Safety control method and system for vehicle, vehicle and computer readable storage medium

CN122923707APending Publication Date: 2026-10-16BEIJING CAVAN NEW ENERGY AUTOMOTIVE CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202611047545.7
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-07-14
Publication Date
2026-10-16

AI Technical Summary

Technical Problem

其中,温度超限保护方案在温度超限时触发报警与功能限制,但其固定的监测阈值难以适应不同的车辆工作剖面,易导致故障风险预警准确率低,引发误触发、漏触发;且其故障后处理策略单一,易引起功能波动并影响用户体验

Benefits of technology

[0018] According to an embodiment of the present invention, the vehicle safety control system, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, predicts the health value of the controller based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can adaptively provide fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and the health value. This achieves dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers. Through this proactive intervention, the system can integrate safety post-processing operations with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122923707A_ABST
    Figure CN122923707A_ABST
Patent Text Reader

Abstract

The application discloses a safety control method and system of a vehicle, a vehicle and a computer readable storage medium, and relates to the technical field of vehicle safety control. The method comprises the following steps: acquiring an actual working environment temperature of a controller and a current running working condition of the vehicle; predicting a health value of the controller according to the actual working environment temperature; and executing a corresponding safety control strategy according to the current running working condition and the health value. The application can perform adaptive fault risk early warning based on the actual health state of hardware, thereby actively identifying potential hidden dangers before the controller completely fails. Then, the corresponding safety control strategy is executed in combination with the current running working condition and the health value, the safety post-processing operation is fused with the actual driving working condition of the vehicle without significantly increasing the hardware cost, smooth safety control is realized, and the driving safety and user experience are improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of vehicle technology, and in particular to a vehicle safety control method, system, vehicle, and computer-readable storage medium. Background Technology

[0002] Vehicle controllers operate in extreme environments such as the engine compartment for extended periods, experiencing significant temperature fluctuations in their internal components due to start-stop, acceleration, and deceleration. According to the failure mechanisms of electronic components, the failure rate of hardware components shows a significant exponential positive correlation with the operating environment temperature. Therefore, prolonged exposure to high temperatures or frequent temperature fluctuations accelerates the aging process of components, ultimately leading to controller failure and functional malfunction.

[0003] To address these issues, relevant technologies typically employ two solutions: over-temperature protection and redundant hardware design. However, both have limitations. Over-temperature protection triggers alarms and functional limitations when temperatures exceed limits, but its fixed monitoring thresholds are difficult to adapt to different vehicle operating profiles, leading to low accuracy in fault risk warnings and causing false or missed triggers. Furthermore, its post-fault handling strategy is simplistic, easily causing functional fluctuations and impacting user experience. While redundant hardware design can switch to backup channels to maintain functionality when the primary hardware fails, it only passively responds to faults, cannot proactively mitigate risks, and significantly increases hardware costs. Summary of the Invention

[0004] The present invention aims to solve at least one of the technical problems existing in the prior art.

[0005] Therefore, one objective of this invention is to propose a vehicle safety control method that can adaptively predict fault risks based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, by combining the current operating conditions and health values, a corresponding safety control strategy is executed. This method integrates safety post-processing operations with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0006] Therefore, a second objective of this invention is to provide a vehicle safety control system.

[0007] Therefore, a third objective of the present invention is to provide a vehicle.

[0008] Therefore, a fourth object of the present invention is to provide a computer-readable storage medium.

[0009] To achieve the above objectives, a first aspect of the present invention discloses a vehicle safety control method, wherein the vehicle includes a controller, and the method includes: acquiring the actual operating ambient temperature of the controller and the current operating condition of the vehicle; predicting the health value of the controller based on the actual operating ambient temperature; and executing a corresponding safety control strategy based on the current operating condition and the health value.

[0010] According to the vehicle safety control method of this invention, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, the health value of the controller is predicted based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and the health value. This achieves dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers. Through this proactive intervention, the safety post-processing operation can be integrated with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0011] In addition, the vehicle safety control method according to the above embodiments of the present invention may also have the following additional technical features: In some embodiments, predicting the health value of the controller based on the actual operating environment temperature includes: determining the damage value of each target component in the controller based on the actual operating environment temperature; determining the failure rate percentage of each target component based on a preset analysis method, and determining the importance weight of each target component based on the failure rate percentage; performing a weighted summation based on the importance weight of each target component and its corresponding damage value to obtain the cumulative damage value of the controller; and predicting the health value of the controller based on the cumulative damage value.

[0012] In some embodiments, determining the damage value of each target component in the controller based on the actual operating ambient temperature includes: determining a failure acceleration factor for each target component based on the actual operating ambient temperature; determining the equivalent cumulative operating time of each target component based on the failure acceleration factor; and determining the damage value of each target component based on the equivalent cumulative operating time and the preset service life of each target component.

[0013] In some embodiments, determining the failure acceleration factor of the target component based on the actual operating ambient temperature includes: determining a reference failure rate according to a preset failure rate algorithm based on a preset reference operating temperature, a preset pre-exponential factor, a preset constant, and a preset activation energy of the target component; determining the actual failure rate at the actual operating ambient temperature according to the preset failure rate algorithm based on the actual operating ambient temperature, the preset pre-exponential factor, the preset constant, and the preset activation energy; determining the ratio of the actual failure rate to the reference failure rate, and using the ratio as the failure acceleration factor.

[0014] In some embodiments, when executing a corresponding safety control strategy based on the current operating condition and the health value, the method includes: determining a preset safety threshold corresponding to the current operating condition based on a preset mapping relationship, wherein the preset mapping relationship includes multiple sets of correspondences between the current operating conditions and the preset safety thresholds; determining the vehicle's safety level as a first safety level when the health value is lower than a first preset safety threshold; determining the vehicle's safety level as a second safety level when the health value is lower than a second preset safety threshold; executing a corresponding safety control strategy based on the first safety level and the second safety level; wherein the first preset safety threshold is greater than the second preset safety threshold, and the safety level of the first safety level is higher than that of the second safety level.

[0015] In some embodiments, the vehicle further includes a drive device for outputting power. When executing a corresponding safety control strategy according to the first safety level and the second safety level, the strategy includes: when the safety level is the first safety level, controlling the vehicle to issue a first alarm signal, and limiting the peak torque of the drive device to a first preset ratio upon receiving the next accelerator pedal operation signal; when the safety level is the second safety level, controlling the vehicle to issue a second alarm signal, and limiting the peak torque of the drive device to a second preset ratio upon receiving the next accelerator pedal operation signal; wherein the alarm intensity of the second alarm signal is greater than the alarm intensity of the first alarm signal, and the first preset ratio is greater than the second preset ratio.

[0016] In some embodiments, after executing the corresponding safety control strategy based on the current operating conditions and the health value, the method includes: in response to a received reset instruction, resetting the cumulative damage value to a preset initial value.

[0017] To achieve the above objectives, a second aspect of the present invention discloses a vehicle safety control system, wherein the vehicle includes a controller, and the system includes: an acquisition module for acquiring the actual operating ambient temperature of the controller and the current operating condition of the vehicle; a determination module for predicting the health value of the controller based on the actual operating ambient temperature; and a control module for executing a corresponding safety control strategy based on the current operating condition and the health value.

[0018] According to an embodiment of the present invention, the vehicle safety control system, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, predicts the health value of the controller based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can adaptively provide fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and the health value. This achieves dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers. Through this proactive intervention, the system can integrate safety post-processing operations with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0019] To achieve the above objectives, an embodiment of the third aspect of the present invention discloses a vehicle, including: a controller, and a vehicle safety control system as described in the second aspect of the present invention; or, a processor, a memory, and a vehicle safety control program stored in the memory and executable on the processor, wherein the vehicle safety control program, when executed by the processor, implements a vehicle safety control method as described in any embodiment of the first aspect of the present invention.

[0020] According to embodiments of the present invention, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, the health value of the controller is predicted based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and health value. This achieves dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers. Through this proactive intervention, the safety post-processing operation can be integrated with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0021] To achieve the above objectives, an embodiment of the fourth aspect of the present invention discloses a computer-readable storage medium storing a vehicle safety control program, which, when executed by a processor, implements the vehicle safety control method as described in any embodiment of the first aspect of the present invention.

[0022] According to an embodiment of the present invention, when a vehicle safety control program stored thereon is executed by a processor, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, it predicts the health value of the controller based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and the health value, realizing the dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings, and effectively avoiding false triggers or missed triggers. Thus, through this proactive intervention, the safety post-processing operation can be integrated with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0023] Additional aspects and advantages of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. Attached Figure Description

[0024] The above and / or additional aspects and advantages of the present invention will become apparent and readily understood from the description of the embodiments taken in conjunction with the following drawings, in which: Figure 1 This is a flowchart of a vehicle safety control method according to an embodiment of the present invention; Figure 2 This is a structural block diagram of a vehicle safety control system according to an embodiment of the present invention; Figure 3 This is a structural block diagram of a vehicle according to an embodiment of the present invention; Figure 4 This is a structural block diagram of a vehicle according to another embodiment of the present invention. Detailed Implementation

[0025] The embodiments of the present invention are described in detail below. The embodiments described with reference to the accompanying drawings are exemplary. The embodiments of the present invention are described in detail below.

[0026] The following is for reference. Figure 1 A vehicle safety control method according to an embodiment of the present invention is described.

[0027] Figure 1 This is a flowchart of a vehicle safety control method according to an embodiment of the present invention. Figure 1 As shown, the method includes at least steps S1-S3.

[0028] Step S1: Obtain the actual operating temperature of the controller and the current operating conditions of the vehicle.

[0029] In this embodiment, the actual operating ambient temperature of the controller is acquired in real time by the temperature acquisition module, and the actual operating ambient temperature is periodically sent to the control unit. At the same time, the operating condition acquisition module acquires the vehicle's CAN bus signals (such as vehicle speed, throttle opening, etc.), analyzes and determines the vehicle's current operating condition (such as highway operating condition, urban congestion operating condition, slope operating condition, etc.), and periodically sends the analyzed operating condition to the control unit. This allows the control unit to integrate the actual operating condition of the vehicle when performing vehicle fault detection, thereby effectively reducing functional fluctuations and improving the user experience.

[0030] Step S2: Predict the health value of the controller based on the actual working environment temperature.

[0031] In this embodiment, the actual operating environment temperature is input into a preset health algorithm for calculation. Since the controller's failure rate is exponentially positively correlated with temperature (Arrhenius equation), this health value can quantitatively reflect the aging degree of the controller's internal hardware and its current reliability status. By predicting the controller's health value, the control unit no longer relies on a single fixed temperature threshold, nor does it need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, proactively identifying potential hazards before the controller completely fails, thereby significantly improving the vehicle's operational reliability under complex operating conditions.

[0032] Step S3: Execute the corresponding safety control strategy based on the current operating conditions and health values.

[0033] In this embodiment, the control unit matches the real-time health value of the controller with the current vehicle operating conditions (such as highway, congestion, slope, etc.) to dynamically determine a preset safety threshold suitable for the specific operating conditions. The control unit then compares the health value with the threshold and determines the safety level of different safety levels based on the comparison results. By combining the health value and the operating conditions to determine the safety level, the limitation of traditional fixed thresholds is broken. Before a fault occurs, the fault detection standard is adaptively adjusted according to the actual working profile of the vehicle. This not only effectively avoids false or missed fault triggering, but also accurately assesses risks based on specific operating conditions, providing a reliable basis for the subsequent implementation of differentiated safety control strategies.

[0034] After determining the safety level, the control unit will execute a safety control strategy that matches that level. Specifically, based on the predicted risk level, the control unit will trigger an alarm of appropriate intensity and limit the peak torque output of the drive unit accordingly, thereby improving the accuracy of fault warnings and effectively avoiding false or missed triggers. Through this proactive predictive approach, without significantly increasing hardware costs, the control unit can deeply integrate safety post-processing operations with the actual driving conditions of the vehicle, enabling early warning and intervention, thus achieving smooth safety control before a fault occurs and effectively avoiding the traditional "one-size-fits-all" protection mode.

[0035] Therefore, in embodiments of the present invention, after obtaining the actual operating temperature of the controller and the current operating conditions of the vehicle, the health value of the controller is predicted based on the actual temperature. This breaks the limitation of relying on a single fixed temperature threshold in the traditional approach. It eliminates the need to wait for a fault to occur or the temperature to exceed the limit before responding; instead, it provides adaptive fault risk warnings based on the actual health status of the hardware, proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating conditions and health value. This achieves dynamic adjustment of the detection standard according to the actual operating profile of the vehicle, improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers. Through this proactive intervention, safety post-processing operations can be integrated with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0036] In one embodiment of the present invention, predicting the health value of the controller based on the actual working environment temperature includes: determining the damage value of each target component in the controller based on the actual working environment temperature; determining the failure rate percentage of each target component based on a preset analysis method, and determining the importance weight of each target component based on the failure rate percentage; performing a weighted summation based on the importance weight of each target component and its corresponding damage value to obtain the cumulative damage value of the controller; and predicting the health value of the controller based on the cumulative damage value.

[0037] For example, the damage value of each target component is recorded as... The importance weight of each target component is denoted as: The cumulative damage value is recorded as The health value is denoted as H.

[0038] In this embodiment, the controller is diagnostically analyzed according to a preset analysis method, such as FMEDA (Failure Modes, Effects, and Diagnostic Analysis). Based on the results of FMEDA in functional safety, safety-related hardware components within the controller are identified and designated as target components. For example, the number of target components is n. The failure rate percentage of each target component is determined based on the diagnostic analysis results, and the importance weight of each target component is quantified. The importance weights corresponding to the n target components are denoted as follows: And it satisfies the normalization condition. .

[0039] Subsequently, the actual operating ambient temperature is input into the preset damage calculation model to calculate the damage value set corresponding to each target component. .

[0040] Based on this, the cumulative damage value of the entire controller can be calculated using a weighted summation formula, i.e. Ultimately, it is achieved through the formula. The controller's health value H is calculated. Therefore, by introducing a pre-defined analysis method to analyze and determine the importance weights of each target component, differentiated assessments of components with varying degrees of criticality within the controller are achieved. Compared to simple averaging calculations, this weighted cumulative damage model can more accurately reflect the true impact of the aging of target safety components on the overall system reliability, improving the accuracy and robustness of health value prediction. This enables adaptive fault risk warnings based on the actual health status of the hardware, proactively identifying potential hazards before the controller completely fails, and significantly improving the vehicle's operational reliability under complex conditions.

[0041] In one embodiment of the present invention, when determining the damage value of each target component in the controller based on the actual working environment temperature, the method includes: determining the failure acceleration factor of each target component based on the actual working environment temperature; determining the equivalent cumulative working time of each target component based on the failure acceleration factor; and determining the damage value of each target component based on the equivalent cumulative working time and the preset service life of each target component.

[0042] For example, the failure acceleration factor is denoted as AF, and the equivalent cumulative working time is denoted as... The preset service life is recorded as .

[0043] In this embodiment, the actual operating environment temperature is input into a preset failure rate model (e.g., based on the Arrhenius equation) to determine the failure acceleration factor AF for each target component under the current operating condition. Combining the failure acceleration factor and the equivalent cumulative operating time calculation formula, the actual operating time t is converted to obtain the equivalent cumulative operating time, i.e., the equivalent cumulative operating time calculation formula is: After calculating the equivalent cumulative operating time of the target component, the ratio of the equivalent cumulative operating time to the preset service life of the target component is calculated to determine the damage value of the target component. By introducing a failure acceleration factor, the complex and variable actual temperature conditions are transformed into standardized equivalent working hours, effectively solving the problem that traditional timing methods cannot accurately reflect the accelerated wear and tear on component lifespan caused by high temperatures or drastic temperature changes. This dynamic damage assessment method based on a physical model can more realistically reproduce the aging process of components, significantly improving the accuracy of lifespan prediction and health status prediction, and avoiding the risk of premature maintenance or sudden failures due to estimation errors.

[0044] In one embodiment of the present invention, determining the failure acceleration factor of a target component based on the actual operating environment temperature includes: determining a reference failure rate according to a preset failure rate algorithm based on a preset reference operating temperature, a preset pre-exponential factor, a preset constant, and a preset activation energy of the target component; determining the actual failure rate at the actual operating environment temperature according to the preset failure rate algorithm based on the actual operating environment temperature, the preset pre-exponential factor, the preset constant, and the preset activation energy; and determining the ratio of the actual failure rate to the reference failure rate, using the ratio as the failure acceleration factor.

[0045] In the embodiment, the reference failure shorthand is: The actual failure rate is denoted as .

[0046] The default failure rate algorithm is: Where k is the failure rate and A is the preset pre-exponential factor; This is a preset constant, namely the Boltzmann constant; The preset activation energy represents the energy barrier that needs to be overcome for the reaction to occur; T is the actual working environment temperature.

[0047] The system sets differentiated activation energies for different components. This parameter is set based on the material properties and specific failure mechanisms of the target component, typically using a preset standard value. Simultaneously, the preset reference operating temperature for each target component can be obtained by consulting the corresponding hardware manual to ensure the accuracy of the calculation model.

[0048] Based on this, according to the preset reference operating temperature, preset pre-exponential factor, preset constant, and preset activation energy of the target component, the reference failure rate is calculated according to the preset failure rate algorithm, i.e. Based on the actual operating temperature, preset pre-exponential factor, preset constant, and preset activation energy, the actual failure rate under the actual operating temperature is calculated according to the preset failure rate algorithm. .

[0049] Calculate the ratio of the actual failure rate to the reference failure rate, and use this ratio as the failure acceleration factor AF, i.e. By introducing a standardized reference failure rate as a benchmark, a formula for a failure acceleration factor that is only related to temperature and activation energy is derived. This method cleverly eliminates the pre-exponential factor A, which is difficult to measure precisely, simplifying computational complexity, while quantifying the nonlinear impact of temperature fluctuations on the aging rate of components from a physical perspective. Compared to simple linear estimation, this model can more sensitively capture accelerated lifespan loss under high-temperature environments, significantly improving the scientific rigor and accuracy of controller health status prediction.

[0050] In one embodiment of the present invention, when executing a corresponding safety control strategy based on the current operating condition and health value, the method includes: determining a preset safety threshold corresponding to the current operating condition based on a preset mapping relationship, wherein the preset mapping relationship includes multiple sets of correspondences between the current operating conditions and the preset safety thresholds; determining the vehicle's safety level as a first safety level when the health value is lower than a first preset safety threshold; determining the vehicle's safety level as a second safety level when the health value is lower than a second preset safety threshold; and executing a corresponding safety control strategy based on the first safety level and the second safety level; wherein the first preset safety threshold is greater than the second preset safety threshold, and the safety level of the first safety level is higher than that of the second safety level.

[0051] In this embodiment, the vehicle safety level determination process is as follows: The control unit first dynamically determines the applicable preset safety threshold based on the vehicle's current operating conditions, according to a preset mapping relationship (which stores matching data between various operating conditions and corresponding safety thresholds). Then, the calculated health value is compared with this threshold to classify the safety level: when the health value is lower than a higher first preset safety threshold, it is determined to be at the first safety level, which has a higher degree of safety; and when the health value further decreases to below a lower second preset safety threshold, it is determined to be at the second safety level, which has a lower degree of safety. The corresponding safety control strategy is then executed according to the first and second safety levels. This mechanism of adaptively adjusting thresholds based on operating conditions and performing multi-level determinations can more accurately reflect the vehicle's true safety status under different loads or environments, thereby improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers.

[0052] In one embodiment of the present invention, the vehicle further includes a drive device for outputting power. When executing a corresponding safety control strategy according to a first safety level and a second safety level, the strategy includes: when the safety level is the first safety level, controlling the vehicle to issue a first alarm signal, and limiting the peak torque of the drive device to a first preset ratio upon receiving a next accelerator pedal operation signal; when the safety level is the second safety level, controlling the vehicle to issue a second alarm signal, and limiting the peak torque of the drive device to a second preset ratio upon receiving a next accelerator pedal operation signal; wherein the alarm intensity of the second alarm signal is greater than the alarm intensity of the first alarm signal, and the first preset ratio is greater than the second preset ratio.

[0053] In this embodiment, the vehicle is equipped with a drive unit (such as a drive motor) for outputting power. After the control unit determines the safety level based on the health value and the current operating conditions, it will execute a differentiated safety control strategy that matches the safety level to achieve graded response and power management.

[0054] For example, under high-speed conditions, when the safety level is determined to be the highest level (Level 1), the control unit first triggers a first warning signal (e.g., displaying a warning icon only on the instrument panel) to alert the driver. Subsequently, the control unit enters a standby limiting state. Once it detects the driver's next press of the accelerator pedal and receives the signal for the next accelerator pedal operation, it immediately limits the peak torque of the drive unit to a first preset ratio (e.g., 85%). This moderate torque limiting ensures the vehicle's basic driving capability in non-emergency situations while preventing further impact on damaged components from high loads.

[0055] When the safety level is at the second safety level, which is relatively low, the control unit issues a second alarm signal. This second alarm signal is stronger than the first alarm signal (e.g., using a combination of instrument panel icon and audible alarm) to strongly warn the driver that the vehicle is in a dangerous state. Similarly, upon receiving the next accelerator pedal operation signal, the peak torque of the drive unit will be limited to a lower second preset percentage (e.g., 70%). Through this significant power reduction, the control unit forcibly lowers the upper limit of the vehicle's power output, thereby ensuring that the vehicle can maintain a minimum level of safe driving or support the driver in safely stopping the vehicle when there is a high risk of hardware failure. However, in practical applications, the control strategies under each operating condition are not fixed but adaptively adjusted based on the vehicle's real-time operating status. This mechanism deeply integrates predicted health values ​​with multi-dimensional operating conditions, successfully achieving proactive safety intervention before a fault occurs.

[0056] By introducing the next accelerator pedal operation as the trigger for torque limiting, the system cleverly avoids the jerking and safety hazards that might result from suddenly cutting off or limiting power during driving, thus improving the smoothness of fault intervention. Simultaneously, by combining different levels of alarm intensity with torque limiting ratios, precise hierarchical control is achieved. By integrating safety post-processing operations with the vehicle's actual driving conditions, smooth intervention before a fault occurs can be ensured, enhancing driving safety and user experience.

[0057] In one embodiment of the present invention, after executing the corresponding safety control strategy according to the current operating conditions and health value, the method includes: in response to the received reset command, resetting the cumulative damage value to a preset initial value.

[0058] In this embodiment, after the vehicle executes a safety control strategy matching the current safety level (such as triggering an alarm signal of the corresponding level or limiting the peak torque of the drive unit), a cumulative damage reset mechanism is introduced to support subsequent vehicle maintenance and status recovery. Specifically, after the controller completes repairs or related hardware is replaced, maintenance personnel can send a reset command to the vehicle via an external diagnostic tool. Upon receiving this command, the control unit will respond by clearing or resetting the cumulative damage value stored in the data storage module to a preset initial value (i.e., 0). This ensures that the vehicle's health assessment model can be recalculated based on the new hardware state, effectively avoiding interference from residual historical damage data on subsequent health value prediction and level determination, and guaranteeing the accuracy and reliability of vehicle health status prediction.

[0059] According to the vehicle safety control method of this invention, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, the health value of the controller is predicted based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and the health value. This achieves dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings and effectively avoiding false triggers or missed triggers. Through this proactive intervention, the safety post-processing operation can be integrated with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0060] A further embodiment of the present invention discloses a vehicle safety control system.

[0061] like Figure 2As shown, the vehicle safety control system 100 includes: an acquisition module 110, a determination module 120, and a control module 130.

[0062] The acquisition module 110 is used to acquire the actual operating ambient temperature of the controller and the current operating condition of the vehicle; the determination module 120 is used to predict the health value of the controller based on the actual operating ambient temperature; and the detection module 130 is used to execute the corresponding safety control strategy based on the current operating condition and health value.

[0063] In one embodiment of the present invention, when the determining module 120 predicts the health value of the controller based on the actual working environment temperature, it includes: determining the damage value of each target component in the controller based on the actual working environment temperature; determining the failure rate ratio of each target component based on a preset analysis method, and determining the importance weight of each target component based on the failure rate ratio; performing a weighted summation based on the importance weight of each target component and its corresponding damage value to obtain the cumulative damage value of the controller; and predicting the health value of the controller based on the cumulative damage value.

[0064] In one embodiment of the present invention, when determining the damage value of each target component in the controller based on the actual working environment temperature, the determining module 120 includes: determining the failure acceleration factor of each target component based on the actual working environment temperature; determining the equivalent cumulative working time of each target component based on the failure acceleration factor; and determining the damage value of each target component based on the equivalent cumulative working time and the preset service life of each target component.

[0065] In one embodiment of the present invention, when determining the failure acceleration factor of a target component based on the actual operating environment temperature, the determining module 120 includes: determining a reference failure rate according to a preset failure rate algorithm based on a preset reference operating temperature, a preset pre-exponential factor, a preset constant, and a preset activation energy of the target component; determining the actual failure rate at the actual operating environment temperature according to the preset failure rate algorithm based on the actual operating environment temperature, the preset pre-exponential factor, the preset constant, and the preset activation energy; and determining the ratio of the actual failure rate to the reference failure rate, and using the ratio as the failure acceleration factor.

[0066] In one embodiment of the present invention, when the control module 130 executes a corresponding safety control strategy based on the current operating condition and health value, the method includes: determining a preset safety threshold corresponding to the current operating condition based on a preset mapping relationship, wherein the preset mapping relationship includes multiple sets of correspondences between the current operating conditions and the preset safety thresholds; determining the vehicle's safety level as a first safety level when the health value is lower than a first preset safety threshold; determining the vehicle's safety level as a second safety level when the health value is lower than a second preset safety threshold; and executing a corresponding safety control strategy based on the first safety level and the second safety level; wherein the first preset safety threshold is greater than the second preset safety threshold, and the safety level of the first safety level is higher than that of the second safety level.

[0067] In one embodiment of the present invention, when the control module 130 executes a corresponding safety control strategy according to a first safety level and a second safety level, it includes: when the safety level is the first safety level, controlling the vehicle to issue a first alarm signal, and limiting the peak torque of the drive device to a first preset ratio upon receiving the next accelerator pedal operation signal; when the safety level is the second safety level, controlling the vehicle to issue a second alarm signal, and limiting the peak torque of the drive device to a second preset ratio upon receiving the next accelerator pedal operation signal; wherein the alarm intensity of the second alarm signal is greater than the alarm intensity of the first alarm signal, and the first preset ratio is greater than the second preset ratio.

[0068] In one embodiment of the present invention, after the control module 130 executes the corresponding safety control strategy according to the current operating conditions and health value, it includes: in response to the received reset command, resetting the cumulative damage value to a preset initial value.

[0069] According to an embodiment of the present invention, the vehicle safety control system 100, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, predicts the health value of the controller based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can adaptively provide fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, it executes corresponding safety control strategies in conjunction with the current operating condition and health value, realizing dynamic adjustment of detection standards according to the actual working profile of the vehicle, improving the accuracy of fault warnings, and effectively avoiding false triggers or missed triggers. Thus, through this proactive intervention, it is possible to integrate safety post-processing operations with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0070] A further embodiment of the present invention discloses a vehicle, the vehicle including a controller.

[0071] In some embodiments, such as Figure 3 As shown, vehicle 200 includes the vehicle safety control system 100 described in the above embodiments.

[0072] In other embodiments, such as Figure 4 As shown, the vehicle 200 includes a processor 201, a memory 202, and a vehicle safety control program stored in the memory 202 and executable on the processor 201. When the vehicle safety control program is executed by the processor 201, it implements the vehicle safety control method as described in the above embodiments.

[0073] According to an embodiment of the present invention, the vehicle 200, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, predicts the health value of the controller based on the actual temperature. This breaks the limitation of relying on a single fixed temperature threshold in the traditional approach. It does not require waiting for a fault to occur or the temperature to exceed the limit before responding; instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, thus proactively identifying potential hazards before the controller completely fails. Subsequently, it executes corresponding safety control strategies based on the current operating condition and health value, realizing dynamic adjustment of detection standards according to the actual working profile of the vehicle. This improves the accuracy of fault warnings and effectively avoids false triggering or missed triggering. Through this proactive intervention, it is possible to integrate safety post-processing operations with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0074] A further embodiment of the present invention discloses a computer-readable storage medium storing a vehicle safety control program, which, when executed by a processor, implements the vehicle safety control method as described in the above embodiments of the present invention.

[0075] According to an embodiment of the present invention, when a vehicle safety control program stored thereon is executed by a processor, after acquiring the actual operating temperature of the controller and the current operating condition of the vehicle, it predicts the health value of the controller based on the actual temperature. This breaks the limitation of traditional reliance on a single fixed temperature threshold, eliminating the need to wait for a fault to occur or the temperature to exceed the limit before responding. Instead, it can provide adaptive fault risk warnings based on the actual health status of the hardware, thereby proactively identifying potential hazards before the controller completely fails. Subsequently, the corresponding safety control strategy is executed in conjunction with the current operating condition and the health value, realizing the dynamic adjustment of the detection standard according to the actual working profile of the vehicle, improving the accuracy of fault warnings, and effectively avoiding false triggers or missed triggers. Thus, through this proactive intervention, the safety post-processing operation can be integrated with the actual driving conditions of the vehicle without significantly increasing hardware costs, achieving smooth safety control before a fault occurs, thereby improving driving safety and user experience.

[0076] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "illustrative embodiment," "example," "specific example," or "some examples," etc., refer to specific features, structures, materials, or characteristics described in connection with that embodiment or example, which are included in at least one embodiment or example of the present invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example.

[0077] Although embodiments of the invention have been shown and described, those skilled in the art will understand that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.

Claims

1. A vehicle safety control method, characterized in that, The vehicle includes a controller, and the method includes: The actual operating temperature of the controller and the current operating condition of the vehicle are obtained. Predict the health value of the controller based on the actual operating environment temperature; Execute the corresponding safety control strategy based on the current operating conditions and the health value.

2. The vehicle safety control method according to claim 1, characterized in that, When predicting the health value of the controller based on the actual operating environment temperature, the following are included: Based on the actual operating environment temperature, the damage value of each target component in the controller is determined; The failure rate percentage of each target component is determined based on a preset analysis method, and the importance weight of each target component is determined based on the failure rate percentage. The cumulative damage value of the controller is obtained by weighted summation based on the importance weight of each target component and its corresponding damage value. The health value of the controller is predicted based on the cumulative damage value.

3. The vehicle safety control method according to claim 2, characterized in that, When determining the damage value of each target component in the controller based on the actual operating environment temperature, the following steps are included: Based on the actual operating environment temperature, the failure acceleration factor of each target component is determined; The equivalent cumulative operating time of each target component is determined based on the failure acceleration factor. The damage value of each target component is determined based on the equivalent cumulative working time and the preset service life of each target component.

4. The vehicle safety control method according to claim 3, characterized in that, When determining the failure acceleration factor of the target component based on the actual operating environment temperature, the following steps are included: The reference failure rate is determined according to the preset reference operating temperature, preset pre-exponential factor, preset constant and preset activation energy of the target component, and according to the preset failure rate algorithm. Based on the actual operating environment temperature, the preset pre-exponential factor, the preset constant, and the preset activation energy, the actual failure rate at the actual operating environment temperature is determined according to the preset failure rate algorithm. The ratio of the actual failure rate to the reference failure rate is determined, and the ratio is used as the failure acceleration factor.

5. The vehicle safety control method according to claim 1, characterized in that, When executing the corresponding safety control strategy based on the current operating condition and the health value, the following are included: Based on a preset mapping relationship, a preset safety threshold corresponding to the current operating condition is determined, wherein the preset mapping relationship includes multiple sets of correspondences between the current operating condition and the preset safety threshold; When the health value is lower than the first preset safety threshold, the safety level of the vehicle is determined to be the first safety level; When the health value is lower than the second preset safety threshold, the safety level of the vehicle is determined to be the second safety level; Execute the corresponding security control strategy based on the first security level and the second security level; Wherein, the first preset security threshold is greater than the second preset security threshold, and the security level of the first security level is higher than that of the second security level.

6. The vehicle safety control method according to claim 5, characterized in that, The vehicle also includes a drive unit for outputting power, which, when executing corresponding safety control strategies according to the first safety level and the second safety level, includes... When the safety level is the first safety level, the vehicle is controlled to issue a first alarm signal, and upon receiving the next accelerator pedal operation signal, the peak torque of the drive device is limited to a first preset ratio. When the safety level is the second safety level, the vehicle is controlled to issue a second alarm signal, and upon receiving the next accelerator pedal operation signal, the peak torque of the drive device is limited to a second preset ratio. Wherein, the alarm intensity of the second alarm signal is greater than the alarm intensity of the first alarm signal, and the first preset ratio is greater than the second preset ratio.

7. The vehicle safety control method according to claim 2, characterized in that, After executing the corresponding safety control strategy based on the current operating conditions and the health value, the following is included: In response to the received reset command, the cumulative damage value is reset to a preset initial value.

8. A vehicle safety control system, characterized in that, The vehicle includes a controller, and the system includes: The acquisition module is used to acquire the actual operating ambient temperature of the controller and the current operating conditions of the vehicle; The determination module is used to predict the health value of the controller based on the actual operating environment temperature; The control module is used to execute corresponding safety control strategies based on the current operating conditions and the health value.

9. A vehicle, characterized in that, include: Controller; as well as, The vehicle safety control system as described in claim 8; or, A processor, a memory, and a vehicle safety control program stored in the memory and executable on the processor, wherein the vehicle safety control program, when executed by the processor, implements the vehicle safety control method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a vehicle safety control program, which, when executed by a processor, implements the vehicle safety control method as described in any one of claims 1-7.