CN102566567A - Electronic control unit (ECU) sensor signal fault injection device for engine hardware in-the-loop simulation (HILS) system - Google Patents

Abstract

The invention discloses an ECU sensor signal fault injection device for an engine HILS system, comprising a host computer, a sensor signal input port, a sensor signal output port, a multi-channel channel selection module, a minimum system module of a single-chip microcomputer, an RS485 communication module, and a sensor signal input port. The output port is connected to the multi-channel selection module, the multi-channel selection module is connected to the sensor signal input port, the minimum system module of the single-chip microcomputer is connected with the described multi-channel selection module, one end of the RS485 communication module is connected with the minimum system module of the single-chip microcomputer, and the other end Connect with the host computer, and the host computer sends a self-defined message to the minimum system module of the single-chip microcomputer through the level conversion circuit of the RS485 module. The code outputs control signals to the multi-channel selection module to realize the required fault injection. This device can perform common fault injection and other functions on the sensor signal of the engine ECU.

Description

An ECU sensor signal fault injection device for engine HILS system

technical field

The invention relates to electronic product testing technology, more specifically, relates to an ECU sensor signal fault injection device used in an engine hardware-in-the-loop simulation system.

Background technique

At present, the mainstream method of automotive electronic system development is a model-based modern development process - V-mode development process, which ensures that every step of the developer's development process can be verified in time. Before the product goes on the market, it is necessary to conduct a comprehensive and comprehensive test on the ECU, especially the test under faults and extreme conditions. Using the actual control object for the test is difficult to realize the realistic complex situation, and the implementation cost is high and the development cycle is long. In order to solve this problem, the development method of hardware-in-the-loop simulation (HardwareIn-the-Loop Simulation, HILS) is proposed in the V mode: that is, in order to test the performance of the ECU, the controller uses a real ECU during the simulation test of the overall system , the controlled object and system operating environment can be simulated in whole or in part by real-time mathematical models.

The engine ECU receives multiple engine sensor parameter signals. When the sensor signal input pin of the ECU fails (such as the signal line is open, the signal line is shorted to the power supply, the signal line is shorted to the ground, the signal line is shorted to the signal line), the ECU must make timely actions according to the control strategy. , Reasonable response to ensure driving safety. The engine hardware-in-the-loop simulation test must include the actuator signal fault simulation link to test the ability of ECU driver level fault diagnosis and fault resolution.

Contents of the invention

In view of the above technical problems, the present invention proposes an ECU sensor signal fault injection device for an engine hardware-in-the-loop simulation system.

In order to solve the problems of the technologies described above, the technical solution of the present invention is as follows;

An ECU sensor signal fault injection device for an engine HILS system, comprising a host computer, a sensor signal input port, a sensor signal output port, a multi-channel channel selection module, a single-chip minimum system module, and an RS485 communication module, the sensor signal output The port is connected to the multi-channel selection module, the multi-channel selection module is connected to the sensor signal input port, the minimum system module of the single-chip microcomputer is connected to the multi-channel selection module, and one end of the RS485 communication module is connected to the The minimum system module of the single-chip microcomputer is connected, and the other end is connected with the host computer, and the host computer sends a self-defined message to the minimum system module of the single-chip microcomputer through the level conversion circuit of the RS485 module, and the minimum system module of the single-chip microcomputer After the module finishes receiving, verifying and responding to the message, it outputs a control signal to the multi-channel selection module according to the fault code in the message to realize the required fault injection.

Further, the faults include:

Normal state. In this state, the sensor signal input port is connected to the sensor signal output port, and the signal is input into the ECU without fault;

Fault 1: The ECU sensor signal input pin is disconnected. In this state, the sensor signal output port and the sensor signal input port remain open;

Fault 2: The ECU sensor signal input pin is short-circuited with the 5V power supply. In this state, the sensor signal output port is only short-circuited with the 5V power supply and not connected to the sensor signal input port;

Fault 3: The ECU sensor signal input pin is short-circuited to the ground. In this state, the sensor signal output port is only short-circuited to the ground and not connected to the sensor signal input port;

Fault 4: The ECU sensor signal input pin is shorted to the pin.

Further, the number of the multi-channel selection modules depends on usage requirements and the number of I/O pins of the minimum system module of the single-chip microcomputer.

Further, the multi-channel selection module includes a MAX4617 multi-channel selection chip and its peripheral circuits, the engine ECU pin end is connected to the sensor signal output port, and the output port X of the multi-channel selection chip is connected in series with the resettable fuse, and the input Port X0 is connected to the input port of the engine sensor after the self-recovery fuse is connected in series, the input port X1 is suspended to realize the failure of the signal input pin disconnection state, the input port X2 is connected to the 5V power supply to realize the fault state of the signal input pin and the 5V power supply short circuit, and the input port X4 is grounded To realize the short-circuit fault between the signal input pin and the ground, the input port X3 is connected to the output terminal of other multi-channel channel selection chips into X3 to realize the short-circuit fault between the signal input pin and the pin; the A of the MAX4617 multi-channel channel selection chip, Ports B and C are control signal terminals, connected to the I/O pins of the minimum system module of the single-chip microcomputer and connected to pull-down resistors R1, R2, and R3.

Further, the host computer can control a plurality of devices, and inside each device, the minimum system module of the single-chip microcomputer includes a unique ID number as the ID number of each device, and all multi-channel channels on each device The selection module has a unique number, and the minimum system module of the single-chip microcomputer in each device is only after receiving the message containing the ID number, verification and response of the device sent by the upper computer, and then sends a message to the message. The specified multi-channel channel selection chip outputs the control signal.

Further, the message format defined by this device consists of four bytes, byte 1 represents the ID number of each device; byte 2 fault codes represent four states, represented by fixed characters; byte 3 When it is in the four states of normal, fault 1, fault 2, and fault 3, it indicates the selected multi-channel selection module number. When it is fault 4, byte 3 contains the selected two multi-channel selections. Module number, put these two module numbers in the upper 4 bits and lower 4 bits of byte 3 respectively; byte 4 is the value after the cumulative sum check, and its value is the cumulative sum of the first three bytes, The verification result of each device will be sent to the host computer.

The beneficial effect of the present invention is that: the device can perform common fault injection to the sensor signal input pin of the engine ECU, has the protection function when the current is too large, has high safety, and can simulate the faults of various engine sensor signals, The number of processed signals is large and the protection is good. RS485 bus communication is adopted, and the message format is customized to realize the injection function of multi-device and multi-channel actuator control signal faults.

Description of drawings

Fig. 1 is the structural block diagram of device of the present invention;

Fig. 2 is the circuit schematic diagram of the device multi-channel selection module of the present invention;

Fig. 3 is a schematic diagram of the communication mode of the device of the present invention;

Fig. 4 is a message format diagram defined by the device of the present invention.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments.

As shown in Figure 1, an ECU sensor signal fault injection device for the engine HILS system includes a host computer, a sensor signal input port, a sensor signal output port, a multi-channel selection module, a minimum system module of a single-chip microcomputer, and an RS485 communication module. The sensor signal output port is connected to the multi-channel selection module, the multi-channel selection module is connected to the sensor signal input port, the minimum system module of the single-chip microcomputer is connected to the multi-channel selection module, and the One end of the RS485 communication module is connected to the minimum system module of the single-chip microcomputer, and the other end is connected to the host computer, and the host computer sends a self-defined message to the minimum system module of the single-chip microcomputer through the level conversion circuit of the RS485 module After the minimum system module of the single-chip microcomputer completes message reception, verification, and response, it outputs a control signal to the multi-channel channel selection chip according to the fault code in the message to realize the required fault injection.

The number of multi-channel channel selection modules on the device depends on the usage requirements and the number of single-chip I/O pins of the smallest system module of the single-chip microcomputer. As shown in Figure 2, it is a schematic circuit diagram of two symmetrical multi-channel selection modules. It is illustrated by a multi-channel selection module in Figure 2. The sensor signal input pin of the engine ECU is connected to the sensor signal output of the device. Port, the sensor signal output port is connected to the output port X of the MAX4617 multi-channel selection chip of the multi-channel selection module, which is pin 3, the engine sensor signal line is connected to the sensor signal input port, and the sensor signal input port is connected to the input of the multi-channel selection chip Port X0 is pin 13. The multi-channel selection module is composed of MAX4617 multi-channel selection chip and its peripheral circuits. The three control pins of each multi-channel selection chip are connected to the I/O pins of the smallest system module of the microcontroller. , according to the control signal output by the I/O pin of the minimum system module of the single-chip microcomputer, the output port of the multi-channel channel selection chip is connected with different input ports, so as to realize different fault injection of the sensor signal output port:

1. In the normal state, the sensor signal input port is connected to the sensor signal output port in this state, and the signal is input into the ECU without fault;

2. Fault 1: The ECU sensor signal input pin is disconnected, and the sensor signal output port and the sensor signal input port remain open in this state;

3. Fault 2: The ECU sensor signal input pin is short-circuited with the 5V power supply. In this state, the sensor signal output port is only short-circuited with the 5V power supply and not connected to the sensor signal input port;

4. Fault 3: The ECU sensor signal input pin is short-circuited to the ground: in this state, the sensor signal output port is only short-circuited to the ground and not connected to the sensor signal input port;

5. Fault 4: The ECU sensor signal input pin is short-circuited with the pin: in this state, the channel X3 of any two multi-channel channel selection chips on the device of the present invention, that is, the pin 12, is connected.

The upper computer sends a custom message to the minimum system module of the single-chip microcomputer through the level conversion circuit of the RS485 module. The output control signals enable the required fault injection.

Further, the engine ECU pin is connected to the sensor signal output port, connected in series with the self-recovery fuse and then connected to the output port X of the multi-channel selection chip, which is pin 3, and the input port X0 is pin 13, which is connected in series with the sensor input port after the self-recovery fuse , input port X1 means pin 14 is suspended to realize fault 1, input port X2 means pin 15 is connected to 5V power supply to realize fault 2, input port X4 means pin 1 is grounded to realize fault 3, input port X3 means pin 12 is connected to other multi-channel The output terminal of the channel selection chip is input into X3, that is, pin 12 to realize fault 4. Ports A, B, and C are control signal ports, connected to the I/O pins of the smallest system module of the microcontroller and connected to pull-down resistors R1, R2, and R3.

As shown in Figure 3, the communication mode diagram of the device of the present invention, the host computer and the device are connected through the RS485 bus, and the RS485 communication module of the device realizes the point-to-multiple communication mode. The minimum system module of the single-chip microcomputer of each device of the present invention must contain an ID number different from other devices, and all multi-channel channel selection modules on each device have a unique number. Each device outputs a control signal to the multi-channel selection chip specified in the message only after receiving the message sent by the upper computer that contains the device ID number, verification, and correct response.

Figure 4 shows the message format defined by this device. It consists of four bytes, byte 1 represents the ID number, and the ID number of each device is different, and the fault code of byte 2 represents four states (normal, fault 1, fault 2, fault 3, fault 4). Unchanged characters indicate that byte 3 represents the selected multi-channel selection module number for the four states of normal, fault 1, fault 2, and fault 3, and for fault 4, because it represents the short circuit between any two ECU pins. Therefore, at this time, byte 3 contains the selected two multi-channel channel selection module numbers, and these two module numbers are respectively placed in the high 4 bits and low 4 bits of byte 3, and byte 4 is obtained by accumulating In sum check mode, the value is the cumulative sum of the first three bytes, and the check result of each device will be sent to the host computer.

The above is only a preferred embodiment of the present invention, it should be pointed out that for those of ordinary skill in the art, without departing from the concept of the present invention, some improvements and modifications can also be made, and these improvements and modifications should also be considered Within the protection scope of the present invention.

Claims (6)

1. A kind of ECU sensor signal failure injection device for engine HILS system, it is characterized in that, comprise host computer, sensor signal input port, sensor signal output port, multi-channel channel selection module, single-chip minimum system module, RS485 communication module, The sensor signal output port is connected to the multi-channel selection module, the multi-channel selection module is connected to the sensor signal input port, the minimum system module of the single-chip microcomputer is connected to the multi-channel selection module, and the One end of the RS485 communication module is connected to the minimum system module of the single-chip microcomputer, and the other end is connected to the host computer, and the host computer sends a self-defined message to the minimum system module of the single-chip microcomputer through the level conversion circuit of the RS485 module After the minimum system module of the single-chip microcomputer completes message reception, verification and response, it outputs a control signal to the multi-channel channel selection module according to the fault code in the message to realize the required fault injection. 2. A kind of ECU sensor signal fault injection device for engine HILS system according to claim 1, is characterized in that, described fault comprises: Normal state. In this state, the sensor signal input port is connected to the sensor signal output port, and the signal is input into the ECU without fault; Fault 1: The ECU sensor signal input pin is disconnected. In this state, the sensor signal output port and the sensor signal input port remain open; Fault 2: The ECU sensor signal input pin is short-circuited with the 5V power supply. In this state, the sensor signal output port is only short-circuited with the 5V power supply and not connected to the sensor signal input port; Fault 3: The ECU sensor signal input pin is short-circuited to the ground. In this state, the sensor signal output port is only short-circuited to the ground and not connected to the sensor signal input port; Fault 4: The ECU sensor signal input pin is shorted to the pin. 3. A kind of ECU sensor signal fault injection device for engine HILS system according to claim 2, is characterized in that, the quantity of described multi-channel channel selection module depends on the single-chip microcomputer of use requirement and described single-chip microcomputer minimum system module I/O pin count. 4. The ECU sensor signal fault injection device for engine HILS system according to any one of claims 1 to 3, characterized in that the multi-channel selection module includes a MAX4617 multi-channel selection chip and its peripheral circuit, the engine ECU pin is connected to the sensor signal output port, the self-recovery fuse is connected in series to the output port X of the multi-channel selection chip, the input port X0 is connected to the engine sensor input port after the self-recovery fuse is connected in series, and the input port X1 is suspended to realize the signal input lead. If the pin is disconnected, the input port X2 is connected to the 5V power supply to realize the signal input pin and the 5V power supply are shorted. The input port X4 is grounded to realize the signal input pin and the ground is shorted. The input port X3 is connected to other multi-channel selection. The output terminal of the chip enters X3 to realize the short-circuit fault between the signal input pin and the pin; the A, B, and C ports of the MAX4617 multi-channel channel selection chip are control signal terminals, which are connected to the I/O pins of the minimum system module of the single-chip microcomputer. pin and connect pull-down resistors R1, R2, R3. 5. A kind of ECU sensor signal fault injection device for engine HILS system according to any one of claims 1 to 3, characterized in that, the host computer can control a plurality of the devices, and within each device , the minimum system module of the single-chip microcomputer includes a unique ID number as the ID number of each device, and all multi-channel channel selection modules on each device have a unique number, and the minimum system module of the single-chip microcomputer in each device Only after receiving the correct message containing the device ID number, verification and response sent by the host computer, can the control signal be output to the multi-channel channel selection chip indicated in the message. 6. A kind of ECU sensor signal fault injection device for engine HILS system according to claim 5, is characterized in that, the message format defined by this device is made up of four bytes, and byte 1 represents each device's ID number; the fault code of byte 2 indicates four states, which are represented by fixed characters; byte 3 indicates the selected multi-channel selection when it is in the four states of normal, fault 1, fault 2, and fault 3 Module number, when it is fault 4, byte 3 contains the selected two multi-channel channel selection module numbers at this time, and these two module numbers are respectively placed in the high 4 bits and low 4 bits of byte 3; Section 4 is the value after verification by cumulative summation. Its value is the cumulative sum of the first three bytes, and the verification result of each device will be sent to the host computer.

Images