Multi-level hardware monitoring system for vehicle, and vehicle

Abstract

Provided in the present application are a multi-level hardware monitoring system for a vehicle, and a vehicle. The multi-level hardware monitoring system comprises: a control module, the control module comprising a first local monitoring module, and the first local monitoring module being used for monitoring the operating state of the control module; an intelligent driving control module, the control module performing information interaction with the intelligent driving control module; and a cabin control module, the cabin control module performing information interaction with the control module and the intelligent driving control module. When it is determined that the operating state of the control module is abnormal, the control module generates a control instruction, wherein the control instruction at least comprises a shutdown instruction, and the control instruction is used for controlling the intelligent driving control module and the cabin control module to perform a shutdown operation. Thus, the present application improves the safety and reliability of hardware systems of central computing platforms of vehicles.

Description

Multi-level hardware monitoring system for vehicle, vehicle TECHNICAL FIELD

[0001] The present application relates to the technical field of vehicles, in particular to a multi-level hardware monitoring system for vehicle and vehicle. The present application claims priority to the patent application with the application number of 202410822025.3, the title of "Multi-level hardware monitoring system for vehicle and vehicle", which was filed with the State Intellectual Property Office of China on June 24, 2024. BACKGROUND

[0002] With the development of intelligent and networked new energy vehicles, central computing has become a key function and core selling point of vehicles. Central computing includes intelligent driving and intelligent cockpit functions, and provides comprehensive and powerful computing and processing capabilities for vehicles, saves controller space area and development and upgrading costs. The central computing platform has the characteristics of large data volume, multiple types, and multiple interactive objects, and has the following problems:

[0003] 1. The central computing master control chip requires high hardware security. The failure of any master control chip will cause functional failure, affecting driving safety and experience, and a high-reliability master control chip security monitoring scheme is needed.

[0004] 2. The central computing power system is safe. The failure of any master control chip power monitoring chip will cause the central computing safety function to fail, affecting driving safety and experience, and a high-reliability power safety monitoring scheme is needed. SUMMARY

[0005] The main purpose of the present application is to provide a multi-level hardware monitoring system for vehicle and vehicle to solve the problem of lack of monitoring of the safety of the central computing master control chip in the prior art.

[0006] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a multi-level hardware monitoring system for vehicle is provided. The multi-level hardware monitoring system comprises: a control module, the control module comprising a first local monitoring module, the first local monitoring module being configured to monitor the running state of the control module; an intelligent driving control module, the control module being configured to interact with the intelligent driving control module; a cockpit control module, the cockpit control module being configured to interact with the control module and the intelligent driving control module; wherein, in a case where it is determined that the running state of the control module is abnormal, the control module generates a control instruction, wherein the control instruction at least comprises: a shutdown instruction, the control instruction being configured to control the intelligent driving control module and the cockpit control module to perform a shutdown operation.

[0007] Optionally, the intelligent driving control module comprises a second local monitoring module, the second local monitoring module is configured to monitor an operation state of the intelligent driving control module, and the intelligent driving control module generates a first stop instruction for controlling the control module to stop sending the control instruction in a case where the operation state of the intelligent driving control module is determined to be abnormal.

[0008] Optionally, the cockpit control module comprises a third local monitoring module, the third local monitoring module is configured to monitor an operation state of the cockpit control module, and the cockpit control module generates a second stop instruction for controlling the control module to stop sending the control instruction in a case where the operation state of the cockpit control module is determined to be abnormal.

[0009] Optionally, the intelligent driving control module generates a first alarm instruction for controlling the cockpit control module to perform an alarm operation in a case where the operation state of the intelligent driving control module is determined to be abnormal, and the cockpit control module generates a second alarm instruction for controlling the intelligent driving control module to perform the alarm operation in a case where the operation state of the cockpit control module is determined to be abnormal.

[0010] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a first monitoring power module, the first monitoring power module is configured to supply power to the control module, and the first monitoring power module comprises a first watchdog module, the first watchdog module is configured to monitor an operation state of the control module, and the first watchdog module generates a first reset instruction for controlling the control module to perform a reset operation in a case where the operation state of the control module is determined to be abnormal.

[0011] Optionally, the first monitoring power module further comprises a first power diagnosis module, the first power diagnosis module is configured to monitor a power state of the first monitoring power module, and the first power diagnosis module generates a first self-reset instruction for controlling the first power diagnosis module to perform a self-reset operation in a case where at least one of overcurrent, overvoltage and overtemperature occurs in the power state of the first monitoring power module.

[0012] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a second monitoring power module, the second monitoring power module is configured to supply power to the intelligent driving control module, and the second monitoring power module comprises a second watchdog module, the second watchdog module is configured to monitor an operation state of the intelligent driving control module, and the second watchdog module generates a second reset instruction for controlling the intelligent driving control module to perform a reset operation in a case where the operation state of the intelligent driving control module is determined to be abnormal.

[0013] Optionally, the second monitoring power module further comprises a second power diagnosis module, the second power diagnosis module is configured to monitor a power state of the second monitoring power module, and the second power diagnosis module generates a second self-reset instruction for controlling the second power diagnosis module to perform a self-reset operation in a case where at least one of overcurrent, overvoltage and overtemperature occurs in the power state of the second monitoring power module.

[0014] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a third monitoring power module, the third monitoring power module is configured to supply power to the cabin control module, and the third monitoring power module comprises a third watchdog module, the third watchdog module is configured to monitor a running state of the cabin control module, and the third watchdog module generates a third reset instruction for controlling the cabin control module to perform a reset operation in a case where the running state of the cabin control module is abnormal.

[0015] Optionally, the third monitoring power module further comprises a third power diagnosis module, the third power diagnosis module is configured to monitor a power state of the third monitoring power module, and the third power diagnosis module generates a third self-reset instruction for controlling the third power diagnosis module to perform a self-reset operation in a case where at least one of overcurrent, overvoltage and overtemperature occurs in the power state of the third monitoring power module.

[0016] Optionally, the multi-level hardware monitoring system for the vehicle further comprises an intelligent driving peripheral module, and the intelligent driving control module generates a first shutdown instruction for controlling the intelligent driving peripheral module to perform a shutdown operation in a case where the running state of the intelligent driving control module is abnormal.

[0017] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a cabin peripheral module, and the cabin control module generates a second shutdown instruction for controlling the cabin peripheral module to perform a shutdown operation in a case where the running state of the cabin control module is abnormal.

[0018] According to another aspect of the present application, a vehicle is provided, comprising a multi-level hardware monitoring system for the vehicle, which is the multi-level hardware monitoring system for the vehicle in the above-mentioned embodiments.

[0019] By applying the technical solution of the present application, information interaction is performed among the control module, the intelligent driving control module and the cabin control module, the first local monitoring module is arranged to monitor the running state of the control module in real time, abnormal conditions can be found in time, and measures such as a shutdown instruction can be taken rapidly through the control instruction to avoid potential safety risks and improve the safety and reliability of the central computing platform hardware system of the vehicle. BRIEF DESCRIPTION OF DRAWINGS

[0020] The drawings constituting a part of the specification illustrate the exemplary embodiments of the present application and serve to explain the present application, and do not constitute an undue limitation on the present application. In the drawings:

[0021] Fig. 1 shows a structural schematic diagram of a multi-level hardware monitoring system for a vehicle according to the present application;

[0022] Fig. 2 shows a flow schematic diagram of a multi-level hardware monitoring method for a vehicle according to the present application.

[0023] Among them, the above drawings include the following reference signs:

[0024] 10, control module;

[0025] 11, first local monitoring module;

[0026] 20, intelligent driving control module;

[0027] 21, second local monitoring module;

[0028] 30, cabin control module;

[0029] 31, third local monitoring module;

[0030] 40, first monitoring power module;

[0031] 41, first watchdog module; 42, first power supply diagnosis module;

[0032] 50, second monitoring power module;

[0033] 51, second watchdog module; 52, second power supply diagnosis module;

[0034] 60, third monitoring power module;

[0035] 61, third watchdog module; 62, third power supply diagnosis module;

[0036] 70, intelligent driving peripheral module;

[0037] 80, cabin peripheral module. DETAILED DESCRIPTION

[0038] It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict. The present application will be described in detail below with reference to the drawings and in combination with the embodiments.

[0039] It is to be understood that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprises" and / or "comprising," when used in this specification, specify the presence of stated features, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, steps, operations, elements, components, and / or groups thereof.

[0040] It should be noted that the terms "first", "second", and the like, used in the specification and the claims herein, are used to distinguish between similar objects, and are not necessarily used to describe a particular sequential or chronological order. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the embodiments of the application described herein are, for example, capable of orderly implementation in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprise", "comprising", "include", "including", and their conjugates, as used herein, are intended to be open-ended, i.e., to mean including, but not limited to. It will be understood by those within the art that various modifications can be made to the embodiments of the application herein described and that such modifications are intended to be within the scope of the application. For example, the steps of the methods described herein can be performed in a different order than that described herein.

[0041] Reference will now be made to the drawings to describe in more detail exemplary embodiments of the application. These exemplary embodiments are illustrative only and not limiting of the application as recited in the claims. It should be understood that these embodiments can be combined in whole or in part. As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items. Although these exemplary embodiments can be described and illustrated separately, these exemplary embodiments can be implemented in combination with each other. The terminology used herein is for the purpose of describing the particular exemplary embodiments only and is not intended to be limiting. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprises" and / or "comprising", when used in this specification, specify the presence of stated features, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, steps, operations, elements, components, and / or groups thereof.

[0042] It should be noted that the master chip includes a control chip, an intelligent driving master chip, a cockpit master chip, the control chip is the control module 10 of the application, the intelligent driving master chip is the intelligent driving control module 20 of the application, and the cockpit master chip is the cockpit control module 30 of the application. Embodiment 1

[0043] In combination with FIGS. 1-2, according to specific embodiments of the application, a multi-level hardware monitoring system for a vehicle is provided.

[0044] Specifically, as shown in FIG. 1, the multi-level hardware monitoring system for the vehicle comprises: a control module 10, the control module 10 comprising a first local monitoring module 11 for monitoring the running state of the control module 10; an intelligent driving control module 20, the control module 10 and the intelligent driving control module 20 performing information interaction; a cabin control module 30, the cabin control module 30 and the control module 10 and the intelligent driving control module 20 performing information interaction; wherein, in the case that the running state of the control module 10 is determined to be abnormal, the control module 10 generates a control instruction, wherein the control instruction at least comprises: a shutdown instruction, the control instruction being used to control the intelligent driving control module 20 and the cabin control module 30 to perform shutdown work.

[0045] In this embodiment, by means of information interaction among the control module 10, the intelligent driving control module 20 and the cabin control module 30, the first local monitoring module 11 is arranged to monitor the running state of the control module 10 in real time, so that the abnormal condition can be found in time, and measures such as the shutdown instruction can be taken quickly through the control instruction, so as to avoid potential safety risks and improve the safety and reliability of the central computing platform hardware system of the vehicle.

[0046] Optionally, the intelligent driving control module 20 comprises: a second local monitoring module 21, the second local monitoring module 21 being used to monitor the running state of the intelligent driving control module 20, in the case that the running state of the intelligent driving control module 20 is determined to be abnormal, the intelligent driving control module 20 generates a first stop instruction, the first stop instruction being used to control the control module 10 to stop sending the control instruction.

[0047] Specifically, in the case that the second local monitoring module 21 monitors that the running state of the intelligent driving control module 20 is abnormal, the abnormal signal is reported to the control module 10, the control module 10 stops sending the control instruction to the intelligent driving control module 20, reports the abnormal information to the vehicle controller, and attempts to control the intelligent driving control module 20 to restart until the intelligent driving control module 20 functions normally, if the request fails after a period of time, the control module 10 prompts the user to take safety measures such as stopping by the roadside, and finally restarts all the main control chips. The multi-level hardware monitoring system can ensure that the intelligent driving control module 20 and the cabin control module 30 are intervened in time in the abnormal condition, so as to reduce the possibility of failure.

[0048] Optionally, the cabin control module 30 comprises: a third local monitoring module 31, the third local monitoring module 31 being used to monitor the running state of the cabin control module 30, in the case that the running state of the cabin control module 30 is determined to be abnormal, the cabin control module 30 generates a second stop instruction, the second stop instruction being used to control the control module 10 to stop sending the control instruction.

[0049] Specifically, the third local monitoring module 31 reports an abnormal signal to the control module 10 in the case that the running state of the cabin control module 30 is abnormal, the control module 10 stops sending a control instruction to the cabin control module 30, reports abnormal information to the vehicle controller, and attempts to control the cabin control module 30 to restart until the cabin control module 30 is normal, if the request fails after a period of time, the control module 10 prompts the user to take safety measures such as parking on the side, and finally restarts all the main control chips. The multi-level hardware monitoring system can ensure that the intelligent driving control module 20 and the cabin control module 30 are intervened in time in abnormal conditions, thereby reducing the possibility of failure.

[0050] Optionally, in the case that the running state of the intelligent driving control module 20 is determined to be abnormal, the intelligent driving control module 20 generates a first alarm instruction, and the first alarm instruction is used to control the cabin control module 30 to perform an alarm operation, and in the case that the running state of the cabin control module 30 is determined to be abnormal, the cabin control module 30 generates a second alarm instruction, and the second alarm instruction is used to control the intelligent driving control module 20 to perform an alarm operation.

[0051] Specifically, the intelligent driving control module 20 and the cabin control module 30 exchange information, the alarm operation includes sound and light alarm, voice alarm, etc., through this alarm mechanism, it can ensure that the system can timely notify the driver or relevant personnel when the intelligent driving control module 20 or the cabin control module 30 appears abnormal, so as to avoid possible safety hazards.

[0052] Optionally, the multi-level hardware monitoring system for the vehicle further includes a first monitoring power module 40, the first monitoring power module 40 is used to power the control module 10, and the first monitoring power module 40 includes: a first watchdog module 41, the first watchdog module 41 is used to monitor the running state of the control module 10, and in the case that the running state of the control module 10 is determined to be abnormal, the first watchdog module 41 generates a first reset instruction, and the first reset instruction is used to control the control module 10 to perform a reset operation.

[0053] Specifically, the first monitoring power module 40 is responsible for safe power supply to the control module 10, and the first monitoring power module 40 monitors the running state of the control module 10 through the first watchdog module 41, if the control module 10 is abnormal, the first monitoring power module 40 resets the control module 10 to restart and recover to a safe and reliable running state. The automatic monitoring and reset mechanism can reduce the parking time and maintenance cost caused by system failure, and improve the use efficiency of the vehicle.

[0054] Optionally, the first monitoring power module 40 further comprises a first power diagnosis module 42, the first power diagnosis module 42 is configured to monitor a power state of the first monitoring power module 40, and generate a first self-reset instruction for controlling the first power diagnosis module 42 to perform a self-reset operation in a case where at least one of overcurrent, overvoltage, and overtemperature occurs in the power state of the first monitoring power module 40.

[0055] The first power diagnosis module 42 is configured to monitor faults such as overtemperature, overcurrent, and overvoltage output precision range of the monitoring power chip, and has a self-reset function. The design of the first monitoring power module 40 effectively improves the stability, safety, and reliability of the system, and reduces the maintenance cost and improves the availability of the system.

[0056] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a second monitoring power module 50, the second monitoring power module 50 is configured to supply power to the intelligent driving control module 20, and the second monitoring power module 50 comprises a second watchdog module 51, the second watchdog module 51 is configured to monitor a running state of the intelligent driving control module 20, and generate a second reset instruction for controlling the intelligent driving control module 20 to perform a reset operation in a case where the running state of the intelligent driving control module 20 is abnormal.

[0057] Specifically, the second monitoring power module 50 is responsible for safe power supply to the intelligent driving control module 20, and the second monitoring power module 50 monitors the running state of the intelligent driving control module 20 through the second watchdog module 51. If the intelligent driving control module 20 is abnormal, the second monitoring power module 50 resets the intelligent driving control module 20 to restart and recover to a safe and reliable running state. The automatic monitoring and reset mechanism can reduce the downtime and maintenance cost caused by system failure, and improve the use efficiency of the vehicle.

[0058] Optionally, the second monitoring power module 50 further comprises a second power diagnosis module 52, the second power diagnosis module 52 is configured to monitor a power state of the second monitoring power module 50, and generate a second self-reset instruction for controlling the second power diagnosis module 52 to perform a self-reset operation in a case where at least one of overcurrent, overvoltage, and overtemperature occurs in the power state of the second monitoring power module 50.

[0059] Specifically, the second power diagnosis module 52 is configured to monitor faults such as overtemperature, overcurrent, and overvoltage output precision range of the second monitoring power module 50, and has a self-reset function. The design of the second power diagnosis module 52 effectively improves the stability, safety, and reliability of the system, and reduces the maintenance cost and improves the availability of the system.

[0060] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a third monitoring power module 60, the third monitoring power module 60 is configured to supply power to the cabin control module 30, and the third monitoring power module 60 comprises: a third watchdog module 61, the third watchdog module 61 is configured to monitor the running state of the cabin control module 30, and in a case where it is determined that the running state of the cabin control module 30 is abnormal, the third watchdog module 61 generates a third reset instruction, and the third reset instruction is configured to control the cabin control module 30 to perform a reset operation.

[0061] Specifically, the third monitoring power module 60 is responsible for safely supplying power to the cabin control module 30, and the third monitoring power module 60 monitors the running state of the cabin control module 30 through the third watchdog module 61. If the cabin control module 30 is abnormal, the third monitoring power module 60 resets the cabin control module 30 to restart and recover to a safe and reliable running state. The automatic monitoring and reset mechanism can reduce the downtime and maintenance cost caused by system failure, and improve the use efficiency of the vehicle.

[0062] Optionally, the third monitoring power module 60 further comprises a third power diagnosis module 62, the third power diagnosis module 62 is configured to monitor the power state of the third monitoring power module 60, and in a case where it is determined that at least one of overcurrent, overvoltage, and overtemperature occurs in the power state of the third monitoring power module 60, the third power diagnosis module 62 generates a third self-reset instruction, and the third self-reset instruction is configured to control the third power diagnosis module 62 to perform a self-reset operation.

[0063] Specifically, the third power diagnosis module 62 has the functions of monitoring the overtemperature, overcurrent, and overvoltage output precision range of the third monitoring power module 60, and has a self-reset function. The design of the third power diagnosis module 62 effectively improves the stability, safety, and reliability of the system, while reducing the maintenance cost and improving the availability of the system.

[0064] The first monitoring power module 40 controls the second monitoring power module 50 and the third monitoring power module 60. If the first monitoring power module 40 is abnormal, the second monitoring power module 50 and the third monitoring power module 60 are closed, so as to ensure that the intelligent driving control module and the minimum system are in a safe and reliable state, and to ensure that the cabin control module and the minimum system are in a safe and reliable state.

[0065] Optionally, the multi-level hardware monitoring system for the vehicle further comprises an intelligent driving peripheral module 70, and in a case where it is determined that the running state of the intelligent driving control module 20 is abnormal, the intelligent driving control module 20 generates a first closing instruction, and the first closing instruction is configured to control the intelligent driving peripheral module 70 to perform a closing operation. Through real-time monitoring and fault diagnosis, the failure rate of the intelligent driving control module 20 and the intelligent driving peripheral module 70 can be reduced.

[0066] Optionally, the multi-level hardware monitoring system for the vehicle further comprises a cabin peripheral module 80, and the cabin control module 30 generates a second shutdown instruction for controlling the cabin peripheral module 80 to perform a shutdown operation in a case where it is determined that the operating state of the cabin control module 30 is abnormal. Through real-time monitoring and fault diagnosis, the failure rate of the cabin control module 30 and the cabin peripheral module 80 can be reduced. Embodiment 2

[0067] According to another aspect of the present application, a vehicle is provided, comprising a multi-level hardware monitoring system for the vehicle, which is the multi-level hardware monitoring system for the vehicle in the above embodiments. The multi-level hardware monitoring system for the vehicle comprises: a control module 10, the control module 10 comprising a first local monitoring module 11 for monitoring the operating state of the control module 10; an intelligent driving control module 20, the control module 10 being in information interaction with the intelligent driving control module 20; a cabin control module 30, the cabin control module 30 being in information interaction with the control module 10 and the intelligent driving control module 20; wherein in a case where it is determined that the operating state of the control module 10 is abnormal, the control module 10 generates a control instruction, wherein the control instruction at least comprises a shutdown instruction, and the control instruction is used to control the intelligent driving control module 20 and the cabin control module 30 to perform a shutdown operation. Through information interaction among the control module 10, the intelligent driving control module 20 and the cabin control module 30, and by setting the first local monitoring module 11 to monitor the operating state of the control module 10 in real time, abnormal conditions can be found in time, and measures such as the shutdown instruction can be taken quickly through the control instruction, so as to avoid potential safety risks and improve the safety and reliability of the central computing platform hardware system of the vehicle. Embodiment 3

[0068] In another embodiment of the present application, a multi-level hardware monitoring method for a vehicle is provided, as shown in FIG. 2, and the specific steps are as follows:

[0069] S1: The first monitoring power supply module 40 is powered on and starts monitoring the control module 10.

[0070] S2: The control module 10 completes initialization and starts working, and monitors the intelligent driving system and the cabin system.

[0071] S31: The second monitoring power supply module 50 is powered on and starts monitoring the intelligent driving control module 20.

[0072] S32: The third monitoring power supply module 60 is powered on and starts monitoring the cabin control module 30.

[0073] S311: The intelligent driving control module 20 completes initialization and starts working, starts monitoring the safety state of the intelligent driving minimum system, and starts monitoring the safety state of the cabin system.

[0074] S321: The cockpit control module 30 completes the initialization and starts to work, starts to monitor the cockpit minimum system safety state, and starts to monitor the intelligent driving system safety state.

[0075] From the above description, it can be seen that the above-mentioned embodiments of the application achieve the following technical effects:

[0076] 1. The application provides a multi-level hardware safety monitoring scheme for central computing, which improves the safety and reliability of the hardware system of the central computing platform.

[0077] 2. The application provides a monitoring scheme strategy between master control chips (control chips, intelligent driving control chips, cockpit control chips), which has a corresponding system-level processing mechanism in the case of failure of any one chip, does not output incorrect instructions to the intelligent driving function and cockpit function, and improves the fault information interaction between master control chips and the safety and reliability of the system hardware.

[0078] 3. The application provides a safety monitoring mechanism between master control chips (control chips, intelligent driving control chips, cockpit control chips) and power monitoring chips, so that each master control chip has internal safety monitoring and external power supply safety monitoring, and improves the operation safety of the master control chip system.

[0079] 4. The safety monitoring strategy between the power monitoring chips provided by the application ensures that the first monitoring power module 40 can safely monitor the intelligent driving system monitoring power and the cockpit system monitoring power, and restarts the power supply system in abnormal conditions.

[0080] 5. The monitoring power supply adopted by the application can reset by Watchdog and power failure diagnosis state, ensuring that the power supply chip itself resets and recovers when a fault occurs, and ensuring that the central computing platform runs in a safe state.

[0081] For ease of description, spatial relative terms such as "over", "above", "upper surface", "upper", etc. can be used herein to describe the spatial positional relationship of one device or feature with other devices or features as shown in the drawings. It should be understood that the spatial relative terms are intended to include different orientations in use or operation in addition to the orientation of the device described in the drawings. For example, if the device in the drawing is inverted, the device described as "above" or "over" other devices or structures will be positioned "below" or "under" other devices or structures. Thus, the example term "above" can include both "above" and "below" orientations. The device can also be positioned in other different ways (rotated 90 degrees or in other orientations), and the spatial relative descriptions used herein are interpreted accordingly.

[0082] In addition, it is to be noted that throughout the specification and claims, unless otherwise specified, the terms "one embodiment", "another embodiment", "an embodiment" and the like, mean that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment. Further, the terms "comprises", "comprising", "includes", "including", "has", "having" and the like are to be open-ended. That is, the terms are to be interpreted to mean including but not limited to, one or more instances of an element or element(s) that is / are described by the term. Further, the terms "may" and "might" are to be interpreted as meaning "may, but not necessarily" or "might, but not necessarily".

[0083] In the above embodiments, the description of each embodiment is focused on a certain aspect. The parts not described in detail in a certain embodiment can be referred to the relevant description of other embodiments.

[0084] The preferred embodiments of the present application have been described above with the specific details. Obviously, the present application can be carried out without the specific details. Thus, the above description is to be regarded as merely illustrative of the present application and not restrictive.

Claims

1. A multi-level hardware watchdog system for a vehicle, characterized by, Comprise: The control module (10) comprises a first local monitoring module (11) for monitoring the running state of the control module (10); The intelligent driving control module (20) exchanges information with the control module (10); The cockpit control module (30) exchanges information with the control module (10) and the intelligent driving control module (20); Wherein, in the case of determining that the running state of the control module (10) is abnormal, the control module (10) generates a control instruction, wherein the control instruction at least includes: shutdown instruction, the control instruction is used to control the intelligent driving control module (20) and the cockpit control module (30) to execute shutdown work.

2. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The intelligent driving control module (20) comprises The second local monitoring module (21) is used for monitoring the running state of the intelligent driving control module (20), and in the case of determining that the running state of the intelligent driving control module (20) is abnormal, the intelligent driving control module (20) generates a first stop instruction, which is used to control the control module (10) to stop sending the control instruction.

3. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The cockpit control module (30) comprises: The third local monitoring module (31) is used for monitoring the running state of the cockpit control module (30), and in the case of determining that the running state of the cockpit control module (30) is abnormal, the cockpit control module (30) generates a second stop instruction, which is used to control the control module (10) to stop sending the control instruction.

4. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, In the case of determining that the running state of the intelligent driving control module (20) is abnormal, the intelligent driving control module (20) generates a first alarm instruction, which is used to control the cockpit control module (30) to execute alarm work, and in the case of determining that the running state of the cockpit control module (30) is abnormal, the cockpit control module (30) generates a second alarm instruction, which is used to control the intelligent driving control module (20) to execute alarm work.

5. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The multi-level hardware monitoring system for vehicle further comprises a first monitoring power module (40) for supplying power to the control module (10), and the first monitoring power module (40) comprises: The first watchdog module (41) is used for monitoring the running state of the control module (10), and in the case of determining that the running state of the control module (10) is abnormal, the first watchdog module (41) generates a first reset instruction, which is used to control the control module (10) to execute reset work.

6. The multi-level hardware watchdog system for a vehicle of claim 5, wherein, The first monitoring power module (40) further comprises: The first power supply diagnosis module (42) is used for monitoring the power supply state of the first monitoring power supply module (40), and generates a first self-reset instruction for controlling the first power supply diagnosis module (42) to perform a self-reset operation in a case where it is determined that at least one of overcurrent, overvoltage and overtemperature occurs in the power supply state of the first monitoring power supply module (40).

7. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The multi-level hardware monitoring system for a vehicle further comprises a second monitoring power supply module (50) used for supplying power to the intelligent driving control module (20), wherein the second monitoring power supply module (50) comprises: The second watchdog module (51) is used for monitoring the running state of the intelligent driving control module (20), and generates a second reset instruction for controlling the intelligent driving control module (20) to perform a reset operation in a case where it is determined that the running state of the intelligent driving control module (20) is abnormal.

8. The multi-level hardware watchdog system for a vehicle of claim 7, wherein, The second monitoring power supply module (50) further comprises: The second power supply diagnosis module (52) is used for monitoring the power supply state of the second monitoring power supply module (50), and generates a second self-reset instruction for controlling the second power supply diagnosis module (52) to perform a self-reset operation in a case where it is determined that at least one of overcurrent, overvoltage and overtemperature occurs in the power supply state of the second monitoring power supply module (50).

9. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The multi-level hardware monitoring system for a vehicle further comprises a third monitoring power supply module (60) used for supplying power to the cabin control module (30), wherein the third monitoring power supply module (60) comprises: The third watchdog module (61) is used for monitoring the running state of the cabin control module (30), and generates a third reset instruction for controlling the cabin control module (30) to perform a reset operation in a case where it is determined that the running state of the cabin control module (30) is abnormal.

10. The multi-level hardware watchdog system for a vehicle of claim 9, wherein, The third monitoring power supply module (60) further comprises: The third power supply diagnosis module (62) is used for monitoring the power supply state of the third monitoring power supply module (60), and generates a third self-reset instruction for controlling the third power supply diagnosis module (62) to perform a self-reset operation in a case where it is determined that at least one of overcurrent, overvoltage and overtemperature occurs in the power supply state of the third monitoring power supply module (60).

11. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The multi-level hardware monitoring system for a vehicle further comprises a smart driving peripheral module (70), wherein the smart driving control module (20) generates a first shutdown instruction for controlling the smart driving peripheral module (70) to perform a shutdown operation in a case where it is determined that the operating state of the smart driving control module (20) is abnormal.

12. The multi-level hardware watchdog system for a vehicle of claim 1, wherein, The multi-level hardware monitoring system for a vehicle further comprises a cockpit peripheral module (80), wherein the cockpit control module (30) generates a second shutdown instruction for controlling the cockpit peripheral module (80) to perform a shutdown operation in a case where it is determined that the operating state of the cockpit control module (30) is abnormal.

13. A vehicle comprising a multi-level hardware watchdog system for the vehicle, characterized in that The multi-level hardware monitoring system for a vehicle is the multi-level hardware monitoring system for a vehicle according to any one of claims 1 to 12.

Images