CN116552244A - Fault processing method and device, vehicle terminal and storage medium - Google Patents

Abstract

The present application relates to a fault handling method, device, vehicle terminal and storage medium, and relates to the technical field of new energy vehicle drive motor fault handling. The controller applied to the vehicle terminal; the vehicle terminal also includes an electric drive system; the method includes: obtaining fault state information of the electric drive system; the fault state information is used to indicate the fault type currently occurring among multiple fault types; according to the fault state information, As well as the correlation between multiple functional safety objectives and multiple fault types, the fault score of the electric drive system is determined; according to the fault score of the electric drive system, the fault of the electric drive system is processed. Thus, the problem of inaccurate fault handling of the electric drive system in the related art can be solved.

Description

A fault handling method, device, vehicle terminal and storage medium

technical field

The present application relates to the technical field of new energy vehicle drive motor fault handling, in particular to the technical field of drive motor fault handling strategies based on automotive functional safety analysis, and specifically relates to a fault handling method, device, vehicle terminal and storage medium.

Background technique

In recent years, with the in-depth application of electrification, intelligence, and networking in the automotive field, the functions of the electric drive system composed of a large number of electronic components have become more and more complex, and the risk of failure of the electric drive system caused by various functional components is also increasing. come higher. When the electric drive system fails, it is necessary to analyze and diagnose the fault of the electric drive system in time, and deal with the fault of the electric drive system to ensure the normal operation of the electric drive system.

In the related art, when dealing with the fault of the electric drive system, the fault of the electric drive system is usually determined from the perspective of fault diagnosis of the electric drive system based on existing experience, and then the fault of the electric drive system is handled. It can be seen that the fault diagnosis of the electric drive system in related technologies is not standardized and standardized enough, which further leads to inaccurate fault handling of the electric drive system.

Contents of the invention

The present application provides a fault handling method, device, vehicle terminal, and storage medium to at least solve the problem in the related art that the fault diagnosis of the electric drive system is not standardized enough and affects the accuracy of fault handling of the electric drive system. The technical scheme of the application is as follows:

According to the first aspect involved in the present application, a fault handling method is provided, which is applied to the controller of the vehicle terminal; the vehicle terminal also includes an electric drive system; the method includes: acquiring fault state information of the electric drive system; the fault state information is used to indicate The fault type currently occurring among multiple fault types; determine the fault score of the electric drive system according to the fault state information and the correlation between multiple functional safety objectives and multiple fault types; according to the fault score of the electric drive system, System failures are handled.

According to the above technical means, compared with the related technologies, the faults of the electric drive system are usually determined based on the existing experience, and then the faults of the electric drive system are handled. It can be seen that the fault diagnosis of the electric drive system in the related technologies is not standardized and standard enough , which further leads to inaccurate troubleshooting of the electric drive system. The fault handling method provided in this application determines the fault score of the electric drive system according to the fault state information of the electric drive system and the relationship between the functional safety target and the fault type, and classifies the faults of the electric drive system according to the fault score of the electric drive system. Processing can improve the standardization and accuracy of the fault diagnosis of the electric drive system, and then handle the faults of the electric drive system more reasonably and accurately.

In a possible implementation manner, the method further includes: obtaining the importance coefficients of multiple functional safety objectives; the importance coefficients of the multiple functional safety objectives are used to indicate the importance of each functional safety objective in the multiple functional safety objectives ; The association relationship between multiple functional safety objectives and multiple fault types is in the form of an association matrix; according to the fault state information, and the association relationship between multiple functional safety objectives and multiple fault types, determine the fault score of the electric drive system, It includes: determining the fault score of the electric drive system according to the results of the weighted summation of the fault state information, the importance coefficients of multiple functional safety objectives, and the correlation matrix.

According to the above-mentioned technical means, compared with the related art, which only proceeds from the perspective of fault diagnosis of the electric drive system to determine the fault type of the electric drive system and perform fault treatment on the electric drive system, the fault handling method provided by this application introduces The functional safety goal of the electric drive system is quantified, and then the fault score of the electric drive system is determined according to the correlation between the functional safety goal of the electric drive system and the fault type, which can quickly locate the fault type of the electric drive system , and at the same time make the fault scoring of the electric drive system more accurate, which is helpful for the maintenance and troubleshooting of the electric drive system, and makes the fault handling of the electric drive system more accurate.

In a possible implementation manner, the method further includes: analyzing the number of times each fault type violates each functional safety goal within a preset period of time; according to the number of times each fault type violates each functional safety goal, determine multiple The correlation coefficient between each fault type in the fault type and each functional safety target in multiple functional safety targets; the correlation coefficient reflects the probability that each fault type violates the functional safety target; according to the correlation coefficient, determine the relationship between multiple functional safety targets and Incidence matrix for multiple fault types.

According to the above technical means, the fault handling method provided by this application determines the correlation coefficient between each fault type and each functional safety target according to the number of times each fault type violates the functional safety target, and then determines the electric drive system. The correlation matrix between functional safety goals and fault types can combine functional safety goals and fault types, and intuitively and clearly express the correlation between functional safety goals and fault types. At the same time, compared with the diagnosis and update of the fault type of the electric drive system combined with the software and hardware functions of the vehicle terminal in the related art, the method provided by this application combines the functional safety target to carry out refined diagnosis of the fault of the electric drive system, which can avoid redundancy fault diagnosis design.

In a possible implementation manner, processing the fault of the electric drive system according to the fault score of the electric drive system includes: determining the fault score of the electric drive system according to the relationship between the fault score of the electric drive system and a preset threshold value Troubleshooting method; according to the troubleshooting method, the fault of the electric drive system is handled.

According to the above technical means, the fault handling method provided by this application sets the preset threshold value in combination with the functional safety target, and determines the fault of the electric drive system according to the relationship between the fault score of the electric drive system and the preset threshold value. The processing method can make the fault processing of the electric drive system more standardized and accurate.

In a possible implementation manner, the preset threshold value includes a first preset threshold value and a second preset threshold value; wherein, the second preset threshold value is greater than the first preset threshold value; according to The relationship between the fault score of the electric drive system and the preset threshold value determines the fault handling method of the electric drive system, including: when the fault score of the electric drive system is greater than the first preset threshold value, determining the electric drive system The fault handling method of the system is the first-level fault handling method; when the fault score of the electric drive system is greater than the second preset threshold value, the fault handling method of the electric drive system is determined to be the second-level fault processing method.

According to the above technical means, it can be understood that in this application, the higher the fault score of the electric drive system, the more serious the fault of the electric drive system. In this application, when the fault score of the electric drive system corresponds to different preset threshold values , implementing different fault handling methods for the electric drive system can make the fault handling of the electric drive system more reasonable and accurate.

In a possible implementation, the method further includes: calculating the difference between the fault score of the electric drive system and the preset threshold value; when the difference is less than the preset early warning threshold, performing a fault early warning reminder; The early warning reminder is used to indicate that the electric drive system is about to change from the current failure level to the next failure level.

According to the above technical means, this application establishes a set of electric drive system by calculating the difference between the fault score of the electric drive system and the preset threshold value, and when the difference is less than the preset early warning threshold, the fault warning is executed. Fault warning mechanism, the above method can issue early warning when the risk of failure of the electric drive system is high, so as to improve the driving experience of the user during the driving of the vehicle terminal.

According to the second aspect involved in the present application, a fault processing device is provided, which is applied to the controller of the vehicle terminal; the vehicle terminal also includes an electric drive system; including: an acquisition module, used to obtain fault state information of the electric drive system; fault state The information is used to indicate the current fault type among multiple fault types; the determination module is used to determine the fault score of the electric drive system according to the fault state information and the relationship between multiple functional safety objectives and multiple fault types; the processing module , used to process the faults of the electric drive system according to the fault score of the electric drive system.

In a possible implementation manner, the acquiring module is further configured to acquire the importance coefficients of multiple functional safety objectives; the importance coefficients of the multiple functional safety objectives are used to indicate the importance of each functional safety objective in the multiple functional safety objectives The degree of importance; the association relationship between multiple functional safety objectives and multiple fault types is in the form of an association matrix; the determination module is specifically used to determine the As a result of and, a fault score for the electric drive system is determined.

In a possible implementation, the fault handling device further includes an analysis module; an analysis module, configured to analyze the number of times each fault type violates each functional safety target within a preset time period; The number of times a fault type violates each functional safety goal, and the correlation coefficient between each fault type in multiple fault types and each functional safety goal in multiple functional safety goals is determined; the correlation coefficient reflects the violation of functional safety by each fault type The probability of the target; according to the correlation coefficient, the correlation matrix of multiple functional safety targets and multiple fault types is determined.

In a possible implementation manner, the processing module is specifically configured to determine the fault handling method of the electric drive system according to the relationship between the fault score of the electric drive system and the preset threshold; System failures are handled.

In a possible implementation manner, the preset threshold value includes a first preset threshold value and a second preset threshold value; wherein, the second preset threshold value is greater than the first preset threshold value; determining The module is specifically used to determine that the fault handling method of the electric drive system is the first-level fault handling method when the fault score of the electric drive system is greater than the first preset threshold value; when the fault score of the electric drive system is greater than the second In the case of the preset threshold value, it is determined that the fault handling method of the electric drive system is the second-level fault handling method.

In a possible implementation manner, the fault processing device further includes a calculation module and an execution module; a calculation module, configured to calculate the difference between the fault score of the electric drive system and a preset threshold value; When the difference is less than the preset early warning threshold, a fault early warning reminder is executed; the fault early warning reminder is used to prompt that the electric drive system is about to change from the current fault level to the next fault level.

According to the third aspect involved in the present application, a vehicle terminal is provided, including: a memory, a processor, and a computer program stored on the memory and operable on the processor, and the processor executes the program to realize the above-mentioned first aspect and Any one of its possible implementation methods.

According to the fourth aspect provided by the present application, a computer-readable storage medium is provided. When the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device can execute any one of the above-mentioned first aspect and A possible implementation method.

Thus, the above-mentioned technical features of the present application have the following beneficial effects:

(1) Compared with the related technologies, the fault diagnosis of the electric drive system is usually determined based on the existing experience, and then the fault treatment of the electric drive system is carried out. As a result, the fault handling of the electric drive system is not accurate enough. The fault handling method provided in this application determines the fault score of the electric drive system according to the fault state information of the electric drive system and the relationship between the functional safety target and the fault type, and classifies the faults of the electric drive system according to the fault score of the electric drive system. Processing can improve the standardization and accuracy of the fault diagnosis of the electric drive system, and then handle the faults of the electric drive system more reasonably and accurately.

(2) Compared with the related technology, which only proceeds from the perspective of fault diagnosis of the electric drive system to determine the fault type of the electric drive system and perform fault treatment on the electric drive system, the fault handling method provided by this application introduces the electric drive system The functional safety goal of the electric drive system is quantified, and then the fault score of the electric drive system is determined according to the correlation between the functional safety goal of the electric drive system and the fault type, which can quickly locate the fault type of the electric drive system, and at the same time Making the fault scoring of the electric drive system more accurate helps the maintenance and troubleshooting of the electric drive system, and makes the fault handling of the electric drive system more accurate.

(3) The fault handling method provided by this application determines the correlation coefficient between each fault type and each functional safety target according to the number of times each fault type violates the functional safety target, and then determines the functional safety of the electric drive system The correlation matrix between the target and the fault type can combine the functional safety target and the fault type, and intuitively and clearly express the correlation between the functional safety target and the fault type. At the same time, compared with the diagnosis and update of the fault type of the electric drive system combined with the software and hardware functions of the vehicle terminal in the related art, the method provided by this application combines the functional safety target to carry out refined diagnosis of the fault of the electric drive system, which can avoid redundancy fault diagnosis design.

(4) The fault handling method provided by this application sets the preset threshold value in combination with the functional safety target, and determines the fault handling method of the electric drive system according to the relationship between the fault score of the electric drive system and the preset threshold value , which can make the fault handling of the electric drive system more standardized and accurate.

(5) It can be understood that in this application, the higher the fault score of the electric drive system, the more serious the fault of the electric drive system. In this application, when the fault scores of the electric drive system correspond to different preset threshold values, the The electric drive system implements different fault handling methods, which can make the fault handling of the electric drive system more reasonable and accurate.

(6) This application calculates the difference between the fault score of the electric drive system and the preset threshold value, and when the difference is less than the preset early warning threshold, executes the fault early warning reminder, and establishes a set of electric drive system fault early warning Mechanism, the above method can issue an early warning when the risk of failure of the electric drive system is high, and improve the driving experience of the user during the driving of the vehicle terminal.

It should be noted that, for the technical effect brought by any implementation manner in the second aspect to the fourth aspect, refer to the technical effect brought by the corresponding implementation manner in the first aspect, which will not be repeated here.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application.

Description of drawings

The accompanying drawings here are incorporated into the specification and constitute a part of the specification, show the embodiment consistent with the application, and are used together with the specification to explain the principle of the application, and do not constitute an improper limitation of the application.

Fig. 1 is a schematic structural diagram of a fault handling system shown according to an exemplary embodiment;

Fig. 2 is a flowchart of a fault handling method according to an exemplary embodiment;

Fig. 3 is a flow chart showing another fault handling method according to an exemplary embodiment;

Fig. 4 is a flow chart showing another fault handling method according to an exemplary embodiment;

Fig. 5 is a flow chart showing another fault handling method according to an exemplary embodiment;

Fig. 6 is a flow chart showing another fault handling method according to an exemplary embodiment;

Fig. 7 is a flow chart showing another fault handling method according to an exemplary embodiment;

Fig. 8 is a structural diagram of a fault handling device according to an exemplary embodiment;

Fig. 9 is a structural diagram of a vehicle terminal according to an exemplary embodiment.

Among them, the vehicle controller 100, the motor controller 200, the inverter 300, the motor 400, the fault processing device 500, the acquisition module 501, the determination module 502, the processing module 503, the analysis module 504, the calculation module 505, the execution module 506, A vehicle terminal 600 , a processor 601 , and a memory 602 .

Detailed ways

In order to enable ordinary persons in the art to better understand the technical solutions of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings.

It should be noted that the terms "first" and "second" in the description and claims of the present application and the above drawings are used to distinguish similar objects, but not necessarily used to describe a specific sequence or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances such that the embodiments of the application described herein can be practiced in sequences other than those illustrated or described herein. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present application as recited in the appended claims.

In describing some embodiments, the expressions "coupled" and "connected" and their derivatives may be used. For example, the term "connected" may be used in describing some embodiments to indicate that two or more elements are in direct physical or electrical contact with each other. As another example, the term "coupled" may be used when describing some embodiments to indicate that two or more elements are in direct physical or electrical contact. However, the term "coupled" may also mean that two or more elements are not in direct contact with each other, but yet still co-operate or interact with each other. The embodiments disclosed herein are not necessarily limited by the context herein.

The fault handling method, device, vehicle terminal, and storage medium of the embodiments of the present application are described below with reference to the accompanying drawings. With the in-depth application of vehicle terminal electrification, intelligence and networking, the functions of the electric drive system composed of a large number of electronic components are becoming more and more complex, and the risk of failure of the electric drive system caused by various functional components is also increasing. . When the electric drive system fails, the electric drive system must be transferred to a safe state to ensure the safety of personnel. Among them, fault diagnosis, as a necessary guarantee for the realization of electric drive system functions, is also constantly enriched and improved. In order to deal with possible failure risks of electric drive systems, the international standard ISO26262 provides a full life cycle safety management and product development method for electronic and electrical systems. More and more manufacturers are also developing related products in accordance with the requirements of functional safety objectives in the product development process. Functional safety analysis and system fault diagnosis analysis are respectively the forward and reverse ideas to ensure the normal operation of the motor function. They are highly unified in purpose and complement each other in specific implementation methods.

The fault handling steps of the electric drive system in the related art are usually: 1. Diagnose the faults of the motor and the controller through hardware/software, such as bus voltage overvoltage, three-phase current overcurrent, etc.; 2. Establish fault flags and remove them. 3. Fault handling integration, and corresponding actions according to the corresponding fault level. It can be seen that although the faults of the electric drive system are judged from different dimensions in related technologies, the judgment of the fault rating of the electric drive system still needs to rely on the existing experience of engineers, which makes the fault diagnosis of the electric drive system not standardized enough and standards, further leading to inaccurate troubleshooting of electric drive systems.

At the same time, with the popularization of the concept of vehicle functional safety goals, manufacturers need to continuously supplement the existing software and hardware functions of fault diagnosis, resulting in functional redundancy and cost increase of vehicle terminals; The fault diagnosis method of electric drive system is improved and the strategy of treatment.

In view of the above problems, this application provides a fault handling method. The method provided by this application determines the fault score of the electric drive system according to the fault state information of the electric drive The fault scoring of the electric drive system handles the faults of the electric drive system, which can improve the standardization and accuracy of the fault diagnosis of the electric drive system, and then deal with the faults of the electric drive system more reasonably and accurately; at the same time, the method provided by this application combines The functional safety goal is to fine-tune the fault diagnosis of the electric drive system, which can avoid redundant fault diagnosis design.

For ease of understanding, the embodiments of the present application will be specifically introduced below in conjunction with the accompanying drawings.

FIG. 1 is a fault handling system provided by an embodiment of the present application. The fault handling system includes: a vehicle controller 100 , a motor controller 200 , an inverter 300 and a motor 400 . Wherein, the vehicle controller 100 is coupled with the motor controller 200 ; the motor controller 200 , the inverter 300 and the motor 400 are coupled.

The vehicle controller 100 is used to control the drive system, manage and optimize the energy of the vehicle, and manage the communication and network of the vehicle.

Wherein, the above electric drive system includes a motor controller 200 and a motor 400 .

In some embodiments, the vehicle controller 100 is specifically configured to analyze the operating scene of the vehicle terminal, and determine the functional safety goal of the electric drive system and the importance coefficient of the functional safety goal. Exemplarily, the vehicle controller 100 analyzes the operation scene of the vehicle terminal, determines the functional safety goal violated by the vehicle terminal and its importance coefficient, and transmits the functional safety goal violated by the vehicle terminal and its importance coefficient to the motor Controller 200.

The motor controller 200 is used to control the motor to output a specified torque and rotational speed, drive the vehicle, and perform fault diagnosis and protection for the electric drive system.

Wherein, the fault diagnosis of the electric drive system includes the diagnosis of the functions of the motor controller 200 and the motor 400 .

In some embodiments, the motor controller 200 is specifically configured to detect the current state of the inverter 300 and the angular position θ of the motor 400, and diagnose the fault of the electric drive system according to the above current state and the above angular position θ.

Wherein, the above-mentioned inverter 300 may be a pulse width modulation (pulse width modulation, PWM) inverter. The above-mentioned current state includes three-phase currents Iu, Iv, and Iw. The above motor 400 may be a permanent magnet synchronous motor (permanentmagnet synchronous motor, PMSM).

In some embodiments, the motor controller 200 is also used to deal with the failure of the electric drive system in combination with the importance coefficient of the above-mentioned functional safety objective.

In some embodiments, the motor controller 200 is also configured to send fault information of the electric drive system to the vehicle controller 100 . Wherein, the above-mentioned fault information includes information such as the fault type of the fault occurred in the electric drive system.

It should be noted that the system architecture and application scenarios described in the embodiments of the present application are for more clearly illustrating the technical solutions of the embodiments of the present application, and do not constitute limitations on the technical solutions provided by the embodiments of the present application. Those skilled in the art will know , with the evolution of the system architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

Fig. 2 is a kind of fault processing method that the embodiment of the present application provides, and this fault processing method comprises the following steps:

S101. Obtain fault status information of the electric drive system.

Wherein, the fault state information is used to indicate the currently occurring fault type among the multiple fault types.

As a possible implementation, as shown in FIG. 3, the above step S101 may specifically be implemented as the following steps:

S1011. Obtain a fault list of the electric drive system.

Wherein, the above fault list of the electric drive system includes all possible fault types of the electric drive system.

As a possible implementation, the fault list of the electric drive system is obtained from the target storage space. Wherein, the target storage space is used to store operating data of the electric drive system, such as a fault list of the electric drive system.

As another possible implementation, the motor controller acquires one or more sets of fault data of the electric drive system; and extracts a fault list of the electric drive system from one or more sets of fault data. Wherein, the above-mentioned fault data refers to: the data corresponding to the electric drive system in a failure scenario.

Exemplarily, the motor controller can extract the fault list of the electric drive system from one or more sets of fault data of the electric drive system according to the software and hardware structure of the electric drive system and the diagnosis plan. Exemplarily, the fault list of the electric drive system is shown in Table 1 below.

Table 1. Fault list of electric drive system

S1012. Determine a fault state list of the electric drive system according to the fault list of the electric drive system.

As a possible implementation, the motor controller processes and analyzes the status information of the electric drive system uploaded by the PWM inverter and PMSM within a preset time period, and determines the corresponding fault type of each fault type in the fault list of the electric drive system. Fault state: According to the fault state corresponding to each fault type, a fault state list of the electric drive system is generated.

Among them, the fault state is used to represent whether the fault type occurs within a preset time period.

Exemplarily, the motor controller processes and analyzes the state information of the electric drive system uploaded by the PWM inverter and the PMSM within 1 hour, and determines the fault state F _{i_flg} corresponding to each fault type Fi in the fault list of the electric drive system. And according to the fault state F _{i_flg} corresponding to each fault type Fi, generate the fault state list of the electric drive system as shown in Table 2 below.

Among them, Fi(i=1,2,...,m) represents the i-th fault type of the electric drive system, and the fault state F _{i_flg} is a Boolean variable, which represents the indicator bit of the i-th fault type, including 0 and 1 state. For example, if the fault state F _{1_flg} corresponding to the fault type F1 is 0, it means that the electric drive system has no fault type F1 within 1 hour; the fault state F _{2_flg} corresponding to the fault type F2 is 1, which means that the electric drive system has a fault within 1 hour Type F2.

Table 2. List of fault states of the electric drive system

Fault type Fi Fault status F _{i_flg} F1 0 F2 1 F3 0 F4 1 F5 1 ... Fi 1

S1013. Determine the fault state information of the electric drive system according to the fault state list of the electric drive system.

Exemplarily, the above fault state information is expressed in the form of vector.

As a possible implementation, the fault state F _{i_flg} of the electric drive system is extracted from the fault state list of the electric drive system, and fault state information F=[F _{1_flg} , F _{2_flg} , . . . , F _{m_flg} ] is generated.

Exemplarily, if the fault state information F=[0,1,...,F _{m_flg} ], it means that the electric drive system does not have the first fault type, but the second fault type occurs.

S102. Determine the fault score of the electric drive system according to the fault state information and the association relationship between multiple functional safety objectives and multiple fault types.

As a possible implementation manner, as shown in FIG. 4, the above step S102 may specifically be implemented as the following steps:

S1021. Determine multiple functional safety objectives of the electric drive system.

As a possible implementation, the vehicle controller defines the system function and system environment of the electric drive system according to the requirements of the international standard ISO 26262-2018, and then conducts hazard analysis and risk assessment for the electric drive system in failure scenarios (Hazard Analysis and Risk Assessment, HARA), get the Automotive Safety Integration Level (ASIL) level of each functional safety target, and determine the functional safety target of the electric drive system according to the ASIL level of each functional safety target .

Exemplarily, the functional safety goal of the electric drive system can be represented by SG, where SG _n represents the nth functional safety goal of the electric drive system.

Among them, the above-mentioned HARA analyzes the severity S, exposure rate E, and controllability C of the electric drive system in the failure scenario, and gives the severity S, exposure rate E, and controllability C corresponding grades, and then according to the severity S, the level corresponding to the exposure rate E and the controllability C determine the ASIL level. Specifically, the ASIL level is shown in Table 3 below. It can be understood that the ASIL level includes five levels: QM, A, B, C, and D; the higher the level of severity S, exposure rate E and controllability C , the greater the influence of the electric drive system in the failure scenario, the higher the ASIL level.

Table 3, ASIL rating table

Among them, the QM level means that the failure state of the electric drive system will not violate the functional safety goal, so if the ASIL level of the functional safety goal SG ₁ is QM level, then the functional safety goal SG ₁ is not the functional safety goal of the electric drive system.

Exemplarily, according to the ASIL level, the functional safety target of the electric drive system is determined, as shown in Table 4 below.

Among them, the functional safety of the electric drive system involves three aspects: torque safety, thermal safety and high-voltage safety. If the electric drive system is a P13 dual-motor control system, according to the international safety standard ISO 26262-2018 and combined with the HARA analysis results, there are 7 functional safety objectives for the electric drive system, which are recorded as SG ₁ , SG ₂ , ... , SG ₇ .

Among them, the ASIL level of SG ₁ -SG ₄ is C level, and the ASIL level of SG ₅ -SG ₇ is A level.

Table 4. Functional safety target level of electric drive system

S1022. Obtain the importance coefficients of multiple functional safety objectives of the electric drive system.

Wherein, the importance coefficient of multiple functional safety objectives is used to indicate the importance of each functional safety objective among the multiple functional safety objectives;

As a possible implementation, the importance coefficient of each functional safety objective is determined according to the ASIL level corresponding to each functional safety objective. Among them, the corresponding relationship between the ASIL level and the importance coefficient of the functional safety target is shown in Table 5 below.

Table 5. Correspondence between ASIL level and importance coefficient of functional safety objectives

ASIL level SG_score QM 0 A 0.3 B 0.5 C 0.7 D. 1

Among them, SG_score represents the importance coefficient of the functional safety goal.

Exemplarily, if the ASIL level corresponding to the functional safety goal _SG2 is level C, the importance coefficient of the functional safety goal _SG2 is 0.7.

As a possible implementation, the importance coefficients of multiple functional safety objectives of the electric drive system can be represented by the vector SG_score=[SG _{1_score} , SG _{2_score} ,...,SG _{n_score} ] ^T ; where SG _{i_score} (i=1 ,2,...,n) is the importance coefficient of the i-th functional safety goal of the electric drive system. It can be understood that the higher the ASIL level of the functional safety target, the higher the importance coefficient of the functional safety target.

For example, if the multiple functional safety objectives of the electric drive system are SG ₁ , SG ₂ and SG ₃ , and the importance coefficients of SG ₁ and SG ₂ are 0.3, and the importance coefficient of SG ₃ is 0.7, then the electric drive system A vector of importance coefficients of multiple functional safety objectives of the system is expressed as SG_score=[0.3,0.3,0.7] ^T .

S1023. Determine associations between multiple functional safety objectives and multiple fault types.

Among them, the association relationship between multiple functional safety objectives and multiple fault types can be expressed in the form of an association matrix.

Exemplarily, if the multiple functional safety objectives of the electric drive system are respectively SG ₁ , SG ₂ , ..., SG _n ; the multiple fault types of the electric drive system are respectively F1, F2, ..., Fm; then multiple functional safety The association relationship between the target and multiple fault types can be expressed in the form shown in Table 6 below.

Table 6. Correlation between fault types and functional safety objectives

SG ₁ , SG ₂ … SG _n F1 r ₁₁ r ₁₂ … r _1n F2 r ₂₁ r ₂₂ … r ₂ … … … … … Fm r _m1 r _m2 … _m

Among them, r ₁₁ , r ₁₂ , . . . r _mn are correlation coefficients (correlation coefficients reflect the probability that each fault type violates the functional safety goal). r _ij ∈[0,1] represents the relationship between the i-th fault type and the j-th functional safety target.

In some embodiments, the matrix composed of the above correlation coefficients r ₁₁ , r ₁₂ , . . . , r _mn is a correlation matrix of multiple functional safety objectives and multiple fault types. Exemplarily, the incidence matrix can be expressed in the form of the following matrix R:

As a possible implementation, when the fault data of the electric drive system is in a scene that can be updated online in real time, for example, when the electric drive system can provide multiple sets of fault data, the determination of the above correlation matrix can be implemented as follows:

Step b1, analyzing the number of times each fault type violates each functional safety goal within a preset time period.

As a possible implementation, as shown in Table 7 below, a list of functional safety objectives violated by each fault type in each set of fault data within a preset period of time is counted. Wherein, the preset time period may be 5 minutes or 1 minute.

Table 7. List of Functional Safety Objectives Violated by Fault Types

Based on Table 7 above, determine the number of violations of each functional safety objective for each fault type within a preset time period. Exemplarily, all the data in the above table 7 are counted, wherein the fault type F2 of data 1, the fault type F2 of data 2 and the fault type F2 of data n all violate the functional safety goal SG ₄ , then the fault type F2 violates the functional safety goal The number of SG ₄ is 3 times.

Step b2. According to the number of violations of each functional safety target by each fault type, determine the correlation coefficient between each fault type in the multiple fault types and each functional safety target in the multiple functional safety targets.

In some embodiments, the corresponding relationship between each fault type in each set of fault data and its violated functional safety goal can be regarded as a correlation matrix, for example, the correlation matrix of a set of fault data can be expressed as Wherein, when r _ij =1, the i-th fault type in this set of data violates the j-th functional safety objective.

Furthermore, according to the number of times each fault type violates each functional safety goal in multiple sets of data, the correlation coefficient can be corrected to obtain the optimized correlation coefficient.

Exemplarily, assuming that the number of statistical fault data groups is n, the number of times that the current i-th fault type violates the j-th functional safety goal can be calculated as n _ij (n _ij ≤ n), then the i-th fault type and the j-th The correlation coefficient r _ij =n _ij /n of a functional safety target. When a group of fault data of the electric drive system is added, if the i-th fault type violates the j-th functional safety goal again, the correlation coefficient between the i-th fault type and the j-th functional safety goal is corrected as If the i-th fault type does not violate the j-th functional safety objective, the correlation coefficient between the i-th fault type and the j-th functional safety objective is corrected as By analogy, the optimized correlation coefficient is obtained.

Step b3, according to the correlation coefficient, determine the correlation matrix between multiple functional safety objectives and multiple fault types.

In some embodiments, the above step b3 may be implemented as: determining the correlation matrix according to the optimized correlation coefficient.

It can be understood that, according to the different fault conditions of the electric drive system, different optimization algorithms can be used to establish the correlation matrix. The above-mentioned embodiment is only one of the methods provided by this application. The optimization algorithm is not limited.

In another possible implementation, when there is only one set of fault data of the electric drive system; or, the fault data of the electric drive system is in an offline scenario that cannot be updated in real time, the determination of the above-mentioned correlation matrix can be specifically implemented as the following steps:

Step c1. Determine the probability that each fault type violates each functional safety objective.

Exemplarily, through failure probability analysis, it is determined that the failure probability of the i-th fault category causing functional safety target a and functional safety target b to fail is 20% and 80%, respectively.

Step c2, according to the probability that each fault type violates each functional safety target, determine the correlation coefficient between each fault type in the multiple fault types and each functional safety target in the multiple functional safety targets.

Exemplarily, the probabilities of failure of functional safety target a and functional safety target b caused by the i-th fault category are 20% and 80% respectively, then r _ia =0.2, r _ib =0.8. By analogy, the correlation coefficient between each fault type in multiple fault types and each functional safety target in multiple functional safety targets can be determined.

Step c3. Determine the correlation matrix between multiple functional safety objectives and multiple fault types according to the correlation coefficient.

It can be understood that the correlation matrix of multiple functional safety objectives and multiple fault types proposed in this application can quickly locate the fault types of the electric drive system in the actual application process, and is helpful for the maintenance of the electric drive system.

In addition, the above-mentioned online scenario and offline scenario are two different ways to determine the correlation matrix of multiple functional safety objectives and multiple fault types in this application. Troubleshoot electric drive system failures.

It can be understood that the method provided in this application can flexibly generate different correlation matrices according to the selected functional safety objectives.

S1024. Determine the fault score of the electric drive system according to the result of the weighted summation of the fault state information, the importance coefficients of multiple functional safety objectives, and the correlation matrix.

As a possible implementation, according to the fault state information F=[F _{1_flg} , F _{2_flg} ,…,F _{m_flg} ], the importance coefficient SG_score=[SG _{1_score} , SG _{2_score} ,…,SG _{n_score} ] of multiple functional safety objectives ^T and incidence matrix The result of the weighted summation of , determines the fault score Q of the electric drive system. Exemplarily, the fault score Q of the electric drive system may satisfy the following formula (1):

It can be understood that the fault score Q of the electric drive system calculated in this application is also a reference index for the evaluation of the fault level of the electric drive system, and can be used to indicate the probability that the electric drive system violates the functional safety goal.

S103 , according to the fault score of the electric drive system, handle the fault of the electric drive system.

As a possible implementation manner, the above step S103 may specifically be implemented as the following steps:

Step d1, according to the relationship between the fault score of the electric drive system and the preset threshold value, determine the fault handling method of the electric drive system.

In some embodiments, the preset threshold value includes a first preset threshold value and a second preset threshold value; wherein, the second preset threshold value is greater than the first preset threshold value.

Wherein, the determination of the preset threshold value can be implemented as the following steps:

Firstly, under the method provided in this application, multiple past fault scores of the electric drive system are determined. Then determine the lower limit and upper limit of the score in the previous failure score of the electric drive system under the method please provide. Then, according to the lower limit and upper limit of the score, the score interval of the fault score of the electric drive system is determined. Finally, the above score interval is segmented to determine the value of the preset threshold.

Wherein, during actual calculation, the score range can be flexibly segmented according to the actual situation, for example, the score range can be divided into three segments of Q _Level1 , Q _Level2 and Q _Level3 , which is not limited in this application.

As a possible implementation, the above step S1031 may be implemented as: if the fault score of the electric drive system is greater than the first preset threshold value, determine that the fault handling method of the electric drive system is a first-level fault processing method. In the case that the fault score of the electric drive system is greater than the second preset threshold value, it is determined that the fault handling method of the electric drive system is a second-level fault processing method. Exemplarily, according to the functional safety objective and fault type of the electric drive system, the preset threshold value list Q _Level =[Q _Level1 , Q _Level2 , . . . , Q _Levelz ] ^T of the electric drive system is determined. Among them, Q _Level2 >Q _Level1 , Q _Levelz >Q _Level2 .

When Q>Q _Level1 , the fault level of the electric drive system reaches Level 1, and the fault handling method of the electric drive system is the fault handling method of Level 1: execute system alarm.

When Q>Q _Level2 , the fault level of the electric drive system reaches Level 2, and the fault handling method of the electric drive system is the fault processing method of Level 2: perform system power degradation or limp.

When Q>Q _Leveli , the fault level of the electric drive system reaches the Leveli level, and the fault handling method of the electric drive system is Leveli-level applause processing method: execute the corresponding processing action (such as 0Nm control).

When Q>Q _Levelz , the fault level of the electric drive system reaches Levelz level, and the fault handling method of the electric drive system is the fault handling method of Levelz level: execute active short circuit (Active Short Current, ASC)/controller shutdown (FeelWheeling, FW).

It can be understood that the above fault handling methods corresponding to different preset thresholds correspond to the fault handling methods in the safe state corresponding to different functional safety objectives in Table 4 above. Therefore, the list of preset thresholds and the fault handling methods corresponding to different preset thresholds can be set according to the functional safety goals of the electric drive system, or the list of preset thresholds of the electric drive system Set the fault handling method corresponding to the threshold value, and determine the functional safety target of the corresponding electric drive system. Therefore, the list of preset thresholds and the fault handling methods corresponding to different preset thresholds are strictly logically corresponding to the functional safety objectives.

Step d2, according to the fault handling method, handle the fault of the electric drive system. In some embodiments, as shown in FIG. 5 , the above method further includes steps S104-S105.

S104. Calculate the difference between the fault score of the electric drive system and a preset threshold value.

Exemplarily, the preset threshold value includes a second preset threshold value Q _Level2 , and the difference between the fault score Q of the electric drive system and the second preset threshold value Q _Level2 is calculated: QQ _Level2 .

S105. In the case that the difference is smaller than the preset early warning threshold, perform a fault early warning reminder.

Among them, the fault warning reminder is used to prompt that the electric drive system is about to change from the current fault level to the next fault level.

Exemplarily, according to the above steps S101-S103, the fault score Q of the electric drive system is 0.18, the first preset threshold value Q _Level1 is 0.1, and the second preset threshold value Q _Level2 is 0.2. At this time, Q _Level1 <Q<Q _Level2 , so the fault level of the electric drive system is Level1 at this time.

If the preset warning threshold is 0.3, calculate the difference between the fault score Q of the electric drive system and the second preset threshold: QQ _Level2 = 0.2, since 0.2<0.3, the fault score of the electric drive system is the same as the second The difference between the preset thresholds is less than the preset early warning threshold, and at this time, the electric drive system executes a fault early warning reminder. Among them, the failure warning reminder is used to remind that the electric drive system is about to change from the current Level 1 to the next failure level Level 2.

It can be understood that since the fault score Q of the electric drive system in this application is a specific value, not a level, Q represents the probability of safety risks in the electric drive system, so this application establishes a safety score for the electric drive system. Risk early warning mechanism, set the preset early warning threshold Q _Thd , when QQ _Levelz < Q _Thd , the electric drive system will perform a fault early warning reminder.

Wherein, the above-mentioned failure early warning reminder may be that the motor controller sends early warning information to the vehicle controller or the motor controller sends out early warning sound prompts, etc.

The above is an embodiment of the fault handling method provided by the present application. For the convenience of understanding, the above fault handling method will be further described below in the form of an example.

Example 1, as shown in Figure 6, based on the offline scenario, fault diagnosis is performed on the P13 dual electric drive system.

Step e1, acquiring fault status information of the electric drive system.

First obtain the fault list of the electric drive system. As a possible implementation, according to the method given in step S1011 above, the motor controller obtains one or more sets of fault data of the electric drive system; extracts a fault list of the electric drive system from one or more sets of fault data.

The fault list of the electric drive system is shown in Table 8 below. In this example, there are 104 types of faults of the electric drive system including F1-F104.

Table 8. Fault list of electric drive system

serial number category IGBT Fault detection type F1 Motor (torque) Torque estimation error cycle F2 Motor (torque) Estimated torque and target torque are too large cycle F3 Motor controller (bus voltage) DC bus undervoltage fault cycle F4 Motor controller (bus voltage) DC bus overvoltage fault cycle F5 Motor controller (bus voltage) Bus hardware overvoltage fault cycle F6 Motor Controller (DC Bus Voltage) Reasonable failure of the bus voltage sensor cycle F7 Motor Controller (DC Bus Voltage) Bus voltage consistency fault cycle F8 Motor controller (low voltage power supply) Low voltage power supply undervoltage fault cycle F9 Motor controller (low voltage power supply) Low voltage power supply overvoltage fault cycle … … … … F102 motor (temperature) Motor temperature sensor short circuit to ground fault cycle F103 motor (temperature) Motor temperature sensor short circuit to power failure cycle F104 motor (temperature) Motor over temperature fault cycle

Then the motor controller processes and analyzes the status information of the electric drive system uploaded by the PWM inverter and the PMSM within a preset time period, and determines the fault state F _{i_flg} corresponding to each fault type Fi in the fault list of the electric drive system, And according to the fault state F _{i_flg} corresponding to each fault type Fi, generate the fault state list of the electric drive system as shown in Table 9 below.

Table 9. List of fault states of the electric drive system

Fault type Fi Fault status F _{i_flg} F1 0 F2 1 F3 0 F4 1 F5 1 ... F104 1

Finally, the fault state F _{i_flg} of the electric drive system is extracted from the fault state list of the electric drive system, and fault state information F=[F _{1_flg} , F _{2_flg} , . . . , F _{104_flg} ] is generated.

Step e2, updating the fault state information of the electric drive system.

As a possible implementation, the fault status information of the electric drive system is debounced, and the debounced fault status information of the electric drive system is obtained Wherein, the debounce processing refers to keeping the value of the fault state F _{i_flg} unchanged when the fault state F _{i_flg} in the fault information of the electric drive system maintains a true value of 1 and the duration reaches a preset threshold (for example, 500 ms). (that is, the value of the fault state F _{i_flg} is still 1); otherwise, the value of the fault state F _{i_flg} is configured as 0.

Step e3, according to the ASIL level, determine the functional safety target of the electric drive system, as shown in Table 4 above.

Among them, the functional safety of the electric drive system involves three aspects: torque safety, thermal safety and high-voltage safety. For the P13 dual-motor control system, according to the international safety standard ISO 26262-2018 and combined with the HARA analysis results, a total of 7 functional safety objectives for the electric drive system are determined, which are respectively recorded as SG ₁ , SG ₂ , ..., SG ₇ .

Among them, the ASIL level of SG ₁ -SG ₄ is C level, and the ASIL level of SG ₅ -SG ₇ is A level.

Step e4, determining the importance coefficient of each functional safety objective.

As a possible implementation, according to the above table 5, the corresponding relationship between the ASIL level and the importance coefficient of the functional safety goal, it can be obtained

Step e5. In an offline scenario, determine the correlation matrix between functional safety objectives and fault types.

As a possible implementation, taking the fault type F4 (bus voltage overvoltage) as an example, the fault type F4 has an 80% probability of violating the functional safety goal SG ₁ (unexpected vehicle acceleration) and functional safety goal SG ₂ (vehicle unintended acceleration). expected deceleration), there is a 50% probability of violating the functional safety goal SG ₇ (high voltage electric shock), then r ₄₁ =r ₄₂ =0.8, r ₄₃ ˜r ₄₆ =0, r ₄₇ =0.5. By analogy, the correlation matrix between functional safety objectives and fault types can be determined:

Step e6, determining the fault score of the electric drive system.

As a possible implementation, the fault score of the electric drive system is determined according to the results of the weighted summation of the fault state information, the importance coefficients of multiple functional safety objectives, and the correlation matrix.

Exemplarily, the fault score of the electric drive system satisfies the following formula (2):

Step e7, according to the fault score of the electric drive system, handle the fault of the electric drive system.

As a possible implementation manner, according to the above step S103, in this example, Q _Level1 =0.3, Q _Level2 =0.6, and Q _Level3 =1.0.

When Q>Q _Level1 , the fault level of the electric drive system reaches Level 1, and the fault handling method of the electric drive system is the fault handling method of Level 1: execute system alarm.

When Q>Q _Level2 , the fault level of the electric drive system reaches Level 2, and the fault handling method of the electric drive system is the fault processing method of Level 2: perform system power degradation or limp.

When Q>Q _Level3 , the fault level of the electric drive system reaches Levelz level, and the fault handling method of the electric drive system is the fault handling method of Levelz level: execute ASC and FW.

As a possible implementation, the motor controller handles the fault of the electric drive system according to the fault processing method.

Step e8, establishing a security risk early warning mechanism.

Specifically, a preset warning threshold Q _Thd is set, and when QQ _Levelz <Q _Thd , the electric drive system executes a fault warning reminder, for details, refer to the above steps S104-S105.

Example 2, as shown in Figure 7, based on the online scene, perform fault diagnosis on the P13 dual electric drive system.

Step f1, acquiring fault status information of the electric drive system.

First obtain the fault list of the electric drive system. As a possible implementation, according to the method given in step S1011 above, the motor controller obtains one or more sets of fault data of the electric drive system; extracts a fault list of the electric drive system from one or more sets of fault data.

The fault list of the electric drive system is shown in Table 8 above. In this example, there are 104 types of faults of the electric drive system including F1-F104.

Then the motor controller processes and analyzes the state information of the electric drive system uploaded by the PWM inverter and the PMSM within a preset time period, and determines the fault state F _{i_flg} corresponding to each fault type Fi in the fault list of the electric drive system, according to The fault state F _{i_flg} corresponding to each fault type Fi generates the fault state list of the electric drive system as shown in Table 9 above.

Finally, the fault state F _{i_flg} of the electric drive system is extracted from the fault state list of the electric drive system, and fault state information F=[F _{1_flg} , F _{2_flg} , . . . , F _{104_flg} ] is generated.

Step f2, updating the fault status information of the electric drive system.

As a possible implementation, the fault status information of the electric drive system is debounced, and the debounced fault status information of the electric drive system is obtained Wherein, the debounce processing refers to: when the fault state F _{i_flg} in the fault information of the electric drive system maintains a true value of 1, and the duration reaches a preset threshold (for example, 500 ms), keep the value of the fault state F _{i_flg} not change (that is, the value of the fault state F _{i_flg} is still 1); otherwise, configure the value of the fault state F _{i_flg} to be 0.

Step f3, according to the ASIL level, determine the functional safety target of the electric drive system, as shown in Table 4 above. Among them, the functional safety of the electric drive system involves three aspects: torque safety, thermal safety and high-voltage safety. For the P13 dual-motor control system, according to the international safety standard ISO 26262-2018 and combined with the HARA analysis results, a total of 7 functional safety objectives for the electric drive system are determined, which are respectively recorded as SG ₁ , SG ₂ , ..., SG ₇ .

Among them, the ASIL level of SG ₁ -SG ₄ is C level, and the ASIL level of SG ₅ -SG ₇ is A level.

Step f4, determining the importance coefficient of each functional safety objective.

As a possible implementation, according to the above table 5, the corresponding relationship between the ASIL level and the importance coefficient of the functional safety goal, it can be obtained

Step f5, in the online scenario, determine the correlation matrix between functional safety objectives and fault types.

As a possible implementation, according to the functional safety list violated by the fault type, a correlation matrix between the functional safety target and the fault type is determined.

It can be understood that, compared with the offline scenario in Example 1, the probability of fault types violating functional safety goals is analyzed to determine the correlation matrix between functional safety goals and fault types; this example can use real-time fault data to analyze fault types and The correlation coefficient of the functional safety target is optimized.

Specifically, as shown in Table 7 above, assuming that the number of statistical data sets is n, the number of times that the current i-th fault type violates the j-th functional safety goal can be calculated as n _ij (n _ij ≤ n), then the i-th The correlation coefficient r _ij =n _ij /n between the fault type and the jth functional safety target.

When a group of fault data of the electric drive system is added, if the i-th fault type violates the j-th functional safety goal again, the correlation coefficient between the i-th fault type and the j-th functional safety goal is corrected as: If the i-th fault type does not violate the j-th functional safety goal, the correlation coefficient between the i-th fault type and the j-th functional safety goal is corrected as: />

By analogy, the optimized correlation coefficient is obtained.

As a possible implementation, according to the optimized correlation coefficient, determine the correlation matrix between functional safety goals and fault types:

Step f6, determining the fault score of the electric drive system.

As a possible implementation, the fault score of the electric drive system is determined according to the results of the weighted summation of the fault state information, the importance coefficients of multiple functional safety objectives, and the correlation matrix.

Specifically, the fault score of the electric drive system satisfies the following formula (3):

Step f7, determine the fault score of the electric drive system, and handle the fault of the electric drive system.

As a possible implementation manner, according to the above step S103, in this example, Q _Level1 =0.3, Q _Level2 =0.6, and Q _Level3 =1.0.

When Q>Q _Level1 , the fault level of the electric drive system reaches Level 1, and the fault handling method of the electric drive system is the fault handling method of Level 1: execute system alarm.

When Q>Q _Level2 , the fault level of the electric drive system reaches Level 2, and the fault handling method of the electric drive system is the fault processing method of Level 2: perform system power degradation or limp.

When Q>Q _Level3 , the fault level of the electric drive system reaches Levelz level, and the fault handling method of the electric drive system is the fault handling method of Levelz level: execute ASC and FW.

As a possible implementation, the motor controller handles the fault of the electric drive system according to the fault processing method.

Step f8, establishing a security risk early warning mechanism.

Specifically, a preset warning threshold Q _Thd is set, and when QQ _Levelz <Q _Thd , the electric drive system executes a fault warning reminder, for details, refer to the above steps S104-S105.

The foregoing mainly introduces the solutions provided by the embodiments of the present application from the perspective of methods. In order to realize the above functions, the fault handling device or electronic equipment includes corresponding hardware structures and/or software modules for performing various functions. Those skilled in the art should easily realize that the present application can be implemented in the form of hardware or a combination of hardware and computer software in combination with the units and algorithm steps of each example described in the embodiments disclosed herein. Whether a certain function is executed by hardware or computer software drives hardware depends on the specific application and design constraints of the technical solution. Skilled artisans may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application.

In the embodiment of the present application, according to the above method, the fault handling device or electronic equipment can be divided into functional modules as an example. More than two functions are integrated in one processing module. The above-mentioned integrated modules can be implemented in the form of hardware or in the form of software function modules. It should be noted that the division of modules in the embodiment of the present application is schematic, and is only a logical function division, and there may be other division methods in actual implementation.

Fig. 8 is a block diagram showing a device for fault handling according to an exemplary embodiment. The fault processing device 500 includes: an acquisition module 501 , a determination module 502 , a processing module 503 , an analysis module 504 , a calculation module 505 and an execution module 506 .

The acquisition module 501 is configured to acquire fault state information of the electric drive system; the fault state information is used to indicate the currently occurring fault type among multiple fault types.

The determination module 502 is configured to determine the fault score of the electric drive system according to the fault state information and the association relationship between multiple functional safety objectives and multiple fault types.

The processing module 503 is configured to process the fault of the electric drive system according to the fault score of the electric drive system.

In a possible implementation manner, the acquisition module 501 is also configured to acquire the importance coefficients of multiple functional safety objectives; the importance coefficients of the multiple functional safety objectives are used to indicate each functional safety objective of the multiple functional safety objectives The degree of importance; the association relationship between multiple functional safety objectives and multiple fault types is in the form of an association matrix; the determination module 502 is specifically used to determine the fault state information, the importance coefficient of multiple functional safety objectives, and the The result of the weighted summation determines the failure score of the electric drive system.

In a possible implementation, the analysis module 504 is configured to analyze the number of times each fault type violates each functional safety target within a preset time period; the determination module 502 is also configured to violate each functional safety target according to each fault type. The number of functional safety objectives, determine the correlation coefficient between each fault type in multiple fault types, and each functional safety target in multiple functional safety targets; the correlation coefficient reflects the probability that each fault type violates the functional safety target; according to the correlation coefficients to determine the correlation matrix for multiple functional safety objectives and multiple fault types.

In a possible implementation manner, the processing module 503 is specifically configured to determine the fault handling method of the electric drive system according to the relationship between the fault score of the electric drive system and the preset threshold; Troubleshoot the drive system.

In a possible implementation manner, the preset threshold value includes a first preset threshold value and a second preset threshold value; wherein, the second preset threshold value is greater than the first preset threshold value; determining Module 502 is specifically used to determine that the fault handling method of the electric drive system is the first-level fault handling method when the fault score of the electric drive system is greater than the first preset threshold value; In the case of the second preset threshold value, it is determined that the fault handling method of the electric drive system is the second-level fault handling method.

In a possible implementation manner, the fault processing device further includes a calculation module 505 and an execution module 506; the calculation module 505 is configured to calculate the difference between the fault score of the electric drive system and a preset threshold value; the execution module 506 , which is used to execute the fault early warning reminder when the difference is less than the preset early warning threshold; the fault early warning reminder is used to prompt the electric drive system to change from the current fault level to the next fault level.

According to the above technical means, the fault handling method provided by this application determines the fault score of the electric drive system according to the fault state information of the electric drive system, and the relationship between the functional safety target and the fault type, and calculates the fault score of the electric drive system according to the fault score of the electric drive system. Handling the faults of the electric drive system can improve the standardization and accuracy of the fault diagnosis of the electric drive system, and then handle the faults of the electric drive system more reasonably and accurately.

Regarding the apparatus in the foregoing embodiments, the specific manner in which each module executes operations has been described in detail in the embodiments related to the method, and will not be described in detail here.

Fig. 9 is a block diagram of a vehicle terminal according to an exemplary embodiment. As shown in FIG. 9 , the vehicle terminal 600 includes but not limited to: a processor 601 and a memory 602 .

Wherein, the above-mentioned memory 602 is used for storing executable instructions of the above-mentioned processor 601 . It can be understood that the above processor 601 is configured to execute instructions, so as to implement the fault handling method in the above embodiment.

It should be noted that those skilled in the art can understand that the structure of the vehicle terminal shown in FIG. 9 does not constitute a limitation on the vehicle terminal. The vehicle terminal may include more or less components than those shown in FIG. 9 , or combine certain components. some components, or a different arrangement of components.

The processor 601 is the control center of the vehicle terminal, which uses various interfaces and lines to connect various parts of the entire vehicle terminal, runs or executes software programs and/or modules stored in the memory 602, and calls data stored in the memory 602 , execute various functions of the vehicle terminal and process data, so as to monitor the vehicle terminal as a whole. Processor 601 may include one or more processing units. Optionally, the processor 601 may integrate an application processor and a modem processor, wherein the application processor mainly processes an operating system, user interface, application program, etc., and the modem processor mainly processes wireless communication. It can be understood that the foregoing modem processor may not be integrated into the processor 601 .

The memory 602 can be used to store software programs as well as various data. The memory 602 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application program (such as a determination unit, a processing unit, etc.) required by at least one functional module, and the like. In addition, the memory 602 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices.

In an exemplary embodiment, there is also provided a computer-readable storage medium including instructions, such as a memory 602 including instructions, which can be executed by the processor 601 of the vehicle terminal 600 to implement the fault handling method in the above-mentioned embodiments.

In actual implementation, the functions of the acquisition module 501, the determination module 502, the processing module 503, the analysis module 504, the calculation module 505 and the execution module 506 in FIG. 8 can all be called by the processor 601 in FIG. implemented by computer programs. For the specific execution process, reference may be made to the description of the fault handling method in the above embodiment, which will not be repeated here.

Optionally, the computer-readable storage medium may be a non-transitory computer-readable storage medium, for example, the non-transitory computer-readable storage medium may be a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory) , RAM), CD-ROM, magnetic tape, floppy disk and optical data storage devices, etc.

In an exemplary embodiment, the embodiment of the present application also provides a computer program product including one or more instructions, the one or more instructions can be executed by the processor 601 of the vehicle terminal to complete the faults in the above embodiments Approach.

It should be noted that, when the instructions in the above computer-readable storage medium or one or more instructions in the computer program product are executed by the processor of the vehicle terminal, each process of the above-mentioned embodiment of the fault handling method can be realized, and can achieve the above-mentioned failure. The technical effect of the same processing method will not be repeated here to avoid repetition.

Through the description of the above embodiments, those skilled in the art can clearly understand that for the convenience and brevity of the description, only the division of the above-mentioned functional modules is used as an example for illustration. In practical applications, the above-mentioned functions can be allocated according to needs It is completed by different functional modules, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of modules or units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or It may be integrated into another device, or some features may be omitted, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

A unit described as a separate component may or may not be physically separated, and a component shown as a unit may be one physical unit or multiple physical units, which may be located in one place or distributed to multiple different places. Part or all of the classification units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If an integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art, or the whole classification part or part of the technical solution can be embodied in the form of a software product, and the software product is stored in a The storage medium includes several instructions to make a device (which may be a single-chip microcomputer, a chip, etc.) or a processor (processor) execute all or part of the steps of the methods in various embodiments of the present application. The aforementioned storage medium includes: various media capable of storing program codes such as U disk, mobile hard disk, ROM, RAM, magnetic disk or optical disk.

The above are only specific implementation methods of this application, but the protection scope of this application is not limited thereto. Any changes or replacements within the technical scope disclosed in this application shall be covered within the protection scope of this application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims (12)

1. A fault handling method, characterized in that it is applied to a controller of a vehicle terminal; the vehicle terminal also includes an electric drive system; the method includes: Obtaining fault status information of the electric drive system; the fault status information is used to indicate the currently occurring fault type among multiple fault types; determining a fault score of the electric drive system according to the fault state information and the association relationship between multiple functional safety objectives and the multiple fault types; According to the fault score of the electric drive system, the fault of the electric drive system is handled. 2. The method according to claim 1, characterized in that the method further comprises: Acquiring the importance coefficients of the multiple functional safety objectives; the importance coefficients of the multiple functional safety objectives are used to indicate the importance of each of the multiple functional safety objectives; The association relationship between the plurality of functional safety objectives and the plurality of fault types is in the form of an association matrix; the association relationship between the plurality of functional safety objectives and the plurality of failure types according to the fault status information , determining the fault score of the electric drive system, including: The fault score of the electric drive system is determined according to the result of the weighted summation of the fault state information, the importance coefficients of the plurality of functional safety objectives, and the correlation matrix. 3. The method according to claim 2, wherein the method further comprises: analyzing the number of violations of each of the functional safety objectives for each of the failure types within a predetermined period of time; Determine the correlation coefficient between each of the multiple fault types and each of the multiple functional safety targets based on the number of times each of the fault types violates each of the functional safety targets ; said correlation coefficient reflects the probability that each of said failure types violates said functional safety objective; A correlation matrix between the multiple functional safety objectives and the multiple fault types is determined according to the correlation coefficient. 4. The method according to claim 1, wherein the processing of the fault of the electric drive system according to the fault score of the electric drive system comprises: determining a fault handling method for the electric drive system according to the relationship between the fault score of the electric drive system and a preset threshold value; According to the fault handling method, the fault of the electric drive system is handled. 5. The method according to claim 4, wherein the preset threshold value comprises a first preset threshold value and a second preset threshold value; wherein, the second preset threshold value greater than the first preset threshold; The determining the fault handling method of the electric drive system according to the relationship between the fault score of the electric drive system and the preset threshold value includes: When the fault score of the electric drive system is greater than the first preset threshold value, it is determined that the fault handling method of the electric drive system is a first-level fault processing method; If the fault score of the electric drive system is greater than the second preset threshold value, it is determined that the fault handling method of the electric drive system is a second-level fault processing method. 6. The method according to claim 5, further comprising: calculating the difference between the fault score of the electric drive system and a preset threshold; When the difference is smaller than the preset early warning threshold, a fault early warning is executed; the fault early warning is used to prompt that the electric drive system is about to change from the current fault level to the next fault level. 7. A fault processing device, characterized in that it is applied to a controller of a vehicle terminal; the vehicle terminal also includes an electric drive system; comprising: An acquisition module, configured to acquire fault state information of the electric drive system; the fault state information is used to indicate the currently occurring fault type among multiple fault types; A determining module, configured to determine the fault score of the electric drive system according to the fault state information and the association relationship between multiple functional safety objectives and the multiple fault types; The processing module is configured to process the fault of the electric drive system according to the fault score of the electric drive system. 8. The device of claim 7, wherein: The acquisition module is also used to acquire the importance coefficients of the multiple functional safety objectives; the importance coefficients of the multiple functional safety objectives are used to indicate each of the functional safety objectives in the multiple functional safety objectives the importance of The association relationship between the plurality of functional safety objectives and the plurality of fault types is in the form of an association matrix; the determining module is specifically configured to, according to the fault status information, the importance of the plurality of functional safety objectives The result of the weighted summation of the coefficients and the correlation matrix determines the fault score of the electric drive system. 9. The device according to claim 7, wherein the fault processing device further comprises an analysis module; An analysis module, configured to analyze the number of times each of the fault types violates each of the functional safety objectives within a preset period of time; The determining module is further configured to determine, according to the number of times each of the fault types violates each of the functional safety goals, that each of the multiple fault types is different from each of the multiple functional safety goals A correlation coefficient of a functional safety target; the correlation coefficient reflects the probability that each of the fault types violates the functional safety target; according to the correlation coefficient, determine the correlation between the multiple functional safety targets and the multiple fault types Incidence matrix. 10. The apparatus of claim 7, wherein: A processing module, specifically configured to determine a fault handling method for the electric drive system according to the relationship between the fault score of the electric drive system and a preset threshold; faults are handled. 11. A vehicle terminal, characterized in that it comprises: a memory, a processor, and a computer program stored on the memory and operable on the processor, the processor executes the program to realize the The fault handling method described in any one of requirements 1 to 6. 12. A computer-readable storage medium, characterized in that, when the computer-executable instructions stored in the computer-readable storage medium are executed by a processor of the electronic device, the electronic device is capable of executing the Any one of the fault handling methods.