Redundant Electronic Control Cross-Switching for Actuator Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current redundant electronic control systems in vehicles fail to ensure stable output power when one component fails, leading to potential safety and stability issues, particularly in autonomous vehicles.
Innovation Solution
A redundant electronic control system design with dual output components and control units that can cross-switch execution signals to maintain actuator functionality even if one component fails, ensuring synchronized energy output from both actuators.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a redundant electronic control system is implemented with two identical systems, then the reliability of the control system is improved, but the stability of total output power cannot be ensured when one system fails
Solution Approach 1:
Each output component is designed to perform multiple functions: it can output execution signals to its corresponding actuator under normal conditions, and also output execution signals to the other actuator when its paired output component fails. This multi-functionality ensures that the total output power remains stable even when one system fails, as the healthy output component can compensate for the failed one.
Solution Approach 2:
The system implements dynamic switching between different operational modes based on the health status of its components. When a failure is detected, the control unit dynamically reconfigures the signal routing to maintain stable total output power. This dynamic adaptability resolves the contradiction by allowing the system to transition from a static redundant configuration to an active compensation mode.
2Device complexity
If simple system backup is used in redundant electronic control systems, then the device complexity is reduced, but the safety and stability in fault scenarios deteriorate
Solution Approach 1:
The output components are designed with universal functionality to serve both their primary actuator and the backup actuator. This approach maintains relatively simple device architecture while significantly improving fault scenario safety, as each component can take over the function of its paired component when needed.
Solution Approach 2:
The redundant system implements self-service through automatic failure detection and self-healing through cross-output signal routing. When a failure occurs, the system automatically reconfigures itself without external intervention, maintaining safety and stability while keeping the control logic relatively simple.
3Speed
If electronic control systems replace mechanical control systems, then the response speed and control precision are improved, but the sudden failure risk increases
Solution Approach 1:
The system implements beforehand cushioning through pre-configured redundant output components and cross-output signal paths. These backup mechanisms are prepared in advance and can be activated immediately upon failure detection, cushioning the impact of sudden electronic component failures and maintaining system reliability while preserving the fast response characteristics of electronic control.
Solution Approach 2:
The control unit continuously monitors the operational status of output components and implements feedback-based failure detection. When a failure is detected, the system uses feedback information to dynamically reconfigure signal routing, ensuring that the fast response speed of electronic control is maintained while mitigating the sudden failure risk through rapid automated recovery.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
This application discloses a redundant electronic control system and a device, which may be applied to an autonomous vehicle, an intelligent connected vehicle, a new energy vehicle, and the like. The redundant electronic control system mainly includes a control unit, a first output component, and a second output component. The control unit may generate a first execution signal and a second execution signal. The control unit controls the first output component to output the first execution signal to a first actuator, and controls the second output component to output the second execution signal to a second actuator. When the first output component fails, the control unit may control the second output component to output the first execution signal to the first actuator. When the second output component fails, the control unit may control the first output component to output the second execution signal to the second actuator. When any one of the output components fails, the first actuator and the second actuator can keep working. This helps improve stability and safety of the redundant electronic control system.