CN111942177A

CN111942177A - ASC control device and motor controller

Info

Publication number: CN111942177A
Application number: CN202010954766.9A
Authority: CN
Inventors: 谢奇才; 杨伟; 余凌飞
Original assignee: Shenzhen Yingweiteng Electric Vehicle Drive Technology Co ltd
Current assignee: Shenzhen Yingweiteng Electric Vehicle Drive Technology Co ltd
Priority date: 2020-09-11
Filing date: 2020-09-11
Publication date: 2020-11-17

Abstract

The invention discloses an ASC control device and a motor controller, and relates to the technical field of ASC control. The ASC control device comprises a control unit, a first logic unit, a second logic unit, a first driving unit, a second driving unit, a first enabling unit, a second enabling unit and a power module, wherein the power module comprises a lower bridge power module and an upper bridge power module; the control unit is connected with the first logic unit, the first enabling unit and the second enabling unit; the first logic unit is connected with the second logic unit, the first driving unit and the first enabling unit; the second logic unit is connected with the second driving unit and the first enabling unit; the first enabling unit is connected with the first driving unit, and the first driving unit is connected with the lower bridge power module; the second enabling unit is connected with the second driving unit, and the second driving unit is connected with the upper bridge power module. The invention can improve the reliability of ASC control.

Description

ASC control device and motor controller

Technical Field

The invention relates to the technical field of ASC control, in particular to an ASC control device and a motor controller.

Background

The motor controller is used as a core component of the new energy automobile and is related to the safety of the whole automobile. When a random hardware fault occurs in a motor controller to cause control failure, due to the existence of back electromotive force of a motor running at high speed, a three-phase winding of the motor needs to be Short-circuited timely and reliably, namely, an Active Short Circuit (ASC) is used for preventing the voltage overshoot of a controller bus caused by back electromotive force feedback, so that electrical breakdown is caused, further, a fire disaster is caused, and the life safety of passengers is endangered.

To implement ASC, measures are typically taken including: driving the upper three tubes to be conducted, and forbidding the lower three tubes to be conducted (note that the condition is a necessary condition, otherwise, the bridge wall is directly communicated); or driving the lower three tubes to be conducted and simultaneously forbidding the upper three tubes to be conducted (note that the condition is a necessary condition, otherwise, the straight-through of the bridge wall can be caused).

The ASC has long signal chain, including fault detection and judgment, normal PWM interruption, and active short circuit driving signal sending and execution. To implement an instant, reliable ASC mechanism, a comprehensive, fast, reliable fault detection and determination mechanism is required, and a reliable PWM driving execution loop is also required, which is a result of a system coordination, and a single local improvement or miscoordination does not contribute to the reliable ASC implementation.

The existing ASC technology adopts some redundancy measures on the power supply, such as introducing power from a high-voltage backup power supply to prevent the power loss of the whole control loop caused by the power failure of a low-voltage power supply system from causing the ASC mechanism not to be effectively executed, but neglects the failure of other signal links. Or redundant operation logic control is introduced, and the upper bridge or the lower bridge can be directly driven to be conducted under the condition that an original control unit fails through a redundant logic control loop, so that the ASC mechanism cannot be effectively executed due to the failure of a single control logic unit, but the method also has the uncertainty of geminate transistors on the bridge wall for executing the ASC due to the failure of a non-redundant control unit, the switching-on of the bridge arm on the opposite side is forbidden while the bridge arm on one side is conducted, and no measure of an exit mechanism is ensured after the ASC is executed; some patent technologies introduce a method for judging the motor speed through current so as to avoid the loss of a motor speed judging mechanism caused by the failure of a motor position sensor, but ignore the independence of a current sampling power supply and a position sampling power supply, and have no effective safety mechanism for preventing the ASC function from being incapable of being executed caused by the failure of a control logic unit and a driving unit.

Disclosure of Invention

The technical problem to be solved by the embodiment of the invention is to improve the reliability of ASC control.

In order to solve the above problem, in a first aspect, an embodiment of the present invention provides an ASC control apparatus, where the ASC control apparatus includes a control unit, a first logic unit, a second logic unit, a first driving unit, a second driving unit, a first enabling unit, a second enabling unit, and a power module, and the power module includes a lower bridge power module and an upper bridge power module; the control unit is connected with the first logic unit, the first enabling unit and the second enabling unit; the first logic unit is connected with the second logic unit, the first driving unit and the first enabling unit; the second logic unit is connected with the second driving unit and the first enabling unit; the first enabling unit is connected with the first driving unit, and the first driving unit is connected with the lower bridge power module; the second enabling unit is connected with the second driving unit, and the second driving unit is connected with the upper bridge power module;

if the control unit, the second logic unit or the second driving unit is detected to be in fault, the first logic unit controls the upper bridge power module to be completely disconnected and controls the lower bridge power module to be completely connected so as to realize ASC control of the lower bridge power module;

if the first driving unit is detected to be in fault, the first logic unit controls the upper bridge power module to be completely switched on and controls the lower bridge power module to be completely switched off so as to realize ASC control of the upper bridge power module;

if the first logic unit is detected to be in fault, the control unit and the second logic unit simultaneously send a prohibition signal to the first enabling unit to control the lower bridge power module to be completely disconnected, and the second logic unit controls the upper bridge power module to be completely connected, so that ASC control of the upper bridge power module is realized.

The control unit is connected with the first logic unit, the first enabling unit and the second enabling unit through a digital isolation circuit.

The further technical scheme is that the digital isolation circuit is an optical coupling isolation circuit, a magnetic coupling isolation circuit or a capacitive coupling isolation circuit.

The ASC control device further comprises a low-voltage battery and a low-voltage power supply management unit, wherein the low-voltage battery is connected with the low-voltage power supply management unit, and the low-voltage power supply management unit is respectively connected with the control unit and the digital isolation circuit.

The ASC control device also comprises an isolation boosting unit, an upper bridge power supply management unit and a lower bridge power supply management unit; the isolation boosting unit is respectively connected with the low-voltage power supply management unit, the upper bridge power supply management unit and the lower bridge power supply management unit; the upper bridge power supply management unit is respectively connected with the second logic unit, the second driving unit and the second enabling unit; the lower bridge power supply management unit is respectively connected with the first logic unit, the first driving unit, the first enabling unit and the digital isolation circuit.

The ASC control device further comprises a high-voltage battery and a high-voltage power supply management unit, wherein the high-voltage battery is connected with the high-voltage power supply management unit; and the high-voltage power supply management unit is connected with the lower bridge power supply management unit.

The further technical scheme is that the high-voltage power supply management unit is connected with the lower bridge power supply management unit through a first diode.

The isolation boosting unit is connected with the lower bridge power supply management unit through a second diode.

The ASC control device further comprises a watchdog monitoring chip, and the watchdog monitoring chip is respectively connected with the control unit and the digital isolation circuit.

In a second aspect, an embodiment of the present invention provides a motor controller, which includes the ASC control apparatus according to the first aspect.

Compared with the prior art, the embodiment of the invention can achieve the following technical effects:

by applying the technical scheme of the embodiment of the invention, the driving and enabling of the lower bridge power module and the upper bridge power module are independently controlled; when any one of the control unit, the first logic unit, the second logic unit, the first driving unit and the second driving unit breaks down, the ASC control can be quickly realized, and the reliability of the ASC control is greatly improved.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a schematic block diagram of an ASC control apparatus according to an embodiment of the present invention;

fig. 2 is a schematic block diagram of an ASC control apparatus according to another embodiment of the present invention;

fig. 3 is a schematic block diagram illustrating a connection between a first logic unit and an ADC unit of an ASC control apparatus according to an embodiment of the present invention.

Reference numerals

The monitoring device comprises a control unit 1, a first logic unit 2, a second logic unit 3, a first driving unit 4, a second driving unit 5, a first enabling unit 6, a second enabling unit 7, a power module 8, a lower bridge power module 81, an upper bridge power module 82, a digital isolation circuit 9, a low-voltage battery 10, a low-voltage power supply management unit 11, an isolation boosting unit 12, an upper bridge power supply management unit 13, a lower bridge power supply management unit 14, a high-voltage battery 15, a high-voltage power supply management unit 16, a first diode 17, a second diode 18, a watchdog monitoring chip 19, a low-voltage acquisition circuit 20, a high-voltage acquisition circuit 21 and an ADC unit 22.

Detailed Description

The technical solutions in the embodiments will be described clearly and completely with reference to the accompanying drawings in the embodiments of the present invention, wherein like reference numerals represent like elements in the drawings. It is apparent that the embodiments to be described below are only a part of the embodiments of the present invention, and not all of them. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

It will be understood that the terms "comprises" and/or "comprising," when used in this specification and the appended claims, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.

It is also to be understood that the terminology used in the description of the embodiments of the invention herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the embodiments of the invention. As used in the description of embodiments of the present invention and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

Referring to fig. 1, an embodiment of the present invention provides an ASC control apparatus, which includes a control unit 1, a first logic unit 2, a second logic unit 3, a first driving unit 4, a second driving unit 5, a first enabling unit 6, a second enabling unit 7, and a power module 8, where the power module 8 includes a lower bridge power module 81 and an upper bridge power module 82.

The control unit 1 is connected with the first logic unit 2, the first enabling unit 6 and the second enabling unit 7; the first logic unit 2 is connected with the second logic unit 3, the first driving unit 4 and the first enabling unit 6; the second logic unit 3 is connected with the second driving unit 5 and the first enabling unit 6; the first enabling unit 6 is connected with the first driving unit 4, and the first driving unit 4 is connected with the lower bridge power module 81; the second enabling unit 7 is connected to the second driving unit 5, and the second driving unit 5 is connected to the upper bridge power module 82.

It should be noted that, in the embodiment of the present invention, the first enabling unit 6 is controlled by the control unit 1, the first logic unit 2, and the second logic unit 3; the first enabling unit 6 turns off the first driving unit 4 when receiving two or more inhibit signals. The second enabling unit 7 is controlled by the control unit 1 alone; the second enabling unit 7 will switch off the second driving unit 5 upon receiving the inhibit signal sent by the control unit 1.

In the embodiment of the present invention, if it is detected that the control unit 1 fails, the second logic unit 3 fails, or the second driving unit 5 fails, the first logic unit 2 controls the upper bridge power module 82 to be completely turned off and controls the lower bridge power module 81 to be completely turned on, so as to implement ASC control of the lower bridge power module 81. If the first driving unit 4 is detected to be faulty, the first logic unit 2 controls the upper bridge power module 82 to be fully turned on and controls the lower bridge power module 81 to be fully turned off, so as to implement ASC control of the upper bridge power module 82. If the first logic unit 2 is detected to have a fault, the control unit 1 and the second logic unit 3 simultaneously send a disable signal to the first enabling unit 6 to control the lower bridge power module 81 to be completely turned off, and the second logic unit 3 controls the upper bridge power module 82 to be completely turned on, so as to implement ASC control of the upper bridge power module 82.

Specifically, if it is detected that the control unit 1 fails, the first logic unit 2 first turns off all PWM signals, and then turns on the lower bridge power module 81 through the first driving unit 4 by setting all PWM signals of the lower bridge power module 81 to high; through this process, it is possible to realize that the upper bridge power module 82 is all turned off and the lower bridge power module 81 is all turned on, so as to realize ASC control of the lower bridge power module 81.

Further, if it is detected that the second logic unit 3 fails, the first logic unit 2 notifies the control unit 1 to send a disable signal to the second enabling unit 7 through communication (for example, SPI communication) with the control unit 1 to turn off the second driving unit 5; meanwhile, the first logic unit 2 sets all the PWM signals to be low, then the first logic unit 2 sets all the PWM signals of the lower bridge power module 81 to be high, and the lower bridge power module 81 is turned on by the first driving unit 4; through this process, it is possible to realize that the upper bridge power module 82 is all turned off and the lower bridge power module 81 is all turned on, so as to realize ASC control of the lower bridge power module 81.

Further, if it is detected that the second driving unit 5 is out of order (the second logic unit 3 sends an out-of-order signal to the first logic unit 2 after detecting that the second driving unit 5 is out of order), the first logic unit 2 informs the control unit 1 to send a disable signal to the second enabling unit 7 through communication (for example, SPI communication) with the control unit 1 to turn off the second driving unit 5; meanwhile, the first logic unit 2 sets all the PWM signals to be low, then the first logic unit 2 sets all the PWM signals of the lower bridge power module 81 to be high, and the lower bridge power module 81 is turned on by the first driving unit 4; through this process, it is possible to realize that the upper bridge power module 82 is all turned off and the lower bridge power module 81 is all turned on, so as to realize ASC control of the lower bridge power module 81.

Further, if it is detected that the first driving unit 4 is failed, the first logic unit 2 immediately sets all PWM signals low, sends a disable signal to the first enabling unit 6, and simultaneously informs the control unit 1 to send the disable signal to the first enabling unit 6 through communication (for example, SPI communication) with the control unit 1 to turn off the first driving unit 4; then, the first logic unit 2 sets all the PWM signals of the upper bridge power module 82 to be high, the second logic unit 3 receives all the set PWM signals and then transmits the PWM signals to the second driving unit 5, and the second driving unit 5 turns on all the upper bridge power module 82; through this process, it is possible to realize that the upper bridge power module 82 is all turned on and the lower bridge power module 81 is all turned off, so as to realize ASC control of the upper bridge power module 82.

Further, if it is detected that the first logic unit 2 fails, the control unit 1 and the second logic unit 3 simultaneously send a disable signal to the first enabling unit 6 to turn off the first driving unit 4, so as to control the lower bridge power module 81 to be completely turned off; the second logic unit 3 sets all the PWM signals of the upper bridge power module 82 to high, and turns on the upper bridge power module 82; through this process, it is possible to realize that the upper bridge power module 82 is all turned on and the lower bridge power module 81 is all turned off, so as to realize ASC control of the upper bridge power module 82.

By applying the technical scheme of the embodiment of the invention, the driving and enabling of the lower bridge power module 81 and the upper bridge power module 82 are independently controlled; when any one of the control unit 1, the first logic unit 2, the second logic unit 3, the first drive unit 4 and the second drive unit 5 fails, the ASC control can be quickly realized, and the reliability of the ASC control is greatly improved.

Referring to fig. 2, in some embodiments, for example, the control unit 1 is connected to the first logic unit 2, the first enabling unit 6 and the second enabling unit 7 through a digital isolation circuit 9. The digital isolation circuit 9 can isolate the control unit 1 from the first logic unit 2, the first enabling unit 6 and the second enabling unit 7, thereby improving the safety.

Further, the digital isolation circuit 9 is an optical coupling isolation circuit, a magnetic coupling isolation circuit or a capacitive coupling isolation circuit.

Further, the ASC control apparatus further includes a low-voltage battery 10 and a low-voltage power supply management unit 11.

The low-voltage battery 10 is connected with the low-voltage power supply management unit 11, and the low-voltage power supply management unit 11 is respectively connected with the control unit 1 and the digital isolation circuit 9. The low-voltage power management unit 11 is configured to convert the voltage output by the low-voltage battery 10 into voltages required by the control unit 1 and the low-voltage end of the digital isolation circuit 9.

The internal topology of the low-voltage power management unit 11 is not specifically limited in the embodiment of the present invention, and the low-voltage power management unit 11 only needs to be capable of converting the voltages output by the low-voltage battery 10 into the voltages required by the control unit 1 and the low-voltage end of the digital isolation circuit 9.

Further, the ASC control apparatus further includes an isolation boosting unit 12, an upper bridge power management unit 13, and a lower bridge power management unit 14.

The isolation boosting unit 12 is respectively connected with the low-voltage power management unit 11, the upper bridge power management unit 13 and the lower bridge power management unit 14; the upper bridge power management unit 13 is respectively connected with the second logic unit 3, the second driving unit 5 and the second enabling unit 7; the lower bridge power management unit 14 is respectively connected to the first logic unit 2, the first driving unit 4, the first enabling unit 6 and the digital isolation circuit 9.

The isolation boosting unit 12 is configured to isolate and boost the voltage output by the low-voltage power management unit 11, and then transmit the voltage to the upper bridge power management unit 13 and the lower bridge power management unit 14.

The upper bridge power management unit 13 is configured to convert the voltage output by the isolation voltage boosting unit 12 into the voltages required by the second logic unit 3, the second driving unit 5, and the second enabling unit 7.

The internal topology of the upper bridge power management unit 13 is not specifically limited in the embodiment of the present invention, and the upper bridge power management unit 13 only needs to be capable of converting the voltage output by the isolation boosting unit 12 into the voltages required by the second logic unit 3, the second driving unit 5, and the second enabling unit 7, respectively.

The lower bridge power management unit 14 is configured to convert the voltage output by the isolation voltage boosting unit 12 into voltages required by the high voltage terminals of the first logic unit 2, the first driving unit 4, the first enabling unit 6, and the digital isolation circuit 9, respectively.

The embodiment of the present invention does not specifically limit the internal topology of the lower bridge power management unit 14, and the lower bridge power management unit 14 may convert the voltage required by the high voltage terminals of the first logic unit 2, the first driving unit 4, the first enabling unit 6, and the digital isolation circuit 9 into the voltage required by the lower bridge power management unit 14.

The circuit topology of the isolation boosting unit 12 may be buck, boost, flyback or a diffraction topology of these circuit topologies, which is not specifically limited in the present invention.

Further, the ASC control device further includes a high-voltage battery 15 and a high-voltage power management unit 16, wherein the high-voltage battery 15 is connected with the high-voltage power management unit 16; the high-voltage power management unit 16 is connected to the lower bridge power management unit 14. The high voltage power management unit 16 is used to convert the voltage of the high voltage battery 15 into the voltage required by the drop-off power management unit 14.

The high-voltage battery 15 functions as a backup power supply, and when the low-voltage battery 10 fails, the high-voltage battery 15 supplies power to the lower bridge power management unit 14 to ensure that the first logic unit 2, the first driving unit 4 and the first enabling unit 6 can operate normally to realize ASC control.

Meanwhile, in order to prevent the control unit 1 and the second logic unit 3 from being failed simultaneously due to the failure of the low-voltage battery 10, which causes the simultaneous power failure of the two paths of the first enabling unit 6, the input active level of the first enabling unit 6 needs to be set to be active at a low level.

Further, the high voltage power management unit 16 is connected to the lower bridge power management unit 14 through a first diode 17. The anode of the first diode 17 is connected to the high voltage power management unit 16, and the cathode of the first diode 17 is connected to the lower bridge power management unit 14.

The isolation boosting unit 12 is connected to the lower bridge power management unit 14 through a second diode 18. The anode of the second diode 18 is connected to the isolation boosting unit 12, and the cathode of the second diode 18 is connected to the lower bridge power management unit 14.

The first diode 17 and the second diode 18 both function as reverse isolation.

Further, the ASC control device further includes a watchdog monitoring chip 19, and the watchdog monitoring chip 19 is connected to the control unit 1 and the digital isolation circuit 9, respectively.

The watchdog monitoring chip 19 is used to monitor the status of the control unit 1. If the control unit 1 fails, the watchdog monitoring chip 19 outputs a fault level to cut off the digital isolation circuit 9, and terminates the communication between the control unit 1 and the first logic unit 2, thereby triggering the first logic unit 2 to detect the failure of the control unit 1.

Since this watchdog monitoring chip 19 is usually necessary in typical automotive applications with functional safety requirements, no additional costs are added here.

Further, the power module 8 is generally configured in a three-phase half-bridge inverter topology, and its components are not limited to mosfets, IGBTs or voltage-controlled devices using other technologies. The form may be a single tube or a module.

Further, the control unit 1 is connected with a low voltage acquisition circuit 20 to acquire a low voltage side signal.

The first logic unit 2 is connected to the high voltage acquisition circuit 21 to acquire a high voltage side signal. The high-voltage side signal acquisition is completed by the first logic unit 2 which is positioned at the high-voltage side, so that the cost rise caused by introducing multiple control units for reliably executing ASC is avoided.

In order to better illustrate the technical solution of the present invention, the following description is given to the working flow of the ASC control device:

in normal operating mode

The control unit collects signals at the low-voltage side. The first logic unit collects signals on the high-voltage side and transmits the signals to the control unit. The control unit generates a PWM duty signal required by the driving motor through operation processing and transmits the PWM duty signal to the first logic unit.

The first logic unit converts the received PWM duty signal into each phase PWM signal with dead zone (six paths of upper and lower bridges).

The first logic unit sends lower bridge PWM signals (three paths in total) in the generated PWM signals to the first driving unit; the first driving unit amplifies the lower bridge PWM signal and sends the amplified signal to the lower bridge power module.

The first logic unit sends the upper bridge PWM signals (three paths in total) in the generated PWM signals to the second logic unit. The second logic unit receives an upper bridge PWM signal sent by the first logic unit; the second logic unit sends the upper bridge PWM signal to the second driving unit. And the second driving unit amplifies the upper bridge PWM signal and then sends the amplified upper bridge PWM signal to the upper bridge power module.

It should be noted that information interaction between the control unit and the first logic unit is realized through SPI communication. The SPI communication is electrically isolated in high voltage and low voltage by a digital isolation circuit; the SPI communication is full duplex, and master-slave configuration is not limited. The control unit checks the SPI communication, for example, CRC check, or other check methods, and the present invention is not limited in particular. The control unit can judge the working state of the first logic unit according to the SPI check result.

Further, the control unit may be a single chip or a DSP (Digital Signal Processing) or an FPGA (Field-Programmable gate array) with equivalent functions.

Further, the first logic unit simultaneously monitors the working states of the second logic unit and the control unit.

Specifically, the first logic unit performs necessary check on the SPI communication, such as CRC check, or other check methods, and the present invention is not limited in particular. The monitoring of the working state of the control unit by the first logic unit can be judged according to an SPI (serial peripheral interface) checking result.

Or in an embodiment, the status of the control unit is monitored by a watchdog monitoring chip. The watchdog monitoring chip is respectively connected with the control unit and the digital isolation circuit. If the control unit fails, the watchdog monitoring chip outputs a fault level to cut off the digital isolation circuit, and the communication between the control unit and the first logic unit is terminated, so that the first logic unit is triggered to detect the failure of the control unit.

Since in typical automotive applications with functional safety requirements, this watchdog monitoring chip usually has to be configured, no additional cost is added here.

The first logic unit can monitor the state of the second logic unit according to comparison between a signal sent by the second logic unit and a preset signal. For example, it is specifically a one-wire high-low level between the first logic unit and the second logic unit, a combination of two or more multi-wire levels, a single-wire PWM, or a combination of two or more wires or PWMs, or other signals or signal combinations capable of distinguishing between a fault and a normal state.

Further, the first logic unit may be an FPGA having an ADC conversion function;

alternatively, referring to fig. 3, the first Logic unit 2 may also be a CPLD (Complex Programmable Logic Device), and if the first Logic unit 2 is a CPLD, the ADC function responsible for high-voltage sampling needs to be performed by the external ADC unit 22.

Further, the second logic unit monitors the working state of the first logic unit. The second logic unit can monitor the state of the first logic unit according to the comparison between the signal sent by the first logic unit and a preset signal. For example, it is specifically a one-wire high-low level between the second logic unit and the first logic unit, a combination of two or more multi-wire levels, a single-wire PWM, or a combination of two or more wires or PWMs, or other signals or signal combinations capable of distinguishing between a fault and a normal state.

Further, the first driving unit detects a lower bridge driving fault signal and sends the lower bridge driving fault signal to the first logic unit. The first driving unit detects that the lower bridge driving fault signal at least comprises a UVLO (low voltage shutdown signal) and a desaturation signal. The first driving unit consists of three paths of drives and respectively controls the three-phase power module of the lower bridge; the first drive unit needs to have high and low voltage isolation, but in this scheme only the necessary functional isolation needs to be provided.

Further, the second driving unit detects an upper bridge driving fault signal and sends the upper bridge driving fault signal to the second logic unit. The second driving unit detects that the upper bridge driving fault signal at least comprises a UVLO (low voltage shutdown signal) and a desaturation signal. The second driving unit consists of three paths of drives and respectively controls the three-phase power module of the upper bridge; the second drive unit needs to have high and low voltage isolation, but in this scheme only the necessary functional isolation needs to be provided.

Furthermore, the first enabling unit is controlled by the control unit, the first logic unit and the second logic unit together, and enables the first driving unit when two or more than two of the control unit, the first logic unit and the second logic unit send out enabling signals so as to drive the lower bridge power module.

In order to prevent the control unit and the second logic unit from being failed at the same time due to the failure of the low-voltage battery, and two paths of the first enabling unit are powered off at the same time, the input effective level of the first enabling unit needs to be set to be effective at a low level.

Furthermore, the second enabling unit is controlled by the control unit, and the second driving unit can be enabled by the second enabling unit only when the control unit sends an enabling signal, so as to drive the upper bridge power module.

In failure mode

If the control unit is detected to be in fault, the first logic unit firstly turns off all PWM signals, and then turns on the lower bridge power module through the first driving unit by setting all the PWM signals of the lower bridge power module to be high; through the process, the upper bridge power module can be completely disconnected, and the lower bridge power module can be completely connected, so that the ASC control of the lower bridge power module can be realized.

Further, if the second logic unit is detected to be in failure, the first logic unit informs the control unit to send a prohibition signal to the second enabling unit through communication (for example, SPI communication) with the control unit so as to turn off the second driving unit; meanwhile, the first logic unit sets all PWM signals to be low, then the first logic unit sets all PWM signals of the lower bridge power module to be high, and the lower bridge power module is opened through the first driving unit; through the process, the upper bridge power module can be completely disconnected, and the lower bridge power module can be completely connected, so that the ASC control of the lower bridge power module can be realized.

Further, if the second driving unit is detected to be out of order (the second logic unit sends a failure signal to the first logic unit after detecting that the second driving unit is out of order), the first logic unit informs the control unit to send a prohibition signal to the second enabling unit through communication (for example, SPI communication) with the control unit so as to shut down the second driving unit; meanwhile, the first logic unit sets all PWM signals to be low, then the first logic unit sets all PWM signals of the lower bridge power module to be high, and the lower bridge power module is opened through the first driving unit; through the process, the upper bridge power module can be completely disconnected, and the lower bridge power module can be completely connected, so that the ASC control of the lower bridge power module can be realized.

Further, if it is detected that the first driving unit fails, the first logic unit immediately sets all PWM signals low, sends a disable signal to the first enabling unit, and simultaneously informs the control unit to send the disable signal to the first enabling unit through communication (for example, SPI communication) with the control unit to turn off the first driving unit; then the first logic unit sets all the PWM signals of the upper bridge power module to be high, the second logic unit receives all the set PWM signals and then transmits the PWM signals to the second driving unit, and the second driving unit turns on all the upper bridge power module; through the process, the upper bridge power module can be completely switched on, and the lower bridge power module can be completely switched off, so that ASC control of the upper bridge power module is realized.

Further, if the first logic unit is detected to be in fault, the control unit and the second logic unit simultaneously send a prohibition signal to the first enabling unit to close the first driving unit, so that the lower bridge power module is controlled to be completely disconnected; the second logic unit autonomously sets all PWM signals of the upper bridge power module to be high and turns on the upper bridge power module; through the process, the upper bridge power module can be completely switched on, and the lower bridge power module can be completely switched off, so that ASC control of the upper bridge power module is realized.

An embodiment of the present invention provides a motor controller, which includes the ASC control device as set forth in the above embodiments. The motor controller may be embodied as a motor controller of an electric vehicle.

In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, while the invention has been described with respect to the above-described embodiments, it will be understood that the invention is not limited thereto but may be embodied with various modifications and changes.

While the invention has been described with reference to specific embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. An ASC control device is characterized by comprising a control unit, a first logic unit, a second logic unit, a first driving unit, a second driving unit, a first enabling unit, a second enabling unit and a power module, wherein the power module comprises a lower bridge power module and an upper bridge power module; the control unit is connected with the first logic unit, the first enabling unit and the second enabling unit; the first logic unit is connected with the second logic unit, the first driving unit and the first enabling unit; the second logic unit is connected with the second driving unit and the first enabling unit; the first enabling unit is connected with the first driving unit, and the first driving unit is connected with the lower bridge power module; the second enabling unit is connected with the second driving unit, and the second driving unit is connected with the upper bridge power module;

if the control unit, the second logic unit or the second driving unit is detected to be in fault, the first logic unit controls the upper bridge power module to be completely switched off and controls the lower bridge power module to be completely switched on so as to realize ASC control of the lower bridge power module;

if the first logic unit is detected to be in fault, the control unit and the second logic unit simultaneously send a prohibition signal to the first enabling unit to control all the lower bridge power modules to be switched off, and the second logic unit controls all the upper bridge power modules to be switched on, so that ASC control of the upper bridge power modules is realized.

2. The ASC control device according to claim 1, wherein the control unit is connected to the first logic unit, the first enabling unit, and the second enabling unit through a digital isolation circuit.

3. The ASC control device of claim 2, wherein the digital isolation circuit is an optical, magnetic, or capacitive coupled isolation circuit.

4. The ASC control apparatus according to claim 2, further comprising a low-voltage battery and a low-voltage power management unit, the low-voltage battery being connected to the low-voltage power management unit, the low-voltage power management unit being connected to the control unit and the digital isolation circuit, respectively.

5. The ASC control apparatus according to claim 4, further comprising an isolation boosting unit, an upper bridge power management unit, and a lower bridge power management unit; the isolation boosting unit is respectively connected with the low-voltage power supply management unit, the upper bridge power supply management unit and the lower bridge power supply management unit; the upper bridge power supply management unit is respectively connected with the second logic unit, the second driving unit and the second enabling unit; the lower bridge power supply management unit is respectively connected with the first logic unit, the first driving unit, the first enabling unit and the digital isolation circuit.

6. The ASC control apparatus according to claim 5, further comprising a high-voltage battery and a high-voltage power supply management unit, the high-voltage battery being connected to the high-voltage power supply management unit; and the high-voltage power supply management unit is connected with the lower bridge power supply management unit.

7. The ASC control device of claim 6, wherein the high voltage power management unit is connected to the lower bridge power management unit through a first diode.

8. The ASC control device of claim 7, wherein the isolation boost unit is connected to the under bridge power management unit through a second diode.

9. The ASC control apparatus according to claim 2, further comprising a watchdog monitoring chip connected to the control unit and the digital isolation circuit, respectively.

10. A motor controller comprising an ASC control apparatus according to any of claims 1-9.