602 results about "Functional safety" patented technology

The invention provides a dynamic fault-tolerant control method based on an expected function safety mechanism, and the method comprises the steps: 1, selecting the model of a sensor, and enabling the sensor to be distributed at the periphery of a vehicle body; 2, building a decision algorithm model, carrying out environment scene recognition, planning a driving path and speed according to data obtained by a sensing layer, evaluating safety risks of different decisions, and carrying out judgment and decision making on various conditions; 3, control interfaces of a vehicle power system, a steering system and a braking system are established, and the electronic control unit converts a decision control instruction output by the decision algorithm model into actual vehicle operation through the control interfaces; 4, performing an expected function safety mechanism, performing real-time monitoring on state parameters of the vehicle, and analyzing detection data through a fault detection algorithm; 5, implementing a fault tolerance strategy; and 6, continuously monitoring the actual driving state and the system response condition of the vehicle, and adjusting the fault tolerance strategy.

The invention relates to the field of task queue scheduling of automobile chips, in particular to a test case dynamic priority scheduling method for automobile electronic chips. Comprising the following steps: analyzing standard test data of the automobile electronic chip, and organizing a structured data set associated with the physical layout of the chip; identifying failure clusters and noise points on the structured data set by using a data clustering algorithm; extracting geometric and position features of the failure cluster, classifying the failure cluster into a known failure mode by using a classifier, performing correlation analysis on the failure mode, an upstream key process step and an equipment log, and establishing a causal relationship; calculating a function security risk score for each chip; and when the function security risk score is higher than a preset risk threshold value, generating and executing a dynamic task rearrangement instruction, and dynamically improving the execution priority of the test case. According to the method, the priority is dynamically selected according to the function security risk score through the dynamic task rearrangement instruction, so that the test time is saved, and the coverage depth and quality of the test are improved.

The invention provides a vehicle-mounted controller memory monitoring method based on differential redundancy, and relates to the technical field of electric monitoring, and the method comprises the following steps: constructing a multi-dimensional graph representation and feature dictionary of a memory region; utilizing reinforcement learning to adaptively optimize a monitoring strategy according to a real-time state and a prediction risk; executing multi-level differential verification of context awareness, and taking a verification result as an observation evidence; performing deep fault probability prediction and interpretability analysis by adopting a graph neural network; through Bayesian or fuzzy logic intelligent fusion verification observation and model prediction, high-confidence risk assessment is realized; and active protection instructions such as predictive error correction and fault isolation are generated and triggered based on an evaluation result and closed-loop feedback. According to the scheme, prediction, adaptation, efficient verification and intelligent decision making are integrated, the foreseeability, adaptability, efficiency and robustness of vehicle-mounted memory monitoring are remarkably improved, and a comprehensive and advanced guarantee is provided for function safety and information safety of a vehicle.

The invention discloses a multi-dimensional safety fusion risk assessment method and related equipment, and relates to the technical field of automatic driving, and the method comprises the steps: obtaining a first data set and a second data set of a target system; performing functional security risk analysis, expected functional security risk analysis and information security risk analysis on the first data set to identify a hazardous event of the target system; based on the second data set, establishing a dynamic scene model, and obtaining a threat level of the hazard event through the dynamic scene model; constructing a multi-dimensional risk matrix according to the hazard event, the dynamic scene model and the threat level; and obtaining a risk value of the hazard event based on the multi-dimensional risk matrix, and performing risk grade division according to the risk value to obtain a multi-dimensional security risk assessment result of the target system.

The invention discloses a safe torque cut-off and electronic star sealing device and an elevator system, relates to the technical field of elevators, and is used for realizing STO and electronic star sealing functions. Aiming at the problem that a common contactor-free scheme at present cannot ensure the function safety, the invention provides the safe torque cut-off and electronic star sealing device, and the STO and electronic star sealing functions of an elevator are ensured through a safe torque cut-off module and an electronic star sealing module. Meanwhile, failure detection is carried out on the two newly-added modules through the control module, and a mutual detection mechanism between the control module and the safe torque cut-off module is established. When any one of the three newly added modules fails, the failure can be detected and the STO or electronic star sealing function is triggered. On the basis, all modules used for replacing a traditional contactor to achieve STO and electronic star sealing functions in the device establish failure detection mechanisms, so that the device can meet the requirement of the elevator for the function safety level.

The invention provides an MCU function security implementation system based on a domain controller, and relates to the technical field of domain controllers, the system realizes dual backup storage and on-site execution of program codes by combining a security MCU without a built-in program memory with at least two redundant plug-in nonvolatile storage units, and the security of the MCU is improved. Consistency verification is carried out on key codes or data in the running process, and system failure caused by single-point storage faults or data tampering is effectively prevented; meanwhile, read-write operation without losing data during power failure is isolated through the independent data storage unit, and resource conflict and interference between program execution and data storage are avoided; the ASIL D-level power management unit supporting two-way fault monitoring is matched, resetting can be triggered in time or the MCU enters a safe state when a power supply is abnormal or an MCU internal fault occurs, and therefore a high-reliability and high-safety domain controller MCU system is constructed on the hardware architecture level, and the capacity of the MCU for meeting the ASIL D function safety level in a plug-in storage scene is improved.

The invention provides an intelligent redundancy control method based on functional safety, and the method comprises the steps: 1, collecting key parameters in real time, and outputting a safety score S according to a fuzzy logic formula S = 0.3 XTnorm + 0.2 Vstable + 0.5 Cdelay; 2, preprocessing the key parameters, the safety score, the environmental data and the historical fault records, constructing a risk assessment model through the preprocessed data, and performing risk grade division; 3, triggering redundancy strategy adjustment according to the risk level and the safety score; and step 4, when the redundancy strategy is adjusted to a high-risk scene, triggering switching logic through hardware interruption, and completing redundancy control. According to the technical scheme provided by the invention, the problems that the existing scheme is high in cost, slow in response, incapable of adapting to a dynamic risk environment and easy to cause simultaneous failure of multiple nodes are effectively solved.

The invention discloses a vehicle expected function safety data-driven closed-loop solving method, system and equipment and a storage medium, belongs to the technical field of vehicle expected function safety, and solves the technical problem that in the prior art, a closed-loop expected function safety problem solving method for carrying out data driving on actually occurring hazardous events is lacked. Acquiring driving data before and after the vehicle encounters the hazard event; performing functional deviation analysis and trigger condition induction on the preprocessed driving data; making a multi-dimensional system optimization scheme; and when a hazard event occurs in the vehicle, performing recharge analysis on the driving data to obtain a residual risk which cannot accept an expected response and a residual risk which can accept an expected response, updating a multi-dimensional system optimization scheme, optimizing a vehicle function module, performing hazard identification and risk assessment, and putting the vehicle into operation after the vehicle passes the hazard event. The method is used for realizing system function boundary continuous expansion and safety capability evolution, and guaranteeing the expected function safety of the vehicle in the whole service cycle.

The invention provides a vehicle auxiliary driving system which comprises a surrounding layer and a core layer, the surrounding layer comprises a function safety module and an information safety module, and the core layer comprises an SoC performance domain, an MCU real-time domain and a host end. The architecture design of the vehicle auxiliary driving system is carried out according to business layering, domain classification and the like, a software design based on layered decoupling and service dynamic management and a core design oriented to service and middleware management are provided based on an SoC performance domain, and the coupling between software and a hardware system is reduced; and in combination with the global surrounding design of function security and information security and task shunting at the host end, the coupling and communication load of the system are reduced on the premise that the system is safe and reliable, and the scene adaptability is improved.

The invention relates to the technical field of safety testing, and particularly provides a method, device and equipment for generating an expected function safety testing scene library, and the method comprises the steps: obtaining a parameter combination of key parameters in a pre-constructed basic scene; wherein the key parameters comprise environment parameters, traffic dynamic parameters and vehicle system parameters; generating a plurality of test scenes based on the parameter combination; after screening the plurality of test scenes, constructing a test scene library; wherein the test scene library is used for an expected function safety test of the intelligent driving vehicle. According to the embodiment of the invention, a rich expected function security test scene library can be constructed, and support is provided for expected function security test.

The embodiment of the invention relates to the technical field of vehicle intelligent control, and discloses a vehicle remote control parking system, a control method and equipment, and the system comprises an intelligent driving domain control SOC and an intelligent driving domain control MCU which are in communication connection; the intelligent driving domain control MCU is provided with an ultrasonic algorithm module, a CAN signal processing module, a first remote control parking module, an arbitration module and a vehicle control module. The first remote control parking module arranged in the intelligent driving domain control MCU can independently receive obstacle distance data of the ultrasonic algorithm module and vehicle state signals of the CAN signal processing module, a basic parking track is rapidly generated, waiting for starting of the intelligent driving domain control SOC is not needed, the waiting time of the system is shortened, and the parking efficiency is improved. The basic parking track is strictly verified through the arranged arbitration module, the execution of unsafe tracks exceeding a threshold value is refused, and when the arbitration module judges that the collision risk exists according to the obstacle distance data, the emergency braking instruction is immediately triggered, collision is avoided, and the automobile function safety standard is met.

The invention provides a cabin integration method of whole vehicle self-adaption platform service based on SOA and a vehicle, and relates to the technical field of vehicle SOA service, the method comprises the following steps: deeply integrating functional components of a whole vehicle self-adaption platform into an Android operating system, and embedding a communication module into an Android hardware abstraction layer; the original biochemical deployment of the SOA service in the cabin domain is realized; meanwhile, an efficient and low-delay service calling interface is constructed by expanding a communication mechanism between Android native processes, so that the Android application can directly call the whole vehicle level SOA service, and the dependence of traditional cross-domain communication on a vehicle-mounted Ethernet and a central gateway is avoided; besides, processor core resources are dynamically allocated in combination with the function security level of the SOA service, so that the real-time performance and execution reliability of high-security-level tasks are guaranteed, and the overall resource utilization efficiency of the system is improved.

The invention provides a vehicle motion cooperative control system comprising a central control unit used for receiving a sensor signal, calculating a control instruction and outputting the control instruction to an actuator; the plurality of sensors are used for collecting vehicle state signals and are connected to the central control unit; the actuators are used for receiving the control instructions and executing braking, steering, driving and suspension control; and the brake redundancy controller and the steering redundancy controller are used for taking over corresponding functions when the central control unit fails. Through the highly integrated architecture design, the motion control core function is concentrated on the central control unit, the delay and synchronization problems of multi-system cooperative control are solved, the cost and the system complexity are reduced, meanwhile, the function safety is guaranteed through the redundancy design, and an efficient hardware foundation and a software platform are provided for development of the intelligent chassis.

The invention relates to the technical field of automatic driving, in particular to an automatic driving robust planning system and method based on dual-channel perception, and the system and method construct a standby input channel independent of a main perception model at the planning level. And the problem of failure of sensing a single point is fundamentally solved. Automatic and seamless mode switching is realized through confidence monitoring, and high performance in a normal state and high safety in an abnormal state are considered at the same time. The design target of the second sensing path (occupying the grid) is more single (geometric occupation), and the second sensing path can be made lighter and more robust and is complementary with the first path. The architecture provided by the invention meets the requirements on redundancy and safety architecture in the functional safety standard (such as ISO 26262) of the automobile industry, and is beneficial to improving the overall safety level of the automatic driving system.

The invention provides a fault protection circuit meeting function safety diagnosis and a control method thereof.The fault protection circuit comprises a sampling module, a comparison module and a loop switch control module, working current in a power supply loop is converted into sampling voltage through the sampling module, the sampling voltage is compared with reference voltage through the comparison module, and the loop switch control module controls the function safety diagnosis. And the loop switch control module is connected with the comparison module and the enable signal, and controls on-off of a loop switch in the power supply loop according to the comparison result and the enable signal, so that when the power supply loop breaks down, the loop switch is cut off, and the power supply loop is protected. The fault protection circuit monitors the working current of the power supply loop in real time, outputs an abnormal power supply signal and cuts off the loop switch in time when the working current is abnormal, so that the power supply loop is protected, the safety level of a vehicle is met, the circuit is low in cost, the diagnosis requirement of functional safety decomposition can be well met, and the fault protection circuit is suitable for popularization and application. And the reliability of circuit operation is improved.

The invention relates to the technical field of software security, and particularly discloses a real-time vulnerability detection and repair system of an AI code generation model. The system comprises a central coordinator, a real-time monitoring module, a deep analysis module, an intelligent repair module and a feedback learning module. The real-time monitoring module rapidly scans and triggers the generated codes; the deep analysis module performs interprocess stain analysis on the trigger code to generate a diagnosis report containing a precise data flow path; the intelligent repair module generates a repair patch under the function equivalence constraint according to the diagnosis report; and the feedback learning module collects the processing feedback of the developer on the repair patch, and drives the continuous optimization of each module of the system. According to the method, through layered progressive analysis and repair generation, the repair accuracy and the function safety are ensured; through a feedback learning mechanism, the self-adaptive evolutionary ability of the system is realized, the problems of unavailability of repair suggestions and static stiffness of the system in the prior art are solved, and real-time protection is provided for AI auxiliary programming.

The invention is suitable for the field of vehicle information security, and provides a CAN intrusion detection method based on a signal relation graph Transform, which comprises the following steps: converting a frame sequence of a CAN network into a signal sequence, deeply mining key signal features in a message, systematically analyzing complex relevance between signals, and constructing a signal node feature representation system. In order to further improve the detection precision, the method uses a graph attention network and a Transform model, and optimizes the extraction and learning process of input signal features, thereby significantly reducing the false alarm rate in abnormal traffic recognition. By accurately capturing abnormal behaviors in the CAN network, the method can effectively cope with potential network attacks, meets the requirements of the advanced intelligent networked vehicle for functional security and network security, and provides important technical support for realizing a high-reliability and high-security vehicle-mounted communication system.

The invention provides a domain control architecture and system based on a drive-by-wire chassis and a vehicle, the domain control architecture relates to a CDU, an electronic mechanical brake EMB, a drive-by-wire steering SBW, a rear wheel steering RWS and a semi-active suspension, the CDU is used as a central processing unit of all electronic control modules of the chassis, interacts with intelligent driving, power and a vehicle body of the whole vehicle through a CAN bus, and is used as a central processing unit of all electronic control modules of the chassis; and the central control unit is responsible for inputting and outputting all signals of the chassis, and is responsible for logic operation of related functions of braking, steering and suspension according to related request signals of the whole vehicle and transmitting the related functions to the braking, steering and suspension actuator to execute steering, braking and suspension adjusting functions. Redundancy design is carried out from electronic hardware levels such as power supply, communication, a sensor, a domain controller and an actuator, various failure backup control is designed through a function strategy, when a system has single-point failure, function output can still be ensured, and the function safety of the system is improved.

Compliance of an operating system with safety requirements can be evaluated and monitored using software bill of materials (SBOMs). For example, a system can receive first metadata indicative of a current state of an operating system. The operating system can be used to execute software services, and the operating system can be associated with a functional safety standard issued. The system can further determine whether the current state matches a verified state of the operating system based on the first metadata and based on second metadata indicative of the verified state. The second metadata can be stored in an operating system SBOM. Then, based on determining that the current state matches the verified state, the system can verify compliance of the operating system with the functional safety standard and execute, via the operating system, the software services.

The invention provides a chassis universal function safety test platform which comprises a platform plate, a roller, a clamping mechanism, an upper computer and a friction adjusting mechanism. The friction adjusting mechanism comprises magnetorheological fluid, a covering film, an electromagnetic coil array, an electric sliding table, a liquid pump, a filtering pipeline, a magnetic sieve plate, an L-shaped pipe, a transverse pipe, a telescopic pipe, an insertion pipe, a top plate, a first electric push rod and a conveying pipe, the wheels make contact with the magnetorheological fluid through the covering film, and a magnetic field generated by the electromagnetic coil array can change the state of the magnetorheological fluid; the magneto-rheological fluid can be switched between a liquid state and a semi-solid state, road surfaces with different friction coefficients are simulated, rich and comprehensive test scenes are provided, the accuracy of a chassis test result is improved, meanwhile, the magneto-rheological fluid can enter the filter pipeline under the action of the liquid pump, metal scraps are filtered through the magnetic sieve plates arranged in the filter pipeline in a gradient mode, and the test efficiency is improved. Failure caused by agglomeration effect is avoided, influence on magnetic field intensity is reduced, and accuracy of test results is further guaranteed.

The embodiment of the invention provides a vehicle controller system and method and a computer readable storage medium, and the system comprises an application processing unit which is used for executing application software based on a quality management level corresponding to a vehicle industry standard; the software monitoring processing unit is used for monitoring the software running state of the application software based on the first security level; the hardware monitoring processing unit is used for monitoring the first hardware running state of the application processing unit and the second hardware running state of the software monitoring processing unit based on the second security level; wherein the first safety level and the second safety level meet a target function safety level corresponding to the controller system through level decomposition and superposition, and the first safety level, the second safety level and the target function safety level are selected from a plurality of safety integrity levels corresponding to the vehicle industry standard. The technical problem that the flexibility of a controller system of a vehicle is poor is solved.

Provided is a robot control device that controls a robot. The robot control device includes: a standard function unit that controls activation of standard functions of the robot and has a function of monitoring the robot; a safety function unit that controls a safety function for managing the safety of the robot; a setting unit for setting setting information related to setting items used in common in the control of the safety function by the safety function unit and in the monitoring of the robot by the standard function unit; and a switching unit that switches between the activation of the safety function based on the setting information by the safety function unit and the monitoring of the robot based on the setting information by the standard function unit.

Providing adaptive and dynamic redundancy for functional safety in processor devices is disclosed herein. In some aspects, a processor device comprises a central configurable redundancy logic block (CRLB) controller circuit, a redundancy map matrix switch circuit, a plurality of safety-critical block circuits, and a plurality of CRLB clusters. The central CRLB controller circuit receives redundancy mapping data for each safety-critical block circuit, and receives an indication of one or more active block circuits among the safety-critical block circuits. The central CRLB controller circuit transmits the redundancy mapping data corresponding to the active block circuits to the redundancy map matrix switch circuit, which configures one or more CRLB clusters to duplicate functionality of the respective active block circuits based on the redundancy mapping data. The redundancy map matrix switch circuit then provides logic redundancy for the one or more active block circuits using the one or more CRLB clusters.

The invention provides a foundation pit supporting structure design method and system and a cloud platform, and belongs to the technical field of intelligent rock-soil control, and the method comprises the steps: building a coupling model, outputting a multi-field interaction result, carrying out intelligent partitioning, and generating a customized reinforcement scheme based on a risk working condition. A transition layer is designed according to the quantitative partition transfer relation, a fusion supporting system is formed, the fusion supporting system is combined with failure differences to construct a life cycle model and an early warning model, full-life-cycle dynamic monitoring is achieved, the monitoring efficiency is improved, environment monitoring data and supporting structure design are combined, and the reliability of the system is improved. Environmental factors are fully utilized, geotechnical engineering is promoted to be transformed to intelligence and greenization, functional safety and ecological protection are achieved, and meanwhile the service life of the foundation pit supporting structure is prolonged.

The invention discloses a CAN FD optimization design method and system with function safety perception, and belongs to the technical field of CAN FD network communication. The method comprises the following steps: pre-dividing according to signal functions, and adding corresponding copies to a signal set for signals which need to be backed up by different nodes; generating an initial packaging scheme based on the signal set, optimizing the initial packaging scheme, and calculating a timeout probability of the signal caused by a transmission fault; judging whether the overtime probability of each signal is smaller than a PMHF threshold value corresponding to the security level of the signal; when the overtime probability of any signal is greater than a threshold value, adding a same node copy for the signal and re-optimizing a packaging scheme; and when the timeout probabilities of all the signals meet the requirements, a final packaging scheme is obtained. According to the method, the different node copies and the same node copies are cooperatively used, and iterative optimization based on the timeout probability is combined, so that fine control on the timeout probability of signals with different safety levels is realized, and the functional safety of the CAN FD network in a severe environment is improved.

1. The name of the design product: safety controller (YPS604 / 605). 2. The use of the design product: for the functional safety control of complex mobile engineering equipment, such as earth-moving machinery, concrete machinery, hoisting machinery, aerial work machinery, road machinery, pile-driving machinery, mining machinery and agricultural machinery, etc. 3. The design points of the design product: in shape. 4. The picture or photo that best indicates the design points: design 1 perspective view 1. 5. Design 1 is designated as the basic design.

Methods and apparatuses for comparing redundant signals in functional safe systems are provided, including methods for mitigating differing signal path delays and for signal weighting of the redundant signals are proposed. An Apparatus includes a first signal path for a first measurement signal of a physical quantity, the first signal path having a first signal propagation delay; a second signal path for a second measurement signal of the physical quantity, the second signal path having a second signal propagation delay different from the first signal propagation delay; a delay compensation circuit configured to compensate for a difference between the first and second signal propagation delays to generate delay-compensated first and second measurement signals; and comparison circuitry configured to compare the delay-compensated first and second measurement signals.

This invention belongs to the field of flight control computer hardware architecture technology, specifically relating to a heterogeneous flight control core circuit and system. This invention integrates a microcontroller unit and an artificial intelligence coprocessor unit on the same printed circuit board, achieving data and command interaction through isolated high-speed interconnect channels. The microcontroller unit constitutes the safety control and real-time decision-making domain, used to execute safety-critical and hard real-time tasks, and to implement operational management and fault isolation for the artificial intelligence coprocessor unit; the artificial intelligence coprocessor unit constitutes the intelligent sensing and computing domain, used to execute computationally intensive and non-real-time critical tasks. This architecture achieves decoupling and collaboration between the safety domain and the computing domain at the hardware level, ensuring both high functional safety and determinism in flight control, while fully releasing the high-performance computing power required for intelligent sensing, thus meeting the dual requirements of advanced aircraft for highly reliable flight control and intelligent function expansion.

The present application provides a temperature detection circuit with functional safety, which relates to the field of temperature detection technology. The circuit includes: a self-test module, a temperature detection module and a control module connected to each other, and a power supply module, the power supply module is connected to the self-test module and the temperature detection module respectively; the power supply module includes a power supply and a voltage divider resistor connected in sequence, which is used to provide voltage to the self-test module or the temperature detection module through the voltage divider resistor; the self-test module is used to turn on after responding to the self-test signal, and divide the voltage with the power supply module to generate a first voltage signal; the temperature detection module is used to turn on after responding to the temperature detection signal, and divide the voltage with the power supply module to generate a second voltage signal; the control module is used to output the self-test signal or the temperature detection signal, and receive the first voltage signal or the second voltage signal to perform circuit functional safety judgment or temperature calculation. The present application is used to ensure the reliability of the circuit and make the detection result more accurate.