Cabin system function safety fault injection test system

Abstract

The utility model relates to the technical field of automobile electronic testing, and provides a cabin system function safety fault injection testing system which comprises a device to be tested and a control module which are connected, and a simulation fault reporting interface and a simulation fault communication interface are arranged between the device to be tested and the control module. The simulation fault reporting interface is used for being connected with an external power supply for outputting a high-level signal or a low-level signal; the simulation fault communication interface is used for being in communication connection with external simulation communication equipment. Wherein after the control module receives a high level signal or a low level signal input from the simulation fault reporting interface, the control module is triggered to work and performs fault information interaction with the simulation communication equipment through the simulation fault communication interface. And the control module triggers the reading of the fault information according to the received fault interruption notification, and further confirms the fault reason according to the read simulation fault information, thereby realizing the fault injection test of the function safety fault detection mechanism of the to-be-tested device of the cabin system.

Description

Technical Field

[0001] The utility model relates to the technical field of automobile electronic testing, and more specifically to a cockpit system functional safety fault injection testing system. Background Art

[0002] With the development of the industry, automotive cockpit systems are gradually required to meet the functional safety requirements of ASIL B at the highest level. During the functional safety development process, verification activities are an important process to ensure that safety requirements and mechanisms are correctly and completely implemented. The test and verification method of the functional safety mechanism mainly adopts fault injection testing, which requires injecting expected faults into the running system under test to check whether the system behavior meets the expected design. How to accurately inject a certain expected fault into the peripheral IC related to functional safety in the system without introducing other types of safety faults is the key to fault injection testing.

[0003] At present, it is proposed to receive signal message instructions such as CAN message instructions through a programmable wiring board, and parse the signal message instructions. The control module controls the relay module connected to the interface under test and the peripheral interface according to the parsing results to realize automatic configuration fault injection. Among them, the peripheral interface is used to connect the CAN / LIN interface and power cord of the detection communication instrument, and the interface under test is used to connect the CAN / LIN harness and power harness of the electronic controller under test. Obviously, this device is only used to realize communication line fault injection, and has the problem of poor versatility, and single fault controllability also needs to be considered. Utility Model Content

[0004] In order to overcome the defects of the fault injection testing means described in the above-mentioned prior art, such as poor versatility and single fault controllability, the utility model provides a cockpit system functional safety fault injection testing system.

[0005] In order to solve the above technical problems, the technical solution of the utility model is as follows:

[0006] A cockpit system functional safety fault injection test system includes a connected device under test and a control module, wherein a simulated fault reporting interface and a simulated fault communication interface are provided between the device under test and the control module; the simulated fault reporting interface is used to connect to an external power supply that outputs a high-level signal or a low-level signal; and the simulated fault communication interface is used to communicate with an external simulated communication device. After the control module receives a high-level signal or a low-level signal input from the simulated fault reporting interface, the control module is triggered to work and interact with the simulated communication device for fault information via the simulated fault communication interface.

[0007] In this technical solution, a simulated fault reporting interface and a simulated fault communication interface are added between the device under test and the control module, wherein the simulated fault reporting interface is used to connect to an external power supply, and input a high-level signal or a low-level signal through the external power supply to simulate the fault interruption notification of the device under test; the simulated fault communication interface is used to communicate with an external simulated communication device, and simulate the fault information sending state of the device under test through the communication connection between the external simulated communication device and the control module. The control module triggers the reading of the fault information according to the received fault interruption notification, and further confirms the cause of the fault according to the read simulated fault information, so as to realize the fault injection test of the functional safety fault detection mechanism of the device under test of the cockpit system.

[0008] As a preferred solution, the external power supply includes an adjustable voltage DC power supply; the positive pole of the external power supply is connected to the simulated fault reporting interface, and the negative pole of the external power supply is grounded.

[0009] As a preferred solution, the external power supply includes a GPR3060D DC regulated power supply.

[0010] As a preferred solution, the simulated fault communication interface includes one of an I2C serial port, a UART serial port or a SPI serial port.

[0011] As a preferred solution, the external analog communication device is provided with a first communication unit for performing data interaction with the terminal.

[0012] As a preferred solution, the first communication unit includes one of a USB chip, a Bluetooth chip or a 4G chip.

[0013] As a preferred solution, the control module is configured with a second communication unit for performing data interaction with the terminal.

[0014] As a preferred solution, the second communication unit includes a CAN transceiver or a LIN bus chip.

[0015] As a preferred solution, a first switch is provided between the simulated fault reporting interface and the device under test; and a second switch is provided between the simulated fault communication interface and the device under test.

[0016] As a preferred solution, a first relay is provided between the simulated fault reporting interface and the device under test; a second relay is provided between the simulated fault communication interface and the device under test; and the output end of the control module is connected to the input ends of the first relay and the second relay respectively.

[0017] Compared with the prior art, the beneficial effects of the technical solution of the utility model are:

[0018] The utility model sets a simulated fault reporting interface and a simulated fault communication interface between the device under test and the control module, cooperates with an external power supply to input a high-level signal or a low-level signal, simulates the fault interruption notification of the device under test, and cooperates with an external simulated communication device to simulate the fault information sending state of the device under test; the control module triggers the reading of the fault information according to the received simulated fault interruption notification, and further confirms the cause of the fault according to the read simulated fault information, so as to realize the fault injection test of the functional safety fault detection mechanism of the device under test of the cockpit system;

[0019] The utility model realizes connection with external equipment by setting a simulated fault reporting interface and a simulated fault communication interface, which can ensure that the cockpit system to be tested will not be introduced into other unexpected simulated faults, and has higher reliability and controllability. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 This is an architectural diagram of the cockpit system functional safety fault injection test system of Example 1.

[0021] Figure 2 This is an architectural diagram of the cockpit system functional safety fault injection test system of Example 2.

[0022] Figure 3 This is an architectural diagram of the cockpit system functional safety fault injection test system of Example 3.

[0023] Figure 4 This is an architectural diagram of the cockpit system functional safety fault injection test system of Example 4.

[0024] Among them, 1-device under test, 2-control module, 3-simulated fault reporting interface, 4-simulated fault communication interface, 5-external power supply, 6-simulated communication equipment. DETAILED DESCRIPTION

[0025] The accompanying drawings are only used for illustrative purposes and are not to be construed as limiting the present application;

[0026] In order to better illustrate the present embodiment, some parts in the drawings may be omitted, enlarged or reduced, and do not represent the size of the actual product;

[0027] It is understandable to those skilled in the art that some well-known structures and their descriptions may be omitted in the drawings.

[0028] The technical solution of the utility model is further described below in conjunction with the accompanying drawings and embodiments.

[0029] Example 1

[0030] This embodiment proposes a cockpit system functional safety fault injection test system, such as Figure 1As shown, it is an architecture diagram of the cockpit system functional safety fault injection test system of this embodiment.

[0031] The cockpit system functional safety fault injection test system proposed in this embodiment includes a connected device under test 1 and a control module 2, and a simulated fault reporting interface 3 and a simulated fault communication interface 4 are arranged between the device under test 1 and the control module 2; the simulated fault reporting interface 3 is used to connect to an external power supply 5 that outputs a high-level signal or a low-level signal; the simulated fault communication interface 4 is used to communicate with an external simulated communication device 6; after the control module 2 receives a high-level signal or a low-level signal input from the simulated fault reporting interface 3, the control module 2 is triggered to work and interacts with the simulated communication device 6 for fault information via the simulated fault communication interface 4.

[0032] In this embodiment, the device under test 1 is a peripheral IC under test of the cockpit system.

[0033] In this embodiment, the first end of the control module 2 is connected to the fault reporting pin of the device under test 1, and is used to read the level state of the fault reporting pin of the device under test 1; the second end of the control module 2 is communicated with the device under test 1, and is used to read the fault information output by the device under test 1.

[0034] The simulated fault reporting interface 3 provided in this embodiment is used to connect to the external power supply 5 , and input a high level signal or a low level signal through the external power supply 5 to simulate the fault interrupt notification of the device under test 1 .

[0035] The simulated fault communication interface 4 provided in this embodiment is used for communication connection with the external simulated communication device 6 , and the fault information sending state of the device under test 1 is simulated through the communication connection between the external simulated communication device 6 and the control module 2 .

[0036] As an exemplary explanation, the external analog communication device 6 in this embodiment is configured with the same communication address, communication rate and / or communication protocol as the device under test 1 to simulate and replace the communication between the device under test 1 and the control module 2 .

[0037] The working process of the system described in this embodiment is as follows: after the system is powered on, the system status is observed to determine that the entire system has no other faults and is in normal working condition. The analog communication device 6 is connected to the analog fault communication interface 4; wherein the analog communication device 6 is configured with the same communication parameters as the device under test 1 to simulate the communication between the device under test 1 and the control module 2, and a data group to be sent is pre-stored in the analog communication device 6, and the data group contains a type of fault information that may violate the safety target. At the same time, the external power supply 5 is connected to the analog fault reporting interface 3, and a high level signal or a low level signal is input to maintain the simulated fault-free output state.

[0038] When performing a safety fault injection test, the simulated fault reporting interface 3 is connected through an external power supply 5, and a low-level signal or a high-level signal is input to simulate the output of a fault interruption notification. After receiving the fault interruption notification, the control module 2 triggers the reading of fault information, reads the data group sent by the simulated communication device 6, and further confirms the cause of the fault based on the read simulated fault information, thereby realizing a fault injection test of the functional safety fault detection mechanism of the cockpit system device under test 1.

[0039] In this embodiment, the control module 2 triggers the reading of fault information according to the fault interruption notification it receives, and further confirms the cause of the fault according to the read simulated fault information, thereby realizing the fault injection test of the functional safety fault detection mechanism of the device under test 1 of the cockpit system. In addition, in this embodiment, the data group to be sent in the simulated communication device 6 is configured according to the type of functional safety fault to be tested, so that the system has universality; in this embodiment, by setting the simulated fault reporting interface 3 and the simulated fault communication interface 4 to achieve connection with external devices, it can ensure that the cockpit system under test will not be introduced into other unexpected simulated faults, and has higher reliability and controllability.

[0040] In an optional embodiment, the external power supply 5 includes an adjustable voltage DC power supply; the positive pole of the external power supply 5 is connected to the simulated fault reporting interface 3, and the negative pole of the external power supply 5 is grounded.

[0041] Further optionally, the external power supply 5 is a GPR3060D DC regulated power supply.

[0042] In this embodiment, an adjustable voltage DC power supply is selected to be connected to the simulated fault reporting interface 3, wherein the adjustable voltage DC power supply has the characteristic of being able to adjust the voltage to a value within the allowable range of any device performance. By utilizing this characteristic, the output voltage can be manually controlled, thereby controlling the simulated fault reporting state.

[0043] As an exemplary explanation, assuming that the fault reporting pin of the device under test 1 is in a low level state when there is a fault output, then, during the system installation initialization process, the adjustable voltage DC power supply is connected to the simulated fault reporting interface 3 and a high level signal is input to maintain the simulated fault-free output state; when it is necessary to perform a safety fault injection test, the adjustable voltage DC power supply is directly adjusted to output a low level signal to simulate the output fault interrupt notification.

[0044] In another optional embodiment, the simulated fault communication interface 4 includes one of an I2C serial port, a UART serial port or an SPI serial port. The control module 2 accesses the fault state of the device under test 1 through an I2C, UART or SPI link to determine the specific cause of the fault and whether the fault is safety-related.

[0045] Example 2

[0046] This embodiment makes improvements on the cockpit system functional safety fault injection test system proposed in Embodiment 1. Figure 2 As shown, it is an architecture diagram of the cockpit system functional safety fault injection test system of this embodiment.

[0047] The cockpit system functional safety fault injection test system proposed in this embodiment includes a connected device under test 1 and a control module 2, and a simulated fault reporting interface 3 and a simulated fault communication interface 4 are arranged between the device under test 1 and the control module 2; the simulated fault reporting interface 3 is used to connect to an external power supply 5 that outputs a high-level signal or a low-level signal; the simulated fault communication interface 4 is used to communicate with an external simulated communication device 6; after the control module 2 receives the high-level signal input from the simulated fault reporting interface 3, the control module 2 exchanges fault information with the simulated communication device 6 via the simulated fault communication interface 4.

[0048] In this embodiment, the device under test 1 is a peripheral IC under test of the cockpit system.

[0049] In this embodiment, the first end of the control module 2 is connected to the fault reporting pin of the device under test 1, and is used to read the level state of the fault reporting pin of the device under test 1; the second end of the control module 2 is communicated with the device under test 1, and is used to read the fault information output by the device under test 1.

[0050] Furthermore, the external analog communication device 6 is provided with a first communication unit for performing data interaction with the terminal PC1.

[0051] The analog communication device 6 in this embodiment interacts with the terminal PC1 through the first communication unit to complete the configuration of the communication address, communication rate and / or communication protocol, and stores the data group to be sent containing fault information that may violate the safety goal in the analog communication device 6.

[0052] Further optionally, the first communication unit includes one of a USB chip, a Bluetooth chip or a 4G chip. The analog communication device 6 optionally performs data interaction with the terminal PC1 via a USB connection, a Bluetooth connection and a 4G wireless network connection.

[0053] In another optional embodiment, the control module 2 is configured with a second communication unit for performing data interaction with the terminal PC2.

[0054] After receiving the fault interruption notification, the control module 2 in this embodiment triggers the reading of fault information, obtains the simulated fault information sent by the simulated communication device 6, further confirms the cause of the fault based on the read simulated fault information, generates a message and sends it to the terminal PC 2 through the second communication unit. The staff can view the actual execution action of the message monitoring system through the terminal PC 2 to determine whether it has entered a safe state and whether it meets the expected demand design.

[0055] Further optionally, the second communication unit includes a CAN transceiver or a LIN bus chip.

[0056] Example 3

[0057] This embodiment makes improvements on the cockpit system functional safety fault injection test system proposed in Embodiment 1 or 2. Figure 3 As shown, it is an architecture diagram of the cockpit system functional safety fault injection test system of this embodiment.

[0058] The cockpit system functional safety fault injection test system proposed in this embodiment includes a connected device under test 1 and a control module 2, and a simulated fault reporting interface 3 and a simulated fault communication interface 4 are arranged between the device under test 1 and the control module 2; the simulated fault reporting interface 3 is used to connect to an external power supply 5 that outputs a high-level signal or a low-level signal; the simulated fault communication interface 4 is used to communicate with an external simulated communication device 6; after the control module 2 receives the high-level signal input from the simulated fault reporting interface 3, the control module 2 exchanges fault information with the simulated communication device 6 via the simulated fault communication interface 4.

[0059] In this embodiment, the device under test 1 is a peripheral IC under test of the cockpit system.

[0060] In this embodiment, the first end of the control module 2 is connected to the fault reporting pin of the device under test 1, and is used to read the level state of the fault reporting pin of the device under test 1; the second end of the control module 2 is communicated with the device under test 1, and is used to read the fault information output by the device under test 1.

[0061] Furthermore, a first switch S1 is provided between the simulated fault reporting interface 3 and the device under test 1 ; and a second switch S2 is provided between the simulated fault communication interface 4 and the device under test 1 .

[0062] As an exemplary illustration, the first switch S1 is arranged on the connection line between the first end of the control module 2 and the fault reporting pin of the device under test 1; the second switch S2 is arranged on the communication link between the second end of the control module 2 and the device under test 1.

[0063] The working process of the system described in this embodiment is: after the system is powered on, the system status is observed to determine that the entire system has no other faults and is in a normal working state. At this time, the device under test 1 and the control module 2 are connected, and the first switch S1 set between the simulated fault reporting interface 3 and the device under test 1 is in a closed state, and the second switch S2 set between the simulated fault communication interface 4 and the device under test 1 is in a closed state.

[0064] The analog communication device 6 is connected to the analog fault communication interface 4; wherein the analog communication device 6 is configured with the same communication parameters as the device under test 1 to simulate the communication between the device under test 1 and the control module 2, and a data group to be sent is pre-stored in the analog communication device 6, and the data group contains a kind of fault information that may violate the safety target. At the same time, the external power supply 5 is connected to the analog fault reporting interface 3, and a high level signal or a low level signal is input to maintain the simulated fault-free output state.

[0065] When performing a safety fault injection test, first disconnect the first switch S1 and the second switch S2. At this time, the control module 2 is disconnected from the device under test 1. At the same time, the external power supply 5 continuously inputs a high-level signal or a low-level signal through the simulated fault reporting interface 3 to maintain the simulated fault-free output state, that is, to maintain the same state as the fault reporting pin of the device under test 1 when there is no fault output. The system is still in a normal working state, ensuring that the two external devices used for simulated fault injection are integrated with the entire system and do not introduce other unexpected faults that will affect the operation of the system. Further, the simulated fault reporting interface 3 is accessed through the external power supply 5, and a low-level signal or a high-level signal is input to simulate the output of the fault interrupt notification. After receiving the fault interrupt notification, the control module 2 triggers the reading of the fault information, reads the data group sent by the simulated communication device 6, and further confirms the cause of the fault based on the read simulated fault information, so as to implement the fault injection test of the functional safety fault detection mechanism of the device under test 1 of the cockpit system.

[0066] Example 4

[0067] This embodiment makes improvements on the cockpit system functional safety fault injection test system proposed in Embodiment 1 or 2. Figure 4 As shown, it is an architecture diagram of the cockpit system functional safety fault injection test system of this embodiment.

[0068] The cockpit system functional safety fault injection test system proposed in this embodiment includes a connected device under test 1 and a control module 2, and a simulated fault reporting interface 3 and a simulated fault communication interface 4 are arranged between the device under test 1 and the control module 2; the simulated fault reporting interface 3 is used to connect to an external power supply 5 that outputs a high-level signal or a low-level signal; the simulated fault communication interface 4 is used to communicate with an external simulated communication device 6; after the control module 2 receives the high-level signal input from the simulated fault reporting interface 3, the control module 2 exchanges fault information with the simulated communication device 6 via the simulated fault communication interface 4.

[0069] In this embodiment, the device under test 1 is a peripheral IC under test of the cockpit system.

[0070] In this embodiment, the first end of the control module 2 is connected to the fault reporting pin of the device under test 1, and is used to read the level state of the fault reporting pin of the device under test 1; the second end of the control module 2 is communicated with the device under test 1, and is used to read the fault information output by the device under test 1.

[0071] Furthermore, in this embodiment, a first relay K1 is arranged between the simulated fault reporting interface 3 and the device under test 1; a second relay K2 is arranged between the simulated fault communication interface 4 and the device under test 1; and the output end of the control module 2 is respectively connected to the input ends of the first relay K1 and the second relay K2.

[0072] As an exemplary illustration, the first relay K1 is arranged on the connection line between the first end of the control module 2 and the fault reporting pin of the device under test 1; the second relay K2 is arranged on the communication link between the second end of the control module 2 and the device under test 1.

[0073] As an exemplary illustration, the control module 2 includes an MCU (Microcontroller Unit). Furthermore, the output end of the control module 2 is connected to a digital-to-analog conversion module or a power amplifier module, and the control signal output by the control module 2 is transmitted to the input ends of the first relay K1 and the second relay K2 respectively after passing through the digital-to-analog conversion module or the power amplifier module.

[0074] The working process of the system in this embodiment is as follows: after the system is powered on, the system status is observed to determine that the entire system has no other faults and is in a normal working state. At this time, the control module 2 outputs a control signal to the first relay K1 and the second relay K2, and the device under test 1 is connected to the control module 2.

[0075] The analog communication device 6 is connected to the analog fault communication interface 4; wherein the analog communication device 6 is configured with the same communication parameters as the device under test 1 to simulate the communication between the device under test 1 and the control module 2, and a data group to be sent is pre-stored in the analog communication device 6, and the data group contains a kind of fault information that may violate the safety target. At the same time, the external power supply 5 is connected to the analog fault reporting interface 3, and a high level signal or a low level signal is input to maintain the simulated fault-free output state.

[0076] When performing a safety fault injection test, the control module 2 stops outputting control signals to the first relay K1 and the second relay K2, and the first relay K1 and the second relay K2 are disconnected. At this time, the control module 2 is disconnected from the device under test 1, and at the same time, the external power supply 5 continuously inputs a high-level signal or a low-level signal through the simulated fault reporting interface 3 to maintain a simulated fault-free output state, that is, to keep the state consistent with that of the fault reporting pin of the device under test 1 during fault-free output, and the system is still in normal working condition, ensuring that the two external devices used for simulated fault injection are integrated with the entire system and do not introduce other unexpected faults that may affect the operation of the system.

[0077] Furthermore, the simulated fault reporting interface 3 is connected through an external power supply 5, and a low-level signal or a high-level signal is input to simulate the output of a fault interruption notification. After receiving the fault interruption notification, the control module 2 triggers the reading of fault information, reads the data group sent by the simulated communication device 6, and further confirms the cause of the fault according to the read simulated fault information, thereby realizing a fault injection test of the functional safety fault detection mechanism of the cockpit system device under test 1.

[0078] The same or similar reference numerals correspond to the same or similar components;

[0079] The terms used to describe the positional relationship in the drawings are only used for illustrative purposes and should not be construed as limiting the present application;

[0080] Obviously, the above embodiments of the utility model are only examples for clearly explaining the utility model, and are not intended to limit the implementation methods of the utility model. For ordinary technicians in the relevant field, other different forms of changes or modifications can be made on the basis of the above description. It is not necessary and impossible to list all the implementation methods here. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the utility model should be included in the protection scope of the claims of the utility model.

Claims

1. A cockpit system functional safety fault injection test system, characterized in that: The device comprises a device under test (1) and a control module (2) connected to each other, wherein a simulated fault reporting interface (3) and a simulated fault communication interface (4) are provided between the device under test (1) and the control module (2); the simulated fault reporting interface (3) is used to connect to an external power supply (5) that outputs a high-level signal or a low-level signal; and the simulated fault communication interface (4) is used to communicate with a simulated communication device (6); After the control module (2) receives a high-level signal or a low-level signal input from the simulated fault reporting interface (3), the control module (2) is triggered to operate and to exchange fault information with the simulated communication device (6) via the simulated fault communication interface (4).

2. The cockpit system functional safety fault injection test system according to claim 1, characterized in that: The external power supply (5) comprises an adjustable voltage direct current power supply; the positive pole of the external power supply (5) is connected to the simulated fault reporting interface (3), and the negative pole of the external power supply (5) is grounded.

3. The cockpit system functional safety fault injection test system according to claim 2, characterized in that: The external power supply (5) comprises a GPR3060D DC regulated power supply.

4. The cockpit system functional safety fault injection test system according to claim 1, characterized in that: The simulated fault communication interface (4) comprises one of an I2C serial port, a UART serial port or an SPI serial port.

5. The cockpit system functional safety fault injection test system according to claim 1, characterized in that: The analog communication device (6) is provided with a first communication unit for performing data interaction with a terminal.

6. The cockpit system functional safety fault injection test system according to claim 5, characterized in that: The first communication unit includes one of a USB chip, a Bluetooth chip or a 4G chip.

7. The cockpit system functional safety fault injection test system according to claim 1, characterized in that: The control module (2) is provided with a second communication unit for performing data interaction with the terminal.

8. The cockpit system functional safety fault injection test system according to claim 7, characterized in that: The second communication unit includes a CAN transceiver or a LIN bus chip.

9. The cockpit system functional safety fault injection test system according to any one of claims 1 to 8, characterized in that: A first switch is provided between the simulated fault reporting interface (3) and the device under test (1); and a second switch is provided between the simulated fault communication interface (4) and the device under test (1).

10. The cockpit system functional safety fault injection test system according to any one of claims 1 to 8, characterized in that: A first relay is provided between the simulated fault reporting interface (3) and the device under test (1); a second relay is provided between the simulated fault communication interface (4) and the device under test (1); and the output end of the control module (2) is connected to the input ends of the first relay and the second relay, respectively.

Images