Vehicle control systems, methods, computer equipment, vehicles, media and products

Abstract

This application provides a vehicle control system, method, computer equipment, vehicle, medium, and product. The vehicle control system includes a high-voltage command sending module, a high-voltage execution module, and at least one business function module. The high-voltage command sending module includes multiple high-voltage command sending sub-modules, each of which is bound to a business function module. Specifically: a first high-voltage command sending sub-module is used to send a high-voltage activation command to the high-voltage execution module in response to a high-voltage activation request from the first business function module; the first high-voltage command sending sub-module is one of the multiple high-voltage command sending sub-modules, and the first business function module is the business function module bound to the first high-voltage command sending sub-module; the high-voltage execution module is used to execute the high-voltage activation operation in response to the high-voltage activation command. This application simplifies the high-voltage activation execution logic.

Description

Technical Field

[0001] This invention relates to, but is not limited to, the field of vehicle electrical technology, and specifically to a vehicle control system, method, computer equipment, vehicle, medium, and product. Background Technology

[0002] In electric and hybrid vehicles, large batteries require high voltage to power critical functions such as air conditioning, seat heating, and battery charging. Related technologies typically employ a centralized, global control strategy for vehicle high-voltage electrical management, where a central controller makes unified decisions on powering on and off the high-voltage system. However, this approach suffers from high functional coupling, complex control logic, and difficulty in maintaining high voltage for multiple independent functions on demand and for extended periods. Summary of the Invention

[0003] This application provides a vehicle control system, method, computer equipment, vehicle, medium, and product.

[0004] The technical solution of this application embodiment is implemented as follows: This application provides a vehicle control system, which includes a high-voltage command sending module, a high-voltage execution module, and at least one business function module. The high-voltage command sending module includes multiple high-voltage command sending sub-modules, each of which is bound to a business function module, wherein: The first high-voltage command sending submodule is used to send a high-voltage command to the high-voltage execution module in response to the high-voltage demand of the first business function module. The first high-voltage command sending submodule is one of a plurality of high-voltage command sending submodules, and the first business function module is a business function module that is bound to the first high-voltage command sending submodule among a plurality of business function modules. The high-voltage execution module is used to execute the high-voltage operation in response to the high-voltage command.

[0005] In this embodiment, the high-voltage command sending module is decoupled into multiple independent high-voltage command sending sub-modules. Each high-voltage command sending sub-module is bound to a specific business function module. When a business function module has a high-voltage requirement, its corresponding high-voltage command sending sub-module sends a high-voltage command to the high-voltage execution module. The high-voltage execution module responds to the command and performs the high-voltage operation. Each high-voltage command sending sub-module operates independently, and each business function can request or release high-voltage resources at any time and independently. This not only achieves complete decoupling between functions but also simplifies the control logic of the high-voltage execution module. The high-voltage execution module only needs to focus on whether there is a high-voltage command and does not need to understand complex scenario logic, thereby improving the system's flexibility, maintainability, and scalability, and supporting plug-and-play function iteration.

[0006] Furthermore, the first high-voltage command sending submodule is also used to obtain a high-voltage fault code from the high-voltage execution module in response to the high-voltage requirement of the first business function module; the first high-voltage command sending submodule is also used to confirm that the vehicle meets the high-voltage conditions and send a high-voltage command to the high-voltage execution module when the high-voltage fault code indicates no fault.

[0007] Based on the aforementioned technical means, the first high-voltage command sending submodule, in response to the high-voltage requirement of the first business function module, obtains a high-voltage fault code from the high-voltage execution module. If the high-voltage fault code indicates no fault, the first high-voltage command sending submodule confirms that the vehicle meets the high-voltage requirement and sends a high-voltage command to the high-voltage execution module. This effectively detects forced high-voltage connection under faulty or abnormal conditions in the high-voltage system, thereby improving the safety and stability of the vehicle's electrical system and enabling the independent, safe, and reliable collaborative operation of multiple high-voltage electrical functions.

[0008] Furthermore, the first high-voltage instruction sending submodule is also used to respond to the high-voltage requirement of the first business function module, create a first high-voltage thread, and send the high-voltage instruction to the high-voltage execution module at preset time intervals within a first time range through the first high-voltage thread.

[0009] Based on the aforementioned technical means, the first high-voltage command sending submodule sends a high-voltage activation command to the high-voltage execution module through the first high-voltage thread at preset time intervals within a first time period. This ensures the continuous maintenance of the high-voltage state, preventing accidental de-energization due to a single lost high-voltage activation command, and thus guaranteeing the stable operation of high-voltage power consumption functions.

[0010] Furthermore, the high-voltage execution module is also used to respond to the high-voltage command and determine whether the vehicle's high-voltage system is in the high-voltage power-on completed state; the high-voltage execution module is also used to perform the high-voltage operation when it is determined that the vehicle's high-voltage system is not in the high-voltage power-on completed state, so that the vehicle's high-voltage system is in the high-voltage power-on completed state.

[0011] According to the aforementioned technical means, the high-voltage execution module responds to the high-voltage command by determining whether the vehicle's high-voltage system is in the high-voltage power-on completed state. If the high-voltage execution module determines that the vehicle's high-voltage system is not in the high-voltage power-on completed state, it performs the high-voltage operation to bring the vehicle's high-voltage system into the high-voltage power-on completed state. Thus, when the high-voltage execution module receives the high-voltage command, it determines whether the system is in the high-voltage power-on completed state, thereby eliminating the need for the high-voltage execution module to repeat the high-voltage operation and maintaining the high-voltage power-on completed state.

[0012] Furthermore, the high-pressure actuator module is also used for at least one of the following: If it is determined that the vehicle is not in the high-voltage power-on completed state, perform the high-voltage operation and set a timer for a second duration; Once it is confirmed that the vehicle is in a state of high-voltage power-on completion, reset the timer.

[0013] Based on the above technical means, by introducing a judgment mechanism for the completion of high-voltage power-on of the vehicle into the high-voltage execution module, combined with the setting and resetting logic of the timer, the dynamic maintenance and automatic release of high-voltage resources can be realized. This can reduce unnecessary high-voltage downtime caused by command interruption, thereby improving the stability, safety and resource utilization efficiency of the vehicle's high-voltage system.

[0014] Furthermore, the high-voltage execution module is also used to perform a low-voltage operation when the timer expires.

[0015] Based on the aforementioned technical means, by introducing a timer into the high-voltage execution module, and automatically performing a high-voltage reduction operation when the timer expires, the high-voltage system can be prevented from remaining in an ineffective state for an extended period due to malfunctions in individual functional modules or communication interruptions. This effectively reduces the vehicle's energy consumption and battery wear, and improves the overall system's safety and resource utilization.

[0016] Furthermore, at least one high-voltage command sending submodule is used to send a high-voltage command to the high-voltage execution module; the high-voltage execution module is also used to receive at least one high-voltage command; the high-voltage execution module is also used to perform a low-voltage operation if no high-voltage command is received within a second time period.

[0017] Based on the above technical means, by sending a high-voltage command to the high-voltage execution module through at least one high-voltage command sending submodule, each high-voltage power consumption function can independently and decoupledly request high-voltage resources, reducing the problem of the entire vehicle's high-voltage power failure due to the abnormality of a single business function. This enables the parallel operation and independent start-stop of multiple functions. Furthermore, by setting a second time threshold in the high-voltage execution module, the high-voltage de-energization operation is automatically executed when no high-voltage command is received within the second time period, reducing the control logic complexity of the high-voltage execution module.

[0018] Furthermore, the high-voltage actuator module is also used to perform a de-voltage operation when a vehicle malfunction is detected while the vehicle is in a high-voltage power-on completed state.

[0019] Based on the aforementioned technical means, when the vehicle is in the high-voltage power-on state, the high-voltage execution module actively detects vehicle malfunctions and performs a high-voltage reduction operation. This allows for real-time response to anomalies in the vehicle's high-voltage system, effectively preventing safety hazards caused by persistent vehicle malfunctions, thereby improving the safety and reliability of the entire vehicle's high-voltage system.

[0020] This application provides a vehicle control method applied to a vehicle control system. The vehicle control system includes a high-voltage command sending module, a high-voltage execution module, and at least one business function module. The high-voltage command sending module includes multiple high-voltage command sending sub-modules, each of which is bound to a business function module. The method includes: a first high-voltage command sending sub-module sending a high-voltage command to the high-voltage execution module in response to a high-voltage demand from a first business function module; the first high-voltage command sending sub-module is one of the multiple high-voltage command sending sub-modules, and the first business function module is the business function module bound to the first high-voltage command sending sub-module; the high-voltage execution module performing the high-voltage operation in response to the high-voltage command.

[0021] This application provides a computer device including the vehicle control system described above.

[0022] This application provides a vehicle that includes the computer equipment described above.

[0023] This application provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the steps in the above-described vehicle control method.

[0024] This application provides a computer program product, including a computer program or instructions, which, when executed by a processor, implement the steps in the above-described vehicle control method.

[0025] The beneficial effects of this invention are: (1) When a certain business function module has a high voltage requirement, its corresponding high voltage instruction sending submodule sends a high voltage instruction to the high voltage execution module; the high voltage execution module responds to the instruction and performs the high voltage operation. Each high voltage instruction sending submodule operates independently, and each business function can request or release high voltage resources at any time and independently. This not only achieves complete decoupling between functions, but also simplifies the control logic of the high voltage execution module. The high voltage execution module only needs to focus on whether there is a high voltage instruction, without having to understand the complex scenario logic, thereby improving the system's flexibility, maintainability and scalability, and supporting plug-and-play function iteration. (2) This application can effectively retrieve the forced high voltage when there is a fault or abnormal state in the high voltage system, thereby improving the safety and stability of the vehicle electrical system and enabling multiple high voltage power functions to operate independently, safely and reliably in coordination. (3) This application can achieve continuous maintenance of high voltage status, thereby avoiding accidental high voltage reduction due to loss of a single high voltage command, and thus ensuring the stable operation of high voltage power consumption function; (4) When the high voltage execution module of this application receives the high voltage command, it determines whether the current amplifier is in the high voltage power-on completed state, so that the high voltage execution module does not need to repeat the high voltage operation and maintains the high voltage power-on completed state. (5) This application introduces the timer into the high-voltage execution module and automatically performs the high-voltage operation when the timer expires. In this way, the high-voltage system can be kept in an ineffective state for a long time due to the abnormality of individual functional modules or communication interruption, thereby effectively reducing the energy consumption of the whole vehicle and the battery loss, and improving the safety and resource utilization of the whole system; (6) This application allows the high-voltage execution module to actively detect vehicle malfunctions and perform a de-energization operation when the vehicle is in a high-voltage power-on state. This enables real-time response to abnormalities in the vehicle's high-voltage system, effectively preventing safety hazards caused by persistent vehicle malfunctions, and thereby improving the safety and reliability of the vehicle's high-voltage system. (7) This application does not rely on any predefined scenarios. Any function that requires high pressure can be added at any time and responded to by the “natural superposition” of instructions, which has the flexibility to cope with future unknown functional requirements. Attached Figure Description

[0026] Figure 1 A schematic diagram of the composition structure of a vehicle control system provided in an embodiment of this application; Figure 2 A schematic diagram illustrating the implementation process of a vehicle control method provided in this application embodiment; Figure 3 A schematic diagram of the composition structure of a distributed high-voltage collaborative management system provided in this application embodiment. Figure 1 ; Figure 4 A schematic diagram of the composition structure of a distributed high-voltage collaborative management system provided in this application embodiment. Figure 2 ; Figure 5 A schematic diagram of the composition structure of a distributed high-voltage collaborative management system provided in this application embodiment. Figure 3 ; Figure 6 A schematic diagram of the composition structure of a distributed high-voltage collaborative management system provided in this application embodiment. Figure 4 ; Figure 7 A schematic diagram of the processing flow of a high-pressure execution module provided in an embodiment of this application; Figure 8 A schematic diagram of the processing flow of a high-voltage command sending module provided in an embodiment of this application; Figure 9 This is a schematic diagram of the composition structure of a computer device provided in an embodiment of this application; Figure 10 This is a schematic diagram of the composition structure of a vehicle provided in an embodiment of this application. Detailed Implementation

[0027] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application are further described in detail below with reference to the accompanying drawings and embodiments. The described embodiments should not be regarded as limitations on this application. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0028] In the following description, references are made to “some embodiments,” which describe a subset of all possible embodiments. However, it is understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.

[0029] It should be noted that the terms "first, second, and third" used in the embodiments of this application are merely to distinguish similar objects and do not represent a specific ordering of objects. It is understood that "first, second, and third" can be interchanged in a specific order or sequence where permitted, so that the embodiments of this application described herein can be implemented in an order other than that illustrated or described herein.

[0030] It will be understood by those skilled in the art that, unless otherwise defined, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art to which the embodiments of this application pertain. It should also be understood that terms such as those defined in general dictionaries should be understood to have a meaning consistent with their meaning in the context of the prior art, and should not be interpreted in an idealized or overly formal sense unless specifically defined as herein.

[0031] In related technologies, high-voltage power management systems for new energy vehicles generally adopt a centralized, global control strategy, where a central controller makes unified decisions on powering on and off the high-voltage system. This model results in high coupling between different high-voltage power-consuming functions; starting or stopping one function may affect the normal operation of other functions. At the same time, with the increasing number of onboard functions, the central controller needs to handle complex scenario judgments and priority arbitration logic, posing challenges to reliability and maintainability. Furthermore, the maintenance of high-voltage power is often strongly tied to the main function (such as driving), making it difficult to support multiple independent functions maintaining high voltage on demand for extended periods.

[0032] To address the aforementioned issues, this application provides a vehicle control system that decouples a high-voltage command sending module into multiple independent high-voltage command sending sub-modules. Each sub-module is bound to a specific business function module, enabling independent requests and releases of high-voltage resources for each function. When a business function module requires high-voltage access, its corresponding high-voltage command sending sub-module sends a high-voltage access command to the high-voltage execution module. The high-voltage execution module responds to this command and performs the high-voltage access operation. This not only achieves complete decoupling between functions but also simplifies the control logic of the high-voltage execution module. The high-voltage execution module only needs to focus on whether a high-voltage access command is available, without needing to understand complex scenario logic. This improves the system's flexibility, maintainability, and scalability, supporting plug-and-play function iteration and OTA updates.

[0033] It should be noted that the embodiments of this application can be applied to various new energy vehicles, including battery electric vehicles (BEVs), plug-in hybrid electric vehicles (PHEVs), etc., and are especially suitable for intelligent connected vehicles with rich on-board high-voltage power consumption functions.

[0034] This application provides a vehicle control system. Figure 1 This is a schematic diagram of the composition structure of a vehicle control system provided in an embodiment of this application, as shown below. Figure 1 As shown, the vehicle control system 100 includes a high-voltage command sending module 110, a high-voltage execution module 120, and at least one business function module 130. The high-voltage command sending module 110 includes multiple high-voltage command sending sub-modules 111, and each high-voltage command sending sub-module 111 is bound to a business function module 130, wherein: The first high-voltage command sending submodule is used to send a high-voltage command to the high-voltage execution module in response to a high-voltage demand from the first business function module. The first high-voltage command sending submodule is one of a plurality of high-voltage command sending submodules, and the first business function module is a business function module bound to the first high-voltage command sending submodule among a plurality of business function modules. The high-voltage execution module is used to execute the high-voltage operation in response to the high-voltage command.

[0035] Here, the vehicle control system refers to the collective hardware and software that coordinates, monitors, and regulates the various subsystems of a vehicle (powertrain, chassis, body, driver assistance, etc.). In some implementations, the vehicle control system can be a complete control chain consisting of a central computing platform, domain controllers (intelligent driving, cockpit, vehicle control), area controllers, and underlying actuators / sensors.

[0036] A high-voltage command sending module is a logic module in a vehicle control system used to send high-voltage commands to a high-voltage execution module. In some implementations, the vehicle control system may include multiple high-voltage command sending modules, which may be physically distributed across different controllers within the vehicle control system.

[0037] The high-voltage execution module is a module used to respond to high-voltage commands and perform actual high-voltage power-on or power-off operations on the high-voltage electrical system. It is usually deployed in the area controller (Vehicle Interface Unit, VIU) or battery management system (BMS).

[0038] Business function modules refer to specific application scenarios or service functions in a vehicle that require the use of high-voltage power, such as air conditioning, seat ventilation, seat heating, air conditioning purification, fragrance, rearview mirror heating, steering wheel heating, in-vehicle refrigerator, defrosting and defogging, in-vehicle TV projection, charging, scheduled charging, intelligent charging, battery insulation, and remote wake-up. These business function modules generate a demand for high-voltage electricity when triggered by the user or automatically started by the system.

[0039] In some implementations, the high-voltage command sending module and the high-voltage execution module are logical modules, but they can be physically integrated or distributed in different controllers of the vehicle control system.

[0040] In some implementations, the high-voltage command transmission module can be deployed in any controller of the vehicle, such as at least one of the cockpit domain, power domain, vehicle control domain, driving domain, and area controller (VIU).

[0041] In some implementations, the high-voltage command sending module may include multiple independently operating high-voltage command sending sub-modules. These multiple high-voltage command sending sub-modules are functional logic sub-modules that do not interfere with each other. Each high-voltage command sending sub-module is bound to a specific business function module, and each high-voltage command sending sub-module is decoupled from the high-voltage command sending sub-modules bound to other business function modules, thereby enabling independent requesting and releasing of high-voltage resources.

[0042] For example, the first high-voltage command sending submodule is a submodule bound to the first business function module.

[0043] In some implementations, different high-voltage command sending submodules are bound to multiple business function modules one by one. The functions of different high-voltage command sending submodules are logically independent. For example, if the first business function module needs to maintain high voltage, the first high-voltage command sending submodule sends a high-voltage command to the high-voltage execution module, which is not affected by the start and stop of other business functions (or services). At the same time, the start and stop of the first business function module and the first high-voltage command sending submodule will not affect other business function modules and other high-voltage command sending submodules.

[0044] In some implementations, the deployment location of the high-voltage command transmission submodule can be determined based on the application domain to which the business function module bound to it belongs. For example, if the first business function module is a seat heating function module, and the application domain of the seat heating function module is the cabin domain, then the first high-voltage command transmission submodule bound to the first business function module can be deployed in the vehicle telematics box (T-Box) in the cabin domain.

[0045] In some implementations, multiple high-voltage command sending submodules can be part of multiple service function modules. For example, when a first service function module has a high-voltage requirement, a first high-voltage command sending submodule needs to be configured to send the high-voltage command to the first service function module. The first high-voltage command sending submodule can be part of the first service function module.

[0046] In some implementations, when the first business function module among multiple business function modules does not trigger a high-voltage requirement, the first high-voltage command sending submodule is in a dormant state. When the first business function module is triggered or started by the user, a demand for high-voltage electricity is generated, and the first high-voltage command sending submodule bound to the first business function module sends a high-voltage activation command to the high-voltage execution module. The high-voltage execution module receives the high-voltage activation command and performs the high-voltage activation operation. Here, the high-voltage activation command refers to a control signal sent by the high-voltage command sending submodule to the high-voltage execution module to request the activation of the high-voltage power system.

[0047] For example, if the first business function module is a seat heating function module, when the user activates the seat heating function through the vehicle's infotainment system, this first business function module requires high voltage, and the first high voltage command sending submodule sends a high voltage command to the high voltage execution module. Similarly, if the first business function module is an air conditioning function module, in a remote control scenario, when the user sends a command to turn on the vehicle's air conditioning via a mobile app, this first business function module also requires high voltage, and the first high voltage command sending submodule sends a high voltage command to the high voltage execution module.

[0048] In some implementations, the first high-voltage command sending submodule can be a newly created thread when the first service function module is triggered or started by the user.

[0049] In some implementations, the first high-voltage command sending submodule may periodically (e.g., once per minute) send a high-voltage command to the high-voltage execution module to enable the high-voltage execution module to maintain high voltage (e.g., maintain it for 1 minute).

[0050] In some implementations, the high-voltage command is functionally identical, meaning the high-voltage execution module does not need to identify the source or specific purpose of the command; it only needs to confirm the existence of a valid command to maintain the high voltage.

[0051] In some implementations, the high-voltage command can be transmitted via wired network, wireless network, CAN, LIN bus, or internal software communication mechanism.

[0052] In some implementations, the high-voltage execution module receives a high-voltage connection command and determines whether the preconditions for high-voltage connection (such as no faults, sufficient power, etc.) are met; if the high-voltage connection conditions are met, the high-voltage connection operation is performed.

[0053] In some implementations, the high-voltage execution module performs high-voltage connection operations, including but not limited to activating the battery management system, closing the main relay, and establishing a high-voltage circuit. After the high-voltage connection operation is completed, the vehicle's high-voltage system enters operational status, providing power support for subsequent business functions. For example, when the air conditioning system requests high-voltage connection, the high-voltage execution module completes the high-voltage connection operation, and the air conditioning compressor immediately starts cooling or heating. As another example, in a remote wake-up scenario, when a user turns on the vehicle's air conditioning via a mobile app, the high-voltage execution module responds to the user's command to turn on the vehicle's air conditioning via the mobile app, completing the high-voltage connection operation and enabling the air conditioning system to operate normally.

[0054] In this embodiment, the high-voltage command sending module is decoupled into multiple independent high-voltage command sending sub-modules. Each high-voltage command sending sub-module is bound to a specific business function module. When a business function module has a high-voltage requirement, its corresponding high-voltage command sending sub-module sends a high-voltage command to the high-voltage execution module. The high-voltage execution module responds to the command and performs the high-voltage operation. Each high-voltage command sending sub-module operates independently, and each business function can request or release high-voltage resources at any time and independently. This not only achieves complete decoupling between functions but also simplifies the control logic of the high-voltage execution module. The high-voltage execution module only needs to focus on whether there is a high-voltage command and does not need to understand complex scenario logic, thereby improving the system's flexibility, maintainability, and scalability, and supporting plug-and-play function iteration.

[0055] In some embodiments, the first high-voltage command sending submodule is further configured to obtain a high-voltage fault code from the high-voltage execution module in response to a high-voltage requirement from the first business function module; the first high-voltage command sending submodule is further configured to confirm that the vehicle meets the high-voltage conditions and send a high-voltage command to the high-voltage execution module when the high-voltage fault code indicates no fault.

[0056] Here, high-voltage fault codes refer to error codes detected and returned by high-voltage execution modules (such as VIU area controllers) that reflect the current status of the high-voltage system and are used to determine whether the system has the safety conditions for high-voltage operation.

[0057] In some implementations, high-voltage fault codes are multiple predefined enumerated values. High-voltage fault codes represent abnormal or limiting states of the high-voltage system in different dimensions, such as battery health, motor control unit status, software upgrade process, and battery level.

[0058] In one example, high-voltage fault codes may include: NoErr (no fault), FltEmgyPwrDwn (high voltage under emergency fault), BcuFltPwrDwn (high voltage under BCU fault), BcuNotAllwdPwrUp (high voltage not allowed for BCU), IpuNotAllwdPwrUp (high voltage not allowed for IPU), OtaNotAllwdPwrUp (high voltage not allowed during OTA), LoSocPowerDwn (high voltage under low power failure), OverTime (high voltage not applied after timeout), etc.

[0059] In some implementations, the high-voltage execution module provides a high-voltage fault code acquisition interface (such as Get_VcuHvSysErrNr) to provide high-voltage fault codes to other modules.

[0060] In some implementations, when the first business function module triggers the high-voltage requirement, the first high-voltage command sending submodule calls the high-voltage fault code acquisition interface to obtain the high-voltage fault code from the high-voltage execution module before sending the high-voltage command, in order to determine whether there is a fault in the vehicle's high-voltage system.

[0061] If the high-voltage fault code obtained by the first high-voltage command sending submodule indicates no fault (such as NoErr), it confirms that the vehicle's high-voltage system is fault-free and meets the conditions for applying high voltage, and sends a high-voltage application command to the high-voltage execution module.

[0062] If the high-voltage fault code obtained by the first high-voltage command sending submodule indicates a fault or limitation condition for applying high voltage (such as returning a high-voltage fault code other than no fault), the first high-voltage command sending module will not send a high-voltage command and will feed back the obtained high-voltage fault code to the corresponding first business function module to reduce the risk caused by forcibly applying high voltage.

[0063] In some implementations, if the first high-voltage command sending submodule confirms that the high-voltage fault code indicates no fault, it further verifies whether the vehicle meets other necessary conditions for high-voltage connection (such as whether the battery power is sufficient, whether there is no ongoing OTA (Over-The-Air) update, and whether the vehicle is not in an emergency braking state). If the vehicle meets other necessary conditions for high-voltage connection, the first high-voltage command sending submodule sends a high-voltage connection command to the high-voltage execution module.

[0064] In this embodiment, the first high-voltage command sending submodule, in response to a high-voltage requirement from the first business function module, obtains a high-voltage fault code from the high-voltage execution module. If the high-voltage fault code indicates no fault, the first high-voltage command sending submodule confirms that the vehicle meets the high-voltage requirement and sends a high-voltage command to the high-voltage execution module. This effectively detects forced high-voltage connection under faulty or abnormal conditions in the high-voltage system, thereby improving the safety and stability of the vehicle's electrical system and enabling the independent, safe, and reliable collaborative operation of multiple high-voltage electrical functions.

[0065] In some embodiments, the first high-voltage instruction sending submodule is further configured to, in response to the high-voltage requirement of the first business function module, create a first high-voltage thread, and send a high-voltage instruction to the high-voltage execution module at preset time intervals within a first time range through the first high-voltage thread.

[0066] Here, the first high-voltage thread is a program execution unit created independently for a specific business function module, used to periodically send high-voltage instructions to the high-voltage execution module.

[0067] In some implementations, the first high-voltage thread can be dynamically generated when the first business function module is triggered and there is a high-voltage requirement. It has an independent operating space and resource management mechanism, and this first high-voltage thread will not interfere with or compete for resources with other business function threads. For example, in an in-vehicle system, the first high-voltage command sending submodule is deployed in the T-Box in the cockpit domain. When a user remotely activates the air conditioning rapid cooling function via a mobile app, the first high-voltage command sending submodule in the T-Box responds to the request to activate the air conditioning rapid cooling function by creating a first high-voltage thread dedicated to the air conditioning rapid cooling function.

[0068] In some implementations, there is a one-to-one functional binding relationship between the first high-voltage thread and the first business function module, meaning that the first high-voltage thread only serves the first business function module. For example, the first business function module is a seat heating function module, and the second business function module is a defrosting and defogging function module; the seat heating function module and the defrosting and defogging function module each have independent high-voltage threads (for example, the seat heating function corresponds to the first high-voltage thread, and the defrosting and defogging function module corresponds to the second high-voltage thread), so even if the seat heating function is turned off, it will not affect the continuous operation of the defrosting and defogging function.

[0069] In some implementations, the first high-voltage command sending submodule, in response to a high-voltage requirement from the first service function module, creates a first high-voltage thread corresponding to the first service function module. After creation, the first high-voltage thread enters an initialization state, obtains the current high-voltage system's high-voltage fault code (e.g., via the Get_VcuHvSysErrNr interface), and determines whether the high-voltage conditions are met. If the obtained high-voltage fault code indicates no fault, the first high-voltage thread will enter a state of cyclically sending high-voltage commands; if a fault occurs, the first high-voltage thread will pause and send error information back to the first service function module it serves to reduce unnecessary operations.

[0070] In one example, when a user activates the seat heating function on the vehicle's infotainment system, the vehicle control system detects that the seat heating function module sends a high-voltage demand signal. The first high-voltage command sending submodule then creates a first high-voltage thread, which runs continuously in the background without occupying main control resources and has high-priority scheduling capabilities.

[0071] In some implementations, the first high-voltage thread can be configured with a timed destruction mechanism, such as automatically releasing resources after the seat heating function module finishes operating or after a timeout without receiving a new high-voltage demand signal, thereby improving the overall efficiency of the vehicle control system.

[0072] In some implementations, the first high-voltage thread continuously sends high-voltage commands to the high-voltage execution module at preset time intervals within a first duration.

[0073] The first duration range refers to the time window during which the first high-voltage thread continuously sends high-voltage commands. It is usually set according to the requirements of the first business function module, such as 5 minutes, 10 minutes or longer, so that the high-voltage system can maintain sufficient time to complete the target function.

[0074] The preset time interval is the frequency at which the first high-voltage thread sends high-voltage command instructions. It can be set to 1 minute, 30 seconds, or 5 seconds, depending on the response mechanism of the high-voltage execution module and the system stability requirements. For example, the area controller (VIU) is set to check for high-voltage command instructions every 5 minutes by default. Therefore, the first high-voltage thread is set to send instructions every 1 minute to ensure that at least one valid high-voltage command is received within 5 minutes, preventing misjudgment of high-voltage deactivation due to network latency or brief interruptions.

[0075] In one example, if the first business function module is the seat heating function module, the first business function module corresponding to the seat heating function may need to last for 20 minutes. Therefore, the first high-voltage thread will send a high-voltage command every minute within 20 minutes (within the first time period).

[0076] In some implementations, when the business function of the first business function module is shut down, the first high-voltage thread is stopped, and the sending of high-voltage commands to the high-voltage execution module is stopped. For example, if the first business function module is a defrosting and defogging module, during the defrosting and defogging function, the high-voltage thread for defrosting and defogging is stopped, and the first high-voltage command sending submodule bound to the defrosting and defogging module stops sending high-voltage commands.

[0077] In some implementations, the first high-voltage thread and the high-voltage execution module interact via a standardized communication protocol, such as CAN bus, LIN bus, Ethernet, or internal software message queues. During communication, the first high-voltage thread sends a high-voltage activation command (RR_HvActvReq command), which carries the parameter HVActiveRequest=1, indicating a request to activate the high voltage. After receiving the high-voltage activation command from the first high-voltage thread, the high-voltage execution module performs the high-voltage activation operation.

[0078] In this embodiment, the first high-voltage command sending submodule sends a high-voltage activation command to the high-voltage execution module via the first high-voltage thread at preset time intervals within a first time period. This ensures continuous maintenance of the high-voltage state, preventing accidental de-energization due to a single lost high-voltage activation command, and thus guaranteeing the stable operation of the high-voltage power supply function.

[0079] In some embodiments, the high-voltage execution module is further configured to determine whether the high-voltage system of the vehicle is in a high-voltage power-on completed state in response to the high-voltage command; the high-voltage execution module is further configured to perform a high-voltage operation to bring the high-voltage system of the vehicle into a high-voltage power-on completed state if it is determined that the high-voltage system of the vehicle is not in a high-voltage power-on completed state.

[0080] Here, the high-voltage power-on completion state refers to the state in which the high-voltage system of the whole vehicle has been successfully activated and is running stably. At this time, key components such as the battery management system (BMS) and motor controller (IPU) are working normally and can provide power support for subsequent high-voltage power consumption functions (such as air conditioning, seat heating, car refrigerator, etc.).

[0081] In some implementations, when the high-voltage execution module receives a high-voltage power-on command, it confirms whether the current high-voltage system of the vehicle is in the high-voltage power-on completed state. If it confirms that the current high-voltage system of the vehicle is in the high-voltage power-on completed state, the high-voltage execution module does not need to perform the high-voltage power-on operation again. If it confirms that the current high-voltage system of the vehicle is not in the high-voltage power-on completed state, the high-voltage execution module performs the high-voltage power-on operation to bring the vehicle's high-voltage system to the high-voltage power-on completed state.

[0082] In some implementations, the high-voltage execution module does not need to pay attention to the sender of the high-voltage command; it only needs to ensure that the vehicle's high-voltage system is in a high-voltage power-on completed state after receiving the high-voltage command.

[0083] In this embodiment, the high-voltage execution module responds to the high-voltage command by determining whether the vehicle's high-voltage system is in a high-voltage power-on completed state. If the high-voltage execution module determines that the vehicle's high-voltage system is not in a high-voltage power-on completed state, it performs the high-voltage operation to bring the vehicle's high-voltage system into a high-voltage power-on completed state. Thus, when the high-voltage execution module receives the high-voltage command, it determines whether the system is in a high-voltage power-on completed state, thereby eliminating the need for the high-voltage execution module to repeat the high-voltage operation and maintaining the high-voltage power-on completed state.

[0084] In some embodiments, the high-voltage execution module is further configured to: perform a high-voltage operation and set a timer for a second duration if it is determined that the vehicle is not in a high-voltage power-on completed state; and reset the timer if it is determined that the vehicle is in a high-voltage power-on completed state.

[0085] Here, the second duration timer refers to the timer expiring after the second duration following its activation.

[0086] In some implementations, when the high-voltage execution module confirms that the vehicle is not currently in the high-voltage power-on completed state, it will initiate the high-voltage power-on process. The high-voltage power-on process includes the control actions performed by the high-voltage execution module to ultimately bring the vehicle's high-voltage system to a power-available state. To achieve a dynamic high-voltage maintenance mechanism, the high-voltage execution module will start a second-duration timer (e.g., set to 5 minutes) to monitor whether high-voltage power-on commands are continuously received.

[0087] In some implementations, after performing the high-voltage operation, the high-voltage execution module starts a timer for a second duration, and automatically performs the low-voltage operation after the timer expires.

[0088] In some implementations, when the high-voltage execution module detects that the vehicle has already completed high-voltage power-on (i.e., the timer has not expired), and receives a high-voltage power-on command again, it will not repeat the complete high-voltage power-on process. Instead, it will directly reset the previously set second-duration timer. Resetting the timer means that the high-voltage execution module continues to maintain the current high-voltage state, extending the availability time of the high-voltage system.

[0089] Understandably, multiple independent high-voltage command sending submodules periodically send high-voltage activation commands to the high-voltage execution module. The high-voltage execution module continuously receives these commands (which can originate from the same or different high-voltage command sending submodules), preventing the timer from timing out and ensuring continuous power supply to the high-voltage system. For example, when both the air conditioning and seat heating modules require high voltage simultaneously, their respective modules send high-voltage activation commands, and the high-voltage execution module continuously resets the timer, maintaining high voltage throughout. This effectively supports the need for multiple functions to use high voltage in parallel, improving system flexibility and user experience.

[0090] In this embodiment, by introducing a mechanism for judging the completion status of high-voltage power-on of the vehicle in the high-voltage execution module, and combining the setting and resetting logic of the timer, the dynamic maintenance and automatic release of high-voltage resources can be realized. This can reduce unnecessary high-voltage downsizing caused by instruction interruption, thereby improving the stability, safety and resource utilization efficiency of the vehicle's high-voltage system.

[0091] In some embodiments, the high-voltage execution module is further configured to perform a low-voltage operation if it is determined that the timer has expired.

[0092] Here, "high-voltage shutdown" refers to the process by which the high-voltage execution module actively cuts off the high-voltage power supply when it determines that there is no high-voltage demand.

[0093] In some implementations, the high-voltage shutdown operation includes steps such as disconnecting the battery management system (BMS) from the high-voltage load, turning off relevant relays, and notifying other system modules that the high voltage has been shut off. This high-voltage shutdown operation not only ensures system safety and energy efficiency but also avoids energy waste caused by misoperation or abnormal conditions. For example, if an end user cancels the remote air conditioning function and no other function continues to request high voltage, the timer will time out and trigger the high-voltage shutdown operation to prevent the battery from continuously discharging when unused.

[0094] In some implementations, the high-voltage execution module determines whether the vehicle currently requires high-voltage access by using a set timer. For example, if the timer has not expired, it means that there are still high-voltage command sending submodules sending high-voltage access commands to the high-voltage execution module, so it can be determined that the vehicle currently requires high-voltage access and the high-voltage power-on completion state needs to be maintained. If the timer expires, it means that no high-voltage command sending submodules are sending high-voltage access commands to the high-voltage execution module, so it can be determined that the vehicle currently does not require high-voltage access, and the high-voltage execution module can perform the high-voltage de-energization operation.

[0095] In some implementations, a timing mechanism within the high-pressure execution module can be used to control the duration of high-pressure maintenance. This mechanism starts timing upon receiving a high-pressure activation command (HVActiveRequest). When the timing reaches a preset threshold (e.g., 5 minutes) and no new high-pressure activation command (HVActiveRequest) is received, a high-pressure reduction operation is triggered. This timing mechanism can be configured for a fixed duration or dynamically adjusted duration, determined by design requirements and application scenarios. For example, when an end user remotely activates the air conditioning function via a mobile application, if the system is set to run continuously for 20 minutes, the timing mechanism can be set to reset every 5 minutes to ensure continuous high-pressure supply. In non-critical scenarios, a shorter timing cycle (e.g., 1-3 minutes) can be used to improve energy efficiency and safety.

[0096] In some implementations, the high-voltage execution module is used to receive periodic requests from multiple high-voltage command sending modules, determine system preconditions (such as fault codes), and perform functions such as raising / lowering high voltage.

[0097] In one example, an end user remotely activates the vehicle refrigerator via a mobile application. The remote communication module (T-Box), acting as a high-voltage command sending module, creates an independent thread to periodically send high-voltage activation commands (such as HVActiveRequest), i.e., high-voltage activation commands. If the end user turns off the refrigerator after 10 minutes, the corresponding thread stops sending high-voltage activation commands (HVActiveRequest). At this point, if the high-voltage execution module does not receive any high-voltage activation commands (HVActiveRequest) for 5 consecutive minutes, the timer expires, and it automatically performs a high-voltage deactivation operation, thereby cutting off the high-voltage power supply to the refrigerator and achieving precise energy management.

[0098] In this embodiment, a timer is introduced into the high-voltage execution module, and the high-voltage operation is automatically executed when the timer expires. This avoids the high-voltage system from being in an ineffective state for a long time due to individual functional module malfunctions or communication interruptions, thereby effectively reducing the vehicle's energy consumption and battery wear, and improving the safety and resource utilization of the entire system.

[0099] In some embodiments, at least one high-voltage command sending submodule is used to send a high-voltage command to the high-voltage execution module; the high-voltage execution module is also used to receive at least one high-voltage command; the high-voltage execution module is also used to perform a low-voltage operation if no high-voltage command is received within a second time period.

[0100] The second duration refers to the maximum waiting time that the high-voltage execution module is allowed to maintain the high-voltage power-on completed state after not receiving any high-voltage command. In one example, the second duration can be set to 5 minutes.

[0101] In some implementations, each high-voltage command sending submodule within at least one submodule can operate independently without affecting others. The operating status of each submodule is determined by the activation and deactivation of its corresponding business function module. For example, when a user activates the seat heating via the vehicle's infotainment system, a dedicated high-voltage command sending submodule for the seat heating function is created and activated to periodically send high-voltage commands to maintain the vehicle's high-voltage power supply. The high-voltage command sending submodule can be deployed in any domain, such as the cockpit domain, powertrain domain, or area controller (e.g., VIU), and supports sending commands via various methods, including CAN, LIN, Ethernet, or internal software communication mechanisms.

[0102] In some implementations, the high-voltage command sent by at least one high-voltage command sending submodule is functionally identical, meaning that the high-voltage execution module does not need to concern itself with the source of the high-voltage command or with how long the high-voltage command needs to be applied.

[0103] For example, a user can remotely activate the vehicle's refrigerator via a mobile app. The high-voltage command transmission module is deployed in the T-Box within the cabin domain. The T-Box creates an independent high-voltage command transmission submodule, which periodically (e.g., once per minute) sends a high-voltage activation command to the high-voltage execution module to ensure continuous power supply to the refrigerator. This high-voltage activation control process requires no involvement from other vehicle functions and does not affect the operation of the air conditioning or other high-voltage systems, achieving completely independent control between each function.

[0104] In some implementations, the high-voltage execution module receives high-voltage activation commands from multiple high-voltage command sending submodules. These commands may originate from different domains or functions, such as air conditioning, seat heating, defrosting, and defogging. Since each high-voltage command sending submodule operates independently, high-voltage activation commands can arrive at the high-voltage execution module concurrently, creating a command superposition effect. The high-voltage execution module does not need to distinguish the source of the high-voltage activation command; it only needs to confirm the existence of at least one valid command to maintain the complete high-voltage power-on state. For example, when the vehicle is stationary and both air conditioning and rearview mirror heating are activated simultaneously, the high-voltage command sending submodules corresponding to these two functions will each send a high-voltage activation command. Upon receiving one of these commands, the high-voltage execution module determines that a high-voltage requirement exists, thereby keeping the high-voltage electrical system active.

[0105] In some implementations, if a high-voltage command sending submodule temporarily interrupts sending high-voltage command commands due to network latency or failure, the high-voltage system can still maintain normal operation as long as other high-voltage command sending submodules continue to send high-voltage command commands, preventing unexpected high-voltage power outages due to a single functional malfunction. Furthermore, the high-voltage execution module verifies the legitimacy of the high-voltage command through an underlying communication protocol (such as CAN or Ethernet), ensuring that all received high-voltage command commands are authorized and secure, preventing unauthorized high-voltage operations.

[0106] In some implementations, the high-pressure execution module is typically deployed within the VIU (Variable Intake Unit). It receives high-pressure activation commands from at least one high-pressure command sending submodule via a high-pressure activation command acquisition interface (e.g., RR_HvActvReq). The HvActvReq parameter of the high-pressure activation command acquisition interface contains enumerated values ​​0 (no request) and 1 (high-pressure activation). When a value of 1 is received, the high-pressure execution module first calls the high-pressure fault code acquisition interface to retrieve the high-pressure fault code, determining whether a fault exists in the vehicle's high-pressure system. If no fault is found, the high-pressure activation process is initiated, and the timer is reset to extend the high-pressure maintenance time.

[0107] In some implementations, if the high-voltage execution module receives another high-voltage command within the second time period after receiving the command, it will restart the timer to continue maintaining high voltage. Only when no valid high-voltage command is received for more than the second time period will the high-voltage execution module determine that there is no current high-voltage demand and then perform a high-voltage deactivation operation, cutting off the vehicle's high-voltage power supply. This heartbeat-based command maintenance principle reduces the complexity of control logic by maintaining the high-voltage system's activation state through continuous high-voltage commands. For example, when the user turns off all high-voltage electrical functions, all high-voltage command sending submodules stop working. If the high-voltage execution module does not receive a new high-voltage command within 5 minutes, it will automatically deactivate the high-voltage command, saving energy and ensuring safety.

[0108] In some implementations, when multiple functional modules are activated simultaneously, such as air conditioning, seat heating, and in-vehicle television, their respective high-voltage command sending submodules continuously send high-voltage commands. The high-voltage execution module receives and superimposes these high-voltage commands, ensuring stable operation of the high-voltage system. When a user disables a function (such as turning off seat heating), only the high-voltage command sending submodule corresponding to that function stops sending high-voltage commands; other functions remain unaffected, and the system maintains high voltage until all high-voltage command sending submodules stop sending high-voltage commands and the timeout period expires before de-energizing the high-voltage system.

[0109] In some implementations, the high-voltage execution module does not require the high-voltage command sending module or other modules to send a high-voltage command before performing the high-voltage reduction operation. Instead, it automatically performs the high-voltage reduction operation if no high-voltage command is received within a second time period.

[0110] In this embodiment, a high-voltage command sending submodule sends a high-voltage command to the high-voltage execution module, enabling each high-voltage power consumption function to independently and decoupledly request high-voltage resources. This reduces the problem of the entire vehicle's high-voltage power being cut off due to an abnormality in a single business function, thereby enabling the parallel operation and independent start-stop of multiple functions. Furthermore, by setting a second time threshold in the high-voltage execution module, the high-voltage de-energization operation is automatically executed when no high-voltage command is received within the second time period, reducing the control logic complexity of the high-voltage execution module.

[0111] In some embodiments, the high-voltage execution module is further configured to perform a low-voltage operation when a vehicle malfunction is detected while the vehicle is in a high-voltage power-on completed state.

[0112] In some implementations, vehicle malfunction refers to an abnormal state in the vehicle's high-voltage system or related components that affects safe operation, including but not limited to BCU malfunction, IPU malfunction, low battery, high-voltage access not permitted during OTA updates, and high-voltage access not timed out. These vehicle malfunction scenarios are identified through a high-voltage fault code mechanism built into the high-voltage execution module. The fault codes corresponding to the vehicle malfunction status include NoErr (no fault), FltEmgyPwrDwn (emergency high-voltage access due to fault), BcuFltPwrDwn (high-voltage access due to BCU malfunction), IpuNotAllwdPwrUp (high-voltage access not permitted by IPU), LoSocPowerDwn (high-voltage access due to low battery and power failure), and OverTime (high-voltage access not timed out).

[0113] In some implementations, when the high-voltage execution module detects a high-voltage fault code corresponding to any vehicle fault state, it considers the vehicle to be in a fault state, and the high-voltage execution module immediately performs a high-voltage reduction operation, thereby realizing real-time safety monitoring of the vehicle's high-voltage system.

[0114] In some implementations, the high-voltage actuator periodically checks the system's health status. If any vehicle malfunction that may pose a safety hazard is detected, it immediately initiates a high-voltage operation, reducing potential accidents caused by persistent vehicle malfunctions, such as battery overheating, short circuits, and electric shocks, thereby improving the safety of the entire vehicle's electrical system.

[0115] For example, if the vehicle detects excessively high battery temperature during charging (corresponding to fault code FltEmgyPwrDwn), the high-voltage actuator will immediately perform a high-voltage reduction operation, cutting off the high-voltage power supply and simultaneously sending a fault alarm to the on-board diagnostic system to remind the user to handle the issue promptly. Similarly, if the vehicle enters OTA (Over-The-Air) update mode after remotely activating the air conditioning's rapid cooling function (corresponding to OtaNotAllwdPwrUp), the high-voltage actuator will also immediately perform a high-voltage reduction operation to prevent uncontrollable high-voltage operations during system updates.

[0116] In some implementations, parameters such as voltage, current, and temperature are collected in real time using hardware sensors, and then calculated to generate a high-voltage fault code corresponding to the vehicle malfunction; and / or, It communicates with each domain controller via software protocols to obtain vehicle fault information reported by each domain controller.

[0117] Different fault detection methods are suitable for different vehicle models and platforms. For example, high-precision sensors and AI algorithms can be used to predict vehicle faults in high-end models, while basic threshold judgment methods can be used in economy models.

[0118] In this embodiment, when the vehicle is in the high-voltage power-on completed state, the high-voltage execution module actively detects a vehicle malfunction and performs a high-voltage reduction operation. This allows for real-time response to abnormalities in the vehicle's high-voltage system, effectively preventing safety hazards caused by persistent vehicle malfunctions, and thus improving the safety and reliability of the entire vehicle's high-voltage system.

[0119] This application provides a vehicle control method. Figure 2 This is a schematic diagram illustrating the implementation flow of a vehicle control method provided in an embodiment of this application, as shown below. Figure 2 As shown, this method is applied to a vehicle control system. The vehicle control system includes a high-voltage command sending module, a high-voltage execution module, and at least one business function module. The high-voltage command sending module includes multiple high-voltage command sending sub-modules, and each high-voltage command sending sub-module is bound to a business function module. The method may include the following steps S201 and S202: Step S201: The first high-voltage command sending submodule responds to the high-voltage demand of the first business function module by sending a high-voltage command to the high-voltage execution module; the first high-voltage command sending submodule is one of a plurality of high-voltage command sending submodules, and the first business function module is a business function module that is bound to the first high-voltage command sending submodule among a plurality of business function modules; Step S202: The high-voltage execution module responds to the high-voltage command and performs the high-voltage operation.

[0120] In some embodiments, step S201 above may include the following steps S211 to S212: Step S211: The first high-voltage command sending submodule responds to the high-voltage requirement of the first business function module by obtaining the high-voltage fault code from the high-voltage execution module; Step S212: If the high-voltage fault code indicates no fault, the first high-voltage command sending submodule confirms that the vehicle meets the conditions for high-voltage access and sends a high-voltage access command to the high-voltage execution module.

[0121] In some embodiments, step S201 above may include the following step S221: Step S221: In response to the high voltage requirement of the first business function module, the first high voltage command sending submodule creates a first high voltage thread and sends a high voltage command to the high voltage execution module at preset time intervals within a first time range.

[0122] In some embodiments, step S202 above may include the following steps S231 to S232: Step S231: The high-voltage execution module responds to the high-voltage command and determines whether the vehicle's high-voltage system is in the high-voltage power-on completed state; Step S232: If the high-voltage execution module determines that the vehicle's high-voltage system is not in the high-voltage power-on completed state, it performs the high-voltage power-on operation to bring the vehicle's high-voltage system into the high-voltage power-on completed state.

[0123] In some embodiments, the above method may further include at least one of steps S241 and S242: Step S241: If the high-voltage execution module determines that the vehicle is not in the high-voltage power-on completed state, it performs the high-voltage operation and sets a timer for a second duration. Step S242: The high-voltage execution module resets the timer after determining that the vehicle is in the high-voltage power-on completed state.

[0124] In some embodiments, step S202 above may include the following step S251: Step S251: The high-voltage execution module performs a high-voltage operation when it determines that the timer has expired.

[0125] In some embodiments, the above method may further include the following steps S261 to S263: Step S261: At least one high-voltage command sending submodule sends a high-voltage command to the high-voltage execution module; Step S262: The high-voltage execution module receives at least one high-voltage command; Step S263: If the high-voltage execution module does not receive a high-voltage command within the second time period, it performs a low-voltage operation.

[0126] In some embodiments, the above method may further include the following step S271: Step S271: If the high-voltage actuator detects a vehicle malfunction when the vehicle is in the high-voltage power-on completed state, it performs a high-voltage reduction operation.

[0127] The following describes the application of the embodiments of this application in a real-world scenario.

[0128] In the automotive industry, new energy sources are driving the evolution of traditional automotive technologies towards electrification and intelligence. Modern new energy vehicles offer features such as air conditioning, refrigerators, televisions, heated seats, defrosting and defogging, and air purification, greatly enhancing the user experience. However, these long-term power-consuming functions cannot be met by the car's small battery alone, and repeated charging and discharging can easily lead to battery aging. Therefore, large batteries are needed to support them. In electric and hybrid vehicles, large batteries need to be connected to a high-voltage system, which provides energy for critical functions such as air conditioning, heated seats, and battery charging. Traditional vehicle high-voltage electrical management typically employs a centralized, global control strategy, where a central controller makes unified decisions on the power-on and power-off of the high-voltage system. This model has the following problems: High functional coupling: The start and stop of different high-voltage power consumption functions will affect each other. An abnormality or shutdown of a certain function may unexpectedly cause the high voltage of the whole vehicle to drop, thereby affecting the normal operation of other functions; Complex control logic: With the increasing number of on-board high-voltage functions, the central controller needs to handle a large number of complex scenario judgments and priority arbitration logic, which poses challenges to system reliability and maintainability; Lack of fine-grained maintenance mechanism: The maintenance of high voltage is usually strongly bound to specific main functions (such as driving), making it difficult to support multiple independent functions to maintain the high voltage state on demand and for a long time.

[0129] In related technologies, strict power-on / off timing and state transition paths are predefined, centered on the vehicle's operating conditions (scenarios). When any high-voltage scenario condition is met, the high-voltage command is first triggered and sent to the battery management system. However, adding new functions or changing scenarios requires re-organizing and redefining the global power-on / off timing diagram, which has a ripple effect. Furthermore, the high-voltage execution module (or BMS) needs to understand complex scenarios and state machine transition logic and execute operations at the correct time, which is logically complex and requires high fault tolerance.

[0130] Based on the above description, this application provides a distributed high-voltage collaborative management method and system. Adding new functions only requires creating a separate instruction sending submodule bound to it. This module runs independently without modifying other modules or central logic, achieving plug-and-play functionality and greatly facilitating function iteration and vehicle configuration. In this application, the responsibilities of the high-voltage execution module are simplified to two simple tasks: (1) continuously receiving high-voltage commands and executing high-voltage operations; (2) executing low-voltage operations when the total number of requests changes from greater than 1 to 0. This is more in line with the software-defined vehicle and continuous iteration development model.

[0131] In this embodiment, the distributed high-voltage collaborative management system (corresponding to the vehicle control system in the aforementioned embodiment) is as follows: Figure 3 As shown, the system includes a high-voltage command sending module 110 and a high-voltage execution module 120. The high-voltage command sending module 110 periodically (e.g., once every minute) sends a high-voltage command to the high-voltage execution module 120. After receiving the high-voltage command, the high-voltage execution module maintains the high voltage (e.g., maintains it for 1 minute). When the high-voltage execution module does not receive a high-voltage command, it determines that it needs to lower the high voltage and performs the high-voltage lowering action. The high-voltage command sending module does not need to send a high-voltage lowering command to the high-voltage execution module; the high-voltage lowering action is performed when the high-voltage heartbeat command disappears.

[0132] In the embodiments of this application, such as Figure 4 As shown, the multiple high-voltage command sending modules 110 and high-voltage execution modules 120 in the distributed high-voltage collaborative management system are logical modules, but physically they can be integrated or distributed across different controllers.

[0133] In the embodiments of this application, such as Figure 5 As shown, the high-pressure command sending module 110 can contain several identical high-pressure command sending sub-modules. Each high-pressure command sending sub-module 111 can be in a dormant state (i.e., not sending high-pressure commands) or can be a newly created thread. When a function is triggered and high pressure is required, the sub-module is bound to the function trigger, meaning that the sub-module specifically sends high-pressure commands for a specific function. For example, if a user turns on the seat heating on the vehicle's infotainment system, the seat heating is the function trigger, and sub-module 1 continuously sends high-pressure commands specifically for the seat heating function to maintain high pressure throughout the vehicle. The high-pressure command sending sub-modules are functional logic sub-modules, mainly characterized by their independence and lack of interference.

[0134] Each submodule operates independently, meaning the high-voltage command sending submodule is decoupled from other functions that require high voltage. When a control command (high-voltage command) needs to be sent, it is sent continuously at a certain frequency, such as once every minute.

[0135] The methods by which it sends high-voltage commands include, but are not limited to, wired networks, wireless networks, CAN, LIN, and internal software communication mechanisms.

[0136] In the embodiments of this application, such as Figure 6 As shown, the high-voltage command sending module 110 is part of the business functions. In the high-voltage command sending module 110, multiple business functions include function 1, function 2, and function n; multiple business functions include sub-module 1, sub-module 2, and sub-module n; among them, function 1 is bound to sub-module 1, function 2 is bound to sub-module 2, and function n is bound to sub-module n. In one example, if function 1 needs to apply high voltage, then sub-module 1 bound to function 1 needs to continuously send high-voltage commands to the high-voltage execution module 120. The business functions include, but are not limited to, air conditioning, seat ventilation, seat heating, air conditioning purification, fragrance, defrosting and defogging, rearview mirror heating, steering wheel heating, car refrigerator, car 220V power supply, car TV projection, charging, scheduled charging, intelligent charging, battery insulation, etc., or other non-functional services (such as remote vehicle wake-up). In short, it is an application scenario that requires the use of high voltage.

[0137] In this embodiment, before the submodule is connected to high voltage, a high voltage fault code is obtained. If a fault exists, the high voltage cannot be connected, and the error information is fed back to the corresponding application. If there is no fault, a high voltage connection command can be sent. This is a precondition judgment.

[0138] In this embodiment, different sub-modules are bound to functions (or services) one by one. The functions of the sub-modules are logically independent. For example, if function 1 needs to maintain high voltage, then sub-module 1 will periodically send high voltage commands without being affected by the start and stop of other functions (or services). At the same time, the start and stop of function 1 and sub-module 1 will not affect other functions n and other sub-modules n.

[0139] In this embodiment, the high-voltage command sent by the high-voltage command sending module is functionally identical; that is, the high-voltage execution module does not need to know who issued the command or how long the high voltage should be applied. Security is guaranteed by the underlying communication layer, meaning that all commands received at the application layer are legitimate.

[0140] In this embodiment, the high-voltage execution module only executes the high-voltage reduction procedure when all high-voltage command sending modules stop sending high-voltage commands, meaning the high-voltage execution module continuously fails to receive high-voltage commands. The key feature is that no high-voltage reduction command has been sent; the execution module autonomously determines when high-voltage reduction is necessary. The high-voltage commands received by the high-voltage execution module are the superposition of 1-n cycle high-voltage commands.

[0141] In this embodiment of the application, when a special scenario is encountered that requires the high voltage to be cut off, other instruction modules can send special instructions to the high voltage execution module to achieve the forced reduction of high voltage.

[0142] In this embodiment, the processing flow of the high-pressure execution module is as follows: Figure 7 As shown, the process may include the following steps S701 to S707: Step S701: The high-voltage execution module receives the high-voltage command; A high-voltage execution module is deployed on the VIU (Regional Controller). This module needs to inspect high-voltage components, determine whether there is a fault, and whether the preconditions for high-voltage operation are met based on the inspection results. It also provides a Get_VcuHvSysErrNr interface for other modules to retrieve fault code information. Fault codes include: NoErr (no fault), FltEmgyPwrDwn (emergency high-voltage operation due to fault), BcuFltPwrDwn (BCU fault requiring high-voltage operation), BcuNotAllwdPwrUp (BCU (Battery Control Unit) not allowing high-voltage operation), IpuNotAllwdPwrUp (IPU (Motor Controller) not allowing high-voltage operation), OtaNotAllwdPwrUp (High-voltage operation not allowed during OTA), LoSocPowerDwn (Low battery power failure requiring high-voltage operation), and OverTime (Timeout preventing high-voltage operation). Step S702: Determine whether the preconditions for applying high voltage are met; if yes, proceed to step S703; if no, proceed to step S707. In some implementations, the high-voltage execution module receives the high-voltage activation command RR_HvActvReq, which may carry the parameter HvActvReq. HvActvReq contains two specific enumerated values: 0: Reserve (no request) and 1: HVActiveRequest (high-voltage activation). If the preconditions for high-voltage activation are met, the high-voltage execution module receives a 1: HVActiveRequest (high-voltage activation) command and proceeds to step S703 to begin the high-voltage activation process; otherwise, it proceeds to step S707 to perform the high-voltage deactivation (if high-voltage has already been activated).

[0143] Step S703: The high-voltage execution module performs the high-voltage operation; Step S704; The high-voltage execution module restarts the 5-minute timer; After the high-voltage execution module performs the high-voltage operation, it starts a timer. When the timer expires, it needs to perform the high-voltage de-energization operation, for example, de-energizing after 5 minutes.

[0144] If a high-voltage command is still received within the timer's timing period, proceed to step S702, first check the preconditions, then restart the timer to begin counting again. If the high-voltage command continues to be received before the timer expires, ensuring the timer never expires, the high voltage will continue indefinitely.

[0145] Step S705; The high-voltage execution module determines that the 5-minute timer setting has expired and proceeds to step S707; Step S706: The high-voltage execution module receives other signals that do not meet the conditions for applying high voltage, and proceeds to step S707; If an abnormality occurs during high-voltage execution and high-voltage execution cannot continue, the high-voltage execution module will notify the outside world of the error code (such as NoErr no fault, FltEmgyPwrDwn fault emergency high-voltage down, BcuFltPwrDwn BCU fault high-voltage down, BcuNotAllwdPwrUp BCU (battery control unit) not allowed to apply high voltage, IpuNotAllwdPwrUp IPU (motor controller) not allowed to apply high voltage, OtaNotAllwdPwrUp high voltage not allowed during OTA, LoSocPowerDwn low battery power-off high-voltage down, OverTime timeout not applied high voltage) through the Ntf_VcuHvSysErrNr method to indicate the reason, and then execute the high-voltage down action.

[0146] Step S707: The high-voltage execution module performs the high-voltage operation.

[0147] If the high-voltage execution module does not receive the high-voltage instruction RR_HvActvReq (passing parameter HVActiveRequest) within a certain period of time, for example, if it does not receive the high-voltage instruction RR_HvActvReq (passing parameter HVActiveRequest) for 5 minutes, the timer will time out, and the high-voltage execution module will perform the high-voltage operation.

[0148] In this embodiment of the application, the processing flow of the high-voltage command sending module can be as follows: Figure 8 As shown, the process may include the following steps S801 to S807: Step S801: Function or service begins; Step S802: The high-voltage command sending module determines whether to enable the function or service; if yes, proceed to step S803; if no, proceed to step S804. The high-voltage command sending module can be deployed in any domain of the vehicle, such as the driving domain, vehicle control domain, cockpit domain, power domain, EE architecture domain, or even the area controller itself. Taking the T-Box deployed in the cockpit domain as an example, the cockpit domain includes the central control vehicle system, T-Box, instrument panel, etc. For example, the T-Box will receive remote control commands from the mobile APP (such as the Set_ACMaxAC command) to instruct the air conditioner to turn on for rapid cooling.

[0149] Step S803: The high-voltage command sending module determines whether there is a high-voltage fault code; if there is no high-voltage fault code, proceed to step S805; The T-Box obtains the BCU power level through a power acquisition command (such as Get_BcuOperPrmInfo). After the power level prerequisite is met, it obtains the high-voltage fault code through a high-voltage fault code acquisition command (such as Get_VcuHvSysErrNr). If the obtained high-voltage fault code indicates that there is no fault, it is determined that there is no high-voltage fault.

[0150] Step S804: The high-voltage command sending module cancels the high-voltage thread and stops sending high-voltage commands; Each function or service can have its own independent high-pressure thread to send high-pressure commands. For example, independent high-pressure threads can be created for defrosting and defogging and air conditioning rapid cooling functions. The high-pressure threads for different functions and services run independently. When a user cancels a function, the corresponding high-pressure thread is deleted, meaning that high-pressure commands are no longer sent for that function. For example, if a user cancels the defrosting and defogging function, the high-pressure thread for defrosting and defogging is deleted. This deletion does not affect the high-pressure logic of the remote-controlled air conditioning rapid cooling that is currently being executed.

[0151] In some embodiments, when a function ends, the high-pressure thread is stopped. For example, when the defrosting and defogging of the T-Box ends, the high-pressure thread for defrosting and defogging stops. When all functions or services requiring high pressure in all domains end, the corresponding high-pressure threads all stop. In this case, no module sends a high-pressure command to the high-pressure execution module. The high-pressure execution module should then recognize that the vehicle has no high-pressure requirement. The high-pressure command execution module executes the high-pressure reduction action after the timer expires. For example, if no high-pressure command request is received after 5 minutes, the timer expires and the high-pressure reduction action is executed.

[0152] Step S805: Create a high-voltage thread and set a timer; Step S806: The high-voltage thread sends a high-voltage command once per minute; The high-voltage command sending module creates a high-voltage thread. In the high-voltage thread, error code information is periodically obtained through Get_VcuHvSysErrNr. If no error is found, a high-voltage command is sent through RR_HvActvReq. It can also remotely turn on and off some vehicle functions, such as air conditioning, seat heating, defrosting and defogging.

[0153] When the T-Box receives a pre-wake-up command (meaning the mobile app user is operating and is likely about to issue a remote control command, which will wake up the entire vehicle in order to respond quickly to the remote control command), or a remote control air conditioning command, the corresponding T-Box has two functions, such as pre-wake-up and turning on the air conditioning. Both of these functions create corresponding high-voltage threads on the T-Box (in actual operation, it can also be the same thread, sending a high-voltage activation request once according to different application needs).

[0154] In some embodiments, the T-Box can execute multiple remote control functions simultaneously, and each remote control function creates an independent high-voltage thread (the high-voltage thread can be understood as a high-voltage command sending submodule).

[0155] In some embodiments, the newly created high-pressure thread obtains error codes from the high-pressure execution module. If there are no errors, it means that the high-pressure action can be executed.

[0156] In some embodiments, the newly created high-pressure thread periodically sends high-pressure commands according to business needs. For example, if seat heating requires continuous heating for 20 minutes as set by the user, the thread continuously sends high-pressure commands 15 times, with each time intervald by 1 minute. This ensures that the high pressure lasts for 20 minutes (the high-pressure command sending module sends 15 commands, and the VIU maintains the high pressure for 5 minutes, for a total of 20 minutes). While the high-pressure thread corresponding to the seat heating function is sending high-pressure commands, the T-Box can still receive other remote control commands, such as defrosting / defogging (Set_ACDefAdj), and can create new high-pressure threads to continuously send high-pressure commands for the defrosting / defogging function.

[0157] In some embodiments, one to n functions may each implement independent high-voltage control, and when one or more functions stop, it will not affect other functions that are being executed.

[0158] In some embodiments, other components, like the T-Box, can send high-voltage commands to the high-voltage execution module to maintain a specific function or service; for example, the vehicle infotainment system can turn on the rearview mirror heating, and similar logic to the T-Box enables independent high-voltage logic for the vehicle infotainment system and the T-Box.

[0159] Step S807: The high-voltage execution module executes the high-voltage command.

[0160] In this embodiment, adding a new function only requires creating a separate instruction sending submodule bound to it. This module runs independently without modifying other modules or central logic, achieving "plug and play" functionality and greatly facilitating function iteration and vehicle configuration.

[0161] In this embodiment, each function is completely independent of its instruction module. For example, turning on the seat heater will not affect the operation of the air conditioner, and turning off the car refrigerator will not cause the large screen to lose power. Each function can request or release high-voltage resources at any time and independently, without interfering with each other.

[0162] In this embodiment, no predefined scenario is relied upon. Any function requiring high voltage can be added at any time, and the system responds through the "natural superposition" of instructions, possessing the flexibility to cope with future unknown functional requirements.

[0163] In this embodiment, high-voltage control is decentralized to individual application functions, allowing for independent development, testing, deployment, and updates of these functions without waiting for changes to the vehicle-level high-voltage control strategy. This significantly accelerates the function development cycle and supports flexible updates or additions of in-vehicle services via OTA, making it a superior choice for intelligent vehicle software architecture.

[0164] This application provides a computer device, such as... Figure 9 As shown, the computer device 900 includes the vehicle control system 100 described above.

[0165] This application provides a vehicle, such as... Figure 10 As shown, vehicle 1000 includes the aforementioned computer equipment 900. This application also proposes a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements some or all of the steps in the above-described method. The computer-readable storage medium can be transient or non-transient.

[0166] This application also proposes a computer program including computer-readable code, wherein when the computer-readable code is run in a computer device, a processor in the computer device performs some or all of the steps in the above-described method.

[0167] This application also proposes a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program. When the computer program is read and executed by a computer, it implements some or all of the steps in the above-described method. This computer program product can be implemented specifically through hardware, software, or a combination thereof. In some embodiments, the computer program product is specifically embodied as a computer storage medium; in other embodiments, the computer program product is specifically embodied as a software product, such as a software development kit (SDK), etc.

[0168] It should be noted that the descriptions of the various embodiments above tend to emphasize the differences between them, while their similarities or commonalities can be referred to interchangeably. The descriptions of the above embodiments of the device, storage medium, computer program, and computer program product are similar to the descriptions of the above method embodiments and have similar beneficial effects. For technical details not disclosed in the embodiments of the device, storage medium, computer program, and computer program product of this application, please refer to the descriptions of the method embodiments of this application for understanding.

[0169] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of this application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. It should be understood that in the various embodiments of this application, the sequence numbers of the above steps / processes do not imply a sequential order of execution; the execution order of each step / process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. The sequence numbers of the above embodiments of this application are merely descriptive and do not represent the superiority or inferiority of the embodiments.

[0170] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0171] The above embodiments are merely preferred embodiments provided to fully illustrate the present invention, and the scope of protection of the present invention is not limited thereto. Equivalent substitutions or modifications made by those skilled in the art based on the present invention are all within the scope of protection of the present invention.

Claims

1. A vehicle control system, characterized in that, The vehicle control system includes a high-voltage command sending module, a high-voltage execution module, and at least one business function module. The high-voltage command sending module includes multiple high-voltage command sending sub-modules, each of which is bound to a service function module, wherein: The first high-voltage command sending submodule is used to send a high-voltage command to the high-voltage execution module in response to a high-voltage demand from the first business function module; the first high-voltage command sending submodule is one of the plurality of high-voltage command sending submodules, and the first business function module is a business function module that is bound to the first high-voltage command sending submodule among the plurality of business function modules. The high-voltage execution module is used to perform the high-voltage operation in response to the high-voltage command.

2. The system according to claim 1, characterized in that, The first high-voltage command sending submodule is also used to obtain a high-voltage fault code from the high-voltage execution module in response to the high-voltage requirement of the first business function module. The first high-voltage command sending submodule is further configured to confirm that the vehicle meets the conditions for applying high voltage when the high-voltage fault code indicates no fault, and send the high-voltage application command to the high-voltage execution module.

3. The system according to claim 1, characterized in that, The first high-voltage command sending submodule is further configured to respond to the high-voltage requirement of the first business function module by creating a first high-voltage thread and sending the high-voltage command to the high-voltage execution module at preset time intervals within a first time range through the first high-voltage thread.

4. The system according to claim 1, characterized in that, The high-voltage execution module is also used to respond to the high-voltage command and determine whether the high-voltage system of the vehicle is in the high-voltage power-on completed state. The high-voltage execution module is also used to perform a high-voltage operation when it is determined that the high-voltage system of the vehicle is not in the high-voltage power-on completed state, so that the high-voltage system of the vehicle is in the high-voltage power-on completed state.

5. The system according to claim 4, characterized in that, The high-voltage execution module is also used for at least one of the following: If it is determined that the vehicle is not in the high-voltage power-on completed state, the high-voltage operation is performed, and a timer for a second duration is set; Once it is determined that the vehicle is in a state of high-voltage power-on completion, the timer is reset.

6. The system according to claim 5, characterized in that, The high-voltage execution module is also used to perform a low-voltage operation when the timer expires.

7. The system according to claim 1, characterized in that, The at least one high-voltage command sending submodule is used to send the high-voltage command to the high-voltage execution module; The high-voltage execution module is also used to receive at least one of the high-voltage command; The high-voltage execution module is also used to perform a low-voltage operation if the high-voltage command is not received within a second time period.

8. The system according to claim 4, characterized in that, The high-voltage execution module is also used to perform a high-voltage reduction operation when a malfunction is detected in the vehicle while it is in a high-voltage power-on completed state.

9. A vehicle control method, characterized in that, The method is applied to a vehicle control system, which includes a high-voltage command sending module, a high-voltage execution module, and at least one business function module. The high-voltage command sending module includes multiple high-voltage command sending sub-modules, each of which is bound to a business function module. The first high-voltage command sending submodule responds to the high-voltage execution module by sending a high-voltage command to the high-voltage execution module in response to the high-voltage demand of the first business function module. The first high-voltage command sending submodule is one of the plurality of high-voltage command sending submodules, and the first business function module is the business function module that is bound to the first high-voltage command sending submodule among the plurality of business function modules. The high-voltage execution module responds to the high-voltage command and performs the high-voltage operation.

10. A computer device comprising a vehicle control system as described in any one of claims 1 to 8.

11. A vehicle, characterized in that, Includes the computer device as described in claim 10.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method of claim 9.

13. A computer program product, comprising a computer program or instructions, characterized in that, When the computer program or instructions are executed by the processor, they implement the steps of the method of claim 9.

Images