Control system for safe driving of hybrid vehicle

Abstract

The utility model discloses a control system for safe driving of a hybrid vehicle, which comprises a vehicle control unit and a driving module, the vehicle control unit is connected with the driving module, the driving module comprises an electric driving system and an engine driving system, and the electric driving system and the engine driving system are respectively connected with the vehicle control unit. The utility model aims to solve the problem that the traditional method cannot still drive according to the intention of a driver after a fault state, not only meets the safety requirement of functional safety on the system, does not introduce new harm, but also improves the satisfaction degree of a user.

Description

Technical Field

[0001] The utility model relates to the technical field of new energy vehicles, and in particular to a control system for safe driving of a hybrid vehicle. Background Art

[0002] With the popularization and development of new energy vehicles, the requirements for drive systems are getting higher and higher, and the safety of drive systems has received more attention. Functional safety is an important means to ensure the safety of electronic control systems, which is used to reduce or prevent damage to personnel caused by failure of electronic control systems. With the development of autonomous driving technology and new energy vehicles, more and more functional safety issues have emerged, but the current functional safety solutions for electric drive systems in the industry limit torque output, which causes the vehicle to lose power and is not conducive to the user's driving experience. Therefore, there is an urgent need for a solution that can still provide power output according to the driver's intention after failure.

[0003] Publication (announcement) number: CN116736108A, Publication (announcement) date: 2023-09-12. It involves a method for estimating the torque of an electric drive system with functional safety. The method obtains the three-phase current sampling signal, DC bus voltage sampling signal, three-phase upper bridge duty cycle recovery signal, resolver sine sampling signal and resolver cosine sampling signal of the target electric drive system power model; calculates the motor input power and motor loss power according to the DC bus voltage signal, the three-phase upper bridge duty cycle signal, the three-phase phase current signal and the motor speed signal; and estimates the current torque of the motor through the motor input power and the motor loss power. This solution is mainly a functional safety algorithm for the motor controller, and the architecture involved is relatively vague.

[0004] Publication (Announcement) Number: CN115179964A, Publication (Announcement) Date: 2022-10-14 It involves a VCU redundant control system based on functional safety and its application. Relying on the existing vehicle electronic and electrical architecture, a redundant power control unit is deployed in the regional controller and directly connected to the motor controller. When the main power control system fails, the redundant power control unit monitors in time and controls the electric drive unit through a redundant loop to perform basic power control, so as to achieve the requirements of the autonomous driving system to pull over or to a safe area, while ensuring the lowest cost. The motor controller of this solution is redundant and the cost is relatively high. Utility Model Content

[0005] The purpose of the utility model is to solve the problem that the traditional method cannot drive according to the driver's intention after a fault state, and to provide a control system for safely driving a hybrid vehicle that can switch the power source when a safety-related failure occurs so that the vehicle does not lose power and still drives according to the driver's intention.

[0006] In order to achieve the above-mentioned purpose, the solution provided by the utility model is: a control system for safe driving of a hybrid vehicle, including: a vehicle controller and a drive module, the vehicle controller is connected to the drive module, the drive module includes an electric drive system and an engine drive system, and the electric drive system and the engine drive system are respectively connected to the vehicle controller.

[0007] Preferably, the vehicle controller includes a torque decision module and a fault judgment module, and the fault judgment module is connected to the torque decision module.

[0008] Preferably, the electric drive system includes a motor controller, the motor controller includes a motor monitoring module, and the motor controller is connected to the motor.

[0009] Preferably, the engine drive system includes an engine controller, the engine controller includes an engine monitoring module, and the engine controller is connected to the engine.

[0010] Preferably, the torque decision module is connected to the motor controller and the engine controller respectively.

[0011] Preferably, the fault judgment module is connected to the motor controller and the engine controller respectively.

[0012] Preferably, the fault judgment module is connected to the motor monitoring module and the engine monitoring module respectively.

[0013] Preferably, the vehicle controller is connected to the instrument via a fault judgment module.

[0014] The beneficial effect of the utility model is that it solves the shortcoming of the traditional method that the vehicle cannot be driven according to the driver's intention after a fault state, meets the functional safety requirements for the system, does not introduce new hazards, and improves user satisfaction. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 It is a system connection schematic diagram of the utility model.

[0016] Figure 2 It is a schematic diagram of system connection in the normal driving state of the utility model.

[0017] Figure 3 It is a schematic diagram of system connection in a fault driving state of the utility model.

[0018] Figure 4 It is a schematic diagram of module connection of the utility model. DETAILED DESCRIPTION

[0019] The specific embodiments of the utility model will be described in detail below. It should be noted that the embodiments described here are only part of the embodiments of the utility model, not all of them. Based on the following embodiments, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the utility model.

[0020] The utility model provides a technical solution:

[0021] like Figure 1 As shown, a control system for safe driving of a hybrid vehicle includes: a vehicle controller and a drive module, the vehicle controller is connected to the drive module, the drive module includes an electric drive system and an engine drive system, and the electric drive system and the engine drive system are respectively connected to the vehicle controller. For the electric drive system, the output torque may be too large, too small, the output torque is reversed, or the output torque is unexpected due to the failure of the electronic control system. According to all the current analysis experience in the industry and internationally, it is generally believed that the safety level of too small torque is QM, that is, too small torque is not considered to be a safety-related failure, so the safety state is defined as reduced torque output or zero torque output, or the safety level of too small torque is considered to be ASIL A / B, that is, it is believed that reduced torque output or zero torque output cannot be defined as a safe state.

[0022] When a safety-related failure occurs, it is still necessary to output torque according to the correct torque request, but this is not possible for vehicles driven by a single motor. Hybrid vehicles have two driving modes, one is motor drive and the other is engine drive. For hybrid vehicles, if a safety-related failure occurs in electric drive mode, it can still be switched to engine drive mode to ensure that torque is output according to the correct torque request.

[0023] Embodiment 1:

[0024] During normal driving, the vehicle is mainly powered by the electric drive system. Figure 2 As shown, a control system for safe driving of a hybrid vehicle includes: a vehicle controller and an electric drive system. The vehicle controller and the electric drive system are connected. During driving, the vehicle controller sends a real-time torque data acquisition request to the electric drive system, and the electric drive system feeds back the state of the motor to the vehicle controller to determine the fault state of the hybrid vehicle.

[0025] The vehicle controller consists of a torque decision module and a fault judgment module. The fault judgment module is connected to the torque decision module in communication. The electric drive system is controlled by a motor controller. The motor controller can control the torque and speed of the motor. The motor controller includes a motor monitoring module. The motor monitoring module monitors the motor in real time. The motor monitoring module monitors the motor controller to monitor the control amount of the motor torque and speed. During driving, the driver normally steps on the accelerator pedal, the car receives the accelerator pedal signal, and sends the accelerator pedal signal to the torque decision module. The torque decision module sends a torque control request to the motor controller. The motor controller determines whether there is a large error between the request amount and the motor control amount. There is no large error during normal driving.

[0026] Embodiment 2:

[0027] During the fault driving state, the vehicle is mainly powered by the engine drive system, such as Figure 3 As shown, a control system for safe driving of a hybrid vehicle includes: a vehicle controller and an electric drive system. The vehicle controller is connected to the engine drive system. During driving, the vehicle controller sends a real-time torque data acquisition request to the engine drive system, and the engine drive system feeds back the state of the engine to the vehicle controller to determine the fault state of the hybrid vehicle.

[0028] The vehicle controller is composed of a torque decision module and a fault judgment module. The fault judgment module is connected to the torque decision module in communication. The engine control system is controlled by the engine controller. The engine controller can control the torque and speed of the engine. The engine controller includes an engine monitoring module. The engine monitoring module monitors the engine in real time. The engine monitoring module monitors the control amount of the engine torque and speed by the engine controller. During the fault driving process, the motor controller fails, the driver steps on the accelerator pedal, the car receives the accelerator pedal signal, and sends the accelerator pedal signal to the torque decision module. The torque request sent by the torque decision module to the motor controller does not match the control amount monitored by the motor monitoring module. The engine drive system starts and the instrument fault light is turned on to remind the driver. The torque decision module sends a torque control request to the engine controller. The engine controller determines whether there is a large error between the request amount and the motor control amount. Generally, there is no large error during the driving process.

[0029] Embodiment 3:

[0030] like Figure 4As shown, a control system for safe driving of a hybrid vehicle includes: a vehicle controller and a drive module, the vehicle controller is connected to the drive module, the drive module includes an electric drive system and an engine drive system, the electric drive system and the engine drive system are respectively connected to the vehicle controller, the vehicle controller includes a torque decision module and a fault judgment module, the fault judgment module is connected to the torque decision module, the vehicle controller is connected to the instrument through the fault judgment module, the electric drive system includes a motor controller, the motor controller includes a motor monitoring module, the motor controller is connected to the motor, the engine drive system includes an engine controller, the engine controller includes an engine monitoring module, the engine controller is connected to the engine, the torque decision module is respectively connected to the motor controller and the engine controller, and the fault judgment module is respectively connected to the motor monitoring module and the engine monitoring module.

[0031] Currently, the industry basically adopts the method of limiting torque output for the safe state of the drive system. When a safety-related fault is detected, the electric drive system is shut down or actively short-circuited, and the entire vehicle loses power and slowly stops. From the perspective of functional safety, if the safety state is frequently entered, causing the entire vehicle to lose power, this will lead to a decrease in user satisfaction with the product and reduce the vehicle's performance.

[0032] In this solution, the vehicle controller makes torque decisions based on the accelerator pedal signal and sends a torque control request to the motor controller. The motor controller drives the motor according to the torque request of the vehicle controller (Level 1). At the same time, the motor monitoring module monitors and feeds back the motor control quantity. The motor controller checks the error with the torque request of the vehicle controller based on the feedback of the motor control quantity. When the error exceeds a certain value, a fault signal is sent to the vehicle controller (Level 2).

[0033] At the same time, the motor monitoring module monitors the motor controller, including data flow monitoring, processor monitoring, etc. When a controller fault is detected, a fault signal is sent to the vehicle controller (Level 3). When the vehicle controller receives the fault signal from the motor controller, it controls the torque decision module to switch to engine drive and turns on the instrument fault light to remind the driver.

[0034] After determining that the motor controller is abnormal, switch to engine control to avoid accidents.

[0035] The vehicle controller makes torque decisions based on the accelerator pedal signal and sends a torque control request to the engine controller. The engine controller controls the engine by outputting the corresponding engine control quantity based on the torque request of the vehicle controller (Level 1). At the same time, the engine controller constantly checks the error with the torque request of the vehicle controller based on the feedback of the engine control quantity. When the error exceeds a certain value, a fault signal is sent to the vehicle controller (Level 2).

[0036] At the same time, the engine controller is monitored, and when a controller fault is detected, a fault signal is sent to the vehicle controller (Level 3). When the vehicle controller receives the fault signal from the engine controller, it controls the torque decision module to switch to the motor drive and turns on the instrument fault light to remind the driver.

[0037] By the same token, this architecture can also ensure that when the engine drive system fails, it switches to the electric drive system to provide power.

[0038] Based on the above embodiments, the present application proposes a control system for safe driving of a hybrid vehicle, which provides a solution to the functional safety of the drive system of a hybrid vehicle. It does not require the development of additional redundant motor controllers, and can be achieved by making slight changes to the existing hybrid technology. When a safety-related failure occurs, the power source can be switched to prevent the vehicle from losing power and continue to drive as the driver intends, thereby taking into account both the functionality and safety of the entire vehicle.

[0039] The above shows and describes the basic features, principles and advantages of the utility model. It should be noted that the utility model is not limited to the above embodiments, which are only partial embodiments. Under the premise of not departing from the spirit and scope of the utility model, several improvements and supplements made are deemed to be within the protection scope of the utility model.

Claims

1. A control system for safe driving of a hybrid vehicle, characterized in that: include: A vehicle controller and a drive module, the vehicle controller is connected to the drive module, the drive module includes an electric drive system and an engine drive system, the electric drive system and the engine drive system are respectively connected to the vehicle controller, the vehicle controller includes a torque decision module and a fault judgment module, the torque request amount sent by the torque decision module to the motor controller does not match the control amount monitored by the motor monitoring module, the engine drive system is started, and the instrument fault light is turned on to remind the driver, and the torque decision module sends a torque control request to the engine controller.

2. A hybrid vehicle safe driving control system according to claim 1, characterized in that: The vehicle controller includes a torque decision module and a fault judgment module, and the fault judgment module is connected to the torque decision module.

3. A hybrid vehicle safe driving control system according to claim 2, characterized in that: The electric drive system includes a motor controller, the motor controller includes a motor monitoring module, and the motor controller is connected to the motor.

4. A hybrid vehicle safe driving control system according to claim 3, characterized in that: The engine driving system includes an engine controller, the engine controller includes an engine monitoring module, and the engine controller is connected to the engine.

5. A hybrid vehicle safe driving control system according to claim 4, characterized in that: The torque decision module is connected to the motor controller and the engine controller respectively.

6. A hybrid vehicle safe driving control system according to any one of claims 4 or 5, characterized in that: The fault judgment module is connected to the motor controller and the engine controller respectively.

7. A hybrid vehicle safe driving control system according to any one of claims 4 or 5, characterized in that: The fault judgment module is connected to the motor monitoring module and the engine monitoring module respectively.

8. A hybrid vehicle safe driving control system according to any one of claims 2 to 5, characterized in that: The vehicle controller is connected to the instrument through the fault judgment module.

Images