of the auxiliary verification MCU chip is electrically connected to one end of the fifth resistor R5, and the sixth output terminal of the auxiliary verification MCU chip is electrically connected to one end of the sixth resistor R6. The other end of the fifth resistor R5 is electrically connected to the base of the third transistor Q3; The collector of the third transistor Q3 is electrically connected to the fifth output terminal of the auxiliary verification module and the fifth output terminal of the main control verification module, and the emitter of the third transistor Q3 is electrically connected to one end of the seventh resistor R7. The other end of the seventh resistor R7 is grounded; The other end of the sixth resistor R6 is electrically connected to the base of the fourth transistor Q4; The collector of the fourth transistor Q4 is electrically connected to the sixth output terminal of the auxiliary verification module and the sixth output terminal of the main control verification module, and the emitter of the fourth transistor Q4 is electrically connected to one end of the eighth resistor R8. The other end of the eighth resistor R8 is grounded.

[0045] In this embodiment, the auxiliary verification MCU chip is a KF32A146IQS chip, the third transistor Q3 and the fourth transistor Q4 are NPN type, and the fifth resistor R5 and the seventh resistor R7 are both NPN type ... The sixth resistor R6 and the eighth resistor R8 are both The first input terminal of the auxiliary verification module is a general-purpose I / O expansion interface of the auxiliary verification MCU chip, used to acquire the original six-axis acceleration data of the vehicle transmitted through the SPI channel. After data parsing and format conversion within the chip, it replaces the ignition chip CCL1600B2L4 chip to perform safety verification. The second input terminal of the auxiliary verification module is a general-purpose I / O expansion interface of the auxiliary verification MCU chip, which acquires configuration commands sent by the main control verification module through the SPI channel. The first output terminal of the auxiliary verification module is a general-purpose I / O expansion interface of the auxiliary verification MCU chip, capable of sending configuration commands to the roll data acquisition module. The second, third, and fourth output terminals of the auxiliary verification module are general-purpose I / O expansion interfaces of the auxiliary verification MCU chip, capable of multiple cross-connections with the main control verification module. This allows for real-time interaction of the safety verification results obtained between the main control verification module and the auxiliary verification module, so that when all safety verifications pass, the auxiliary verification module outputs a data normal signal to the main control verification module, improving fault identification and fault tolerance capabilities. The fifth and sixth output terminals of the auxiliary verification module serve as general-purpose I / O expansion interfaces for the auxiliary verification MCU chip. By electrically connecting the output terminals of the auxiliary verification MCU chip to the fifth resistor R5 and the sixth resistor R6 respectively, the current flowing into the base of the third transistor Q3 and the base of the fourth transistor Q4 can be limited, preventing the third transistor Q3 and the fourth transistor Q4 from burning out or the I / O port of the auxiliary verification MCU chip from being damaged, thus providing protection. Next, by electrically connecting the emitter of the third transistor Q3 to the seventh resistor R7 and the emitter of the fourth transistor Q4 to the eighth resistor R8, with the other ends of both the seventh resistor R7 and the eighth resistor R8 grounded, the base potential of the third transistor Q3 and the fourth transistor Q4 can be stabilized, preventing false triggering due to interference caused by the pins being floating when there is no control signal at the base, thus reducing the risk of false ignition. Subsequently, by electrically connecting the output of the auxiliary verification MCU chip and the output of the main control verification MCU chip, the data normal signal output by the auxiliary verification module can be used to double verify the hardware pull-down signal of the main control verification MCU chip, thereby improving the reliability of the hardware pull-down signal. Finally, when the safety verification of both the main control verification MCU chip and the auxiliary verification MCU chip fails, the auxiliary verification MCU chip can force the ignition control signal low through the third transistor Q3 and the fourth transistor Q4. Specifically, by setting the base potential of the third transistor Q3 and the fourth transistor Q4 to a high level, the third transistor Q3 and the fourth transistor Q4 are turned on, thereby pulling the collectors of both the third transistor Q3 and the fourth transistor Q4 low. This results in the bases of the first and second collectors being at a low level, preventing the ignition chip CCL1600B2L4 from meeting the forced ignition conditions and avoiding the risk of mis-ignition.When the vehicle does not need to meet the functional safety level D requirement, the chip can be omitted from the airbag controller, and the auxiliary verification module can be reserved instead.

[0046] This embodiment provides an airbag control device, including a housing, within which an airbag controller as described above is disposed; the housing includes a first input interface, a second input interface, a third input interface, and an ignition signal output interface; wherein: The fourth input terminal of the rollover data acquisition module is electrically connected to the first input interface; the second input terminal of the main control verification module is electrically connected to the second input interface; and the sixth input terminal of the airbag ignition drive module is electrically connected to the third input interface. The first input interface is used to receive external rollover power supply; the second input interface is used to receive external main control power supply; and the third input interface is used to receive external ignition drive power supply. The second output terminal of the airbag ignition drive module is electrically connected to the ignition signal output interface, which is used to output ignition current.

[0047] The airbag control device provided in this embodiment only needs to be connected to the fourth input terminal of the rollover data acquisition module through the first input interface, the second input interface to the second input terminal of the main control verification module, and the ignition signal output interface to the second output terminal of the airbag ignition drive module in practical applications. In this way, the airbag control device can avoid mis-ignition or missed ignition due to the lack or failure of the ignition chip safety verification mechanism, so as to realize the ignition of the airbag and ensure the safety of the driver and passengers in the rollover condition.

[0048] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A control method of an airbag controller characterized by, This is applied to an airbag controller, which includes a rollover data acquisition module, a main control verification module, an auxiliary verification module, and an airbag ignition drive module, wherein: The original six-axis acceleration data of the vehicle is obtained based on the rollover data acquisition module; The main control verification module and the auxiliary verification module are both controlled to receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform safety verification on the original vehicle six-axis acceleration data respectively. If the safety verification is passed, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal. The airbag ignition drive module receives the ignition control signal and the hardware pull-down signal. When the ignition control signal meets the first ignition condition and the hardware pull-down signal meets the first trigger condition, the airbag ignition drive module outputs ignition current based on the ignition control signal to activate the vehicle's airbag.

2. The control method of an airbag controller according to claim 1, characterized by, The control module, including the main control verification module and the auxiliary verification module, receives the original vehicle six-axis acceleration data. Both modules perform safety verifications on the original vehicle six-axis acceleration data. If both safety verifications pass, the auxiliary verification module outputs a data normal signal, allowing the main control verification module to receive the data normal signal and output an ignition control signal and a hardware pull-down signal, including: The main control verification module and the auxiliary verification module are both controlled to receive the original vehicle six-axis acceleration data, so that the main control verification module and the auxiliary verification module perform format conversion on the original vehicle six-axis acceleration data respectively to obtain the first vehicle six-axis acceleration data. The main control verification module and the auxiliary verification module are controlled to perform safety verification on the six-axis acceleration data of the first vehicle. If the safety verification is passed, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal.

3. The control method of the airbag controller according to claim 2, characterized by, The main control verification module and the auxiliary verification module perform safety verification on the six-axis acceleration data of the first vehicle. If both safety verifications pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The security verification includes data integrity verification and operating condition verification; The main control verification module and the auxiliary verification module are controlled to perform data integrity verification and operating condition verification on the six-axis acceleration data of the first vehicle, respectively. If both the data integrity verification and the operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs the ignition control signal and the hardware pull-down signal.

4. The control method of the airbag controller according to claim 3, characterized by, The main control verification module and the auxiliary verification module perform data integrity verification and operating condition verification on the six-axis acceleration data of the first vehicle, respectively. If both the data integrity verification and the operating condition verification pass, the auxiliary verification module outputs a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal, including: The main control verification module and the auxiliary verification module are controlled to filter abnormal data from the six-axis acceleration data of the first vehicle and obtain the six-axis acceleration data of the second vehicle. The main control verification module and the auxiliary verification module are controlled to perform data integrity verification and operating condition verification on the six-axis acceleration data of the second vehicle, respectively. If both data integrity verification and operating condition verification pass, the auxiliary verification module is instructed to output a data normal signal, so that the main control verification module receives the data normal signal and outputs an ignition control signal and a hardware pull-down signal.

5. The control method of an airbag controller according to claim 1, characterized by, The main control verification module uses the CCFC2012BC50L1 chip.

6. The control method of an airbag controller according to claim 1, characterized by, The auxiliary verification module uses the KF32A146IQS chip.

7. An airbag controller characterized by comprising: The control method for an airbag controller as described in any one of claims 1 to 5, wherein: The first output terminal of the tumbling data acquisition module is electrically connected to the first input terminal of the main control verification module, the first output terminal of the tumbling data acquisition module is electrically connected to the first input terminal of the auxiliary verification module, the first input terminal of the tumbling data acquisition module is electrically connected to the first output terminal of the main control verification module, the second input terminal of the tumbling data acquisition module is electrically connected to the second output terminal of the main control verification module, the second input terminal of the tumbling data acquisition module is electrically connected to the first output terminal of the auxiliary verification module, the third input terminal of the tumbling data acquisition module is electrically connected to the third output terminal of the main control verification module, and the fourth input terminal of the tumbling data acquisition module is used to receive external tumbling power supply. The first input terminal of the main control verification module is electrically connected to the first input terminal of the airbag ignition drive module; the second input terminal of the main control verification module is used to receive external main control power supply; the third input terminal of the main control verification module is electrically connected to the second output terminal of the auxiliary verification module; the fourth input terminal of the main control verification module is electrically connected to the fourth output terminal of the auxiliary verification module; the fifth input terminal of the main control verification module is electrically connected to the third output terminal of the auxiliary verification module; the first output terminal of the main control verification module is electrically connected to the first output terminal of the airbag ignition drive module; the first output terminal of the main control verification module is electrically connected to the auxiliary verification module. The second input terminal of the module is electrically connected; the second output terminal of the main control verification module is electrically connected to the second input terminal of the airbag ignition drive module; the fourth output terminal of the main control verification module is electrically connected to the third input terminal of the airbag ignition drive module; the fifth output terminal of the main control verification module is electrically connected to the fourth input terminal of the airbag ignition drive module; the fifth output terminal of the main control verification module is electrically connected to the fifth output terminal of the auxiliary verification module; the sixth output terminal of the main control verification module is electrically connected to the fifth input terminal of the airbag ignition drive module; and the sixth output terminal of the main control verification module is electrically connected to the sixth output terminal of the auxiliary verification module. The sixth input terminal of the airbag ignition drive module is used to receive external ignition drive power supply, and the second output terminal of the airbag ignition drive module is used to output ignition current.

8. The airbag controller of claim 7 wherein, The main control verification module includes a main control verification MCU chip, a first transistor, a second transistor, a first resistor, a second resistor, a third resistor, and a fourth resistor, specifically: The first input terminal of the main control verification MCU chip serves as the first input terminal of the main control verification module; the second input terminal of the main control verification MCU chip serves as the second input terminal of the main control verification module; the first output terminal of the main control verification MCU chip serves as the first output terminal of the main control verification module; the second output terminal of the main control verification MCU chip serves as the second output terminal of the main control verification module; the third output terminal of the main control verification MCU chip serves as the third output terminal of the main control verification module; and the fourth output terminal of the main control verification MCU chip serves as the fourth output terminal of the main control verification module. The fifth output terminal of the main control verification MCU chip is electrically connected to one end of the first resistor, the fifth output terminal of the main control verification MCU chip is electrically connected to the fifth output terminal of the auxiliary verification module, the sixth output terminal of the main control verification MCU chip is electrically connected to one end of the second resistor, and the sixth output terminal of the main control verification MCU chip is electrically connected to the sixth output terminal of the auxiliary verification module. The other end of the first resistor is electrically connected to the base of the first transistor, and the other end of the first resistor is electrically connected to one end of the third resistor; The other end of the third resistor is grounded; The collector of the first transistor is electrically connected to the fourth input of the airbag ignition drive module as the fifth output terminal of the main control verification module, and the emitter of the first transistor is grounded. The other end of the second resistor is electrically connected to the base of the second transistor, and the other end of the second resistor is electrically connected to one end of the fourth resistor; The other end of the fourth resistor is grounded; The collector of the first transistor is electrically connected to the fifth input of the airbag ignition drive module as the sixth output terminal of the main control verification module, and the emitter of the first transistor is grounded.

9. The airbag controller of claim 8 wherein, The auxiliary verification module includes an auxiliary verification MCU chip, a third transistor, a fourth transistor, a fifth resistor, a sixth resistor, a seventh resistor, and an eighth resistor, specifically: The first input terminal of the auxiliary verification MCU chip serves as the first input terminal of the auxiliary verification module, the second input terminal of the auxiliary verification MCU chip serves as the second input terminal of the auxiliary verification module, the first output terminal of the auxiliary verification MCU chip serves as the first output terminal of the auxiliary verification module, the second output terminal of the auxiliary verification MCU chip serves as the second output terminal of the auxiliary verification module, the third output terminal of the auxiliary verification MCU chip serves as the third output terminal of the auxiliary verification module, and the fourth output terminal of the auxiliary verification MCU chip serves as the fourth output terminal of the auxiliary verification module. The fifth output terminal of the auxiliary verification MCU chip is electrically connected to one end of the fifth resistor, and the sixth output terminal of the auxiliary verification MCU chip is electrically connected to one end of the sixth resistor. The other end of the fifth resistor is electrically connected to the base of the third transistor; The collector of the third transistor is electrically connected to the fifth output terminal of the auxiliary verification module and the fifth output terminal of the main control verification module, and the emitter of the third transistor is electrically connected to one end of the seventh resistor. The other end of the seventh resistor is grounded; The other end of the sixth resistor is electrically connected to the base of the fourth transistor; The collector of the fourth transistor is electrically connected to the sixth output terminal of the auxiliary verification module and the sixth output terminal of the main control verification module, and the emitter of the fourth transistor is electrically connected to one end of the eighth resistor. The other end of the eighth resistor is grounded.

10. An airbag control device, characterized in that, The system includes a housing, within which is disposed an airbag controller as described in any one of claims 7 to 9; the housing includes a first input interface, a second input interface, a third input interface, and an ignition signal output interface; wherein: The fourth input terminal of the rollover data acquisition module is electrically connected to the first input interface; the second input terminal of the main control verification module is electrically connected to the second input interface; and the sixth input terminal of the airbag ignition drive module is electrically connected to the third input interface. The first input interface is used to receive external rollover power supply; the second input interface is used to receive external main control power supply; and the third input interface is used to receive external ignition drive power supply. The second output terminal of the airbag ignition drive module is electrically connected to the ignition signal output interface, which is used to output ignition current.

Images