Ring power supply reconstruction circuit, method, device and medium for vehicle-mounted domain controller

Abstract

The application provides a ring power supply reconstruction circuit, method, equipment and medium for a vehicle-mounted domain controller, comprising: a ring power supply topology composed of multiple power supply rails, adjacent power supply rails are connected bidirectionally through a pair of back-to-back MOS tubes, the gates are driven by independent gate control signals, one end of a thermistor is connected with a power supply, the other end is connected with one end of a window comparator, one end of a current monitoring chip is connected with a current detection resistor, the other end is connected with one end of the window comparator; an electronic fuse is connected in series on the power supply rail, a voltage sampling module is connected with the electronic fuse and the window comparator, an input end of an EMI probe is connected with a power supply, an output end is connected with one end of a detection circuit, the other end of the detection circuit is connected with one end of the window comparator, the other end of the window comparator is connected with a mathematical voter. The ring power supply reconstruction circuit realizes microsecond-level adaptive self-healing for thermal-electric-magnetic coupling faults of the vehicle-mounted domain controller.

Description

Technical Field

[0001] This application relates to the technical field of vehicle domain controllers, and in particular to ring power reconfiguration circuits, methods, devices and media for vehicle domain controllers. Background Technology

[0002] In-vehicle domain controllers (DCUs, such as cockpit domain and intelligent driving domain) are the core carriers of in-vehicle hardware. Their integration and power density are constantly increasing, facing the constraints of the triple extreme in-vehicle environment: high temperature, strong electromagnetic interference, and power transient failures. Existing fault handling solutions for in-vehicle domain controllers mainly fall into two categories: First, the response delay problem of software-level fault recovery, such as using watchdog and heartbeat monitoring to detect faults and then scheduling the activation of backup components or the execution of fault recovery processes by software. This solution has a fault handling delay of more than 100 milliseconds. Second, the power redundancy at the hardware level, with a single decision dimension, such as dual power modules (1+1 redundancy) or a single PMIC solution. In the event of a fault, it relies on automatic hardware switching, but the switching decision is based only on voltage and current parameters, without considering the impact of temperature distribution on the reliability after reconfiguration, and without solving the problem of changes in electromagnetic radiation characteristics after power reconfiguration. Meanwhile, in the field of automotive domain controllers, due to stricter space constraints (limited PCB area), higher heat dissipation density, and more stringent electromagnetic compatibility requirements, there is a conflict between space and energy consumption. Directly transplanting existing ring topologies has its shortcomings. The monitoring of four dimensions—temperature, voltage, current, and EMI—operates independently and lacks a hardware-level collaborative voting mechanism. Therefore, how to improve the accuracy and efficiency of automotive domain controller control has become a significant technical problem. Summary of the Invention

[0003] In view of this, the purpose of this application is to provide a ring power reconfiguration circuit, method, device and medium for vehicle domain controllers, which realizes microsecond-level adaptive self-healing of thermal-electric-magnetic coupling faults in vehicle domain controllers by utilizing the ring power reconfiguration circuit.

[0004] This application provides a ring power reconfiguration circuit for an in-vehicle domain controller, the ring power reconfiguration circuit comprising: A ring power topology consisting of multiple power rails, with adjacent power rails bidirectionally connected by a pair of back-to-back MOSFETs. The gates of each pair of back-to-back MOSFETs are driven by independent gate control signals. Each power rail is equipped with a thermistor, electronic fuse, current sensing resistor, current monitoring chip, window comparator, voltage sampling module, EMI probe, detector circuit and mathematical voter. One end of the thermistor is connected to the power supply, and the other end of the thermistor is connected to one end of the window comparator. The current sensing resistor is connected in series in the load circuit of the power rail. One end of the current monitoring chip is connected to the current sensing resistor, and the other end of the current monitoring chip is connected to one end of the window comparator. The electronic fuse is connected in series on the power rail. The voltage sampling module is connected to the electronic fuse and the mathematical voter. The input end of the EMI probe is connected to the power supply, and the output end of the EMI probe is connected to one end of the detection circuit. The other end of the detection circuit is connected to one end of the window comparator, and the other end of the window comparator is connected to the mathematical voter.

[0005] In one possible implementation, the ring power reconfiguration circuit further includes: The thermistor acquires the temperature signal of the power supply, the EMI probe and the detection circuit acquire the electromagnetic radiation intensity signal of the power supply, the voltage sampling module acquires the voltage signal of the current, and the current detection resistor and the current monitoring chip acquire the current signal of the power supply. The temperature signal, the electromagnetic radiation intensity signal, the voltage signal and the current signal are first sent to the window comparator for conversion and then sent to the mathematical voting unit.

[0006] In one possible implementation, the EMI probe and detection circuit are also connected to an EMI self-calibration circuit, which is controlled by a mathematical voter that can switch spread spectrum parameters or enable multi-point grounding when the decision enters a reconstruction mode.

[0007] In one possible implementation, the back-to-back MOS transistors are N-MOS transistors, with the sources of each pair of MOS transistors connected to each other and their drains connected to two adjacent power rails respectively. The diodes of the two pairs are reverse-biased to achieve bidirectional blocking.

[0008] In one possible implementation, the mathematical voter also outputs: The fault signal is sent to the main chip or load management unit, and the enable signal is sent to the N-level low-voltage power supply or load, which is used to shut down the load step by step according to the functional safety level.

[0009] This application also provides a ring power reconfiguration method for vehicle domain controllers, the ring power reconfiguration method comprising: The temperature, voltage, current and electromagnetic radiation intensity signals of each power source are collected in real time and converted into first digital level signals, second digital level signals, third digital level signals and fourth digital level signals by window comparators, respectively, and then input into the mathematical voter to determine whether the power source should enter the reconstruction mode. In reconfiguration mode, the mathematical voter calculates the thermal weight of each adjacent channel, selects the channel with the lowest thermal weight, outputs the corresponding back-to-back MOS transistor gate control signal to turn it on, and simultaneously disconnects the electronic fuse of the faulty power rail to establish a power borrowing path. If the reconstruction is successful, monitoring will continue; if the reconstruction fails, the load will be shut down tier by tier through the failure signal.

[0010] In one possible implementation, whether the power supply enters a reconfiguration mode is determined by the following method: When the second digital level signal or the third digital level signal fails, and the first digital level signal and the fourth digital level signal are both valid, the system enters the reconstruction mode.

[0011] Furthermore, for each adjacent channel, the thermal weight of each adjacent channel is calculated in the following way: Calculate the first difference between the voltage corresponding to the current temperature and the voltage corresponding to the warning temperature; Calculate the second difference between the voltage corresponding to the maximum allowable temperature and the voltage corresponding to the warning temperature; Divide the first difference by the second difference, and then multiply by the reference voltage to obtain the thermal weight.

[0012] This application also provides an electronic device, including: a processor, a memory, and a bus. The memory stores machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the memory via the bus. When the machine-readable instructions are executed by the processor, the steps of the ring power reconfiguration method for vehicle domain controllers described above are performed.

[0013] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, performs the steps of the ring power reconfiguration method for an on-board domain controller as described above.

[0014] This application provides a ring power reconfiguration circuit, method, device, and medium for a ring-oriented vehicle domain controller. The ring power reconfiguration circuit includes: a ring power topology composed of multiple power rails, with adjacent power rails bidirectionally connected by a pair of back-to-back MOSFETs. The gate of each pair of back-to-back MOSFETs is driven by an independent gate control signal. Each power rail is equipped with a thermistor, an electronic fuse, a current sensing resistor, a current monitoring chip, a window comparator, a voltage sampling module, an EMI probe, a detector circuit, and a mathematical voter. One end of the thermistor is connected to the power supply, and the other end of the thermistor is connected to the window comparator. One end of the comparator is connected, the current sensing resistor is connected in series in the load circuit of the power rail, one end of the current monitoring chip is connected to the current sensing resistor, and the other end of the current monitoring chip is connected to one end of the window comparator. The electronic fuse is connected in series on the power rail. The voltage sampling module is connected to both the electronic fuse and the window comparator. The input end of the EMI probe is connected to the power supply, and the output end of the EMI probe is connected to one end of the detection circuit. The other end of the detection circuit is connected to one end of the window comparator, and the other end of the window comparator is connected to the mathematical voter. A ring power reconfiguration circuit is used to achieve microsecond-level adaptive self-healing of thermal-electro-magnetic coupling faults in the vehicle domain controller.

[0015] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0016] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0017] Figure 1 This is one of the schematic diagrams of a ring power reconfiguration circuit for an in-vehicle domain controller provided in an embodiment of this application; Figure 2 This is a second schematic diagram of a ring power reconfiguration circuit for an in-vehicle domain controller provided in an embodiment of this application; Figure 3 A flowchart illustrating a ring power reconfiguration method for an in-vehicle domain controller provided in an embodiment of this application; Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0018] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can generally be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely represents selected embodiments of this application. Based on the embodiments of this application, every other embodiment obtained by those skilled in the art without inventive effort falls within the scope of protection of this application.

[0019] First, the applicable application scenarios of this application will be introduced. This application can be applied to the technical field of vehicle domain controllers.

[0020] Research has revealed that existing fault handling solutions for automotive domain controllers mainly fall into two categories: First, there's the software-level response delay issue in fault recovery. For example, after detecting a fault using watchdog timers and heartbeat monitoring, software schedules the activation of backup components or the execution of the fault recovery process, resulting in a fault handling delay exceeding hundreds of milliseconds. Second, there's the hardware-level power redundancy with a single decision-making dimension. This includes dual power modules (1+1 redundancy) or a single PMIC solution, which relies on automatic hardware switching during faults. However, the switching decision is based solely on voltage and current parameters, neglecting the impact of temperature distribution on post-reconfiguration reliability and failing to address the issue of changes in electromagnetic radiation characteristics after power reconfiguration. Furthermore, in the automotive domain controller field, due to stricter space constraints (limited PCB area), higher heat dissipation density, and more stringent electromagnetic compatibility requirements, there is a conflict between space and energy consumption. Directly transplanting existing ring topologies has shortcomings. Monitoring of temperature, voltage, current, and EMI operates independently, lacking a hardware-level collaborative voting mechanism. Therefore, improving the accuracy and efficiency of automotive domain controller control has become a significant technical challenge.

[0021] Based on this, the embodiments of this application provide a ring power reconfiguration circuit for vehicle domain controllers, which realizes microsecond-level adaptive self-healing of thermal-electric-magnetic coupling faults in vehicle domain controllers.

[0022] Please see Figure 1 , Figure 1 This is one of the schematic diagrams of a ring power reconfiguration circuit for an in-vehicle domain controller provided in an embodiment of this application. Figure 1As shown in the figure, the ring power reconfiguration circuit for vehicle domain controllers provided in this application includes: a ring power topology consisting of multiple power rails, with adjacent power rails bidirectionally connected by a pair of back-to-back MOSFETs. The gate of each pair of back-to-back MOSFETs is driven by an independent gate control signal. Each power rail is equipped with a thermistor, an electronic fuse, a current sensing resistor, a current monitoring chip, a window comparator, a voltage sampling module, an EMI probe, a detector circuit, and a mathematical voter. One end of the thermistor is connected to the power supply, and the other end of the thermistor is connected to one end of the window comparator. The current sensing resistor is connected in series in the load circuit of the power rail. One end of the current monitoring chip is connected to the current sensing resistor, and the other end of the current monitoring chip is connected to one end of the window comparator. The electronic fuse is connected in series on the power rail. The voltage sampling module is connected to the electronic fuse and the mathematical voter. The input end of the EMI probe is connected to the power supply. The output end of the EMI probe is connected to one end of the detection circuit. The other end of the detection circuit is connected to one end of the window comparator, and the other end of the window comparator is connected to the mathematical voter.

[0023] In a specific implementation, these analog voltage, current, and temperature values ​​are compared with the same type of analog values ​​from adjacent power supplies using a comparator for channel selection. For example, if power supply A fails, the voltage of power supplies B and D is compared; if power supply B fails, the current of power supplies A and C is compared. Typically, power supply reconfiguration is performed: first, a thermal weighting factor is calculated by inputting the previously collected voltages into the analog circuit and calculating the minimum thermal weight W_thermal; then, channel selection logic is performed. If there are adjacent channels that can be borrowed, the channel with the lowest W_thermal is selected for power borrowing; if all adjacent channels exceed the threshold, reconfiguration is rejected.

[0024] Here, the hardware is configured with multiple thermistors, which can be placed at the power rail inlet, below the power device, or on the heat sink contact surface, etc., and the high-frequency sampling frequency is specified to be greater than or equal to 1kHz. Each reconfigurable power channel is associated with at least one thermistor. The thermistor is sampled by a voltage divider circuit and then input to a comparator to determine whether the voltage value exceeds the safety threshold at the corresponding temperature.

[0025] The electronic fuse, connected in series on the power rail, provides overcurrent / short-circuit protection, reverse connection protection, and soft-start functionality. The enable pin receives the control signal from the mathematical voter; it is pulled high under normal conditions and pulled low to shut down in case of a fault. The FAULT pin is also connected, pulled low in case of a fault, and directly provides an interrupt signal to the voter. A series current sampling resistor is located on the high side of the power supply, ensuring that the output voltage of the current monitoring chip is proportional to the current. This voltage is then output to a window comparator for threshold judgment. The window comparator (analog front-end) handles only single-signal judgment. It takes continuous analog signals (voltage, current, EMI) as input and uses two comparators (upper and lower limits) to determine if the input signal is within the set range. If within the range, it outputs a normal signal (e.g., high level); otherwise, it outputs a fault signal (e.g., low level). The output is directly given to the mathematical voter, achieving microsecond-level hardware judgment without CPU intervention.

[0026] Here, multiple broadband electromagnetic probes are set up and placed in key locations such as the high-speed signal area and near the power module within the vehicle domain controller. Each probe is converted into a DC voltage signal by a detection circuit composed of diodes and RC filters, which is then input to a hardware voter to determine whether the electromagnetic interference exceeds the standard.

[0027] It should be noted that the mathematical voting unit is implemented using programmable logic devices (such as CPLDs or small-capacity FPGAs) or high-speed hardware logic gate arrays. Its core is a pre-configurable lookup table (LUT) or a hardwired state machine. Here, the mathematical voting unit is a hardware system composed of multiple functional sub-circuits, divided into three levels based on their functions: Level 1: Conditional decision, which converts four physical signals into digital levels using a window comparator; Level 2: Mode discrimination, which uses a logic gate array to determine the operating mode of four OK signals; and Level 3: Channel selection, which uses an analog comparator array to select the optimal channel from multiple adjacent channels.

[0028] In one possible implementation, the ring power reconfiguration circuit further includes: The thermistor acquires the temperature signal of the power supply, the EMI probe and the detection circuit acquire the electromagnetic radiation intensity signal of the power supply, the voltage sampling module acquires the voltage signal of the current, and the current detection resistor and the current monitoring chip acquire the current signal of the power supply. The temperature signal, the electromagnetic radiation intensity signal, the voltage signal and the current signal are first sent to the window comparator for conversion and then sent to the mathematical voting unit.

[0029] The analog / digital signals from the aforementioned thermistor, voltage sampling module, current monitoring chip, and wide-band EMI probe are processed by signal conditioning circuitry and then uniformly output to the corresponding input terminals of the data voting unit in the decision-making layer. The high-frequency sampling rate of all signals ensures the data refresh requirements for microsecond-level fault response.

[0030] For further details, please refer to Figure 2 , Figure 2 This is a second schematic diagram of a ring power reconfiguration circuit for an in-vehicle domain controller provided in an embodiment of this application. Figure 2 As shown, the EMI probe and detection circuit are also connected to an EMI self-calibration circuit, which is controlled by a mathematical voter. When the decision enters the reconstruction mode, the spread spectrum parameters can be switched or multi-point grounding can be enabled.

[0031] Here, clock spreading parameters (such as spreading depth and modulation frequency) are dynamically adjusted based on the current EMI status to reduce electromagnetic radiation peaks. Simultaneously, the MOS switch can be controlled to automatically close the grounding spring of the shield corresponding to the faulty channel, converting the original floating ground state to multi-point grounding. This ensures a low-impedance discharge path between the shield and the ground plane, suitable for high-frequency scenarios. For example, if the control logic is 0, it means the switch is open and the shield is floating; if the logic is 1, it means the switch is closed and the shield is connected to ground. Therefore, when power supply A fails, grounding spring 1 is opened, power supply channel B carries current and closes grounding spring 2, power supply C also closes its grounding spring, and so on.

[0032] In one possible implementation, the back-to-back MOS transistors are N-MOS transistors, with the sources of each pair of MOS transistors connected to each other and their drains connected to two adjacent power rails respectively. The diodes of the two pairs are reverse-biased to achieve bidirectional blocking.

[0033] Here, each pair of power supplies is bidirectionally connected back-to-back by a pair of MOSFETs. N-MOSFETs are used to reduce the voltage drop when borrowing power. The sources of the two N-MOSFETs in each group are connected together (common source). The parasitic diodes of the two MOSFETs are opposite to each other and cancel each other out, achieving bidirectional turn-off. The two drains are connected to two power rails respectively, and the current can flow bidirectionally when borrowing power, achieving mutual backup. The gates of each pair of back-to-back MOSFETs are controlled by a single line of hardware voting. The gates of the MOSFETs in each group are controlled independently. In case of a fault, only the MOSFET with the optimal path is closed to avoid circulating current.

[0034] In one possible implementation, the mathematical voter also outputs: a fault signal to the main chip or load management unit, and an enable signal to the N-level low-voltage power supply or load, for shutting down the load step by step according to the functional safety level.

[0035] Please see Figure 3 , Figure 3 This is a flowchart illustrating a ring power reconfiguration method for an in-vehicle domain controller, provided as an embodiment of this application. Figure 3 As shown in the embodiments of this application, the ring power reconfiguration method includes: S301: The temperature signal, voltage signal, current signal and electromagnetic radiation intensity signal of each power supply are collected in real time and converted into a first digital level signal, a second digital level signal, a third digital level signal and a fourth digital level signal respectively through a window comparator, and then input into the mathematical voter to determine whether the power supply should enter the reconstruction mode.

[0036] In this step, the temperature signal, voltage signal, current signal and electromagnetic radiation intensity signal of each power supply are converted into a first digital level signal, a second digital level signal, a third digital level signal and a fourth digital level signal by a window comparator, and then input into a mathematical voter to determine whether the power supply should enter the reconstruction mode.

[0037] Among them, the first digital level signal, the second digital level signal, the third digital level signal, and the fourth digital level signal correspond to T_OK, V_OK, I_OK, and E_OK, respectively.

[0038] In one possible implementation, the determination of whether to enter the power supply reconfiguration mode is made by: entering the reconfiguration mode when the second digital level signal or the third digital level signal fails, and the first digital level signal and the fourth digital level signal are both valid.

[0039] Here, if all four digital level signals meet the conditions, the system is judged to be in normal mode, maintaining the independent operation of the power supply. If V_OK=0 or I_OK=0, the power supply fails, and T_OK=1 and E_OK=1, the system is judged to be in reconfiguration mode, intelligent power reconfiguration is performed, and power borrowing is selected. If T_OK=0 or E_OK=0, the system is judged to be in protection mode, and the system is safely shut down.

[0040] S302: In reconfiguration mode, the mathematical voter calculates the thermal weight of each adjacent channel, selects the channel with the lowest thermal weight, outputs the corresponding back-to-back MOS transistor gate control signal to turn it on, and at the same time disconnects the electronic fuse of the faulty power rail to establish a power borrowing path.

[0041] In this step, under reconfiguration mode, the mathematical voter calculates the thermal weight of each adjacent channel, selects the channel with the lowest thermal weight, disconnects the electronic fuse of the faulty branch, closes the MOS pair switch of the selected adjacent channel, establishes a bypass path, and switches the spread spectrum parameters to multiple grounding points. A hard-wired interrupt signal is sent to the main chip to help inform the main chip that the power system has undergone hardware-level self-healing behavior, facilitating software fault recording, state synchronization, and function degradation processing.

[0042] It should be noted that when a power rail fails, the hardware voter first identifies available adjacent channels with similar voltage levels and the feasibility of mutual power borrowing. "Adjacent channel" refers to a power rail in a ring power topology that is directly connected to the faulty channel via a back-to-back MOSFET switch pair, has a similar voltage level, and is feasible for power borrowing. Not all adjacent channels are suitable for power borrowing. The power borrowing feasibility logic can be screened from the following three aspects: ① Voltage compatibility: The nominal voltage deviation between the two power rails must be within the allowable range of the target load, generally requiring ΔV ≤ ±10%; ② Current carrying capacity: The rated output current of the borrowing channel must be greater than its own original load current + the load current of the faulty channel (or the critical part), otherwise it may be overloaded. For example, power supply B is rated at 5A, its own DDR load accounts for 3A, and the SOC core current of power supply A is 12A → it is not allowed to directly borrow all of its power; the load of power supply A needs to be graded, and only the core part is retained; ③ Thermal weighting factor: Among all candidate adjacent channels that meet the voltage compatibility and current carrying capacity requirements, the channel with the lowest thermal weight (i.e., the lowest current temperature) is selected.

[0043] In one possible implementation, the thermal weight of each adjacent channel is calculated in the following manner: Calculate the first difference between the voltage corresponding to the current temperature and the voltage corresponding to the warning temperature; calculate the second difference between the voltage corresponding to the maximum allowable temperature and the voltage corresponding to the warning temperature; divide the first difference by the second difference and multiply by the reference voltage to obtain the thermal weight.

[0044] S303: If the reconstruction is successful, continue monitoring; if the reconstruction fails, shut down the load step by step through the failure signal.

[0045] Here, successful reconstruction is confirmed as follows: Assuming four low-voltage power supplies ABCD, each power chip output is equipped with an electronic fuse and a MOSFET, and they are connected in a ring topology via back-to-back N-MOS pairs. Specifically, MOS_AB consists of a pair of MOS1 and MOS2. Power supply A outputs to the drain of MOS1, and the sources and gates of MOS1 and MOS2 are interconnected. The drain of MOS2 is connected to the output of power supply B, and so on. Power supply D is connected to the output of power supply A through MOS, forming a closed loop. The gate of each MOS switch is controlled by an independent signal line from a hardware voter.

[0046] In a specific implementation, Step 1: System Power-On and Hardware Self-Test – The domain controller powers on, the system power is established, and the mathematical voter, thermistor, current monitoring chip, window comparator, voltage sampling module, and EMI probe complete self-tests. Each MOSFET in the ring power reconfiguration matrix is ​​set to its default state (adjacent channel switches are open, electronic fuses are on), and the system enters four-dimensional collaborative mode. Step 2: Real-time Data Acquisition at the Sensing Layer (Continuous Operation) – The thermistor acquires the temperature of each power channel at a frequency ≥1kHz, inputs it to the comparator to determine if it exceeds the safety threshold, and outputs T_OK; the window comparator monitors whether each power rail is within ±5% of the nominal value and outputs V_OK level; the current monitoring chip detects the current of each channel in real time and outputs I_OK level; the EMI probe converts the voltage to DC voltage via a detector, compares it with the standard limit, and outputs E_OK level; all four signals are input to the mathematical voter. Step 3: The mathematical voting unit simultaneously evaluates four conditions: T_OK, V_OK, I_OK, and E_OK. If V_OK=0 or I_OK=0, the power supply is considered faulty, and T_OK=1 and E_OK=1, indicating a reconfiguration mode. The unit then enters intelligent power reconfiguration mode and selects a power source. Step 4: The hardware voting unit performs power reconfiguration. First, it calculates the thermal weighting factor by inputting the previously collected voltage into the analog circuit and calculating the output voltage signal W_thermal. Next, it performs channel selection logic. If a neighboring channel can be borrowed, it selects the channel with the lowest W_thermal power source. If all neighboring channels exceed the threshold, reconfiguration is rejected, and the process proceeds to Step 5. Step 5: If reconfiguration is successful, the unit returns to Step 2 for further monitoring. If reconfiguration fails, it executes tiered load management, shutting down loads step by step according to functional safety standards, using GPIO to control the corresponding load switches for shutdown.

[0047] This application provides a ring power reconfiguration method for an in-vehicle domain controller. The method includes: real-time acquisition of temperature, voltage, current, and electromagnetic radiation intensity signals from various power supplies, which are then converted into first, second, third, and fourth digital level signals via a window comparator. These signals are then input into a mathematical voter to determine whether to enter a reconfiguration mode for the power supply. In reconfiguration mode, the mathematical voter calculates the thermal weight of each adjacent channel, selects the channel with the lowest thermal weight, outputs the corresponding back-to-back MOS transistor gate control signal to turn it on, and simultaneously disconnects the electronic fuse of the faulty power rail to establish a power borrowing path. If the reconfiguration is successful, monitoring continues; if the reconfiguration fails, the load is shut down tier by tier via a failure signal. This ring power reconfiguration circuit achieves microsecond-level adaptive self-healing for thermal-electromagnetic coupling faults in the in-vehicle domain controller.

[0048] Please see Figure 4 , Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Figure 4 As shown, the electronic device 400 includes a processor 410, a memory 420, and a bus 430.

[0049] The memory 420 stores machine-readable instructions executable by the processor 410. When the electronic device 400 is running, the processor 410 communicates with the memory 420 via the bus 430. When the machine-readable instructions are executed by the processor 410, they can perform the operations described above. Figure 3 The specific implementation of the ring power reconfiguration method for the vehicle domain controller in the method embodiment shown can be found in the method embodiment, and will not be repeated here.

[0050] This application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, can perform the above-described actions. Figure 3 The specific implementation of the ring power reconfiguration method for the vehicle domain controller in the method embodiment shown can be found in the method embodiment, and will not be repeated here.

[0051] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0052] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. The apparatus embodiments described above are merely illustrative. For example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. Furthermore, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Additionally, the shown or discussed mutual couplings, direct couplings, or communication connections may be through some communication interfaces; indirect couplings or communication connections between devices or units may be electrical, mechanical, or other forms.

[0053] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0054] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0055] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a processor-executable, non-volatile, computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0056] Finally, it should be noted that the above-described embodiments are merely specific implementations of this application, used to illustrate the technical solutions of this application, and not to limit them. The scope of protection of this application is not limited thereto. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments, or make equivalent substitutions for some of the technical features, within the scope of the technology disclosed in this application. Such modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application, and should all be covered within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A ring power reconfiguration circuit for vehicle domain controllers, characterized in that, The ring power reconfiguration circuit includes: A ring power topology consisting of multiple power rails is described, with adjacent power rails bidirectionally connected by a pair of back-to-back MOSFETs. The gate of each pair of back-to-back MOSFETs is driven by an independent gate control signal. Each power rail is equipped with a thermistor, electronic fuse, current sensing resistor, current monitoring chip, window comparator, voltage sampling module, EMI probe, detector circuit, and mathematical voter. The back-to-back MOSFETs are N-MOS transistors, with the sources of each pair of MOSFETs interconnected and their drains connected to two adjacent power rails respectively. The diodes of the two pairs are reverse-biased to achieve bidirectional blocking. One end of the thermistor is connected to the power supply, and the other end of the thermistor is connected to one end of the window comparator. The current sensing resistor is connected in series in the load circuit of the power rail. One end of the current monitoring chip is connected to the current sensing resistor, and the other end of the current monitoring chip is connected to one end of the window comparator. The electronic fuse is connected in series on the power rail. The voltage sampling module is connected to both the electronic fuse and the window comparator. The input end of the EMI probe is connected to the power supply, and the output end of the EMI probe is connected to one end of the detection circuit. The other end of the detection circuit is connected to one end of the window comparator, and the other end of the window comparator is connected to the mathematical voter. The mathematical voter determines whether to enter the reconfiguration mode for the power supply. In the reconfiguration mode, the mathematical voter calculates the thermal weight of each adjacent channel, selects the channel with the lowest thermal weight, outputs the corresponding back-to-back MOS transistor gate control signal to turn it on, and simultaneously disconnects the electronic fuse of the faulty power rail to establish a power borrowing path.

2. The ring power supply reconfiguration circuit according to claim 1, characterized in that, The ring power reconfiguration circuit further includes: The thermistor acquires the temperature signal of the power supply, the EMI probe and the detection circuit acquire the electromagnetic radiation intensity signal of the power supply, the voltage sampling module acquires the voltage signal of the power supply, and the current detection resistor and the current monitoring chip acquire the current signal of the power supply. The temperature signal, the electromagnetic radiation intensity signal, the voltage signal and the current signal are first sent to the window comparator for conversion and then sent to the mathematical voting unit.

3. The ring power supply reconfiguration circuit according to claim 1, characterized in that, The EMI probe and detection circuit are also connected to an EMI self-calibration circuit, which is controlled by a mathematical voter. When the decision enters the reconstruction mode, the spread spectrum parameters can be switched or multi-point grounding can be enabled.

4. The ring power supply reconfiguration circuit according to claim 1, characterized in that, The mathematical voting device also outputs: The fault signal is sent to the main chip or load management unit, and the enable signal is sent to the N-level low-voltage power supply or load, which is used to shut down the load step by step according to the functional safety level.

5. A ring power supply reconfiguration method for vehicle-mounted domain controllers, characterized in that, The ring power reconfiguration method is applied to the ring power reconfiguration circuit for an in-vehicle domain controller as described in any one of claims 1-4, and the ring power reconfiguration method includes: The temperature, voltage, current and electromagnetic radiation intensity signals of each power source are collected in real time and converted into first digital level signals, second digital level signals, third digital level signals and fourth digital level signals by window comparators, respectively, and then input into the mathematical voter to determine whether the power source should enter the reconstruction mode. In reconfiguration mode, the mathematical voter calculates the thermal weight of each adjacent channel, selects the channel with the lowest thermal weight, outputs the corresponding back-to-back MOS transistor gate control signal to turn it on, and simultaneously disconnects the electronic fuse of the faulty power rail to establish a power borrowing path. If the reconstruction is successful, monitoring will continue; if the reconstruction fails, the load will be shut down tier by tier through the failure signal.

6. The ring power supply reconfiguration method according to claim 5, characterized in that, The following method is used to determine whether the power supply should enter reconfiguration mode: When the second digital level signal or the third digital level signal fails, and the first digital level signal and the fourth digital level signal are both valid, the system enters the reconstruction mode.

7. The ring power supply reconfiguration method according to claim 5, characterized in that, For each adjacent channel, the heat weight of each adjacent channel is calculated in the following way: Calculate the first difference between the voltage corresponding to the current temperature and the voltage corresponding to the warning temperature; Calculate the second difference between the voltage corresponding to the maximum allowable temperature and the voltage corresponding to the warning temperature; Divide the first difference by the second difference, and then multiply by the reference voltage to obtain the thermal weight.

8. An electronic device, characterized in that, include: The device includes a processor, a memory, and a bus. The memory stores machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the memory via the bus. The machine-readable instructions are executed by the processor to perform the steps of the ring power reconfiguration method for an in-vehicle domain controller as described in any one of claims 5 to 7.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, performs the steps of the ring power reconfiguration method for an in-vehicle domain controller as described in any one of claims 5 to 7.

Images