Load state holding circuit and vehicle

By introducing a monitoring and logic control unit between the MCU's GPIO output and the load control signal, the problem of unstable load state caused by MCU failure is solved, the load state is kept stable, and the safety and reliability of the system are improved, especially in vehicle applications, ensuring driving safety and comfort.

CN223890938UActive Publication Date: 2026-02-10BEIJING XIAOMA YIYI TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202520562587.9
Authority / Receiving Office
CN · China
Patent Type
Utility models(China)
Current Assignee / Owner
Filing Date
2025-03-27
Publication Date
2026-02-10
Estimated Expiration
2035-03-27

AI Technical Summary

Technical Problem

In existing technologies, when the working state of the load is determined by the GPIO output state of the MCU, a failure of the MCU (such as a hardware or software failure) can lead to an uncertain load state or complete shutdown, posing a safety hazard.

Method used

A monitoring unit and a logic control unit are introduced to monitor the MCU status and output an enable signal when a fault occurs. The load status is maintained or controlled by D flip-flops, AND gates, or OR gates. Combined with a delay module and a dual power supply module, the load is kept stable when the MCU fails.

Benefits of technology

It effectively solves the problem of unstable load status caused by MCU failure, improves the safety and reliability of the system, ensures the continuous operation of critical loads and emergency response capabilities, and improves vehicle driving safety and comfort.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN223890938U_ABST
    Figure CN223890938U_ABST
Patent Text Reader

Abstract

The utility model provides a load state holding circuit and a vehicle, and the circuit comprises a micro-control unit of which the output end outputs a control signal for controlling a load; the monitoring unit is electrically connected with the micro-control unit and used for monitoring the state of the micro-control unit, when the micro-control unit breaks down, the preset output end of the monitoring unit outputs a first signal, and when the micro-control unit does not break down, the preset output end of the monitoring unit outputs a second signal; the first input end of the logic control unit is electrically connected with the output end of the micro-control unit, the second input end of the logic control unit is electrically connected with the preset output end of the monitoring unit, the input end of the enabling switch unit is electrically connected with the output end of the logic control unit, and the output end of the enabling switch unit is electrically connected with a load. The problem that in the prior art, the working state of the load is determined by the GPIO output state of the MCU, and potential safety hazards exist under the condition that the MCU breaks down is solved.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of automobile electronics, in particular to a load state maintaining circuit and a vehicle. BACKGROUND

[0002] In an electronic controller, the load state is usually controlled by an MCU. When the GPIO output of the MCU is 1, the load is opened; when the GPIO output is 0, the load is closed (or the control logic is reversed, that is, when the GPIO output is 0, the load is opened, and when the GPIO output is 1, the load is closed). That is, the output state of the GPIO determines the working state of the load.

[0003] When the working state of the load is determined by the GPIO output state of the MCU, the following problems exist:

[0004] 1) When the MCU has a hardware failure, such as a power failure, chip overheating, etc., the MCU will stop working, at which time all GPIO outputs are 0, and all loads are closed.

[0005] 2) When the MCU has a software failure, such as a communication failure, software runaway, etc., the MCU will enter an uncertain state. At this time, the GPIO output may be 1 or 0, and the corresponding load will also enter an uncertain state, which may or may not work. CONTENT OF THE UTILITY MODEL

[0006] The main purpose of the present application is to provide a load state maintaining circuit and a vehicle, so as to solve the problem that the working state of the load is determined by the GPIO output state of the MCU in the prior art, and there is a safety hazard in the case of MCU failure.

[0007] In order to achieve the above purpose, according to one aspect of the present application, a load state maintaining circuit is provided, comprising: a micro control unit having an output end, the output end of the micro control unit outputs a control signal for controlling whether a load works; a monitoring unit electrically connected with the micro control unit, for monitoring the state of the micro control unit, in the case of failure of the micro control unit, a preset output end of the monitoring unit outputs a first signal, in the case of no failure of the micro control unit, the preset output end of the monitoring unit outputs a second signal; a logic control unit, a first input end of the logic control unit is electrically connected with the output end of the micro control unit, a second input end of the logic control unit is electrically connected with the preset output end of the monitoring unit, the logic control unit is used for outputting an enable signal according to the output signal of the micro control unit and the output signal of the monitoring unit; an enable switch unit, an input end of the enable switch unit is electrically connected with the output end of the logic control unit, and an output end of the enable switch unit is used for being electrically connected with the load.

[0008] Optionally, the logic control unit comprises a D flip-flop, an input end of the D flip-flop being connected to an output end of the micro control unit, a clock end of the D flip-flop being connected to an output end of the monitoring unit, an output end of the D flip-flop being connected to an input end of the enable switch unit, the load connected to the output end of the enable switch unit being a first type load, the first type load being a load whose working state is maintained after the micro control unit fails.

[0009] Optionally, the logic control unit comprises an AND gate circuit, a first input end of the AND gate circuit being connected to an output end of the micro control unit, a second input end of the AND gate circuit being connected to an output end of the monitoring unit, an output end of the AND gate circuit being connected to an input end of the enable switch unit, the load connected to the output end of the enable switch unit being a second type load, the second type load being a load that stops working after the micro control unit fails.

[0010] Optionally, the logic control unit comprises an OR gate circuit, a first input end of the OR gate circuit being connected to an output end of the micro control unit, a second input end of the OR gate circuit being connected to an output end of the monitoring unit, an output end of the OR gate circuit being connected to an input end of the enable switch unit, the load connected to the output end of the enable switch unit being a third type load, the third type load being a load that starts working after the micro control unit fails.

[0011] Optionally, the monitoring unit comprises a watchdog timer, a voltage detection chip, a power management IC and a temperature detection chip which are electrically connected.

[0012] Optionally, in the case that the load connected to the output end of the enable switch unit is the first type load, the load state maintaining circuit further comprises a delay module, the delay module being electrically connected between the micro control unit and the logic control unit.

[0013] Optionally, the delay module is an RC delay circuit or a transistor delay circuit.

[0014] Optionally, the load state maintaining circuit further comprises a main power supply module and a secondary power supply module, the main power supply module supplying power to the micro control unit, and the secondary power supply module supplying power to the logic control unit.

[0015] In order to achieve the above-mentioned purpose, according to an aspect of the present application, a vehicle is provided, comprising any one of the load state maintaining circuits and a load.

[0016] Optionally, the load comprises at least one of the following: a vehicle windshield wiper, a vehicle headlight, a vehicle warning light, a vehicle alarm loudspeaker, and a vehicle drive motor.

[0017] By applying the technical solution of the present application, the load state maintaining circuit provided by the present application is particularly suitable for application scenarios with strict requirements for safety and reliability, such as industrial equipment, vehicles, and automatic control systems. By introducing a logic control unit between the GPIO output of the microcontroller and the load control signal, the safety hazards and functional uncertainty caused by microcontroller failure are effectively solved, thereby significantly improving the overall safety and reliability of the system. The problem of unstable load state caused by microcontroller failure in traditional circuits is effectively solved, and the overall performance and user experience of the system are improved. In vehicle application scenarios, the application of this circuit greatly enhances the stability and safety of the system, which is of great significance for improving driving safety and comfort. BRIEF DESCRIPTION OF DRAWINGS

[0018] The drawings accompanying the specification of the present application form a part thereof and serve to provide further understanding of the present application, the illustrative embodiments of the present application and its description serve to explain the present application, and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 A structural schematic diagram of a load state maintaining circuit according to an embodiment of the present application is shown.

[0020] Figure 2 A structural schematic diagram of a load state maintaining circuit according to an embodiment of the present application is shown.

[0021] Among the above drawings, the following reference signs are included:

[0022] 10, microcontroller unit; 20, monitoring unit; 30, logic control unit; 40, enable switch unit; 50, load; 60, main power supply module; 70, auxiliary power supply module; 80, delay module. DETAILED DESCRIPTION

[0023] It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0024] In order to make the person skilled in the art better understand the technical scheme of the present application, the technical scheme in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by the person skilled in the art without creative labor should belong to the scope of protection of the present application.

[0025] It should be noted that the terms "first", "second" and the like in the description and claims of the present application and the above drawings are used to distinguish similar objects, and do not necessarily have to describe a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device including a series of steps or units does not have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0026] As introduced in the background, the prior art determines the working state of the load by the GPIO output state of the MCU, and in the case of failure of the MCU, there is a safety hazard. To solve the problem that the prior art determines the working state of the load by the GPIO output state of the MCU, and in the case of failure of the MCU, there is a safety hazard, the embodiments of the present application provide a load state retention circuit and a vehicle.

[0027] The technical scheme in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application.

[0028] Figure 1 For the structural diagram of the load state retention circuit provided in the embodiments of the present application, as shown in Figure 1 , in the present embodiment, a load state retention circuit is provided, which comprises:

[0029] The micro control unit 10 has an output end, and the output end of the micro control unit 10 outputs a control signal for controlling whether the load 50 works or not.

[0030] Among them, the micro control unit is the MCU (Micro Control Unit) of the vehicle.

[0031] The monitoring unit 20 is electrically connected with the micro control unit 10, and is used for monitoring the state of the micro control unit 10. In the case of failure of the micro control unit 10, a preset output end of the monitoring unit 20 outputs a first signal; in the case of no failure of the micro control unit 10, the preset output end of the monitoring unit 20 outputs a second signal.

[0032] The monitoring unit can be a watchdog timer, a voltage detection chip, a power management IC, and a temperature detection chip. The watchdog timer includes Microchip MCP134, TI LM3925, and NXP PCW3101. The voltage detection chip includes TI TPS62160 and Maxim MAX812. The temperature detection chip includes TI TMP117 and ADI ADT7410. The power management IC includes NXP MC33926.

[0033] The logic control unit 30 is electrically connected with the output end of the micro control unit 10 and the preset output end of the monitoring unit 20. The logic control unit 30 is used for outputting an enable signal according to the output signal of the micro control unit 10 and the output signal of the monitoring unit 20.

[0034] In the case of failure of the micro control unit, the monitoring unit outputs a failure flag signal to the logic control unit. The logic control unit outputs the enable signal according to the output signal of the micro control unit, the failure flag signal, and the type of the connected load, so as to control the on-off of the enable switch, and ensure that the vehicle load can keep a safe state in the case of failure of the MCU, and further ensure the driving safety of the vehicle.

[0035] The enable switch unit 40 is electrically connected with the output end of the logic control unit 30, and the output end of the enable switch unit 40 is electrically connected with the load 50.

[0036] The enable switch unit controls whether the load works by receiving the enable signal output by the logic control unit.

[0037] The utility model discloses a micro control unit can ensure in the failure, through the cooperative work of monitoring unit and logic control unit, steady control load state, promote system reliability. Through the real -time monitoring of micro control unit's state of monitoring unit, the intelligent judgment of logic control unit, even in the extreme case of micro control unit failure, can ensure the stability of load state, avoids the load misoperation of the main control unit failure, and the stability and security of system are improved obviously. Solve the prior art by the GPIO output state of MCU determines the working state of load, in the case where the MCU fails, there is the problem of security risk. Especially in the vehicle electronic system, guarantee the driving safety and comfort.

[0038] Some examples, as shown in Figure 2 The above-mentioned logic control unit 30 includes: D flip-flop, the input end of the above-mentioned D flip-flop is connected with the output end of the above-mentioned micro control unit 10, the clock end of the above-mentioned D flip-flop is connected with the output end of the above-mentioned monitoring unit 20, the output end of the above-mentioned D flip-flop is connected with the input end of the above-mentioned enable switch unit 40, and the above-mentioned load connected with the output end of the above-mentioned enable switch unit 40 is the first type load, and the above-mentioned first type load is the load whose working state is kept after the failure of the above-mentioned micro control unit 10.

[0039] Further, as shown in Figure 2 In the case where the above-mentioned load connected with the output end of the above-mentioned enable switch unit 40 is the above-mentioned first type load, the above-mentioned load state retention circuit further includes delay module 80, and the above-mentioned delay module 80 is electrically connected between the above-mentioned micro control unit 10 and the above-mentioned logic control unit 30. The delay module is used to make the change of the enable signal output by the logic control unit 30 later than the change of the failure signal output by the monitoring unit 20, so that the rapid triggering of the failure signal can be avoided, and the error switching of the load state is avoided.

[0040] Specifically, the first type load is specifically some load that does not work all the time, for example, automobile wiper, automobile headlight and the like, and this kind of load is usually opened in some special scene when needed, but once opened, it is not desired to be closed. For example, the wiper needs to be opened in the rainy day, and the car light needs to be opened at night, and if the MCU of the automobile controller fails at this time, it is still desired that the wiper and the car light can work normally, otherwise the driving will be dangerous, and if the MCU fails when the car light or the wiper is closed, it is desired that the car light and the wiper are kept closed, so as to reduce unnecessary energy consumption.

[0041] Therefore, for this kind of load, it is desired that the working state of the load keeps the state before the failure of the MCU when the failure occurs. Before the failure of the MCU, the first type load works, so that the first type load can still work after the failure, and before the failure of the MCU, the first type load is closed, so that the first type load is still closed after the failure.

[0042] Add a holding circuit composed of a D flip-flop between the GPIO of the MCU and the control signal of the first type of load, and use the fault signal detected by the monitoring unit of the MCU as the trigger signal of the D flip-flop, the GPIO output signal of the MCU as the input signal of the flip-flop, and the control signal of the load as the output signal of the D flip-flop.

[0043] Taking the D flip-flop as an example, CP = fault signal (CP = 1 when the MCU is normal, and CP = 0 when the MCU fails), D = MCU_GPIO, and Q = Load_Control.

[0044] When CP = 1, Q = D; when CP = 0, Q = Q0.

[0045] When the MCU fails, the state of MCU_GPIO will change immediately at the moment when CP changes from 1 to 0. In order to ensure that Q maintains the state of GPIO before CP changes to 0, a delay module needs to be added between the micro control unit 10 and the logic control unit 30, as shown in the figure, to ensure that Q0 is always the state output by the MCU before CP changes to 0. Figure 2

[0046] The above design can achieve that when the MCU is not faulty, the state of the load is determined by the state of the GPIO; and when the MCU fails, the working state of the load remains the same as before the failure occurs, i.e., if the load is on, it will remain on after the MCU fails; and if the load is off, it will remain off after the MCU fails. This design effectively prevents the unexpected disconnection of the load caused by the failure of the micro control unit, ensures the continuous operation of the critical load, and ensures that the working state of the load can be locked when the micro control unit fails, preventing the instantaneous change of the load state, which is crucial for maintaining the continuous operation of critical loads (such as vehicle safety systems). The problem of accidental shutdown of critical loads due to signal interruption after the micro control unit fails is solved. Through the locking function of the D flip-flop, even if the main control unit fails, the normal working state of the load can be maintained, ensuring the continuous and stable operation of the system.

[0047] In addition to the D flip-flop, JK flip-flops and SR flip-flops can also be used. These flip-flops can store and maintain the state of the input signal when receiving a valid clock or trigger signal, and the state will not change even if the trigger signal disappears. The D flip-flop is the most common choice because it can simply store or maintain the state of the input signal according to the clock signal.

[0048] ​Alternatively, transistors can be used to maintain the operating state of the first type of load. However, using transistors to implement the holding function is relatively complex and generally requires combining the switching characteristics of the transistors with a feedback loop. For example, a bistable circuit composed of NPN and PNP transistors can be designed to maintain the state through a positive feedback mechanism. When the MCU is working normally, the load is controlled by the transistors. Once the MCU fails, the positive feedback mechanism locks the transistors in the current state, thereby maintaining the operating state of the load.

[0049] Gate circuits can also be used to maintain the operating state of Type I loads. Maintaining the state stably using gate circuits is more complex than using transistors or flip-flops directly, and usually requires additional storage elements, such as latches. An SR latch can be constructed by combining NAND gates and NOR gates to achieve the state maintenance function.

[0050] In some instances, such as Figure 1 As shown, the logic control unit 30 includes an AND gate circuit. The first input terminal of the AND gate circuit is connected to the output terminal of the microcontroller unit 10. The second input terminal of the AND gate circuit is connected to the output terminal of the monitoring unit 20. The output terminal of the AND gate circuit is connected to the input terminal of the enable switch unit 40. The load connected to the output terminal of the enable switch unit 40 is a second type of load. The second type of load is the load that stops working after the microcontroller unit 10 fails.

[0051] The second type of load can be loads that are critical to personal safety, such as crane motors and car drive motors. It is safest to keep this type of load off. In any scenario, if the MCU malfunctions, it is desirable to stop working immediately.

[0052] Therefore, a hold circuit consisting of AND gates needs to be added between the MCU's GPIO and the load's control signal.

[0053] Y = A & B, A = fault signal (A = 1 when the MCU is normal, A = 0 when the MCU is faulty), B = MCU_GPIO, Y = Load_Control;

[0054] When A = 1, Y = B; when A = 0, Y = 0.

[0055] The above design can achieve that when the MCU is not faulty, the load state is determined by the state of the GPIO of the MCU; and when the MCU is faulty, the load is immediately kept off. By using the AND gate circuit, the non-critical load and the safety load are timely cut off when the micro control unit is faulty, the personal safety, the energy saving and the circuit safety are ensured. The application of the AND gate circuit enables the second type of load to be immediately cut off when the micro control unit is faulty, and improves the overall safety and energy efficiency of the system. The problem that the second type of load may continue to run when the micro control unit is faulty, resulting in personal safety, energy waste and circuit safety hazard is solved. Through the logic judgment of the AND gate circuit, intelligent management of the load in the fault state is achieved, and the self-protection ability of the system is enhanced.

[0056] In addition, in addition to using the AND gate circuit, a transistor can also be used. An NPN or PNP transistor can be used as a switch. The base of the transistor receives the combination of the fault signal and the control signal of the MCU. When a fault occurs, the transistor is locked in the off state, and the load is turned off.

[0057] In some examples, as shown in Figure 1 The logic control unit 30 includes an OR gate circuit. The first input end of the OR gate circuit is connected to the output end of the micro control unit 10. The second input end of the OR gate circuit is connected to the output end of the monitoring unit 20. The output end of the OR gate circuit is connected to the input end of the enable switch unit 40. The load connected to the output end of the enable switch unit 40 is a third type of load. The third type of load is a load that starts to work after the micro control unit 10 is faulty.

[0058] The third type of load can be some alarm type of load, such as the warning light of a car, a loudspeaker for alarm, etc. This type of load hopes to be turned on immediately as soon as the MCU is faulty, so as to prompt the user. The use of the OR gate circuit can determine the load state according to the control signal when the MCU is working normally; and when a fault occurs, the load is ensured to be turned on due to the input of the fault signal. The emergency load is automatically activated when the micro control unit is faulty, and the emergency response ability of the system is enhanced. The selection of the OR gate circuit as the logic control unit of the third type of load ensures that the emergency load can be automatically started when the micro control unit is faulty, provides necessary emergency support for the system, and enhances the emergency response ability and reliability of the system. The problem that the emergency load cannot be started in time when the micro control unit is faulty is solved. Through the logic judgment of the OR gate circuit, even in the case of failure of the main control unit, the third type of load can be activated to provide necessary functional support for the system, and the safety of system operation in an emergency is ensured.

[0059] In addition, a holding circuit composed of logic devices can be added between the GPIO of the MCU and the control signal of the load, as shown below:

[0060] A = fault signal (A = 1 when the MCU is normal, A = 0 when the MCU fails) B = MCU_GPIO, Y = Load_Control;

[0061] When A = 1, Y = B; when A = 0, Y = 1.

[0062] The above design can be implemented, without failure, the load state is determined by the state of the GPIO; after the failure occurs, the load is immediately kept on.

[0063] In addition, a transistor can be used as a logic control unit, the base of the transistor receives the combination of the fault signal and the MCU control signal, and the transistor is ensured to be turned on when a fault occurs, and the third type of load is turned on. For example, a PNP transistor is used, and the base of the transistor receives an inverted fault signal. When a fault occurs, the inverted signal makes the transistor conduct, and the load is powered.

[0064] In some examples, the monitoring unit includes a watchdog timer, a voltage detection chip, a power management IC, and a temperature detection chip connected electrically.

[0065] Among them, the watchdog timer includes Microchip MCP134, TI LM3925, NXP PCW3101, the voltage detection chip includes TI TPS62160, Maxim MAX812, the temperature detection chip includes TI TMP117, ADI ADT7410, and the power management IC includes NXP MC33926.

[0066] The integrated design of the monitoring unit can more comprehensively and accurately monitor the working state of the micro control unit and the environmental conditions through the cooperative work of multiple sensors, discover potential fault risks in time, and improve the fault detection ability and response speed of the system. The problem that a single monitoring mechanism may not be able to comprehensively detect the micro control unit failure is solved, and through the integration of multiple monitoring means, monitoring can be performed from multiple dimensions such as time, voltage, power management and temperature, which significantly improves the accuracy and timeliness of fault detection, and provides reliable data support for intelligent management of the load state.

[0067] In some examples, the delay module is an RC delay circuit or a transistor delay circuit.

[0068] The RC delay circuit, consisting of an RC network with a resistor and a capacitor connected in series, achieves a simple and low-cost delay effect. The transistor delay circuit, using a transistor as a switch, controls the transistor's on-time to achieve the delay, offering a more precise delay than the RC network. The use of delay modules effectively filters transient interference in the microcontroller's output signal, ensuring the stability and accuracy of the control signals for critical loads and improving the overall stability and reliability of the system. It solves the problem of transient interference in the microcontroller's output signal potentially causing malfunctions in critical loads. Through the signal filtering effect of the delay module, even in environments with signal fluctuations or interference, the normal operation of critical loads is ensured, improving the system's anti-interference capability and stability.

[0069] Delay modules can also utilize dedicated delay chips, such as TI's TPS62165, which provides precise delay functionality. These chips typically feature programmable delay times and low power consumption, making them suitable for applications requiring precise control over delay times.

[0070] In some instances, such as Figure 1 and Figure 2 As shown, the load state holding circuit further includes a main power supply module 60 and a secondary power supply module 70. The main power supply module 60 supplies power to the microcontroller unit 10, and the secondary power supply module 70 supplies power to the logic control unit 30.

[0071] Specifically, the power supply for the MCU and the power supply for the logic control unit are not from the same source. This ensures that the logic control unit can continue to operate normally even if the MCU experiences a power failure. The main power supply module powers the microcontroller, while the auxiliary power supply module powers the logic control unit. This dual-power supply design ensures that the logic control unit can still operate normally even if the main power supply fails, improving the fault tolerance of the entire system. The dual-power supply design also ensures that even if the main power supply fails, the logic control unit can continue to operate using the auxiliary power supply module, maintaining stable control of the load state and significantly improving the system's fault tolerance and stability. This solves the problem that a power failure in a single power supply mode could lead to the failure of the entire system. By introducing the auxiliary power supply module, even if the main power supply fails, the normal operation of the logic control unit can be guaranteed, improving the overall stability and reliability of the system.

[0072] This utility model also provides a vehicle, including: any of the above-described load state holding circuits and a load.

[0073] In some instances, the load includes at least one of the following: vehicle windshield wipers, vehicle headlights, vehicle warning lights, vehicle alarm speakers, and vehicle drive motors.

[0074] From the above description, it can be seen that the above-mentioned embodiments of the present application achieve the following technical effects:

[0075] The above load state maintaining circuit of the utility model, include: micro control unit, have output, the output of above-mentioned micro control unit output control signal whether the control of load works;Monitoring unit, above-mentioned monitoring unit with above-mentioned micro control unit electricity is connected, for monitoring the state of above-mentioned micro control unit, in the case of the failure of above-mentioned micro control unit, the preset output of above-mentioned monitoring unit exports first signal, in the case of the failure of above-mentioned micro control unit, the preset output of above-mentioned monitoring unit exports second signal;Logic control unit, the first input of above-mentioned logic control unit with the output of above-mentioned micro control unit electricity is connected, the second input of above-mentioned logic control unit with the preset output of above-mentioned monitoring unit electricity is connected, above-mentioned logic control unit is used for according to the output signal of above-mentioned micro control unit and the output signal of above-mentioned monitoring unit, exports enable signal;Enable switch unit, the input of above-mentioned enable switch unit with the output of above-mentioned logic control unit electricity is connected, the output of above-mentioned enable switch unit is used for with above-mentioned load electricity is connected.Through the introduction logic control unit between the GPIO output of microcontroller and load control signal, effectively solve the security risks and functional uncertainty problem caused by microcontroller failure, thereby significantly improve the overall safety and reliability of system.Effectively solve the load state instability problem caused by micro control unit failure in traditional circuit, improve the overall performance and user experience of system.In the application scene such as vehicle, the application of the circuit greatly enhances the stability and safety of system, has important significance for improving driving safety and comfort.

[0076] The above only for the preferred embodiment of the present application has, and does not limit the present application, for the person skilled in the art, the present application can have various changes and changes.For any modification, equivalent replacement, improvement, etc.in the spirit and principles of the present application, should be included in the protection scope of the present application.

Claims

1. A load state holding circuit, characterized in that, include: A microcontroller unit has an output terminal, and the output terminal of the microcontroller unit outputs a control signal to control whether the load is working. A monitoring unit is electrically connected to the microcontroller unit and is used to monitor the status of the microcontroller unit. In the event of a fault in the microcontroller unit, the monitoring unit outputs a first signal at its preset output terminal, and in the event that the microcontroller unit does not malfunction, the monitoring unit outputs a second signal at its preset output terminal. A logic control unit, wherein a first input terminal of the logic control unit is electrically connected to the output terminal of the microcontroller, and a second input terminal of the logic control unit is electrically connected to the preset output terminal of the monitoring unit, and the logic control unit is used to output an enable signal according to the output signal of the microcontroller and the output signal of the monitoring unit; An enable switch unit is provided, wherein the input terminal of the enable switch unit is electrically connected to the output terminal of the logic control unit, and the output terminal of the enable switch unit is used to be electrically connected to the load.

2. The load state holding circuit according to claim 1, characterized in that, The logic control unit includes: The D flip-flop has its input connected to the output of the microcontroller unit, its clock terminal connected to the output of the monitoring unit, and its output connected to the input of the enable switch unit. The load connected to the output of the enable switch unit is a first-type load, which is a load whose operating state is maintained after a failure of the microcontroller unit.

3. The load state holding circuit according to claim 1, characterized in that, The logic control unit includes: An AND gate circuit is provided, wherein the first input terminal of the AND gate circuit is connected to the output terminal of the microcontroller unit, the second input terminal of the AND gate circuit is connected to the output terminal of the monitoring unit, the output terminal of the AND gate circuit is connected to the input terminal of the enable switch unit, and the load connected to the output terminal of the enable switch unit is a second type of load, which is a load that stops working after the microcontroller unit fails.

4. The load state holding circuit according to claim 1, characterized in that, The logic control unit includes: An OR gate circuit is provided, wherein the first input terminal of the OR gate circuit is connected to the output terminal of the microcontroller unit, the second input terminal of the OR gate circuit is connected to the output terminal of the monitoring unit, the output terminal of the OR gate circuit is connected to the input terminal of the enable switch unit, and the load connected to the output terminal of the enable switch unit is a third type of load, which is the load that starts working after the microcontroller unit fails.

5. The load state holding circuit according to claim 1, characterized in that, The monitoring unit includes a watchdog timer, a voltage detection chip, a power management IC, and a temperature detection chip that are electrically connected.

6. The load state holding circuit according to claim 2, characterized in that, When the load connected to the output of the enable switch unit is the first type of load, the load state holding circuit further includes a delay module, which is electrically connected between the microcontroller unit and the logic control unit.

7. The load state holding circuit according to claim 6, characterized in that, The delay module is an RC delay circuit or a transistor delay circuit.

8. The load state holding circuit according to claim 1, characterized in that, The load state holding circuit also includes: The system includes a main power supply module and a secondary power supply module. The main power supply module supplies power to the microcontroller unit, and the secondary power supply module supplies power to the logic control unit.

9. A vehicle, characterized in that, include: The load state holding circuit and the load as described in any one of claims 1 to 8.

10. The vehicle according to claim 9, characterized in that, The load includes at least one of the following: Vehicle windshield wipers, vehicle headlights, vehicle warning lights, vehicle alarm speakers, and vehicle drive motors.