VEHICLE AND METHOD OF CONTROLLING THE SAME

A method of controlling a vehicle includes inputting, in response to an error occurring in a main controller configured for controlling a motor driving the vehicle, a brake signal of the vehicle to an electronic controller; confirming, in response to the brake signal being input, whether the vehicle decelerates in a drive controller; outputting, upon confirming that the vehicle does not decelerate, by the drive controller, a signal for generating a notification for inducing an emergency button mechanically or electrically connected to the main controller to operate; and cutting off power supplied to the main controller in response to the operation of the emergency button.

CROSS-REFERENCE TO RELATED APPLICATION(S)

The present application claims priority to Korean Patent Application No. 10-2022-0146313, filed on Nov. 4, 2022, the entire contents of which is incorporated herein for all purposes by this reference.

BACKGROUND OF THE PRESENT DISCLOSURE

Field of the Present Disclosure

The present disclosure relates to a vehicle and a method of controlling the same, and more particularly, to a vehicle capable of urgently stopping an electric vehicle when an emergency occurs while driving the electric vehicle, and a method of controlling the same.

Description of Related Art

Generally, eco-friendly vehicles are classified into electric vehicles, hybrid vehicles, plug-in hybrid vehicles, and fuel cell vehicles. Such an eco-friendly vehicle is driven by use of an electric motor, and includes a main battery for supplying power to the electric motor.

Furthermore, an eco-friendly vehicle, like an internal combustion engine vehicles, is provided with a software for controlling the vehicle, and the software may be updated after a certain time period has elapsed. However, during update of the software, a controller on which the software is provided may be exposed to hacking risk. In other words, when the software is updated, the controller may be infected with advertising programs, malicious codes, and computer viruses, and accordingly, an error such as a temporary stop (e.g., freezing) of the controller due to input/output delay of the controller or lack of storage space may occur.

If a software error occurs in a running vehicle, it is necessary to urgently take action on the vehicle because problems for driving safety may occur.

BRIEF SUMMARY

Various aspects of the present disclosure are directed to providing a vehicle configured for taking action on the vehicle when an error occurs in software thereof, and a method of controlling the same.

Additional aspects of the present disclosure are set forth in part in the description which follows, and in part, should be understood from the description, or may be learned by practice of the present disclosure.

In accordance with an aspect of the present disclosure, a method of controlling a vehicle is provided. The method includes inputting, in response to an error occurring in a main controller configured for controlling a motor driving the vehicle, a brake signal of the vehicle to an electronic controller; confirming, in response to the brake signal being input, whether the vehicle decelerates in a drive controller; outputting, upon confirming that the vehicle does not decelerate, by the drive controller, a signal for generating a notification for inducing an emergency button mechanically or electrically connected to the main controller to operate; and cutting off power supplied to the main controller in response to the operation of the emergency button.

The method may further include inputting a communication signal to the electronic controller in response of pressing a start button of the vehicle while the vehicle is driving; and confirming, by the electronic controller, a speed of the vehicle through the drive controller, wherein confirming the speed of the vehicle further includes confirming whether the brake signal has been input upon determining that the speed of the vehicle is greater than or equal to a predetermined value.

In the confirmation of the speed of the vehicle, the predetermined value for the speed of the vehicle may be 5 km/h.

The method may further include, upon confirming that the vehicle does not decelerate, requesting, by the drive controller, a battery controller that is configured to control a main battery that supplies power to the main controller to stop power supply to the main battery.

The method may further include re-confirming, by the drive controller, whether the vehicle is decelerating after the requesting the battery controller to stop the power supply to the main battery, and wherein the inducing of the operation of the emergency button is performed when the deceleration of the vehicle is re-confirmed and the vehicle does not decelerate.

In accordance with another aspect of the present disclosure, a method of controlling a vehicle is provided. The method includes requesting, in response to an error occurring in a main controller configured for controlling a motor driving the vehicle, a battery controller that is configured to control a main battery to stop power supply to the main controller from a drive controller that outputs a drive signal of the motor to the main controller; confirming, by the drive controller, whether the vehicle decelerates; outputting, upon confirming that the vehicle does not decelerate, by the drive controller, a signal for generating a notification for inducing an emergency button mechanically or electrically connected to the main controller to operate; and cutting off power supplied to the main controller in response to the operation of the emergency button.

The method may further include inputting a communication signal to an electronic controller in response of pressing a start button of the vehicle while the vehicle is driving; and confirming, by the electronic controller, a speed of the vehicle through the drive controller, wherein confirming the speed of the vehicle further includes requesting, by the drive controller, the battery controller to stop power supply thereto upon determining that the speed of the vehicle is greater than or equal to a predetermined value.

An inverter may be electrically connected to the main controller so that power is supplied to the main controller, and the emergency button is mechanically or electrically connected to the inverter.

In accordance with another aspect of the present disclosure, a vehicle includes a main battery; a motor configured to drive the vehicle by receiving power from the main battery; a main controller configured to control the motor by use of the power received from the main battery; and an emergency button mechanically or electrically connected to the main controller and configured to cut off the power supplied to the main controller in operation thereof.

The vehicle may further include an inverter connected to the main controller to supply the power from the main battery to the main controller, and wherein the emergency button is mechanically or electrically connected to the inverter.

The vehicle may further include a drive controller configured to monitor a drive of the motor and adjust a torque of the motor through the main controller, and wherein the drive controller is configured to output a signal for generating a notification for inducing the emergency button to operate to a user upon confirming that the vehicle does not decelerate after an error occurs in the main controller.

The vehicle may further include a display configured to generate the notification to the user.

The vehicle may further include a constant power controller configured to control the display so that the notification is generated according to a signal output from the drive controller.

The vehicle may further include a sub battery receiving the power from the main battery and supplying the power to the constant power controller.

The vehicle may further include a low voltage outputter for supplying power from the main battery to the sub battery.

DETAILED DESCRIPTION

Reference is made below in detail to the exemplary embodiments of the present disclosure, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to like elements throughout. The present specification does not describe all elements of the disclosed exemplary embodiments and detailed descriptions of what is well known in the art or redundant descriptions on substantially the same configurations have been omitted. The terms ‘part’, ‘module’, ‘member’, ‘block’ and the like as used in the specification may be implemented in software or hardware. Furthermore, a plurality of ‘part’, ‘module’, ‘member’, ‘block’ and the like may be embodied as one component. It is also possible that one ‘part’, ‘module’, ‘member’, ‘block’ and the like includes a plurality of components.

Throughout the specification, when an element is referred to as being “connected to” another element, it may be directly or indirectly connected to the other element and the “indirectly connected to” includes being connected to the other element via a wireless communication network.

Also, it is to be understood that the terms “include” and “have” are intended to indicate the existence of elements included in the specification, and are not intended to preclude the possibility that one or more other elements may exist or may be added.

Throughout the specification, when a member is located “on” another member, this includes not only when one member is in contact with another member but also when another member is present between the two members.

The terms first, second, and the like are used to distinguish one component from another component, and the component is not limited by the terms described above.

The reference numerals used in operations are used for descriptive convenience and are not intended to describe the order of operations and the operations may be performed in a different order unless otherwise stated.

Referring toFIG.1andFIG.2, an emergency stop device for a vehicle according to an exemplary embodiment of the present disclosure is described. The emergency stop device for the vehicle according to an exemplary embodiment of the present disclosure may confirm operations of various devices for driving the vehicle and induce the vehicle to be emergency stopped when an error occurs in a software of the vehicle. To the present end, the emergency stop device of the vehicle may include an emergency button110, a start button120, a main controller130, an inverter140, a brake controller150, a drive controller160, an electronic controller170, a motor180, a main battery190, a low voltage outputter210, a sub battery220, a constant power controller230, and a display240.

The emergency button110may be provided in the vehicle to operate when a user intends to stop the vehicle in an emergency. The emergency button110may be provided in a pressing switch type, include a shape such as a wire, a rope or a rod, or adopt a pedal switch type without a cover. Furthermore, the emergency button110may be disposed adjacent to a driver seat side so that the user may easily find when an emergency occurs. For example, the emergency button110may be provided on a steering wheel or on a left or right of a dashboard based on the steering wheel.

The emergency button110is electrically or physically connected to the inverter140and may cut off power supplied to the main controller130through the inverter140.

The start button120is a button for starting the vehicle so that the vehicle may drive. The start button120generates an electrical signal for starting the vehicle. The electrical signal generated through the start button120is transmitted to the electronic controller170, and the motor180may be driven through the drive controller160so that the vehicle may run.

Furthermore, the start button120may be used to stop driving of the vehicle in a state of driving stopped. In other words, the user may turn off an ignition of the vehicle by pressing the start button120to stop the vehicle after driving.

The main controller130may control the motor180for driving the vehicle, and also control the brake controller150, the drive controller160, the electronic controller170, and a battery controller200. The main controller130may transmit an output torque of the motor180and an available torque of the motor180to the drive controller160, and receive an instruction for the torque of the motor180from the drive controller160.

The inverter140is connected to the main controller130, and is configured to supply power to the main controller130. The inverter140may be electrically or mechanically connected to the emergency button110, and block power supply to the main controller130due to the operation of the emergency button110.

The brake controller150may control regenerative braking of an electric vehicle used in an exemplary embodiment of the present disclosure to be performed, and control a brake by receiving a signal from a brake pedal position sensor. The brake controller150may receive information on an executing amount required for regenerative braking from the drive controller160, and provide the drive controller160with a requested amount of regenerative braking accordingly.

The drive controller160may receive information on an actual output torque and available torque of the motor180from the main controller130, and transmit an instruction for the torque of the motor180to the main controller130. The drive controller160may collect information on a speed and acceleration of the vehicle through the state of the motor180through the main controller130. Furthermore, the drive controller160may control the battery controller200to adjust power supplied from the main battery190to the main controller130.

The electronic controller170may collect electronic information of the vehicle, confirm whether a brake signal is input from the brake controller150, and also receive a start ON/OFF signal through the start button120.

The low voltage outputter210steps down the power of the main battery190to charge the sub battery220with the power of the main battery190under the control of the drive controller160.

The sub battery220includes a voltage relatively lower than that of the main battery190, and is provided to supply power to lamps or wiper of the vehicle.

The constant power controller230is electrically connected to the sub battery220and receives power from the sub battery220. The constant power controller230may supply power to a controller for controlling safety devices in the vehicle. The constant power controller230may operate even when the ignition of the vehicle is turned off, and request the battery controller200to turn off a battery relay. Furthermore, the constant power controller230may control the display240to display the thing that an error has occurred in the software of the vehicle.

The display240is disposed to guide various information to the user. In an exemplary embodiment of the present disclosure, the display240may be controlled by the constant power controller230and may receive power from the sub battery. The display240may display the thing that an error has occurred in the software through the constant power controller230.

Referring toFIG.3andFIG.4, a method for controlling a vehicle according to an exemplary embodiment of the present disclosure is described below. A method of controlling a vehicle according to an exemplary embodiment of the present disclosure is a method of controlling a running vehicle to stop according to an input signal by a user when an error occurs while driving.

Whether a turning-off signal of the ignition of the vehicle has input after the start button120is pressed is confirmed (101).

In a method of controlling the vehicle according to an exemplary embodiment of the present disclosure, when an error occurs in software of the vehicle, a user presses the start button120, leading to input the turning-off signal of the ignition of the vehicle. In other words, at operation101, the fact that the start button120is pressed by the user while the vehicle is driving may mean that the vehicle is operated against an intention of the user. To prevent the vehicle from being operated against the intention of the user, the electronic controller170confirms whether the turning-off signal of the ignition thereof has input due to the pressing of the start button120.

At operation101, if the turning-off signal of the ignition thereof is not input, the instant process ends.

However, operation101may be omitted if necessary. Even if the start button120is not pressed by the user, the next operation may be performed when an error occurs in the software.

Whether a speed of the vehicle is greater than or equal to a predetermined value A is determined (103).

The electronic controller170confirms whether the speed of the vehicle is greater than or equal to the predetermined valueA (e.g., 5 km/h) through the drive controller160. The electronic controller170may confirm whether the speed of the vehicle is greater than or equal to the predetermined value, and upon determining that the speed of the vehicle is greater than or equal to the predetermined value, may determine that the vehicle will not be easily stopped by the intension of the user.

The instant process ends upon determining that the speed of the vehicle is less than the predetermined value.

Whether a brake signal has input is confirmed (105).

The electronic controller170confirms whether the brake signal has input through the brake controller150upon determining that the speed of the vehicle exceeds the predetermined value. The brake controller150may confirm whether the signal for operating the brake has input after the brake pedal is pressed by the intention of the user, and the electronic controller170may confirm whether the brake signal is received from the brake controller150.

If the brake signal is not input to the electronic controller170through the brake controller150, the instant process ends. The fact that the user does not operate the brake by the pressing of the brake pedal may be determined that the vehicle is controlled to move a predetermined distance although an error occurs in the software.

Whether an acceleration of the vehicle is less than 0 is confirmed (107).

The electronic controller170confirms whether the acceleration of the vehicle is less than 0 through the drive controller160. In other words, the electronic controller170may confirm whether the vehicle decelerates by use of the drive controller160, which may refer to confirm whether the vehicle decelerates according to the brake signal input through operation105.

Upon determining that the acceleration of the vehicle is less than 0, all processes ends. The fact that the vehicle decelerates refers to that the brake is operated normally by the brake signal input in operation105. As a result, the vehicle may be stopped by the normal operation of the brake, so that all process may end.

A turning-off signal is output to the battery relay (109).

At operation107, upon determining that the acceleration of the vehicle is not less than 0, it means that the vehicle is not decelerating although the brake signal is input in operation105. Accordingly, the drive controller160may output the turning-off signal for cutting off power of the main battery190to the battery controller200.

Whether the acceleration of the vehicle is less than 0 is confirmed (111).

The drive controller160confirms whether the acceleration of the vehicle is less than 0. At operation109, the drive controller160may be configured to determine that the power supplied from the main battery190to the motor180has cut off based on the outputting of the turning-off signal to the battery controller200, and confirm whether the vehicle is decelerating. When the drive controller160confirms that the vehicle is decelerating, the instant process ends.

A signal for an emergency state is output (113).

As a result of confirming through operation111, upon determining that the vehicle does not decelerate, the drive controller160outputs the signal for the emergency state (or an emergency signal). At the instant time, the drive controller160outputs the emergency signal to the display240.

The emergency state is notified to the user (115).

Upon receiving the emergency signal from the drive controller160, the display240displays and informs the user that an emergency has occurred. Accordingly, the user may be induced to press the emergency button110.

A signal of the emergency button110is input (117).

After the emergency button110is pressed by the user, the signal of the emergency button110is input. In other words, to urgently stop the vehicle, the user presses the emergency button110disposed adjacent to a driver seat side, so that the signal of the emergency button110is input to the drive controller160.

An operation of the inverter140is stopped (119).

In response to the emergency button110being pressed through operation117, the operation of the inverter140mechanically or electrically connected to the emergency button110is stopped, and thus the power supplied to the main controller130may be cut off. Accordingly, the inverter140is forcibly stopped and the power supplied to the motor180is cut off, so that the motor180prevents wheels of the vehicle from rotating, resulting in generating a brake effect. In other words, because the power supplied to the motor180is forcibly cut off, the motor180hinders the rotation of the wheels even when the wheels rotates, so that the brake effect may be generated by acting as a speed reducer provided by the rotation of the wheels.

Accordingly, even if all processes such as turning off the ignition thereof through the start button120, disabling the brake operation, and cutting off the power supply of the main battery190, while driving due to a software error, do not operate, the driving of the vehicle may be stopped.

Referring toFIG.5, a method for controlling a vehicle according to an exemplary embodiment of the present disclosure is described in more detail.

The power supply state has been maintained (201).

When the vehicle is on running, power supplied to the electronic controller170through the drive controller160is maintained. In other words, power supplied from the main battery190is normally supplied to the main controller130, the drive controller160, and the electronic controller170.

The turning-off signal is input (203).

Upon confirming that an abnormal state of the vehicle has occurred while driving, the user presses the start button120to turn off the ignition thereof even while driving, resulting in inputting the turning-off signal to the electronic controller170.

Whether the speed of the vehicle is greater than or equal to the predetermined value A is requested (205).

The electronic controller170requests the drive controller160whether the speed of the vehicle is greater than or equal to the predetermined value A (e.g., 5 km/h). The electronic controller170requests information regarding the speed of the vehicle to the drive controller160to confirm the speed of the vehicle.

A response to the speed of the vehicle is returned (207).

The response to operation205is transmitted from the drive controller160to the electronic controller170. The response may be yes or no as a response to whether the speed of the vehicle is greater than or equal to the predetermined value A.

Whether the brake signal has been input is confirmed (209).

In response to the speed of the vehicle exceeding the predetermined value, the electronic controller170confirms whether the brake signal has been input through the brake controller150. The electronic controller170may confirm whether the brake signal, which is a signal for operating the brake has been input by the pressing of the brake pedal due to the intention of the user, is input from the brake controller150.

Whether the acceleration of the vehicle is less than 0 is confirmed (211).

The electronic controller170confirms whether the acceleration of the vehicle is less than 0 through the drive controller160. In other words, the electronic controller170may transmit a request to the drive controller160to check whether the vehicle is decelerating.

The turning-off signal is requested to the battery relay (213).

Upon request from the electronic controller170in operation211, the drive controller160is configured to determine, upon confirming that the acceleration thereof is not less than 0, that the vehicle is not decelerating even by the brake signal input in operation209. As a result, the drive controller160may output the turning-off signal for cutting off power of the main battery190to the battery controller200.

The response to the battery relay off signal request is input (215).

The drive controller160receives the response from the battery controller200regarding the fact that the power supplied from the main battery190to the motor180is stopped. Herein, the drive controller160may receive the response from the battery controller200indicating that the power is cut off or may receive the response that the power is not cut off.

The acceleration of the vehicle is monitored (217).

The drive controller160monitors whether the vehicle is accelerating. The drive controller160monitors whether the vehicle is accelerating without decelerating despite the response in operation215.

Herein, the instant process may end upon determining that the vehicle is decelerating.

The user is guided to press the emergency button110(219).

As a result of monitoring in operation217, upon confirming that the vehicle is not decelerating, the drive controller160outputs a signal to the constant power controller230so that a guide signal is displayed to induce the user to press the emergency button110. At the instant time, the constant power controller230may control the display240to display a guide for inducing the user to press the emergency button110.

The signal of the emergency button110is input (221).

In response to the emergency button110being pressed by the user, the signal of the emergency button110is input. To urgently stop the vehicle, the user presses the emergency button110disposed adjacent to the driver seat side so that the signal of the emergency button110is input to the drive controller160.

An operation stop signal is output (223).

In response to the signal of the emergency button110being input, the constant power controller230outputs the operation stop signal to the inverter140so that the operation of the inverter140is stopped.

The operation of the inverter140is stopped (225).

In response to the operation stop signal being input, the inverter140stops operating, and accordingly, the power supplied to the main controller130may be cut off. As a result, the inverter140is forcibly stopped and the power supplied to the motor180is cut off, so that rotation of the wheels is hindered by the motor180, resulting in a braking effect.

As is apparent from the above, various embodiments of the present disclosure may provide, when an error occurs in the software of the vehicle while the user is driving the vehicle, a vehicle configured for urgently stopping by use of the emergency button, preventing an accident while driving.

Furthermore, according to various embodiments of the present disclosure, the inverter is forcibly stopped through the emergency button, resulting in operating as a speed reducer due to resistance of the motor. Therefore, a brake effect occurs and accordingly the vehicle may stably be stopped.

On the other hand, the above-described embodiments may be implemented in the form of a recording medium storing instructions executable by a computer. The instructions may be stored in the form of program code. When the instructions are executed by a processor, a program module is generated by the instructions so that the operations of the disclosed exemplary embodiments of the present disclosure may be conducted. The recording medium may be implemented as a computer-readable recording medium.