CN113085553B

CN113085553B - Drive protection circuit and device

Info

Publication number: CN113085553B
Application number: CN202010017927.1A
Authority: CN
Inventors: 刘威; 梁岂源; 杜智勇
Original assignee: BYD Co Ltd
Current assignee: BYD Co Ltd
Priority date: 2020-01-08
Filing date: 2020-01-08
Publication date: 2022-07-15
Anticipated expiration: 2040-01-08
Also published as: CN113085553A

Abstract

The embodiment of the application discloses a drive protection circuit and a device. The drive protection circuit includes: the device comprises a switch unit, a functional core, a shared storage area, a safety protection core, a control circuit and an acquisition circuit; the switch unit is respectively connected with the control circuit, the acquisition circuit and the function core, the function core is connected with the shared storage area, the shared storage area is respectively connected with the acquisition circuit and the safety protection core, the safety protection core is respectively connected with the acquisition circuit and the control circuit, and the control circuit is connected with the acquisition circuit; the drive protection circuit integrates the function core for realizing function control and the safety protection core for realizing safety protection into a microprocessing control unit, thereby not only improving the safety performance of the whole vehicle, but also simplifying the circuit, improving the circuit integration level and being beneficial to popularization.

Description

Drive protection circuit and device

Technical Field

The present application relates to the field of electronic circuit technology, and more particularly, to a driving protection circuit and device.

Background

The increasing amount of automobiles in the world makes human life face many challenges such as energy shortage, global warming and the like, and meanwhile, the development of the automobile technology is promoted, more and more people have recognized that various types of electric automobiles and fuel cell automobiles are solutions for realizing clean automobiles, and advanced electric automobiles including pure electric automobiles, hybrid electric automobiles and fuel cell electric automobiles have the advantages of low pollution emission, low heat radiation, low noise, environmental friendliness and the like.

At present, electric automobiles and hybrid automobiles are more and more on the market, and a plurality of automobile enterprises adopt a power driving module to drive a motor, so that the power driving module is a key device for driving the motor, and the reliability of the power driving module becomes a key factor influencing the reliability of the whole automobile. However, in the use process of the conventional power driving module, the conventional power driving module may operate in an unsafe environment (for example, the power driving module operates in an overcurrent or overvoltage environment for a long time), so that the power driving module may be broken down, and the power driving module is damaged, thereby not only shortening the service life of the power driving module, but also reducing the reliability of the entire vehicle. In order to solve the above problems, an existing processing method is to record the working time of the power driving module in an overvoltage or overcurrent state, generate an abnormal signal when the working time exceeds a preset time threshold, feed the abnormal signal back to a Complex Programmable Logic Device (CPLD), and turn off the power driving module when the CPLD receives the abnormal signal, so as to protect the power driving module.

However, the CPLD logic chip belongs to a functional chip, and has a great risk of failure, so that the safety performance of the entire vehicle is still reduced, and the problem of low safety performance exists.

Disclosure of Invention

The embodiment of the application discloses drive protection circuit and device, and the function core for realizing function control and the safety protection core for realizing safety protection are integrated into a microprocessing control unit, so that the safety performance of the whole vehicle is improved, the circuit is simplified, the circuit integration level is improved, and the popularization is facilitated.

In a first aspect, an embodiment of the present application provides a driving protection circuit, including a microprocessor control unit, a control circuit, and an acquisition circuit, where the microprocessor control unit includes a switch unit, a function core, a shared storage area, and a security protection core, where:

the first port of the switch unit is connected with the second port of the function core, the second port of the switch unit is connected with the first input port of the control circuit, a third port of the switch unit is connected with a second output port of the acquisition circuit, a first port of the functional core is connected with a third port of the shared memory area, a first port of the shared memory area is connected with a first output port of the acquisition circuit, a second port of the shared memory area is connected with a second port of the safety protection core, the first port of the safety protection core is connected with the second output port of the acquisition circuit, the third port of the safety protection core is connected with the second input port of the control circuit, the first output port of the control circuit is connected with the first input port of the acquisition circuit, and the second output port of the control circuit is connected with the second input port of the acquisition circuit;

the acquisition circuit acquires a state diagnosis signal and an operation parameter signal of the control circuit, transmits the state diagnosis signal to the safety protection core and transmits the state diagnosis signal to the function core through the switch unit, and transmits the operation parameter signal to the shared storage area; under the condition that the state diagnosis signal is an abnormal signal, the function core instructs the switch unit to execute a turn-off operation so as to realize the drive control function of closing the function core to the control circuit, the safety protection core acquires the operation parameter signal from the shared storage area, the safety protection core generates an instruction signal according to the state diagnosis signal and the operation parameter signal, the safety protection core transmits the instruction signal to the control circuit, and the control circuit executes a target operation according to the instruction signal so as to realize the drive control function of the safety protection core to the control circuit.

In this implementation, the microprocessor control unit is a dual-core MCU that conforms to the safety class of ASIL D, and the function control is performed on the function check, and the safety protection check performs safety protection, so that when an abnormality occurs in the power driving module, the safety protection core can respond quickly to handle the abnormality, thereby improving the safety performance of the entire vehicle and improving the integration level.

In an optional implementation manner, the microprocessor control unit further includes a first interface, a second interface, a third interface, a fourth interface, and a fifth interface; a first end of a first interface, a first end of a second interface, a first end of a third interface, a first end of a fourth interface, and a first end of a fifth interface are respectively connected with five sub-ports of a first port of the security protection core, and sub-ports of the first port of the security protection core, which are connected with the first end of the first interface, the first end of the second interface, the first end of the third interface, the first end of the fourth interface, and the first end of the fifth interface, are different from each other; the acquisition circuit includes: gather unit, OR gate circuit, voltage sampling comparison circuit and current sampling comparison circuit, wherein:

the output port of the acquisition unit is connected with the first port of the shared storage area, the input port of the acquisition unit is connected with a rotating speed module of a motor, the output port of the OR gate circuit is respectively connected with the second end of the third interface and the third port of the switch unit, the output port of the voltage sampling comparison circuit is respectively connected with the second end of the first interface and the input port of the OR gate circuit, the output port of the current sampling comparison circuit is respectively connected with the second end of the second interface and the input port of the OR gate circuit, the first output port of the control circuit is respectively connected with the second end of the fourth interface and the input port of the OR gate circuit, the second output port of the control circuit is respectively connected with the second end of the fifth interface and the input port of the OR gate circuit, and the input port of the voltage sampling comparison circuit and the input port of the current sampling comparison circuit are respectively connected with the motor.

The acquisition unit is used for acquiring the operation parameter signal and transmitting the operation parameter signal to the shared storage area, the operation parameter signal represents the rotating speed information of the motor, the voltage sampling comparison circuit is used for acquiring the voltage information of the motor and outputting a first level signal to the safety protection core and the function core according to the voltage information, and the current sampling comparison circuit is used for acquiring the current information of the motor and outputting a second level signal to the safety protection core and the function core according to the current information.

In the implementation mode, by arranging the OR gate circuit, when a certain abnormity occurs, the abnormity can be rapidly known to be generated, so that the safety protection core is rapidly started and the switch unit is closed, and the abnormity processing speed is improved.

In an optional implementation manner, the control unit includes a power unit and an and gate circuit, wherein:

the first input port of the AND gate circuit is connected with the second port of the switch unit, the second input port of the AND gate circuit is connected with the third port of the safety protection core, the output port of the AND gate circuit is connected with the input port of the power unit, the first output port of the power unit is respectively connected with the second end of the fourth interface and the input port of the OR gate circuit, the second output port of the power unit is respectively connected with the second end of the fifth interface and the input port of the OR gate circuit, and the third output port of the power unit is connected with the motor;

and the power unit receives the instruction signal and executes the target operation according to the instruction signal so as to realize the drive control function of the safety protection core on the power unit.

In the implementation mode, the functional core and the safety protection core are connected with the power unit through the and gate circuit, so that the mutual exclusion control of the functional core and the safety protection core on the power unit is realized, and the ordered control of the power unit is realized.

In an optional implementation manner, the switch unit includes a first switch, a second switch, a third switch, a fourth switch, a fifth switch, and a sixth switch, wherein:

the first port of the first switch, the first port of the second switch, the first port of the third switch, the first port of the fourth switch, the first port of the fifth switch, and the first port of the sixth switch are respectively connected with six sub-ports of the second port of the functional core, the first port of the first switch, the first port of the second switch, the first port of the third switch, the first port of the fourth switch, the first port of the fifth switch, and the sub-port of the second port of the functional core connected with the first port of the sixth switch are different from each other, and the second port of the first switch, the second port of the second switch, the second port of the third switch, the second port of the fourth switch, the second port of the fifth switch, and the second port of the sixth switch are respectively connected with the first input port of the and gate circuit and the output port of the gate circuit or the output port of the gate circuit through interfaces And (4) connecting.

In an optional implementation manner, the third output port of the security protection core includes a first sub-interface, a second sub-interface, a third sub-interface, a fourth sub-interface, a fifth sub-interface, and a sixth sub-interface; the AND gate circuit comprises a first AND gate circuit, a second AND gate circuit, a third AND gate circuit, a fourth AND gate circuit, a fifth AND gate circuit and a sixth AND gate circuit, wherein:

the first input port of the first and-gate circuit is connected with the second port of the first switch, the second input port of the first and-gate circuit is connected with the safety protection core through the first sub-interface, the first input port of the second and-gate circuit is connected with the second port of the second switch, the second input port of the second and-gate circuit is connected with the safety protection core through the second sub-interface, the first input port of the third and-gate circuit is connected with the second port of the third switch, the second input port of the third and-gate circuit is connected with the safety protection core through the third sub-interface, the first input port of the fourth and-gate circuit is connected with the second port of the fourth switch, the second input port of the fourth and-gate circuit is connected with the safety protection core through the fourth sub-interface, and the first input port of the fifth and-gate circuit is connected with the second port of the fifth switch, the second input port of the fifth and-gate circuit is connected with the safety protection core through the fifth sub-interface, the first input port of the sixth and-gate circuit is connected with the second port of the sixth switch, the second input port of the sixth and-gate circuit is connected with the safety protection core through the sixth sub-interface, and the output port of the first and-gate circuit, the output port of the second and-gate circuit, the output port of the third and-gate circuit, the output port of the fourth and-gate circuit, the output port of the fifth and-gate circuit and the output port of the sixth and-gate circuit are respectively connected with the input port of the power unit.

In an optional implementation manner, the power unit includes a first power upper bridge arm, a second power upper bridge arm, a third power upper bridge arm, a first power lower bridge arm, a second power lower bridge arm, and a third power lower bridge arm, where:

the input port of the first upper power bridge arm is connected with the output port of the first AND gate circuit, the input port of the second upper power bridge arm is connected with the output port of the second AND gate circuit, the input port of the third upper power bridge arm is connected with the output port of the third AND gate circuit, the input port of the first lower power bridge arm is connected with the output port of the fourth AND gate circuit, the input port of the second lower power bridge arm is connected with the output port of the fifth AND gate circuit, the input port of the third lower power bridge arm is connected with the output port of the sixth AND gate circuit, and the first output port of the first upper power bridge arm, the first output port of the second upper power bridge arm, the first output port of the third upper power bridge arm, the first output port of the first lower power bridge arm, the first output port of the second lower power bridge arm and the first output port of the third lower power bridge arm are respectively connected with the electric switch circuit A second output port of the first upper power bridge arm, a second output port of the second upper power bridge arm and a second output port of the third upper power bridge arm are respectively connected with a second end of the fifth interface and the input end of the OR gate circuit, and a second output port of the first lower power bridge arm, a second output port of the second lower power bridge arm and a second output port of the third lower power bridge arm are respectively connected with a second end of the fourth interface and the input end of the OR gate circuit;

under the condition that the state diagnostic signal is an abnormal signal and the safety protection core determines that the vehicle running state is a static state according to the running parameter signal, the first input port of the first and-gate circuit, the first input port of the second and-gate circuit, the first input port of the third and-gate circuit, the first input port of the fourth and-gate circuit, the first input port of the fifth and-gate circuit, the first input port of the sixth and-gate circuit, the second input port of the first and-gate circuit, the second input port of the second and-gate circuit, the second input port of the third and-gate circuit, the second input port of the fourth and-gate circuit, the second input port of the fifth and-gate circuit and the second input port of the sixth and-gate circuit are all at a high level, and the output port of the first and-gate circuit, the output port of the second and-gate circuit, and the first input port of the second input port of the fourth and-gate circuit and the safety protection core are all at a high level, The output ports of the second and-gate circuit, the third and-gate circuit, the fourth and-gate circuit, the fifth and-gate circuit and the sixth and-gate circuit are all high levels, the upper switching tube of the first power upper bridge arm, the upper switching tube of the second power upper bridge arm, the upper switching tube of the third power upper bridge arm, the lower switching tube of the first power lower bridge arm, the lower switching tube of the second power lower bridge arm and the lower switching tube of the third power lower bridge arm are all closed, and the power unit suspends charging to the energy storage device;

under the condition that the state diagnosis signal is an abnormal signal and the safety protection core determines that the vehicle running state is a running state according to the running parameter signal, the inputs of the first input port of the first and-gate circuit, the first input port of the second and-gate circuit, the first input port of the third and-gate circuit, the first input port of the fourth and-gate circuit, the first input port of the fifth and-gate circuit and the first input port of the sixth and-gate circuit are all high levels, the inputs of the second input port of the first and-gate circuit, the second input port of the second and-gate circuit and the second input port of the third and-gate circuit are all high levels, and the inputs of the second input port of the fourth and-gate circuit, the second input port of the fifth and-gate circuit and the second input port of the sixth and-gate circuit are all low levels, the output ports of the first and-gate circuit, the second and the third and-gate circuit are all high levels, the output ports of the fourth and-gate circuit, the fifth and-gate circuit and the sixth and-gate circuit are all low levels, the upper switch tube of the first power upper bridge arm, the upper switch tube of the second power upper bridge arm and the upper switch tube of the third power upper bridge arm are all closed, the lower switch tube of the first power lower bridge arm, the lower switch tube of the second power lower bridge arm and the lower switch tube of the third power lower bridge arm are all opened, and the power unit charges the energy storage device.

In an alternative implementation, the or gate circuit comprises an or logic gate, wherein:

and the output ports of the or logic gate are respectively connected with the second end of the third interface and the second port of the first switch.

In an alternative implementation, the first and gate circuit includes an and logic gate, where:

the first input port of the AND logic gate is connected with the second port of the first switch, the second input port of the AND logic gate is connected with the safety protection core through a first sub-interface, and the output port of the AND logic gate is connected with the input port of the first power upper bridge arm.

In a second aspect, an embodiment of the present application provides a driving protection device, which includes a controlled device, a functional device, and the driving protection circuit of the first aspect and the optional implementation manner in the first aspect.

In an optional implementation manner, the controlled device includes a motor and an energy storage device, the motor is respectively connected to the power unit, the acquisition unit, the voltage sampling comparison circuit, and the current sampling comparison circuit in the driving protection circuit, the energy storage device is connected to the power unit in the driving protection circuit, and the function device is connected to the function core in the driving protection circuit.

In this implementation manner, when the control function of the power unit is closed by the function core, the control function of the power unit is executed by the safety protection core, and the control functions of the function devices can be executed in parallel by the function core, so that normal operation of other functions can be ensured, and further the control safety is improved.

In the application, the function core for realizing function control and the safety protection core for realizing safety protection are integrated into a microprocessing control unit, so that the safety performance of the whole vehicle is improved, the circuit is simplified, the circuit integration level is improved, and the popularization is facilitated.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments or the background art of the present application, the drawings required to be used in the embodiments or the background art of the present application will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 is a schematic structural diagram of a driving protection circuit according to an embodiment of the present disclosure;

fig. 2 is a schematic structural diagram of another driving protection circuit provided in the embodiment of the present application;

fig. 3 is a schematic structural diagram of another driving protection circuit provided in the embodiment of the present application;

fig. 4 is a schematic structural diagram of another driving protection circuit provided in the embodiment of the present application;

fig. 5 is a schematic structural diagram of another driving protection circuit provided in the embodiment of the present application;

fig. 6 is a schematic structural diagram of another driving protection circuit according to an embodiment of the present disclosure;

fig. 7 is a schematic flowchart of a driving protection method according to an embodiment of the present application;

fig. 8 is a schematic structural diagram of a driving protection device according to an embodiment of the present application.

Detailed Description

In order to make the embodiments of the present application better understood, the technical solutions in the embodiments of the present application will be clearly described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only some embodiments of the present application, but not all embodiments.

The terms "first," "second," and "third," etc. in the description embodiments and claims of the present application and in the above-described drawings are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. The terms "comprises" and "comprising," and any variations thereof, in the description examples and claims of this application are intended to cover a non-exclusive inclusion, such as, for example, a list of steps or elements.

Reference herein to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the application. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. It is explicitly and implicitly understood by one skilled in the art that the embodiments described herein may be combined with other embodiments.

Referring to fig. 1, fig. 1 is a schematic structural diagram of a driving protection circuit according to an embodiment of the present disclosure. As shown in fig. 1, the circuit diagram includes a microprocessor control unit 10, a control circuit 30 and an acquisition circuit 20, where the microprocessor control unit 10 includes a switch unit 104, a function core 101, a shared memory 103 and a security protection core 102;

a first port 119 of the switch unit 104 is connected to a second port 118 of the functional core 101, a second port 120 of the switch unit 104 is connected to a first input port 31 of the control circuit 30, a third port 121 of the switch unit 104 is connected to a second output port 22 of the acquisition circuit 20, a first port 117 of the functional core 101 is connected to a third port 116 of the shared memory area 103, a first port 111 of the shared memory area 103 is connected to a first output port 21 of the acquisition circuit 20, a second port 115 of the shared memory area 103 is connected to a second port 114 of the secure kernel 102, a first port 112 of the secure kernel 102 is connected to a second output port 22 of the acquisition circuit 20, a third port 113 of the secure kernel 102 is connected to a second input port 32 of the control circuit 30, a first output port 33 of the control circuit 30 is connected to a first input port 23 of the acquisition circuit 20, and a second output port 34 of the control circuit 30 is connected to a second input port 24 of the acquisition circuit 20;

the acquisition circuit 20 acquires a state diagnosis signal and an operation parameter signal of the control circuit 30, the acquisition circuit 20 transmits the state diagnosis signal to the safety protection core 102 and transmits the state diagnosis signal to the functional core 101 through the switch unit 104, whether the circuit is abnormal or not can be detected according to the state diagnosis signal, the acquisition circuit 20 transmits the operation parameter signal to the shared storage area 103, and the vehicle state can be determined to be a static state or a driving state according to the operation parameter signal; under the condition that the state diagnosis signal is an abnormal signal, the functional core 101 instructs the switch unit 104 to execute a turn-off operation to realize the drive control function of the turn-off functional core 101 on the control circuit 30, the safety protection core 102 acquires an operation parameter signal from the shared storage area 103, the safety protection core 102 detects the type of the abnormality of the circuit as an upper bridge arm abnormality or a lower bridge arm abnormality according to the state diagnosis signal, determines the vehicle state as a static state or a driving state according to the operation parameter signal to generate an instruction signal, the safety protection core 102 transmits the instruction signal to the control circuit 30, the control circuit 30 executes a target operation according to the instruction signal, the target operation is to turn off the abnormal bridge arm and turn on the corresponding normal bridge arm, so as to realize the drive control function of the safety protection core 102 on the control circuit 30. Under the condition that the state diagnosis signal is a normal signal, the safety protection core 102 is in a closed state, the functional core 101 generates an instruction signal according to the state diagnosis signal and the operation parameter signal and transmits the instruction signal to the control circuit 30, so that the function of driving and controlling the control circuit 30 by the functional core 101 is realized.

The microprocessing control unit 10 of this embodiment is a dual-core MCU that conforms to the safety class of ASIL D, and the function core 101 realizes function control, and the safety protection core 102 realizes safety protection, and therefore, when the power driving module is abnormal, the safety protection core 102 can respond quickly to handle the abnormality, and then the safety performance of the entire vehicle is improved, and the integration level is improved.

Referring to fig. 2, fig. 2 is a schematic structural diagram of another driving protection circuit according to an embodiment of the present disclosure. As shown in fig. 2, the micro-processing control unit 10 in the circuit diagram includes a first interface a1 port, a second interface a2 port, a third interface A3 port, a fourth interface a4 port, and a fifth interface a5 port; the first end of the first interface a1 port, the first end of the second interface a2 port, the first end of the third interface A3 port, the first end of the fourth interface a4 port, and the first end of the fifth interface a5 port are respectively connected to five sub-ports of the first port of the security protection core 102, and the sub-ports of the first port of the security protection core 102, which are connected to the first end of the first interface a1 port, the first end of the second interface a2 port, the first end of the third interface A3 port, the first end of the fourth interface a4 port, and the first end of the fifth interface a5 port, are different; the acquisition circuit 20 comprises an acquisition unit 201, an OR gate circuit 202, a voltage sampling comparison circuit 203 and a current sampling comparison circuit 204; or gate 202 comprises an or logic gate;

the output port 21 of the acquisition unit 201 is connected with the first port 111 of the shared storage area 103, the input port of the acquisition unit 201 is connected with the rotating speed module of the motor, the output port 22 of the or gate 202 is connected to the second end of the port A3 of the third interface and the third port 121 of the switch unit 104, the output port of the voltage sampling comparator 203 is connected to the second end of the port a1 of the first interface and the input port of the or gate 202, the output port of the current sampling comparator 204 is connected to the second end of the port a2 of the second interface and the input port of the or gate 202, the first output port 33 of the control circuit 30 is connected to the second end of the port a4 of the fourth interface and the input port of the or gate 202, the second output port 34 of the control circuit 30 is connected to the second end of the port a5 of the fifth interface and the input port of the or gate 202, and the input port of the voltage sampling comparator 203 and the input port of the current sampling comparator 204 are connected to the motor, respectively.

The motor rotating speed module is used for recording rotating speed information of the motor, the acquisition unit 201 decodes the rotating speed information of the motor so as to acquire an operation parameter signal for determining that a vehicle state is a static state or a driving state, the acquisition unit 201 transmits the operation parameter signal to the shared storage area 103, and the operation parameter signal represents the rotating speed information of the motor. The voltage sampling comparison circuit 203 is configured to collect voltage information of the motor, compare the voltage information with a standard voltage, and output a first level signal to the safety protection core 102 and the function core 101, where the first level signal is at a high level if the voltage information of the motor is higher than the standard voltage, and the first level signal is at a low level if the voltage information of the motor is lower than the standard voltage. The current sampling comparison circuit 204 is configured to collect current information of the motor, compare the current information with a standard current, and output a second level signal to the safety protection core 102 and the functional core 101, where the second level signal is at a high level if the current information of the motor is higher than the standard current, and the second level signal is at a low level if the current information of the motor is lower than the standard current.

In the embodiment, by arranging one or gate circuit 202, when a certain abnormality occurs, it can be quickly known that the abnormality occurs, so as to quickly start the safety protection core 102 and close the switch unit 104, thereby increasing the speed of processing the abnormality.

Referring to fig. 3, fig. 3 is a schematic structural diagram of another driving protection circuit according to an embodiment of the present disclosure. As shown in fig. 3, the control unit 30 in the circuit diagram includes a power unit 302 and an and gate circuit 301;

the first input port 31 of the and circuit 301 is connected with the second port 120 of the switch unit 104, the second input port 32 of the and circuit 301 is connected with the third port 113 of the safing protection core 102, the output port 35 of the and circuit 301 is connected with the input port 36 of the power unit 302, the first output port 33 of the power unit 302 is respectively connected with the second port of the port a4 and the input port of the or gate 202, the second output port 34 of the power unit 302 is respectively connected with the second port of the port a5 and the input port of the or gate 202, and the third output port of the power unit 302 is connected with the motor;

the power unit 302 receives the instruction signal of the safety protection core 102 and executes a target operation according to the instruction signal, where the target operation is to close an abnormal bridge arm and open a corresponding normal bridge arm, and charge the energy storage device with redundant voltage or current, so as to implement a drive control function of the safety protection core 102 on the power unit 302.

The functional core 101 and the security protection core 102 of this embodiment are connected to the power unit 302 through the and circuit 301, so that the mutually exclusive control of the functional core 101 and the security protection core 102 on the power unit is realized, and the ordered control of the power unit 302 is realized.

Referring to fig. 4, fig. 4 is a schematic structural diagram of another driving protection circuit according to an embodiment of the present disclosure. As shown in fig. 4, the switch unit 104 in the circuit diagram includes a first switch, a second switch, a third switch, a fourth switch, a fifth switch, and a sixth switch;

first ports of the first switch, the second switch, the third switch, the fourth switch, the fifth switch, and the sixth switch are respectively connected to six sub-ports of second port 118 of functional core 101, where the first ports of the first switch, the second switch, the third switch, the fourth switch, the fifth switch, and the sixth switch are connected to different sub-ports of second port 118 of functional core 101, and it should be noted that there are 6 sub-ports in second port 118 of functional core 101 in fig. 4, and lines of the 6 sub-ports converge at second port 118 of one bus access functional core 101. The second port of the first switch is connected to the first input port 31 of the and circuit 301 through the port D1, the second port of the second switch is connected to the first input port 31 of the and circuit 301 through the port D2, the second port of the third switch is connected to the first input port 31 of the and circuit 301 through the port D3, the second port of the fourth switch is connected to the first input port 31 of the and circuit 301 through the port D4, the second port of the fifth switch is connected to the first input port 31 of the and circuit 301 through the port D5, the second port of the sixth switch is connected to the first input port 31 of the and circuit 301 through the port D6, the second port of the first switch, the second port of the second switch, the second port of the third switch, the second port of the fourth switch, the second port of the fifth switch, and the second port of the sixth switch are all connected to the output port 22 of the or gate circuit 202 through an interface B1.

The first switch, the second switch, the third switch, the fourth switch, the fifth switch and the sixth switch control the on or off state of the functional core 101 and the and circuit 301 through the opening or closing operation respectively.

Referring to fig. 5, fig. 5 is a schematic structural diagram of another driving protection circuit according to an embodiment of the present disclosure. As shown in fig. 5, the third output port 113 of the security protection core 102 in the circuit diagram includes a first sub-interface port C1, a second sub-interface port C2, a third sub-interface port C3, a fourth sub-interface port C4, a fifth sub-interface port C5, and a sixth sub-interface port C6; the and gate circuit 301 comprises a first and gate circuit, a second and gate circuit, a third and gate circuit, a fourth and gate circuit, a fifth and gate circuit and a sixth and gate circuit; the first AND gate circuit, the second AND gate circuit, the third AND gate circuit, the fourth AND gate circuit, the fifth AND gate circuit and the sixth AND gate circuit comprise AND logic gates;

the first input port of the first and-gate circuit is connected with the second port of the first switch through a port D1, the second input port of the first and-gate circuit is connected with the safety protection core 102 through a port C1 which is a first sub-interface, the first input port of the second and-gate circuit is connected with the second port of the second switch through a port D2, the second input port of the second and-gate circuit is connected with the safety protection core 102 through a port C2 which is a second sub-interface, the first input port of the third and-gate circuit is connected with the second port of the third switch through a port D3, the second input port of the third and-gate circuit is connected with the safety protection core 102 through a port C3 which is a third sub-interface, the first input port of the fourth and-gate circuit is connected with the second port of the fourth switch through a port D4, the second input port of the fourth and-gate circuit is connected with the safety protection core 102 through a port C4 which is a fourth sub-interface, the first input port of the fifth and-gate circuit is connected with the second port of the fifth switch through a port D5, a second input port of the fifth and-gate circuit is connected to the safety protection core 102 through a fifth sub-interface port C5, a first input port of the sixth and-gate circuit is connected to a second port of the sixth switch through a port D6, a second input port of the sixth and-gate circuit is connected to the safety protection core 102 through a port C6, and an output port of the first and-gate circuit, an output port of the second and-gate circuit, an output port of the third and-gate circuit, an output port of the fourth and-gate circuit, an output port of the fifth and-gate circuit, and an output port of the sixth and-gate circuit are respectively connected to the input ports of the power unit 302.

Referring to fig. 6, fig. 6 is a schematic structural diagram of another driving protection circuit according to an embodiment of the present disclosure. As shown in fig. 6, the power unit 302 in the circuit diagram includes a first power upper bridge arm, a second power upper bridge arm, a third power upper bridge arm, a first power lower bridge arm, a second power lower bridge arm, and a third power lower bridge arm;

the input port of the first power upper bridge arm is connected with the output port of the first AND gate circuit, the input port of the second power upper bridge arm is connected with the output port of the second AND gate circuit, the input port of the third power upper bridge arm is connected with the output port of the third AND gate circuit, the input port of the first power lower bridge arm is connected with the output port of the fourth AND gate circuit, the input port of the second power lower bridge arm is connected with the output port of the fifth AND gate circuit, the input port of the third power lower bridge arm is connected with the output port of the sixth AND gate circuit, the first output port of the first power upper bridge arm, the first output port of the second power upper bridge arm, the first output port of the third power upper bridge arm, the first output port of the first power lower bridge arm, the first output port of the second power lower bridge arm and the first output port of the third power lower bridge arm are respectively connected with the motor, the second output port of the first power upper bridge arm, the second output port of the second AND gate circuit and the second AND gate circuit are respectively connected with the motor, and the output port of the second AND gate circuit, A second output port of the second power upper bridge arm and a second output port of the third power upper bridge arm are respectively connected with a second end of a port A5 of a fifth interface and an input end of the OR gate circuit 202, and a second output port of the first power lower bridge arm, a second output port of the second power lower bridge arm and a second output port of the third power lower bridge arm are respectively connected with a second end of a port A4 of a fourth interface and an input end of the OR gate circuit 202;

when the state diagnostic signal is an abnormal signal and the safety protection core 102 determines that the vehicle running state is a static state according to the running parameter signal, the first input port of the first and gate circuit, the first input port of the second and gate circuit, the first input port of the third and gate circuit, the first input port of the fourth and gate circuit, the first input port of the fifth and gate circuit, the first input port of the sixth and gate circuit, the second input port of the first and gate circuit, the second input port of the second and gate circuit, the second input port of the third and gate circuit, the second input port of the fourth and gate circuit, the second input port of the fifth and gate circuit and the second input port of the sixth and gate circuit are all at a high level, and the output ports of the first and gate circuit, the second and gate circuit and the third and gate circuit are all at a high level, The output ports of the fourth and-gate circuit, the fifth and-gate circuit and the sixth and-gate circuit are all high levels, the upper switching tube of the first power upper bridge arm, the upper switching tube of the second power upper bridge arm, the upper switching tube of the third power upper bridge arm, the lower switching tube of the first power lower bridge arm, the lower switching tube of the second power lower bridge arm and the lower switching tube of the third power lower bridge arm are all closed, the power unit 302 suspends charging to the energy storage device, and the output level corresponding to the input level of the and-gate circuit 301 and the target operation corresponding to the power unit 302 are shown in table one:

watch 1

When the state diagnosis signal is an abnormal signal and the safety protection core 102 determines that the vehicle running state is the running state according to the running parameter signal, the inputs of the first input port of the first and-gate circuit, the first input port of the second and-gate circuit, the first input port of the third and-gate circuit, the first input port of the fourth and-gate circuit, the first input port of the fifth and-gate circuit and the first input port of the sixth and-gate circuit are all high levels, the inputs of the second input port of the first and-gate circuit, the second input port of the second and-gate circuit and the second input port of the third and-gate circuit are all high levels, the inputs of the second input port of the fourth and-gate circuit, the second input port of the fifth and-gate circuit and the second input port of the sixth and-gate circuit are all low levels, and the inputs of the output port of the first and-gate circuit, the output port of the second and-gate circuit, the first input port of the second and-gate circuit and the safety protection core 102 are all low levels, The output of the output port of the third and-gate circuit is high level, the output of the output port of the fourth and-gate circuit, the output of the output port of the fifth and-gate circuit and the output of the output port of the sixth and-gate circuit are low level, the upper switching tube of the first power upper bridge arm, the upper switching tube of the second power upper bridge arm and the upper switching tube of the third power upper bridge arm are all closed, the lower switching tube of the first power lower bridge arm, the lower switching tube of the second power lower bridge arm and the lower switching tube of the third power lower bridge arm are all opened, the power unit 302 charges the energy storage device, the output level corresponding to the input level of the and-gate circuit 301 and the target operation corresponding to the power unit 302 are shown in table two:

watch two

Referring to fig. 7, fig. 7 is a schematic flow chart of a driving protection method according to an embodiment of the present disclosure, where the driving protection method is applied to any one of the driving protection circuits shown in fig. 1 to fig. 6, and for convenience of description, the driving protection method in the present embodiment will be described by using the driving protection circuit shown in fig. 6 as an application.

701. And the functional core sends a driving instruction signal to the power unit, and the power unit conducts on-off processing on the bridge arm according to the driving instruction signal.

As can be known from the driving protection circuit shown in fig. 6, the acquisition unit 201 acquires an operation parameter signal and transmits the operation parameter signal to the shared storage area 103, the functional core 101 extracts the operation parameter signal from the shared storage area 103, generates a driving instruction signal according to the operation parameter signal, and transmits the driving instruction signal to the power unit 302 through the switch unit 104 and the and circuit 301, where the power unit 302 performs on/off processing on a bridge arm according to the driving instruction signal. In the working process of the power unit 302, the upper switch tube and the lower switch tube are alternately turned on or off so as to control the upper bridge arm and the lower bridge arm to drive and control the motor. The specific situations of the output signal level of the safety protection core 102, the output signal level of the functional core 101, the output signal level of the and circuit 301 and the target operation executed by the power unit 302 are as follows:

watch III

702. The switching unit receives the state diagnosis signal transmitted through the OR gate circuit, performs a turn-off operation, and feeds back the turn-off signal to the functional core.

As can be seen from the driving protection circuit of fig. 6, the switching unit 104 receives the state diagnostic signal transmitted through the or gate 202 and transmits the state diagnostic signal to the functional core 101, instructs the switching unit 104 to perform the turn-off operation after the functional core 101 determines that the state diagnostic signal is an abnormal signal, and feeds back the turn-off signal to the functional core 101 after the switching unit 104 performs the turn-off operation.

703. And after the functional core receives the disconnection signal, starting the safety protection core.

After receiving the disconnection signal, the functional core 101 outputs a start signal and stores the start signal in the shared memory area 103, where the start signal is used to start the security protection core 102, and the security protection core 102 starts the security protection core 102 after acquiring the start signal from the shared memory area 103.

704. And the safety protection core receives state diagnosis signals of the port A1, the port A2, the port A3, the port A4 and the port A5, and extracts operation parameter signals acquired by the acquisition unit from the shared storage area.

The safety protection core 102 receives state diagnosis signals transmitted by ports a1, a2, A3, a4 and a5, wherein the state diagnosis signals transmitted by the ports a1, a2, A3, a4 and a5 are different, the port a1 transmits a first level signal output by the voltage sampling comparison circuit 203, the voltage sampling comparison circuit 203 is used for acquiring voltage information of the motor and comparing the voltage information with a standard voltage, the first level signal is output and transmitted to the safety protection core 102 through the port a1, the port a2 transmits a second level signal output by the current sampling comparison circuit 204, the current sampling comparison circuit 204 is used for acquiring current information of the motor and comparing the current information with the standard current, the second level signal is output and transmitted to the safety protection core 102 through the port a2, the port a4 is connected to the lower arm of the power unit 302, and therefore the state diagnosis signal of the lower arm of the power unit 302 is transmitted, the port a5 is connected to the upper arm of the power unit 302, so that the transmitted signals are diagnostic signals of the state of the upper arm of the power unit 302, and the port A3, as a trigger interface, can quickly know that a certain abnormal signal is generated by connecting with the or gate circuit 202, so as to quickly start the safety protection core 102 and close the switch unit 104, thereby improving the abnormal processing rate. Meanwhile, the safety protection core 102 also extracts the operation parameter signal collected by the collecting unit 201 from the shared storage area 103, and the operation parameter signal represents the rotating speed information of the motor.

705. The safety protection core determines the abnormal type according to the state diagnosis signal and determines the vehicle running state according to the running parameter signal.

The safing core 102 determines the type of anomaly based on the status diagnostic signal and determines the operating status of the vehicle based on the operating parameter signal. The abnormal type comprises upper bridge arm abnormality and lower bridge arm abnormality, and the vehicle running state comprises a running state and a static state. When the vehicle running state is a stationary state, executing the following step 706; when the running state of the vehicle is the running state and the upper bridge arm is abnormal, the following step 707 is executed; when the vehicle operating state is a driving state and the lower arm is abnormal, the following step 708 is executed.

706. And under the condition that the running state of the vehicle is determined to be a static state, the safety protection core turns off the power unit.

When the safety protection core 102 determines that the vehicle running state is a static state, no matter whether the abnormality type is an upper arm abnormality or a lower arm abnormality, the safety protection core 102 closes the upper switching tube and the lower switching tube, so as to close the power unit 302.

707. And under the condition that the running state of the vehicle is determined to be the running state and the abnormal type is the upper bridge arm abnormality, the safety protection core closes the abnormal upper switch tube and simultaneously conducts the corresponding lower switch tube so as to continue the driving operation of the motor, and meanwhile, the safety protection core controls the power unit to utilize redundant current or voltage to perform the charging operation on the energy storage device.

Under the condition that the running state of the vehicle is determined to be the running state and the abnormal type is the upper bridge arm abnormality, the safety protection core 102 closes the abnormal upper switch tube and simultaneously conducts the corresponding lower switch tube, and the driving operation of the motor is continued through the normal lower bridge arm, meanwhile, the safety protection core 102 controls the power unit 302 to perform the charging operation on the energy storage device by using redundant current or voltage, and when the charging time is enough, the problem of overvoltage or overcurrent work of the power unit 302 is solved.

708. And under the condition that the running state of the vehicle is determined to be the running state and the abnormal type is the lower bridge arm abnormality, the safety protection core closes the abnormal lower switch tube and simultaneously conducts the corresponding upper switch tube so as to continue the driving operation of the motor, and meanwhile, the safety protection core controls the power unit to utilize redundant current or voltage to perform the charging operation on the energy storage device.

Under the condition that the running state of the vehicle is determined to be the running state and the abnormal type is the lower bridge arm abnormality, the safety protection core 102 closes the abnormal lower switch tube, simultaneously conducts the corresponding upper switch tube, and continues to perform the driving operation of the motor through the normal upper bridge arm, meanwhile, the safety protection core 102 controls the power unit 302 to perform the charging operation by using redundant current or voltage as the energy storage device, and when the charging time is enough, the overvoltage or overcurrent working problem of the power unit 302 is solved.

709. And after receiving the state recovery signal transmitted by the OR gate circuit, the safety protection core stores the state recovery signal into the shared storage area.

As shown in step 707 and step 708, the safety protection core 102 controls the power unit 302 to perform a charging operation for the energy storage device by using the excess current or voltage, and when the charging time is sufficient and the problem of the over-voltage or over-current operation of the power unit 302 is solved, the status diagnostic signal is restored to the normal signal. Meanwhile, the security protection core 102 receives the state restoration signal transmitted via the or gate 202, and stores the state restoration signal in the shared memory area 103.

710. And after the functional core acquires the state recovery signal from the shared storage area, the switch unit is controlled to be switched on to realize the connection between the functional core and the AND gate, and meanwhile, the safety protection core closes the ports C1, C2, C3, C4, C5 and C6 to disconnect the safety protection core from the AND gate.

After the functional core 101 acquires the state recovery signal from the shared memory area 103, the control switch unit 104 is turned on to connect the functional core 101 and the and circuit 301, and at the same time, the security protection core 102 closes the ports C1, C2, C3, C4, C5 and C6 to disconnect the security protection core 102 and the and circuit 301.

711. The functional core closes the security protection core.

After the control switch unit 104 is turned on, the functional core 101 outputs a shutdown signal and stores the shutdown signal in the shared storage area 103, where the shutdown signal is used to shut down the security protection core 102, and the security protection core 102 shuts down the security protection core 102 after acquiring the shutdown signal from the shared storage area 103.

Referring to fig. 8, fig. 8 is a schematic structural diagram of a driving protection device according to an embodiment of the present disclosure, where the driving protection device includes a controlled device, a functional device, and a driving protection circuit shown in any one of fig. 1 to 6;

further, the controlled device includes a motor and an energy storage device, the functional device includes functional equipment such as an air conditioner, the motor is respectively connected with the power unit 302, the acquisition unit 201, the voltage sampling comparison circuit 203 and the current sampling comparison circuit 204 in the driving protection circuit shown in any one of fig. 1 to 6, the energy storage device is connected with the power unit 302 in the driving protection circuit shown in any one of fig. 1 to 6, and the functional device is connected with the functional core 101 in the driving protection circuit shown in any one of fig. 1 to 6.

In this embodiment, when the control function of the power unit 302 by the functional core 101 is turned off, the safety protection core 102 executes the control function of the power unit 302, and the functional core 101 can execute the control function of the functional device in parallel, so that normal operation of other functions can be ensured, and control safety is further improved.

Through the embodiment of the application, the function core for realizing function control and the safety protection core for realizing safety protection can be integrated into a microprocessing control unit, so that the safety performance of the whole vehicle is improved, the circuit is simplified, the circuit integration level is improved, and the popularization is facilitated.

The above disclosure is only for the purpose of providing examples, and it is not intended to limit the scope of the claims, so that the claims and their equivalents will fall within the scope of the claims.

Claims

1. A drive protection circuit, comprising:

the device comprises a micro-processing control unit, a control circuit and an acquisition circuit, wherein the micro-processing control unit comprises a switch unit, a functional core, a shared storage area and a safety protection core;

2. The drive protection circuit of claim 1, wherein the micro-processing control unit further comprises a first interface, a second interface, a third interface, a fourth interface, and a fifth interface; a first end of a first interface, a first end of a second interface, a first end of a third interface, a first end of a fourth interface, and a first end of a fifth interface are respectively connected with five sub-ports of a first port of the security protection core, and sub-ports of the first port of the security protection core, which are connected with the first end of the first interface, the first end of the second interface, the first end of the third interface, the first end of the fourth interface, and the first end of the fifth interface, are different from each other; the acquisition circuit includes:

the circuit comprises an acquisition unit, an OR gate circuit, a voltage sampling comparison circuit and a current sampling comparison circuit;

an output port of the acquisition unit is connected with a first port of the shared storage area, an input port of the acquisition unit is connected with a rotating speed module of a motor, output ports of the OR gate circuit are respectively connected with a second end of the third interface and a third port of the switch unit, output ports of the voltage sampling comparison circuit are respectively connected with a second end of the first interface and an input port of the OR gate circuit, output ports of the current sampling comparison circuit are respectively connected with a second end of the second interface and an input port of the OR gate circuit, a first output port of the control circuit is respectively connected with a second end of the fourth interface and an input port of the OR gate circuit, a second output port of the control circuit is respectively connected with a second end of the fifth interface and an input port of the OR gate circuit, and the input port of the voltage sampling comparison circuit and the input port of the current sampling comparison circuit are respectively connected with the motor;

3. The drive protection circuit according to claim 2, wherein the control unit comprises:

a power unit and an AND gate circuit;

4. The drive protection circuit according to claim 3, wherein the switching unit includes:

a first switch, a second switch, a third switch, a fourth switch, a fifth switch and a sixth switch;

the first port of the first switch, the first port of the second switch, the first port of the third switch, the first port of the fourth switch, the first port of the fifth switch, and the first port of the sixth switch are respectively connected with six sub-ports of the second port of the functional core, the first port of the first switch, the first port of the second switch, the first port of the third switch, the first port of the fourth switch, the first port of the fifth switch, and the first port of the sixth switch are respectively connected with different sub-ports of the second port of the functional core, and the second port of the first switch, the second port of the second switch, the second port of the third switch, the second port of the fourth switch, the second port of the fifth switch, and the second port of the sixth switch are respectively connected with the first input port of the and circuit and the first input port of the or gate circuit through interfaces And (4) connecting.

5. The drive protection circuit of claim 4, wherein the third output port of the safing core comprises a first sub-interface, a second sub-interface, a third sub-interface, a fourth sub-interface, a fifth sub-interface, and a sixth sub-interface; the AND gate circuit includes:

the first AND gate circuit, the second AND gate circuit, the third AND gate circuit, the fourth AND gate circuit, the fifth AND gate circuit and the sixth AND gate circuit;

6. The driving protection circuit according to claim 5, wherein the power unit comprises:

the bridge comprises a first power upper bridge arm, a second power upper bridge arm, a third power upper bridge arm, a first power lower bridge arm, a second power lower bridge arm and a third power lower bridge arm;

when the state diagnostic signal is an abnormal signal and the safety protection core determines that the vehicle running state is a static state according to the running parameter signal, the first input port of the first and-gate circuit, the first input port of the second and-gate circuit, the first input port of the third and-gate circuit, the first input port of the fourth and-gate circuit, the first input port of the fifth and-gate circuit, the first input port of the sixth and-gate circuit, the second input port of the first and-gate circuit, the second input port of the second and-gate circuit, the second input port of the third and-gate circuit, the second input port of the fourth and-gate circuit, the second input port of the fifth and-gate circuit and the second input port of the sixth and-gate circuit are all at a high level, and the output port of the first and-gate circuit, the first input port of the second and-gate circuit, the second input port of the third and-gate circuit and the second input port of the sixth and-gate circuit are all at a high level, The output ports of the second and-gate circuit, the third and-gate circuit, the fourth and-gate circuit, the fifth and-gate circuit and the sixth and-gate circuit are all high levels, the upper switching tube of the first power upper bridge arm, the upper switching tube of the second power upper bridge arm, the upper switching tube of the third power upper bridge arm, the lower switching tube of the first power lower bridge arm, the lower switching tube of the second power lower bridge arm and the lower switching tube of the third power lower bridge arm are all closed, and the power unit suspends charging to the energy storage device;

under the condition that the state diagnostic signal is an abnormal signal and the safety protection core determines that the running state of the vehicle is a running state according to the running parameter signal, the first input port of the first and gate circuit, the first input port of the second and gate circuit, the first input port of the third and gate circuit, the first input port of the fourth and gate circuit, the first input port of the fifth and gate circuit and the first input port of the sixth and gate circuit are all at a high level, the second input port of the first and gate circuit, the second input port of the second and gate circuit and the second input port of the third and gate circuit are all at a high level, and the second input port of the fourth and gate circuit, the second input port of the fifth and gate circuit and the second input port of the sixth and gate circuit are all at a low level, the output ports of the first and-gate circuit, the second and-gate circuit and the third and-gate circuit are all high levels, the output ports of the fourth and-gate circuit, the fifth and-gate circuit and the sixth and-gate circuit are all low levels, the upper switching tube of the first power upper bridge arm, the upper switching tube of the second power upper bridge arm and the upper switching tube of the third power upper bridge arm are all closed, the lower switching tube of the first power lower bridge arm, the lower switching tube of the second power lower bridge arm and the lower switching tube of the third power lower bridge arm are all opened, and the power unit charges the energy storage device.

7. The drive protection circuit of claim 6, wherein the OR gate comprises: an OR logic gate;

8. The driving protection circuit according to claim 7, wherein the first and circuit comprises: an AND logic gate;

9. A drive protection device comprising a controlled device, a functional device, and the drive protection circuit of any one of claims 1 to 8.

10. The driving protection device according to claim 9, wherein the controlled device comprises a motor and an energy storage device, the motor is respectively connected with a power unit, a collecting unit, a voltage sampling comparison circuit and a current sampling comparison circuit in the driving protection circuit, the energy storage device is connected with the power unit in the driving protection circuit, and the function device is connected with the function core in the driving protection circuit.