Power supply control method and device of domain controller and vehicle end control equipment

Abstract

The application relates to a power supply control method and device of a domain controller and a vehicle end control device, and relates to the technical field of vehicles.The method comprises the following steps: in each function module power supply rail of the domain controller, acquiring power supply demand of a connected power consumption load of a first power supply rail in an abnormal state of a target fault type, and acquiring load state data of each second power supply rail in a normal state; acquiring voltage data, load margin and function safety level included in the load state data of each second power supply rail; determining a target borrowed power supply rail from each second power supply rail based on at least one of the power supply demand and the voltage data, the load margin and the function safety level of each second power supply rail; and supplying power to the power consumption load of the first power supply rail through the target borrowed power supply rail. The method can reduce the probability of the power supply rail in the normal working state being forced to experience power supply transient disturbance.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to a power supply control method, apparatus and vehicle-side control equipment for a domain controller. Background Technology

[0002] The domain controller of an intelligent vehicle integrates multiple functional modules, each requiring a power rail with a different nominal voltage. Therefore, a domain controller typically needs around 10 power supply channels to meet the power requirements of each functional module for normal operation. Related technologies generally employ a redundant power supply architecture for domain controller power supply systems, which involves setting up two independent power inputs and using power monitoring and selection circuitry to switch all loads to the backup power supply when a main power failure is detected.

[0003] The applicant's research revealed that when the domain controller power supply system in the relevant technology experiences a partial failure of the front-end electrical components of one of the power supply rails, the system can only switch the entire power supply domain to the backup power supply. This forces the power supply rails that were originally in normal working condition to also experience transient power supply disturbances. Summary of the Invention

[0004] Based on this, this application addresses the aforementioned technical problems by providing a power supply control method, apparatus, vehicle-end control equipment, computer-readable storage medium, and computer program product for a domain controller that can reduce the transient power supply disturbances that the normally powered rail is forced to experience.

[0005] In a first aspect, this application provides a power supply control method for a domain controller, the method comprising:

[0006] In the power supply rails of each functional module of the domain controller, obtain the power demand of the load connected to the first power supply rail which is in an abnormal state of the target fault type, and obtain the load status data of each second power supply rail which is in a normal state.

[0007] Obtain the voltage data, load margin, and functional safety level included in the load status data of each of the second power supply rails;

[0008] Based on the power supply demand and at least one of the voltage data, load margin and functional safety level of each of the second power supply rails, a target borrowed power supply rail is determined from each of the second power supply rails;

[0009] The target uses the power supply rail to supply power to the electrical load of the first power supply rail.

[0010] In this embodiment, when the first power supply rail of each functional module power supply rail in the domain controller is experiencing an abnormal fault of the target fault type, the load status data of each of the second power supply rails in normal state and the power supply demand of the electrical load of the first power supply rail are used to obtain the voltage data, load margin, and functional safety level included in the load status data of each second power supply rail. Based on at least one of the power supply demand and the voltage data, load margin, and functional safety level of each second power supply rail, a target borrowed power supply rail suitable for the electrical load of the first power supply rail is determined from multiple second power supply rails. This target borrowed power supply rail is then used to borrow power for the electrical load of the first power supply rail. This avoids the situation where all functional module power supply rails need to be switched to backup power when one functional module power supply rail in the domain controller fails, reducing the probability that functional module power supply rails in normal working state are forced to experience power supply transient disturbances. It also helps to reduce the possibility of damage to electrical components caused by power supply disturbances to the electrical loads of functional module power supply rails, thereby helping to ensure the overall safety of the vehicle.

[0011] In an alternative embodiment of the first aspect, determining the target borrowed power rail from each of the second power rails based on at least one of the power supply demand and the voltage data of each of the second power rails, the load margin, and the functional safety level includes:

[0012] Based on the power supply requirements and at least one of the voltage data, load margin and functional safety level of each of the second power supply rails, candidate borrowed power supply rails are determined among the second power supply rails.

[0013] Determine the weighted evaluation score of the voltage data, load margin, and functional safety level for each of the candidate borrowed power rails;

[0014] Based on the weighted evaluation scores of each of the candidate borrowed power rails, the target borrowed power rail is determined from the candidate borrowed power rails.

[0015] In this embodiment, by considering the power demand of the load on the first power supply rail and at least one of the three factors—voltage data, load margin, and functional safety level—included in the load status data of each second power supply rail, candidate borrowed power rails suitable for borrowing power from the first power supply rail are first selected from all the second power supply rails. If the number of candidate borrowed power rails is not unique, the voltage data, load margin, and functional safety level of each candidate borrowed power rail are further weighted and calculated. Then, based on the calculated weighted evaluation score, the target borrowed power rail is determined from the multiple candidate borrowed power rails. Using this method to select and determine the target borrowed power rail from multiple second power supply rails helps ensure that when the determined target borrowed power rail is used to borrow power from the load on the first power supply rail, it does not affect the power supply of the target borrowed power rail to its own original load, thus helping to ensure the overall operational stability of the domain controller.

[0016] In an alternative embodiment of the first aspect, determining candidate borrowed power rails among the second power rails based on the power supply demand and the voltage data of each of the second power rails includes:

[0017] Obtain the nominal voltage from the power supply requirement, and the current output voltage from each of the voltage data;

[0018] The voltage margin of the relevant second power supply rail is determined based on the nominal voltage and the current output voltage, and the voltage sum value corresponding to the sum of each voltage margin and the nominal voltage is determined.

[0019] If the current output voltage is greater than the corresponding voltage and value, the corresponding second power supply rail is determined as a candidate borrowed power supply rail.

[0020] This embodiment provides a method for determining candidate borrowed power rails from multiple second power rails. Specifically, it first determines the voltage margin that each second power rail can borrow relative to the first power rail by using the nominal voltage in the power supply demand and the current output voltage in each load status data. Then, it determines the second power rails whose current output voltage in each load status data is greater than the sum of each voltage margin and the nominal voltage as candidate borrowed power rails. This ensures that each determined candidate borrowed power rail has sufficient redundant voltage to provide to the first power rail and ensures that the loads on the first power rail can be driven normally, thereby helping to ensure the overall working stability of the domain controller.

[0021] In an alternative embodiment of the first aspect, determining candidate borrowed power rails among the second power rails based on the power supply demand and the respective functional safety level of each second power rail includes:

[0022] Determine the first functional safety level in the power supply requirement, and the second functional safety level of each of the second power supply rails;

[0023] If the second functional safety level is less than or equal to the first functional safety level, the corresponding second power supply rail is identified as a candidate borrowed power supply rail.

[0024] This embodiment provides a method for determining candidate borrowed power rails from multiple second power rails. Specifically, it involves first determining the first functional safety level in the power supply demand corresponding to the first power rail, and determining the second functional safety level in the load status data corresponding to each second power rail. Second power rails with a second functional safety level less than or equal to the first functional safety level are identified as candidate borrowed power rails. This ensures that the functional safety level of each candidate borrowed power rail is lower than that of the first power rail, minimizing the possibility of insufficient power supply capacity from the relevant second power rails to their respective loads due to the candidate borrowed power rails borrowing power from the first power rail. This approach helps to ensure the overall operational safety of the domain controller when using candidate borrowed power rails to borrow power from the first power rail, reducing operational safety issues caused by some second power rails borrowing power from the first power rail, and also contributing to the overall operational safety of the vehicle.

[0025] In an optional embodiment of the first aspect, the method for determining the candidate borrowed power rail further includes:

[0026] Determine the target current value corresponding to the product of the rated current of each of the second power supply rails and the preset borrowing safety factor;

[0027] If the current load current of the second power supply rail is less than the target current value, the second power supply rail is identified as a candidate borrowed power supply rail; the current load current being less than the target current value indicates that the relevant second power supply rail has the load margin.

[0028] In this embodiment, a method is provided to determine candidate borrowed power rails from multiple second power rails. Specifically, the rated current of each second power rail and a corresponding preset borrowing safety factor are first obtained. Then, the target current value corresponding to the product of the rated current of each second power rail and the preset borrowing safety factor is determined. If the current load current of the second power rail is less than the target current value, then each of the relevant second power rails has a certain load margin. These second power rails are then determined as candidate borrowed power rails to ensure that the current margin of each determined candidate borrowed power rail is sufficient, and that there is enough redundant current to be borrowed to the load of the first power rail while ensuring its own power load.

[0029] In an alternative embodiment of the first aspect, determining the weighted evaluation score of the voltage data, the load margin, and the functional safety level for each of the candidate borrowed power rails includes:

[0030] Based on the load type of the electrical load on the first power supply rail, determine the weighting coefficients that are respectively adapted to the voltage data, the load margin, and the functional safety level;

[0031] Based on the voltage data, load margin, and functional safety level of each candidate borrowed power rail, and the weighting coefficients respectively adapted to the voltage data, load margin, and functional safety level, a weighted evaluation score for each candidate borrowed power rail is determined.

[0032] In this embodiment, the weighting coefficients for three factors—voltage data, load margin, and functional safety level—are first determined based on the load type of the electrical load on the first power supply rail. Then, for each candidate borrowed power supply rail, a weighted evaluation score is calculated based on its load status data, including voltage data, load margin, and functional safety level, as well as the corresponding weighting coefficients. This allows for the application of different weighting coefficients to calculate the weighted evaluation scores of the relevant candidate borrowed power supply rails, depending on the load type of the first power supply rail that experienced an anomaly. This improves the accuracy of the calculated weighted evaluation scores of the candidate borrowed power supply rails, and facilitates the subsequent selection of target borrowed power supply rails that are more suitable for borrowing power from the electrical load on the first power supply rail based on the differences in weighted evaluation scores.

[0033] In an optional embodiment of the first aspect, supplying power to the electrical load of the first power rail via the target borrowed power rail includes:

[0034] Based on the rated current of the target borrowed power rail, the preset borrowing safety factor, and the current load current, determine the current margin that the target borrowed power rail can currently borrow.

[0035] Based on the rated operating current of the first power supply rail, the functional safety level, and the current available current margin, the peak value of the borrowed current is determined.

[0036] Based on the rated operating current, a minimum operating current adapted to the first power supply rail is determined, and when the peak value of the borrowed current is greater than or equal to the minimum operating current, power is supplied to the electrical load of the first power supply rail based on the target borrowed power supply rail.

[0037] In this embodiment, the current available current margin of the target borrowed power rail is first determined. Then, combined with the rated operating current and functional safety level of the first power rail, the peak value of the borrowed current of the target borrowed power rail is determined. The peak value of the borrowed current of the target borrowed power rail is then compared with the minimum operating current required by the first power rail. If the comparison result shows that the peak value of the borrowed current is greater than or equal to the minimum operating current, power is supplied to the electrical load of the first power rail based on the determined target borrowed power rail. This ensures that the current output from the target borrowed power rail to the electrical load of the first power rail can achieve normal and stable power supply control for the electrical load, while also ensuring that the target borrowed power rail can stably drive and control its own electrical load and the electrical load of the first power rail.

[0038] In an optional embodiment of the first aspect, the method further includes:

[0039] If the peak value of the borrowed current is less than the minimum operating current, an additional borrowed power supply rail is determined, and the additional borrowed power supply rail and the target borrowed power supply rail are used as the updated target borrowed power supply rail.

[0040] If the peak borrowing current of the updated target borrowed power rail is less than the minimum operating current, return to the step of determining the additional borrowed power rail and using the additional borrowed power rail and the target borrowed power rail as the updated target borrowed power rail; until the peak borrowing current of the updated target borrowed power rail is greater than or equal to the minimum operating current, power is supplied to the electrical load of the first power rail based on the updated target borrowed power rail.

[0041] In this embodiment, if the peak borrowing current of the target borrowed power supply rail is compared with the minimum operating current required by the first power supply rail, and the comparison result is that the peak borrowing current is less than the minimum operating current, it indicates that the target borrowed power supply rail determined at this time cannot independently achieve normal drive control of the electrical load of the first power supply rail. At this time, an additional borrowed power supply rail can be further determined, and the additional borrowed power supply rail and the previously determined target borrowed power supply rail are combined to form an updated target borrowed power supply rail. When the peak borrowing current corresponding to the updated target borrowed power supply rail is greater than or equal to the minimum operating current, the electrical load of the first power supply rail is powered based on the updated target borrowed power supply rail. Alternatively, if the peak borrow current of the updated target borrowed power rail is still less than the minimum operating current, the process returns to determining the additional borrowed power rail and using the additional borrowed power rail and the target borrowed power rail as the updated target borrowed power rail. This continues until the peak borrow current of the updated target borrowed power rail is greater than or equal to the minimum operating current. Then, power is supplied to the load of the first power rail based on the updated target borrowed power rail. This allows multiple power rails to be determined from multiple second power rails to form the updated target borrowed power rail, ensuring stable drive control of the load of the first power rail through the borrowed power output from multiple second power rails.

[0042] Secondly, this application also provides a power supply control device for a domain controller, the device comprising:

[0043] The load data determination module is used to obtain the power demand of the electrical load connected to the first power supply rail in an abnormal state of the target fault type in each functional module power supply rail of the domain controller, and to obtain the load status data of each second power supply rail in a normal state.

[0044] The normal rail data determination module is used to obtain the voltage data, load margin and functional safety level included in the load status data of each of the second power supply rails;

[0045] The borrowing rail determination module is used to determine a target borrowing power rail from each of the second power rails based on at least one of the power supply requirements and the voltage data of each of the second power rails, the load margin and the functional safety level.

[0046] The borrowed rail power supply module is used to supply power to the electrical load of the first power supply rail through the target borrowed power supply rail.

[0047] Thirdly, this application also provides a vehicle-side control device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the method described in the first aspect.

[0048] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in the first aspect.

[0049] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the method described in the first aspect.

[0050] Regarding the beneficial effects of any of the technical solutions in the second to fifth aspects mentioned above, refer to the beneficial effects of the corresponding technical solutions in the first aspect; repeated examples will not be listed here. Attached Figure Description

[0051] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0052] Figure 1 This is a schematic diagram of an optional power supply control method for a domain controller in one embodiment;

[0053] Figure 2 This is a schematic diagram of an alternative process for determining a target to borrow a power rail in one embodiment;

[0054] Figure 3 This is a schematic diagram of an optional power supply control method for a domain controller in another embodiment;

[0055] Figure 4 This is an optional flowchart illustrating a method for determining an abnormal power supply rail in one embodiment;

[0056] Figure 5 This is a schematic diagram of an optional power supply control method for a domain controller in yet another embodiment;

[0057] Figure 6 This is a schematic diagram of an optional structure of the power supply control device for a domain controller in one embodiment;

[0058] Figure 7 This is a schematic diagram of an optional internal structure of the vehicle-side control device in one embodiment. Detailed Implementation

[0059] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of this application.

[0060] The terms "first," "second," etc., used in this application may be used to describe various elements, but these elements are not limited by these terms. These terms are used only to distinguish the first element from the second element. The terms "comprising" and "having," and any variations thereof, used in this application, are intended to cover non-exclusive inclusion. The term "multiple" used in this application refers to two or more. The term "and / or" used in this application refers to one of the embodiments, or any combination of multiple embodiments.

[0061] The domain controller of an intelligent vehicle integrates multiple functional modules, including a microcontroller unit, an artificial intelligence processor, an image processor, and communication interfaces. Each functional module requires a power supply rail with a different nominal voltage, and the number of power supply channels is typically 6 to 12. To meet functional safety integrity level requirements, the power supply system of the domain controller in related technologies generally adopts a redundant power supply architecture, that is, setting up two independent power inputs, and using power monitoring and selection circuitry to switch the load to the backup power supply when the main power supply fails.

[0062] For example, related technologies include redundant power supply circuits for powering vehicle domain controllers, comprising a first power supply, a second power supply, and a power redundancy distribution circuit. The outputs of the first and second power supplies are respectively connected to the power redundancy distribution circuit, which enables current sharing and power switching between the two power supplies. Another example is a power supply circuit comprising a main power supply branch, a backup power supply branch, and a switching control circuit. One end of the main power supply branch is connected to the main power supply, and one end of the backup power supply branch is connected to the backup power supply. A switching unit is connected in series on the backup power supply branch. The switching control circuit generates a level signal based on the input state of the main power supply and controls the switching unit to switch the backup power supply branch.

[0063] The redundant power supply architecture in the aforementioned technologies has the following shortcomings in practical applications:

[0064] Firstly, under normal operating conditions, the backup power supply channel is completely idle. The backup power supply and its associated power switching circuit are only activated when the main power supply fails, and do not participate in power supply during most of the vehicle's normal operating time, resulting in a waste of hardware resources.

[0065] Secondly, when a partial failure occurs in the DC-DC (Direct Current to Direct Current Converter) or low-dropout linear regulator at the front end of a voltage rail, the system can only switch the entire power supply domain to the backup power supply. The local single-rail fault is amplified into a global switching event, and other voltage rails that were originally working normally are forced to experience power supply transient disturbances. The scope of the fault impact is much larger than the actual fault scope, resulting in excessively large fault response granularity.

[0066] Third, from the detection of a main power supply failure to the completion of the switching circuit and the establishment of a backup power supply path, a series of steps are required, including signal acquisition, fault determination, and switching action. During the switching transient, the power supply voltage may drop or be interrupted for a short time, which may interfere with the normal operation of sensitive loads in the domain controller.

[0067] This application addresses the aforementioned technical problems by providing a power supply control method for a domain controller that reduces the likelihood of normal power supply rails being forced to experience power supply transient disturbances. This method involves determining the power supply demand of the load on the first power supply rail when it is in an abnormal state and the fault type of the first power supply rail is a target fault type. Then, it identifies the second power supply rails in normal state from among the power supply rails of each functional module and determines the load status data of each second power supply rail. The load status data includes voltage data, load margin, and functional safety level. Based on the power supply demand and the voltage data, load margin, and functional safety level of each second power supply rail, it identifies a target borrowed power supply rail from among the second power supply rails. Power is then supplied to the load on the first power supply rail through the target borrowed power supply rail. This method minimizes the need to switch the power supply of all functional module power supply rails to backup power when one functional module power supply rail fails, reducing the probability of normally functioning functional module power supply rails being forced to experience power supply transient disturbances.

[0068] In one exemplary embodiment, such as Figure 1 As shown, a power supply control method for a domain controller is provided. This method can be applied to a multi-level voltage fault-tolerant power supply system for a domain controller, including steps 101 to 104. Wherein:

[0069] Step 101: In the power supply rails of each functional module of the domain controller, obtain the power supply demand of the load connected to the first power supply rail in an abnormal state of the target fault type, and obtain the load status data of each second power supply rail in a normal state.

[0070] In this context, a domain controller is a specific functional area within the electronic and electrical architecture of an intelligent vehicle. These functional areas may include, for example, the powertrain, chassis, smart cockpit, and autonomous driving. Each domain controller is responsible for handling all functional processing and decision-making calculations within its respective "domain."

[0071] In the case of a specific intelligent driving domain controller, the domain controller may involve multiple functional modules, such as microcontroller units, artificial intelligence processors, image processors, automotive Ethernet switching chips, controller area network transceivers, and sensor signal conditioning circuits. Each functional module has its own corresponding power supply rail. Therefore, the aforementioned "functional module power supply rails" are power supply rails used to supply power to each "functional module." The specific functional module electrically connected to each functional module power supply rail is the electrical load of the relevant functional module power supply rail. The nominal voltage of the electrical loads electrically connected to each functional module power supply rail is different; that is, each functional module requires a power supply rail with a different nominal voltage.

[0072] The first power supply rail is the power supply rail in an abnormal state among the power supply rails of each functional module, or it can be referred to as a power supply rail in a fault state; at the same time or within the same time period, the number of first power supply rails in an abnormal state can be one. However, this application does not limit the time period to two or more first power supply rails in an abnormal state.

[0073] Among them, the fault types of the first power supply rail can involve at least two types, such as front-end conversion circuit failure and load-side short circuit fault.

[0074] The power supply requirements of the electrical loads on the first power supply rail may include, for example, the required current, required voltage, required functional safety level, etc.

[0075] Among them, the power supply rail that is in normal condition among the power supply rails of each functional module is also the second power supply rail, which is the power supply rail that does not show any abnormal working data.

[0076] For example, a multi-level voltage fault-tolerant power supply system monitors the operating electrical data of the power supply rails of each functional module of the domain controller, and determines the operating status of each power supply rail based on the operating electrical data. If the operating status of the first power supply rail among the power supply rails of each functional module is determined to be abnormal, the fault type of the first power supply rail is identified and determined based on the operating electrical data related to the first power supply rail at the time of the occurrence of the abnormal state. If the fault type of the first power supply rail is determined to be the target fault type, the power supply demand of the load on the first power supply rail can be further determined to confirm the power borrowing data of the load that needs to be borrowed from the first power supply rail in the future.

[0077] For example, a multi-level voltage fault-tolerant power supply system can simultaneously determine the power supply rails without abnormal operating data from the power supply rails of each functional module to obtain each second power supply rail in a normal state.

[0078] Step 102: Obtain the voltage data, load margin, and functional safety level included in the load status data of each second power supply rail.

[0079] The load status data of the second power supply rail can be understood as the load status data of the electrical load connected to the second power supply rail, which may include load current data, load voltage data, load margin, load functional safety level, etc.

[0080] For example, a multi-level voltage fault-tolerant power supply system can acquire the load status data of each of the second power supply rails so as to subsequently determine the power supply rails that can be used to borrow power from the loads of the first power supply rail.

[0081] Step 103: Based on the power supply demand and at least one of the following three factors: voltage data, load margin, and functional safety level of each second power supply rail, determine the target borrowed power supply rail from each second power supply rail.

[0082] For example, a multi-level voltage fault-tolerant power supply system can, upon obtaining the power demand of the load on the first power supply rail and the load status data of the load on each of the second power supply rails, evaluate which second power supply rails are suitable for borrowing power from the load on the first power supply rail, so as to identify the target borrowing power supply rail from each of the second power supply rails.

[0083] Step 104: Power the load on the first power supply rail by borrowing power from the target power supply rail.

[0084] For example, after determining the target borrowed power supply rail from each of the second power supply rails, the multi-level voltage fault-tolerant power supply system can use the target borrowed power supply rail to provide borrowed power to the electrical load of the first power supply rail, so as to realize the power supply to the electrical load of the first power supply rail and realize the working drive of the electrical load of the first power supply rail.

[0085] In the aforementioned power supply control method for the domain controller, when the first power supply rail of each functional module's power supply rail in the multi-level voltage fault-tolerant power supply system experiences an abnormal fault of the target fault type, the system obtains the voltage data, load margin, and functional safety level included in the load status data of each second power supply rail in normal condition, along with the power supply demand of the first power supply rail's load. This allows the system to determine the voltage from multiple second power supply rails based on at least one of the power supply demand and the voltage data, load margin, and functional safety level of each second power supply rail. The target borrowed power supply rail is adapted to the electrical load of the first power supply rail, and the target borrowed power supply rail is used to borrow power from the electrical load of the first power supply rail. In this way, it is possible to avoid the situation where the power supply of all functional module power supply rails needs to be switched to the backup power supply if one functional module power supply rail fails. This reduces the probability that the functional module power supply rails that are originally in normal working condition are forced to experience power supply transient disturbances. It also helps to reduce the possibility of damage to electrical components caused by power supply disturbances to the electrical loads of the functional module power supply rails, and thus helps to ensure the overall safety of the vehicle.

[0086] In an exemplary embodiment, the method for identifying the fault type of the first power supply rail includes: acquiring the operating electrical data of each functional module power supply rail in the domain controller, and determining the operating state of each functional module power supply rail based on the operating electrical data. If the operating state of the first power supply rail among the functional module power supply rails is abnormal, the voltage change rate sequence and current change rate sequence at the time of the abnormality are determined based on the operating electrical data related to the first power supply rail at the time of the abnormality. The fault type of the first power supply rail is determined based on the transient correlation coefficient between the voltage change rate sequence and the current change rate sequence; the transient correlation coefficient is used to characterize the degree of correlation between the voltage change and current change of the first power supply rail.

[0087] The voltage change rate sequence includes multiple continuous voltage change rates, which refer to the rate at which voltage changes with time, i.e., the derivative of voltage with respect to time, and are used to directly reflect the stability of voltage.

[0088] The current change rate sequence includes multiple continuous current change rates, which are the derivatives of current with respect to time, representing how fast the current changes per unit time.

[0089] Specifically, the voltage change rate sequence and current change rate sequence at the moment the abnormal state of the first power supply rail occurs are the voltage change rate sequence and current change rate sequence involved in a time period corresponding to the moment the abnormal state of the first power supply rail occurs.

[0090] The transient correlation coefficient between the voltage change rate sequence and the current change rate sequence is used to measure the degree of linear correlation between voltage change and current change, and can be used as a criterion to distinguish between two fault types: front-end conversion circuit failure and load-side short circuit.

[0091] In an exemplary embodiment, the above-described determination of the operating state of each functional module power supply rail based on operating electrical data includes: acquiring the feature reference vector corresponding to the transient response waveform of each functional module power supply rail under a preset current step excitation; the feature reference vector is used to characterize the voltage waveform characteristics of the relevant functional module power supply rail under normal conditions; determining the current feature vector of the transient response waveform of each operating electrical data under each preset sliding window based on the operating electrical data of each functional module power supply rail; and determining the operating state of each functional module power supply rail based on the distance between the feature reference vector corresponding to each functional module power supply rail and the current feature vector.

[0092] In the initialization phase, a preset current step excitation is applied to the power supply rails of each functional module, and the voltage transient response waveform generated by the preset current step excitation is recorded. Feature parameters are extracted from this voltage transient response waveform to form a corresponding feature reference vector. This feature reference vector characterizes the voltage waveform characteristics of the relevant functional module's power supply rails under normal conditions, and can be used to reflect the transient response characteristics of each functional module's power supply rails under healthy conditions, and can be used as a reference standard for subsequent comparisons.

[0093] Among them, the preset current step excitation is a test signal that is artificially set to simulate extreme working conditions. When a "current step" occurs, due to the parasitic inductance and capacitance in the power supply path, the voltage of the power supply rail of the relevant functional module cannot keep up with the change in current instantaneously, resulting in a brief deviation (such as voltage drop or overshoot). Subsequently, the power supply control loop intervenes to pull the voltage back to a stable value. The curve of this voltage fluctuating over time and gradually returning to stability is the "transient response waveform".

[0094] For example, by extracting the most critical values ​​from the transient response waveform (such as the drop amplitude and recovery time mentioned above), and arranging these extracted feature values ​​in a specific order, a multidimensional array, namely the feature reference vector, can be formed.

[0095] Specifically, based on the working electrical data of each functional module's power supply rail, the current feature vector of the transient response waveform of each working electrical data under each preset sliding window is determined. This can be understood as: during the operation phase of the domain controller, the current feature vector of each functional module's power supply rail is extracted using a sliding time window.

[0096] This embodiment provides a method for determining the operating state of each functional module power supply rail. This involves applying a preset current step excitation to each functional module power supply rail and acquiring the feature reference vector corresponding to the generated transient response waveform under the preset current step excitation. Then, the current feature vector of the transient response waveform under each preset sliding window is determined using the operating electrical data of each functional module power supply rail. Finally, the operating state of each functional module power supply rail is determined by calculating the distance between its respective feature reference vector and the current feature vector. Essentially, the operating reference vector of each functional module power supply rail in a healthy state is used as a reference to identify the current feature vector representing the operating state of the relevant functional module power supply rail during subsequent operation. This method ensures the accuracy of identifying the operating state of the functional module power supply rails.

[0097] In an exemplary embodiment, the above-mentioned determination of the working state of each functional module power supply rail based on the distance between the corresponding feature reference vector and the current feature vector of each functional module power supply rail includes: obtaining the distance between the corresponding feature reference vector and the current feature vector of each functional module power supply rail; determining the number of consecutive times that the distance of each functional module power supply rail is greater than a preset distance threshold; the preset distance threshold of each functional module power supply rail is determined based on the current data of the electrical load of the functional module power supply rail; and determining that the working state of the relevant functional module power supply rail is in an abnormal state when the number of consecutive times exceeds the preset number threshold.

[0098] The distance between the baseline feature vector and the current feature vector can be, for example, a weighted Euclidean distance.

[0099] Among them, the preset distance threshold of the power supply rail of each functional module increases as the current load current of the power supply rail of that functional module increases; the threshold is dynamically adjusted with the load current, and the judgment threshold is appropriately relaxed under heavy load conditions to tolerate normal load fluctuations, while the threshold is tightened under light load conditions to maintain the detection sensitivity to weak anomalies.

[0100] In this embodiment, the multi-level voltage fault-tolerant power supply system determines that the working state of the power supply rail of a functional module is in an abnormal state only when it learns that the distance between the power supply rails of each functional module is greater than the preset distance threshold for more than a preset number of consecutive times. This helps to reduce false alarms caused by sporadic data and improves the accuracy of determining that the power supply rail of a functional module is in an abnormal state.

[0101] In an exemplary embodiment, the above-mentioned determination of the voltage change rate sequence and current change rate sequence at the time of occurrence of the abnormal state based on the operating electrical data related to the first power supply rail at the time of occurrence of the abnormal state includes: determining an abnormal time period including the time of occurrence based on the time of occurrence of the abnormal state; determining the voltage sampling sequence and current sampling sequence of the first power supply rail during the abnormal time period based on the operating electrical data of the first power supply rail during the abnormal time period; performing a first-order difference operation on the voltage sampling sequence to obtain the voltage change rate sequence of the abnormal time period; and performing a first-order difference operation on the current sampling sequence to obtain the current change rate sequence of the abnormal time period.

[0102] The abnormal time period includes the time when the abnormal state occurs. For example, the abnormal time period includes the time when the abnormal state occurs and a part of the time period before the time when the abnormal state occurs. For example, the abnormal time period includes the time when the abnormal state occurs and a part of the time period after the time when the abnormal state occurs.

[0103] Among them, performing first-order difference operations on the voltage sampling sequence and the current sampling sequence respectively can obtain the dynamic change information of voltage and current during the fault transient, providing a data basis for subsequent correlation determination.

[0104] In this embodiment, the voltage sampling sequence and current sampling sequence of the first power supply rail during the abnormal period are first determined by using the working electrical data of the first power supply rail during the abnormal period. Then, by processing the voltage sampling sequence and current sampling sequence separately, the corresponding voltage change rate sequence and current change rate sequence are obtained. This ensures the correlation between the obtained voltage change rate sequence and current change rate sequence and the abnormality of the first power supply rail, which helps to improve the accuracy of the fault type of the first power supply rail determined by the voltage change rate sequence and current change rate sequence.

[0105] In an exemplary embodiment, the above-mentioned determination of the fault type of the first power supply rail based on the transient correlation coefficient between the voltage change rate sequence and the current change rate sequence includes: determining the transient correlation coefficient between the voltage change rate sequence and the current change rate sequence; if the transient correlation coefficient is less than a preset positive correlation threshold, determining the fault type of the first power supply rail as a front-end power conversion circuit fault; if the transient correlation coefficient is equal to or greater than the preset positive correlation threshold, determining the fault type of the first power supply rail as a load-side circuit fault.

[0106] The transient correlation coefficient between the voltage rate of change series and the current rate of change series can be the Pearson correlation coefficient between them. Using the Pearson correlation coefficient as a fault type criterion can effectively distinguish whether the voltage drop is caused by a failure of the front-end conversion circuit or by a sudden increase in load current, thus clearly identifying the fault type and preventing the fault from escalating due to accidental startup during a load short circuit.

[0107] In this embodiment, the fault type of the first power supply rail is determined by comparing the transient correlation coefficient between the voltage change rate sequence and the current change rate sequence with a preset positive correlation threshold, which helps to simplify the fault type determination.

[0108] In an exemplary embodiment, the above-described determination of a target borrowed power supply rail from the second power supply rails based on at least one of the power supply demand and the voltage data, load margin, and functional safety level of each second power supply rail includes steps 201-203, wherein: step 201, determining candidate borrowed power supply rails from the second power supply rails based on at least one of the power supply demand and the voltage data, load margin, and functional safety level of each second power supply rail; step 202, determining a weighted evaluation score of the voltage data, load margin, and functional safety level of each candidate borrowed power supply rail; step 203, determining the target borrowed power supply rail from the candidate borrowed power supply rails based on the weighted evaluation score of each candidate borrowed power supply rail.

[0109] Among them, the candidate borrowed power rail is a second power rail in the domain controller that has a certain amount of redundant power that can be borrowed to the load of the first power rail and is suitable for borrowing power from the load of the first power rail.

[0110] The weighted evaluation score of the load status data of each candidate borrowed power rail can characterize the suitability of each candidate borrowed power rail for borrowing power from the load of the first power rail.

[0111] When determining the target borrowed power supply rail from the candidate borrowed power supply rails, for example, the weighted evaluation scores of the candidate borrowed power supply rails can be sorted from high to low, and the candidate borrowed power supply rail ranked first can be determined as the target borrowed power supply rail; or, at least one of the top K candidate borrowed power supply rails can be determined as the target borrowed power supply rail; K can be determined based on demand or experience, and K is a positive integer not less than 2.

[0112] In this embodiment, the multi-level voltage fault-tolerant power supply system first selects candidate borrowed power rails suitable for borrowing power from the first power rail based on the power demand of the load on the first power rail and the voltage data, load margin, and functional safety level included in the load status data of each second power rail. If the number of candidate borrowed power rails is not unique, the voltage data, load margin, and functional safety level of each candidate borrowed power rail are further weighted and calculated. Then, based on the calculated weighted evaluation score, the target borrowed power rail is determined from the multiple candidate borrowed power rails. This method of selecting and determining the target borrowed power rail from multiple second power rails helps ensure that when the determined target borrowed power rail is used to borrow power from the load on the first power rail, it does not affect the power supply of the target borrowed power rail to its own original load, thus helping to ensure the overall operational stability of the domain controller.

[0113] In an exemplary embodiment, the above-described determination of the target borrowed power supply rail from each of the second power supply rails based on power supply demand and the respective load status data of each second power supply rail includes: determining candidate borrowed power supply rails from each of the second power supply rails based on power supply demand and the respective load status data of each second power supply rail; and determining the candidate borrowed power supply rail as the target borrowed power supply rail when the determined candidate borrowed power supply rail is unique.

[0114] In an exemplary embodiment, the above-described determination of candidate borrowed power supply rails among the second power supply rails based on power supply demand and voltage data of each second power supply rail includes: obtaining the nominal voltage in the power supply demand and the current output voltage in each voltage data; determining the voltage margin of the relevant second power supply rail based on the nominal voltage and the current output voltage, and determining the voltage sum value corresponding to the sum of each voltage margin and the nominal voltage; and determining the corresponding second power supply rail as a candidate borrowed power supply rail if the current output voltage is greater than the corresponding voltage sum value.

[0115] The nominal voltage in the power supply demand refers to the nominal voltage of the first power supply rail, which is the standard output voltage value under ideal conditions designed for the first power supply rail in a multi-level voltage fault-tolerant power supply system.

[0116] Among them, the current output voltage in the load status data is the output voltage currently provided by the multi-level voltage fault-tolerant power supply system to the corresponding second voltage rail.

[0117] The voltage margin can be determined based on the voltage difference between the output voltage currently provided by the multi-level voltage fault-tolerant power supply system to the corresponding second voltage rail and the voltage of the first power supply rail.

[0118] The voltage and value can be obtained by simply adding the voltage margin to the nominal voltage.

[0119] This embodiment provides a method for determining candidate borrowed power rails from multiple second power rails. Specifically, the multi-level voltage fault-tolerant power supply system first determines the voltage margin that each second power rail can borrow relative to the first power rail by using the nominal voltage in the power supply demand and the current output voltage in each load status data. Then, the second power rails whose current output voltage in each load status data is greater than the sum of each voltage margin and the nominal voltage are determined as candidate borrowed power rails. This ensures that each determined candidate borrowed power rail has sufficient redundant voltage to provide to the first power rail and ensures that the loads on the first power rail can be driven normally, thereby helping to ensure the overall working stability of the domain controller.

[0120] In an exemplary embodiment, the above-described determination of candidate borrowed power rails among the second power rails based on power supply demand and the respective functional safety level of each second power rail includes: determining a first functional safety level in the power supply demand and a second functional safety level for each second power rail; and determining the corresponding second power rail as a candidate borrowed power rail if the second functional safety level is less than or equal to the first functional safety level.

[0121] Among them, the first functional safety level in the power supply demand refers to the functional safety level that is pre-set for the electrical loads related to the first power supply rail; the second functional safety level in the load status data is the functional safety level that is pre-set for the electrical loads related to the second power supply rail.

[0122] For example, the power loads of the power rails for multiple functional modules involved in a domain controller may involve at least two pre-set functional safety levels. Furthermore, the power loads of the power rails for multiple functional modules involved in a domain controller may each have different pre-set functional safety levels.

[0123] This embodiment provides a method for determining candidate borrowed power rails from multiple second power rails. Specifically, it involves first determining the first functional safety level in the power supply demand corresponding to the first power rail, and determining the second functional safety level in the load status data corresponding to each second power rail. Second power rails with a second functional safety level less than or equal to the first functional safety level are identified as candidate borrowed power rails. This ensures that the functional safety level of each candidate borrowed power rail is lower than that of the first power rail, minimizing the possibility of insufficient power supply capacity from the relevant second power rails to their respective loads due to the candidate borrowed power rails borrowing power from the first power rail. This approach helps to ensure the overall operational safety of the domain controller when using candidate borrowed power rails to borrow power from the first power rail, reducing operational safety issues caused by some second power rails borrowing power from the first power rail, and also contributing to the overall operational safety of the vehicle.

[0124] In an exemplary embodiment, the method for determining the candidate borrowed power supply rail further includes: determining the target current value corresponding to the product of the rated current of each second power supply rail and a preset borrowing safety factor; determining the second power supply rail as a candidate borrowed power supply rail when the current load current of the second power supply rail is less than the target current value; the current load current being less than the target current value indicates that the relevant second power supply rail has a load margin.

[0125] The rated current of the second power supply rail refers to the maximum continuous current that the power path can safely carry under long-term stable operating conditions. The preset safety factor can be determined by relevant technical personnel based on their work experience and the type of electrical load required for the electrical connection of each second power supply rail.

[0126] The target current value of the second power supply rail is calculated by multiplying the rated current of the second power supply rail by the preset borrowing safety factor of the second power supply rail.

[0127] In this embodiment, a method is provided to determine candidate borrowed power rails from multiple second power rails. Specifically, the rated current of each second power rail and a corresponding preset borrowing safety factor are first obtained. Then, the target current value corresponding to the product of the rated current of each second power rail and the preset borrowing safety factor is determined. If the current load current of the second power rail is less than the target current value, then each of the relevant second power rails has a certain load margin. These second power rails are then determined as candidate borrowed power rails to ensure that the current margin of each determined candidate borrowed power rail is sufficient, and that there is enough redundant current to be borrowed to the load of the first power rail while ensuring its own power load.

[0128] The above are three methods provided in this application for determining candidate borrowed power supply rails from multiple second power supply rails. The multi-level voltage fault-tolerant power supply system can screen candidate borrowed power supply rails from multiple second power supply rails through one, two, or all of these screening conditions. This helps to improve the adaptability of the screened candidate borrowed power supply rails to the electrical loads of the first power supply rail, thereby improving the adaptability of the target borrowed power supply rail determined from the candidate borrowed power supply rails to the electrical loads of the first power supply rail.

[0129] In an exemplary embodiment, the above-described determination of the weighted evaluation score of the voltage data, load margin, and functional safety level of each candidate borrowed power supply rail includes: determining weighting coefficients adapted to the voltage data, load margin, and functional safety level respectively based on the load type of the electrical load of the first power supply rail; and determining the weighted evaluation score of each candidate borrowed power supply rail based on the voltage data, load margin, and functional safety level of each candidate borrowed power supply rail, and the weighting coefficients adapted to the voltage data, load margin, and functional safety level respectively.

[0130] The weighting coefficients for voltage data, load margin, and functional safety level may differ depending on the type of electrical load. Taking the voltage data weighting coefficient as an example... The weighting factor for load margin is The weighting coefficient for functional safety levels is For example, a default configuration can be provided as follows: , , For example, when the load type of the electrical load on the first power supply rail is an analog or radio frequency circuit, the accuracy requirement of the power supply voltage is high, and it can be... Increase to 0.6; for example, when the load type of the electrical load on the first power supply rail is a digital logic circuit, the current supply capability requirement is higher, and it can be increased to 0.6. Up to 0.5.

[0131] The weighted evaluation score for candidate borrowed power rails can be based on parameters related to voltage data and... The product of the load margin and related parameters The product of the functional safety level and related parameters The sum of the products is obtained.

[0132] In this embodiment, the weighting coefficients for three factors—voltage data, load margin, and functional safety level—are first determined based on the load type of the electrical load on the first power supply rail. Then, for each candidate borrowed power supply rail, a weighted evaluation score is calculated based on its load status data, including voltage data, load margin, and functional safety level, as well as the corresponding weighting coefficients. This allows for the application of different weighting coefficients to calculate the weighted evaluation scores of the relevant candidate borrowed power supply rails, depending on the load type of the first power supply rail that experienced an anomaly. This improves the accuracy of the calculated weighted evaluation scores of the candidate borrowed power supply rails, and facilitates the subsequent selection of target borrowed power supply rails that are more suitable for borrowing power from the electrical load on the first power supply rail based on the differences in weighted evaluation scores.

[0133] Considering that there may be uncertainty as to whether the target borrowed power rail obtained from steps 101-104 can fully meet the power supply requirements of the first power rail's load, in order to further improve the reliability of powering the first power rail's load through the target borrowed power rail, in an exemplary embodiment, the above-mentioned method of powering the first power rail's load through the target borrowed power rail provided in this application includes:

[0134] Based on the rated current of the target borrowed power rail, the preset borrowing safety factor, and the current load current, determine the current margin that the target borrowed power rail can currently borrow.

[0135] The peak value of the borrowed current is determined based on the rated operating current of the first power supply rail, the functional safety level, and the current available current margin.

[0136] The minimum operating current adapted to the first power supply rail is determined based on the rated operating current, and the power load of the first power supply rail is powered based on the target borrowed power supply rail when the peak value of the borrowed current is greater than or equal to the minimum operating current.

[0137] The minimum operating current of the first power supply rail can be 40%-50% of the rated operating current of the first power supply rail.

[0138] Among them, if the peak value of the borrowed current is greater than or equal to the minimum operating current, it indicates that the target borrowed power supply rail can independently meet the degraded operation requirements of the relevant power load of the first power supply rail.

[0139] In this embodiment, the current available current margin of the target borrowed power rail is first determined. Then, combined with the rated operating current and functional safety level of the first power rail, the peak value of the borrowed current of the target borrowed power rail is determined. The peak value of the borrowed current of the target borrowed power rail is then compared with the minimum operating current required by the first power rail. If the comparison result shows that the peak value of the borrowed current is greater than or equal to the minimum operating current, power is supplied to the electrical load of the first power rail based on the determined target borrowed power rail. This ensures that the current output from the target borrowed power rail to the electrical load of the first power rail can achieve normal and stable power supply control for the electrical load, while also ensuring that the target borrowed power rail can stably drive and control its own electrical load and the electrical load of the first power rail.

[0140] In an exemplary embodiment, the power supply control method for a domain controller provided in this application further includes: determining an additional borrowed power rail when the peak borrowed current is less than the minimum operating current, and using the additional borrowed power rail and the target borrowed power rail as the updated target borrowed power rail; returning to the step of determining an additional borrowed power rail and using the additional borrowed power rail and the target borrowed power rail as the updated target borrowed power rail when the peak borrowed current of the updated target borrowed power rail is less than the minimum operating current; and supplying power to the load of the first power rail based on the updated target borrowed power rail when the peak borrowed current of the updated target borrowed power rail is greater than or equal to the minimum operating current.

[0141] If the comparison result shows that the peak value of the borrowed current is less than the minimum operating current, it indicates that the single target's ability to borrow power from the power supply rail is insufficient. In this case, one or more second power supply rails need to be added to combine them as the updated target to borrow power from the first power supply rail for the load.

[0142] For example, if a target borrowed power rail is insufficient to provide adequate operating power data for the load of the first power rail, the next additional borrowed power rail can be selected sequentially from the weighted evaluation scores of the candidate borrowed power rails. The two or more additional power rails are then used as updated target borrowed power rails. The peak borrowing current of the updated target borrowed power rail is determined in the same way to be greater than or equal to the minimum operating current. This process continues until the peak borrowing current of the updated target borrowed power rail is greater than or equal to the minimum operating current. In this case, the load of the first power rail is simultaneously supplied with borrowed power by multiple second power rails included in the updated target borrowed power rail.

[0143] In this embodiment, if the peak borrowing current of the target borrowed power supply rail is compared with the minimum operating current required by the first power supply rail, and the comparison result is that the peak borrowing current is less than the minimum operating current, it indicates that the target borrowed power supply rail determined at this time cannot independently achieve normal drive control of the electrical load of the first power supply rail. At this time, an additional borrowed power supply rail can be further determined, and the additional borrowed power supply rail and the previously determined target borrowed power supply rail are combined to form an updated target borrowed power supply rail. When the peak borrowing current corresponding to the updated target borrowed power supply rail is greater than or equal to the minimum operating current, the electrical load of the first power supply rail is powered based on the updated target borrowed power supply rail. Alternatively, if the peak borrow current of the updated target borrowed power rail is still less than the minimum operating current, the process returns to determining the additional borrowed power rail and using the additional borrowed power rail and the target borrowed power rail as the updated target borrowed power rail. This continues until the peak borrow current of the updated target borrowed power rail is greater than or equal to the minimum operating current. Then, power is supplied to the load of the first power rail based on the updated target borrowed power rail. This allows multiple power rails to be determined from multiple second power rails to form the updated target borrowed power rail, ensuring stable drive control of the load of the first power rail through the borrowed power output from multiple second power rails.

[0144] Based on the same inventive concept, this application provides a multi-level voltage fault-tolerant power supply system for a domain controller, which may include a multi-track status sensing module, a fault type determination module, a borrowing decision and arbitration module, and a cross-track energy routing module.

[0145] The multi-rail status sensing module can monitor the output voltage and current of each voltage rail (power supply rail for functional modules). When an abnormal state is detected in a voltage rail, it is marked as a fault rail, i.e., the first voltage rail mentioned above. By monitoring and comparing the transient response characteristics of each voltage rail online, this module identifies power supply anomalies in the early stages of fault development, providing a triggering basis for subsequent fault-tolerant responses.

[0146] The fault type determination module can be used to obtain the voltage change rate sequence and current change rate sequence of the fault track within a preset time period before and after the occurrence of the anomaly, calculate the transient correlation coefficient between the two, and compare the transient correlation coefficient with the positive correlation threshold.

[0147] When the transient correlation coefficient is less than the (preset) positive correlation threshold, the fault type is determined to be a failure of the front-end power supply conversion circuit and the borrowing qualification is granted.

[0148] When the transient correlation coefficient is greater than or equal to the (preset) positive correlation threshold, the fault type is determined to be a load-side short circuit and borrowing is prohibited.

[0149] This module analyzes the correlation between voltage and current changes to distinguish between front-end conversion circuit failure and load-side short circuit, thereby preventing the incorrect initiation of the energy borrowing process in load short-circuit scenarios.

[0150] The borrowing decision and arbitration module can be used to determine the borrowing source rail (corresponding to the target borrowing power supply rail) from other normal voltage rails (i.e., each second voltage rail) for a faulty rail that has been granted borrowing eligibility, and generate borrowing parameters based on the load status of the borrowing source rail and the current requirement of the faulty rail. This module preferentially selects the borrowing source from the voltage rails that are normally operating within the domain controller, so that the borrowing behavior is constrained in terms of electrical compatibility, load margin, and functional safety level.

[0151] The cross-rail energy routing module can be used to isolate the load end of the faulty rail from its front-end power conversion circuit, establish a temporary power supply path between the output end of the borrowed source rail and the load end of the faulty rail, and deliver energy from the borrowed source rail to the load of the faulty rail according to the borrowing parameters.

[0152] This module establishes a temporary power supply path between the faulty rail and the borrowed source rail, maintaining a stable output voltage on the faulty rail through closed-loop control, allowing the load on the faulty rail to continue operating during the borrowing period. The establishment and termination of the borrowing path can employ soft-start and soft-shutdown methods, thereby reducing transient impacts.

[0153] Furthermore, the multi-track state perception module may include a transient fingerprint establishment unit and an online comparison unit.

[0154] The transient fingerprinting unit applies a load current step excitation to each voltage rail during the initialization phase, records the voltage transient response waveform, and extracts multiple feature parameters to form a normal transient response feature reference vector. This feature reference vector characterizes the transient response characteristics of each voltage rail under healthy conditions and serves as a reference standard for subsequent online comparison.

[0155] The online comparison unit extracts the current transient response feature vector (corresponding to the current feature vector) using a sliding time window during operation, calculates its weighted Euclidean distance with the feature reference vector, and determines that the voltage rail is in an abnormal state when the weighted Euclidean distance exceeds the adaptive judgment threshold (corresponding to the preset distance threshold) a preset number of times. Quantifying the deviation between the current transient feature and the normal reference through weighted Euclidean distance and employing a continuous multiple threshold exceeding confirmation mechanism helps reduce false alarms caused by occasional noise.

[0156] Furthermore, the fault type determination module can extract the voltage and current sampling sequences of the fault track within a preset time period before and after the anomaly occurrence when acquiring the voltage and current rate of change sequences. It then performs first-order difference operations on both sequences to obtain the voltage and current rate of change sequences. This difference operation obtains the dynamic changes in voltage and current during the fault transient, providing a data foundation for subsequent correlation determination.

[0157] Furthermore, by utilizing the decision-making and arbitration module, a screening unit and an evaluation unit can be included.

[0158] The screening unit is used to select candidate borrowed source rails (corresponding to candidate borrowed power supply rails) from the normal voltage rails. The screening criteria include three items:

[0159] Firstly, the output voltage of the normal voltage rail is higher than the sum of the nominal voltage and voltage margin of the faulty rail, thereby ensuring that energy can flow naturally from the borrowed source rail to the faulty rail with a regulation margin; that is, the first candidate power supply rail screening condition mentioned above.

[0160] Secondly, the current load current of the normal voltage rail is less than the product of its rated current and the borrowing safety factor, thereby ensuring that the borrowed source rail will not be overloaded during the borrowing period; that is, the third candidate power supply rail screening condition mentioned above.

[0161] Third, the functional safety level of the load on the normal voltage rail is not higher than that of the load on the faulty rail, thereby ensuring that the borrowing behavior will not reduce the power supply reliability of the high safety level function; that is, the second candidate power supply rail screening condition mentioned above.

[0162] The evaluation unit is used to perform weighted evaluations of candidate borrowed source rails based on voltage difference, load margin, and functional safety level, and selects borrowed source rails according to the evaluation results. Through multi-factor weighted evaluation, borrowed source rails with good electrical matching and minimal impact on the overall system can be selected from the candidate borrowed source rails.

[0163] Furthermore, the borrowing parameters may include an upper limit for the borrowed current, which is the smaller of the following two values: the available current margin of the source rail, which is the rated current of the source rail multiplied by the borrowing safety factor and then subtracted from its current load current; and the rated operating current of the faulty rail multiplied by the degraded operation factor. The smaller of the available current margin of the source rail and the degraded demand of the faulty rail is chosen to ensure that the borrowed current does not exceed the power supply capacity of the source rail while meeting the basic operating requirements of the faulty rail during the borrowing period.

[0164] Furthermore, when establishing a temporary power supply path, the cross-rail energy routing module gradually increases the borrowed current on the temporary power supply path at a preset start-up slope until the upper limit of the borrowed current is reached or the output voltage of the faulty rail reaches the target adjustment value. The borrowing path is established through a soft-start method, avoiding transient impacts on the borrowed source rail caused by sudden load increases.

[0165] Furthermore, the cross-rail energy routing module also includes a recovery unit. The recovery unit is used to gradually reduce the borrowed current at a preset sloping rate after the power supply conversion circuit at the front end of the faulty rail returns to normal. The sloping rate is lower than the starting sloping rate. The sloping rate being lower than the starting sloping rate provides more sufficient response time for the faulty rail's front end conversion circuit and the borrowed source rail, making the power supply switching process smoother.

[0166] When the borrowed current drops to a preset proportion of the current load current on the faulty rail, the recovery unit resumes power supply from the front-end power conversion circuit to the load. During this transition phase, the load simultaneously draws current from both the borrowed path and the restored front-end conversion circuit, ensuring uninterrupted power supply. Once the borrowed current returns to zero, the temporary power supply path is disconnected.

[0167] Furthermore, the cross-rail energy routing module includes a power path selection matrix and a control logic unit.

[0168] The power path selection matrix, connected between the output nodes of each voltage rail and the power input terminals of each load, is composed of a crossbar switch array. Each crossbar is implemented by a pair of back-to-back MOSFETs (Metal-Oxide-Semiconductor Field-Effect Transistors). This matrix provides configurable physical connection channels, enabling the establishment of controlled energy borrowing paths between any borrowed source rail and any faulty rail.

[0169] The control logic unit is used to configure the power path selection matrix to establish and disconnect the temporary power supply path, and to implement closed-loop regulation of the borrowed current on the temporary power supply path with the fault rail output voltage as feedback and the borrowed current as control, thereby maintaining the fault rail load terminal voltage within the target range.

[0170] Regarding the power supply control method for the domain controller provided in this application, this application provides an optional specific embodiment, which can be referred to... Figure 3This method is applied to intelligent vehicle domain controllers, or to multi-level voltage fault-tolerant power supply systems for domain controllers. The domain controller integrates six functional modules: a microcontroller unit, an artificial intelligence processor, an image processor, an in-vehicle Ethernet switching chip, a controller area network transceiver, and sensor signal conditioning circuitry. Each functional module requires a power supply rail with a different nominal voltage. For example, the domain controller's power input comes from the vehicle's 12V battery, which is converted by a six-channel DC-DC converter and a low-dropout linear regulator to generate six voltage rails: 12V, 5V, 3.3V, 1.8V, 1.2V, and 0.8V. Each voltage rail (functional module power supply rail) corresponds to an independent load domain (electrical load).

[0171] When the DC-DC converter or low-dropout linear regulator at the front end of a voltage rail fails, its output voltage will drop or even be completely interrupted. Causes of failure include internal power switch failure, aging output filter capacitors, control loop oscillation, or over-temperature protection triggering. In this situation, the system does not draw power from the independent backup power supply channel. Instead, it temporarily borrows available power margin from other normally operating voltage rails within the domain controller (corresponding to the second power rail) to provide energy support for the load of the failed rail (the electrical load of the first power rail), achieving precise rail-level fault tolerance.

[0172] The power supply control method for the domain controller provided in this embodiment specifically involves steps S10 to S100, wherein:

[0173] Step S10: Establish the normal transient response characteristic reference for each voltage rail (corresponding to the characteristic reference vector).

[0174] Step S10 is executed during the system initialization phase. It is executed within the window period after the domain controller has been powered on, the output voltages of each voltage rail have reached a steady state, but the back-end functional loads have not yet been fully activated.

[0175] This can be implemented as a hardware logic module in a programmable logic device based on the transient fingerprinting unit in the system. This unit applies a step excitation of the load current to each voltage rail sequentially through a programmable electronic load connected to the output of each voltage rail. This step excitation includes a rising sequence and a falling sequence. For example, the rising sequence causes the load current to step from 10% to 80% of the rail's rated current, used to excite the voltage drop and recovery process; the falling sequence causes the load current to step back from 80% to 10%, used to excite the overshoot and damped oscillation process. The rise and fall times of the step can both be controlled to 2 μs (microseconds). Each direction is repeated three times to eliminate the influence of random noise. During the step process, the output voltage response waveform of each voltage rail is synchronously recorded at a sampling frequency of 250 kHz (kilohertz); each recording lasts for 500 μs. The application of the load current step excitation and the recording of the output voltage response waveform of each voltage rail can be based on, for example... Figure 4 The differential analog front-end, synchronous sampling analog-to-digital converter array, and current sampling resistor shown are implemented.

[0176] Furthermore, the following four feature parameters can be extracted from the recorded waveform, namely, the y1-y4 feature parameters:

[0177] The first characteristic parameter y1: voltage drop amplitude. The steady-state value is the arithmetic mean of the voltage samples within 100 μs before the step jump. The lowest voltage drop value after the step jump is then taken. Drop amplitude = steady-state value - lowest voltage drop value.

[0178] The second characteristic parameter, y2, is the recovery time. Timing begins from the moment the voltage drops to its lowest point. It measures the time when the output voltage recovers to within ±2% of the steady-state value and no longer exceeds this error band. Recovery time = the time difference between these two moments.

[0179] The third characteristic parameter, y3, is the overshoot amplitude. In the reverse step waveform, the arithmetic mean of the voltage samples within 100 μs before the step is taken as the steady-state value. The highest point value reached by the voltage after the step is taken. Overshoot amplitude = highest point value - steady-state value.

[0180] The fourth characteristic parameter, y4, is the damped oscillation frequency. The oscillation range where the voltage fluctuation exceeds the steady-state value ±2% error band during the recovery process is selected. After subtracting the steady-state value from the voltage sampling data within this range, a 256-point Fast Fourier Transform is performed. The frequency component with the largest amplitude is taken as the damped oscillation frequency.

[0181] The above four parameters are arranged in order to form the normal transient response characteristic reference vector Y of the voltage rail.

[0182] For example, taking a voltage rail with a nominal voltage of 3.3V and a rated current of 2A as an example, its reference vector can be recorded as: drop amplitude 0.12V, recovery time 35μs, overshoot amplitude 0.09V, and damped oscillation frequency 48kHz.

[0183] The reference vectors for the six voltage rails in the domain controller are stored in the internal block memory of the programmable logic device, such as in non-volatile memory. These vectors are loaded into the working register of the online comparison unit each time the system is powered on and initialized.

[0184] Step S20: Online transient feature comparison and anomaly labeling;

[0185] During normal operation of the domain controller, each voltage rail can be continuously monitored via an online comparison unit using a sliding time window. The window length is 500 μs, consistent with the baseline establishment phase. The sliding step size is one-eighth of the window length, i.e., 62.5 μs.

[0186] In each window location, perform the following operations:

[0187] Using the same method as in step S10, extract the four parameter values ​​of the current transient response feature to form the current feature vector. That is, extracting the current feature vector using a sliding window. Simultaneously, the characteristic reference vector of the voltage rail is read from the block memory. .calculate and Weighted Euclidean distance between The calculation method is as follows: ;in, The th feature vector of the current feature vector Parameter values, The first reference vector Parameter values, For the first The weight coefficients corresponding to each parameter.

[0188] In a specific example, the four weighting coefficients are set to: drop amplitude 0.35, recovery time 0.30, overshoot amplitude 0.20, and damped oscillation frequency 0.15. Each weighting coefficient is stored in the configuration register of the programmable logic device and can be adjusted via the register interface according to actual test data.

[0189] The calculated distance With adaptive judgment threshold (preset distance threshold) Comparison. Among them, With load current Dynamic adjustment to meet: Among them, the benchmark threshold The value is taken when the voltage rail is working normally. The distribution mean plus 2.5 times the standard deviation, for example, set to 0.25 after statistical analysis. Adjustment factor. The regulation rate of the rail is determined by measurement, for example, by taking 0.03 / A. This is the arithmetic mean of the current sampling sequence within the current sliding window.

[0190] when consecutively exceeding When the number of occurrences reaches 3, the voltage rail is marked as an abnormal voltage rail. The time of the abnormality is defined as follows: First time exceeding At that moment. If No more Then return to extract the current feature vector using a sliding window. The steps.

[0191] The online comparison unit then generates (packages) an anomaly event data packet, which includes: an anomaly track identifier; a timestamp of the anomaly occurrence; and a voltage and current sampling sequence spanning 600 μs before and after the anomaly occurrence, with a 200 μs backward and a 400 μs forward extension. This data packet can be sent to the fault type determination module via the AXI (Advanced eXtensible Interface) bus.

[0192] Among them, the above-mentioned steps of synchronously sampling voltage / current for each voltage rail during online operation can not only identify abnormal voltage rails, but also identify normal voltage rails, which are the domain controller voltage rails.

[0193] Step S30: Calculate the transient correlation coefficient;

[0194] The fault type determination module is implemented as another hardware logic module within a programmable logic device. This module shares the same programmable logic device with the multi-track status awareness module, and the two exchange data via an AXI bus.

[0195] After receiving the abnormal event data packet, the fault type determination module extracts the voltage sampling sequence from it. and current sampling sequence At a sampling frequency of 250 kHz, a 600 μs window contains 150 sampling points. First-order difference operations are performed on both sequences to generate voltage rate of change sequences. and current change rate sequence Each set contains 149 data points.

[0196] The difference operation method is as follows: for the first... One sampling point, , ; Calculate the voltage change rate sequence With current change rate sequence Pearson correlation coefficient between This is used as the transient correlation coefficient. The calculation method is as follows: ;in, and These are the means of the two rate of change sequences, and These are the standard deviations of the two rate of change sequences. The range of values ​​is [-1, 1]. Positive values ​​indicate that voltage and current change in the same direction, negative values ​​indicate that they change in opposite directions, and values ​​near zero indicate that they are unrelated.

[0197] Step S40: Perform fault type determination and grant borrowing qualification;

[0198] The calculated With preset positive correlation threshold Comparison. In a preferred example, The value is set to 0.7. The experimental basis for this value is as follows: Under normal load step conditions, the Pearson correlation coefficient of the voltage and current rate of change sequences of each voltage rail of the domain controller typically falls between 0.8 and 1.0. However, when a sudden open-circuit failure occurs in the power switch of the DC-DC converter, the typical value of this coefficient falls between -0.3 and 0.4. Using 0.7 as the boundary, a discrimination boundary with sufficient safety margin can be established between the two types of transient events mentioned above.

[0199] The decision logic is as follows: when This indicates that there is no significant positive correlation between voltage drop and current change. The physical process is as follows: the front-end DC-DC converter or LDO (Low Dropout Regulator) itself fails, for example, the power switch is open-circuited, and the output impedance increases sharply, causing a voltage drop, but the load-side current does not increase synchronously. Based on this, the system determines the fault type as a front-end conversion circuit failure and grants the faulty rail borrowing qualification. The fault type determination module then generates a borrowing enable signal, marks the rail as a borrowing candidate rail, and sends it to the borrowing decision and arbitration module via the AXI bus, that is, it sends the fault type signal and the candidate rail identifier.

[0200] when This indicates a significant correlation between voltage and current changes. The physical process is as follows: a short circuit or severe overload occurs on the load side, causing a sudden surge in current due to a low-impedance fault path, forcibly pulling down the output voltage. Based on this, the system determines the fault type as a load-side short circuit fault and generates a "borrowing prohibited" signal. This signal locks the borrowing decision and arbitration module via a hardware interrupt, preventing the subsequent borrowing process from starting. Simultaneously, this fault event is reported to the system safety management unit, where an independent hardware overcurrent protection circuit performs rapid disconnection.

[0201] It is understood that, besides the Pearson correlation coefficient, other algorithms that can measure the correlation between sequences can also be used to calculate the aforementioned transient correlation coefficient. For example, the Spearman rank correlation coefficient, or correlation measures based on pre-trained classifiers. This application does not specifically limit this.

[0202] Step S50: Candidate borrowed source track filtering;

[0203] The borrowing decision and arbitration module is implemented as a dedicated software task within the domain controller's main microcontroller unit, scheduled for execution with a 1ms period. Upon receiving the borrowing enable signal (corresponding to a front-end failure signal), this module, based on the filtering unit, uses the nominal voltage of the fault rail (corresponding to the first voltage rail) as the basis for its selection. and functional safety level Based on this, the following three screening criteria are applied to all normal voltage rails (corresponding to the second voltage rail) except for the faulty rail. Rails that meet all the criteria are included in the candidate borrowing source rail set.

[0204] Condition 1: Voltage level matching, corresponding to voltage conditions.

[0205] Normal rail current output voltage Must meet: Among them, the nominal voltage of the faulty rail , This is for voltage margin; + This represents the sum of voltage values ​​corresponding to the sum of each voltage margin and the nominal voltage; in one example, The value of 0.25V covers the total voltage drop across the MOSFET switch on-resistance and current sampling resistor in the power path at maximum borrow current, while also allowing for the minimum input-output voltage difference required for closed-loop regulation.

[0206] Condition 2: Sufficient load margin, corresponding to the current condition.

[0207] Normal rail current load current Must meet: ,in This is the rated current of the rail. To preset a borrowing safety factor; × The target current value corresponds to the product of the rated current of the second power supply rail and the preset borrowing safety factor. Wherein, Based on the functional safety level of the load carried by the normal rail itself. Determine by looking up a table; for example, When it is QM Take 0.85, When it is ASILB Take 0.70, When it is ASILD Take 0.40; where QM (Quality Management) refers to quality management, ASILB (Automotive Safety Integrity Level B) refers to vehicle safety integrity level B, and ASILD (Automotive Safety Integrity Level D) refers to vehicle safety integrity level D. The higher the level, the better. The smaller the value, the greater the current margin reserved when borrowing.

[0208] Condition 3: The functional safety level is not increased, corresponding to the safety level condition.

[0209] Functional safety level of the load carried by the normal rail Must meet: The safety levels are mapped to values ​​of 0, 1, 2, 3, and 4 according to the pre-provided standards for QM, ASILA (Automotive Safety Integrity Level A), ASILB, ASILC (Automotive Safety Integrity Level C), and ASILD, respectively. This condition ensures that borrowing will not use power resources from high-safety-level loads for low-safety-level scenarios.

[0210] Based on the screening of conditions one, two, and three above, the set of candidate borrowing source tracks S is obtained.

[0211] If the candidate set is empty, the borrowing decision and arbitration module determines that the borrowing is not feasible. A borrowing failure signal is output, and a system-level safety degradation response is triggered. For example, the domain controller master unit is notified to perform ordered state saving or safe shutdown of the load connected to the faulty rail.

[0212] Step S60: Borrow source track optimization sorting;

[0213] Based on the evaluation unit, for each voltage rail in the candidate set, its borrowing priority index (corresponding to the weighted evaluation score) is calculated. The calculation method is as follows: The three factors are defined as follows:

[0214] Calculate the voltage difference factor A: , The smaller the value, the smaller the voltage difference between the borrowed source rail and the faulty rail, and the lower the cross-adjustment loss during the borrowing process;

[0215] Calculate the load margin factor B: , The smaller the value, the lower the current load rate of the rail, and the more abundant the current capacity that can be borrowed.

[0216] Calculate the functional safety level factor C: , The smaller the value, the smaller the potential impact of using the track on the overall functional safety of the system.

[0217] In a default configuration example, the three weight coefficients are set to: , , The weighting coefficients can be adjusted according to the type of load supplied by the faulty rail. For example, when the faulty load is an analog or radio frequency circuit, which requires high accuracy in the supply voltage, the weighting coefficients can be adjusted accordingly. Increase to 0.6. When the faulty load is a digital logic circuit, the current supply capability requirement is higher, and it can be increased to 0.6. Increased to 0.5.

[0218] according to The values ​​are sorted in descending order to generate a priority borrowing source rail list L. The voltage rail with the highest value in the list is selected as the chosen borrowing source rail.

[0219] Step S70: Borrowing parameters for calculation and feasibility verification;

[0220] The parameter calculation unit determines each borrowed parameter as follows: Upper limit of borrowed current (corresponding to the peak value of the borrowed current). Take the smaller of the following two values: ;in, The calculation method for selecting the current available current margin of the source rail to be borrowed (corresponding to the current available current margin of the target power supply rail to be borrowed) is as follows: . The rated operating current for the faulty rail. To reduce the operating factor, the functional safety level of the faulty rail is determined. Settings. For example, When it is QM Take 0.4, When it is ASILB Take 0.65, When it is ASILC Take 0.80, When it is ASILD Take 0.90.

[0221] Calculate Then, perform a sufficiency check. Minimum operating current required to maintain minimum functionality with faulty rail Compare them. Usually taken 40% to 60%. For example, a voltage rail with a rated current of 1.2A, It can be set to 0.6A.

[0222] like This indicates that the selected source rail can independently meet the degraded operation requirements of the faulty rail; a single-source borrowing instruction is directly generated.

[0223] like This indicates that the capacity of a single source rail is insufficient; the system automatically initiates a multi-source borrowing assessment, which involves: sequentially selecting the next candidate source rail from the priority borrowing source rail list, calculating its borrowing current upper limit in the same way and accumulating it until the accumulated value reaches the target value. Or the candidate list is exhausted.

[0224] If the accumulated value reaches This generates a multi-source borrowing instruction, which includes the identifier of each participating source rail and its respective borrowing current limit.

[0225] If the cumulative value is still less than [value] after all candidate tracks have been exhausted. If the borrowing fails, the borrowing is deemed infeasible. A borrowing failure signal is output, triggering a system-level security degradation response.

[0226] Calculate the maximum borrowing time Maximum borrowing time Choose the smaller of the following two values: 50% of the functional safety time margin of the load on the faulty rail; or a preset absolute upper limit of 100ms. If the load does not have a clearly defined functional safety time margin, then take 100ms directly.

[0227] The startup slope type is selected based on the characteristics of the load on the faulty rail: 2A / μs for digital logic loads; 0.5A / μs for analog or RF circuit loads.

[0228] The above parameters, together with the selected borrowing source rail identifier (or a list of multiple source rail identifiers), are assembled into a borrowing instruction data frame; this data frame is sent to the cross-rail energy routing logic module via the SPI (Serial Peripheral Interface) bus.

[0229] Step S80: Fault isolation and path establishment;

[0230] The cross-rail energy routing logic module comprises a control logic unit, a power path selection matrix, and a current detection and regulation circuit. The control logic unit is implemented as an independent hardware state machine, driven by a 100MHz clock. Upon receiving a borrowing instruction data frame, the module first performs fault isolation. The control logic unit sends a logic low level to the enable pin of the DC-DC converter or LDO at the front end of the faulty rail, shutting down its power output. This effectively isolates the load end of the faulty rail from the failed front-end power supply circuit, achieving front-end isolation. Subsequently, the control logic unit configures the power path selection matrix, selecting the power path between the selected borrowing source rail output node and the faulty rail load node, thus establishing an energy borrowing logic path. This matrix consists of a 6×6 crossbar switch array. Each crossbar is implemented by a pair of back-to-back N-channel MOSFETs, with a typical on-resistance of 7mΩ. Path establishment employs a soft-start method. The duty cycle of the MOSFET gate drive signal is gradually increased at a PWM frequency of 200kHz, causing the borrowed current to gradually increase at a specified startup slope, corresponding to soft start: increasing the borrowed current at a specified slope. The digital load is 2A / μs, and the analog load is 0.5A / μs.

[0231] The rising process continues until either of the following conditions is met: the borrowed current reaches... The faulty rail output voltage rises to the target regulation value (target voltage). , Set as the nominal voltage of the fault rail 95% to 98%.

[0232] Step S90: Closed-loop adjustment and timeout protection during the borrowing period;

[0233] During the borrowing period, the control logic unit performs closed-loop regulation of the borrowing path. The fault rail output voltage sample value is used as the basis for this regulation. The feedback value is obtained by synchronous sampling at a frequency of 250kHz through an independent ADC (Analog-to-Digital Converter) channel. The target adjustment value is then used. Using a reference value, the voltage deviation is calculated within each 4μs control cycle. The borrowed current command value is updated according to the incremental PI control algorithm. The proportional gain and integral gain are pre-calibrated based on the faulty rail output capacitor capacity and load characteristics. The borrowed current command value is limited to 0 to... Between these points, the output is sent to the current regulation circuit. Simultaneously, a borrowing duration timer starts counting when borrowing begins, for timeout monitoring and recovery detection.

[0234] If the timer's accumulated value reaches However, the output voltage of the faulty rail front-end conversion circuit has not yet recovered, and the control logic unit generates a borrowing timeout signal. This signal is reported to the system safety management module as an interrupt, and the module determines the subsequent handling strategy.

[0235] Step S100: Fault recovery detection and smooth exit;

[0236] The recovery unit continuously monitors the output voltage of the faulty rail front-end conversion circuit during the borrowing period to determine whether the front-end voltage has recovered and stabilized. When the voltage is detected to have recovered to... Once the voltage remains stable within the range of 98% to 102% for a preset confirmation time exceeding 800 μs, the borrowing exit process is initiated. This confirmation time is used to prevent accidental triggering of the recovery operation due to instantaneous voltage fluctuations.

[0237] The exit process is executed in the following order:

[0238] Step 1: Soft degradation transition; the control logic unit gradually reduces the borrow current command value according to the descent rate. The descent rate is half of the borrow start-up rate. For example, if the start-up rate of a digital logic load is 2A / μs, then the descent rate is 1A / μs.

[0239] Step 2: Relinquishing power supply control; when the borrowed current drops to approximately 50% of the current required by the current load on the faulty rail, the control logic unit removes the front-end isolation control signal. A logic high level is sent to the enable pin of the faulty rail front-end switching circuit, restoring power supply to the load. During this transition phase, the load simultaneously draws current from both the borrowed path and the restored front-end circuit, with no interruption in power supply.

[0240] Step 3: Disconnect the borrowed current path; the control logic unit continues to reduce the borrowed current command value to zero at a decreasing slope, i.e., the borrowed current is returned to zero. After returning to zero, a delay of 10μs is applied to fully dissipate the residual energy in the power path. Then, the MOSFET pair at the corresponding intersection in the power path selection matrix is ​​disconnected, completing the physical dismantling of the energy borrowing path.

[0241] After the exit process is completed, the control logic unit will report the borrowing completion status, fault recovery timestamp, and operating parameters such as peak current and duration of this borrowing to the borrowing decision and arbitration module via the SPI bus. The historical borrowing record table will be stored in non-volatile memory for reference in subsequent borrowing frequency balancing strategies.

[0242] Steps S10 to S100 above constitute the entire process in this embodiment, from anomaly detection, fault identification, borrowing decision to energy routing execution and exit. Specifically, the multi-source borrowing assessment mentioned in step S70 is implemented by the cross-rail energy routing logic module. After receiving the multi-source borrowing instruction, this module establishes corresponding energy borrowing paths between the output nodes of each selected borrowing source rail and the load nodes of the faulty rail using a power path selection matrix, such as... Figure 5 As shown, when voltage rail 2 is normal and voltage rail 3 is a faulty rail, a corresponding energy borrowing path is established between voltage rail 2 and voltage rail 3. Each path independently performs current sampling and closed-loop regulation, and the output current of each path converges at the load node of the faulty rail to jointly maintain the output voltage of the faulty rail within the target regulation range. In another embodiment, the system maintains a historical borrowing record table for each voltage rail in the non-volatile memory of the domain controller. This table records the cumulative number of times each voltage rail has been successfully selected as a borrowing source rail. and the total number of events borrowed by the system Each time the borrowing process is successfully completed and the user exits, the cumulative borrowing count for the corresponding borrowing source track is updated, and the data is then transferred to the appropriate database. Add 1. The evaluation unit calculates the borrowing priority index. At that time, read from the historical borrowing record table and Calculate the borrowing frequency factor And will The calculation method has been adjusted to: ;in, The weighting coefficient for the frequency factor is used, with values ​​ranging from, for example, 0.03 to 0.08. During the initial stage of system operation... When the number of times is less than a preset threshold (e.g., 50), Set to zero. Wait. Once a threshold is reached, the borrowing frequency factor is activated. This gives priority to voltage rails with lower borrowing frequencies, thus leveling out borrowing wear.

[0243] The power supply control method for the domain controller provided in this application has at least the following beneficial effects: it utilizes the power supply capacity of the existing voltage rails within the system to achieve fault-tolerant power supply without relying entirely on an independent backup power path; it reduces the granularity of fault tolerance processing from the power supply domain level to the voltage rail level, reducing the impact on other normal voltage rails; the borrowing power supply process is achieved through controlled adjustment, which helps to reduce voltage disturbances during power supply switching; it improves the ability to distinguish different fault types through joint analysis of voltage and current change characteristics; and it helps to ensure the rationality and safety of the borrowing process by introducing voltage, current, and safety level constraints in the borrowing decision.

[0244] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps. It is understood that the steps in different embodiments can be freely combined as needed, and all non-contradictory solutions formed by such combinations are within the scope of protection of this application.

[0245] Based on the same inventive concept, this application also provides a power supply control device for a domain controller to implement the power supply control method for the domain controller described above. The solution provided by this device is similar to the solution described in the above method. Therefore, the specific limitations of one or more domain controller power supply control device embodiments provided below can be found in the limitations of the domain controller power supply control method described above, and will not be repeated here.

[0246] In one exemplary embodiment, such as Figure 6 As shown, a power supply control device for a domain controller is provided, including: a load data determination module 41, a normal track data determination module 42, a borrowed track determination module 43, and a borrowed track power supply module 44, wherein:

[0247] The load data determination module 41 is used to obtain the power demand of the electrical load connected to the first power supply rail in the abnormal state of the target fault type in each functional module power supply rail of the domain controller, and to obtain the load status data of each second power supply rail in the normal state.

[0248] Normal rail data determination module 42 is used to obtain the voltage data, load margin and functional safety level included in the load status data of each second power supply rail;

[0249] The borrowing rail determination module 43 is used to determine the target borrowing power rail from each of the second power rails based on at least one of the power supply requirements and the voltage data, load margin and functional safety level of each second power rail.

[0250] The borrowed rail power supply module 44 is used to supply power to the electrical load of the first power supply rail through the target borrowed power supply rail.

[0251] The power supply control device for the domain controller provided in this application can also be used to implement any step in the power supply control method for the domain controller provided in this application.

[0252] The modules in the power supply control device of the aforementioned domain controller can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of the computer device in hardware form or independent of it, or stored in the memory of the computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0253] In one exemplary embodiment, a vehicle-side control device is provided, the internal structure of which can be shown in the following diagram. Figure 7 As shown, the vehicle-side control device includes a processor and a memory. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium storing a computer program. When executed by the processor, the computer program implements a power supply control method for a domain controller.

[0254] Those skilled in the art will understand that Figure 7 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer equipment (vehicle-side control equipment) to which the present application is applied. The specific computer equipment may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0255] Those skilled in the art will understand that Figure 7 The structure shown is a block diagram of a partial structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have different component arrangements.

[0256] In one exemplary embodiment, a computer device (vehicle-side control device) is provided, including a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0257] In one exemplary embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps in the above-described method embodiments.

[0258] In one exemplary embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.

[0259] The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0260] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program mentioned can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0261] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0262] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A power supply control method for a domain controller, characterized in that, The method includes: Within the power supply rails of each functional module inside a single domain controller of an intelligent vehicle, the power supply demand of the electrical load connected to the first power supply rail in an abnormal state of the target fault type is obtained, as well as the load status data of each second power supply rail in a normal state are obtained. Obtain the voltage data, load margin, and functional safety level included in the load status data of each of the second power supply rails; Based on the power supply demand and at least one of the voltage data, load margin and functional safety level of each of the second power supply rails, a target borrowed power supply rail is determined from each of the second power supply rails; The target uses the power supply rail to supply power to the electrical load of the first power supply rail.

2. The method according to claim 1, characterized in that, The determination of the target borrowed power rail from each of the second power rails based on at least one of the power supply demand and the voltage data of each of the second power rails, the load margin, and the functional safety level includes: Based on the power supply requirements and at least one of the voltage data, load margin and functional safety level of each of the second power supply rails, candidate borrowed power supply rails are determined among the second power supply rails. Determine the weighted evaluation score of the voltage data, load margin, and functional safety level for each of the candidate borrowed power rails; Based on the weighted evaluation scores of each of the candidate borrowed power rails, the target borrowed power rail is determined from the candidate borrowed power rails.

3. The method according to claim 2, characterized in that, The step of determining candidate borrowed power rails among the second power rails based on the power demand and the voltage data of each second power rail includes: Obtain the nominal voltage from the power supply requirement, and the current output voltage from each of the voltage data; The voltage margin of the relevant second power supply rail is determined based on the nominal voltage and the current output voltage, and the voltage sum value corresponding to the sum of each voltage margin and the nominal voltage is determined. If the current output voltage is greater than the corresponding voltage and value, the corresponding second power supply rail is determined as a candidate borrowed power supply rail.

4. The method according to claim 2, characterized in that, The step of determining candidate borrowed power rails among the second power rails based on the power supply demand and the functional safety level of each second power rail includes: Determine the first functional safety level in the power supply requirement, and the second functional safety level of each of the second power supply rails; If the second functional safety level is less than or equal to the first functional safety level, the corresponding second power supply rail is identified as a candidate borrowed power supply rail.

5. The method according to claim 2, characterized in that, The method for determining candidate borrowed power rails also includes: Determine the target current value corresponding to the product of the rated current of each of the second power supply rails and the preset borrowing safety factor; If the current load current of the second power supply rail is less than the target current value, the second power supply rail is identified as a candidate borrowed power supply rail; the current load current being less than the target current value indicates that the relevant second power supply rail has the load margin.

6. The method according to claim 2, characterized in that, The weighted evaluation score for determining the voltage data, load margin, and functional safety level of each candidate borrowed power rail includes: Based on the load type of the electrical load on the first power supply rail, determine the weighting coefficients that are respectively adapted to the voltage data, the load margin, and the functional safety level; Based on the voltage data, load margin, and functional safety level of each candidate borrowed power rail, and the weighting coefficients respectively adapted to the voltage data, load margin, and functional safety level, a weighted evaluation score for each candidate borrowed power rail is determined.

7. The method according to any one of claims 1-6, characterized in that, The step of supplying power to the electrical load of the first power supply rail via the target borrowed power supply rail includes: Based on the rated current of the target borrowed power rail, the preset borrowing safety factor, and the current load current, determine the current margin that the target borrowed power rail can currently borrow. Based on the rated operating current of the first power supply rail, the functional safety level, and the current available current margin, the peak value of the borrowed current is determined. Based on the rated operating current, a minimum operating current adapted to the first power supply rail is determined, and when the peak value of the borrowed current is greater than or equal to the minimum operating current, power is supplied to the electrical load of the first power supply rail based on the target borrowed power supply rail.

8. The method according to claim 7, characterized in that, The method further includes: If the peak value of the borrowed current is less than the minimum operating current, an additional borrowed power supply rail is determined, and the additional borrowed power supply rail and the target borrowed power supply rail are used as the updated target borrowed power supply rail. If the peak borrowing current of the updated target borrowed power rail is less than the minimum operating current, return to the step of determining the additional borrowed power rail and using the additional borrowed power rail and the target borrowed power rail as the updated target borrowed power rail; until the peak borrowing current of the updated target borrowed power rail is greater than or equal to the minimum operating current, power is supplied to the electrical load of the first power rail based on the updated target borrowed power rail.

9. A power supply control device for a domain controller, characterized in that, The device includes: The load data determination module is used to obtain the power demand of the electrical load connected to the first power supply rail in an abnormal state of the target fault type, and to obtain the load status data of each second power supply rail in a normal state, in the power supply rails of each functional module within a single domain controller of an intelligent vehicle. The normal rail data determination module is used to obtain the voltage data, load margin and functional safety level included in the load status data of each of the second power supply rails; The borrowing rail determination module is used to determine a target borrowing power rail from each of the second power rails based on at least one of the power supply requirements and the voltage data of each of the second power rails, the load margin and the functional safety level. The borrowed rail power supply module is used to supply power to the electrical load of the first power supply rail through the target borrowed power supply rail.

10. A vehicle-end control device, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1-8.

Images