【摘要】 在满足电子换挡控制器功能的基础上,完成符合功能安全完整性等级ASIL C的硬件架构设计;该架构采用主控芯片+监控芯片的双芯片架构,具有多种安全机制如安全相关输入信号冗余、双芯片具备独立关断路径等,能够确保在任意故障状态下关闭驱动输出,进入安全状态;最后对该控制器进行功能安全硬件指标验证。结果表明,该系统的多种故障检测机制能够有效地减少单点故障失效率和潜在故障失效率,使系统能够满足ASIL C等级的要求。更多还原

【Abstract】 In this paper, on the basis of realizing the function of the electronic shift controller, we have completed the hardware architecture design that conforms to the functional safety integrity level ASIL C.The dual-chip architecture is adopted, which has a variety of safety mechanisms, such as redundancy of safety-related input signals and independent turn-off path of both chips, etc.Such architecture can ensure that the drive output can be turned off to enter a safe state when there’s any failure.Finally, the functional safety hardware indicators of the controller are verified.The results show that the multiple fault detection mechanisms of the system can effectively reduce the single point failure rate and the potential failure rate, so that the system can meet the requirements of ASIL C level.更多还原