Oil pressure protection control method and device for high-pressure oil pump full-active suspension system

Abstract

The present disclosure relates to an oil pressure protection control method and device for a high-pressure oil pump full-active suspension system. The method comprises: obtaining a pressure signal, an oil temperature signal and a vehicle body posture signal of the suspension system; correcting a determination reference of an original low-pressure fault level according to the oil temperature signal to obtain a corrected determination reference; determining a low-pressure fault level of the suspension system according to the pressure signal based on the corrected determination reference; when the low-pressure fault level is a first preset level, controlling the high-pressure oil pump to increase the rotating speed and / or to increase the displacement; locking a current vehicle body posture based on the vehicle body posture signal, gradually reducing an active adjustment stroke of a suspension actuator in the suspension system according to a preset gradient; configuring a maximum driving speed of a vehicle to which the suspension system belongs as a speed limit corresponding to the low-pressure fault level, and switching a suspension working mode to a working mode corresponding to the low-pressure fault level. The present disclosure improves the rationality and accuracy of oil pressure protection control.

Description

Technical Field

[0001] This disclosure relates to the field of automotive drive-by-wire chassis electro-hydraulic fully active suspension control technology, and in particular to a method and device for oil pressure protection control of a high-pressure oil pump fully active suspension system. Background Technology

[0002] In related technologies, electro-hydraulic fully active suspension relies on a high-pressure oil pump to provide hydraulic power to the four-wheel actuators, achieving vehicle height adjustment, damping control, and driving posture stability. In actual use, due to factors such as oil pump wear and internal leakage, pipeline leakage, insufficient oil, filter blockage, motor power attenuation, valve core sticking, and low-temperature viscosity changes, the system is prone to malfunctions such as slow pressure build-up, low working oil pressure, or even sudden pressure loss.

[0003] Existing suspension low-pressure protection solutions mostly employ a single pressure threshold judgment method, meaning that an alarm is triggered and the suspension system is shut down immediately when the pressure falls below a set value. This method cannot distinguish between different fault degrees, such as minor underpressure and severe underpressure loss. In low-temperature environments, it is prone to false alarms due to slow pressure build-up, while in high-temperature environments, internal leakage exacerbates the risk of missed detections. After a fault is triggered, suspension function is instantly lost, and the vehicle body is prone to sinking, tilting, or even corner collapse. At the same time, the maintenance process lacks effective leak location methods, resulting in low troubleshooting efficiency and failing to meet the refined low-pressure protection requirements of fully active suspension systems. Summary of the Invention

[0004] To overcome the problems existing in related technologies, this disclosure provides a method and device for oil pressure protection control of a high-pressure oil pump fully active suspension system.

[0005] According to a first aspect of the present disclosure, a method for hydraulic pressure protection control of a high-pressure oil pump fully active suspension system is provided, comprising: Acquire pressure signals, oil temperature signals, and vehicle attitude signals from the suspension system; The original low-pressure fault level judgment criteria are corrected based on the oil temperature signal to obtain the corrected judgment criteria. Based on the revised judgment criteria, the low-pressure fault level of the suspension system is determined according to the pressure signal; the low-pressure fault level is any one of a plurality of preset levels. When the low-pressure fault level is the first preset level among the plurality of preset levels, the high-pressure oil pump is controlled to increase its speed and / or the high-pressure oil pump is controlled to increase its displacement according to the compensation gradient corresponding to the first preset level, so as to compensate for the system pressure of the suspension system. After determining that a low-pressure fault has occurred, the current vehicle attitude is locked based on the vehicle attitude signal, and the active adjustment stroke of the suspension actuator in the suspension system is gradually reduced according to a preset gradient. Configure the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low-pressure fault level, and switch the suspension operating mode to the operating mode corresponding to the low-pressure fault level.

[0006] According to a second aspect of the present disclosure, a hydraulic protection control device for a high-pressure oil pump fully active suspension system is provided, comprising: The acquisition unit is used to acquire the pressure signal, oil temperature signal, and vehicle attitude signal of the suspension system. The correction unit is used to correct the original low-pressure fault level judgment criteria based on the oil temperature signal to obtain the corrected judgment criteria. The determining unit is configured to determine the low-pressure fault level of the suspension system based on the modified determination criteria and the pressure signal; the low-pressure fault level is any one of a plurality of preset levels. The control unit is configured to, when the low-pressure fault level is the first preset level among the plurality of preset levels, control the high-pressure oil pump to increase its speed and / or control the high-pressure oil pump to increase its displacement according to the compensation gradient corresponding to the first preset level, so as to compensate for the system pressure of the suspension system. The reduction unit is used to lock the current vehicle posture based on the vehicle posture signal after determining that a low-pressure fault has occurred, and to gradually reduce the active adjustment stroke of the suspension actuator in the suspension system according to a preset gradient. The configuration unit is used to configure the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low-pressure fault level, and to switch the suspension operating mode to the operating mode corresponding to the low-pressure fault level.

[0007] According to a third aspect of the present disclosure, an electronic device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the method as described in any one of the first aspects.

[0008] According to a fourth aspect of the present disclosure, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the method as described in any one of the first aspects.

[0009] According to a fifth aspect of the present disclosure, a computer program product is provided, including a computer program that, when executed by a processor, implements the method as described in any one of the first aspects.

[0010] The technical solutions provided by the embodiments of this disclosure can include the following beneficial effects: By acquiring the pressure signal, oil temperature signal, and vehicle attitude signal of the suspension system, and correcting the original low-pressure fault level judgment criterion based on the oil temperature signal, false alarms at low temperatures and missed judgments at high temperatures are effectively avoided, ensuring that fault identification remains accurate and reliable across the entire temperature range. The low-pressure fault level is determined based on the corrected judgment criterion, achieving accurate differentiation of low-pressure faults of different degrees. When the low-pressure fault level is the first preset level, the high-pressure oil pump is controlled to increase its speed and / or increase its displacement according to the corresponding compensation gradient to compensate for the system pressure, thus actively preserving the system's working oil pressure. This system delays the deterioration of the fault and preserves the normal operating capability of the suspension to the maximum extent. After determining that a low-pressure fault has occurred, the current vehicle posture is locked and the active adjustment travel of the suspension actuators is gradually reduced according to a preset gradient. This eliminates the mechanical impact on the chassis structure caused by sudden vehicle heave and attitude changes. The maximum vehicle speed is configured to the speed limit corresponding to the level of the low-pressure fault, and the suspension operating mode is switched to the operating mode corresponding to the level of the low-pressure fault. This ensures that the vehicle still has a safe driving capability that matches the severity of the fault after a low-pressure fault occurs, avoiding excessive restriction for minor faults and loss of control for major faults, thus balancing driving safety and ease of use.

[0011] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0012] The accompanying drawings, which are incorporated in and form a part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure.

[0013] Figure 1 This is a flowchart illustrating an oil pressure protection control method for a high-pressure oil pump fully active suspension system according to an exemplary embodiment.

[0014] Figure 2 This is a block diagram illustrating a hydraulic protection control device for a high-pressure oil pump fully active suspension system according to an exemplary embodiment.

[0015] Figure 3 This is a block diagram illustrating an apparatus for a hydraulic protection control method for a high-pressure oil pump fully active suspension system, according to an exemplary embodiment. Detailed Implementation

[0016] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure.

[0017] The terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the embodiments of this disclosure. The singular forms "a" and "the" as used in this disclosure are also intended to include the plural forms unless the context clearly indicates otherwise.

[0018] It should be understood that although the terms first, second, third, etc., may be used to describe various information in embodiments of this disclosure, such information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, first information may also be referred to as second information without departing from the scope of embodiments of this disclosure, and similarly, second information may also be referred to as first information. Depending on the context, the words “if” and “suppose” as used herein may be interpreted as “when”, “when”, or “in response to a determination”.

[0019] Furthermore, various forms of processes shown in the embodiments of this disclosure can be used to reorder, add, or delete steps. For example, the steps described in this disclosure can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this disclosure can be achieved, and no limitation is imposed herein.

[0020] It should be noted that the collection, storage, use, processing, transmission, provision, and disclosure of user personal information involved in the technical solution disclosed herein all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0021] Figure 1 This is a flowchart illustrating an oil pressure protection control method for a high-pressure oil pump fully active suspension system according to an exemplary embodiment, such as... Figure 1 As shown, it should be noted that the hydraulic pressure protection control method for the high-pressure oil pump fully active suspension system of this disclosure is applied to the hydraulic pressure protection control device of the high-pressure oil pump fully active suspension system. For example... Figure 1 As shown, the method may include the following steps: Step 101: Obtain the pressure signal, oil temperature signal, and vehicle attitude signal of the suspension system.

[0022] In this embodiment, the high-frequency acquisition module mounted on the suspension domain VMC (Vehicle Motion Control) controller can synchronously acquire full-domain operating condition signals. The sampling frequency is fixed at 100Hz, and specific acquisition parameters may include: real-time hydraulic pressure of the high-pressure main pipe, independent hydraulic pressure of the four wheel branches (left front / right front / left rear / right rear), hydraulic system oil temperature, real-time oil pump speed and operating current, hydraulic oil level, vehicle speed, four-wheel suspension travel, and vehicle pitch and roll angle attitude signals. These signals provide a data foundation for subsequent fault classification, oil pump pressure replenishment control, attitude preservation, and limp-to-correction steps.

[0023] In some embodiments of this disclosure, the pressure build-up rate and pressure decay slope are calculated in real time based on the acquired pressure signals. The pressure build-up rate characterizes the system's ability to build up pressure per unit time, and its calculation formula is: Vp = ΔP / Δt, where ΔP is the pressure change per unit time, and Δt can be taken as 100ms. The pressure decay slope characterizes the rate of pressure decrease during the continuous decay process, and its calculation formula is: Kp = ΔP / T, where ΔP is the pressure change, and T is the duration of continuous pressure decay. These two parameters allow for accurate determination of the system's current pressure build-up and pressure maintenance capabilities.

[0024] Step 102: Correct the original low-pressure fault level judgment criteria based on the oil temperature signal to obtain the corrected judgment criteria.

[0025] In this embodiment, hydraulic oil exhibits different physical properties at different temperatures. At low temperatures, viscosity increases and pressure-building resistance increases; at high temperatures, viscosity decreases and internal leakage intensifies. Therefore, it is necessary to dynamically correct the low-pressure fault level determination criteria based on real-time oil temperature to avoid misjudging slow cold-start pressure build-up as a low-pressure fault in low-temperature environments and to prevent the underestimation of latent leakage faults in high-temperature environments. Through dynamic correction via temperature-pressure coupling, the low-pressure fault identification logic remains accurate and reliable under all temperature conditions.

[0026] In some embodiments of this disclosure, step 102 may specifically include the following sub-steps: Step b1: When the oil temperature is lower than the first preset temperature threshold, the judgment threshold of each low-pressure fault level is configured to the low-temperature corrected judgment threshold corresponding to the current oil temperature, the pressure build-up judgment time is configured to the low-temperature corrected pressure build-up judgment time corresponding to the current oil temperature, and the judgment sensitivity of the pressure decay slope is configured to the low-temperature corrected judgment sensitivity corresponding to the current oil temperature.

[0027] In one embodiment of this disclosure, the first preset temperature threshold is 0°C. When the hydraulic system oil temperature is below or equal to 0°C, it enters the low-temperature range. Within this temperature range, the hydraulic oil viscosity increases significantly, the system pressure-building resistance increases, and the pressure-building speed slows down significantly. To prevent the system from being mistakenly identified as having a low-pressure fault due to slow pressure building during cold start-up, the system performs the following low-temperature correction operations: the overall threshold for determining a level four low-pressure fault is increased (e.g., increased by 8%), allowing the system to operate normally in a lower pressure range without triggering a fault alarm; the standard pressure-building determination time is extended from the conventional 1s to 2.5s, giving the system sufficient time to build up pressure; and the sensitivity of the pressure decay slope is reduced (e.g., decreased by 30%) to avoid pressure fluctuations at low temperatures being mistakenly identified as abnormal leaks.

[0028] It should be noted that the specific values ​​of the above-mentioned correction parameters can be determined through bench calibration, and different vehicle models can be adapted and adjusted according to the actual hydraulic system characteristics.

[0029] Step b2: When the oil temperature is between the first preset temperature threshold and the second preset temperature threshold, maintain the original judgment threshold, the original pressure build-up judgment time, and the original pressure decay slope judgment sensitivity for each low-pressure fault level, and do not perform any correction.

[0030] The first preset temperature threshold is less than the second preset temperature threshold.

[0031] In one embodiment of this disclosure, the second preset temperature threshold can be 60°C. When the hydraulic system oil temperature is between 0°C and 60°C, it enters the normal temperature range. Within this temperature range, the hydraulic oil viscosity is moderate, the system pressure build-up characteristics are stable, and accurate identification can be achieved by using the standard four-level classification threshold, the standard pressure build-up judgment time (e.g., 1 second), and the standard pressure decay slope judgment sensitivity, without the need for any parameter correction.

[0032] Step b3: When the oil temperature is higher than the second preset temperature threshold, the judgment threshold of each low-pressure fault level is configured to the judgment threshold after high temperature correction corresponding to the current oil temperature, the judgment sensitivity of the pressure attenuation slope is configured to the judgment sensitivity after high temperature correction corresponding to the current oil temperature, and the pressure sampling period is configured to the sampling period after high temperature correction corresponding to the current oil temperature.

[0033] In one embodiment of this disclosure, when the hydraulic system oil temperature is higher than or equal to 60°C, it enters the high-temperature range. Within this temperature range, the hydraulic oil viscosity decreases, and internal leakage due to aging of the oil pump, valve core, and pipeline seals intensifies, leading to a high incidence of latent leakage faults. To prevent the failure to detect low-pressure hazards under high-temperature conditions, the system performs the following high-temperature correction operations: The overall threshold for determining level four low-pressure faults is lowered (e.g., by 5%) to increase sensitivity to minute pressure drops; the sensitivity to the pressure decay slope is increased (e.g., by 20%), enabling the system to more sensitively detect slow pressure decay; the pressure sampling period is shortened from the conventional 100ms to 50ms, capturing minute pressure decay through higher-frequency pressure sampling, thus identifying component aging and latent internal leakage hazards in advance and achieving early fault warning.

[0034] It should be noted that the specific values ​​of the above-mentioned correction parameters can be determined through bench calibration, and different vehicle models can be adapted and adjusted according to the characteristics of the hydraulic system under actual high-temperature conditions. Through the above-mentioned differentiated correction strategies for low, normal, and high temperature zones, this disclosure achieves accurate and reliable low-pressure fault identification logic under all temperature conditions (-30℃ to 80℃), solving the industry pain points of false alarms at low temperatures and missed detections at high temperatures.

[0035] Step 103: Based on the revised judgment criteria, determine the low-pressure fault level of the suspension system according to the pressure signal.

[0036] The low-voltage fault level can be any one of several preset levels.

[0037] In this embodiment, based on the judgment criteria corrected for oil temperature, low-pressure faults are classified into multiple preset levels according to four-dimensional parameters: system steady-state operating pressure, pressure build-up rate, pressure decay slope, and fault duration. Different levels of faults correspond to different pressure ranges, pressure build-up capabilities, pressure decay characteristics, and durations, thereby achieving accurate identification and graded handling of various low-pressure faults, abandoning the traditional single-threshold judgment mode.

[0038] In some embodiments of this disclosure, step 103 may specifically include: Step a1: Based on the revised judgment criteria, determine the low-pressure fault level of the suspension system according to the system steady-state working pressure, pressure build-up rate, pressure decay slope and fault duration of the suspension system.

[0039] In this embodiment, the preset levels include a first preset level, a second preset level, a third preset level, and a fourth preset level. The four levels are arranged in ascending order of fault severity, and the criteria for determining each level of fault are as follows: The first preset level is slight underpressure, with a steady-state working pressure between 0.85P0 and 0.95P0 (P0 is the system standard working pressure, and the default reference pressure is 18MPa). The pressure build-up rate is less than 20% of the standard pressure build-up rate (the standard pressure build-up rate is 2MPa / s), there is no continuous pressure decay, the fault duration is greater than or equal to 500ms and less than 2s, the vehicle posture is not deviated, and it does not affect basic driving and conventional suspension adjustment functions. The second preset level is continuous low pressure, with a steady-state working pressure between 0.70P0 and 0.85P0. The pressure decreases slowly and continuously (the decrease slope is 0.1MPa / s to 0.3MPa / s). The duration of the fault is greater than or equal to 2 seconds. There is no instantaneous pressure drop. There are potential fault hazards such as pipeline micro-leakage, slight internal leakage of oil pump, or slight blockage of filter element. The third preset level is instantaneous pressure loss, with a steady-state working pressure of less than 0.70P0, a rapid pressure drop (attenuation slope greater than or equal to 0.5MPa / s), a fault duration of greater than or equal to 100ms and less than 2s, a sudden drop in pressure in a single or multiple branch circuits, suspected branch sealing failure or sudden pipeline leakage. The fourth preset level is complete collapse, with a steady-state working pressure of less than 0.40P0, continuous pressure build-up without recovery (pressure build-up rate of less than 0.5MPa / s), fault duration of more than or equal to 2s, the system is unable to establish basic support oil pressure, the active adjustment function of the suspension is completely ineffective, and only passive support capability is retained.

[0040] It should be noted that the pressure value ranges, pressure build-up rate thresholds, pressure decay slope thresholds, and fault duration ranges corresponding to the above-mentioned fault levels have all been determined through vehicle hydraulic bench calibration and real vehicle extreme condition verification, and can be adaptively adjusted according to the suspension system parameters of different vehicle models. Through the comprehensive judgment of four-dimensional parameters, accurate differentiation of four types of fault conditions—slight underpressure, continuous low pressure, instantaneous pressure loss, and complete collapse—is achieved, avoiding misjudgments and omissions under the single threshold judgment mode.

[0041] It should be noted that the parameter relationships between the four preset levels are as follows: the steady-state operating pressure of the first preset level is higher than that of the second preset level, the steady-state operating pressure of the second preset level is higher than that of the third preset level, and the steady-state operating pressure of the third preset level is higher than that of the fourth preset level; the pressure build-up rate of the first preset level is higher than that of the second preset level, the pressure build-up rate of the second preset level is higher than that of the third preset level, and the pressure build-up rate of the third preset level is higher than that of the fourth preset level; the pressure decay slope of the first preset level is less than that of the second preset level, the pressure decay slope of the second preset level is less than that of the third preset level, and the pressure decay slope of the third preset level is less than that of the fourth preset level; the fault duration of the first preset level is less than that of the second preset level, the fault duration of the second preset level is less than that of the fourth preset level, and the fault duration of the third preset level is less than that of both the second and fourth preset levels.

[0042] Step 104: When the low-pressure fault level is the first preset level among multiple preset levels, control the high-pressure oil pump to increase its speed and / or control the high-pressure oil pump to increase its displacement according to the compensation gradient corresponding to the first preset level, so as to compensate for the system pressure of the suspension system.

[0043] In this embodiment of the disclosure, when the low-pressure fault level is the first preset level (i.e., slight undervoltage or continuous low pressure), instead of taking the passive approach of direct shutdown, pressure compensation is actively performed from the hydraulic power source end.

[0044] Specifically, the controller matches the corresponding compensation gradient according to the fault level, controls the high-pressure oil pump to increase its speed and / or increase its displacement, and increases the hydraulic oil output flow to offset the pressure loss caused by pipeline leakage, internal leakage of oil pump, etc., delay the deterioration of the fault, and preserve the normal working capacity of the suspension system to the maximum extent.

[0045] In some embodiments of this disclosure, step 104 may specifically include the following sub-steps: Step c1: When the low-pressure fault level is the first sub-level, control the speed of the high-pressure oil pump to increase by the first magnitude, and control the displacement of the high-pressure oil pump to increase by the second magnitude.

[0046] In some embodiments of this disclosure, the first preset level includes a first sub-level and a second sub-level. The first sub-level corresponds to a slight underpressure (i.e., the aforementioned first preset level), and its steady-state operating pressure is higher than that of the second sub-level. When the low-pressure fault level is the first sub-level, the system executes a small compensation strategy: controlling the speed of the high-pressure oil pump to increase by a first amount (e.g., increasing by 10% from the base speed of 1500 r / min to 1650 r / min), controlling the displacement of the variable pump to increase by a second amount (e.g., increasing by 8% from the base displacement of 40 mL / r to 43.2 mL / r), and extending the pressure build-up duration by 500 ms. Through small incremental compensation, the slight pressure loss is offset, allowing the system pressure to quickly return to the normal range.

[0047] It should be noted that once the system pressure recovers to above 0.95P0, the controller will reduce the oil pump speed and displacement gradient back to normal operating parameters within 1 second. This prevents a sudden drop in pressure after the pressure replenishment process from causing a secondary impact on the system, ensuring a smooth and controllable process throughout. The specific values ​​of the compensation range can be determined through bench calibration, and different vehicle models can be adapted and adjusted according to the characteristics of the oil pump.

[0048] Step c2: When the low-pressure fault level is the second sub-level, control the speed of the high-pressure oil pump to increase by the third level, and control the displacement of the high-pressure oil pump to increase by the fourth level.

[0049] Among them, the third amplitude is greater than the first amplitude, and the fourth amplitude is greater than the second amplitude.

[0050] In this embodiment, the second sub-level corresponds to continuous low pressure (i.e., the aforementioned second preset level), whose steady-state operating pressure is lower than that of the first sub-level, indicating a more severe fault. When the low-pressure fault level is the second sub-level, a significant compensation strategy is implemented: the high-pressure oil pump speed is increased by a third magnitude (e.g., from the base speed of 1500 r / min to 1800 r / min by 20%), the displacement of the variable pump is increased by a fourth magnitude (e.g., from the base displacement of 40 mL / r to 46 mL / r by 15%), and the pressure build-up duration is extended by 1500 ms. By significantly increasing the speed and displacement, a large flow of hydraulic oil is continuously output to offset the continuous pressure loss caused by pipeline leakage and internal leakage of the oil pump. Since the third magnitude is greater than the first magnitude and the fourth magnitude is greater than the second magnitude, a positive correlation between the compensation intensity and the severity of the fault is achieved, avoiding system shock caused by over-compensation for minor faults and ensuring sufficient pressure support for major faults.

[0051] It should be noted that once the system pressure recovers to above 0.95P0, the controller will reduce the oil pump speed and displacement gradient back to normal operating parameters within 1 second. This prevents a sudden drop in pressure after the pressure replenishment process from causing a secondary impact on the system, ensuring a smooth and controllable process throughout. The specific values ​​of the compensation range can be determined through bench calibration, and different vehicle models can be adapted and adjusted according to the characteristics of the oil pump.

[0052] In some embodiments of this disclosure, step 104 may further include the following sub-steps: Step d1: During the pressurization process, monitor the fluctuation amplitude of the system pressure in real time and control the fluctuation amplitude within the preset range.

[0053] In this embodiment, during the entire pressurization process performed by the oil pump, the controller tracks the pressure fluctuations in the main pipe in real time through closed-loop monitoring. The pressure fluctuation amplitude is controlled within ±0.3 MPa to ensure a smooth pressurization process and avoid secondary shocks to the hydraulic system caused by sudden pressure rises and falls. Simultaneously, during pressurization, the large-stroke active adjustment commands of the suspension are restricted to prioritize vehicle body stability. Once the system pressure returns to a steady state, all suspension adjustment functions are fully restored.

[0054] Step d2: When the number of consecutive pressure replenishment failures reaches the preset number, the low-pressure fault level is upgraded to the third preset level among multiple preset levels, and pressure replenishment is terminated.

[0055] In this embodiment, the system includes a pressure compensation effect evaluation mechanism. If, after three consecutive gradient pressure compensations, the system pressure continues to drop and fails to recover effectively, it indicates that the current compensation strategy is insufficient to offset the pressure loss caused by the fault. At this point, the fault level is automatically upgraded from the current level to a third preset level (instantaneous pressure loss), and the pressure compensation action is terminated. Instead, a higher-level protection strategy corresponding to the third preset level (including fault branch isolation, speed limiting, limp-out, etc.) is executed. This avoids energy waste and system overheating risks caused by blindly compressing pressure in severe fault conditions, ensuring dynamic matching between the protection strategy and the actual severity of the fault.

[0056] Step 105: After determining that a low-pressure fault has occurred, the current vehicle attitude is locked based on the vehicle attitude signal, and the active adjustment stroke of the suspension actuator in the suspension system is gradually reduced according to the preset gradient.

[0057] In this embodiment, the control logic of directly shutting down the suspension system, as in traditional low-pressure protection schemes, is abandoned. Upon confirmation of a low-pressure fault, a three-level gradient degradation strategy is executed: In the first period (e.g., within 0 to 500 ms after the fault is triggered), the system collects and locks the current vehicle height, pitch angle and roll angle reference values ​​in real time based on the vehicle attitude signal, locks the suspension actuator travel at the current position, prohibits large height adjustment, maintains the initial attitude of the vehicle, and avoids the attitude collapsing at the moment of the fault. In the second period (e.g., within 500ms to 2s), the system retains the ability to actively adjust the suspension slightly, limiting the maximum active adjustment stroke of the suspension actuator to within the first preset value (e.g., ±15mm), prohibiting the extreme lifting of the vehicle height and large-angle roll compensation actions, and only adapting to slight attitude adjustments on slightly bumpy roads. In the third period (e.g., within 2 to 5 seconds), if the fault is still not resolved, the system further tightens the adjustment authority, limiting the maximum active adjustment stroke of the suspension actuator to within the second preset amplitude (e.g., ±8mm), completely turning off the active vehicle height adjustment function, and only retaining the vertical damping fine adjustment function to suppress vehicle sway. If the fault persists beyond the third time period (e.g., after 5 seconds), the system completely locks the suspension actuator travel, fixing the vehicle's attitude and height, and switches the suspension system from active control mode to passive support mode, completely eliminating sudden attitude shocks. All degradation steps are smooth transitions, with the rate of change in vehicle attitude controlled within ≤0.5° / s, without any abrupt changes, effectively protecting the suspension bushings, links, shock absorbers, and body connection points.

[0058] Step 106: Configure the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low pressure fault level, and switch the suspension operating mode to the operating mode corresponding to the low pressure fault level.

[0059] In some embodiments of this disclosure, differentiated driving permission control strategies are applied to low-pressure faults of different levels. Instead of the extreme approach of locking the suspension system for all faults, corresponding maximum speed limits and operating modes are configured based on the severity of the fault. This ensures that the vehicle retains safe driving capabilities commensurate with the severity of the low-pressure fault; minor faults do not affect normal driving, while severe faults limit speed and functions to achieve safe limp-riding, balancing driving safety and ease of use.

[0060] In some embodiments of this disclosure, step 106 may specifically include the following sub-steps: In step f1, when the low-pressure fault level is the first preset level, the active adjustment function of the suspension system is not restricted, and the maximum driving speed of the vehicle is not restricted.

[0061] In this embodiment, the first preset level is slight underpressure. At this level, although the system pressure is slightly low, it remains within an acceptable range. The vehicle's posture remains unchanged, and basic driving and conventional suspension adjustment functions are not affected. Therefore, the system only illuminates a yellow fault indicator light on the instrument panel and stores a fault code. No functional restrictions are implemented. All active suspension adjustment functions, height control functions, and attitude stabilization functions are functioning normally. The vehicle's maximum speed is unrestricted, the driving mode is unaffected, and the vehicle can be driven normally. Simultaneously, the system continuously monitors the pressure status in the background, reminding the user to have the vehicle checked when necessary.

[0062] Step f2: When the low-pressure fault level is the second preset level, disable the Sport mode and Off-road mode in the vehicle's driving modes, and prohibit the suspension system from performing active adjustment actions exceeding the preset travel amplitude.

[0063] In this embodiment, the second preset level is continuous low pressure, indicating potential faults such as minor leaks in the pipeline, slight internal leakage in the oil pump, or slight blockage of the filter element, with the pressure slowly and continuously decreasing. To prevent excessive suspension load under aggressive driving conditions from accelerating the deterioration of the fault, the following functional restrictions are implemented: Sport and Off-Road modes are disabled in the vehicle's driving modes, retaining only Comfort and Standard modes; the suspension system is prohibited from performing large-travel active adjustment actions exceeding the preset travel amplitude (e.g., greater than ±15mm), and the large-travel active buffer adjustment function on bumpy roads is turned off, retaining only the adaptive adjustment for normal road conditions. Simultaneously, the instrument panel continuously displays fault warnings, without limiting the maximum vehicle speed, adapting to normal urban road conditions, and the background continuously monitors the pressure status, prompting the user to have the vehicle inspected and repaired as soon as possible.

[0064] Step f3: When the low-pressure fault level is the third preset level, the suspension system is prohibited from performing active adjustment actions and vehicle height setting operations that exceed the preset travel amplitude, and the maximum driving speed of the vehicle is configured to the first speed limit.

[0065] In some embodiments of this disclosure, the third preset level is instantaneous pressure loss, indicating that a sudden leak has occurred in one or more wheel branches of the system, causing a rapid drop in pressure. At this time, the system executes primary limp-walk logic: it prohibits the suspension system from performing active adjustments exceeding a preset travel amplitude (e.g., greater than ±8mm), completely disables the active vehicle height adjustment function and custom height setting operation, retaining only the vertical damping fine-tuning function to suppress vehicle sway; it configures the vehicle's maximum speed to a first speed limit (e.g., 80km / h); simultaneously, it links the chassis system to limit the vehicle's maximum steering angle (e.g., less than or equal to 30°) and restricts rapid acceleration power output to suppress the risk of cornering roll and loss of control during high-speed bumpy maneuvers. During the limp-walk process, the system continuously performs oil pump pressure replenishment and fault branch isolation operations to ensure vehicle stability and support the user's smooth low-speed driving to the maintenance station.

[0066] Step f4: When the low-pressure fault level is the fourth preset level, all active control functions of the suspension system are turned off, so that the suspension system retains only passive buffer support capability, and the maximum driving speed of the vehicle is configured to the second speed limit, which is less than the first speed limit.

[0067] In some embodiments of this disclosure, the fourth preset level is complete collapse, where the system's steady-state working pressure can no longer establish basic support oil pressure, and the active suspension adjustment function is completely ineffective. At this time, the system triggers the ultimate limp safety logic: completely locks the suspension actuator travel, shuts down all active control functions, switches the suspension system from active control mode to pure passive support mode, and fixes the vehicle's attitude and height; forcibly limits the vehicle's maximum driving speed to the second speed limit (e.g., 40 km / h), prohibiting high-speed driving, off-road driving, and aggressive driving; simultaneously, it links with ESP (Electronic Stability Program) and the power control system to gently limit the engine or drive motor power output, weaken the braking, acceleration, and steering response sensitivity, and avoid sudden changes in chassis stress; the instrument panel illuminates a red fault warning light, continuously locking the fault state and forcibly reminding the user to immediately go to the station for repair, preventing long-term driving with the fault.

[0068] It should be noted that, through the above-mentioned four-level differentiated limp-tolerance strategy, the hierarchical management goal of minor faults not affecting driving, serious faults allowing for controllable driving, and extreme faults providing a safety net is achieved, thus balancing driving safety and vehicle convenience.

[0069] In some embodiments of this disclosure, the method further includes the following steps: Step e1: Acquire the independent pressure signals of each wheel branch of the vehicle in real time.

[0070] In this embodiment, independent pressure detection units are configured for the left front, right front, left rear, and right rear suspension branches, respectively, to collect independent pressure signals from each branch in real time. Simultaneously, each branch is also equipped with an independent electromagnetic isolation valve to perform physical isolation operations when an abnormality is detected in the branch. Through the configuration of independent pressure monitoring for all four wheels and independent isolation valves, precise sensing and independent control of the pressure in each branch are achieved.

[0071] Step e2: Based on each independent pressure signal, calculate the pressure difference between the pressure of a single wheel branch and the pressure of the other branches, and calculate the pressure attenuation slope of each wheel branch.

[0072] In this embodiment, the system compares the pressure of each wheel branch with the pressure of the other branches pairwise to calculate the pressure difference. Simultaneously, based on the continuously collected pressure signals of each branch, the system calculates the pressure attenuation slope Kp for each branch (the formula is Kp = ΔP / T, where ΔP is the pressure change of the branch during the continuous attenuation period, and T is the duration of continuous pressure attenuation). Through these calculations, it is possible to monitor in real time whether the pressure of each branch is abnormally low compared to other branches, and whether the pressure of that branch itself is continuously and rapidly decreasing.

[0073] Step e3: When the pressure of a single wheel branch is lower than 0.6 times the standard working pressure of the system, and the pressure difference between the single wheel branch and the pressure of the other branches exceeds a preset difference threshold, and the pressure attenuation slope of the single wheel branch exceeds a preset attenuation slope threshold, the single wheel branch is determined to be an abnormal branch, and the isolation valve corresponding to the abnormal branch is controlled to close.

[0074] In this embodiment of the disclosure, a branch is determined to be an abnormal leakage branch when a certain single-wheel branch simultaneously meets the following three conditions: the pressure of the branch is lower than 0.6 times the standard operating pressure of the system (i.e., 0.6P0); the difference between the pressure of the branch and the pressure of the other branches exceeds a preset difference threshold (e.g., greater than or equal to 5MPa); and the pressure attenuation slope of the branch exceeds a preset attenuation slope threshold (e.g., greater than or equal to 0.4MPa / s).

[0075] Once the above conditions are met, the controller immediately outputs a high-level signal to close the electromagnetic isolation valve corresponding to the abnormal branch, thereby achieving independent physical isolation of the single-branch, completely cutting off the pressure loss path of the faulty branch, and preventing single-circuit leakage from lowering the system's main pipe pressure.

[0076] After isolation is completed, the system redistributes the hydraulic flow to maintain the pressure of the remaining normal branches above the preset operating value (e.g., 0.8P0), thus maintaining normal attitude control and height adjustment functions. When multiple branches malfunction simultaneously, the system synchronously executes multi-path isolation logic.

[0077] It should be noted that, through the four-wheel independent zone isolation and pressure-maintaining mechanism, leakage and pressure loss faults in a single wheel branch are precisely controlled within the faulty branch, without affecting the entire vehicle's hydraulic system, thus significantly improving the fault tolerance of the entire vehicle's suspension system.

[0078] In some embodiments of this disclosure, the method further includes a maintenance mode pressure holding and leakage branch location step. After the vehicle is connected to after-sales maintenance equipment and the maintenance mode is manually activated, the system executes a four-wheel branch segmented pressure holding detection algorithm to accurately determine the leakage location through the pressure decay rate, while maintaining residual pressure in the system. Specifically, this includes the following sub-steps: Step g1: System initialization and pressure holding. After the maintenance mode is activated, the oil pumps will build up the system pressure to the standard working pressure P0 (e.g., 18MPa), then shut off the oil pump output and lock the base pressure of the main oil line.

[0079] Step g2: Independent testing of each wheel branch. Following the sequence of left front, right front, left rear, and right rear, open only the isolation valve of one wheel branch at a time, keeping the other three wheel branches closed. Each opened branch is then independently pressure-held and allowed to stand for 3 seconds, with the pressure drop during this period recorded in real time.

[0080] Step g3, Leakage Location Determination. Based on the pressure decay data of each branch, the leakage location is determined according to the following rules: If the pressure decay of a single wheel branch within 3 seconds is greater than or equal to 2 MPa, then the single wheel branch is determined to have a leakage fault; If the pressure decay of all four wheel branches is less than or equal to 0.5 MPa, but the continuous pressure decay of the main pipe is greater than or equal to 1.5 MPa / 3 seconds, then the hydraulic main pipe or common oil circuit is determined to have a leakage fault; If the pressure of all branches and the main pipe is stable and there is no obvious decay, then there is no leakage fault, and the low pressure problem is caused by oil pump wear, filter blockage, or other oil supply faults.

[0081] Step g4, maintenance residual pressure. Throughout the entire testing process, the system continuously maintains a basic pressure of 10MPa or higher to prevent complete depressurization of the oil circuit. This facilitates maintenance personnel in disassembling and assembling pipelines, replacing components, and re-inspecting faults, significantly improving maintenance efficiency.

[0082] It should be noted that, through the segmented pressure testing technology of the above-mentioned maintenance mode, the system can automatically and accurately distinguish between main pipe leakage and single-branch leakage, with high fault location accuracy, which greatly shortens the fault diagnosis time and reduces the difficulty and cost of after-sales maintenance.

[0083] In some embodiments of this disclosure, for severe low-pressure loss faults of the third preset level (instantaneous pressure loss) and the fourth preset level (complete collapse), the system establishes a cross-domain collaborative mechanism between the suspension, ESP stability control system, vehicle powertrain system, and steering system. Specifically, after triggering severe pressure loss protection, the system sends a torque limiting request to the powertrain system via the Controller Area Network (CAN) bus to automatically and gently limit the power output of the engine or drive motor; sends a steering angle limit request to the steering system to reduce the steering adjustment range; and sends a braking response optimization request to the ESP system to adjust the braking response rate. Through multi-system linkage, the vehicle's driving stability under extreme conditions is ensured.

[0084] In some embodiments of this disclosure, the method further includes a vehicle-cloud linkage step. Upon triggering a low-voltage fault, the system automatically uploads the fault level, fault location, vehicle location, and operating condition data to the cloud platform via the vehicle communication module. Based on the fault information, the cloud platform proactively pushes maintenance reminders and information on nearby maintenance stations to the user, supporting online appointments for maintenance services and achieving intelligent operation and maintenance management.

[0085] In some embodiments of this disclosure, the method further includes a digital predictive model fault prediction step. The system integrates data on oil level, pressure difference across the filter element, and oil pump motor operating current loss to build a digital predictive model for oil pump wear, pipeline aging, and filter element blockage. By iteratively updating the equipment aging coefficient through real-time data, potential low-pressure faults can be predicted in advance, achieving a technological upgrade from "post-fault protection" to "pre-fault predictive maintenance."

[0086] In some embodiments of this disclosure, the method further includes a full lifecycle fault tracing step. The system automatically records the complete pressure curves, oil temperature conditions, vehicle speed conditions, and fault handling logs for each low-pressure fault, forming a full lifecycle fault tracing archive for the vehicle suspension hydraulic system, providing data support for component life analysis, fault pattern statistics, and technical iteration optimization.

[0087] In some embodiments of this disclosure, the method further includes an adaptive learning step. The system embeds an AI adaptive learning algorithm to continuously collect low-pressure fault characteristic data under different vehicle conditions, mileage, and temperature environments. Through machine learning algorithms, iterative optimization of the four-level threshold and pressure compensation parameters is achieved, enabling the algorithm to adaptively evolve. This allows fault determination and protection control to dynamically adapt to the aging characteristics of the vehicle throughout its entire life cycle, becoming more accurate with use.

[0088] In some embodiments of this disclosure, the method can also be adapted to 800V high-voltage pure electric platforms and high-power, high-flow hydraulic pump architectures. For high-voltage platform applications, the pressure acquisition frequency, pressure compensation response rate, and limp-control parameters can be adaptively optimized, ensuring that the technical solution of this disclosure also possesses good applicability and versatility in next-generation high-voltage platform electro-hydraulic active suspension systems.

[0089] The hydraulic pressure protection control method for a high-pressure oil pump fully active suspension system proposed in this disclosure acquires the pressure signal, oil temperature signal, and vehicle attitude signal of the suspension system. Based on the oil temperature signal, the original low-pressure fault level determination criterion is corrected, effectively avoiding false alarms at low temperatures and missed detections at high temperatures. This ensures accurate and reliable fault identification across the entire temperature range. The low-pressure fault level is determined based on the corrected criterion, achieving precise differentiation of low-pressure faults of different degrees. When the low-pressure fault level is the first preset level, the high-pressure oil pump is controlled to increase its speed and / or displacement according to the corresponding compensation gradient to compensate for system pressure, thus proactively protecting the system. The system works by controlling hydraulic pressure and delaying the deterioration of faults, preserving the normal operating capability of the suspension to the maximum extent. After determining that a low-pressure fault has occurred, it locks the current vehicle posture and gradually reduces the active adjustment stroke of the suspension actuators according to a preset gradient. This eliminates the mechanical impact on the chassis structure caused by sudden vehicle heave and posture changes. The system also configures the vehicle's maximum driving speed to the speed limit corresponding to the level of the low-pressure fault and switches the suspension operating mode to the operating mode corresponding to the level of the low-pressure fault. This ensures that the vehicle still has a safe driving capability that matches the severity of the fault after a low-pressure fault occurs, avoiding excessive restriction for minor faults and loss of control for major faults, thus balancing driving safety and ease of use.

[0090] Figure 2 This is a block diagram illustrating a hydraulic protection control device for a high-pressure oil pump fully active suspension system according to an exemplary embodiment. (Refer to...) Figure 2 The device includes an acquisition unit 201, a correction unit 202, a determination unit 203, a control unit 204, a reduction unit 205, and a configuration unit 206.

[0091] Among them, the acquisition unit 201 is used to acquire the pressure signal, oil temperature signal and vehicle attitude signal of the suspension system; The correction unit 202 is used to correct the original low-pressure fault level judgment criteria based on the oil temperature signal to obtain the corrected judgment criteria. The determining unit 203 is used to determine the low-pressure fault level of the suspension system based on the pressure signal according to the modified judgment criteria; the low-pressure fault level is any one of multiple preset levels. The control unit 204 is used to control the high-pressure oil pump to increase its speed and / or control the high-pressure oil pump to increase its displacement according to the compensation gradient corresponding to the first preset level when the low-pressure fault level is the first preset level among multiple preset levels, so as to compensate the system pressure of the suspension system. The reduction unit 205 is used to lock the current vehicle posture based on the vehicle posture signal after determining that a low-pressure fault has occurred, and gradually reduce the active adjustment stroke of the suspension actuator in the suspension system according to a preset gradient. Configuration unit 206 is used to configure the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low pressure fault level, and to switch the suspension operating mode to the operating mode corresponding to the low pressure fault level.

[0092] In some embodiments of this disclosure, the multiple preset levels include a first preset level, a second preset level, a third preset level, and a fourth preset level. In some embodiments of this disclosure, the determining unit 203 may specifically be used for: Based on the revised judgment criteria, the low-pressure fault level of the suspension system is determined according to the system steady-state working pressure, pressure build-up rate, pressure decay slope and fault duration of the suspension system. The steady-state working pressure of the first preset level is higher than that of the second preset level, the steady-state working pressure of the second preset level is higher than that of the third preset level, and the steady-state working pressure of the third preset level is higher than that of the fourth preset level. The pressure build-up rate of the first preset level is higher than that of the second preset level, the pressure build-up rate of the second preset level is higher than that of the third preset level, and the pressure build-up rate of the third preset level is higher than that of the fourth preset level. The pressure attenuation slope of the first preset level is less than that of the second preset level, the pressure attenuation slope of the second preset level is less than that of the third preset level, and the pressure attenuation slope of the third preset level is less than that of the fourth preset level. The duration of a fault at the first preset level is less than that at the second preset level, the duration of a fault at the second preset level is less than that at the fourth preset level, and the duration of a fault at the third preset level is less than that at both the second and fourth preset levels.

[0093] In some embodiments of this disclosure, the correction unit 202 may specifically be used for: When the oil temperature is lower than the first preset temperature threshold, the judgment threshold for each low-pressure fault level is configured to the low-temperature corrected judgment threshold corresponding to the current oil temperature, the pressure build-up judgment time is configured to the low-temperature corrected pressure build-up judgment time corresponding to the current oil temperature, and the judgment sensitivity of the pressure decay slope is configured to the low-temperature corrected judgment sensitivity corresponding to the current oil temperature. When the oil temperature is between the first preset temperature threshold and the second preset temperature threshold, the original judgment threshold, the original pressure build-up judgment time, and the original pressure decay slope judgment sensitivity of each low-pressure fault level are maintained, and no correction is performed; the first preset temperature threshold is less than the second preset temperature threshold. When the oil temperature is higher than the second preset temperature threshold, the judgment threshold for each low-pressure fault level is configured to the high-temperature corrected judgment threshold corresponding to the current oil temperature, the judgment sensitivity of the pressure attenuation slope is configured to the high-temperature corrected judgment sensitivity corresponding to the current oil temperature, and the pressure sampling period is configured to the high-temperature corrected sampling period corresponding to the current oil temperature.

[0094] In some embodiments of this disclosure, the first preset level includes a first sub-level and a second sub-level; the steady-state operating pressure of the first sub-level is higher than that of the second sub-level, and the control unit 204 can specifically be used for: When the low-pressure fault level is the first sub-level, the speed of the high-pressure oil pump is increased by the first magnitude, and the displacement of the high-pressure oil pump is increased by the second magnitude. When the low-pressure fault level is the second sub-level, the speed of the high-pressure oil pump is increased by the third level, and the displacement of the high-pressure oil pump is increased by the fourth level. The third amplitude is greater than the first amplitude, and the fourth amplitude is greater than the second amplitude.

[0095] In some embodiments of this disclosure, the control unit 204 may specifically be used for: During the pressurization process, the fluctuation amplitude of the system pressure is monitored in real time, and the fluctuation amplitude is controlled within the preset range; When the number of consecutive pressure replenishment failures reaches a preset number, the low-pressure fault level will be upgraded to the third preset level among multiple preset levels, and pressure replenishment will be terminated.

[0096] In some embodiments of this disclosure, the control unit 204 may also be used for: Real-time acquisition of independent pressure signals from each wheel branch of the vehicle; Based on each independent pressure signal, the pressure difference between the pressure of a single wheel branch and the pressure of the other branches is calculated, as well as the pressure attenuation slope of each wheel branch is calculated. When the pressure difference exceeds the preset difference threshold and the pressure attenuation slope exceeds the preset attenuation slope threshold, the single-wheel branch is identified as an abnormal branch, and the isolation valve corresponding to the abnormal branch is closed.

[0097] In some embodiments of this disclosure, multiple preset levels are sequentially classified into a first preset level, a second preset level, a third preset level, and a fourth preset level according to the severity of the fault, from low to high. The configuration unit 206 can specifically be used for: When the low-pressure fault level is the first preset level, the active adjustment function of the suspension system is not restricted, and the maximum driving speed of the vehicle is not restricted. When the low-pressure fault level is the second preset level, the Sport mode and Off-road mode in the vehicle's driving mode are disabled, and the suspension system is prohibited from performing active adjustment actions exceeding the preset travel amplitude. When the low-pressure fault level is the third preset level, the suspension system is prohibited from performing active adjustment actions and vehicle height setting operations that exceed the preset travel amplitude, and the vehicle's maximum driving speed is configured to the first speed limit. When the low-pressure fault level is the fourth preset level, all active control functions of the suspension system are turned off, so that the suspension system retains only passive buffer support capability, and the maximum driving speed of the vehicle is configured to the second speed limit, which is less than the first speed limit.

[0098] Regarding the apparatus in the above embodiments, the specific manner in which each module performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0099] The hydraulic pressure protection control device for the high-pressure oil pump fully active suspension system proposed in this disclosure acquires the pressure signal, oil temperature signal, and vehicle attitude signal of the suspension system. Based on the oil temperature signal, it corrects the original low-pressure fault level determination criterion, effectively avoiding false alarms at low temperatures and missed detections at high temperatures. This ensures accurate and reliable fault identification across the entire temperature range. The low-pressure fault level is determined based on the corrected criterion, achieving precise differentiation of low-pressure faults of different degrees. When the low-pressure fault level is the first preset level, the high-pressure oil pump is controlled to increase its speed and / or displacement according to the corresponding compensation gradient to compensate for system pressure, thus proactively protecting the system. The system works by controlling hydraulic pressure and delaying the deterioration of faults, preserving the normal operating capability of the suspension to the maximum extent. After determining that a low-pressure fault has occurred, it locks the current vehicle posture and gradually reduces the active adjustment stroke of the suspension actuators according to a preset gradient. This eliminates the mechanical impact on the chassis structure caused by sudden vehicle heave and posture changes. The system also configures the vehicle's maximum driving speed to the speed limit corresponding to the level of the low-pressure fault and switches the suspension operating mode to the operating mode corresponding to the level of the low-pressure fault. This ensures that the vehicle still has a safe driving capability that matches the severity of the fault after a low-pressure fault occurs, avoiding excessive restriction for minor faults and loss of control for major faults, thus balancing driving safety and ease of use.

[0100] Figure 3 This is a block diagram illustrating an apparatus for a hydraulic pressure protection control method for a high-pressure oil pump fully active suspension system, according to an exemplary embodiment. For example, apparatus 300 may be an electronic device, such as a mobile phone, computer, digital broadcasting terminal, messaging device, tablet device, personal digital assistant, etc.

[0101] Reference Figure 3 The device 300 may include one or more of the following components: processing component 302, memory 304, power component 306, multimedia component 308, audio component 310, input / output I / O interface 312, sensor component 314, and communication component 316.

[0102] Processing component 302 typically controls the overall operation of device 300, such as operations associated with display, telephone calls, data communication, camera operation, and recording. Processing component 302 may include one or more processors 320 to execute instructions to perform all or part of the steps of the methods described above. Furthermore, processing component 302 may include one or more modules to facilitate interaction between processing component 302 and other components. For example, processing component 302 may include a multimedia module to facilitate interaction between multimedia component 308 and processing component 302.

[0103] Memory 304 is configured to store various types of data to support the operation of device 300. Examples of such data include instructions for any application or method operating on device 300, contact data, phonebook data, messages, pictures, videos, etc. Memory 304 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0104] The power supply component 306 provides power to the various components of the device 300. The power supply component 306 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power to the device 300.

[0105] Multimedia component 308 includes a screen that provides an output interface between the device 300 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touchscreen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors may sense not only the boundaries of the touch or swipe action but also the duration and pressure associated with the touch or swipe operation. In some embodiments, multimedia component 308 includes a front-facing camera and / or a rear-facing camera. When the device 300 is in an operating mode, such as a shooting mode or a video mode, the front-facing camera and / or the rear-facing camera may receive external multimedia data. Each front-facing camera and rear-facing camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

[0106] Audio component 310 is configured to output and / or input audio signals. For example, audio component 310 includes a microphone (MIC) configured to receive external audio signals when device 300 is in an operating mode, such as call mode, recording mode, and voice recognition mode. The received audio signals may be further stored in memory 304 or transmitted via communication component 316. In some embodiments, audio component 310 also includes a speaker for outputting audio signals.

[0107] I / O interface 312 provides an interface between processing component 302 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to, home buttons, volume buttons, start buttons, and lock buttons.

[0108] Sensor assembly 314 includes one or more sensors for providing status assessments of various aspects of device 300. For example, sensor assembly 314 may detect the on / off state of device 300, the relative positioning of components such as the display and keypad of device 300, changes in the position of device 300 or a component of device 300, the presence or absence of user contact with device 300, the orientation or acceleration / deceleration of device 300, and temperature changes of device 300. Sensor assembly 314 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 314 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, sensor assembly 314 may also include an accelerometer, a gyroscope, a magnetometer, a pressure sensor, or a temperature sensor.

[0109] Communication component 316 is configured to facilitate wired or wireless communication between device 300 and other devices. Device 300 can access wireless networks based on communication standards, such as WiFi, 2G, or 3G, or combinations thereof. In one exemplary embodiment, communication component 316 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, communication component 316 also includes a near-field communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on radio frequency identification (RFID) technology, Infrared Data Association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0110] In an exemplary embodiment, the apparatus 300 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the methods described above.

[0111] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 304 including instructions, which can be executed by a processor 320 of the device 300 to perform the above-described method. For example, the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0112] In an exemplary embodiment, a computer program product is also provided, including a computer program that implements the above-described method when executed by the processor 320 of the device 300.

[0113] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein.

[0114] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope.

Claims

1. A method for hydraulic pressure protection and control of a high-pressure oil pump fully active suspension system, characterized in that, include: Acquire pressure signals, oil temperature signals, and vehicle attitude signals from the suspension system; The original low-pressure fault level judgment criteria are corrected based on the oil temperature signal to obtain the corrected judgment criteria. Based on the revised judgment criteria, the low-pressure fault level of the suspension system is determined according to the pressure signal. The low-voltage fault level is any one of a plurality of preset levels; When the low-pressure fault level is the first preset level among the plurality of preset levels, the high-pressure oil pump is controlled to increase its speed and / or the high-pressure oil pump is controlled to increase its displacement according to the compensation gradient corresponding to the first preset level, so as to compensate for the system pressure of the suspension system. After determining that a low-pressure fault has occurred, the current vehicle attitude is locked based on the vehicle attitude signal, and the active adjustment stroke of the suspension actuator in the suspension system is gradually reduced according to a preset gradient. Configure the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low-pressure fault level, and switch the suspension operating mode to the operating mode corresponding to the low-pressure fault level.

2. The oil pressure protection control method for a high-pressure oil pump fully active suspension system according to claim 1, characterized in that, The multiple preset levels include a first preset level, a second preset level, a third preset level, and a fourth preset level; The determination of the low-pressure fault level of the suspension system based on the pressure signal according to the modified judgment criteria includes: Based on the revised judgment criteria, the low-pressure fault level of the suspension system is determined according to the system steady-state operating pressure, pressure build-up rate, pressure decay slope, and fault duration of the suspension system. The steady-state operating pressure of the first preset level is higher than that of the second preset level, the steady-state operating pressure of the second preset level is higher than that of the third preset level, and the steady-state operating pressure of the third preset level is higher than that of the fourth preset level. The pressure build-up rate of the first preset level is higher than that of the second preset level, the pressure build-up rate of the second preset level is higher than that of the third preset level, and the pressure build-up rate of the third preset level is higher than that of the fourth preset level. The pressure attenuation slope of the first preset level is less than that of the second preset level, the pressure attenuation slope of the second preset level is less than that of the third preset level, and the pressure attenuation slope of the third preset level is less than that of the fourth preset level. The duration of the fault at the first preset level is less than that at the second preset level, the duration of the fault at the second preset level is less than that at the fourth preset level, and the duration of the fault at the third preset level is less than that at both the second and fourth preset levels.

3. The oil pressure protection control method for a high-pressure oil pump fully active suspension system according to claim 1, characterized in that, The determination criteria for correcting the original low-pressure fault level based on the oil temperature signal are used to obtain the corrected determination criteria, including: When the oil temperature is lower than the first preset temperature threshold, the judgment threshold for each low-pressure fault level is configured to the low-temperature corrected judgment threshold corresponding to the current oil temperature, the pressure build-up judgment time is configured to the low-temperature corrected pressure build-up judgment time corresponding to the current oil temperature, and the judgment sensitivity of the pressure decay slope is configured to the low-temperature corrected judgment sensitivity corresponding to the current oil temperature. When the oil temperature is between the first preset temperature threshold and the second preset temperature threshold, the original judgment threshold, the original pressure build-up judgment time, and the original pressure decay slope judgment sensitivity of each low-pressure fault level are maintained, and no correction is performed; the first preset temperature threshold is less than the second preset temperature threshold. When the oil temperature is higher than the second preset temperature threshold, the judgment threshold of each low-pressure fault level is configured to the high-temperature corrected judgment threshold corresponding to the current oil temperature, the judgment sensitivity of the pressure attenuation slope is configured to the high-temperature corrected judgment sensitivity corresponding to the current oil temperature, and the pressure sampling period is configured to the high-temperature corrected sampling period corresponding to the current oil temperature.

4. The oil pressure protection control method for a high-pressure oil pump fully active suspension system according to claim 1, characterized in that, The first preset level includes a first sub-level and a second sub-level; the steady-state operating pressure of the first sub-level is higher than that of the second sub-level; When the low-pressure fault level is the first preset level among the plurality of preset levels, according to the compensation gradient corresponding to the first preset level, the high-pressure oil pump is controlled to increase its speed and / or its displacement is controlled to increase its displacement to compensate for the system pressure of the suspension system, including: When the low-pressure fault level is the first sub-level, the speed of the high-pressure oil pump is increased by a first amount, and the displacement of the high-pressure oil pump is increased by a second amount. When the low-pressure fault level is the second sub-level, the speed of the high-pressure oil pump is increased by a third magnitude, and the displacement of the high-pressure oil pump is increased by a fourth magnitude. The third amplitude is greater than the first amplitude, and the fourth amplitude is greater than the second amplitude.

5. The oil pressure protection control method for a high-pressure oil pump fully active suspension system according to claim 4, characterized in that, The method of controlling the high-pressure oil pump to increase its speed and / or controlling the high-pressure oil pump to increase its displacement also includes: During the pressurization process, the fluctuation amplitude of the system pressure is monitored in real time, and the fluctuation amplitude is controlled within a preset range; When the number of consecutive pressure replenishment failures reaches a preset number, the low-pressure fault level is upgraded to the third preset level among the multiple preset levels, and pressure replenishment is terminated.

6. The oil pressure protection control method for a high-pressure oil pump fully active suspension system according to claim 1, characterized in that, Also includes: Real-time acquisition of independent pressure signals from each wheel branch of the vehicle; Based on each independent pressure signal, the pressure difference between the pressure of a single wheel branch and the pressure of the other branches is calculated, as well as the pressure attenuation slope of each wheel branch is calculated. When the pressure difference exceeds a preset difference threshold and the pressure attenuation slope exceeds a preset attenuation slope threshold, the single-wheel branch is determined to be an abnormal branch, and the isolation valve corresponding to the abnormal branch is controlled to close.

7. The oil pressure protection control method for a high-pressure oil pump fully active suspension system according to claim 1, characterized in that, The multiple preset levels are arranged in order of increasing fault severity, including a first preset level, a second preset level, a third preset level, and a fourth preset level. The step of configuring the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low-pressure fault level, and switching the suspension operating mode to the operating mode corresponding to the low-pressure fault level, includes: When the low-pressure fault level is the first preset level, the active adjustment function of the suspension system is not restricted, nor is the maximum driving speed of the vehicle. When the low-pressure fault level is the second preset level, the sport mode and off-road mode in the vehicle's driving modes are disabled, and the suspension system is prohibited from performing active adjustment actions exceeding the preset travel amplitude. When the low-pressure fault level is the third preset level, the suspension system is prohibited from performing active adjustment actions and vehicle height setting operations that exceed the preset travel amplitude, and the maximum driving speed of the vehicle is configured as the first speed limit. When the low-pressure fault level is the fourth preset level, all active control functions of the suspension system are turned off, so that the suspension system retains only passive buffer support capability, and the maximum driving speed of the vehicle is configured to a second speed limit, which is less than the first speed limit.

8. A hydraulic pressure protection and control device for a high-pressure oil pump fully active suspension system, characterized in that, include: The acquisition unit is used to acquire the pressure signal, oil temperature signal, and vehicle attitude signal of the suspension system. The correction unit is used to correct the original low-pressure fault level judgment criteria based on the oil temperature signal to obtain the corrected judgment criteria. A determination unit is used to determine the low-pressure fault level of the suspension system based on the modified determination criteria and the pressure signal. The low-voltage fault level is any one of a plurality of preset levels; The control unit is configured to, when the low-pressure fault level is the first preset level among the plurality of preset levels, control the high-pressure oil pump to increase its speed and / or control the high-pressure oil pump to increase its displacement according to the compensation gradient corresponding to the first preset level, so as to compensate for the system pressure of the suspension system. The reduction unit is used to lock the current vehicle posture based on the vehicle posture signal after determining that a low-pressure fault has occurred, and to gradually reduce the active adjustment stroke of the suspension actuator in the suspension system according to a preset gradient. The configuration unit is used to configure the maximum driving speed of the vehicle to which the suspension system belongs to the speed limit corresponding to the low-pressure fault level, and to switch the suspension operating mode to the operating mode corresponding to the low-pressure fault level.

9. An electronic device, characterized in that, include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the method as described in any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1 to 7.

Images