整车控制器功能安全设计和研究  

The Functional Safety Design and Research of Vehicle Controller

作　　者：张戟[1] 万祥[1] 朱翔宇[1] ZHANG Ji WAN Xiang ZHU Xiang-yu(Clean Energy Automotive Engineering Center, Tongji University, Shanghai 201804, China)

机构地区：[1]同济大学新能源汽车工程中心,上海201804

出　　处：《佳木斯大学学报（自然科学版）》2016年第5期683-687,741,共6页Journal of Jiamusi University：Natural Science Edition

摘　　要：依据ISO26262标准分析了整车控制器的功能安全,由此确定了整车控制器的安全目标ASIL等级。硬件部分,设计了基于异构双核的整车控制器系统结构,并基于ASIL算法,计算了整车控制器的单点故障指标和潜在多点故障指标,结果表明整车控制器的硬件功能安全等级能够满足安全目标的要求。软件部分,实现了辅助控制器故障监测和故障冗余的功能,试验表明辅助控制器能够监测主控制器的故障,并且能够在主控制器失效的情况下代替其工作。According to ISO26262 standard, functional safety of VCU had been analyzed, thus the ASIL grades of safety goal of VCU were determined.Hardware part, VCU system architecture based on heterogeneous dual core was designed, and then based on the ASIL algorithmic, single point fault metric and latent fault metric of VCU were calculated, the result showed that the functional safety grades of the VCU＇s hardware could meet the requirement of safety goals.For the software part, the function of fault monitor and fault redundancy of the auxil-iary controller were achieved and the test showed that the auxiliary controller could monitor the fault of the main controller and work instead of the main controller after the main controller failed.

关 键 词：整车控制器 ISO26262 功能安全 辅助控制器 ASIL 

分 类 号：U469.7[机械工程—车辆工程]