Control circuit, control system and control method for limp home function of vehicle

Abstract

The present disclosure relates to a control circuit for a limp home function of a vehicle. The control circuit comprises: a first port, which is configured to be used for receiving a failure output signal for indicating the execution of a limp home function; a drive module, which is configured to be used for driving a load of a vehicle that can execute the limp home function; a power supply module, which is configured to be used for providing a power supply signal for the drive module; and a second port, which is configured to be used for outputting a drive signal for driving the load. The power supply module is configured to provide the power supply signal by means of delaying for a predetermined time period, wherein the predetermined time period is determined on the basis of response parameters of a microcontroller unit and a functional safety control unit of the vehicle during the startup of the vehicle. The present disclosure further relates to a control system and control method for a limp home function of a vehicle, and a computer-readable storage medium.

Description

Control circuit, control system and control method for limp home function of vehicle Technical Field

[0001] The present invention relates to the technical field of electronic control of vehicles, and in particular to a control circuit, a control system, a control method and a computer-readable storage medium for a limp home function of a vehicle. Background Art

[0002] The limp home function is a crucial and important feature in vehicle body control. If a microcontroller unit (MCU) malfunctions while the vehicle is in motion, causing the system to malfunction, the limp home function allows direct control of functional safety-related loads, such as lights, doors, and wipers, ensuring the vehicle can safely return home or reach a nearby repair station in a load-efficient manner.

[0003] Therefore, a control design for the vehicle's limp home function is required. In current mainstream designs, this is often achieved using a System Basis Chip (SBC). An SBC is a comprehensive functional chip that integrates a power supply unit, monitoring unit, communication unit, signal output unit, and other components according to user needs. In an SBC with built-in functional safety features, for example, the SBC's watchdog unit monitors the operating status of the MCU. If the MCU hardware or software fails, resulting in a loss of the watchdog signal, the SBC outputs a Failure Output (FO) signal to activate the load that can perform the limp home function.

[0004] However, during the actual operation of the vehicle, when the vehicle is started, since the initialization completion time of the MCU is later than the initialization completion time of the SBC, the SBC cannot receive the dog feeding signal in time before the MCU initialization is completed, and outputs a fault output signal, thereby causing abnormal activation of related loads. Only after the MCU initialization is completed and the dog feeding signal is output normally, the abnormal activation of related loads will stop. For example, the short-term activation of headlights and wipers when starting the vehicle is a case of this.

[0005] Furthermore, in the event that the MCU actually fails, as explained above, the SBC will continuously output a fault output signal and cause long-term activation of the relevant loads, which can only be stopped after the entire vehicle is powered off. Therefore, this is not desirable, for example, when the vehicle does not require the functions of the relevant loads or when the vehicle is short of power.

[0006] Summary of the Invention

[0007] In order to solve the above problems, the present disclosure proposes a control circuit, control system and control method for the limp home function of a vehicle, which, on the one hand, can avoid abnormal activation of the load when the microcontroller initialization is not complete, and on the other hand, can realize manual deactivation of the load in the event of a microcontroller failure. It is particularly suitable for motor vehicle domain controllers (Domain Controllers), zone controllers (Zonal Controllers), etc.

[0008] An embodiment of the present disclosure provides a control circuit for a limp home function of a vehicle, comprising:

[0009] - a first port configured to receive a fault output signal indicating execution of a limp home function;

[0010] - a drive module configured to drive a load of the vehicle capable of performing a limp home function;

[0011] - a power module, configured to provide a power signal to the driving module;

[0012] - a second port configured to output a driving signal for driving a load,

[0013] The first input terminal of the driving module is connected to the power module, the second input terminal is connected to the first port, and the output terminal is connected to the second port. The power module is configured to provide a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded within the predetermined period of time, thereby making it impossible to drive the load within the predetermined period of time.

[0014] The predetermined period is determined based on response parameters of the vehicle's microcontroller unit and functional safety control unit during the vehicle's startup process. The functional safety control unit is configured to monitor the operating status of the microcontroller unit and output a fault output signal if an abnormal operating status is detected.

[0015] According to an embodiment of the present disclosure, the response parameter is initialization completion time, and the predetermined period is determined based on a difference between initialization completion times of the micro control unit and the functional safety control unit.

[0016] According to an embodiment of the present disclosure, the predetermined period is between 100 ms and 200 ms, or other time lengths.

[0017] According to an embodiment of the present disclosure, the power module can be manually disabled if the driver module continuously receives a fault output signal, wherein continuously receiving the fault output signal includes receiving the fault output signal for longer than a predetermined period.

[0018] According to an embodiment of the present disclosure, the power module can be controlled in a hardware and / or software manner.

[0019] According to an embodiment of the present disclosure, the power module has a power supply and a switching device, and the switching device can be controlled in a hardware and / or software manner.

[0020] According to an embodiment of the present disclosure, the power module can be manually disabled, including manually disabling via a switch device in the form of hardware or software in the power module.

[0021] According to an embodiment of the present disclosure, the driving module includes a transistor and / or a field effect transistor.

[0022] According to an embodiment of the present disclosure, the control circuit is arranged in a functional safety control unit or implemented as a peripheral circuit of the functional safety control unit.

[0023] An embodiment of the present disclosure provides a control system for a limp home function of a vehicle, comprising: a functional safety control unit configured to monitor the operating status of a microcontroller unit of the vehicle and output a fault output signal for instructing execution of the limp home function when an abnormal operating status is detected; a control circuit according to an embodiment of the present disclosure; a load capable of executing the limp home function; and a load control circuit configured for circuit control between the microcontroller and the control circuit and the load, wherein the control circuit receives the fault output signal and outputs a drive signal so as to drive the load in conjunction with the load control circuit.

[0024] Embodiments of the present disclosure provide a domain controller comprising the control circuitry described above according to the embodiments of the present disclosure. The control circuitry is suitable for integration into a control circuit. The features of the domain controller according to the embodiments of the present disclosure can be found in the description of the control circuitry above and are omitted for brevity.

[0025] An embodiment of the present disclosure provides a motor vehicle, including the control circuit and / or the domain controller described above according to the embodiment of the present disclosure. For the sake of brevity, further details are omitted. An embodiment of the present disclosure provides a method for controlling a limp home function of a vehicle, including:

[0026] - receiving a fault output signal for instructing execution of a limp home function;

[0027] - providing a power signal in a manner of delaying a predetermined period of time so as to shield the fault output signal during the predetermined period of time, thereby making it impossible to drive a load capable of performing a limp home function of the vehicle during the predetermined period of time;

[0028] The predetermined period is determined based on response parameters of the vehicle's microcontroller unit and functional safety control unit during the vehicle's startup process. The functional safety control unit is configured to monitor the operating status of the microcontroller unit and output a fault output signal if an abnormal operating status is detected.

[0029] According to an embodiment of the present disclosure, the response parameter is initialization completion time, and the predetermined period is determined based on a difference between initialization completion times of the micro control unit and the functional safety control unit.

[0030] According to an embodiment of the present disclosure, the predetermined period is between 100 ms and 200 ms, or other time lengths.

[0031] According to an embodiment of the present disclosure, providing the power signal in a manner delayed for a predetermined period includes: controlling the power supply for providing the power signal through a switching circuit, so that the power signal is output to the driving module with a delay of the predetermined period, thereby making the driving module unable to drive the load within the predetermined period.

[0032] An embodiment of the present disclosure provides a computer-readable storage medium having computer-executable instructions stored thereon. When the instructions are executed by a processor, the instructions are used to implement the method according to the embodiment of the present disclosure.

[0033] Embodiments of the present disclosure provide a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform a method according to an embodiment of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] To more clearly illustrate the technical solutions of the embodiments of the present disclosure, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some exemplary embodiments of the present disclosure, and those skilled in the art can derive other drawings based on these drawings without inventive effort.

[0035] FIG1 shows a schematic diagram of a control circuit for a limp home function of a vehicle according to an embodiment of the present disclosure;

[0036] FIG2 exemplarily shows a schematic diagram of a driver module for the control circuit according to FIG1 ;

[0037] FIG3 exemplarily shows a schematic diagram of a power supply module for the control circuit according to FIG1 ;

[0038] FIG4 shows a schematic diagram of a control system for a limp home function of a vehicle according to an embodiment of the present disclosure;

[0039] FIG5 shows a schematic flow chart of a method for controlling a limp home function of a vehicle according to an embodiment of the present disclosure;

[0040] FIG6 shows a schematic diagram of a computer-readable storage medium according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solutions and advantages of the present disclosure more apparent, the exemplary embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all the embodiments of the present disclosure, and it should be understood that the present disclosure is not limited to the exemplary embodiments described herein.

[0042] In this specification and the accompanying drawings, substantially the same or similar steps and elements are denoted by the same or similar reference numerals, and repeated descriptions of these steps and elements will be omitted. At the same time, in the description of the present disclosure, the terms "first", "second", etc. are only used to distinguish the description and are not to be understood as indicating or implying relative importance or ranking.

[0043] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present disclosure pertains. The terms used herein are for the purpose of describing embodiments of the present invention only and are not intended to limit the present invention.

[0044] FIG1 shows a schematic diagram of a control circuit 100 for a limp home function of a vehicle according to an embodiment of the present disclosure.

[0045] As shown As shown, the control circuit 100 includes:

[0046] - a first port P1 configured to receive a fault output signal indicating execution of a limp home function;

[0047] a drive module DM configured to drive a load of the vehicle capable of performing a limp home function;

[0048] - a power module PM, configured to provide a power signal to the driving module;

[0049] A second port P2 is configured to output a driving signal for driving a load.

[0050] The first input terminal of the driving module DM is connected to the power module PM, the second input terminal is connected to the first port P1 , and the output terminal is connected to the second port P2 .

[0051] When the vehicle is started, the functional safety control unit and microcontroller unit are powered on and initialized in sequence. The functional safety control unit is configured to monitor the operating status of the microcontroller unit and output a fault output signal if an abnormal operating state is detected. The functional safety control unit can be, for example, or include, a system basis chip (SBC).

[0052] For example, if the functional safety control unit is implemented as a system basis chip (SBC), the microcontroller (MCU) relies on the SBC for power, causing it to power on later than the SBC. Furthermore, the MCU is more complex than the SBC and takes longer to initialize. Consequently, the functional safety control unit and the MCU have different initialization completion times; more specifically, the MCU's initialization completion time is later than the functional safety control unit's.

[0053] The functional safety control unit monitors the operating status of the microcontroller using, for example, a built-in watchdog unit. Under normal operating conditions, the microcontroller periodically outputs a watchdog signal to the functional safety control unit, or watchdog unit. If the watchdog unit fails to receive the watchdog signal within a predetermined time window, it deems the microcontroller abnormal and outputs a fault output signal, instructing the vehicle to enter limp home mode and for the relevant loads to perform limp home functions.

[0054] Loads capable of executing the limp home function include functional safety-related loads, such as lights and windshield wipers. During normal vehicle operation, the microcontroller controls the activation of these loads. Even after entering the limp home mode, these loads can still be activated or execute the limp home function via the functional safety control unit. This prevents the vehicle from being unable to activate safety-critical loads due to a microcontroller failure, significantly improving vehicle safety.

[0055] However, as explained above, during the period when the functional safety control unit is initialized but the micro control unit is not initialized, the dog feeding signal cannot be output by the micro control unit and received by the functional safety control unit, causing the functional safety control unit to output a fault output signal.

[0056] When the functional safety control unit outputs a fault output signal, the first port P1 of the control circuit 100 receives the fault output signal and transmits the signal to the driving module DM.

[0057] The power supply module PM connected to the driving module DM provides a power signal, thereby providing a driving current and / or a driving voltage to the driving module.

[0058] When receiving the fault output signal and being provided with the power signal, the driving module DM outputs a driving signal and transmits it to a subsequent circuit including a load through the second port P2, thereby driving the load to perform a limp home function or activate the load.

[0059] Since the fault output signal generated by the failure of the microcontroller to complete initialization does not mean that the microcontroller actually has a fault, and it is not desired to cause a short-term abnormal activation of the load during the vehicle startup process due to the fault output signal, according to an embodiment of the present disclosure, the power signal is not provided within a predetermined period after the vehicle is started, or the power signal is provided with a delay of the predetermined period, so that the fault output signal generated within the predetermined time is shielded, so that the drive module DM does not output a drive signal capable of activating the load within the predetermined period.

[0060] According to an embodiment of the present disclosure, the predetermined period is determined based on response parameters of the micro control unit and the functional safety control unit of the vehicle during the startup process of the vehicle.

[0061] Preferably, the response parameter is the initialization completion time, and the predetermined period is determined based on the difference in initialization completion time between the microcontroller unit and the functional safety control unit. For example, when the initialization completion time of the microcontroller unit is 220 ms and the initialization completion time of the functional safety control unit is 100 ms, the predetermined period is 120 ms. Preferably, the predetermined period is between 100 ms and 200 ms, or another time length.

[0062] By providing the power signal with a delay of a predetermined period, even if the driving module DM receives a fault output signal from the functional safety control unit, it does not output a driving signal capable of activating the load, thereby avoiding abnormal activation of the load.

[0063] During vehicle operation, if a microcontroller unit fails, the functional safety control unit continuously outputs a fault output signal, resulting in prolonged activation of the load. This continuous output of the fault output signal, for example, includes outputting the fault output signal for a period longer than the predetermined period. According to an embodiment of the present disclosure, the power module can be manually disabled in this situation, so that the power signal is no longer provided, thereby deactivating or otherwise deactivating the load.

[0064] Manual disabling, for example, involves using a hardware or software switch in the power module. Hardware or software control in the power module is unaffected by microcontroller failures, effectively resolving the issue of having to exit limp home mode at a repair station in the event of a microcontroller failure. For example, if the power module has a physical hardware switch, the switch can be manually turned off, thereby simply shutting off the power signal.

[0065] According to an embodiment of the present disclosure, the power module can be controlled by hardware and / or software. Alternatively, the power module comprises a power supply and a switch device, and the switch device can be controlled by hardware and / or software.

[0066] In the case of hardware control, the function of the power module can be implemented by, for example, using the power supply combined with the switching circuit shown in FIG3 . In the case of software control, the function of the power module can be implemented by, for example, using a controllable delay signal input through an I / O port.

[0067] FIG. 2 shows, by way of example, a schematic diagram of a driver module for the control circuit according to FIG. 1 .

[0068] As shown in FIG. 2 , the driving module DM may include, for example, a transistor Q1 , a resistor R1 , a resistor R2 , and a capacitor C1 .

[0069] Transistor Q1 can be, for example, a PNP transistor. Its emitter is connected to the power module PM, its base is connected to the first port P1 via a circuit connected to resistor R1, and its collector is connected to the second port P1 and grounded via a circuit connected to capacitor C1. Capacitor C1 is connected in parallel with resistor R3. Resistors R1, R2, and R3, and capacitor C1, respectively, serve circuit design functions such as transistor protection, improving transistor cutoff reliability, limiting voltage levels, and stabilizing voltage.

[0070] In this example, the power signal is, for example, at a high level, and the fault output signal is, for example, at a low level. When the driver module DM receives a low-level fault output signal and is provided with a high-level power signal, transistor Q1 turns on and outputs a high-level drive signal capable of activating the load. When the driver module DM does not receive a fault output signal or a power signal, transistor Q1 turns off.

[0071] According to an embodiment of the present disclosure, the driver module DM outputs a drive signal based on the fault output signal and the power signal. In addition to the driver module shown in FIG2 , other design solutions that can achieve this also fall within the scope of the present disclosure. For example, the driver module DM may include a field effect transistor, such as a MOSFET.

[0072] FIG. 3 shows, by way of example, a schematic diagram of a power module PM for the control circuit according to FIG. 1 .

[0073] As shown in Figure 3, the power module PM may include, for example, a power supply BAT in the form of a battery and a switch circuit SC capable of implementing a delay function. The switch circuit SC may be implemented, for example, by a resistor-capacitor circuit (RC circuit).

[0074] In this example, the switch circuit SC includes resistors R4, R5, R6, R7, R8, and R9, a capacitor C2, and transistors Q2 and Q3. The base of transistor Q2 is connected to resistor R4 connected to a power supply BAT, a grounded resistor R5, and a grounded capacitor C2. The emitter of transistor Q2 is connected to grounded resistor R7. The emitter of transistor Q2 is connected to resistor R6 connected to a power supply BAT and one end of resistor R8. The other end of resistor R8 is connected to the base of transistor Q3. Transistor Q3 has an emitter connected to power supply BAT and a collector connected to grounded resistor R9, and outputs a power signal.

[0075] Power supply BAT charges capacitor C2 via resistor R4 and provides power signals to transistors Q2 and Q3. The voltage at the end of capacitor C2 connected to the base of transistor Q2 starts to rise from 0. For subsequent circuits, the time it takes to reach the effective voltage required by the subsequent circuits, t, can be considered the delay time. This delay time can be adjusted by adjusting the parameters of resistors R4, R5, and capacitor C2. When the base voltage of transistor Q2 meets the turn-on condition, transistor Q2 turns on and outputs a level signal. Transistor Q3 is used to achieve reliable switching in a similar manner. Other resistors in the circuit design play a role in protecting the transistors, improving their cutoff reliability, and limiting the level. The power module PM outputs the power signal after the delay time t.

[0076] According to an embodiment of the present disclosure, the power module can be controlled by hardware and / or software to complete the delay function and the manual disabling function. In addition to the power module shown in Figure 3, other design schemes that can achieve this also fall within the scope of the present disclosure.

[0077] FIG4 shows a schematic diagram of a control system 200 for a limp home function of a vehicle according to an embodiment of the present disclosure.

[0078] As shown in FIG. 4 , the control system 200 includes a functional safety control unit FS, a control circuit 100 according to an embodiment of the present disclosure (here, the embodiment according to FIG. 2 ), a load capable of performing a limp home function, and a load control circuit 300 .

[0079] The functional safety control unit FS is configured to monitor the operating state of the vehicle's microcontroller unit and output a fault output signal for instructing the execution of the limp home function if an abnormal operating state is detected. The functional safety control unit FS is, for example, a system basis chip or includes a system basis chip.

[0080] Two loads, namely a first load L1 and a second load L2 are shown as loads capable of performing a limp home function.

[0081] The load control circuit 300 is configured to control a circuit between a microcontroller, a control circuit, and a load. For example, it may include a first signal port S1 and a second signal port S2 connected to the microcontroller, and diodes D1-D4 connected upstream of the load. Users may adopt variations of the load control circuit as needed.

[0082] As can be seen from the figure, in load control circuit 300, the load can be driven not only by the drive signal output by control circuit 100, but also by control signals received from the microcontroller via first signal port S1 and second signal port S2. Therefore, during normal operation of the microcontroller, the load can be directly activated. During abnormal operation of the microcontroller, the load can be activated via control circuit 100 for the limp home function of a vehicle according to the present disclosure. The control system for the limp home function of a vehicle according to an embodiment of the present disclosure achieves load driving through the combined control circuit and load control circuit.

[0083] FIG5 shows a schematic flowchart of a method for controlling a limp home function of a vehicle according to an embodiment of the present disclosure.

[0084] As shown in Figure 5, in step S1, for example, a fault output signal instructing the limp home function to be executed is received from the functional safety control unit. In step S2, for example, a power signal is provided with a delay of a predetermined period after the vehicle is started, thereby shielding the fault output signal during the predetermined period, thereby preventing the vehicle's loads capable of executing the limp home function from being driven during the predetermined period. It should be understood that the order in which steps S1 and S2 occur is not limited.

[0085] For example, the predetermined period can be determined based on response parameters of the vehicle's microcontroller unit and the functional safety control unit during the vehicle startup process. The response parameter can be, for example, an initialization completion time, such that the predetermined period is determined based on the difference in initialization completion time between the microcontroller unit and the functional safety control unit. The predetermined period can be, for example, between 100 ms and 200 ms, or other time lengths.

[0086] Providing the power signal with a delay of a predetermined period may include, for example, controlling a power supply for providing the power signal by, for example, a switching circuit as shown in FIG. 3 , such that the power signal is output to the driving module with a delay of a predetermined period.

[0087] FIG6 shows a schematic diagram of a computer-readable storage medium 400 according to an embodiment of the present disclosure.

[0088] As shown in Figure 6, the computer storage medium 400 stores computer-readable instructions 401. When the computer-readable instructions 401 are executed by the processor, the method according to the embodiment of the present disclosure described above can be executed. The computer-readable storage medium in the embodiment of the present disclosure can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. The non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct memory bus random access memory (DR RAM). It should be noted that memory of the methods described herein is intended to include, but is not limited to, these and any other suitable types of memory. It should be noted that memory of the methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0089] It should be noted that the flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of the code, and the module, program segment, or a part of the code contains at least one executable instruction for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or can be implemented using a combination of dedicated hardware and computer instructions.

[0090] In general, various example embodiments of the present disclosure may be implemented in hardware or dedicated circuitry, software, firmware, logic, or any combination thereof. Certain aspects may be implemented in hardware, while other aspects may be implemented in firmware or software that may be executed by a controller, microprocessor, or other computing device. When various aspects of the embodiments of the present disclosure are illustrated or described as block diagrams, flow charts, or using some other graphical representation, it will be understood that the blocks, devices, systems, techniques, or methods described herein may be implemented, as non-limiting examples, in hardware, software, firmware, dedicated circuitry or logic, general-purpose hardware or a controller or other computing device, or some combination thereof.

[0091] The exemplary embodiments of the present disclosure described in detail above are merely illustrative and not restrictive. Those skilled in the art will appreciate that various modifications and combinations may be made to these embodiments or their features without departing from the principles and spirit of the present disclosure, and such modifications should fall within the scope of the present disclosure.

Claims

1. A control circuit for a limp home function of a vehicle, comprising: - a first port, configured to receive a fault output signal, the fault output signal indicating execution of a limp home function; - a driving module, configured to drive a load of the vehicle capable of performing the limp home function; - a power module, configured to provide a power signal to the driving module; - a second port, configured to output a driving signal for driving the load, The first input terminal of the driving module is connected to the power supply module, the second input terminal is connected to the first port, and the output terminal is connected to the second port, and The power module is configured to provide a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded within the predetermined period of time, thereby making it impossible for the control circuit to drive the load within the predetermined period of time, and Wherein, the predetermined time period is determined based on the response parameters of the microcontroller unit and the functional safety control unit of the vehicle during the startup process of the vehicle, and the functional safety control unit is configured to monitor the operating status of the microcontroller unit and output the fault output signal when an abnormal operating status is detected.

2. The control circuit according to claim 1, wherein: The response parameter is an initialization completion time, and the predetermined period is determined based on a difference in initialization completion time between the micro control unit and the functional safety control unit.

3. The control circuit according to claim 1 or 2, wherein: The predetermined period is between 100 ms and 200 ms.

4. The control circuit according to claim 1 or 2, wherein: The power module can be manually disabled in the event that the driver module continuously receives the fault output signal, wherein the continuously receiving the fault output signal includes receiving the fault output signal for longer than the predetermined period of time.

5. The control circuit according to claim 1 or 2, wherein: The power module can be controlled in a hardware and / or software manner.

6. The control circuit according to claim 5, wherein: The power module has a power supply and a switching device, which can be controlled by hardware and / or software.

7. The control circuit according to claim 4, wherein: The power module can be manually disabled including by means of a switch device in the form of hardware or software in the power module.

8. The control circuit according to claim 1, wherein: The driving module includes a triode and / or a field effect transistor.

9. The control circuit according to claim 1 or 2, wherein: The control circuit is arranged in the functional safety control unit or implemented as a peripheral circuit of the functional safety control unit.

10. A control system for a limp home function of a vehicle, comprising: a functional safety control unit configured to monitor the operating state of the micro control unit of the vehicle and output a fault output signal for indicating execution of a limp home function when an abnormal operating state is detected; A control circuit according to any one of claims 1 to 9; a load capable of performing said limp home function; and a load control circuit configured to control a circuit between the microcontroller and the control circuit and the load, The control circuit receives the fault output signal and outputs a driving signal so as to drive the load in combination with the load control circuit.

11. A domain controller comprising the control circuit according to any one of claims 1 to 9.

12. A motor vehicle comprising a control circuit according to any one of claims 1 to 9 and / or a domain controller according to claim 11.

13. A method for controlling a limp home function of a vehicle, comprising: - receiving a fault output signal for indicating execution of a limp home function; - providing a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded during the predetermined period of time, thereby making it impossible to drive a load of the vehicle capable of performing the limp home function during the predetermined period of time, Wherein, the predetermined time period is determined based on the response parameters of the microcontroller unit and the functional safety control unit of the vehicle during the startup process of the vehicle, and the functional safety control unit is configured to monitor the operating status of the microcontroller unit and output the fault output signal when an abnormal operating status is detected.

14. The control method according to claim 13, wherein: The response parameter is an initialization completion time, and the predetermined period is determined based on a difference in initialization completion time between the micro control unit and the functional safety control unit.

15. The control method according to claim 13 or 14, wherein: The predetermined period is between 100 ms and 200 ms.

16. The control method according to claim 13 or 14, wherein: The providing of the power signal in a manner of delaying a predetermined period of time comprises: The power supply for providing the power signal is controlled by the switch circuit so that the power signal is output to the driving module with a delay of a predetermined period of time, thereby making it impossible for the driving module to drive the load within the predetermined period of time.

17. A computer-readable storage medium having computer-executable instructions stored thereon, wherein the instructions are used to implement the method according to any one of claims 13 to 16 when executed by a processor.

Images