Domain controller and vehicle system

Abstract

The utility model discloses a domain controller and a vehicle system. The domain controller comprises a main control module and a first power supply module; the main control module comprises a first trigger end, and the first trigger end is used for outputting a first interrupt signal when the main control module breaks down; the first power supply module is used for supplying power to the main control module, the first power supply module comprises a reset end electrically connected to the main control module, a first controlled end electrically connected to the first trigger end and a second trigger end electrically connected to a vehicle upper computer, and the reset end is used for triggering the first interrupt signal to output a reset signal; the second trigger end is used for triggering the first interrupt signal to output a second interrupt signal representing that the master control module breaks down. According to the scheme, the reliability of the domain controller can be improved.

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular to a domain controller and a vehicle system. Background Art

[0002] With the development of vehicle electronics, the safety performance of vehicles has become particularly important for the realization of their functions. As the center of vehicle computing and decision-making, domain controllers have higher safety performance requirements.

[0003] However, when a domain controller fails, the relevant modules of the domain controller are mainly reset and restarted, and the last failure is reported to the vehicle host computer after the restart is completed. The vehicle host computer does not respond in time, and the reliability of the domain controller is not high. In view of this, how to improve the reliability of the domain controller has become an urgent problem to be solved. Utility Model Content

[0004] The main technical problem solved by the present application is to provide a domain controller and a vehicle system, which can improve the reliability of the domain controller.

[0005] In order to solve the above-mentioned technical problems, the first aspect of the present application provides a disinfection device, wherein the domain controller includes a main control module and a first power supply module; the main control module includes a first trigger end, and the first trigger end is used to output a first interrupt signal when a failure occurs in the main control module; the first power supply module is used to power the main control module, and the first power supply module includes: a reset end electrically connected to the main control module, a first controlled end electrically connected to the first trigger end, and a second trigger end electrically connected to a vehicle host computer, the reset end is used to trigger the first interrupt signal and output a reset signal, and the second trigger end is used to trigger the first interrupt signal to output a second interrupt signal indicating that a failure occurs in the main control module.

[0006] In the above scheme, the main control module includes a first trigger end, which is used to output a first interrupt signal when a fault occurs in the main control module; the first power supply module is used to supply power to the main control module, and the first power supply module includes: a reset end electrically connected to the main control module, a first controlled end electrically connected to the first trigger end, and a second trigger end electrically connected to the vehicle host computer, the reset end is used to trigger the first interrupt signal and output a reset signal, and the second trigger end is used to trigger the first interrupt signal to output a second interrupt signal indicating that a fault has occurred in the main control module. Therefore, the first controlled end of the first power module is electrically connected to the first trigger end of the main control module, that is, the first power module is triggered to output the first interrupt signal at the first trigger end, and a fault of the main control module is monitored. Since the reset end of the first power module is connected to the main control module, when a fault occurs in the main control module, the first power module can directly reset the main control module. At the same time, the second trigger end of the first power module can report the second interrupt signal indicating the fault of the main control module to the vehicle host computer. Compared with the fault state before reporting back after the main control module is reset and restarted, the fault state of the main control module can be reported to the vehicle host computer in time, which helps to improve the reliability of the domain controller.

[0007] Among them, the main control module also includes a first communication end and a second controlled end, the domain controller also includes a processing module, the processing module includes a second communication end communicatively connected to the first communication end and a third trigger end connected to the second controlled end, the third trigger end is used to output a third interrupt signal when a failure occurs in the processing module, the second communication end is used to output a first fault signal that at least characterizes the fault type of the processing module, and the first communication end is controlled by the third interrupt signal to obtain the first fault signal from the second communication end.

[0008] Therefore, the second controlled end of the main control module is connected to the third trigger end of the processing module, that is, the main control module is triggered to output the third interrupt signal at the third trigger end, and monitors that the processing module has a fault, and the first communication end of the main control module is communicatively connected to the second communication end of the processing module. When a fault occurs in the processing module, the first communication end is controlled by the third interrupt signal and obtains the first fault signal representing the fault type of the processing module from the second communication end. The main control module can monitor the fault status of the processing module while also being able to adopt different safety strategies based on different fault types, which helps to improve the flexibility of the main control module in responding to processing module failures.

[0009] The first communication end and the second communication end are communication interfaces of the same type, and the communication interface at least includes an SPI interface.

[0010] Therefore, the fault types of the processing module are complex and diverse. The main control module and the processing module both include an SPI interface to communicate based on the SPI communication protocol, which can provide a larger data transmission capacity for the first fault signal of the processing module.

[0011] Among them, the domain controller also includes a second power supply module for powering the processing module, the second power supply module includes a third communication terminal, the main control module also includes a fourth communication terminal communicatively connected to the third communication terminal, and the third communication terminal is used to output a second fault signal at least characterizing the fault type of the second power supply module when a fault occurs in the second power supply module.

[0012] Therefore, the fourth communication end of the main control module is communicatively connected to the third communication end of the second power supply module, that is, the second fault signal characterizing the fault type of the second power supply module can be transmitted between the main control module and the second power supply module. When the second power supply module that supplies power to the processing module fails, the main control module can obtain the fault type of the second power supply module to further enhance the flexibility of the main control module in responding to the power supply failure of the processing module.

[0013] Among them, the first power supply module also includes a fifth communication terminal, the main control module also includes a sixth communication terminal communicatively connected to the fifth communication terminal, and the fifth communication terminal is used to output a third fault signal that at least characterizes the fault type of the first power supply module when a fault occurs in the first power supply module.

[0014] Therefore, the sixth communication terminal of the main control module is communicatively connected to the fifth communication terminal of the first power supply module, that is, the third fault signal characterizing the fault type of the first power supply module can be transmitted between the communication lines between the main control module and the first power supply module. When the first power supply module that supplies power to the main control module fails, the main control module can obtain the fault type of the first power supply module to further enhance the flexibility of the main control module in responding to the power supply failure of the main control module.

[0015] The fifth communication terminal and the sixth communication terminal are the same type of communication interface, and the communication interface at least includes an I2C interface.

[0016] Therefore, the main control module and the first power supply module both include an I2C interface to communicate based on the I2C communication protocol, which can improve the transmission efficiency of the third fault signal and further improve the speed at which the main control module responds to power supply faults.

[0017] Among them, the main control module also includes a third controlled end, the first power supply module also includes a fourth trigger end electrically connected to the third controlled end, the fourth trigger end is used to output a fourth interrupt signal when a failure occurs in the first power supply module, and the sixth communication end is used to trigger the fourth interrupt signal and obtain a third fault signal from the fifth communication end.

[0018] Therefore, the third controlled end of the main control module is electrically connected to the fourth trigger end of the first power supply module, that is, the main control module is triggered at the fourth trigger end to output the fourth interrupt signal, and monitors that the first power supply module has a fault, and the sixth communication end of the main control module is communicatively connected to the fifth communication end of the first power supply module. When the first power supply module fails, the sixth communication end is controlled by the fourth interrupt signal and obtains the third fault signal representing the fault type of the first power supply module from the fifth communication end. The main control module can monitor the fault state of the first power supply module while also being able to adopt different safety strategies based on different fault types, which helps to improve the flexibility of the main control module in responding to the failure of the first power supply module.

[0019] The second trigger terminal is also coupled to the fourth trigger terminal.

[0020] Therefore, the second trigger end is connected to the vehicle host computer. In addition to being able to report the second interrupt signal indicating a failure of the main control module to the vehicle host computer, the second trigger end is coupled to the fourth trigger end, and can also report the fourth interrupt signal indicating a failure of the first power module to the vehicle host computer. Therefore, the first power module can report its own fault status and the main control module fault status, which helps to increase the condition coverage of the domain controller fault reporting.

[0021] Among them, the main control module also includes a fifth trigger end, the first power supply module also includes a fourth controlled end electrically connected to the fifth trigger end, the fifth trigger end is used to output a fifth interrupt signal when the timing monitoring signal is not received, and the reset end is also used to trigger the fifth interrupt signal and output a reset signal.

[0022] Therefore, the fifth trigger end of the main control module is electrically connected to the fourth controlled end of the first power supply module, that is, the first power supply module triggers the fifth interrupt signal output at the fifth trigger end, which can monitor the main control module periodically and increase the monitoring coverage of the first power supply module to the main control module, so as to further improve the reliability of the domain controller.

[0023] In order to solve the above technical problems, the second aspect of the present application provides a vehicle system, which includes a vehicle host computer and the domain controller of the above first aspect.

[0024] Therefore, the vehicle system includes a vehicle host computer and a domain controller. In the domain controller, the first controlled end of the first power module is electrically connected to the first trigger end of the main control module, that is, the first power module is triggered to output the first interrupt signal at the first trigger end, and the main control module is monitored to have a fault. And because the reset end of the first power module is connected to the main control module, when the main control module fails, the first power module can directly reset the main control module. At the same time, the second trigger end of the first power module can report the second interrupt signal indicating the failure of the main control module to the vehicle host computer. Compared with the fault state before the main control module is reported after resetting and restarting, the fault state of the main control module can be reported to the vehicle host computer in a timely manner, which helps to improve the reliability of the domain controller, and thus can improve the overall safety performance of the vehicle system. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0026] Figure 1 This is a schematic diagram of the framework of an embodiment of a domain controller of the present application;

[0027] Figure 2 for Figure 1 A schematic diagram of a framework of an embodiment of a first power module;

[0028] Figure 3 This is a schematic diagram of the framework of another embodiment of the domain controller of the present application;

[0029] Figure 4 This is a signal flow diagram of an embodiment of a domain controller of the present application;

[0030] Figure 5 It is a schematic diagram of the framework of an embodiment of the vehicle system of the present application. DETAILED DESCRIPTION

[0031] The scheme of the embodiment of the present application is described in detail below in conjunction with the drawings of the specification.

[0032] The directions or positional relationships indicated by the terms "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside", etc. in this document are based on the directions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore should not be understood as a limitation on the present invention.

[0033] The terms "installed", "connected" and "connected" herein should be understood in a broad sense, for example, they can be fixedly connected, detachably connected, or integrally connected; they can be mechanically connected, directly connected, or indirectly connected through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms in this utility model can be understood according to specific circumstances.

[0034] The term "multiple" herein means two or more than two. In addition, the term "at least one" herein means any combination of at least two of any one or more of a plurality of, for example, including at least one of A, B, and C, may mean including any one or more elements selected from the set consisting of A, B, and C. And the "fault state" herein represents "fault occurs" or "no fault occurs", and the "fault signal" represents "fault type".

[0035] See also Figure 1 , Figure 1 The framework diagram of an embodiment of the domain controller 10 of the present application includes a main control module 11 and a first power supply module 12, wherein the main control module 11 includes a first trigger terminal 111, the first trigger terminal 111 is used to output a first interrupt signal when a failure occurs in the main control module 11, the first power supply module 12 is used to power the main control module 11, and the first power supply module 12 includes: a reset terminal 123 electrically connected to the main control module 11, a first controlled terminal 121 electrically connected to the first trigger terminal 111, and a second trigger terminal 122 electrically connected to the vehicle host computer 21, the reset terminal 123 is used to trigger the first interrupt signal and output a reset signal, and the second trigger terminal 122 is used to trigger the first interrupt signal to output a second interrupt signal indicating that a failure occurs in the main control module 11.

[0036] In one implementation scenario, the main control module 11 may include but is not limited to an MCU (Microcontroller Unit), an FPGA (Field-Programmable Gate Array) chip, a DSP (Digital Signal Processing) chip, and the like.

[0037] In an implementation scenario, the first trigger terminal 111 in the main control module 11 may include but is not limited to: a level trigger terminal, an edge trigger terminal, etc.

[0038] In a specific implementation scenario, the first trigger terminal 111 is a level trigger terminal. Exemplarily, the level trigger terminal can be used to trigger an interrupt with a high level when a fault occurs in the main control module 11 and output a first interrupt signal in a high level form. Of course, the level trigger terminal can also be used to trigger an interrupt with a low level when a fault occurs in the main control module 11 and output a first interrupt signal in a low level form.

[0039] In a specific implementation scenario, the first trigger terminal 111 is an edge trigger terminal. Exemplarily, the edge trigger terminal can be used to trigger an interrupt with a falling edge from a high level to a low level when a fault occurs in the main control module 11, and output a first interrupt signal in the form of a level jump. Of course, the edge trigger terminal can also be used to trigger an interrupt with a rising edge from a low level to a high level when a fault occurs in the main control module 11, and output a first interrupt signal in the form of a level jump.

[0040] In one implementation scenario, the first trigger end 111 is electrically connected to the first controlled end 121 of the first power module 12. When the main control module 11 fails, the first trigger end 111 serves as the sending end of the first interrupt signal, and the first controlled end 121 serves as the receiving end of the first interrupt signal.

[0041] It should be noted that the second trigger terminal 122 of the first power supply module 12 is similar to the first trigger terminal 111 of the main control module 11, that is, the second trigger terminal 122 may also include but is not limited to: a level trigger terminal, an edge trigger terminal, etc., including the third trigger terminal 132, the fourth trigger terminal 125, and the fifth trigger terminal 114 mentioned in subsequent implementation scenarios and embodiments are also similar to the first trigger terminal 111; and the signal forms of the second interrupt signal, the third interrupt signal, the fourth interrupt signal, and the fifth interrupt signal output by the second trigger terminal 122, the third trigger terminal 132, the fourth trigger terminal 125, and the fifth trigger terminal 114, respectively, are also similar to the signal forms of the first interrupt signal, and are not repeated here.

[0042] In one implementation scenario, the first power supply module 12 also includes a reset circuit (not shown), the output end of the reset circuit (not shown) is the reset end 123, and the main control module 11 includes a reset signal receiving end (not shown) electrically connected to the reset end 123, wherein the reset signal is used to trigger the level change of the reset signal receiving end (not shown) to achieve resetting of the main control module 11, and the reset signal is generated by the reset end 123 of the reset circuit (not shown), and the reset circuit (not shown) may include but is not limited to: a monostable circuit, an RC low-pass filter circuit, a power reset circuit, etc.

[0043] Exemplarily, the reset circuit (not shown) is a monostable circuit. When the main control module 11 does not fail, the reset signal receiving end (not shown) is at a high level. When the main control module 11 fails, the reset end 123 of the monostable circuit is triggered by the first interrupt signal, and outputs a reset signal in the form of a low-level pulse to the reset signal receiving end (not shown) to trigger the reset signal receiving end (not shown) to jump from a high level to a low level, and the main control module 11 then enters a reset state.

[0044] In an implementation scenario, please continue to refer to Figure 1 , the first power module 12 further includes a fifth communication terminal 124, the main control module 11 further includes a sixth communication terminal 112 communicatively connected to the fifth communication terminal 124, and the fifth communication terminal 124 is used to output a third fault signal at least representing the fault type of the first power module 12 when a fault occurs in the first power module 12. Therefore, the sixth communication terminal 112 of the main control module 11 is communicatively connected to the fifth communication terminal 124 of the first power module 12, that is, the third fault signal representing the fault type of the first power module 12 can be transmitted between the communication lines of the main control module 11 and the first power module 12, and when a fault occurs in the first power module 12 that supplies power to the main control module 11, the main control module 11 can obtain the fault type of the first power module 12, so as to further enhance the flexibility of the main control module 11 in responding to the power supply fault of the main control module 11.

[0045] In a specific implementation scenario, the fault type of the first power module 12 may include but is not limited to: overvoltage, undervoltage, overcurrent, etc. Different fault types of the first power module 12 are characterized by different third fault signals. Exemplarily, the third fault signal representing the overvoltage type is a digital signal "01", the third fault signal representing the undervoltage type is "10", and the third fault signal representing the overcurrent type is "11". Of course, the characterization relationship between the third fault signals "01", "10", "11" and the fault type of the first power module 12 is only used as an example, and is not a specific limitation on the fault type of the first power module 12. For example, the third fault signal representing the overvoltage can be any one of "00", "01", "10", "11", and can also be other representation forms such as "001", "101", etc.

[0046] In a specific implementation scenario, the fifth communication terminal 124 and the sixth communication terminal 112 are the same type of communication interface, and the communication interface includes at least an I2C interface. Of course, the same type of communication interface between the fifth communication terminal 124 and the sixth communication terminal 112 may also include, but is not limited to, an SPI interface, a UART interface, etc. Therefore, the main control module 11 and the first power supply module 12 both include an I2C interface, and communicate based on the I2C communication protocol, which can improve the transmission efficiency of the third fault signal, thereby improving the speed at which the main control module 11 responds to power supply failures.

[0047] In one implementation scenario, the main control module 11 also includes a third controlled terminal 113, and the first power supply module 12 also includes a fourth trigger terminal 125 electrically connected to the third controlled terminal 113, and the fourth trigger terminal 125 is used to output a fourth interrupt signal when a fault occurs in the first power supply module 12, and the sixth communication terminal 112 is used to trigger the fourth interrupt signal and obtain a third fault signal from the fifth communication terminal 124. Therefore, the third controlled terminal 113 of the main control module 11 is electrically connected to the fourth trigger terminal 125 of the first power module 12, that is, the main control module 11 is triggered at the fourth trigger terminal 125 to output the fourth interrupt signal, and the first power module 12 is monitored to fail, and the sixth communication terminal 112 of the main control module 11 is communicatively connected to the fifth communication terminal 124 of the first power module 12. When the first power module 12 fails, the sixth communication terminal 112 is controlled by the fourth interrupt signal and obtains the third fault signal representing the fault type of the first power module 12 from the fifth communication terminal 124, so that the main control module 11 can monitor the fault state of the first power module 12 while also being able to adopt different safety strategies based on different fault types, which helps to improve the flexibility of the main control module 11 in responding to the failure of the first power module 12. It should be noted that how the main control module 11 specifically responds to different fault types and adopts corresponding safety strategies is not within the technical solution of the present application, and will not be repeated here.

[0048] In a specific implementation scenario, the second trigger terminal 122 is also coupled to the fourth trigger terminal 125, and the fourth trigger terminal 125 is used to output a fourth interrupt signal when a fault occurs in the first power module 12, and the second trigger terminal 122 is also used to trigger the fourth interrupt signal to output an interrupt signal indicating a fault in the first power module 12 to the vehicle host computer 21. Therefore, the second trigger terminal 122 is connected to the vehicle host computer 21, and in addition to being able to report the second interrupt signal indicating a fault in the main control module 11 to the vehicle host computer 21, the second trigger terminal 122 is coupled to the fourth trigger terminal 125, and can also report the interrupt signal indicating a fault in the first power module 12 to the vehicle host computer 21, so the first power module 12 can report its own fault status and the fault status of the main control module 11, which helps to increase the conditional coverage of the fault reporting of the domain controller 10.

[0049] In one implementation scenario, see Figure 2 , Figure 2 for Figure 1 The first power module 12 is a schematic diagram of a framework of an embodiment of the first power module 12, wherein the first power module 12 further includes a detection circuit 1201 and a register 1202, wherein the register 1202 is electrically connected to the detection circuit 1201 and is used to register a third fault signal output by the detection circuit 1201.

[0050] In a specific implementation scenario, the first power module 12 including the detection circuit 1201 and the register 1202 is integrated on a power chip, and the power chip may include but is not limited to: TLF35584 chip, PFS8613 chip, MC33PF8200 chip, MPQ2977 chip, etc.

[0051] In a specific implementation scenario, the third fault signal output by the detection circuit 1201 is in the form of the aforementioned digital signals "00", "01", "10", "11", and the detection circuit 1201 can be an overvoltage detection circuit or an undervoltage detection circuit or an overcurrent detection circuit.

[0052] In a specific implementation scenario, the sixth communication terminal 112 of the main control module 11 is used to trigger the aforementioned fourth interrupt signal to obtain the third fault signal stored in the register 1202 from the fifth communication terminal 124 of the first power module 12 .

[0053] In one implementation scenario, the main control module 11 further includes a fifth trigger terminal 114, and the first power module 12 further includes a fourth controlled terminal 126 electrically connected to the fifth trigger terminal 114. The fifth trigger terminal 114 is used to output a fifth interrupt signal when the timing monitoring signal is not received, and the reset terminal 123 is also used to trigger the fifth interrupt signal and output a reset signal. Therefore, the fifth trigger terminal 114 of the main control module 11 is electrically connected to the fourth controlled terminal 126 of the first power module 12, that is, the first power module 12 is triggered by the fifth interrupt signal output by the fifth trigger terminal 114, which can monitor the main control module 11 regularly, increase the monitoring coverage of the first power module 12 on the main control module 11, and further improve the reliability of the domain controller 10.

[0054] In a specific implementation scenario, the main control module 11 also includes a timer (not shown) electrically connected to the fifth trigger terminal 114, the timer (not shown) is used to regularly output a timing monitoring signal to the fifth trigger terminal 114, and the fifth trigger terminal 114 is triggered to output a fifth interrupt signal when the timing monitoring signal is not received. Exemplarily, the timing monitoring signal is in the form of a high-level pulse, and the level state of the fifth trigger terminal 114 represents whether the timing monitoring signal output by the timer (not shown) is received, the timer (not shown) regularly outputs a timing monitoring signal in the form of a high-level pulse, the fifth trigger terminal 114 regularly receives a high-level signal, and the fifth trigger terminal 114 is triggered to output the fifth interrupt signal when the high-level signal is not received within the timer timing duration.

[0055] In one implementation scenario, the main control module 11 further includes a first power input terminal 115 , and the first power module 12 further includes a first power output terminal 127 . The first power output terminal 127 is electrically connected to the first power input terminal 115 for supplying power to the main control module 11 .

[0056] In one implementation scenario, the main control module 11 also includes a seventh communication terminal 116 electrically connected to the vehicle host computer 21 .

[0057] In a specific implementation scenario, the seventh communication terminal 116 may include but is not limited to: a CAN interface, an RS232 interface, an RS485 interface, etc.

[0058] In the above scheme, the first controlled end 121 of the first power module 12 is electrically connected to the first trigger end 111 of the main control module 11, that is, the first power module 12 is triggered at the first trigger end 111 to output a first interrupt signal, and a fault of the main control module 11 is monitored. Moreover, since the reset end 123 of the first power module 12 is connected to the main control module 11, when the main control module 11 fails, the first power module 12 can directly reset the main control module 11. At the same time, the second trigger end 122 of the first power module 12 can report a second interrupt signal indicating that the main control module 11 has failed to the vehicle host computer 21. Compared with the fault state before resetting and restarting the main control module 11 and then reporting it back to the vehicle host computer 21, the fault state of the main control module 11 can be reported to the vehicle host computer 21 in time, which helps to improve the reliability of the domain controller 10.

[0059] See also Figure 3 , Figure 3 This is a framework diagram of another embodiment of the domain controller 10 of the present application. In addition to the main control module 11 and the first power supply module 12 in the aforementioned embodiment, the domain controller 10 also includes a processing module 13, and the main control module 11 in the domain controller 10 also includes a first communication terminal 117 and a second controlled terminal 118, the processing module 13 includes a second communication terminal 131 communicatively connected to the first communication terminal 117 and a third trigger terminal 132 connected to the second controlled terminal 118, the third trigger terminal 132 is used to output a third interrupt signal when a fault occurs in the processing module 13, the second communication terminal 131 is used to output a first fault signal at least representing the fault type of the processing module 13, and the first communication terminal 117 is controlled by the third interrupt signal to obtain the first fault signal from the second communication terminal 131.

[0060] In one implementation scenario, the processing module 13 may include but is not limited to: a CPU, an image processing unit, an audio processing unit, a deep learning acceleration unit, etc.

[0061] In one implementation scenario, the processing module 13 is integrated on a SOC (System on Chip), and the failure of the processing module 13 may include the failure of each integrated unit in the SOC chip. By way of example, the failure of the integrated unit includes an audio unit failure, a sensor unit failure, a CPU failure, etc.

[0062] In one implementation scenario, the fault types of the processing module 13 may include but are not limited to: operation failure, hardware failure, etc.

[0063] In a specific implementation scenario, similar to the failure of the first power module 12 in the aforementioned embodiment, the first fault signal can be represented by a digital signal, and different first fault signal forms are used to characterize different processing module 13 failure types.

[0064] In a specific implementation scenario, the first communication terminal 117 of the main control module 11 is communicatively connected to the second communication terminal 131 of the processing module 13. When a fault occurs in the processing module 13, the first communication terminal 117 is controlled by the third interrupt signal and obtains a first fault signal from the second communication terminal 131. The main control module 11 also includes at least a comparison circuit (not shown) for triggering different first fault signals and outputting different response signals to the vehicle host computer 21.

[0065] In one implementation scenario, the first communication terminal 117 and the second communication terminal 131 are the same type of communication interface, and the communication interface at least includes an SPI interface. Of course, the same type of communication interface between the first communication terminal 117 and the second communication terminal 131 may also include, but is not limited to: a USART interface, a UART interface, an I2C interface, etc. Therefore, since the fault types of the processing module 13 are complex and diverse, the main control module 11 and the processing module 13 both include an SPI interface to communicate based on the SPI communication protocol, which can provide a larger data transmission capacity for the first fault signal of the processing module 13.

[0066] In an implementation scenario, please continue to refer to Figure 3 , the domain controller 10 further includes a second power module 14 for supplying power to the processing module 13, the second power module 14 includes a third communication terminal 141, the main control module 11 further includes a fourth communication terminal 119 communicatively connected to the third communication terminal 141, and the third communication terminal 141 is used to output a second fault signal at least representing the fault type of the second power module 14 when a fault occurs in the second power module 14. Therefore, the fourth communication terminal 119 of the main control module 11 is communicatively connected to the third communication terminal 141 of the second power module 14, that is, the second fault signal representing the fault type of the second power module 14 can be transmitted between the main control module 11 and the second power module 14, and when a fault occurs in the second power module 14 supplying power to the processing module 13, the main control module 11 can obtain the fault type of the second power module 14, so as to further enhance the flexibility of the main control module 11 in responding to the power supply fault of the processing module 13.

[0067] In a specific implementation scenario, the second power module 14 further includes a second power output terminal 142 , and the processing module 13 further includes a second power input terminal 133 . The second power output terminal 142 is electrically connected to the second power input terminal 133 for supplying power to the processing module 13 .

[0068] In a specific implementation scenario, the second power supply module 14 includes several power supply modules, each of which includes a third communication terminal 141. The fourth communication terminal 119 of the main control module 11 is controlled by the third interrupt signal and obtains a second fault signal representing the fault type of each power supply module from each third communication terminal 141.

[0069] It should be noted that the second power module 14, the second power module 14 fault type, the third communication terminal 141, etc. are similar to the first power module 12, the first power module 12 fault type, and the fifth communication terminal 124 in the aforementioned embodiment, and will not be repeated here.

[0070] See also Figure 4 , Figure 4 1 is a signal flow diagram of an embodiment of the domain controller 10 of the present application, the main control module 11 is an MCU chip, the processing module 13 is an SOC chip, the first trigger terminal 111 is the ERR interface on the MCU, the first power module 12 is a chip corresponding to the power supply 1, the first controlled terminal 121 is an interface for receiving the first interrupt signal of the power supply 1 (not shown), the second trigger terminal 122 is the ERR interface of the power supply 1 electrically connected to the vehicle host computer 21 to report the second interrupt signal, the reset terminal 123 is the RST interface of the first power module 12 electrically connected to the MCU to transmit the reset signal, the fifth interrupt signal is triggered by the fifth trigger terminal 114 and output to the fourth controlled terminal 126 when the timing monitoring signal is not received, the first communication terminal 117 is the SPI interface of the MCU, the second controlled terminal 118 is the INT interface of the MCU, the third trigger terminal 132 is the ERR interface of the SOC, and the second communication terminal 13 1 is the SPI interface of SOC, the INT interface of MCU is used to receive the third interrupt signal, and the SPI interface of MCU is controlled by the third interrupt signal to obtain the first fault signal from the SPI interface of SOC, the second power supply module 14 is composed of several power supply chips, and the several power supply chips correspond to power supplies two, three, four and five respectively, among which, the third communication terminals 141 of power supplies two, three and four are all I2C interfaces, the fourth communication terminal 119 is the I2C interface of MCU, the I2C interface of power supplies two, three and four is used to output the second fault signal to the I2C interface of MCU, power supply five is electrically connected between power supply four and SOC, and power supply four is also used to output a fault signal representing the fault type of power supply five to the I2C interface of MCU when power supply five fails, and the seventh communication terminal 116 is the CAN interface of MCU, which is used to report at least part of the first fault signal and / or the second fault signal to the vehicle host computer 21.

[0071] In the above scheme, on the one hand, the first controlled end 121 of the first power module 12 is electrically connected to the first trigger end 111 of the main control module 11, that is, the first power module 12 is triggered at the first trigger end 111 to output the first interrupt signal, and the main control module 11 is monitored to have a fault, and because the reset end 123 of the first power module 12 is connected to the main control module 11, when the main control module 11 fails, the first power module 12 can directly reset the main control module 11, and at the same time, the second trigger end 122 of the first power module 12 can report the second interrupt signal indicating the failure of the main control module 11 to the vehicle host computer 21. Compared with the fault state before resetting and restarting the main control module 11 and then reporting it back to the host computer 21, the fault state of the main control module 11 can be reported to the vehicle host computer 21 in a timely manner, which is helpful to improve the domain controller 10. reliability; on the other hand, the domain controller 10 also includes a processing module 13, and the second controlled end 118 of the main control module 11 is connected to the third trigger end 132 of the processing module 13, that is, the main control module 11 is triggered at the third trigger end 132 to output a third interrupt signal, and monitors that the processing module 13 fails, and the first communication end 117 of the main control module 11 is communicatively connected to the second communication end 131 of the processing module 13. When the processing module 13 fails, the first communication end 117 is controlled by the third interrupt signal and obtains a first fault signal representing the fault type of the processing module 13 from the second communication end 131. The main control module 11 can monitor the fault state of the processing module 13 while also being able to adopt different safety strategies based on different fault types, which helps to improve the flexibility of the main control module 11 in responding to the fault of the processing module 13.

[0072] See also Figure 5 , Figure 5 This is a schematic diagram of the framework of an embodiment of a vehicle system 20 of the present application. The vehicle system 20 at least includes a vehicle host computer 21 and the domain controller 10 in the aforementioned embodiment.

[0073] In one implementation scenario, the vehicle system 20 may include, but is not limited to: a vehicle power system, a vehicle chassis system, a cockpit system, an automatic driving system, a body system, etc.

[0074] In a specific implementation scenario, the vehicle system 20 is an autonomous driving system, which further includes a sensor (not shown) connected to the domain controller 10, and the sensor (not shown) is at least used to sense environmental information.

[0075] In a specific implementation scenario, the vehicle host computer 21 is a central gateway, including a CAN interface, which is at least used to receive a fault signal and a fault status of a fault type from the domain controller 10 .

[0076] In one implementation scenario, the domain controller 10 is integrated on a main control chip, which may include but is not limited to: an MCU chip, a SOC chip, etc. Among them, the SOC chip may integrate at least one of a CPU, an image processing unit, an audio processing unit, and a deep learning acceleration unit.

[0077] In the above scheme, the vehicle system 20 includes a vehicle host computer 21 and a domain controller 10. In the domain controller 10, the first controlled end 121 of the first power module 12 is electrically connected to the first trigger end 111 of the main control module 11, that is, the first power module 12 is triggered to output the first interrupt signal at the first trigger end 111, and the main control module 11 is monitored to have a fault. And because the reset end 123 of the first power module 12 is connected to the main control module 11, when the main control module 11 fails, the first power module 12 can directly reset the main control module 11. At the same time, the second trigger end 122 of the first power module 12 can report the second interrupt signal indicating the failure of the main control module 11 to the vehicle host computer 21. Compared with the fault state before the main control module 11 is reported after resetting and restarting and then resetting, the fault state of the main control module 11 can be reported to the vehicle host computer 21 in time, which helps to improve the reliability of the domain controller 10, and thus can improve the overall safety performance of the vehicle system 20.

[0078] The above are only implementation methods of the present application, and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A domain controller, characterized in that: include: A main control module, comprising a first trigger end, wherein the first trigger end is used to output a first interrupt signal when a failure occurs in the main control module; A first power supply module is used to supply power to the main control module. The first power supply module includes: a reset end electrically connected to the main control module, a first controlled end electrically connected to the first trigger end, and a second trigger end electrically connected to the vehicle host computer. The reset end is used to trigger the first interrupt signal and output a reset signal. The second trigger end is used to trigger the first interrupt signal to output a second interrupt signal indicating that a fault has occurred in the main control module.

2. The domain controller according to claim 1, characterized in that: The main control module also includes a first communication end and a second controlled end, and the domain controller also includes a processing module, the processing module includes a second communication end communicatively connected to the first communication end and a third trigger end connected to the second controlled end, the third trigger end is used to output a third interrupt signal when a fault occurs in the processing module, the second communication end is used to output a first fault signal at least characterizing the fault type of the processing module, and the first communication end is controlled by the third interrupt signal to obtain the first fault signal from the second communication end.

3. The domain controller according to claim 2, characterized in that: The first communication end and the second communication end are the same type of communication interface, and the communication interface at least includes an SPI interface.

4. The domain controller according to claim 2, characterized in that: The domain controller also includes a second power supply module for supplying power to the processing module, the second power supply module includes a third communication terminal, the main control module also includes a fourth communication terminal communicatively connected to the third communication terminal, and the third communication terminal is used to output a second fault signal at least characterizing the fault type of the second power supply module when a fault occurs in the second power supply module.

5. The domain controller according to claim 1, characterized in that: The first power supply module also includes a fifth communication terminal, the main control module also includes a sixth communication terminal communicatively connected to the fifth communication terminal, and the fifth communication terminal is used to output a third fault signal at least representing the fault type of the first power supply module when a fault occurs in the first power supply module.

6. The domain controller according to claim 5, characterized in that: The fifth communication terminal and the sixth communication terminal are the same type of communication interface, and the communication interface at least includes an I2C interface.

7. The domain controller according to claim 5, characterized in that: The main control module also includes a third controlled end, and the first power supply module also includes a fourth trigger end electrically connected to the third controlled end, and the fourth trigger end is used to output a fourth interrupt signal when a failure occurs in the first power supply module, and the sixth communication end is used to trigger the fourth interrupt signal and obtain the third fault signal from the fifth communication end.

8. The domain controller according to claim 7, characterized in that: The second trigger terminal is also coupled to the fourth trigger terminal.

9. The domain controller according to claim 1, characterized in that: The main control module also includes a fifth trigger end, and the first power supply module also includes a fourth controlled end electrically connected to the fifth trigger end, the fifth trigger end is used to output a fifth interrupt signal when the timing monitoring signal is not received, and the reset end is also used to trigger the fifth interrupt signal and output the reset signal.

10. A vehicle system, characterized in that: At least comprises a vehicle host computer and a domain controller as claimed in any one of claims 1 to 9.

Images