CN107910852B - Automobile motor torque security turning off system and its method - Google Patents
Automobile motor torque security turning off system and its method Download PDFInfo
- Publication number
- CN107910852B CN107910852B CN201711089801.XA CN201711089801A CN107910852B CN 107910852 B CN107910852 B CN 107910852B CN 201711089801 A CN201711089801 A CN 201711089801A CN 107910852 B CN107910852 B CN 107910852B
- Authority
- CN
- China
- Prior art keywords
- chip microcontroller
- shutdown
- output end
- automobile motor
- igbt
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02H—EMERGENCY PROTECTIVE CIRCUIT ARRANGEMENTS
- H02H7/00—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions
- H02H7/08—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions for dynamo-electric motors
- H02H7/0833—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions for dynamo-electric motors for electric motors with control arrangements
- H02H7/0844—Fail safe control, e.g. by comparing control signal and controlled current, isolating motor on commutation error
Landscapes
- Electric Propulsion And Braking For Vehicles (AREA)
- Control Of Electric Motors In General (AREA)
Abstract
The present invention relates to a kind of automobile motor torque security turning off system and its methods, including two shutdown paths and single-chip microcontroller abnormality detection part, single-chip microcontroller abnormality detection part is for detecting single-chip microcontroller abnormality, and corresponding safe condition control information is exported according to testing result, first shutdown path, the second shutdown path are for executing automobile motor torque shutdown control, and first turns off path and the second shutdown path when single-chip microcontroller works normally, it is controlled by single-chip microcontroller, in single-chip microcontroller exception, by single-chip microcontroller abnormity detection portion sub-control system.Using the automobile motor torque security turning off system and its method, since it uses single-chip microcontroller abnormality detection parts, safe condition control information is impacted to cutoff when single-chip microcontroller is worked normally by logic gates, in single-chip microcontroller exception there is highest shutdown to control priority, it can be realized safe and reliable automobile motor torque shutdown, principle is simple, excellent.
Description
Technical field
The present invention relates to electric car field more particularly to the automobile motor direct torque fields of electric car, specifically
Refer to a kind of automobile motor torque security turning off system and its method.
Background technique
As the rapid, high volume of new-energy automobile is universal, the following safety problem is also more and more prominent, in automobile control
In system, torque output may cause the unexpected acceleration of vehicle or unexpected emergency brake extremely, it is possible to result in an automobile accident
Occur, there is very big security risk.For pure electric automobile, automobile motor is unique torque output device, automobile-used
Electric machine controller is the soul of automobile motor operation, therefore whether the normal work of vehicle motor controller also can concerning torque
Normal output.
The scheme of vehicle motor controller is mainly made of controller and driver at present, and wherein controller passes through reception
The torque instruction of entire car controller controls driver according to instruction in this, as foundation, then driver by signal into
Row amplification, and automobile motor is output to drive automobile motor to run, realize automobile motor control.
Current vehicle motor controller largely can only all realize the function of automobile motor control, but not have automobile-used
The surveillance coverage of motor output actual torque.Current vehicle motor controller is detecting that it is former that overtemperature and overcurrent occurs in automobile motor
When barrier, drop power output will do it, i.e. reduction torque output, but sometimes if IGBT itself breaks down, or
Driving circuit itself breaks down or when control algolithm operation troubles, and torque can not reduce, and drop power output is only
Device can be protected in limited range, and cannot ensure the safety of the person, it is therefore desirable to which a kind of method of safe shutdown can make
Vehicle operational safety.
When the torque of automobile motor reality output and request are not inconsistent, such as, unexpected output torque is excessive, non-pre-
Phase output torque is reversed, and output torque when stationary vehicle is likely to will lead to lose control of one's vehicle, thus the thing that causes damages
Therefore part when detecting that the torque of automobile motor reality output and request are not inconsistent, is needed to export automobile motor and be closed
It is disconnected.
There are two ways to automobile motor is turned off: one is automobile motor three-phase and high pressure are disconnected, one is
Automobile motor three-phase is subjected to short circuit.
For both modes, there are following three kinds of solutions in the prior art:
(1) automobile motor three-phase and high pressure are disconnected, sees Fig. 1, meeting when automobile motor high-speed cruising of this mode
Very big braking moment is generated, rapidly braking is possible to will cause harm, while can also generate very big counter electromotive force, to cause
IGBT module damage, maintenance cost are very high；
(2) automobile motor three-phase is subjected to short circuit: sees Fig. 2, this mode can generate one very big system when low speed
Dynamic torque；
(3) three-phase actively short circuit is executed when automobile motor high-speed cruising, is executed three-phase when low speed and is disconnected.
Comprehensive analysis, the third mode are optimal shutdown modes, and still, the third mode increases the complexity of system
Degree, the program turned off are wanted accurately measure the revolving speed of automobile motor, if measurement inaccuracy, causes in high speed
When perform the first scheme, it would be possible that causing the damage of device, there is certain risk.Although and second scheme may
A braking moment is caused, but due to being run in vehicle low speed when processing the exception of automobile motor torque
When, and the duration is very short, is comparatively safe for vehicle.
Summary of the invention
The shortcomings that overcoming the above-mentioned prior art the object of the present invention is to provide one kind is able to achieve safe shutdown, Bu Huiyou
Cause the automobile motor torque security turning off system and its method of safe shutdown dysfunction extremely in single-chip microcontroller.
To achieve the goals above, automobile motor torque security turning off system of the invention and its method have following structure
At:
The automobile motor torque security turning off system, is mainly characterized by, and has single-chip microcontroller abnormality detection part and shutdown
Part, the single-chip microcontroller for controlling the automobile motor is sequentially connected single-chip microcontroller abnormality detection part, cutoff and automobile motor, described
Single-chip microcontroller be also directly connected to cutoff, and
The single-chip microcontroller abnormality detection part is for detecting the abnormality of single-chip microcontroller and according to testing result to described
Cutoff export corresponding safe condition and control signal, control the cutoff and carried out under single-chip microcontroller abnormality
The shutdown of automobile motor torque operates；
The cutoff is used to receive control information that single-chip microcontroller provides and single-chip microcontroller abnormality detection part exports
Safe condition controls information, executes the shutdown control of corresponding automobile motor torque.
Preferably, single-chip microcontroller abnormity detection portion point includes safety power supply chip, and single-chip microcontroller abnormality detection part passes through peace
Full power supply chip is connected with single-chip microcontroller, and safety power supply chip checks itself whether receive what single-chip microcontroller issued under abnormality
The abnormality alarm that SMUFSP signal and/or house dog software provide under single-chip microcontroller abnormality, and according to testing result to pass
Disconnected part exports corresponding safe condition control information, also connects between the output end and cutoff of the safety power supply chip
It is connected to logic gates, the logic gate topologies meet when the single-chip microcontroller abnormity detection portion sorting measures single-chip microcontroller
Abnormality when the safe condition control information that exports have the control of highest priority to cutoff.
More preferably, the cutoff includes two shutdown paths, the respectively first shutdown path and the second shutdown road
Diameter, and
The input terminal in the first shutdown path is separately connected the output of the output end and safety power supply chip of the single-chip microcontroller
End, first shutdown path output end connection automobile motor three-phase, by control automobile motor three-phase short-circuit conditions come
Realize that the shutdown to automobile motor torque controls；
The input terminal in the second shutdown path is separately connected the output end and safety power supply chip of the single-chip microcontroller
Output end, the IGBT of the output end connection in the second shutdown path automobile motor, by IGBT Shang Sanqiao and lower three
The unlatching shutdown of bridge controls to realize that the shutdown to automobile motor torque controls.
More preferably, the first shutdown path includes two contactors, and two contactors are connected to the three of automobile motor
Phase is respectively arranged between the UV two-phase of automobile motor between VW two-phase, and the first shutdown path is also driven by flash
Device is connected to the output end of the single-chip microcontroller and the output end of safety power supply chip via logic gates, by the monolithic
Machine and safety power supply chip control the output of the high side drivers, thus the contactor opening and closing feelings that control is described
Condition realizes the control to the short-circuit conditions of automobile motor three-phase, to realize that the shutdown to automobile motor torque controls.
More preferably, the logic gates in the first shutdown path includes first and door, and the flash drives electricity
The input terminal on road is connected with first with the output end of door, and first connect the defeated of the safety power supply chip with the input terminal of door
The output end of outlet and single-chip microcontroller, and the contactor is normally closed contactor.
More preferably, the flash driving circuit also passes through normal open switch and is connected to the electricity of the flash drive circuitry
Source part, and the normal open switch is also connected with the output end of the safety power supply chip, by safety power supply chip
Output controls the on off operating mode of the normal open switch.
More preferably, the second shutdown path is connected to by IGBT flash driving circuit and the low side driving circuit of IGBT
The unlatching off state of the IGBT of automobile motor, unlatching off state and lower three bridge to upper three bridge of IGBT control, and
The input terminal of the low side driving circuit of input terminal and IGBT of IGBT flash driving circuit pass through logic gates be connected to it is described
Single-chip microcontroller output end and safety power supply chip output end, by the single-chip microcontroller and safety power supply chip to described
The output of output side low with the IGBT driving circuit of IGBT flash driving circuit is controlled, to realize the Shang Sanqiao to IGBT
The unlatching off state for opening off state and lower three bridge control.
More preferably, the logic gates that IGBT flash driving circuit side driving circuit low with IGBT connects includes the
Two with door, third and door, NOT gate and/or door, in which:
Second connect the output end of the vehicle motor controller by single-chip microcontroller control output, and connection with the input terminal of door
The output end of third and door；Second input terminal for connecting IGBT flash driving circuit with the output end of door；
The input terminal of third and door connects the output end of the safety power supply chip and by single-chip microcontroller control output
The output end of the bottom edge IGBT ASC；The connection of its output end second and the input terminal of door and the input terminal of NOT gate；
The input terminal of the output end of the input terminal connection of the NOT gate third and door, output end connection or door；
Or the input terminal connection of door is by the output end of vehicle motor controller of single-chip microcontroller control output and described non-
The output end of door；The input terminal of its output end connection low side driving circuit of IGBT.
It is main based on the method that above-mentioned automobile motor torque security turning off system realizes the shutdown of automobile motor torque security
Feature is, the method the following steps are included:
The single-chip microcontroller abnormity detection portion sorting surveys the abnormality of current monolithic machine, and according to testing result to described
Cutoff export corresponding safe condition and control information, the control that the single-chip microcontroller is also exported to the cutoff
Information, the control information that the cutoff is exported according to the safe condition control information and the single-chip microcontroller,
Carry out the shutdown control of corresponding automobile motor torque.
Preferably, the single-chip microcontroller abnormity detection portion sorting surveys the abnormality of current monolithic machine, and tied according to detection
Fruit is to the cutoff output safety state control information are as follows:
The safety power supply chip detects itself whether receive the SMUFSP signal and/or abnormality alarm, if
It receives, then the safety power supply chip corresponds to the safety that single-chip microcontroller is in abnormality to the cutoff output
State control information, otherwise the safety power supply chip is in non-exception corresponding to single-chip microcontroller to the cutoff output
The safe condition of state controls information.
More preferably, when the safety power supply chip detects faults itself, the safety power supply chip is to described
Cutoff output corresponds to the safe condition control information that single-chip microcontroller is in abnormality.
More preferably, the safe condition control information for being in abnormality or safety power supply failure of chip corresponding to single-chip microcontroller is
Low level, the safe condition control information that non-abnormality and safety power supply chip normal work are in corresponding to single-chip microcontroller is height
Level.
More preferably, the first shutdown path carries out corresponding automobile motor torque according to received control information
Shutdown control are as follows:
When single-chip microcontroller is in non-abnormality and safety power supply chip normal work, the safe condition control information is
High level, the control information that the described first signal exported with door is exported by single-chip microcontroller directly control, the flash driving
The opening and closing situation for the control information butt joint tentaculum that circuit is exported according to the single-chip microcontroller is controlled；
When single-chip microcontroller is in abnormality or safety power supply failure of chip, the safe condition control information is low electricity
Flat, the first signal exported with door is low level, and the flash driving circuit is according to the low level that should be exported with door to described
The opening and closing situation of contactor controlled.
More preferably, when safe condition control information is low level, the safety of the safety power supply chip output
The state control information control normal open switch is opened, breaking between the power unit and flash driving circuit, described
Contactor closure, the automobile motor three-phase shortcircuit.
More preferably, the second shutdown path carries out corresponding automobile motor torque according to received control information
Shutdown control are as follows:
When single-chip microcontroller is in non-abnormality and safety power supply chip normal work, the safe condition control information is
High level, the described second signal exported with the output of door and/or the output of door by the vehicle motor controller and
The signal of the low side ASC output of IGBT determines, is exported by the signal and the low side ASC of IGBT of the vehicle motor controller output
Signal controls the output of the output side driving circuit low with the IGBT of IGBT flash driving circuit, to control automobile motor
IGBT Shang Sanqiao and lower three bridge unlatching off state, with carry out automobile motor torque shutdown control；
When single-chip microcontroller is in abnormality or safety power supply failure of chip, the safe condition control information is low electricity
Flat, the output of second and the door is determined by the output of the vehicle motor controller, by the vehicle motor controller
The output of the output control IGBT flash driving circuit, to control the unlatching shutdown of upper three bridge of the IGBT of automobile motor
State, described or door output is determined by the output of vehicle motor controller, by the output of the vehicle motor controller
The output of the circuit of the low side driving of IGBT is controlled, so that the unlatching off state of lower three bridge of the IGBT of automobile motor is controlled, with
Carry out the shutdown control of automobile motor torque.
Using automobile motor torque security turning off system of the invention and its method, since it uses single-chip microcontrollers to examine extremely
Part is surveyed, there is highest priority to the control of cutoff, two kinds of paths in cutoff are by the judgment mechanism, monolithic
The control information of machine output and the control information co- controlling of vehicle motor controller output, safe and convenient can be realized peace
Complete reliable automobile motor torque shutdown, principle is simple, excellent.
Detailed description of the invention
Fig. 1 is the automobile motor revolving speed in the prior art for disconnecting automobile motor three-phase and high pressure and current diagram.
Fig. 2 is the automobile motor revolving speed and current diagram in the prior art that automobile motor three-phase is carried out to short circuit.
Fig. 3 is the attachment structure schematic diagram of automobile motor torque security turning off system of the invention.
Specific embodiment
It is further to carry out combined with specific embodiments below in order to more clearly describe technology contents of the invention
Description.
The automobile motor torque security turning off system has single-chip microcontroller abnormality detection part and cutoff, and it is automobile-used to control this
The single-chip microcontroller of motor is sequentially connected single-chip microcontroller abnormality detection part, cutoff and automobile motor, the single-chip microcontroller and shutdown
Part is also directly connected to, and
The single-chip microcontroller abnormality detection part is for detecting the abnormality of single-chip microcontroller and according to testing result to described
Cutoff export corresponding safe condition and control signal, control the cutoff and carried out under single-chip microcontroller abnormality
The shutdown of automobile motor torque operates；
The cutoff is used to receive control information that single-chip microcontroller provides and single-chip microcontroller abnormality detection part exports
Safe condition controls information, executes the shutdown control of corresponding automobile motor torque.
In a kind of preferred embodiment, single-chip microcontroller abnormity detection portion point includes safety power supply chip, and single-chip microcontroller is abnormal
Detection part is connected by safety power supply chip with single-chip microcontroller, and safety power supply chip checks itself whether receive single-chip microcontroller different
The abnormality alarm that the SMUFSP signal and/or house dog software issued under normal state provides under single-chip microcontroller abnormality, and root
Corresponding safe condition, which is exported, to cutoff according to testing result controls information, the output end of the safety power supply chip and pass
Logic gates is also connected between disconnected part, the logic gate topologies, which meet, works as the single-chip microcontroller abnormity detection portion
Sorting measures the control that the safe condition control information exported when the abnormality of single-chip microcontroller has highest priority to cutoff
Power.
In a kind of more preferably embodiment, the cutoff includes two shutdown paths, the respectively first shutdown road
Diameter and the second shutdown path, and
The input terminal in the first shutdown path is separately connected the output of the output end and safety power supply chip of the single-chip microcontroller
End, first shutdown path output end connection automobile motor three-phase, by control automobile motor three-phase short-circuit conditions come
Realize that the shutdown to automobile motor torque controls；
The input terminal in the second shutdown path is separately connected the output end and safety power supply chip of the single-chip microcontroller
Output end, the IGBT of the output end connection in the second shutdown path automobile motor, by IGBT Shang Sanqiao and lower three
The unlatching shutdown of bridge controls to realize that the shutdown to automobile motor torque controls.
In a kind of more preferably embodiment, the first shutdown path includes two contactors, two contactor connections
It to the three-phase of automobile motor, is respectively arranged between the UV two-phase of automobile motor between VW two-phase, the first shutdown road
Diameter is also connected to the output of the output end and safety power supply chip of the single-chip microcontroller by high side drivers via logic gates
End, controls the output of the high side drivers by the single-chip microcontroller and safety power supply chip, connects so that control is described
Tentaculum opens and closes situation, realizes the control to the short-circuit conditions of automobile motor three-phase, to realize to automobile motor torque
Shutdown control.
In a kind of more preferably embodiment, the logic gates in the first shutdown path includes first and door, institute
The input terminal for the flash driving circuit stated is connected with first with the output end of door, and first connect the peace with the input terminal of door
The full output end of power supply chip and the output end of single-chip microcontroller, and the contactor is normally closed contactor, by normally closed contactor
Guarantee that automobile motor is in safety shut-off state when whole system loses electricity.
In a kind of more preferably embodiment, the flash driving circuit also passes through normal open switch and is connected to be driven to the flash
The power unit of dynamic circuit power supply, and the normal open switch is also connected with the output end of the safety power supply chip, by
The output of safety power supply chip controls the on off operating mode of the normal open switch.
In a kind of more preferably embodiment, the second shutdown path passes through IGBT flash driving circuit and the low side IGBT
Driving circuit is connected to the IGBT of automobile motor, turns off shape to the unlatching for opening off state and lower three bridge of upper three bridge of IGBT
State is controlled, and the input terminal of the input terminal of IGBT flash driving circuit and the low side driving circuit of IGBT passes through logic gate electricity
Road is connected to the output end of the single-chip microcontroller and the output end of safety power supply chip, by the single-chip microcontroller and safety power supply core
Piece controls the output of the IGBT flash driving circuit and the output of the low side driving circuit of IGBT, thus realization pair
The control of the unlatching off state for opening off state and lower three bridge of upper three bridge of IGBT.
In a kind of more preferably embodiment, what IGBT flash driving circuit side driving circuit low with IGBT connected is patrolled
Collecting gate circuit includes second and door, third and door, NOT gate and/or door, in which:
Second connect the output end of the vehicle motor controller by single-chip microcontroller control output, and connection with the input terminal of door
The output end of third and door；Second input terminal for connecting IGBT flash driving circuit with the output end of door；
The input terminal of third and door connects the output end of the safety power supply chip and by single-chip microcontroller control output
The output end of the bottom edge IGBT ASC；The connection of its output end second and the input terminal of door and the input terminal of NOT gate；
The input terminal of the output end of the input terminal connection of the NOT gate third and door, output end connection or door；
Or the input terminal connection of door is by the output end of vehicle motor controller of single-chip microcontroller control output and described non-
The output end of door；The input terminal of its output end connection low side driving circuit of IGBT.
It is main based on the method that above-mentioned automobile motor torque security turning off system realizes the shutdown of automobile motor torque security
Feature is, the method the following steps are included:
The single-chip microcontroller abnormity detection portion sorting surveys the abnormality of current monolithic machine, and according to testing result to described
Cutoff export corresponding safe condition and control information, the control that the single-chip microcontroller is also exported to the cutoff
Information, the control information that the cutoff is exported according to the safe condition control information and the single-chip microcontroller,
Carry out the shutdown control of corresponding automobile motor torque.
In a kind of preferred embodiment, the single-chip microcontroller abnormity detection portion sorting surveys the abnormal shape of current monolithic machine
State, and according to testing result to the cutoff output safety state control information are as follows:
The safety power supply chip detects itself whether receive the SMUFSP signal and/or abnormality alarm, if
It receives, then the safety power supply chip corresponds to the safety that single-chip microcontroller is in abnormality to the cutoff output
State control information, otherwise the safety power supply chip is in non-exception corresponding to single-chip microcontroller to the cutoff output
The safe condition of state controls information.
In a kind of more preferably embodiment, when the safety power supply chip detects faults itself, the safety electricity
Source chip corresponds to the safe condition control information that single-chip microcontroller is in abnormality to the cutoff output.
In a kind of more preferably embodiment, the safety of abnormality or safety power supply failure of chip is in corresponding to single-chip microcontroller
State control information is low level, and the safe shape of non-abnormality and safety power supply chip normal work is in corresponding to single-chip microcontroller
It is high level that state, which controls information,.
In a kind of more preferably embodiment, the first shutdown path carries out corresponding according to received control information
Automobile motor torque shutdown control are as follows:
When single-chip microcontroller is in non-abnormality and safety power supply chip normal work, the safe condition control information is
High level, first is determined that the flash driving circuit is according to the control information that the output of door is exported by single-chip microcontroller
The opening and closing situation of control information butt joint tentaculum of single-chip microcontroller output controlled；
When single-chip microcontroller is in abnormality or safety power supply failure of chip, first shutdown path and Article 2 turn off path
The control information of the single-chip microcontroller received is unreliable, at this point, the safe condition control that the safety power supply chip exports
Information processed is low level, and the first signal exported with door is low level, and the flash driving circuit is directly by the safety
The low level control of power supply chip output, controls the opening and closing situation of the contactor, single-chip microcontroller output
Control signal does not work to the cutoff, directly controls institute by flash driving circuit by safe condition control signal
The first shutdown path stated and Article 2 shutdown path carry out shutdown operation.
In a kind of more preferably embodiment, when the safe condition control information is low level, the safety power supply
The safe condition control information of chip output is low level, and the normal open switch is opened, and the power unit and flash drive
Open circuit between dynamic circuit, the contactor closure, the automobile motor three-phase shortcircuit.
In a particular embodiment, the control information of vehicle motor controller output and the single-chip microcontroller export
Control information is all satisfied the operation that the active short circuit of automobile motor three-phase is executed when unintended movements occurs in vehicle, to realize
There is the shutdown operation of automobile motor torque when unintended movements in vehicle.
In a kind of more preferably embodiment, the second shutdown path carries out corresponding according to received control information
Automobile motor torque shutdown control are as follows:
When single-chip microcontroller is in non-abnormality and safety power supply chip normal work, the safe condition control information is
High level, the described second signal exported with the output of door and/or the output of door by the vehicle motor controller and
The signal of the low side ASC output of IGBT determines, is exported by the signal and the low side ASC of IGBT of the vehicle motor controller output
Signal controls the output of the output side driving circuit low with the IGBT of IGBT flash driving circuit, to control automobile motor
IGBT Shang Sanqiao and lower three bridge unlatching off state, with carry out automobile motor torque shutdown control；
When single-chip microcontroller is in abnormality or safety power supply failure of chip, the safe condition control information is low electricity
Flat, the output of second and the door is determined by the output of the vehicle motor controller, by the vehicle motor controller
The output of the output control IGBT flash driving circuit, to control the unlatching shutdown of upper three bridge of the IGBT of automobile motor
State, described or door output is determined by the output of vehicle motor controller, by the output of the vehicle motor controller
The output of the circuit of the low side driving of IGBT is controlled, so that the unlatching off state of lower three bridge of the IGBT of automobile motor is controlled, with
Carry out the shutdown control of automobile motor torque.
In a particular embodiment, in logic gates with door, NOT gate or Men Douke by corresponding logic can be played the role of
Circuit substitutes, and such as can mutually be substituted with the analog circuit of function or door can be by playing mutually or the simulation of function by playing with door
Circuit substitutes, and NOT gate can substitute by playing the analog circuit of negated function.
It can be referring to Fig. 3, in a particular embodiment, the single-chip microcontroller abnormality detection part in the present invention can be considered third
Turn Off Path, the first Turn Off Path, which refers to, carries out shutdown control using two contactors between automobile motor three-phase, thus
Realize the shutdown of automobile motor torque；Second Turn Off Path, which refers to, utilizes IGBT flash driving circuit and the low side driving circuit of IGBT
The unlatching shutdown of Shang Sanqiao and lower three bridge to IGBT control, will be under IGBT when carrying out the shutdown of automobile motor torque
The control of three bridges should be opening state, should be off state to the upper three bridge control of IGBT；And safety power supply chip is to cutoff
Involved path is regarded as third Turn Off Path, is presented as in Fig. 3 from the output end of safety power supply chip to first
Two dashed paths of Turn Off Path and the second Turn Off Path.
Wherein the first Turn Off Path has used two independent contactors to realize that three-phase shortcircuit, one of contactor connect
Between automobile motor UV two-phase, a contactor is connect between the VW two-phase of automobile motor, and two contactors pass through two respectively
Flash driving circuit drives it, and two flash driving circuits pass through two digital output signals respectively and controlled.Two
A contactor is normally closed contactor, i.e., contactor is in closed state, and closed state, that is, automobile motor when power-off
Three-phase active short-circuit condition, to ensure that when the failure of power down occurs in preamble control device, still can make system into
Enter safe condition.
Second Turn Off Path has used IGBT drive circuit and IGBT module to realize, single-chip microcontroller is to the automobile motor
The pwm signal of controller output is controlled, when keeping the low side driving ASC signal of IGBT effective (low level is effective), IGBT
All control is in an open state lower three bridges, and all control is off state to upper three bridge, and the shutdown of automobile motor torque is realized with this.
Block diagram in Fig. 3 can be finger device part in practical applications and be also possible to analog circuit to realize accordingly only as indicating to use
Operation circuit.
The safety power supply chip is used to carry out single-chip microcontroller power supply supply, and for the abnormality of single-chip microcontroller into
Row monitoring, the abnormal state information that safety power supply chip obtains include:
(1) monitoring of single-chip microcontroller SMUFSP signal, the operation that single-chip microcontroller has a series of security mechanism to monitor itself are
It is no normal, when the security mechanism of single-chip microcontroller itself monitors oneself error of performance, one is exported by SMUFSP signal
Error signal gives safety power supply chip, and safety power supply chip detects mistake, then controls safe condition control output signal output
Low level；
(2) function house dog monitors that single-chip microcontroller and safety power supply chip detect monolithic by way of function house dog
Whether the program flow operation of machine is normal, and function house dog is realized by way of question-response, only answer and problem phase
It is corresponding, and answer time it is also correct when be just considered correct, if there is mistake, then safety power supply chip control
Safe condition control output signal processed exports low level.
Safe condition control information, which is exported to the signal in the first shutdown path and the second shutdown path, is divided into SS1 and SS2
Two-way, the two signals correspond respectively to the shutdown control in the second shutdown path and the first shutdown path, that is, when the safety of output
When state control information corresponds to single-chip microcontroller abnormality or safety power supply failure of chip, the first shutdown path and second is closed
Breaking diameter simultaneously operation, carries out shutdown operation.In addition, safe condition control information also passes through SS2 and controls the first shutdown path
In flash driving circuit power unit, that is, when shutdown, the power unit of flash driving circuit can drive with flash
Dynamic circuit disconnects, and contactor power down, automobile motor enters three-phase shortcircuit state.
In a particular embodiment, when single-chip microcontroller itself and safety power supply chip itself work normally, detects vehicle electric
When machine operation exception needs to be implemented automobile motor torque shutdown, single-chip microcontroller needs to export corresponding control signal, control the
One shutdown path and the second shutdown path simultaneously operation.Two paths are mutually redundant while being turned off, into safe condition.
When single-chip microcontroller itself is run it is insecure when (i.e. single-chip microcontroller abnormality itself or safety power supply failure of chip),
The single-chip microcontroller abnormality detection part controls information by safe condition (to be had by the setting of logic circuit and low and high level
Have highest priority) it is controlled to control the shutdown of the automobile motor torque in the first shutdown path and the second shutdown path, thus into
Enter safe condition.
Using automobile motor torque security turning off system of the invention and its method, since it uses single-chip microcontrollers to examine extremely
Part is surveyed, there is highest priority to the control of cutoff, two kinds of paths in cutoff are examined extremely by the single-chip microcontroller
The control information for surveying the control information of part output, the control information of single-chip microcontroller output and vehicle motor controller output is common
Control, safe and convenient can be realized safe and reliable automobile motor torque shutdown, and principle is simple, excellent.
In this description, the present invention is described with reference to its specific embodiment.But it is clear that can still make
Various modifications and alterations are without departing from the spirit and scope of the invention.Therefore, the description and the appended drawings should be considered as illustrative
And not restrictive.
Claims (11)
1. a kind of automobile motor torque security turning off system, which is characterized in that have single-chip microcontroller abnormality detection part and shutdown portion
Point, the single-chip microcontroller for controlling the automobile motor is sequentially connected single-chip microcontroller abnormality detection part, cutoff and automobile motor, described
Single-chip microcontroller is also directly connected to cutoff, and
The single-chip microcontroller abnormality detection part is for detecting the abnormality of single-chip microcontroller and according to testing result to the pass
Disconnected part exports corresponding safe condition control information, control the cutoff carried out under single-chip microcontroller abnormality it is automobile-used
The shutdown of motor torque operates；
The cutoff is used to receive the safety of the control information that single-chip microcontroller provides and the output of single-chip microcontroller abnormality detection part
State control information executes the shutdown control of corresponding automobile motor torque；
Single-chip microcontroller abnormity detection portion point includes safety power supply chip, and single-chip microcontroller abnormality detection part by safety power supply chip with
Single-chip microcontroller is connected, and safety power supply chip checks itself whether receive the SMUFSP signal that single-chip microcontroller issues under abnormality
And/or the abnormality alarm that house dog software provides under single-chip microcontroller abnormality, and exported according to testing result to cutoff
Corresponding safe condition controls information, is also connected with logic gate between the output end and cutoff of the safety power supply chip
Circuit, the logic gate topologies meet when the single-chip microcontroller abnormity detection portion sorting measures the abnormality of single-chip microcontroller
When the safe condition control information that exports have the control of highest priority to cutoff；
The cutoff includes two shutdown paths, and the respectively first shutdown path and second turn off path, and
The input terminal in the first shutdown path is separately connected the output end of the single-chip microcontroller and the output end of safety power supply chip, the
The three-phase of the output end connection automobile motor in one shutdown path is realized pair by controlling the short-circuit conditions of three-phase of automobile motor
The shutdown of automobile motor torque controls；
The input terminal in described second shutdown path be separately connected the single-chip microcontroller output end and safety power supply chip it is defeated
Outlet, the IGBT of the output end connection in the second shutdown path automobile motor, by IGBT Shang Sanqiao and lower three bridge
The control of shutdown is opened to realize that the shutdown to automobile motor torque controls；
The first shutdown path includes two contactors, and two contactors are connected to the three-phase of automobile motor, are respectively set
Between the UV two-phase of automobile motor between VW two-phase, the first shutdown path is also by high side drivers via logic gate
Circuit connection is to the output end of the single-chip microcontroller and the output end of safety power supply chip, by the single-chip microcontroller and safety power supply
Chip controls the output of the high side drivers, so that the contactor opening and closing situation that control is described, is realized to vehicle
With the control of the short-circuit conditions of motor three-phase, to realize that the shutdown to automobile motor torque controls；
Logic gates in described first shutdown path includes first and door, the input terminal of the high side drivers and the
One is connected with the output end of door, and first connect the output end and single-chip microcontroller of the safety power supply chip with the input terminal of door
Output end, and the contactor be normally closed contactor；
It is described when the safe condition control information of output corresponds to single-chip microcontroller abnormality or safety power supply failure of chip
First shutdown path and second shutdown path simultaneously operation, carry out shutdown operation.
2. automobile motor torque security turning off system according to claim 1, which is characterized in that the high side drivers
Also by normal open switch be connected to the high side drivers power power unit, and the normal open switch also with the peace
The output end of full power supply chip is connected, and the on off operating mode of the normal open switch is controlled by the output of safety power supply chip.
3. automobile motor torque security turning off system according to claim 1, which is characterized in that the second shutdown road
Diameter is connected to the IGBT of automobile motor by IGBT flash driving circuit and the low side driving circuit of IGBT, to upper three bridge of IGBT
The unlatching off state for opening off state and lower three bridge is controlled, and the input terminal of IGBT flash driving circuit and IGBT are low
The input terminal of side driving circuit passes through the output end and safety power supply chip that logic gates is connected to the single-chip microcontroller
Output end drives the output of the IGBT flash driving circuit and the low side IGBT by the single-chip microcontroller and safety power supply chip
The output of dynamic circuit is controlled, and turns off shape to the unlatching for opening off state and lower three bridge of upper three bridge of IGBT to realize
The control of state.
4. automobile motor torque security turning off system according to claim 3, which is characterized in that the IGBT flash drives
Dynamic circuit and the logic gates of the low side driving circuit connection of IGBT include second and door, third and door, NOT gate and/or door,
In:
Second connect the output end of the vehicle motor controller by single-chip microcontroller control output, and connection third with the input terminal of door
With the output end of door；Second input terminal for connecting IGBT flash driving circuit with the output end of door；
The output end of the input terminal of the third and door connection safety power supply chip and the IGBT exported by single-chip microcontroller control
The output end of low side ASC；The connection of its output end second and the input terminal of door and the input terminal of NOT gate；
The input terminal of the output end of the input terminal connection of the NOT gate third and door, output end connection or door；
Or the input terminal connection of door by single-chip microcontroller control output vehicle motor controller output end and the NOT gate
Output end；The input terminal of its output end connection low side driving circuit of IGBT.
5. one kind realizes automobile motor based on automobile motor torque security turning off system described in any one of Claims 1-4
The method of torque security shutdown, which is characterized in that the method the following steps are included:
The single-chip microcontroller abnormity detection portion sorting surveys the abnormality of current monolithic machine, and according to testing result to the pass
Disconnected part exports corresponding safe condition control information, the control letter that the single-chip microcontroller is also exported to the cutoff
Breath, the control information that the cutoff is exported according to the safe condition control information and the single-chip microcontroller, into
The shutdown control of the corresponding automobile motor torque of row.
6. according to claim 5 realize the shutdown of automobile motor torque security based on automobile motor torque security turning off system
Method, which is characterized in that single-chip microcontroller abnormity detection portion point includes safety power supply chip, and single-chip microcontroller abnormality detection part passes through
Safety power supply chip is connected with single-chip microcontroller, and safety power supply chip checks that itself whether receive single-chip microcontroller issues under abnormality
SMUFSP signal and/or the abnormality alarm that is provided under single-chip microcontroller abnormality of house dog software, and according to testing result to
Cutoff exports corresponding safe condition and controls information, between the output end and cutoff of the safety power supply chip also
It is connected with logic gates, the logic gate topologies meet when the single-chip microcontroller abnormity detection portion sorting measures monolithic
The safe condition control information exported when the abnormality of machine has the control of highest priority, the monolithic to cutoff
Machine abnormity detection portion sorting surveys the abnormality of current monolithic machine, and according to testing result to the cutoff output safety
State control information are as follows:
The safety power supply chip detects itself whether receive the SMUFSP signal and/or abnormality alarm, if receiving
It arrives, then the safety power supply chip corresponds to the safe condition that single-chip microcontroller is in abnormality to the cutoff output
Information is controlled, otherwise the safety power supply chip is in non-abnormality corresponding to single-chip microcontroller to the cutoff output
Safe condition control information.
7. according to claim 6 realize the shutdown of automobile motor torque security based on automobile motor torque security turning off system
Method, which is characterized in that when the safety power supply chip detects faults itself, the safety power supply chip is to described
Cutoff output correspond to single-chip microcontroller be in abnormality safe condition control information.
8. according to claim 7 realize the shutdown of automobile motor torque security based on automobile motor torque security turning off system
Method, which is characterized in that the cutoff include two shutdown paths, respectively first shutdown path and second turns off
Path, and
The input terminal in the first shutdown path is separately connected the output end of the single-chip microcontroller and the output end of safety power supply chip, the
The three-phase of the output end connection automobile motor in one shutdown path is realized pair by controlling the short-circuit conditions of three-phase of automobile motor
The shutdown of automobile motor torque controls；
The input terminal in described second shutdown path be separately connected the single-chip microcontroller output end and safety power supply chip it is defeated
Outlet, the IGBT of the output end connection in the second shutdown path automobile motor, by IGBT Shang Sanqiao and lower three bridge
The control of shutdown is opened to realize that the shutdown to automobile motor torque controls；
The safe condition control information that abnormality or safety power supply failure of chip are in corresponding to single-chip microcontroller is low level, corresponding
Controlling information in the safe condition that single-chip microcontroller is in non-abnormality and safety power supply chip works normally is high level.
9. according to claim 8 realize the shutdown of automobile motor torque security based on automobile motor torque security turning off system
Method, which is characterized in that
The first shutdown path includes two contactors, and two contactors are connected to the three-phase of automobile motor, are respectively set
Between the UV two-phase of automobile motor between VW two-phase, the first shutdown path is also by high side drivers via logic gate
Circuit connection is to the output end of the single-chip microcontroller and the output end of safety power supply chip, by the single-chip microcontroller and safety power supply
Chip controls the output of the high side drivers, so that the contactor opening and closing situation that control is described, is realized to vehicle
With the control of the short-circuit conditions of motor three-phase, to realize that the shutdown to automobile motor torque controls；
Logic gates in described first shutdown path includes first and door, the input terminal of the high side drivers and the
One is connected with the output end of door, and first connect the output end and single-chip microcontroller of the safety power supply chip with the input terminal of door
Output end, and the contactor be normally closed contactor；
The first shutdown path is controlled according to the shutdown that received control information carries out corresponding automobile motor torque
Are as follows:
When single-chip microcontroller is in non-abnormality and safety power supply chip normal work, the safe condition control information is high electricity
Flat, described first is determined with the signal that door exports by the control information that the single-chip microcontroller exports, the flash driving
The opening and closing situation for the control information butt joint tentaculum that device is exported according to the single-chip microcontroller is controlled；
When single-chip microcontroller is in abnormality or safety power supply failure of chip, the safe condition control information is low level, the
One signal exported with door is low level, and the high side drivers are according to the low level that should be exported with door to the contactor
Opening and closing situation controlled.
10. according to claim 8 realize that automobile motor torque security closes based on automobile motor torque security turning off system
Disconnected method, which is characterized in that the high side drivers also pass through normal open switch and are connected to high side drivers power supply
Power unit, and the normal open switch is also connected with the output end of the safety power supply chip, by safety power supply chip
Output control the normal open switch on off operating mode；
When the safe condition control information is low level, the safe condition of the safety power supply chip output controls information
The control normal open switch is opened, breaking between the power unit and high side drivers, the contactor closure, institute
The automobile motor three-phase shortcircuit stated.
11. according to claim 8 realize that automobile motor torque security closes based on automobile motor torque security turning off system
Disconnected method, which is characterized in that the second shutdown path passes through IGBT flash driving circuit and the low side driving circuit of IGBT
It is connected to the IGBT of automobile motor, the unlatching off state of unlatching off state and lower three bridge to upper three bridge of IGBT is controlled
System, and the input terminal of the input terminal of IGBT flash driving circuit and the low side driving circuit of IGBT is connected to by logic gates
The output end of the single-chip microcontroller and the output end of safety power supply chip, by the single-chip microcontroller and safety power supply chip to described
The output of output side low with IGBT driving circuit of IGBT flash driving circuit controlled, to realize to upper the three of IGBT
The control of the unlatching off state for opening off state and lower three bridge of bridge；
The IGBT flash driving circuit and the logic gates of the low side driving circuit connection of IGBT include second and door, third
With door, NOT gate and/or door, in which:
Second connect the output end of the vehicle motor controller by single-chip microcontroller control output, and connection third with the input terminal of door
With the output end of door；Second input terminal for connecting IGBT flash driving circuit with the output end of door；
The output end of the input terminal of the third and door connection safety power supply chip and the IGBT exported by single-chip microcontroller control
The output end of low side ASC；The connection of its output end second and the input terminal of door and the input terminal of NOT gate；
The input terminal of the output end of the input terminal connection of the NOT gate third and door, output end connection or door；
Or the input terminal connection of door by single-chip microcontroller control output vehicle motor controller output end and the NOT gate
Output end；The input terminal of its output end connection low side driving circuit of IGBT；
The second shutdown path is controlled according to the shutdown that received control information carries out corresponding automobile motor torque
Are as follows:
When single-chip microcontroller is in non-abnormality and safety power supply chip normal work, the safe condition control information is high electricity
Flat, described second is low by the signal and IGBT of the vehicle motor controller output with the output of door and/or the output of door
The signal of side ASC output determines, by the signal control of the low side ASC output of signal and IGBT of the vehicle motor controller output
The output of the output side driving circuit low with the IGBT of IGBT flash driving circuit processed, to control the IGBT of automobile motor
Shang Sanqiao and lower three bridge unlatching off state, with carry out automobile motor torque shutdown control；
When single-chip microcontroller is in abnormality or safety power supply failure of chip, the safe condition control information is low level, institute
Second stated and the output of door are determined by the output of the vehicle motor controller, by the output control of the vehicle motor controller
The output of the system IGBT flash driving circuit, so that the unlatching off state of upper three bridge of the IGBT of automobile motor is controlled,
Described or door output is determined by the output of vehicle motor controller, is controlled by the output of the vehicle motor controller
The output of the circuit of the low side driving of IGBT, so that the unlatching off state of lower three bridge of the IGBT of automobile motor is controlled, to carry out
The shutdown of automobile motor torque controls.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711089801.XA CN107910852B (en) | 2017-11-08 | 2017-11-08 | Automobile motor torque security turning off system and its method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711089801.XA CN107910852B (en) | 2017-11-08 | 2017-11-08 | Automobile motor torque security turning off system and its method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107910852A CN107910852A (en) | 2018-04-13 |
| CN107910852B true CN107910852B (en) | 2019-10-11 |
Family
ID=61842791
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711089801.XA Active CN107910852B (en) | 2017-11-08 | 2017-11-08 | Automobile motor torque security turning off system and its method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107910852B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108493904B (en) * | 2018-05-08 | 2019-12-17 | 上海金脉电子科技有限公司 | IGBT safety turn-off system and method for turning off vehicle motor |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1083017A (en) * | 1992-08-26 | 1994-03-02 | 北京市西城区新开通用试验厂 | Safe and reliable brake device for elevator |
| CN2333121Y (en) * | 1997-12-16 | 1999-08-11 | 合肥工业大学机电厂 | Energy sonsumption braking circuit of three-phase asynchronous motor |
| CN101395792A (en) * | 2006-03-07 | 2009-03-25 | 西门子公司 | Diesel-electric drive system comprising a permanently excited synchronous generator |
| CN101983875A (en) * | 2010-01-16 | 2011-03-09 | 刘勇 | Motor brake of electric vehicle |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201509176U (en) * | 2009-08-28 | 2010-06-16 | 比亚迪股份有限公司 | Brushless motor control system and brushless motor |
| JP5405440B2 (en) * | 2010-11-15 | 2014-02-05 | 日立建機株式会社 | Electric drive vehicle |
| CN104199370B (en) * | 2014-09-18 | 2018-01-09 | 奇瑞新能源汽车技术有限公司 | The security monitoring circuit and its control method of a kind of vehicle motor controller |
| CN107112937B (en) * | 2014-11-14 | 2019-06-21 | 爱信艾达株式会社 | Control device for inverter and vehicle console device |
-
2017
- 2017-11-08 CN CN201711089801.XA patent/CN107910852B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1083017A (en) * | 1992-08-26 | 1994-03-02 | 北京市西城区新开通用试验厂 | Safe and reliable brake device for elevator |
| CN2333121Y (en) * | 1997-12-16 | 1999-08-11 | 合肥工业大学机电厂 | Energy sonsumption braking circuit of three-phase asynchronous motor |
| CN101395792A (en) * | 2006-03-07 | 2009-03-25 | 西门子公司 | Diesel-electric drive system comprising a permanently excited synchronous generator |
| CN101983875A (en) * | 2010-01-16 | 2011-03-09 | 刘勇 | Motor brake of electric vehicle |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107910852A (en) | 2018-04-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107089140B (en) | Fault detection method and device for accelerator pedal mechanism and electric automobile | |
| CN104176060B (en) | A kind of electric automobile whole failure sorted processing method | |
| CN108493904B (en) | IGBT safety turn-off system and method for turning off vehicle motor | |
| CN104554074B (en) | Vehicle control system | |
| CN111106788B (en) | Active short-circuit protection system of motor | |
| CN201901171U (en) | Electric power-assisted steering control system adopting dual-microcomputer to jointly control relay | |
| CN206900239U (en) | Car light controller, vehicle lamp assembly, car light fault monitoring system and vehicle | |
| CN104423374B (en) | Controller for automobile and the automobile with it, monitoring method | |
| CN112631256B (en) | Switching value output module with safe function and diagnosis processing method | |
| CN106375145A (en) | Local area network communication state detection and fault processing method and device | |
| CN106696709B (en) | Control method and device for voltage fault of vehicle direct-current bus | |
| CN106877291A (en) | A kind of safe torque breaking circuit and system | |
| CN110356250B (en) | Motor control method and system for unmanned vehicle | |
| CN110007663A (en) | The output switch parameter dynamic diagnostics system and method for nuclear safe level DCS | |
| CN106864270A (en) | Relay control system with fault diagnosis functions | |
| CN103149033A (en) | Offline fault detection method for electromobile | |
| CN107910852B (en) | Automobile motor torque security turning off system and its method | |
| CN108152728A (en) | A kind of relay adhesion detection device | |
| CN109656127A (en) | A kind of actuation redundancy design method suitable for electric forklift controller | |
| CN103648870B (en) | Control module is driven for electric vacuum pump | |
| US11465514B2 (en) | Onboard power supply system | |
| CN104375034A (en) | On-board equipment on-off output channel online self-checking system of subway signal system | |
| CN109713643A (en) | Electric tail gate control system and its guard method | |
| CN102661102A (en) | Multifunction vehicle window control system | |
| CN206685883U (en) | A kind of safe torque breaking circuit and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |