基于ISO 26262的车身域控制器开发

Development of automotive body domain controller based on ISO 26262

使用单个微控制单元(microcontroller unit,MCU)的车身域控制器由于缺少外部芯片监控主控MCU的工作情况,缺少对多点故障失效的诊断覆盖,影响潜在失效率。此外,单MCU由于芯片引脚不足,使用复选芯片后大幅增加了单点故障失效率,因而很难达到功能安全等级B的要求。为满足功能安全的要求,设计了一种基于国产车规芯片AC78406的双MCU架构的车身域控制器。该控制器设计方案可消除多路复选芯片的硬件随机失效率,同时增加对MCU失效的诊断覆盖,从而提高功能安全等级。

Body domain controllers using single microcontroller unit(MCU)lack diagnostic coverage for multi-point fault failures due to the lack of an external chip to monitor the operation of the master MCU,affecting the potential failure rate.In addition,the single MCU can hardly meet the requirements of functional safety level B due to the lack of chip pins,and the use of multiplexing chip dramatically increases the single-point fault failure rate.To meet the functional safety requirements,body domain controller with dual-MCU architecture based on the domestic automotive-gauge chip AC78406 was designed,which eliminated the hardware random failure rate of the multiplexing chip,and increased the diagnostic coverage of the MCU failures,thus improving the functional safety level.