403 results about "Functional safety" patented technology

The invention provides an MCU function security implementation system based on a domain controller, and relates to the technical field of domain controllers, the system realizes dual backup storage and on-site execution of program codes by combining a security MCU without a built-in program memory with at least two redundant plug-in nonvolatile storage units, and the security of the MCU is improved. Consistency verification is carried out on key codes or data in the running process, and system failure caused by single-point storage faults or data tampering is effectively prevented; meanwhile, read-write operation without losing data during power failure is isolated through the independent data storage unit, and resource conflict and interference between program execution and data storage are avoided; the ASIL D-level power management unit supporting two-way fault monitoring is matched, resetting can be triggered in time or the MCU enters a safe state when a power supply is abnormal or an MCU internal fault occurs, and therefore a high-reliability and high-safety domain controller MCU system is constructed on the hardware architecture level, and the capacity of the MCU for meeting the ASIL D function safety level in a plug-in storage scene is improved.

The invention relates to the technical field of safety testing, and particularly provides a method, device and equipment for generating an expected function safety testing scene library, and the method comprises the steps: obtaining a parameter combination of key parameters in a pre-constructed basic scene; wherein the key parameters comprise environment parameters, traffic dynamic parameters and vehicle system parameters; generating a plurality of test scenes based on the parameter combination; after screening the plurality of test scenes, constructing a test scene library; wherein the test scene library is used for an expected function safety test of the intelligent driving vehicle. According to the embodiment of the invention, a rich expected function security test scene library can be constructed, and support is provided for expected function security test.

The embodiment of the invention relates to the technical field of vehicle intelligent control, and discloses a vehicle remote control parking system, a control method and equipment, and the system comprises an intelligent driving domain control SOC and an intelligent driving domain control MCU which are in communication connection; the intelligent driving domain control MCU is provided with an ultrasonic algorithm module, a CAN signal processing module, a first remote control parking module, an arbitration module and a vehicle control module. The first remote control parking module arranged in the intelligent driving domain control MCU can independently receive obstacle distance data of the ultrasonic algorithm module and vehicle state signals of the CAN signal processing module, a basic parking track is rapidly generated, waiting for starting of the intelligent driving domain control SOC is not needed, the waiting time of the system is shortened, and the parking efficiency is improved. The basic parking track is strictly verified through the arranged arbitration module, the execution of unsafe tracks exceeding a threshold value is refused, and when the arbitration module judges that the collision risk exists according to the obstacle distance data, the emergency braking instruction is immediately triggered, collision is avoided, and the automobile function safety standard is met.

The invention provides a cabin integration method of whole vehicle self-adaption platform service based on SOA and a vehicle, and relates to the technical field of vehicle SOA service, the method comprises the following steps: deeply integrating functional components of a whole vehicle self-adaption platform into an Android operating system, and embedding a communication module into an Android hardware abstraction layer; the original biochemical deployment of the SOA service in the cabin domain is realized; meanwhile, an efficient and low-delay service calling interface is constructed by expanding a communication mechanism between Android native processes, so that the Android application can directly call the whole vehicle level SOA service, and the dependence of traditional cross-domain communication on a vehicle-mounted Ethernet and a central gateway is avoided; besides, processor core resources are dynamically allocated in combination with the function security level of the SOA service, so that the real-time performance and execution reliability of high-security-level tasks are guaranteed, and the overall resource utilization efficiency of the system is improved.

The invention relates to the technical field of automatic driving, in particular to an automatic driving robust planning system and method based on dual-channel perception, and the system and method construct a standby input channel independent of a main perception model at the planning level. And the problem of failure of sensing a single point is fundamentally solved. Automatic and seamless mode switching is realized through confidence monitoring, and high performance in a normal state and high safety in an abnormal state are considered at the same time. The design target of the second sensing path (occupying the grid) is more single (geometric occupation), and the second sensing path can be made lighter and more robust and is complementary with the first path. The architecture provided by the invention meets the requirements on redundancy and safety architecture in the functional safety standard (such as ISO 26262) of the automobile industry, and is beneficial to improving the overall safety level of the automatic driving system.

The invention relates to the technical field of software security, and particularly discloses a real-time vulnerability detection and repair system of an AI code generation model. The system comprises a central coordinator, a real-time monitoring module, a deep analysis module, an intelligent repair module and a feedback learning module. The real-time monitoring module rapidly scans and triggers the generated codes; the deep analysis module performs interprocess stain analysis on the trigger code to generate a diagnosis report containing a precise data flow path; the intelligent repair module generates a repair patch under the function equivalence constraint according to the diagnosis report; and the feedback learning module collects the processing feedback of the developer on the repair patch, and drives the continuous optimization of each module of the system. According to the method, through layered progressive analysis and repair generation, the repair accuracy and the function safety are ensured; through a feedback learning mechanism, the self-adaptive evolutionary ability of the system is realized, the problems of unavailability of repair suggestions and static stiffness of the system in the prior art are solved, and real-time protection is provided for AI auxiliary programming.

Compliance of an operating system with safety requirements can be evaluated and monitored using software bill of materials (SBOMs). For example, a system can receive first metadata indicative of a current state of an operating system. The operating system can be used to execute software services, and the operating system can be associated with a functional safety standard issued. The system can further determine whether the current state matches a verified state of the operating system based on the first metadata and based on second metadata indicative of the verified state. The second metadata can be stored in an operating system SBOM. Then, based on determining that the current state matches the verified state, the system can verify compliance of the operating system with the functional safety standard and execute, via the operating system, the software services.

Providing adaptive and dynamic redundancy for functional safety in processor devices is disclosed herein. In some aspects, a processor device comprises a central configurable redundancy logic block (CRLB) controller circuit, a redundancy map matrix switch circuit, a plurality of safety-critical block circuits, and a plurality of CRLB clusters. The central CRLB controller circuit receives redundancy mapping data for each safety-critical block circuit, and receives an indication of one or more active block circuits among the safety-critical block circuits. The central CRLB controller circuit transmits the redundancy mapping data corresponding to the active block circuits to the redundancy map matrix switch circuit, which configures one or more CRLB clusters to duplicate functionality of the respective active block circuits based on the redundancy mapping data. The redundancy map matrix switch circuit then provides logic redundancy for the one or more active block circuits using the one or more CRLB clusters.

The invention discloses a CAN FD optimization design method and system with function safety perception, and belongs to the technical field of CAN FD network communication. The method comprises the following steps: pre-dividing according to signal functions, and adding corresponding copies to a signal set for signals which need to be backed up by different nodes; generating an initial packaging scheme based on the signal set, optimizing the initial packaging scheme, and calculating a timeout probability of the signal caused by a transmission fault; judging whether the overtime probability of each signal is smaller than a PMHF threshold value corresponding to the security level of the signal; when the overtime probability of any signal is greater than a threshold value, adding a same node copy for the signal and re-optimizing a packaging scheme; and when the timeout probabilities of all the signals meet the requirements, a final packaging scheme is obtained. According to the method, the different node copies and the same node copies are cooperatively used, and iterative optimization based on the timeout probability is combined, so that fine control on the timeout probability of signals with different safety levels is realized, and the functional safety of the CAN FD network in a severe environment is improved.

1. The name of the design product: safety controller (YPS604 / 605). 2. The use of the design product: for the functional safety control of complex mobile engineering equipment, such as earth-moving machinery, concrete machinery, hoisting machinery, aerial work machinery, road machinery, pile-driving machinery, mining machinery and agricultural machinery, etc. 3. The design points of the design product: in shape. 4. The picture or photo that best indicates the design points: design 1 perspective view 1. 5. Design 1 is designated as the basic design.

This invention belongs to the field of flight control computer hardware architecture technology, specifically relating to a heterogeneous flight control core circuit and system. This invention integrates a microcontroller unit and an artificial intelligence coprocessor unit on the same printed circuit board, achieving data and command interaction through isolated high-speed interconnect channels. The microcontroller unit constitutes the safety control and real-time decision-making domain, used to execute safety-critical and hard real-time tasks, and to implement operational management and fault isolation for the artificial intelligence coprocessor unit; the artificial intelligence coprocessor unit constitutes the intelligent sensing and computing domain, used to execute computationally intensive and non-real-time critical tasks. This architecture achieves decoupling and collaboration between the safety domain and the computing domain at the hardware level, ensuring both high functional safety and determinism in flight control, while fully releasing the high-performance computing power required for intelligent sensing, thus meeting the dual requirements of advanced aircraft for highly reliable flight control and intelligent function expansion.

According to the elevator diagnosis method and system based on functional safety, functional safety diagnosis is paused in the running stage of an elevator needing to be quickly responded, a control system can centralize resources to process related tasks, such as accurate control over elevator car leveling and timely response to door machine instructions, response delay caused by diagnosis program interference is avoided, and the service life of the elevator is prolonged. The probability of accidents caused by untimely response is reduced, and quick and accurate response in a key stage is guaranteed; secondly, by setting the threshold duration of pause function safety diagnosis and overtime forced recovery diagnosis, long-time non-monitoring in the quick response stage is avoided, and in the normal operation stage of the elevator, diagnosis is recovered and periodically executed, the elevator function is continuously detected, potential safety problems are found and early warned in time, so that maintenance and repair measures are taken, and the safety of the elevator is guaranteed. The response speed and safety monitoring are balanced, the safety monitoring effectiveness of the overall function of the elevator is guaranteed, and the operation safety is improved.

The application provides a kind of vehicle lamp intelligent control system with functional safety design, including communication module, main control module, execution module, detection module and power module.For main control module, monitor whether main control information processing fails, does not control vehicle lamp work correctly, if yes, reset control is carried out to external circuit;For communication module, monitor whether communication failure occurs according to communication response mechanism, remind driver of failure cause after monitoring communication failure;For power module, monitor power module output voltage, software and hardware failure, reset processing is carried out to power chip and MCU when failure occurs;For detection module, monitor whether execution module lights corresponding lamp according to requirements, if execution module does not light lamp as required, pass this information to main control module, remind driver of failure cause.The application can reduce system failure and random failure risk, the whole system is more reliable, and driver, passenger and road related personnel are safer.

The embodiment of the invention provides a design and development method and device of a functional safety product and electronic equipment, and relates to the technical field of functional safety product development. The method comprises the following steps: obtaining a product architecture and a safety requirement level planned in a functional safety product design stage; determining a system demand and a type test demand according to the product architecture and the safety requirement level; determining project management requirements according to project management requirements of the functional safety product; designing and developing a hardware part and a software part of the functional safety product based on the product architecture, the system requirements, the type test requirements and the project management requirements to obtain a prototype of the functional safety product; and testing and verifying the prototype of the functional safety product to determine that the prototype of the functional safety product meets the product architecture and the safety requirement level. According to the implementation mode provided by the invention, the product development efficiency can be improved on the basis of ensuring the reliability and the safety.

A safety device (10A) comprises: internal communication units (12a, 12b) that communicate with a flow rate measuring device; a safety determination processing unit (11) that determines whether to execute a safety function in the flow rate measuring device using output information of the flow rate measuring device obtained through communication of the internal communication units (12a, 12b); and a safety determination value setting unit (13) that sets and stores a safety determination value to be used for determining whether to execute the safety function by the safety determination processing unit (11). The safety device (10A) may be provided with a flow rate integration unit that calculates, from fluid flow rate information included in the output information, an integrated consumption amount of the fluid, or may be configured as a unit mountable to the flow rate measuring device. This makes it possible to easily implement a safety function in a flow rate measuring device, for example, even if the flow rate measuring device does not have a safety function.

The invention provides a steering and braking cooperative control method and device, electronic equipment and a storage medium, and relates to the technical field of vehicles. The steering and braking cooperative control method comprises the steps that according to state information of a steering execution system, the residual control capacity of the steering execution system when the capacity is limited is determined; determining a vehicle transverse control demand according to the vehicle driving path information and the vehicle actual motion state information; and distributing the vehicle transverse control demand between the steering execution system and a braking execution system according to the residual control capability of the steering execution system. According to the method, the path tracking capability and the driving stability of the vehicle can still be maintained when the steering system is partially invalid or the performance is reduced, a traditional fault-tolerant mode depending on single system redundancy is broken through, cooperative fault-tolerant control across execution systems is achieved, and the function safety level of the whole vehicle is improved on the premise that the hardware redundancy cost is not remarkably increased.

The present application relates to the technical field of vehicle body control, in particular to a vehicle body domain controller function migration method based on load sensing, comprising: collecting current load signals managed by the vehicle body domain controller and real-time function safety level information of the vehicle body domain controller; judging whether the current state of the vehicle body domain controller meets the trigger condition according to the current load signals and the corresponding real-time function safety level information; in response to the current state of the vehicle body domain controller meeting the trigger condition for function migration based on the current load signals, determining the computing power requirement threshold of the virtual domain controller currently required to be constructed according to the load type of the current load signals and the real-time function safety level information. The present application can dynamically adjust the function allocation of the controller according to the actual demand by real-time monitoring of the load signals and function safety level information of the vehicle body domain controller, and this flexibility enables the system to optimize resource use and improve overall performance under different load conditions.

The application provides a foundation pit supporting structure design method, system and cloud platform, and belongs to the technical field of intelligent geotechnical control. The method comprises the following steps: constructing a coupling model, outputting multi-field interaction results and intelligently partitioning, generating a customized reinforcement scheme based on a risk working condition. The transition layer is designed by quantifying the transmission relationship between the partitions, and a fusion supporting system is formed. The fusion supporting system combines the failure differences to construct a life cycle model and an early warning model, realizes dynamic monitoring throughout the life cycle, improves the monitoring efficiency, combines environmental monitoring data with supporting structure design, fully utilizes environmental factors, helps to promote the transformation of geotechnical engineering to intelligence and green, realizes functional safety and ecological protection, and prolongs the service life of the foundation pit supporting structure.

This invention provides a motor controller and engineering machinery. The motor controller includes: a driver connected to a motor; and an MPU (Multi-Core Processor), the MPU including a multi-core processor. Each core of the multi-core processor communicates with each other via a communication link for data exchange. The multi-core processor is connected to the driver and is used to detect motor operating status information and control the motor based on the operating status information. This invention adopts a single-chip MPU multi-core processor design, which can realize the motor controller function with a single MPU, meeting the requirements of small size and compact design of the controller, reducing equipment cost, and conforming to the ISO 13849 functional safety PLD / CAT2 class architecture.

The embodiment of the present disclosure discloses a protection device and method of an image data processing module, an electronic device and a medium, wherein the device comprises: an input monitoring module connected with an input end of the image data processing module, used for monitoring the input of the image data processing module and obtaining an input monitoring result; an output monitoring module connected with an output end of the image data processing module, used for monitoring the output of the image data processing module and obtaining an output monitoring result; and a monitoring result processing module connected with the input monitoring module and the output monitoring module respectively, used for determining the working state of the image data processing module based on the input monitoring result and the output monitoring result. The embodiment of the present disclosure can realize effective monitoring of the working state of the image data processing module, without redundant hardware setting for the image data processing module, thereby effectively reducing hardware and power consumption on the basis of ensuring the functional safety of the image data processing module.

The present invention relates to a PLC device related to functional safety. The safety control PLC device according to the present invention comprises a plurality of communication modules and a safety control module for controlling same, wherein: the safety control module satisfies a predetermined standard for functional safety and controls the plurality of communication modules; and the communication modules support a RAPIEnet network and constitute each network as a ring network, thereby facilitating adding or expanding of a conventional PLC network, and implementing a stable safety control function.

This invention provides a power supply method, apparatus, device, and medium. The method includes: acquiring vehicle status data of a new energy vehicle; determining the operating status of the new energy vehicle based on the vehicle status data; determining the power consumption information of the new energy vehicle when it is in operation; and determining a target DC-DC converter from at least three DC-DC converters of different power ratings based on the power consumption information, and using the target DC-DC converter to supply power to the new energy vehicle. This invention solves the problem of increasingly high low-voltage power consumption in vehicles, ensures stable operation and efficient energy management of vehicles under various operating conditions, guarantees power supply safety, and improves the functional safety level of vehicles.

Signaling open drain read back for functional safety (FUSA) applications in point of load (POL) integrated circuit. Example embodiments include methods of operating a point of load (POL) device, including: supplying power to a load via a power terminal; selectively conducting, by a field-effect transistor (FET), a current between a signal output terminal of the POL power supply device and a ground terminal of the POL power supply device to drive the signal output terminal to a low-voltage state, thereby communicating a signal; and detecting, by a monitoring circuit in the POL power supply, a status of the signal output terminal to determine whether an external device is communicating the signal on a shared communications line connected to the signal output terminal.

The invention provides an automobile chip function safety island system capable of meeting ASIL-D level function safety requirements. The safety island system comprises a bus module, a CPU (Central Processing Unit) module, an authority isolation dispatching center (SMPU) module, a safety monitoring module and a fault processing unit module, the bus module supports external IP access and adapts to authority control of the SMPU module, the CPU module adapts to ASIL-D and IP integration of the following levels and processes safety related data, and the SMPU module realizes multi-signal-source mutual exclusion access and verification of external IP signal authority by dividing independent safety domains. The safety monitoring module comprises five independent monitoring modules, namely a clock monitoring module, a reset monitoring module, an interrupt monitoring module, an IO monitoring module and a PVT monitoring module and supports parameterized configuration, and the fault processing unit module realizes ASIL-D-level fault response based on hardware logic. The system can meet the function safety requirement of the ASIL-D level, has the advantages of comprehensive monitoring, flexible configuration and real-time fault response, can reduce design redundancy and accelerate product design efficiency, and is particularly suitable for chips with high function safety requirements in the automobile field.

The invention discloses an absolute value encoder of an optomagnetic dual-detection module collaborative layout structure, and relates to the technical field of position detection, the encoder enables an optical coded disc and a magnetic ring to be coaxially installed on a mechanical base, and an optical detection subsystem and a magnetic detection subsystem are collaboratively arranged around a detected rotating shaft; collecting a magnetic initial position on a calibration platform by taking an optical absolute position as a reference, and storing a magnetic compensation mapping and a signal quality threshold value into a nonvolatile memory; in the operation period, the signal processing unit obtains an optical absolute position and a compensated magnetic position, the sampling state is divided into a normal state, an optical degradation state, a magnetic interference state and a two-way abnormal state according to the position difference value and the optical and magnetic signal quality, and the optical absolute position or the compensated magnetic position is selected to be output accordingly. And a frozen position or a safe position is output in a double-path abnormal state, and a health state field is attached, so that integration of position measurement, self-diagnosis and function safety is realized.

The invention relates to the technical field of Internet of Vehicles, and provides a document generation method, electronic equipment and a platform, and the method comprises the steps: obtaining a predefined document template and a plurality of pieces of vehicle part information input by a user; wherein the document template comprises a plurality of template units, and each template unit has a unit attribute; and in response to a received document output instruction based on each piece of vehicle part information, traversing unit attributes of all template units in the document template, and based on the unit attributes, determining document contents associated with each piece of vehicle part information so as to perform document output on the document contents. By constructing the structured template and an automatic generation mechanism, document development is upgraded from manual operation to a rule-driven intelligent process, document generation efficiency and accuracy are remarkably improved, a decision basis is provided for quality management, and harsh functional safety and compliance requirements of the industry are met.

The invention relates to a vehicle large screen soft switching control method and device, a vehicle and a medium, and the method comprises the steps: generating a first function enabling signal based on an operation signal of large screen soft switching under the condition that a target function corresponding to the operation signal is allowed to be executed; judging whether the target function is allowed to be executed or not based on the enabling confirmation signal, and generating a second function enabling signal when a comparison result of a judgment result and the first function enabling signal meets a preset comparison condition; sending a clock response signal to a preset control component, and if a clock feedback signal fed back by the preset control component is received in a preset time window, generating a third function enable signal; and according to the first function enable signal, the second function enable signal and the third function enable signal, triggering or forbidding execution operation on the target function. Therefore, the problem of potential safety hazards caused by unexpected opening or closing of functions due to component faults in the prior art is solved, and the function safety and the driving safety of the cabin system are improved.

A high-speed parallel GRAND-CRC decoding method for functional safety communication is presented. M A round-robin noise error mode allocation scheme for each memory cell, without affecting error correction performance, provides... N The system adds an all-zero error mode to the set E of noise error modes and allocates noise error modes to each memory unit in turn. A high-speed parallel decoder architecture design scheme for GRAND-CRC is proposed, including a distributed memory design strategy and the advantage of unrestricted parallelism. The parallelism can be easily set according to hardware resources, and the decoder throughput increases linearly with the parallelism. The system uses a corrector as the basis for logical judgment, and the corrector signal processing unit triggers the correct decoding output. Its features include different processing methods in three cases, especially when contention occurs, selecting the guessed sequence corresponding to the corrector with the smallest sequence number as the decoding output.