Vehicle protection control circuit, method, and vehicle

Abstract

This application relates to a vehicle protection control circuit, method, and vehicle. The vehicle protection control circuit includes a main control module and a redundant control module. The main control module controls the load under normal conditions. The redundant control module, upon detecting a fault in the main control module, triggers the redundant control module to enable and control the load through level switching and logical operations. The solution provided in this application allows both the main control module and the redundant control module to control the load. When the main control module is in a normal state, it performs the control. When the main control module fails, the redundant control module automatically switches to control the load, ensuring the validity of the control signal at the hardware level and thus guaranteeing a functionally safe system-level state.

Description

Technical Field

[0001] This application relates to the field of automotive technology, and more particularly to a vehicle protection control circuit, method, and vehicle. Background Technology

[0002] With the rapid development of the automotive industry, intelligentization has become the core development direction of future automobiles. Domain controllers, as key components of intelligent vehicles, are gradually taking on a "brain-like" role. In modern automotive electronic architectures, domain controllers typically use high-computing-power chips such as microcontroller units (MCUs) and system-on-chips (SoCs) as their main functional core, controlling various functional modules of the vehicle through software logic. This system-level control approach greatly improves the integration level of the entire vehicle, providing strong hardware support for the intelligent development of vehicles.

[0003] However, with increasingly stringent functional safety requirements, relying solely on software logic to enable ports carries certain risks. If the main control chip, such as the MCU or SoC, fails or malfunctions—for example, if the MCU "runs away" after startup (i.e., program execution goes out of control)—it could lead to an unsafe power supply state, resulting in serious functional safety issues. In such cases, software-level control measures alone are insufficient to meet high functional safety requirements. To address this, it is necessary to control the power-on process at the hardware level to ensure the safety and stability of the system power supply. However, currently, the industry lacks a hardware control solution that can effectively handle MCU "runaway" malfunctions, especially in ensuring the validity of control signals and maintaining system-level functional safety; related technologies still have significant shortcomings. Summary of the Invention

[0004] To address or partially address the problems existing in related technologies, this application provides a vehicle protection control circuit, method, and vehicle that can automatically switch to a redundant control module for control when the main control module fails, ensuring the effectiveness of the control signal at the hardware level, thereby guaranteeing the functional safety state of the system.

[0005] The first aspect of this application provides a vehicle protection control circuit, including: a main control module and a redundant control module, wherein: The main control module is used to control the load under normal conditions; The redundant control module is used to control the load by triggering the redundant control module to enable it through level switching and logic operations when a fault is detected in the main control module.

[0006] Preferably, the main control module is used to output a first high level to control the load under normal conditions.

[0007] Preferably, the redundant control module includes a fault diagnosis pin; the fault diagnosis pin is used to detect the main control module, and outputs a first low level when the main control module malfunctions; The redundant control module is used to perform logical operations on the first low level and the preset voltage when a fault is detected in the main control module, and output a second high level to trigger the redundant control module to enable and control the load.

[0008] Preferably, the redundancy control module further includes a level conversion module and an AND gate module; The level conversion module is used to convert the first low level to a third high level when a fault is detected in the main control module. The AND gate module is used to perform an AND operation between the third high level and the preset voltage, and output the second high level to control the load.

[0009] Preferably, the redundancy control module further includes a reset pin, and the redundancy control module switches to an invalid state when the reset pin outputs a high level; The redundancy control module also includes an enable pin, which is activated when the reset pin outputs a low level and the enable pin outputs a high level.

[0010] A second aspect of this application provides a vehicle protection control method applied to a vehicle protection control circuit, the vehicle protection control circuit comprising: a main control module and a redundant control module, the method comprising: When the main control module is in normal operation, it controls the load. When a fault is detected in the main control module, the redundant control module is enabled through level switching and logic operations to control the load.

[0011] Preferably, when the main control module is in a normal state, controlling the load includes: When the main control module is in normal operation, it outputs a first high level to control the load.

[0012] Preferably, the redundant control module includes a fault diagnosis pin; the main control module performs detection through the fault diagnosis pin, and when the main control module malfunctions, the fault diagnosis pin outputs a first low level. When a fault is detected in the main control module, the redundant control module is enabled and started through level switching and logic operations to control the load, including: When a fault is detected in the main control module, a logical operation is performed on the first low level and the preset voltage, and a second high level is output to trigger the redundant control module to enable and control the load.

[0013] Preferably, the redundancy control module further includes a level conversion module and an AND gate module; The step of performing logical operations on the first low level and the preset voltage when a fault is detected in the main control module, and outputting a second high level to trigger the redundant control module to enable, and controlling the load includes: When a fault is detected in the main control module, the level conversion module converts the first low level to a third high level; The AND gate module performs an AND operation between the third high level and the preset voltage, and outputs the second high level to control the load.

[0014] A third aspect of this application provides an electronic device, comprising: Processor; and A memory that stores executable code, which, when executed by the processor, causes the processor to perform the method described above.

[0015] The technical solution provided in this application may include the following beneficial effects: This application provides a vehicle protection control circuit, including a main control module and a redundant control module. The main control module controls the load under normal conditions. The redundant control module, upon detecting a fault in the main control module, enables itself through level switching and logical operations to control the load. Through this circuit, both the main control module and the redundant control module can control the load. When the main control module is functioning normally, it performs the control. When the main control module fails, the redundant control module automatically switches control, ensuring the effectiveness of the control signal at the hardware level and thus guaranteeing system-level functional safety.

[0016] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and do not limit this application. Attached Figure Description

[0017] The above and other objects, features and advantages of this application will become more apparent from the following description of exemplary embodiments of this application in conjunction with the accompanying drawings, wherein the same reference numerals generally represent the same components in the exemplary embodiments of this application.

[0018] Figure 1 This is a schematic diagram of the vehicle protection control circuit shown in the embodiments of this application; Figure 2 This is another schematic diagram of the vehicle protection control circuit shown in the embodiments of this application; Figure 3a This is a schematic diagram illustrating the working mode of the redundant control module in an embodiment of this application; Figure 3b This is a schematic diagram of another operating mode of the redundancy control module shown in the embodiments of this application; Figure 4 This is a circuit diagram of the redundancy control module shown in an embodiment of this application; Figure 5 This is a schematic flowchart illustrating the vehicle protection control method according to an embodiment of this application; Figure 6 This is another schematic flowchart of the vehicle protection control method shown in the embodiments of this application; Figure 7 This is a schematic diagram illustrating a vehicle protection control method according to an embodiment of this application; Figure 8 This is a schematic diagram of the vehicle structure shown in the embodiments of this application. Detailed Implementation

[0019] Embodiments of this application will now be described in more detail with reference to the accompanying drawings. While embodiments of this application are shown in the drawings, it should be understood that this application may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to make this application more thorough and complete, and to fully convey the scope of this application to those skilled in the art.

[0020] The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. The singular forms “a,” “the,” and “the” used in this application and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any or all possible combinations of one or more of the associated listed items.

[0021] It should be understood that although the terms "first," "second," "third," etc., may be used in this application to describe various information, this information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of this application, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this application, "multiple" means two or more, unless otherwise explicitly specified.

[0022] With increasingly stringent functional safety requirements, relying solely on software logic to enable ports carries inherent risks. If the main control chip, such as the MCU or SoC, fails or malfunctions—for example, if the MCU "runs away" after startup (i.e., program execution goes out of control)—it could lead to an unsafe power supply state for the system, resulting in serious functional safety issues. In such cases, software-level control measures alone are insufficient to meet high functional safety requirements. However, the industry currently lacks a hardware control solution that effectively addresses MCU "runaway" malfunctions, particularly in ensuring the validity of control signals and maintaining system-level functional safety; related technologies still have significant shortcomings.

[0023] To address the aforementioned issues, this application provides a vehicle protection control circuit that can ensure the effectiveness of control signals at the hardware level when the main control chip is powered on and running out of control, thereby ensuring the functional safety of the system.

[0024] The technical solutions of the embodiments of this application are described in detail below with reference to the accompanying drawings.

[0025] Figure 1 This is a schematic diagram of the vehicle protection control circuit shown in the embodiments of this application.

[0026] See Figure 1 The vehicle protection control circuit 100 includes: a main control module 110 and a redundant control module 120, wherein: The main control module 110 is used to control the load under normal conditions; The redundant control module 120 is used to enable the redundant control module 120 and control the load by switching levels and performing logical operations when a fault is detected in the main control module 110.

[0027] In this embodiment, chips such as MCUs and SoCs can be selected as the main control chips to control various functional modules of the vehicle. Taking the MCU as the main control chip as an example, the main control module 110 (MCU chip) is powered by a conventional power supply module (PMIC, Power Management Integrated Circuit). The main control module 110 usually maintains a low level during the wake-up process and when the watchdog timer has not completed its feeding operation. To ensure that the main controller of the normal circuit is still controlled by the MCU, after normal power-on wake-up, if the MCU continues to operate normally, the control logic is still controlled by the MCU, and the load is controlled through the main control module 110.

[0028] When a fault is detected in the main control module 110, the redundant control module 120 is enabled by performing level switching and logic operations. The redundant control module 120 then starts working to control the load. The redundant control module is a self-holding circuit.

[0029] This application provides a vehicle protection control circuit, including a main control module and a redundant control module. The main control module controls the load under normal conditions. The redundant control module, upon detecting a fault in the main control module, enables itself through level switching and logical operations to control the load. Through this circuit, both the main control module and the redundant control module can control the load. When the main control module is functioning normally, it performs the control. When the main control module fails, the redundant control module automatically switches control, ensuring the effectiveness of the control signal at the hardware level and thus guaranteeing system-level functional safety.

[0030] Figure 2 This is another schematic diagram of the vehicle protection control circuit shown in the embodiments of this application.

[0031] See Figure 2 The protection control circuit includes: a main control module 110 and a redundant control module 120, wherein: The main control module 110 is used to output a first high level to control the load in the normal state; The redundant control module 120 includes a fault diagnosis pin 121, which is used to detect the main control module. When the main control module fails, it outputs a first low level. The redundant control module 120 is used to perform logical operations on the first low level and the preset voltage when a fault is detected in the main control module, and output the second high level to trigger the redundant control module to enable and control the load.

[0032] Taking the MCU as the main control chip as an example, the main control module 110 is powered by a conventional power supply module (PMIC, Power Management Integrated Circuit). The main control module 110 usually maintains a low level during the wake-up process and when the watchdog has not completed the watchdog feeding operation. In order to ensure that the main controller of the normal circuit is still controlled by the MCU, after normal power-on wake-up, if the MCU continues to operate normally, the control logic is still controlled by the MCU. The main control module 110 outputs the first high level to control the load.

[0033] The redundant control module 120 includes a fault diagnosis pin 121, which can be FSXB. It can detect the working status of the main control module 110. When the MCU is running normally, that is, when the main control module 110 is in a normal state, FSXB is kept at a high level. However, if the main control module runs away after power-on, or if other faults occur at non-power-on time, FSXB will output a low level, outputting the first low level.

[0034] When the redundancy control module 120 detects a fault in the main control module 110, it performs logical operations on the first low level and the preset voltage, outputting a second high level, thereby triggering the redundancy control module 120 to enable. At this time, the load can be controlled through the redundancy control module 120. The preset voltage is the self-holding voltage (VIN_5V), and Standby_5V is the self-holding voltage of the input VIN_5V. The self-holding voltage can remain at a high level after power-on.

[0035] The redundant control module 120 also includes a level conversion module 122 and an AND gate module 123; The level conversion module 122 is used to convert the first low level to the third high level in the event of a fault; The AND gate module 123 is used to perform an AND operation based on a third high level and a preset voltage, and output a second high level to control the load.

[0036] Level conversion module 122 is an inverter, which can reverse the phase of the input signal by 180 degrees. AND gate module 123 is an AND logic chip that can perform logical AND operations. When the MCU malfunctions, i.e., a fault is detected in the main control module 110, the fault diagnosis pin 121 (FSXB) outputs a first low level, enabling FSXB. The first low level is inverted by level conversion module 122 and converted into a third high level. The third high level and the preset voltage are simultaneously the inputs of AND gate module 123. After logical AND operation by AND gate module 123, the output terminal (FSXB_ADD) of redundant control module 120 outputs a second high level, thereby controlling the load.

[0037] In an optional embodiment of this application, the fault diagnosis pin 121 is further configured to output a fourth high level when the main control module 110 is in a normal state; Level conversion module 122 is also used to convert the fourth high level to the second low level; AND gate module 123 is used to perform an AND operation based on the second low level and a preset voltage, and outputs a third low level.

[0038] If, after power-on, the MCU functions normally and the main control module 110 is in a normal state, the fault diagnosis pin 121 outputs a fourth high level, and the FSXB enable is ineffective. This fourth high level serves as the input and output of the level conversion module 122, and after inversion by the level conversion module 122, it is converted into a second low level. This second low level, along with a preset voltage, serves as the input of the AND gate module 123. After the logical AND operation of the AND gate module 123, the output terminal (FSXB_ADD) of the redundant control module 120 outputs a third low level. At this time, although the redundant control module 120 is in the startup state, it is ineffective and does not control the load; the main control module 110 takes over the control.

[0039] The redundancy control module 120 also includes a reset pin 124, which switches to an invalid state when the reset pin 124 outputs a high level.

[0040] The redundancy control module 120 also includes a reset pin 124 (MCU_RESET). If the reset pin 124 outputs a high level, the redundancy control module 120 will be turned off and switched to an invalid state. In addition, the reset pin 124 can also control the power-on of a preset voltage (self-holding voltage). After the preset voltage is powered on (switches to a high level), it is in a self-holding state. Even if the reset pin 124 subsequently outputs a low level, the preset voltage can still remain at a high level.

[0041] The signal output from the main control module 110 (MCU_EN_1) can be used as an enable signal to control the load. The output from the redundant control module 120 (FSXB_ADD) is connected to the input of a diode, and the diode's output is connected to the MCU_EN_1 pin, which is then connected to the load's input pin. The signal on the MCU_EN_1 pin is the output of the MCU chip and is related to the state of the main control module 110. When the main control module 110 is in a normal state, MCU_EN_1 is high; when the main control module 110 malfunctions, MCU_EN_1 is low.

[0042] The redundancy control module 120 has the following three modes: 1. Redundant control module 120 is shut down and not used: e.g. Figure 3aAs shown, the output signal (MCU_RESET) of the reset pin 124 remains high, and the redundant control module 120 is disabled. The MCU_EN_1 pin outputs a high level, indicating that the control logic is MCU master control, meaning that the load is controlled through the master control module 110.

[0043] 2. Redundant control module 120 is started but not enabled: e.g. Figure 3b As shown, at this time, the output signal (MCU_RESET) of the reset pin 124 remains at a low level, the MCU_EN_1 pin outputs a high level, the control logic is MCU master control, that is, the load is controlled by the main control module 110, and the redundant control module 120 is started but not enabled.

[0044] 3. Redundant control module 120 is started and enabled: At this time, the output signal (MCU_RESET) of the reset pin 124 remains low. If the MCU malfunctions, the MCU_EN_1 pin outputs a low level, and FSXB_ADD is high. The control logic controls the load through the redundant control module 120.

[0045] The redundancy control module 120 also includes an enable pin 125. The redundancy control module 120 is activated when the reset pin 124 outputs a low level and the enable pin 125 outputs a high level.

[0046] The redundancy control module 120 also includes an enable pin 125 (MCU_EN). When the reset pin 124 outputs a low level and the enable pin 125 outputs a high level, the redundancy control module 120 is activated. Whether the enable is effective depends on the status of the main control module 110. When the reset pin 124 outputs a high level, the redundancy control module 120 switches to an inactive state.

[0047] like Figure 4The diagram shows the circuit of the redundancy control module 120, which includes transistors Q1, Q2, and Q3, a level shifting module 122, and an AND gate module 123. The level shifting module 122 is an inverter U1, which can invert the phase of the input signal by 180 degrees. The AND gate module 123 is an AND logic chip U2, capable of performing logical AND operations. A preset voltage (VIN_5V) is connected to the emitter of transistor Q1, the base of transistor Q1 is connected to the collector of transistor Q2, the reset pin 124 (MCU_RESET) is connected to the base of transistor Q3, the collector of transistor Q3, the enable pin 125 (MCU_EN), and the preset voltage (Standby_5V) are simultaneously connected to the base of transistor Q2. The preset voltage (Standby_5V) is also connected to the collector of transistor Q1 and one input terminal of the AND gate module 123. The output of fault diagnosis pin 121 (FSXB) is connected to another input of level conversion module 122. The output of level conversion module 122 and the self-holding voltage are connected to the two inputs of AND gate module 123. The output of AND gate module 123 is the output of redundant control module 120 (FSXB_ADD).

[0048] The vehicle protection control circuit provided in this application embodiment can also be applied to non-MCU-controlled functional safety circuit control. In this case, the enable pin signal must also be a digital input signal. The vehicle protection control circuit can also meet the functional safety retention circuit requirements during non-power-on periods.

[0049] This application provides a vehicle protection control circuit that can control the load through both a main control module and a redundant control module. When the main control module is in a normal state, it performs the control. When the main control module fails, the redundant control module is automatically switched to perform the control, thus ensuring the effectiveness of the control signal at the hardware level and ensuring the functional safety of the system.

[0050] Corresponding to the aforementioned application function implementation device embodiments, this application also provides a vehicle protection control method, a vehicle, and corresponding embodiments.

[0051] Figure 5 This is a schematic flowchart illustrating the vehicle protection control method in an embodiment of this application.

[0052] See Figure 5 This method is applied to a vehicle protection control circuit, which includes a main control module and a redundant control module. The method includes: Step 510: When the main control module is in normal condition, control the load.

[0053] In this embodiment, a redundant control module is designed. Both the redundant control module and the main control module can control the load. Taking the MCU as the main control chip as an example, the main control module (MCU chip) is powered by a conventional power supply module (PMIC, Power Management Integrated Circuit). The main control module usually maintains a low level during the wake-up process and when the watchdog timer has not completed its feeding operation. To ensure that the main controller of the normal circuit is still controlled by the MCU, after normal power-on wake-up, if the MCU continues to operate normally, the control logic is still controlled by the MCU, and the load is controlled through the main control module.

[0054] Step 520: When a fault is detected in the main control module, the redundant control module is enabled and started through level switching and logic operation to control the load.

[0055] When a fault is detected in the main control module, the redundant control module is enabled through level switching and logic operations. The redundant control module then begins to operate and control the load. The redundant control module is a self-holding circuit.

[0056] This application provides a vehicle protection control method in which both the main control module and the redundant control module can control the load. When the main control module is in a normal state, the main control module performs the control. When the main control module fails, the redundant control module is automatically switched to perform the control, thus ensuring the effectiveness of the control signal at the hardware level and ensuring the functional safety state of the system.

[0057] Figure 6 This is another schematic flowchart illustrating the vehicle protection control method in the embodiments of this application.

[0058] See Figure 6 This method is applied to a vehicle protection control circuit, which includes a main control module and a redundant control module. The redundant control module includes fault diagnosis pins, a level conversion module, and an AND gate module. The method includes: Step 610: When the main control module is in normal state, output the first high level to control the load.

[0059] In this embodiment, a redundant control module is designed, which, along with the main control module, can control the load. Taking the MCU as the main control chip as an example, the main control module is powered by a conventional power supply module (PMIC, Power Management Integrated Circuit). The main control module typically maintains a low level during the wake-up process and when the watchdog timer has not completed its feeding operation. To ensure that the main controller of the normal circuit is still controlled by the MCU, after normal power-on wake-up, if the MCU continues to operate normally, the control logic is still controlled by the MCU, and the main control module outputs a first high level to control the load.

[0060] Step 620: Detect the main control module through the fault diagnosis pin. When the main control module malfunctions, the fault diagnosis pin outputs a first low level.

[0061] The fault diagnosis pin can be FSXB, which can detect the working status of the main control module. When the MCU is running normally, that is, when the main control module is in a normal state, FSXB remains at a high level. However, if the main control module runs away after power-on, or if other faults occur at non-power-on times, FSXB will output a low level, outputting the first low level.

[0062] Step 630: When a fault is detected in the main control module, the level conversion module converts the first low level to the third high level.

[0063] When a fault is detected in the main control module, the fault diagnosis pin (FSXB) outputs a first low level, and the FSXB is enabled. The first low level is inverted by the level conversion module and converted into a third high level.

[0064] Step 640: The AND gate module performs an AND operation with the preset voltage based on the third high level, and outputs the second high level to control the load.

[0065] The third high level and the preset voltage are both inputs to the AND gate module. After the AND operation of the AND gate module, the output terminal (FSXB_ADD) of the redundant control module outputs the second high level, thereby controlling the load.

[0066] In an optional embodiment of this application, the method further includes: When the main control module is in normal condition, the fault diagnosis pin outputs the fourth high level. The level conversion module converts the fourth high level to the second low level; The AND gate module performs an AND operation with a preset voltage based on the second low level, and outputs the third low level.

[0067] If, after power-on, the MCU functions normally and the main control module is in a normal state, the fault diagnosis pin outputs a fourth high level. The FSXB enable is ineffective. This fourth high level serves as the input / output of the level conversion module, and after inversion, it is converted into a second low level. This second low level, along with a preset voltage, becomes the input of an AND gate module. After a logical AND operation, the output of the redundant control module (FSXB_ADD) outputs a third low level. At this point, although the redundant control module is in the startup state, it is ineffective and does not control the load; the main control module takes over.

[0068] In an optional embodiment of this application, the redundancy control module further includes a reset pin, and the redundancy control module switches to an invalid state when the reset pin outputs a high level.

[0069] The redundant control module also includes a reset pin (MCU_RESET). If the reset pin outputs a high level, the redundant control module will be shut down and switched to an invalid state. In addition, the reset pin can also control the power-on of a preset voltage (self-holding voltage). After the preset voltage is powered on (switches to a high level), it is in a self-holding state. Even if the reset pin subsequently outputs a low level, the preset voltage can still remain at a high level.

[0070] The redundant control module exists in the following three modes: 1. Redundant control module is off and not in use: At this time, the output signal of the reset pin (MCU_RESET) remains high, and the redundant control module is ineffective. The MCU_EN_1 pin outputs a high level, and the control logic is controlled by the MCU master, that is, the load is controlled through the master control module.

[0071] 2. Redundant control module starts but is not enabled: At this time, the output signal of the reset pin (MCU_RESET) remains low, the MCU_EN_1 pin outputs a high level, and the control logic is MCU master control, that is, the load is controlled through the master control module.

[0072] 3. Redundant control module startup and enable: At this time, the output signal of the reset pin (MCU_RESET) remains low. If the MCU malfunctions, the MCU_EN_1 pin outputs a low level, and FSXB_ADD is high. The control logic controls the load through the redundant control module.

[0073] In an optional embodiment of this application, the redundancy control module further includes an enable pin, which is activated when the reset pin outputs a low level and the enable pin outputs a high level. Whether to enable the module depends on the state of the main control module. When the reset pin outputs a high level, the redundancy control module switches to an inactive state.

[0074] like Figure 7The diagram illustrates a vehicle protection control method according to an embodiment of this application. Taking the power-on process as an example, the main control module is an MCU chip, and the redundant control module is a self-holding circuit. The method includes: If power-on is normal, FSXB remains high. After level conversion, the high level of FSXB disables FSXB. The self-holding voltage of the self-holding circuit is enabled by a high level. After AND operation between FSXB and the self-holding voltage using a logic AND gate, FSXB_ADD outputs a low level. The protection mechanism of the self-holding circuit is not activated, and the MCU becomes the main control port, controlling the load. If there is an abnormality after power-on, FSXB remains low. After level conversion, FSXB enables FSXB. The self-holding voltage of the self-holding circuit is enabled by a high level. After AND operation between FSXB and the self-holding voltage using a logic AND gate, FSXB_ADD outputs a low level. The protection mechanism of the self-holding circuit is activated, and FSXB_ADD becomes the main control port, controlling the load.

[0075] This application provides a vehicle protection control method in which the load can be controlled by both a main control module and a redundant control module. When the main control module is in a normal state, the main control module performs the control. When the main control module fails, the redundant control module is automatically switched to perform the control, thus ensuring the effectiveness of the control signal at the hardware level and ensuring the functional safety state of the system.

[0076] Figure 8 This is a schematic diagram of the vehicle structure shown in the embodiments of this application.

[0077] See Figure 8 The vehicle 800 includes a memory 810 and a processor 820.

[0078] The processor 820 can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor.

[0079] Memory 810 may include various types of storage units, such as system memory, read-only memory (ROM), and permanent storage devices. ROM may store static data or instructions required by the processor 820 or other modules of the computer. Permanent storage devices may be read-write storage devices. Permanent storage devices may be non-volatile storage devices that retain stored instructions and data even when the computer is powered off. In some embodiments, permanent storage devices use mass storage devices (e.g., magnetic or optical disks, flash memory) as permanent storage devices. In other embodiments, permanent storage devices may be removable storage devices (e.g., floppy disks, optical drives). System memory may be a read-write storage device or a volatile read-write storage device, such as dynamic random access memory. System memory may store some or all of the instructions and data required by the processor during operation. Furthermore, memory 810 may include any combination of computer-readable storage media, including various types of semiconductor memory chips (e.g., DRAM, SRAM, SDRAM, flash memory, programmable read-only memory), and disks and / or optical disks may also be used. In some embodiments, memory 810 may include a removable storage device that is readable and / or writable, such as a laser disc (CD), a read-only digital multifunction optical disc (e.g., DVD-ROM, dual-layer DVD-ROM), a read-only Blu-ray disc, an ultra-high density optical disc, a flash memory card (e.g., SD card, mini SD card, Micro-SD card, etc.), a magnetic floppy disk, etc. Computer-readable storage media do not contain carrier waves or transient electronic signals transmitted wirelessly or via wired connections.

[0080] The memory 810 stores executable code, which, when processed by the processor 820, can cause the processor 820 to execute part or all of the methods described above.

[0081] Furthermore, the method according to this application can also be implemented as a computer program or computer program product, which includes computer program code instructions for performing some or all of the steps in the method described above.

[0082] Alternatively, this application may be implemented as a computer-readable storage medium (or a non-transitory machine-readable storage medium or a machine-readable storage medium) storing executable code (or computer program or computer instruction code) thereon, which, when executed by a processor of an electronic device (or server, etc.), causes the processor to perform part or all of the steps of the methods described above according to this application.

[0083] The various embodiments of this application have been described above. These descriptions are exemplary and not exhaustive, nor are they limited to the disclosed embodiments. Many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen to best explain the principles, practical application, or improvement of the technology in the market, or to enable others skilled in the art to understand the embodiments disclosed herein.

Claims

1. A vehicle protection control circuit, characterized in that, include: Main control module, redundant control module, including: The main control module is used to control the load under normal conditions; The redundant control module is used to control the load by triggering the redundant control module to enable it through level switching and logic operations when a fault is detected in the main control module.

2. The vehicle protection control circuit according to claim 1, characterized in that: The main control module is used to output a first high level to control the load under normal conditions.

3. The vehicle protection control circuit according to claim 1, characterized in that, The redundant control module includes a fault diagnosis pin; the fault diagnosis pin is used to detect the main control module, and outputs a first low level when the main control module malfunctions. The redundant control module is used to perform logical operations on the first low level and the preset voltage when a fault is detected in the main control module, and output a second high level to trigger the redundant control module to enable and control the load.

4. The vehicle protection control circuit according to claim 3, characterized in that, The redundant control module also includes a level conversion module and an AND gate module; The level conversion module is used to convert the first low level to a third high level when a fault is detected in the main control module. The AND gate module is used to perform an AND operation between the third high level and the preset voltage, and output the second high level to control the load.

5. The vehicle protection control circuit according to claim 1, characterized in that, The redundancy control module also includes a reset pin, and the redundancy control module switches to an invalid state when the reset pin outputs a high level. The redundancy control module also includes an enable pin, which is activated when the reset pin outputs a low level and the enable pin outputs a high level.

6. A vehicle protection control method, characterized in that, The method is applied to a vehicle protection control circuit, which includes a main control module and a redundant control module. When the main control module is in normal operation, it controls the load. When a fault is detected in the main control module, the redundant control module is enabled through level switching and logic operations to control the load.

7. The vehicle protection control method according to claim 6, characterized in that, The control of the load when the main control module is in normal operation includes: When the main control module is in normal operation, it outputs a first high level to control the load.

8. The vehicle protection control method according to claim 6, characterized in that, The redundant control module includes a fault diagnosis pin; the main control module performs detection through the fault diagnosis pin, and when the main control module malfunctions, the fault diagnosis pin outputs a first low level. When a fault is detected in the main control module, the redundant control module is enabled and started through level switching and logic operations to control the load, including: When a fault is detected in the main control module, a logical operation is performed on the first low level and the preset voltage, and a second high level is output to trigger the redundant control module to enable and control the load.

9. The vehicle protection control method according to claim 8, characterized in that, The redundant control module also includes a level conversion module and an AND gate module; The step of performing logical operations on the first low level and the preset voltage when a fault is detected in the main control module, and outputting a second high level to trigger the redundant control module to enable, and controlling the load includes: When a fault is detected in the main control module, the level conversion module converts the first low level to a third high level; The AND gate module performs an AND operation between the third high level and the preset voltage, and outputs the second high level to control the load.

10. A vehicle, characterized in that, include: processor; as well as A memory having executable code stored thereon, which, when executed by the processor, causes the processor to perform the method as described in any one of claims 6-9.

Images