Onboard Controller Start-Stop Hierarchy for Fault Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current onboard controller systems face challenges in safely and efficiently managing the start and stop of controller applications, leading to increased complexity and potential failure points, which affects the safe operation of vehicles.
Innovation Solution
A safe redundant start-stop system for onboard controllers, comprising a guardian component, process management component, state management component, and health management component, which implement functional grouping and hierarchical structuring to manage the start and stop of controller applications, including monitoring, restarting, and generating messages to ensure safe operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If the application software of an onboard controller is directly managed by an SOC, then the control function is integrated, but the system complexity increases and more failure points are introduced
Solution Approach 1:
The patent segments the onboard controller into multiple independent processes including a guardian process, application management process, state management process, and health management process. Each process has specific responsibilities and can operate independently, reducing system complexity while maintaining integrated control functionality through inter-process communication.
2Extent of automation
If the application software is directly managed by SOC, then integration is achieved, but maintenance becomes more challenging
Solution Approach 1:
By dividing the controller into separate manageable processes with defined interfaces, the patent enables targeted maintenance and debugging of specific processes without affecting the entire system, thus improving ease of repair while maintaining integration.
Solution Approach 2:
The patent introduces intermediary processes such as the application management process and state management process that facilitate communication and coordination between different components, making the system more maintainable through standardized interfaces and decoupled architecture.
3Reliability
If a controller application malfunctions, then the system should respond quickly, but the current system has difficulty starting or stopping the application in a timely manner
Solution Approach 1:
The guardian process continuously monitors the health and state of other processes, and necessary resources and configurations are prepared in advance. When a malfunction is detected, the system can immediately initiate restart or termination actions without delay, improving response timeliness.
Solution Approach 2:
The health management process and state management process provide continuous feedback about process status through inter-process communication. This real-time feedback mechanism enables the guardian process to detect malfunctions immediately and trigger appropriate responses, reducing response delay.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present application relates to a safe redundant start-stop system and method for an onboard controller, a chip, and an intelligent vehicle. The system includes: a guardian component, a process management component, a state management component, and a health management component, wherein the guardian component is configured to start and monitor the process management component; the process management component is configured to start and monitor the state management component, the health management component, and each controller application; the health management component is configured to: receive process activity information of the state management component and each controller application, and generate a start-stop message according to an object that has encountered an anomaly; the state management component is configured to generate the start-stop message according to an application exit message received from the process management component; and the process management component restarts the controller applications and/or the state management component in the start-stop message. By addressing operating conditions of various controller applications by means of functional grouping and hierarchical structuring, the start and stop of controller applications can be managed safely and efficiently to ensure safe operation of a vehicle.