760 results about "Functional safety" patented technology

The invention provides a dynamic fault-tolerant control method based on an expected function safety mechanism, and the method comprises the steps: 1, selecting the model of a sensor, and enabling the sensor to be distributed at the periphery of a vehicle body; 2, building a decision algorithm model, carrying out environment scene recognition, planning a driving path and speed according to data obtained by a sensing layer, evaluating safety risks of different decisions, and carrying out judgment and decision making on various conditions; 3, control interfaces of a vehicle power system, a steering system and a braking system are established, and the electronic control unit converts a decision control instruction output by the decision algorithm model into actual vehicle operation through the control interfaces; 4, performing an expected function safety mechanism, performing real-time monitoring on state parameters of the vehicle, and analyzing detection data through a fault detection algorithm; 5, implementing a fault tolerance strategy; and 6, continuously monitoring the actual driving state and the system response condition of the vehicle, and adjusting the fault tolerance strategy.

Various aspects of the disclosure relate to enforcing dynamically updated network security policies in real-time (or upon an identified update) from multiple organizations and anonymously analyze computing system configuration information uploaded from third-party computing systems. An analysis engine monitors compliance information and compare the compliance information against the security rules and / or requirements for one or more enterprise networks. A visualization providing a network map with a visual representation of each product system service system may include communication links between internal applications and / or computing systems and drill-down capability to identify issues as they are occurring or are predicted to occur. The security escrow system may include a mechanism to automatically enable / disable access between third party networks and one or more enterprise computing systems in real-time based on identified compliance information.

The invention provides a risk processing method based on automatic driving, a readable storage medium and a program product, the method is applied to a vehicle, the vehicle is provided with a highly automatic driving (HAD) master control system and an HAD auxiliary control system which are used for controlling automatic driving of the vehicle, and the functional safety level of the HAD master control system is higher than that of the HAD auxiliary control system; the method comprises the steps that under the condition that it is determined that the current operation environment of a vehicle is in a design operation domain of an L3-level conditional automatic driving system, the vehicle is prevented from changing lanes within the user reaction duration after a current control system for automatic driving of the vehicle is controlled to be switched from an HAD main control system to an HAD auxiliary control system; and under the condition that a user takeover instruction is not received, if the operation duration of the HAD auxiliary control system is greater than the user response duration, executing a minimum risk strategy matched with the current operation environment.

The invention relates to the field of task queue scheduling of automobile chips, in particular to a test case dynamic priority scheduling method for automobile electronic chips. Comprising the following steps: analyzing standard test data of the automobile electronic chip, and organizing a structured data set associated with the physical layout of the chip; identifying failure clusters and noise points on the structured data set by using a data clustering algorithm; extracting geometric and position features of the failure cluster, classifying the failure cluster into a known failure mode by using a classifier, performing correlation analysis on the failure mode, an upstream key process step and an equipment log, and establishing a causal relationship; calculating a function security risk score for each chip; and when the function security risk score is higher than a preset risk threshold value, generating and executing a dynamic task rearrangement instruction, and dynamically improving the execution priority of the test case. According to the method, the priority is dynamically selected according to the function security risk score through the dynamic task rearrangement instruction, so that the test time is saved, and the coverage depth and quality of the test are improved.

The invention provides a vehicle-mounted controller memory monitoring method based on differential redundancy, and relates to the technical field of electric monitoring, and the method comprises the following steps: constructing a multi-dimensional graph representation and feature dictionary of a memory region; utilizing reinforcement learning to adaptively optimize a monitoring strategy according to a real-time state and a prediction risk; executing multi-level differential verification of context awareness, and taking a verification result as an observation evidence; performing deep fault probability prediction and interpretability analysis by adopting a graph neural network; through Bayesian or fuzzy logic intelligent fusion verification observation and model prediction, high-confidence risk assessment is realized; and active protection instructions such as predictive error correction and fault isolation are generated and triggered based on an evaluation result and closed-loop feedback. According to the scheme, prediction, adaptation, efficient verification and intelligent decision making are integrated, the foreseeability, adaptability, efficiency and robustness of vehicle-mounted memory monitoring are remarkably improved, and a comprehensive and advanced guarantee is provided for function safety and information safety of a vehicle.

The invention discloses a multi-dimensional safety fusion risk assessment method and related equipment, and relates to the technical field of automatic driving, and the method comprises the steps: obtaining a first data set and a second data set of a target system; performing functional security risk analysis, expected functional security risk analysis and information security risk analysis on the first data set to identify a hazardous event of the target system; based on the second data set, establishing a dynamic scene model, and obtaining a threat level of the hazard event through the dynamic scene model; constructing a multi-dimensional risk matrix according to the hazard event, the dynamic scene model and the threat level; and obtaining a risk value of the hazard event based on the multi-dimensional risk matrix, and performing risk grade division according to the risk value to obtain a multi-dimensional security risk assessment result of the target system.

The invention discloses a safe torque cut-off and electronic star sealing device and an elevator system, relates to the technical field of elevators, and is used for realizing STO and electronic star sealing functions. Aiming at the problem that a common contactor-free scheme at present cannot ensure the function safety, the invention provides the safe torque cut-off and electronic star sealing device, and the STO and electronic star sealing functions of an elevator are ensured through a safe torque cut-off module and an electronic star sealing module. Meanwhile, failure detection is carried out on the two newly-added modules through the control module, and a mutual detection mechanism between the control module and the safe torque cut-off module is established. When any one of the three newly added modules fails, the failure can be detected and the STO or electronic star sealing function is triggered. On the basis, all modules used for replacing a traditional contactor to achieve STO and electronic star sealing functions in the device establish failure detection mechanisms, so that the device can meet the requirement of the elevator for the function safety level.

The present invention provides a microprocessor fault recovery device and method, and a chip, including a microprocessor CPU with a dual-core lock-step structure, a field backup module, and a safety management module; when running to a preset recovery point in the program code, the field backup module records the location of the recovery point and the values ​​of important parameters in the current field environment; when receiving a CPU fault indication, the safety management module notifies the CPU to suspend operation and notifies the field backup module to restore the field; the field backup module overwrites the corresponding current data with the backup data; after receiving a successful response to field recovery, the safety management module adjusts the program counter to the location of the recovery point and restarts the CPU. The present invention can quickly bring the system back to a safe operating state when a CPU error occurs, thereby improving the robustness of automotive-grade functional safety.

The invention provides an MCU function security implementation system based on a domain controller, and relates to the technical field of domain controllers, the system realizes dual backup storage and on-site execution of program codes by combining a security MCU without a built-in program memory with at least two redundant plug-in nonvolatile storage units, and the security of the MCU is improved. Consistency verification is carried out on key codes or data in the running process, and system failure caused by single-point storage faults or data tampering is effectively prevented; meanwhile, read-write operation without losing data during power failure is isolated through the independent data storage unit, and resource conflict and interference between program execution and data storage are avoided; the ASIL D-level power management unit supporting two-way fault monitoring is matched, resetting can be triggered in time or the MCU enters a safe state when a power supply is abnormal or an MCU internal fault occurs, and therefore a high-reliability and high-safety domain controller MCU system is constructed on the hardware architecture level, and the capacity of the MCU for meeting the ASIL D function safety level in a plug-in storage scene is improved.

The invention provides an intelligent redundancy control method based on functional safety, and the method comprises the steps: 1, collecting key parameters in real time, and outputting a safety score S according to a fuzzy logic formula S = 0.3 XTnorm + 0.2 Vstable + 0.5 Cdelay; 2, preprocessing the key parameters, the safety score, the environmental data and the historical fault records, constructing a risk assessment model through the preprocessed data, and performing risk grade division; 3, triggering redundancy strategy adjustment according to the risk level and the safety score; and step 4, when the redundancy strategy is adjusted to a high-risk scene, triggering switching logic through hardware interruption, and completing redundancy control. According to the technical scheme provided by the invention, the problems that the existing scheme is high in cost, slow in response, incapable of adapting to a dynamic risk environment and easy to cause simultaneous failure of multiple nodes are effectively solved.

The invention discloses a vehicle expected function safety data-driven closed-loop solving method, system and equipment and a storage medium, belongs to the technical field of vehicle expected function safety, and solves the technical problem that in the prior art, a closed-loop expected function safety problem solving method for carrying out data driving on actually occurring hazardous events is lacked. Acquiring driving data before and after the vehicle encounters the hazard event; performing functional deviation analysis and trigger condition induction on the preprocessed driving data; making a multi-dimensional system optimization scheme; and when a hazard event occurs in the vehicle, performing recharge analysis on the driving data to obtain a residual risk which cannot accept an expected response and a residual risk which can accept an expected response, updating a multi-dimensional system optimization scheme, optimizing a vehicle function module, performing hazard identification and risk assessment, and putting the vehicle into operation after the vehicle passes the hazard event. The method is used for realizing system function boundary continuous expansion and safety capability evolution, and guaranteeing the expected function safety of the vehicle in the whole service cycle.

To meet requirements for improvement of a vehicle having autonomous driving capability.SOLUTION: Autonomous driving of a vehicle in which computerized perception by the vehicle, including of its environment and of itself (e.g., egomotion), is used to autonomously drive the vehicle and, additionally, can also be used to provide feedback to enhance performance, safety, and / or other attributes of autonomous driving of the vehicle (e.g., when certain conditions affecting the vehicle are determined to exist by detecting patterns in or otherwise analyzing what is perceived by the vehicle), by adjusting autonomous driving of the vehicle, conveying messages regarding the vehicle, and / or performing other actions concerning the vehicle.SELECTED DRAWING: Figure 1

The invention discloses an inverter turn-off protection circuit, which comprises a bus voltage sampling circuit, a current sampling module, a multiplier, a threshold voltage comparison circuit and a gate turn-off circuit, and is characterized in that the bus voltage sampling circuit is used for sampling an inverter bus voltage to obtain a sampling voltage; the current sampling module is used for sampling phase current output by the alternating current side of the inverter to obtain sampling current; the multiplier is used for receiving the sampling voltage and the sampling current and carrying out multiplication operation to obtain instantaneous power; the threshold voltage comparison circuit is used for comparing the instantaneous power with a threshold to obtain a level signal; and the gate pole turn-off circuit is used for controlling the turn-off of a gate pole turn-off switch tube according to the level signal output by the threshold voltage comparison circuit so as to control the turn-off of a power tube of the inverter. The inverter turn-off protection circuit operates independently, is not affected by an MCU system, is low in cost and high in response speed, and greatly improves function safety.

The invention provides a vehicle auxiliary driving system which comprises a surrounding layer and a core layer, the surrounding layer comprises a function safety module and an information safety module, and the core layer comprises an SoC performance domain, an MCU real-time domain and a host end. The architecture design of the vehicle auxiliary driving system is carried out according to business layering, domain classification and the like, a software design based on layered decoupling and service dynamic management and a core design oriented to service and middleware management are provided based on an SoC performance domain, and the coupling between software and a hardware system is reduced; and in combination with the global surrounding design of function security and information security and task shunting at the host end, the coupling and communication load of the system are reduced on the premise that the system is safe and reliable, and the scene adaptability is improved.

The invention relates to the technical field of intelligent driving, and discloses an unmanned vehicle complex scene decision control method and system based on deep reinforcement learning, and the method comprises the steps: extracting the multi-modal features of a traffic environment in real time through a graph attention network, and generating a scene descriptor; generating a decision strategy based on a dual-channel strategy generator, selecting a decision path according to a scene complexity evaluation result, calling a pre-decision cache library when the complexity is lower than a first threshold value, starting edge cooperative calculation when the complexity is higher than a second threshold value, and triggering cloud strategy generation when the complexity exceeds a third threshold value; and multi-target dynamic constraint verification is carried out on the generated candidate strategies, and execution strategies conforming to the safety boundary are screened and output to a vehicle control terminal. According to the method, the decision-making precision, the response real-time performance and the multi-objective optimization capability of the unmanned driving system in a complex traffic scene are remarkably improved, and meanwhile, efficient utilization of computing resources and functional safety compliance are realized.

The invention relates to the technical field of safety testing, and particularly provides a method, device and equipment for generating an expected function safety testing scene library, and the method comprises the steps: obtaining a parameter combination of key parameters in a pre-constructed basic scene; wherein the key parameters comprise environment parameters, traffic dynamic parameters and vehicle system parameters; generating a plurality of test scenes based on the parameter combination; after screening the plurality of test scenes, constructing a test scene library; wherein the test scene library is used for an expected function safety test of the intelligent driving vehicle. According to the embodiment of the invention, a rich expected function security test scene library can be constructed, and support is provided for expected function security test.

The invention relates to the technical field of vehicle gauge function safety design, and discloses a function safety design method of an Online NDT for sram, which comprises an NDT controller comprising an Intfctrl module, two NDTCTRL modules, a Compare module, an Arbitintf module and an Arbit module. The CPU is used for managing the NDT controller and reading information through the APB, and meanwhile, various Master accesses the SRAM after passing through the Arbit module through the AXI; the mutual redundancy of the two NDTCTRL modules is realized; the Compare module is used for supporting error injection and result comparison; and the Arbit module is responsible for arbitrating access requests from the NDTCTRL and the AXI, so that the Online NDT test does not influence the bandwidth of the SRAM interface or occupies part of the bandwidth. According to the function safety design method for the Online NDT of the sram, mutual redundant Online NDT design is utilized on the overall architecture, an error injection mechanism is supported, and a Lock Step Logic front-back staggered configuration three-level register and phase inverter mechanism is adopted, so that the whole design is safer, more flexible and more reliable.

The embodiment of the invention provides a hybrid redundant power supply system and a vehicle. The system comprises a 12V power supply network, a 48V power supply network and a bidirectional DCDC, the 12V power supply network comprises a low-voltage power distribution unit, the low-voltage power distribution unit is integrated with a 12V safety switch, the 12V safety switch is used for 12V power supply redundant power supply and meets the function safety ASIL-D requirement, the 48V power supply network comprises a medium-voltage power distribution unit, the medium-voltage power distribution unit is integrated with a 48V safety switch, the 48V safety switch is used for 48V power supply redundant power supply, and the bidirectional DCDC is connected with the medium-voltage power distribution unit. And the bidirectional DCDC is connected in series between the 12V power supply network and the 48V power supply network, and is used for mutual standby power supply between the 12V power supply network and the 48V power supply network. On the basis of meeting the power supply requirement, the complexity and the failure rate of the power supply system are reduced, and the expansibility and the compatibility are improved.

The invention discloses an AMT function security test method based on hardware-in-the-loop, which comprises the following steps: implementing the AMT function security test method based on HIL according to an AMT HIL function security test process, including hardware platform building and software platform building; hardware comprises a load electromagnetic valve group, an HIL cabinet, a TCU and an upper computer, the TCU is connected with a corresponding pin of the HIL cabinet, a pin of a control signal of the load electromagnetic valve group needs to be led out from a Load board card of the HIL cabinet and is connected with the load electromagnetic valve group, and the upper computer is connected with the HIL cabinet to provide operation software; the AMT function security test method based on hardware-in-the-loop provided by the invention has correct function performance, accuracy and time sequence of a security mechanism; consistency and correctness of interface realization are realized; and verifying the validity and robustness level of the diagnosis or failure coverage of the security mechanism.

The invention provides a verification control method for a vehicle-gauge-level SoC chip and related equipment, and the device comprises a function safety bus which is connected with a plurality of master equipment and slave equipment, and when the master equipment initiates a write operation, a master equipment end verification module is used for verifying write data sent to the slave equipment, generating a verification value, and adding the verification value to the write data; the slave device end verification module is used for receiving the write data and the verification value from the master device, and verifying the write data based on the verification value; when the master device initiates a read operation, the slave device end verification module is used for verifying read data sent to the master device, generating a verification value and adding the verification value to the read data; the master device end verification module is used for receiving the read data and the verification value from the slave device and conducting verification verification on the read data based on the verification value, single-point failure verification on the bus can be achieved, then the system can conduct further safety processing, and the safety and reliability of the functional safety bus are improved.

The embodiment of the invention relates to the technical field of vehicle intelligent control, and discloses a vehicle remote control parking system, a control method and equipment, and the system comprises an intelligent driving domain control SOC and an intelligent driving domain control MCU which are in communication connection; the intelligent driving domain control MCU is provided with an ultrasonic algorithm module, a CAN signal processing module, a first remote control parking module, an arbitration module and a vehicle control module. The first remote control parking module arranged in the intelligent driving domain control MCU can independently receive obstacle distance data of the ultrasonic algorithm module and vehicle state signals of the CAN signal processing module, a basic parking track is rapidly generated, waiting for starting of the intelligent driving domain control SOC is not needed, the waiting time of the system is shortened, and the parking efficiency is improved. The basic parking track is strictly verified through the arranged arbitration module, the execution of unsafe tracks exceeding a threshold value is refused, and when the arbitration module judges that the collision risk exists according to the obstacle distance data, the emergency braking instruction is immediately triggered, collision is avoided, and the automobile function safety standard is met.

The invention provides a cabin integration method of whole vehicle self-adaption platform service based on SOA and a vehicle, and relates to the technical field of vehicle SOA service, the method comprises the following steps: deeply integrating functional components of a whole vehicle self-adaption platform into an Android operating system, and embedding a communication module into an Android hardware abstraction layer; the original biochemical deployment of the SOA service in the cabin domain is realized; meanwhile, an efficient and low-delay service calling interface is constructed by expanding a communication mechanism between Android native processes, so that the Android application can directly call the whole vehicle level SOA service, and the dependence of traditional cross-domain communication on a vehicle-mounted Ethernet and a central gateway is avoided; besides, processor core resources are dynamically allocated in combination with the function security level of the SOA service, so that the real-time performance and execution reliability of high-security-level tasks are guaranteed, and the overall resource utilization efficiency of the system is improved.

The invention provides a vehicle motion cooperative control system comprising a central control unit used for receiving a sensor signal, calculating a control instruction and outputting the control instruction to an actuator; the plurality of sensors are used for collecting vehicle state signals and are connected to the central control unit; the actuators are used for receiving the control instructions and executing braking, steering, driving and suspension control; and the brake redundancy controller and the steering redundancy controller are used for taking over corresponding functions when the central control unit fails. Through the highly integrated architecture design, the motion control core function is concentrated on the central control unit, the delay and synchronization problems of multi-system cooperative control are solved, the cost and the system complexity are reduced, meanwhile, the function safety is guaranteed through the redundancy design, and an efficient hardware foundation and a software platform are provided for development of the intelligent chassis.

The invention relates to the technical field of automatic driving, in particular to an automatic driving robust planning system and method based on dual-channel perception, and the system and method construct a standby input channel independent of a main perception model at the planning level. And the problem of failure of sensing a single point is fundamentally solved. Automatic and seamless mode switching is realized through confidence monitoring, and high performance in a normal state and high safety in an abnormal state are considered at the same time. The design target of the second sensing path (occupying the grid) is more single (geometric occupation), and the second sensing path can be made lighter and more robust and is complementary with the first path. The architecture provided by the invention meets the requirements on redundancy and safety architecture in the functional safety standard (such as ISO 26262) of the automobile industry, and is beneficial to improving the overall safety level of the automatic driving system.

The invention provides a fault protection circuit meeting function safety diagnosis and a control method thereof.The fault protection circuit comprises a sampling module, a comparison module and a loop switch control module, working current in a power supply loop is converted into sampling voltage through the sampling module, the sampling voltage is compared with reference voltage through the comparison module, and the loop switch control module controls the function safety diagnosis. And the loop switch control module is connected with the comparison module and the enable signal, and controls on-off of a loop switch in the power supply loop according to the comparison result and the enable signal, so that when the power supply loop breaks down, the loop switch is cut off, and the power supply loop is protected. The fault protection circuit monitors the working current of the power supply loop in real time, outputs an abnormal power supply signal and cuts off the loop switch in time when the working current is abnormal, so that the power supply loop is protected, the safety level of a vehicle is met, the circuit is low in cost, the diagnosis requirement of functional safety decomposition can be well met, and the fault protection circuit is suitable for popularization and application. And the reliability of circuit operation is improved.

The invention discloses a system-level fault and anomaly detection and management method and device for a vehicle-mounted Ethernet chip and a storage medium, and the method comprises the following steps: configuring a function safety management framework of the vehicle-mounted Ethernet chip, setting a fault detection unit according to a possible fault in each function module of the vehicle-mounted Ethernet chip, and setting a fault detection unit according to the fault in each function module of the vehicle-mounted Ethernet chip; the fault detection units gather fault information to a safety island in the vehicle-mounted Ethernet chip through a safety bus, and the safety island classifies faults and makes different responses to different faults. The invention provides a chip-level functional safety management framework, more specifically, fault detection units are added to all functional modules in a chip, all faults are uniformly integrated into a safety island in the chip for classified management, different types of faults are processed differently, and the safety of the chip is improved. And a fault response is made when basic functions of the chip are ensured as much as possible.

The invention relates to the technical field of software security, and particularly discloses a real-time vulnerability detection and repair system of an AI code generation model. The system comprises a central coordinator, a real-time monitoring module, a deep analysis module, an intelligent repair module and a feedback learning module. The real-time monitoring module rapidly scans and triggers the generated codes; the deep analysis module performs interprocess stain analysis on the trigger code to generate a diagnosis report containing a precise data flow path; the intelligent repair module generates a repair patch under the function equivalence constraint according to the diagnosis report; and the feedback learning module collects the processing feedback of the developer on the repair patch, and drives the continuous optimization of each module of the system. According to the method, through layered progressive analysis and repair generation, the repair accuracy and the function safety are ensured; through a feedback learning mechanism, the self-adaptive evolutionary ability of the system is realized, the problems of unavailability of repair suggestions and static stiffness of the system in the prior art are solved, and real-time protection is provided for AI auxiliary programming.

The invention is suitable for the field of vehicle information security, and provides a CAN intrusion detection method based on a signal relation graph Transform, which comprises the following steps: converting a frame sequence of a CAN network into a signal sequence, deeply mining key signal features in a message, systematically analyzing complex relevance between signals, and constructing a signal node feature representation system. In order to further improve the detection precision, the method uses a graph attention network and a Transform model, and optimizes the extraction and learning process of input signal features, thereby significantly reducing the false alarm rate in abnormal traffic recognition. By accurately capturing abnormal behaviors in the CAN network, the method can effectively cope with potential network attacks, meets the requirements of the advanced intelligent networked vehicle for functional security and network security, and provides important technical support for realizing a high-reliability and high-security vehicle-mounted communication system.

The invention provides a domain control architecture and system based on a drive-by-wire chassis and a vehicle, the domain control architecture relates to a CDU, an electronic mechanical brake EMB, a drive-by-wire steering SBW, a rear wheel steering RWS and a semi-active suspension, the CDU is used as a central processing unit of all electronic control modules of the chassis, interacts with intelligent driving, power and a vehicle body of the whole vehicle through a CAN bus, and is used as a central processing unit of all electronic control modules of the chassis; and the central control unit is responsible for inputting and outputting all signals of the chassis, and is responsible for logic operation of related functions of braking, steering and suspension according to related request signals of the whole vehicle and transmitting the related functions to the braking, steering and suspension actuator to execute steering, braking and suspension adjusting functions. Redundancy design is carried out from electronic hardware levels such as power supply, communication, a sensor, a domain controller and an actuator, various failure backup control is designed through a function strategy, when a system has single-point failure, function output can still be ensured, and the function safety of the system is improved.

The invention provides a functional secure communication method for a Bluetooth scanner, which belongs to the technical field of communication control, and comprises the following steps of: 1, activating the scanner, entering a Bluetooth pairing mode to wait for pairing, and further performing Bluetooth pairing based on a preset mode; step 2, obtaining user requirements and user main equipment configuration data, and further determining a working mode of the scanner; step 3, performing corresponding initialization on a corresponding data transmission protocol based on the working mode of the scanner; 4, a user presses down a scanning key to trigger a code scanning action, a scanning head decodes the data, and the decoded data is transmitted to a mainboard through a serial port based on an initialized data transmission protocol; and step 5, acquiring a connection mode of the scanner, and performing data processing and packaging by the mainboard based on the connection mode of the scanner. Efficient and safe data transmission and compatibility optimization are realized, and the adaptability and reliability of the Bluetooth scanner are improved.