CN108681318A - A kind of the functional safety monitoring system and its method of electric machine controller - Google Patents
A kind of the functional safety monitoring system and its method of electric machine controller Download PDFInfo
- Publication number
- CN108681318A CN108681318A CN201810242753.1A CN201810242753A CN108681318A CN 108681318 A CN108681318 A CN 108681318A CN 201810242753 A CN201810242753 A CN 201810242753A CN 108681318 A CN108681318 A CN 108681318A
- Authority
- CN
- China
- Prior art keywords
- monitoring
- module
- circuit
- electric machine
- machine controller
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0259—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the response to fault detection
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0259—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the response to fault detection
- G05B23/0286—Modifications to the monitored process, e.g. stopping operation or adapting control
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0259—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the response to fault detection
- G05B23/0286—Modifications to the monitored process, e.g. stopping operation or adapting control
- G05B23/0291—Switching into safety or degraded mode, e.g. protection and supervision after failure
Abstract
The present invention provides the functional safety monitoring systems and its method of a kind of electric machine controller, belong to electronic technology field.It solves the problems, such as existing technology, and there are safety deficiencies.The functional safety monitoring system of this electric machine controller includes input module, output module, main control chip and external monitoring chip, output module includes IGBT drive circuit and the emergency shutdown path circuit being connect with IGBT drive circuit, main control chip includes torque management module, torque monitoring module and inside chip monitoring module, torque management module and torque monitoring module are connect with input module, external monitoring chip is connect with inside chip monitoring module, the IGBT drive circuit of torque management module and output module connects, the emergency shutdown path circuit of external monitoring chip and output module connects.This functional safety monitoring system and its method can improve the safety and reliability that the function of electric machine controller uses.
Description
Technical field
The invention belongs to electronic technology fields, are related to a kind of the functional safety monitoring system and its method of electric machine controller.
Background technology
It is internal largely to have used electronics member device as the electric machine controller of the key core parts in new-energy automobile
The parts such as part, high-power switch device and programmable chip, the use of these and electric related components considerably increase its mistake
The possibility of effect so that the safety problem of electric vehicle is especially prominent.
Electric machine controller and driving motor have collectively constituted the power source of new-energy automobile, are typically located at new energy
In the front deck of automobile, therefore the test of the adverse circumstances such as external muddy water, strong motion, high/low temperature need to be subjected to.In addition, electric machine controller
It is also often operated under the extreme conditions such as high current, high voltage, strong-electromagnetic field, so improving the reliability of electric machine controller to solution
Certainly new-energy automobile safety issue is most important, meanwhile, the grasp of this key core technology will also greatly improve me
The core competitiveness of state's new-energy automobile product.
At present the country mainstream electric machine controller product all without functional safety design aspect the considerations of, have already fallen behind the world
The development trend of industry.The Standard andRegulation put into effect about functional safety is also fermenting in country, primarily directed to the mark of IS026262
Alignment request is converted.Kernel component of the electric machine controller as new-energy automobile, carries the important task of power output, to turning round
The requirement of square safety is very harsh.
In view of the above problems, existing Chinese patent literature discloses a kind of safety prison of vehicle motor controller
Control circuit【Application number：CN201410478319.5】, which is characterized in that including chip power supply circuit, chip monitoring circuit, failure
Diagnostic circuit, wherein the chip power supply circuit includes main control chip power circuit and monitoring chip power circuit, main control chip
Power circuit is used to supply voltage being converted into the required voltage of main control chip, and monitoring chip power circuit is used for power supply electricity
Pressure is converted into the required voltage of monitoring chip；The chip monitoring circuit includes main control chip and monitoring chip, main control chip
Motor operating is connected and controls, monitoring chip is for being monitored the operating status of main control chip；The fault diagnosis circuit
Including electric machine phase current over-current detection circuit, power switch excess temperature detection circuit, busbar voltage over-voltage detection circuit, IGBT is enabled
Signal a, IGBT enable signal b and power bridge enable signal.Although the invention is realized by simple security monitoring circuit
The vital state of safety is monitored, when abnormal state can protect controller in time, but the invention is mainly logical
It crosses and increases a monitoring chip newly to monitor the operating condition of main control chip, main control chip itself can not supervise the signal of input
Control has that reliability and safety are insufficient.
Invention content
The purpose of the present invention is in view of the above-mentioned problems existing in the prior art, it is proposed that a kind of function peace of electric machine controller
Full monitoring system and its method, functional safety monitoring system and its method technical problem to be solved of the electric machine controller
For：How safety and reliability that the function of electric machine controller use is improved.
Object of the invention can be realized by the following technical scheme：A kind of functional safety monitoring system of electric machine controller
System, including input module, output module, main control chip and external monitoring chip, the output module includes IGBT drive circuit,
It is characterized in that, the main control chip includes torque management module, torque monitoring module and inside chip monitoring module, it is described defeated
It further includes emergency shutdown path circuit to go out module, and the emergency shutdown path circuit is connect with IGBT drive circuit, the torque
Control module and torque monitoring module are connect with input module, and the external monitoring chip connects with inside chip monitoring module
It connects, the connection of the IGBT drive circuit of the torque management module and output module, the external monitoring chip and output module
Emergency shutdown path circuit connects.
The operation principle of the functional safety monitoring system of this electric machine controller is：The torque management module of main control chip is used for
It realizes the normal driving function of electric machine controller, that is, controls motor operating；The torque monitoring module of main control chip is used for torque
The signal of control module processing is monitored, i.e., torque monitoring module and torque management module receive input module same
Signal carries out torque arithmetic, and torque monitoring module compares the torque that the torque that itself is calculated is calculated with torque management module
Compared with obtaining difference, when the two difference is within normal allowable range, judge that torque management module is safe, conversely, then
Judge that torque management module is dangerous, torque monitoring module output signal gives emergency shutdown path circuit, and then IGBT is made to drive
Three bridgc arm shorts or lower three bridgc arm shorts in circuit control；External monitoring chip is for supervising the operating status of main control chip
Control, when finding main control chip exception, outputs signal to the emergency shutdown path circuit of output module, electric machine controller is made to be in
Safe condition supervises operating status in moment of torsion control and chip by torque monitoring module and external monitoring chip realization
Control, when abnormal state, can protect electric machine controller in time, effectively increase safety that the function of electric machine controller uses and
Reliability.
In the functional safety monitoring system of above-mentioned electric machine controller, the input module, which includes that two-way is independent, to be used for
The hardware circuit that sensor signal or CAN bus signal to reception are parsed, wherein hardware circuit and moment of torsion control all the way
Module connects, and another way is connect with torque monitoring module.Using the independent hardware circuit of two-way to sensor signal or CAN bus
Signal is parsed, and is monitored in real time to torque output situation convenient for torque monitoring module, is improved the safety of electric machine controller
Property.
In the functional safety monitoring system of above-mentioned electric machine controller, the functional safety monitoring system further includes being used for
Low-voltage power supply is monitored with the presence or absence of abnormal hardware monitoring circuit, the hardware monitoring circuit and the emergency shutdown path
Circuit connects.Hardware monitoring circuit the voltage for monitoring power supply less than minimum setting value or higher than highest set value when,
It is abnormal to think that system occurs, is not enough to normally ensure the switching sequence of IGBT, the control of hardware monitoring circuit sending signal is urgent to close
Disconnected path circuit so that electric machine controller is in a safe condition, and safe condition refers to that actively short circuit is one to IGBT three-phases
Safe condition, it may ensure that the back-emf of DC terminal is zero.
In the functional safety monitoring system of above-mentioned electric machine controller, the IGBT drive circuit includes and moment of torsion control
Module connection Complex Programmable Logic Devices and connect with Complex Programmable Logic Devices for drive IGBT action
IGBT driving chips, the IGBT driving chips are also connect with emergency shutdown path circuit.
In the functional safety monitoring system of above-mentioned electric machine controller, the functional safety monitoring system further includes resetting
The Complex Programmable Logic Devices of circuit, the reset circuit and IGBT drive circuit connects, the complicated programmable logic device
Part is connect with emergency shutdown path circuit.When electric machine controller because after certain reason enters safe condition, exit if necessary
Safe condition, Complex Programmable Logic Devices can control the reset of emergency shutdown path circuit, after reset, IGBT driving chip energy
The PWM control commands of enough normal corresponding Complex Programmable Logic Devices.
In the functional safety monitoring system of above-mentioned electric machine controller, the Complex Programmable Logic Devices is also associated with
The speed probe being detected for motor speed.Speed probe is connected, for being reduced to preset threshold in motor speed
When value, safe mode is exited, is changed to the mode on IGBT standard-sized sheets road, emergency shutdown path is controlled by Complex Programmable Logic Devices
Circuit reset, after reset, Complex Programmable Logic Devices control IGBT driving chips make three-phase bridge arm open a way.
In the functional safety monitoring system of above-mentioned electric machine controller, the external monitoring chip and inside chip monitoring
Module carries out information exchange by SPI communication.
A kind of functional safety monitoring method of electric machine controller, which is characterized in that the functional safety monitoring method includes：
The input module parses sensor signal or CAN bus signal by the independent hardware circuit of two-way, the master
The torque management module for controlling chip receives the analytic signal all the way of input module output, and by internal vector control algorithm into
Row torque arithmetic, output pwm signal run well to output module control motor；The torque monitoring module of the main control chip connects
The another way analytic signal of input module output is received, and torque arithmetic is carried out by its internal control algolithm, will be calculated
Torque value be compared with the torque value that torque management module obtains, when difference is in predetermined safe range value, judge
The moment of torsion control of torque management module is safe, conversely, being judged as dangerous；When being judged as dangerous, torque monitoring module
The emergency shutdown path circuit of output module is outputed signal to, control electric machine controller enters safe state mode.
The operation principle of the functional safety monitoring method of this electric machine controller is：The normal driving function of electric machine controller is logical
The torque management module of main control chip is crossed to realize, it receives the sensor signal of input module parsing, including revolves change letter all the way
Number and three-phase current signal all the way, torque arithmetic is carried out by internal vector control algorithm, obtains torque value, torque monitoring mould
Block receives the analytic signal of the other redundancy all the way of input module, including in addition revolves varying signal and other three-phase current all the way all the way
Signal, the torque value for being carried out torque arithmetic with its internal control algolithm, and being obtained are calculated with torque management module
Torque value be compared, if the two difference is in predetermined safe range value, then it represents that the torque of current torque control module
Control is safe, need not be intervened.Conversely, being then considered unsafe, torque monitoring module output signal is to output
The emergency shutdown path circuit of module so that electric machine controller enters safe state mode, ensure that the function of electric machine controller
The safety and reliability used.
In the functional safety monitoring method of above-mentioned electric machine controller, the operation into safe state mode includes passing through
Emergency shutdown path circuit outputs signal to the IGBT drive circuit of output module, and IGBT upper three is controlled by IGBT drive circuit
Bridgc arm short controls three bridgc arm shorts under IGBT.IGBT three-phase active short circuits are a safe conditions, it can ensure directly
The back-emf for flowing end is zero, when breaking down, can ensure the safety of electric machine controller and motor.
In the functional safety monitoring method of above-mentioned electric machine controller, when entering the operation of safe state mode, institute
It states emergency shutdown path circuit to be also monitored the state of IGBT, has IGBT short circuits all the way in upper three bridge arm or lower three bridge arms
When, then select corresponding three bridge arm to carry out short circuit operation.Preferably, in normal condition, could be provided as three under acquiescence IGBT
The mode of bridgc arm short, when if a failure occurs, if emergency shutdown path circuit monitors that upper three bridge arm has IGBT short circuits all the way,
When connecting, then select the mode of upper three bridgc arm short that electric machine controller is made to enter safe state mode.
In the functional safety monitoring method of above-mentioned electric machine controller, after entering safe state mode, output module
Complex Programmable Logic Devices motor speed is monitored, when motor speed is reduced to preset threshold value, exit safety
State model.
In the functional safety monitoring method of above-mentioned electric machine controller, the operation for exiting safe state mode includes：Institute
Complex Programmable Logic Devices control emergency shutdown path circuit is stated to reset, after reset, Complex Programmable Logic Devices control
IGBT driving chips are to make corresponding three-phase bridge arm open a way.
In the functional safety monitoring method of above-mentioned electric machine controller, the external monitoring chip and main control chip it is interior
Portion's chip monitoring module connection, is monitored the operating status of main control chip, when monitoring main control chip exception, outside prison
Control chip issues a signal to emergency shutdown path circuit, and controlling electric machine controller by emergency shutdown path circuit enters safe shape
Morphotype formula.Increase external monitoring chip to be monitored main control chip, can further improve the safety that electric machine controller uses
And reliability.
In the functional safety monitoring method of above-mentioned electric machine controller, the hardware monitoring circuit carries out power supply
Monitoring, when monitoring abnormal electrical power supply, hardware monitoring circuit sending signal to emergency shutdown path circuit passes through emergency shutdown road
Diameter circuit control electric machine controller enters safe state mode.Abnormal electrical power supply includes voltage less than the minimum of setting or higher than setting
Fixed peak passes through emergency shutdown path when thinking that the abnormal switching sequence for being not enough to normal guarantee IGBT occurs in system
Circuit control electric machine controller enters safe state mode, it is ensured that electric machine controller is in a safe condition.
Compared with prior art, the functional safety monitoring system and its method of this electric machine controller can pass through main control chip
Torque monitoring module moment of torsion control situation is monitored, protect electric machine controller in time in moment of torsion control exception, improve
The reliability and safety that electric machine controller uses；In addition, also by external monitoring chip to the operating status of main control chip
It is monitored, protects electric machine controller in time when main control chip occurs abnormal, further improve what electric machine controller used
Safety and reliability.
Description of the drawings
Fig. 1 is the structural schematic diagram of the present invention.
In figure, 1, input module；2, output module；21, IGBT drive circuit；21a, Complex Programmable Logic Devices；
21b, IGBT driving chip；22, emergency shutdown path circuit；3, main control chip；31, torque management module；32, torque monitoring mould
Block；33, inside chip monitoring module；4, external monitoring chip；5, hardware monitoring circuit；6, reset circuit.
Specific implementation mode
Following is a specific embodiment of the present invention in conjunction with the accompanying drawings, technical scheme of the present invention will be further described,
However, the present invention is not limited to these examples.
As shown in Figure 1, the functional safety monitoring system of this electric machine controller includes input module 1, output module 2, master control
Chip 3 and external monitoring chip 4, output module 2 include IGBT drive circuit 21 and are connect with IGBT drive circuit 21 tight
Anxious shutdown path circuit 22, main control chip 3 include torque management module 31, torque monitoring module 32 and inside chip monitoring module
33, torque management module 31 and torque monitoring module 32 are connect with input module 1, and external monitoring chip 4 is supervised with inside chip
Module 33 is controlled to connect, torque management module 31 connect with the IGBT drive circuit 21 of output module 2, external monitoring chip 4 with it is defeated
The emergency shutdown path circuit 22 for going out module 2 connects.
Preferably, input module 1 includes that the independent sensor signal or CAN bus for reception of two-way is believed
Number hardware circuit parsed, wherein hardware circuit is connect with torque management module 31 all the way, another way and torque monitoring mould
Block 32 connects.Sensor signal or CAN bus signal are parsed using two-way independent hardware circuit, are convenient for torque monitoring
Module 32 is in real time monitored torque output situation, improves the safety of electric machine controller.
Preferably, functional safety monitoring system further includes for monitoring low-voltage power supply with the presence or absence of abnormal
Hardware monitoring circuit 5, hardware monitoring circuit 5 are connect with emergency shutdown path circuit 22.Preferably, the hardware monitoring circuit 5
Using voltage comparator.Hardware monitoring circuit 5 is less than minimum setting value in the voltage for monitoring power supply or is set higher than highest
When definite value, it is believed that exception occurs in system, is not enough to normally ensure that the switching sequence of IGBT, hardware monitoring circuit 5 send out signal control
Emergency shutdown path circuit 22 processed so that electric machine controller is in a safe condition, and safe condition refers to IGBT three-phases actively
Short circuit is a safe condition, it may ensure that the back-emf of DC terminal is zero.
Preferably, IGBT drive circuit 21 includes the complicated programmable logic device being connect with torque management module 31
Part 21a and IGBT the driving chips 21b, IGBT for driving IGBT to act being connect with Complex Programmable Logic Devices 21a
Driving chip 21b is also connect with emergency shutdown path circuit 22.
Preferably, functional safety monitoring system further includes reset circuit 6, reset circuit 6 and IGBT drive circuit
21 Complex Programmable Logic Devices 21a connections, Complex Programmable Logic Devices 21a are connect with emergency shutdown path circuit 22.
When electric machine controller because after certain reason enters safe condition, safe condition, complicated programmable logic device are exited if necessary
Part 21a can control the reset of emergency shutdown path circuit 22, and after reset, IGBT driving chips 21b can normally corresponding complexity can
The PWM control commands of programmed logic device 21a.
Preferably, Complex Programmable Logic Devices 21a is also associated with the rotating speed being detected for motor speed
Sensor.Connection speed probe is changed to IGBT for when motor speed is reduced to preset threshold value, exiting safe mode
The mode on standard-sized sheet road controls emergency shutdown path circuit 22 by Complex Programmable Logic Devices 21a and resets, complicated after reset
Programmable logic device 21a controls IGBT driving chips 21b makes three-phase bridge arm open a way.
Preferably, external monitoring chip 4 and inside chip monitoring module 33 are handed over by SPI communication into row information
Mutually.
The functional safety monitoring method of this electric machine controller includes：Input module 1 passes through the independent hardware circuit pair of two-way
Sensor signal or CAN bus signal are parsed, and the torque management module 31 of main control chip 3 receives input module 1 and exports
Analytic signal all the way, and torque arithmetic is carried out by internal vector control algorithm, output pwm signal gives output module 2 to control
Motor processed runs well；The torque monitoring module 32 of main control chip 3 receives the another way analytic signal that input module 1 exports, and
Torque arithmetic, the torque that the torque value being calculated is obtained with torque management module 31 are carried out by its internal control algolithm
Value is compared, when difference is in predetermined safe range value, judge the moment of torsion control of torque management module 31 be it is safe,
Conversely, being judged as dangerous；When being judged as dangerous, torque monitoring module 32 outputs signal to the emergency shutdown of output module 2
Path circuit 22, control electric machine controller enter safe state mode.
Preferably, include passing through 22 output signal of emergency shutdown path circuit into the operation of safe state mode
To the IGBT drive circuit 21 of output module 2, upper three bridgc arm shorts of IGBT or control are controlled by IGBT drive circuit 21
Three bridgc arm short under IGBT.IGBT three-phase active short circuits are a safe conditions, it can ensure that the back-emf of DC terminal is zero,
When breaking down, it can ensure the safety of electric machine controller and motor.
Preferably, when entering the operation of safe state mode, emergency shutdown path circuit 22 is also to IGBT's
State is monitored, and when upper three bridge arm or lower three bridge arms have IGBT short circuits all the way, then corresponding three bridge arm is selected to carry out short circuit
Operation.Preferably, in normal condition, the mode of three bridgc arm shorts under acquiescence IGBT is could be provided as, when if a failure occurs,
As emergency shutdown path circuit 22 monitors that upper three bridge arm has IGBT short circuits all the way, that is, when connecting, then select upper three bridgc arm short
Mode so that electric machine controller is entered safe state mode.
Preferably, after entering safe state mode, 21a pairs of the Complex Programmable Logic Devices of output module 2
Motor speed is monitored, and when motor speed is reduced to preset threshold value, exits safe state mode.
Preferably, the operation for exiting safe state mode includes：Complex Programmable Logic Devices 21a controls are urgent
It turns off path circuit 22 to reset, after reset, Complex Programmable Logic Devices 21a control IGBT driving chips 21b are corresponding to make
Three-phase bridge arm open circuit.
Preferably, external monitoring chip 4 is connect with the inside chip monitoring module 33 of main control chip 3, to master control
The operating status of chip 3 is monitored, and when monitoring that main control chip 3 is abnormal, external monitoring chip 4 issues a signal to urgent pass
Disconnected path circuit 22 controls electric machine controller by emergency shutdown path circuit 22 and enters safe state mode.Increase external prison
Control chip 4 is monitored main control chip 3, can further improve the safety and reliability that electric machine controller uses.
Preferably, hardware monitoring circuit 5 is monitored power supply, when monitoring abnormal electrical power supply, hardware
Monitoring circuit 5 issue a signal to emergency shutdown path circuit 22, by emergency shutdown path circuit 22 control electric machine controller into
Enter safe state mode.Abnormal electrical power supply includes minimum of the voltage less than setting or the peak higher than setting, is thinking system
Occur it is abnormal when being not enough to normally ensure the switching sequence of IGBT, by emergency shutdown path circuit 22 control electric machine controller into
Enter safe state mode, it is ensured that electric machine controller is in a safe condition.
The functional safety monitoring system of this electric machine controller and its concrete operating principle of method are：Electric machine controller is normal
Driving function be to be realized by the torque management module 31 of main control chip 3, it receive input module 1 sensor information
With CAN bus information, including varying signal and all the way three-phase current signal are revolved all the way, turned round by internal vector control algorithm
Square calculates, and obtains torque value and output pwm signal to output module 2.The Complex Programmable Logic Devices 21a of output module 2 connects
It is given to the 21b control IGBT outputs of IGBT driving chips after receiving pwm signal.
The torque monitoring module 32 of main control chip 3, main function are to carry out torque monitoring, it receives the another of input module 1
The three-phase current signal of the rotation varying signal of outer redundancy all the way and other redundancy all the way carries out torque with its internal control algolithm
It calculates, obtains torque value, preferably, its control algolithm is different from the vector control algorithm in torque management module 31, use
Second set of independent control algolithm carries out torque arithmetic.Torque monitoring module 32 is by the torque value being calculated with moment of torsion control mould
The torque that block 31 calculates is compared, if the difference of the two illustrates current torque within preset safe range value
The moment of torsion control of control module 31 is safe, need not be intervened.Conversely, being then considered unsafe, pass through master control core
32 output signal of torque monitoring module of piece 3 is applied on the emergency shutdown path circuit 22 of output module 2 so that motor controls
Device enters safe state mode.
For safe state mode, by IGBT three-phases, actively short circuit is used as a safe condition, it may ensure that DC terminal
Back-emf be 0.Actively there are two types of modes for short circuit：One is upper three bridgc arm shorts of IGBT, and one is three bridgc arm shorts under IGBT.
Both modes are judged by the emergency shutdown path circuit 22 of output module 2, are given tacit consent under IGBT under normal circumstances
The mode of three bridgc arm shorts.When if a failure occurs, upper bridge arm has an IGBT short circuit, then selects using upper three bridgc arm short
Mode.
After entering the actively safe mode of short circuit, if motor speed is reduced to a threshold value, safe shape can be exited
Morphotype formula is changed to the mode on IGBT standard-sized sheets road.Operating procedure is Complex Programmable Logic Devices 21a control emergency shutdowns path electricity
Road 22 resets, and Complex Programmable Logic Devices 21a, which controls IGBT driving chips 21b, after reset makes three-phase bridge arm open a way.
In this functional safety monitoring system, main control chip 3 must use the high-performance CPU of double-core or more.
The inside chip monitoring module 33 of main control chip 3, with 4 collective effect of external monitoring chip.4 He of external monitoring chip
The inside chip monitoring module 33 of main control chip 3 carries out information exchange by SPI communication, and external monitoring chip 4 passes through question and answer
Mode monitors the operating status of main control chip 3, once finding that main control chip 3 is abnormal, can pass through 4 output signal of external monitoring chip
It is applied on the emergency shutdown path circuit 22 of output module 2 so that electric machine controller enters safe state mode.This function is pacified
Full monitoring system and its method are realized by torque monitoring module 32 and external monitoring chip 4 to being run in moment of torsion control and chip
State is monitored, and when abnormal state can protect electric machine controller in time, and the function of effectively increasing electric machine controller uses
Safety and reliability.
Specific embodiment described herein is only an example for the spirit of the invention.Technology belonging to the present invention is led
The technical staff in domain can make various modifications or additions to the described embodiments or replace by a similar method
In generation, however, it does not deviate from the spirit of the invention or beyond the scope of the appended claims.
Claims (10)
1. a kind of functional safety monitoring system of electric machine controller, including input module (1), output module (2), main control chip
(3) and external monitoring chip (4), the output module (2) includes IGBT drive circuit (21), which is characterized in that the master control
Chip (3) includes torque management module (31), torque monitoring module (32) and inside chip monitoring module (33), the output mould
Block (2) further includes emergency shutdown path circuit (22), and the emergency shutdown path circuit (22) connects with IGBT drive circuit (21)
It connects, the torque management module (31) and torque monitoring module (32) are connect with input module (1), the external monitoring chip
(4) it is connect with inside chip monitoring module (33), the IGBT drive circuit of the torque management module (31) and output module (2)
(21) it connects, the external monitoring chip (4) connect with the emergency shutdown path circuit (22) of output module (2).
2. the functional safety monitoring system of electric machine controller according to claim 1, which is characterized in that the input module
(1) include the independent hardware circuit for being parsed to the sensor signal or CAN bus signal of reception of two-way, wherein one
Road hardware circuit is connect with torque management module (31), and another way is connect with torque monitoring module (32).
3. the functional safety monitoring system of electric machine controller according to claim 1 or 2, which is characterized in that the function
Safety monitoring system further includes for monitoring low-voltage power supply with the presence or absence of abnormal hardware monitoring circuit (5), the hardware
Monitoring circuit (5) is connect with the emergency shutdown path circuit (22).
4. the functional safety monitoring system of electric machine controller according to claim 1 or 2, which is characterized in that the IGBT
Driving circuit (21) includes the Complex Programmable Logic Devices (21a) being connect with torque management module (31) and can be compiled with complexity
The IGBT driving chips (21b) for driving IGBT to act of journey logical device (21a) connection, the IGBT driving chips
(21b) is also connect with emergency shutdown path circuit (22).
5. the functional safety monitoring system of electric machine controller according to claim 1 or 2, which is characterized in that the function
Safety monitoring system further includes reset circuit (6), and the reset circuit (6) and the complex programmable of IGBT drive circuit (21) are patrolled
Device (21a) connection is collected, the Complex Programmable Logic Devices (21a) connect with emergency shutdown path circuit (22).
6. a kind of functional safety monitoring method of electric machine controller, which is characterized in that the functional safety monitoring method includes：Institute
It states input module (1) to parse sensor signal or CAN bus signal by the independent hardware circuit of two-way, the master
The torque management module (31) for controlling chip (3) receives the analytic signal all the way that input module (1) exports, and passes through internal vector
Control algolithm carries out torque arithmetic, and output pwm signal runs well to output module (2) control motor；The main control chip (3)
Torque monitoring module (32) receive the another way analytic signal that input module (1) exports, and pass through its internal control algolithm
Torque arithmetic is carried out, the torque value that the same torque management module of the torque value being calculated (31) obtains is compared, in difference
When in predetermined safe range value, judge that the moment of torsion control of torque management module (31) is safe, conversely, being judged as uneasiness
Entirely；When being judged as dangerous, torque monitoring module (32) outputs signal to the emergency shutdown path circuit of output module (2)
(22), control electric machine controller enters safe state mode.
7. the functional safety monitoring method of electric machine controller according to claim 6, which is characterized in that enter safe condition
The operation of pattern includes that the IGBT drive circuit of output module (2) is outputed signal to by emergency shutdown path circuit (22)
(21), three bridgc arm shorts under upper three bridgc arm shorts of IGBT or control IGBT are controlled by IGBT drive circuit (21).
8. the functional safety monitoring method of the electric machine controller described according to claim 6 or 7, which is characterized in that pacify entering
When the operation of total state pattern, the emergency shutdown path circuit (22) is also monitored the state of IGBT, in upper three bridge arm
Or when three bridge arms being descended there are IGBT short circuits all the way, then corresponding three bridge arm is selected to carry out short circuit operation.
9. the functional safety monitoring method of the electric machine controller described according to claim 6 or 7, which is characterized in that pacify entering
After total state pattern, the Complex Programmable Logic Devices (21a) of output module (2) is monitored motor speed, turns in motor
When prompt drop is as low as preset threshold value, safe state mode is exited, the operation for exiting safe state mode includes：The complexity can be compiled
Journey logical device (21a) controls emergency shutdown path circuit (22) and resets, after reset, Complex Programmable Logic Devices (21a) control
IGBT driving chips (21B) processed are to make corresponding three-phase bridge arm open a way.
10. the functional safety monitoring method of the electric machine controller described according to claim 6 or 7, which is characterized in that the outside
Monitoring chip (4) is connect with the inside chip monitoring module (33) of main control chip (3), to the operating status of main control chip (3) into
Row monitoring, when monitoring main control chip (3) exception, external monitoring chip (4) issues a signal to emergency shutdown path circuit
(22), electric machine controller is controlled by emergency shutdown path circuit (22) and enters safe state mode；The hardware monitoring circuit
(5) power supply is monitored, when monitoring abnormal electrical power supply, hardware monitoring circuit (5) issues a signal to emergency shutdown road
Diameter circuit (22) controls electric machine controller by emergency shutdown path circuit (22) and enters safe state mode.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810242753.1A CN108681318A (en) | 2018-03-23 | 2018-03-23 | A kind of the functional safety monitoring system and its method of electric machine controller |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810242753.1A CN108681318A (en) | 2018-03-23 | 2018-03-23 | A kind of the functional safety monitoring system and its method of electric machine controller |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN108681318A true CN108681318A (en) | 2018-10-19 |
Family
ID=63799627
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810242753.1A Pending CN108681318A (en) | 2018-03-23 | 2018-03-23 | A kind of the functional safety monitoring system and its method of electric machine controller |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108681318A (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112297877A (en) * | 2020-11-05 | 2021-02-02 | 中国第一汽车股份有限公司 | Vehicle driving system output torque monitoring system and method and vehicle |
| CN112462731A (en) * | 2020-10-16 | 2021-03-09 | 北京西南交大盛阳科技股份有限公司 | Safety supervision control method, safety supervision control device, computer equipment and safety supervision system |
| CN113131440A (en) * | 2019-12-31 | 2021-07-16 | 比亚迪股份有限公司 | Motor control system and motor control device |
| CN113315091A (en) * | 2020-02-26 | 2021-08-27 | 比亚迪股份有限公司 | Motor control system and vehicle |
| CN113428015A (en) * | 2020-03-18 | 2021-09-24 | 比亚迪股份有限公司 | Motor control system and method and electric vehicle |
| WO2023212925A1 (en) * | 2022-05-06 | 2023-11-09 | 华为数字能源技术有限公司 | Driving apparatus and electric vehicle |
Citations (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101353044A (en) * | 2008-08-29 | 2009-01-28 | 奇瑞汽车股份有限公司 | Hybrid power automobile safe monitoring system and monitoring method |
| CN101934743A (en) * | 2010-09-30 | 2011-01-05 | 重庆长安汽车股份有限公司 | Pure electric vehicle torque safety on-line monitoring method |
| CN102959520A (en) * | 2011-06-29 | 2013-03-06 | 日本精工株式会社 | In-vehicle electronic control device |
| CN103738198A (en) * | 2013-12-18 | 2014-04-23 | 奇瑞汽车股份有限公司 | Vehicle electrical motor control system with safety monitoring function and monitoring method of vehicle electrical motor control system |
| CN104199370A (en) * | 2014-09-18 | 2014-12-10 | 奇瑞汽车股份有限公司 | Automotive motor controller security monitoring circuit and control method thereof |
| CN104283485A (en) * | 2013-07-09 | 2015-01-14 | 比亚迪股份有限公司 | Electric car and motor control system thereof and control method |
| CN104410337A (en) * | 2014-11-26 | 2015-03-11 | 联合汽车电子有限公司 | Driving system of high-voltage permanent magnet synchronous motor |
| CN204210327U (en) * | 2014-10-23 | 2015-03-18 | 北汽福田汽车股份有限公司 | Electric machine controller IGBT actuating device and there is its electronlmobil |
| CN104442444A (en) * | 2013-09-18 | 2015-03-25 | 比亚迪股份有限公司 | Motor control system for electric vehicles and electric vehicle with same |
| CN104842818A (en) * | 2014-08-13 | 2015-08-19 | 北汽福田汽车股份有限公司 | Torque monitoring method and system thereof for electric automobiles |
| CN205945026U (en) * | 2016-08-05 | 2017-02-08 | 上海金脉电子科技有限公司 | Machine controller who possesses security function |
| CN106864271A (en) * | 2017-03-01 | 2017-06-20 | 奇瑞汽车股份有限公司 | A kind of method and system of controlled motor short circuit |
| CN106911275A (en) * | 2015-12-22 | 2017-06-30 | 广州汽车集团股份有限公司 | Electric automobile method for controlling permanent magnet synchronous motor and control system |
| CN107124124A (en) * | 2017-04-01 | 2017-09-01 | 苏州汇川联合动力系统有限公司 | A kind of motor threephase stator winding active shorting system and method |
| CN107472077A (en) * | 2016-11-30 | 2017-12-15 | 宝沃汽车（中国）有限公司 | The control method of drive system, device and there is its vehicle |
| CN206807333U (en) * | 2017-06-20 | 2017-12-26 | 四川建筑职业技术学院 | A kind of CPLD motor driving controling circuits |
-
2018
- 2018-03-23 CN CN201810242753.1A patent/CN108681318A/en active Pending
Patent Citations (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101353044A (en) * | 2008-08-29 | 2009-01-28 | 奇瑞汽车股份有限公司 | Hybrid power automobile safe monitoring system and monitoring method |
| CN101934743A (en) * | 2010-09-30 | 2011-01-05 | 重庆长安汽车股份有限公司 | Pure electric vehicle torque safety on-line monitoring method |
| CN102959520A (en) * | 2011-06-29 | 2013-03-06 | 日本精工株式会社 | In-vehicle electronic control device |
| CN104283485A (en) * | 2013-07-09 | 2015-01-14 | 比亚迪股份有限公司 | Electric car and motor control system thereof and control method |
| CN104442444A (en) * | 2013-09-18 | 2015-03-25 | 比亚迪股份有限公司 | Motor control system for electric vehicles and electric vehicle with same |
| CN103738198A (en) * | 2013-12-18 | 2014-04-23 | 奇瑞汽车股份有限公司 | Vehicle electrical motor control system with safety monitoring function and monitoring method of vehicle electrical motor control system |
| CN104842818A (en) * | 2014-08-13 | 2015-08-19 | 北汽福田汽车股份有限公司 | Torque monitoring method and system thereof for electric automobiles |
| CN104199370A (en) * | 2014-09-18 | 2014-12-10 | 奇瑞汽车股份有限公司 | Automotive motor controller security monitoring circuit and control method thereof |
| CN204210327U (en) * | 2014-10-23 | 2015-03-18 | 北汽福田汽车股份有限公司 | Electric machine controller IGBT actuating device and there is its electronlmobil |
| CN104410337A (en) * | 2014-11-26 | 2015-03-11 | 联合汽车电子有限公司 | Driving system of high-voltage permanent magnet synchronous motor |
| CN106911275A (en) * | 2015-12-22 | 2017-06-30 | 广州汽车集团股份有限公司 | Electric automobile method for controlling permanent magnet synchronous motor and control system |
| CN205945026U (en) * | 2016-08-05 | 2017-02-08 | 上海金脉电子科技有限公司 | Machine controller who possesses security function |
| CN107472077A (en) * | 2016-11-30 | 2017-12-15 | 宝沃汽车（中国）有限公司 | The control method of drive system, device and there is its vehicle |
| CN106864271A (en) * | 2017-03-01 | 2017-06-20 | 奇瑞汽车股份有限公司 | A kind of method and system of controlled motor short circuit |
| CN107124124A (en) * | 2017-04-01 | 2017-09-01 | 苏州汇川联合动力系统有限公司 | A kind of motor threephase stator winding active shorting system and method |
| CN206807333U (en) * | 2017-06-20 | 2017-12-26 | 四川建筑职业技术学院 | A kind of CPLD motor driving controling circuits |
Non-Patent Citations (2)
| Title |
|---|
| 段立华 等: "永磁同步电机控制器电控系统功能安全开发技术研究", 《2016中国汽车工程学会年会论文集》 * |
| 熊威 等: "电机控制系统安全监控系统的设计与研究", 《船电技术》 * |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113131440A (en) * | 2019-12-31 | 2021-07-16 | 比亚迪股份有限公司 | Motor control system and motor control device |
| CN113131440B (en) * | 2019-12-31 | 2022-09-06 | 比亚迪股份有限公司 | Motor control system and motor control device |
| CN113315091A (en) * | 2020-02-26 | 2021-08-27 | 比亚迪股份有限公司 | Motor control system and vehicle |
| CN113428015A (en) * | 2020-03-18 | 2021-09-24 | 比亚迪股份有限公司 | Motor control system and method and electric vehicle |
| CN112462731A (en) * | 2020-10-16 | 2021-03-09 | 北京西南交大盛阳科技股份有限公司 | Safety supervision control method, safety supervision control device, computer equipment and safety supervision system |
| CN112297877A (en) * | 2020-11-05 | 2021-02-02 | 中国第一汽车股份有限公司 | Vehicle driving system output torque monitoring system and method and vehicle |
| WO2022095842A1 (en) * | 2020-11-05 | 2022-05-12 | 中国第一汽车股份有限公司 | Output torque monitoring system and method for vehicle drive system, and vehicle |
| WO2023212925A1 (en) * | 2022-05-06 | 2023-11-09 | 华为数字能源技术有限公司 | Driving apparatus and electric vehicle |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108681318A (en) | A kind of the functional safety monitoring system and its method of electric machine controller | |
| US11095132B2 (en) | Battery management system | |
| CN108493904B (en) | IGBT safety turn-off system and method for turning off vehicle motor | |
| WO2020063278A1 (en) | Alternating current turnout equipment, system, and control method therefor | |
| CN102118018B (en) | Protection circuit with functions of upper limit and lower limit | |
| CN110829949A (en) | Electric drive system fault protection method and device, vehicle and storage medium | |
| CN108189672B (en) | Electric automobile integrated controller based on function safety | |
| WO2020063279A1 (en) | Switch indication apparatus | |
| CN104199370A (en) | Automotive motor controller security monitoring circuit and control method thereof | |
| CN107121630A (en) | The self checking method and device of a kind of active short-circuit protection circuit of electric machine control system | |
| CN105283344A (en) | Electronic architecture for controlling a DC/AC voltage converter | |
| US9455655B2 (en) | Motor control system | |
| CN104638966B (en) | Electric automobile inverter active discharge control system and controller | |
| CN111038261A (en) | Trailer protection method | |
| CN109656127B (en) | Drive redundancy design method suitable for electric forklift controller | |
| CN106476626A (en) | Railcar auxiliary power supply extends system | |
| CN114928275A (en) | Vehicle servo controller synchronous control method and device | |
| CN113085998A (en) | Steering control circuit board for vehicle | |
| CN103021200A (en) | Device and method for diagnosing fault of traffic signal lamp and controlling machine of traffic signal lamp | |
| CN207538974U (en) | A kind of direct current variable blade control system safety control | |
| CN103592937B (en) | A kind of fault detection system of car body control module | |
| EP4087118A1 (en) | Electric motor control system and vehicle having same | |
| US20230023760A1 (en) | Motor control system and motor control device | |
| CN207670349U (en) | Electric vehicle master controller | |
| CN113131833B (en) | Motor control system and motor control device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20181019 |
|
| RJ01 | Rejection of invention patent application after publication |