A modular safety software architecture for electrified-powertrain control systems

摘要

A modular software 400 includes an external communication layer 401 to perform external communication to and from a vehicle network, level 1 functions and hardware. An application layer 403 contains safety algorithms and software functions, where each function is assigned an Automotive Safety Integrity Level (ASIL) rating for level 2 and level 3 safety monitoring. An input/output (I/0) layer 402 provides an interface between a plurality of rings in the level 2/level 3 safety monitoring functions and the communication layer. The I/O layer encapsulates the modules present in the level 2 and level 3 functions to be independent from the external communications. The application layer also includes functional safety algorithm rings to monitor torque inaccuracies to prevent unintended acceleration or deceleration, high voltage battery monitoring, inverter temperature diagnostics and other hardware, sensor or software related diagnostics. Arbitration and error reporting layers are also provided.