943 results about "Functional safety" patented technology

The invention relates to the technical field of electromagnetic compatibility, in particular to a power application environment electromagnetic interference analysis and evaluation method and system, and the method comprises the following steps: recording the position coordinates of a plurality of power devices based on power grid operation data, collecting the current and voltage data of the operation of the devices, and measuring the electromagnetic field intensity data of a plurality of positions of a power grid; an electromagnetic environment data set is generated. According to the method, the operation data and the electromagnetic field intensity of the power equipment are recorded, the understanding ability of the electromagnetic environment is enhanced, the shielding effect of various materials is accurately evaluated by combining the analysis of the shielding materials, the design and operation of the power equipment are optimized, and the electromagnetic sensitivity of the equipment is evaluated. According to the method, the dynamic distribution of the electromagnetic field is simulated and predicted, the electromagnetic field mode causing a fault is identified, and risk equipment predicted through real-time monitoring and data analysis is combined, so that the stability and safety of a power system are improved, the anti-interference capability is enhanced, and the operation efficiency and function safety of power facilities are improved.

The invention provides a dynamic fault-tolerant control method based on an expected function safety mechanism, and the method comprises the steps: 1, selecting the model of a sensor, and enabling the sensor to be distributed at the periphery of a vehicle body; 2, building a decision algorithm model, carrying out environment scene recognition, planning a driving path and speed according to data obtained by a sensing layer, evaluating safety risks of different decisions, and carrying out judgment and decision making on various conditions; 3, control interfaces of a vehicle power system, a steering system and a braking system are established, and the electronic control unit converts a decision control instruction output by the decision algorithm model into actual vehicle operation through the control interfaces; 4, performing an expected function safety mechanism, performing real-time monitoring on state parameters of the vehicle, and analyzing detection data through a fault detection algorithm; 5, implementing a fault tolerance strategy; and 6, continuously monitoring the actual driving state and the system response condition of the vehicle, and adjusting the fault tolerance strategy.

Various aspects of the disclosure relate to enforcing dynamically updated network security policies in real-time (or upon an identified update) from multiple organizations and anonymously analyze computing system configuration information uploaded from third-party computing systems. An analysis engine monitors compliance information and compare the compliance information against the security rules and / or requirements for one or more enterprise networks. A visualization providing a network map with a visual representation of each product system service system may include communication links between internal applications and / or computing systems and drill-down capability to identify issues as they are occurring or are predicted to occur. The security escrow system may include a mechanism to automatically enable / disable access between third party networks and one or more enterprise computing systems in real-time based on identified compliance information.

The invention provides a multi-core AMP architecture inter-core communication method and system based on a high-security embedded real-time operating system, and the method comprises the steps: respectively operating an authentication version of a Quhua high-security embedded real-time operating system on an AMP heterogeneous multi-core platform, and guaranteeing the real-time performance of a task while providing functional security. And two driving interface mechanisms of IPC Not ify and IPC RPMsg are provided, so that the real-time performance of inter-core communication of the multi-core AMP architecture is improved. The IPC Not ify transmits messages based on the HW mailbox of the HW fifo and interrupts the receiving of core messages, and has low time delay; and a heterogeneous multi-core synchronization function is supported, so that a user does not need to concern the starting sequence of the AMP heterogeneous multi-core system and mainly focuses on development of inter-core communication application programs of the user. The IPC RPMsg provides a two-way communication link based on a channel between the cores, and supports large data volume communication interaction between the cores. A universal shared memory area is configured, and a spinlock technology is adopted to synchronize multi-core operation and prevent multi-core access conflicts. A method for sharing the same physical device by multiple cores is provided, and the problem of insufficient device hardware resources is solved.

The invention discloses a service processing method and device, relates to the technical field of security, can meet the information security requirement of a functional security operating system, improves the security of service processing, and is easy to implement. According to the method, a functional security operating system (a first security operating system) with high functional security and high information security requirements can be migrated to a security world, and high-security and high-credibility services can be processed in the security world. A functional secure operating system (second secure operating system) deployed in a non-secure world can access a TEEOS to execute services through a secure TEE proxy technology, or access a local secure service to execute services.

The invention provides a risk processing method based on automatic driving, a readable storage medium and a program product, the method is applied to a vehicle, the vehicle is provided with a highly automatic driving (HAD) master control system and an HAD auxiliary control system which are used for controlling automatic driving of the vehicle, and the functional safety level of the HAD master control system is higher than that of the HAD auxiliary control system; the method comprises the steps that under the condition that it is determined that the current operation environment of a vehicle is in a design operation domain of an L3-level conditional automatic driving system, the vehicle is prevented from changing lanes within the user reaction duration after a current control system for automatic driving of the vehicle is controlled to be switched from an HAD main control system to an HAD auxiliary control system; and under the condition that a user takeover instruction is not received, if the operation duration of the HAD auxiliary control system is greater than the user response duration, executing a minimum risk strategy matched with the current operation environment.

The invention provides a power supply control method, a target domain controller and a storage medium, and relates to the technical field of automatic driving and functional safety. The method is applied to a target domain controller which is connected with multiple power supplies. The method comprises the following steps: determining an automatic driving level of an automatic driving system of a target vehicle; if the automatic driving level is higher than or equal to the target level, determining an effective power supply in the multiple paths of power supplies; if the effective power supply comprises a reference power supply, using the reference power supply to supply power to the target domain controller; and if the effective power supplies do not include the reference power supply, using any one of the effective power supplies to supply power to the target domain controller. The problem of potential safety hazards existing in a single power supply method is avoided, power redundancy is provided for the target domain controller, and it is ensured that the target domain controller can obtain stable and reliable power supply when the automatic driving system is at the key level.

The invention relates to the field of task queue scheduling of automobile chips, in particular to a test case dynamic priority scheduling method for automobile electronic chips. Comprising the following steps: analyzing standard test data of the automobile electronic chip, and organizing a structured data set associated with the physical layout of the chip; identifying failure clusters and noise points on the structured data set by using a data clustering algorithm; extracting geometric and position features of the failure cluster, classifying the failure cluster into a known failure mode by using a classifier, performing correlation analysis on the failure mode, an upstream key process step and an equipment log, and establishing a causal relationship; calculating a function security risk score for each chip; and when the function security risk score is higher than a preset risk threshold value, generating and executing a dynamic task rearrangement instruction, and dynamically improving the execution priority of the test case. According to the method, the priority is dynamically selected according to the function security risk score through the dynamic task rearrangement instruction, so that the test time is saved, and the coverage depth and quality of the test are improved.

The invention relates to a functional security cloud platform and a control method for a rail transit real-time control system, the cloud platform follows a fault-security principle during design and meets the requirements of EN50129 functional security SIL4 level, and the cloud platform comprises a communication gateway used for providing a unified access entrance; the safe real-time virtualization system is used for virtual management, clock self-inspection and interrupt distribution; the security middleware runs in a virtual machine distributed by the security real-time virtualization system and is used for security clock verification, CPU memory self-check result verification, security communication, security voting, cycle control and application management; and the cloud management platform is matched with a virtual machine management module in the secure real-time virtualization system to jointly realize management of virtualization resources. Compared with the prior art, the method has the advantages of high safety, high reliability, high availability, high maintainability, high performance and the like.

For example, an apparatus may include a motherboard including a functional processing core configured to perform a functionality having a Functional Safety (FuSa) level; a FuSa transceiver configured to communicate with an external safety-island processor, which is external to the motherboard; and a FuSa controller configured to establish a FuSa connection with the external safety-island processor according to the FuSa level, to send FuSa information corresponding to the functionality of the functional processing core to the external safety-island processor via the FuSa transceiver, and to control one or more FuSa operations of the functional processing core based on one or more control messages received from the external safety-island processor via the FuSa transceiver.

The invention provides a vehicle-mounted controller memory monitoring method based on differential redundancy, and relates to the technical field of electric monitoring, and the method comprises the following steps: constructing a multi-dimensional graph representation and feature dictionary of a memory region; utilizing reinforcement learning to adaptively optimize a monitoring strategy according to a real-time state and a prediction risk; executing multi-level differential verification of context awareness, and taking a verification result as an observation evidence; performing deep fault probability prediction and interpretability analysis by adopting a graph neural network; through Bayesian or fuzzy logic intelligent fusion verification observation and model prediction, high-confidence risk assessment is realized; and active protection instructions such as predictive error correction and fault isolation are generated and triggered based on an evaluation result and closed-loop feedback. According to the scheme, prediction, adaptation, efficient verification and intelligent decision making are integrated, the foreseeability, adaptability, efficiency and robustness of vehicle-mounted memory monitoring are remarkably improved, and a comprehensive and advanced guarantee is provided for function safety and information safety of a vehicle.

The invention discloses a multi-dimensional safety fusion risk assessment method and related equipment, and relates to the technical field of automatic driving, and the method comprises the steps: obtaining a first data set and a second data set of a target system; performing functional security risk analysis, expected functional security risk analysis and information security risk analysis on the first data set to identify a hazardous event of the target system; based on the second data set, establishing a dynamic scene model, and obtaining a threat level of the hazard event through the dynamic scene model; constructing a multi-dimensional risk matrix according to the hazard event, the dynamic scene model and the threat level; and obtaining a risk value of the hazard event based on the multi-dimensional risk matrix, and performing risk grade division according to the risk value to obtain a multi-dimensional security risk assessment result of the target system.

The invention discloses a safe torque cut-off and electronic star sealing device and an elevator system, relates to the technical field of elevators, and is used for realizing STO and electronic star sealing functions. Aiming at the problem that a common contactor-free scheme at present cannot ensure the function safety, the invention provides the safe torque cut-off and electronic star sealing device, and the STO and electronic star sealing functions of an elevator are ensured through a safe torque cut-off module and an electronic star sealing module. Meanwhile, failure detection is carried out on the two newly-added modules through the control module, and a mutual detection mechanism between the control module and the safe torque cut-off module is established. When any one of the three newly added modules fails, the failure can be detected and the STO or electronic star sealing function is triggered. On the basis, all modules used for replacing a traditional contactor to achieve STO and electronic star sealing functions in the device establish failure detection mechanisms, so that the device can meet the requirement of the elevator for the function safety level.

The present invention provides a microprocessor fault recovery device and method, and a chip, including a microprocessor CPU with a dual-core lock-step structure, a field backup module, and a safety management module; when running to a preset recovery point in the program code, the field backup module records the location of the recovery point and the values ​​of important parameters in the current field environment; when receiving a CPU fault indication, the safety management module notifies the CPU to suspend operation and notifies the field backup module to restore the field; the field backup module overwrites the corresponding current data with the backup data; after receiving a successful response to field recovery, the safety management module adjusts the program counter to the location of the recovery point and restarts the CPU. The present invention can quickly bring the system back to a safe operating state when a CPU error occurs, thereby improving the robustness of automotive-grade functional safety.

The invention provides an MCU function security implementation system based on a domain controller, and relates to the technical field of domain controllers, the system realizes dual backup storage and on-site execution of program codes by combining a security MCU without a built-in program memory with at least two redundant plug-in nonvolatile storage units, and the security of the MCU is improved. Consistency verification is carried out on key codes or data in the running process, and system failure caused by single-point storage faults or data tampering is effectively prevented; meanwhile, read-write operation without losing data during power failure is isolated through the independent data storage unit, and resource conflict and interference between program execution and data storage are avoided; the ASIL D-level power management unit supporting two-way fault monitoring is matched, resetting can be triggered in time or the MCU enters a safe state when a power supply is abnormal or an MCU internal fault occurs, and therefore a high-reliability and high-safety domain controller MCU system is constructed on the hardware architecture level, and the capacity of the MCU for meeting the ASIL D function safety level in a plug-in storage scene is improved.

Business processing methods, and apparatuses, which relate to the technical field of security, and can meet the information security requirement of a functional safety operating system, thus improving the security of business processing, and being easy to implement. The methods can migrate a functional safety operating system (a first safety operating system) having high functional safety and high information security requirements to a secure world, such that high-security and highly-trusted businesses can be processed in the secure world; a functional safety operating system (a second safety operating system) deployed in a non-secure world can access a TEEOS to execute businesses by means of a secure TEE proxy technology, or access a local security service to execute businesses.

The invention provides an intelligent redundancy control method based on functional safety, and the method comprises the steps: 1, collecting key parameters in real time, and outputting a safety score S according to a fuzzy logic formula S = 0.3 XTnorm + 0.2 Vstable + 0.5 Cdelay; 2, preprocessing the key parameters, the safety score, the environmental data and the historical fault records, constructing a risk assessment model through the preprocessed data, and performing risk grade division; 3, triggering redundancy strategy adjustment according to the risk level and the safety score; and step 4, when the redundancy strategy is adjusted to a high-risk scene, triggering switching logic through hardware interruption, and completing redundancy control. According to the technical scheme provided by the invention, the problems that the existing scheme is high in cost, slow in response, incapable of adapting to a dynamic risk environment and easy to cause simultaneous failure of multiple nodes are effectively solved.

The invention discloses a vehicle expected function safety data-driven closed-loop solving method, system and equipment and a storage medium, belongs to the technical field of vehicle expected function safety, and solves the technical problem that in the prior art, a closed-loop expected function safety problem solving method for carrying out data driving on actually occurring hazardous events is lacked. Acquiring driving data before and after the vehicle encounters the hazard event; performing functional deviation analysis and trigger condition induction on the preprocessed driving data; making a multi-dimensional system optimization scheme; and when a hazard event occurs in the vehicle, performing recharge analysis on the driving data to obtain a residual risk which cannot accept an expected response and a residual risk which can accept an expected response, updating a multi-dimensional system optimization scheme, optimizing a vehicle function module, performing hazard identification and risk assessment, and putting the vehicle into operation after the vehicle passes the hazard event. The method is used for realizing system function boundary continuous expansion and safety capability evolution, and guaranteeing the expected function safety of the vehicle in the whole service cycle.

The invention discloses a chip security mechanism evaluation method and computer equipment. The method comprises the following steps: acquiring test data of chips of the same series and historical models; extracting characteristic variables of test data of chips of historical models, and establishing a prediction model based on machine learning for evaluating the validity of a chip security mechanism; acquiring test data of a novel chip with the same data structure as the sample data; and inputting the test data of the novel chip into the established prediction model for prediction, and outputting a prediction result as an index of the validity of the chip security mechanism. According to the invention, rapid function security detection and evaluation can be realized for the same series of novel chips, and the function security detection efficiency and stability of the novel chips in a small sample scene are remarkably improved.

To meet requirements for improvement of a vehicle having autonomous driving capability.SOLUTION: Autonomous driving of a vehicle in which computerized perception by the vehicle, including of its environment and of itself (e.g., egomotion), is used to autonomously drive the vehicle and, additionally, can also be used to provide feedback to enhance performance, safety, and / or other attributes of autonomous driving of the vehicle (e.g., when certain conditions affecting the vehicle are determined to exist by detecting patterns in or otherwise analyzing what is perceived by the vehicle), by adjusting autonomous driving of the vehicle, conveying messages regarding the vehicle, and / or performing other actions concerning the vehicle.SELECTED DRAWING: Figure 1

The embodiment of the invention discloses an integrated circuit, a resource access control method, equipment and a medium, and the method comprises the steps: in response to a received resource access request sent by a requester, based on pre-configured access authority control information, determining whether the requester has an access authority for a resource party corresponding to an access address requested by the requester, and obtaining a first determination result; and in response to the request party having the access authority to the resource party, determining whether the request party has the operation authority to the access address based on pre-configured security control information and security attribute information in the resource access request to obtain a second determination result, and processing the resource access request based on the second determination result, according to the invention, the security of functions with high security level requirements can be effectively guaranteed, and the information security and the function security can be improved.

The invention relates to a rail transit safety computer platform supporting multiple applications and a control method, the platform follows a fault-safety principle during design, supports multiple applications and conforms to an EN50129 functional safety SIL4 level, and the computer platform comprises a communication gateway used for providing a unified access entrance; the MPU operation subsystem comprises a redundant backup A system and a redundant backup B system, each system comprises two MPU units, and each MPU unit comprises a platform management virtual machine and N application virtual machines; the switching unit is used for switching the main and standby states of the A system and the B system; and the redundant network is respectively connected with the communication gateway, the MPU operation subsystem and the switching unit to realize internal communication. Compared with the prior art, the method has the advantages of supporting multiple applications, enabling the whole system to be more flexible and the like.

The invention discloses an inverter turn-off protection circuit, which comprises a bus voltage sampling circuit, a current sampling module, a multiplier, a threshold voltage comparison circuit and a gate turn-off circuit, and is characterized in that the bus voltage sampling circuit is used for sampling an inverter bus voltage to obtain a sampling voltage; the current sampling module is used for sampling phase current output by the alternating current side of the inverter to obtain sampling current; the multiplier is used for receiving the sampling voltage and the sampling current and carrying out multiplication operation to obtain instantaneous power; the threshold voltage comparison circuit is used for comparing the instantaneous power with a threshold to obtain a level signal; and the gate pole turn-off circuit is used for controlling the turn-off of a gate pole turn-off switch tube according to the level signal output by the threshold voltage comparison circuit so as to control the turn-off of a power tube of the inverter. The inverter turn-off protection circuit operates independently, is not affected by an MCU system, is low in cost and high in response speed, and greatly improves function safety.

The invention provides a vehicle auxiliary driving system which comprises a surrounding layer and a core layer, the surrounding layer comprises a function safety module and an information safety module, and the core layer comprises an SoC performance domain, an MCU real-time domain and a host end. The architecture design of the vehicle auxiliary driving system is carried out according to business layering, domain classification and the like, a software design based on layered decoupling and service dynamic management and a core design oriented to service and middleware management are provided based on an SoC performance domain, and the coupling between software and a hardware system is reduced; and in combination with the global surrounding design of function security and information security and task shunting at the host end, the coupling and communication load of the system are reduced on the premise that the system is safe and reliable, and the scene adaptability is improved.

The invention relates to the technical field of intelligent driving, and discloses an unmanned vehicle complex scene decision control method and system based on deep reinforcement learning, and the method comprises the steps: extracting the multi-modal features of a traffic environment in real time through a graph attention network, and generating a scene descriptor; generating a decision strategy based on a dual-channel strategy generator, selecting a decision path according to a scene complexity evaluation result, calling a pre-decision cache library when the complexity is lower than a first threshold value, starting edge cooperative calculation when the complexity is higher than a second threshold value, and triggering cloud strategy generation when the complexity exceeds a third threshold value; and multi-target dynamic constraint verification is carried out on the generated candidate strategies, and execution strategies conforming to the safety boundary are screened and output to a vehicle control terminal. According to the method, the decision-making precision, the response real-time performance and the multi-objective optimization capability of the unmanned driving system in a complex traffic scene are remarkably improved, and meanwhile, efficient utilization of computing resources and functional safety compliance are realized.

The invention relates to the technical field of safety testing, and particularly provides a method, device and equipment for generating an expected function safety testing scene library, and the method comprises the steps: obtaining a parameter combination of key parameters in a pre-constructed basic scene; wherein the key parameters comprise environment parameters, traffic dynamic parameters and vehicle system parameters; generating a plurality of test scenes based on the parameter combination; after screening the plurality of test scenes, constructing a test scene library; wherein the test scene library is used for an expected function safety test of the intelligent driving vehicle. According to the embodiment of the invention, a rich expected function security test scene library can be constructed, and support is provided for expected function security test.

The invention provides a safety control method of a transportation mode, electronic equipment and a vehicle, which can perform vehicle speed limit control according to a real-time vehicle speed and a preset transportation limit vehicle speed, and perform torque limit control according to a real-time output torque and a preset transportation limit torque. And determining whether a transportation safety risk exists or not according to the real-time vehicle speed and the real-time output torque, controlling the vehicle to enter a functional safety state when the safety risk exists, and performing torque reduction control. The vehicle speed can be limited within a safe range through vehicle speed limiting control, the output torque can be limited within the safe range through torque limiting control, and safety risks related to overspeed or overlarge acceleration are avoided. The torque reduction control is carried out when the safety risk exists, enough time can be reserved for a driver to carry out remedy operation, the remedy difficulty after the transportation safety risk occurs is reduced, the transportation safety risk is controlled within a controllable range, and the safety of the vehicle and users in the vehicle is protected.

The present disclosure is related to systems and methods for application of machine learning techniques to functional safety analyses of IP cores used in chip designs, to facilitate efficiency, accuracy and completeness of the chip designs. In embodiments of the present disclosure, a functional safety system receives input data for a chip design, and profiles the input data to identify a plurality of IP cores present in the design. The functional safety system determines a match of at least one identified IP core with an IP core present in a functional safety related data structure. The functional safety system then conducts one or more safety analyses on the identified IP core and generates a safety report accordingly.

The invention relates to the technical field of vehicle gauge function safety design, and discloses a function safety design method of an Online NDT for sram, which comprises an NDT controller comprising an Intfctrl module, two NDTCTRL modules, a Compare module, an Arbitintf module and an Arbit module. The CPU is used for managing the NDT controller and reading information through the APB, and meanwhile, various Master accesses the SRAM after passing through the Arbit module through the AXI; the mutual redundancy of the two NDTCTRL modules is realized; the Compare module is used for supporting error injection and result comparison; and the Arbit module is responsible for arbitrating access requests from the NDTCTRL and the AXI, so that the Online NDT test does not influence the bandwidth of the SRAM interface or occupies part of the bandwidth. According to the function safety design method for the Online NDT of the sram, mutual redundant Online NDT design is utilized on the overall architecture, an error injection mechanism is supported, and a Lock Step Logic front-back staggered configuration three-level register and phase inverter mechanism is adopted, so that the whole design is safer, more flexible and more reliable.

The embodiment of the invention provides a hybrid redundant power supply system and a vehicle. The system comprises a 12V power supply network, a 48V power supply network and a bidirectional DCDC, the 12V power supply network comprises a low-voltage power distribution unit, the low-voltage power distribution unit is integrated with a 12V safety switch, the 12V safety switch is used for 12V power supply redundant power supply and meets the function safety ASIL-D requirement, the 48V power supply network comprises a medium-voltage power distribution unit, the medium-voltage power distribution unit is integrated with a 48V safety switch, the 48V safety switch is used for 48V power supply redundant power supply, and the bidirectional DCDC is connected with the medium-voltage power distribution unit. And the bidirectional DCDC is connected in series between the 12V power supply network and the 48V power supply network, and is used for mutual standby power supply between the 12V power supply network and the 48V power supply network. On the basis of meeting the power supply requirement, the complexity and the failure rate of the power supply system are reduced, and the expansibility and the compatibility are improved.