CN114825462A - Safety power supply control system and method - Google Patents
Safety power supply control system and method Download PDFInfo
- Publication number
- CN114825462A CN114825462A CN202210393439.XA CN202210393439A CN114825462A CN 114825462 A CN114825462 A CN 114825462A CN 202210393439 A CN202210393439 A CN 202210393439A CN 114825462 A CN114825462 A CN 114825462A
- Authority
- CN
- China
- Prior art keywords
- power supply
- module
- controller
- switch
- sensor
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
- H02J3/00—Circuit arrangements for ac mains or ac distribution networks
- H02J3/38—Arrangements for parallely feeding a single network by two or more generators, converters or transformers
- H02J3/46—Controlling of the sharing of output between the generators, converters, or transformers
- H02J3/466—Scheduling the operation of the generators, e.g. connecting or disconnecting generators to meet a given demand
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
- H02J3/00—Circuit arrangements for ac mains or ac distribution networks
- H02J3/28—Arrangements for balancing of the load in a network by storage of energy
- H02J3/32—Arrangements for balancing of the load in a network by storage of energy using batteries with converting means
- H02J3/322—Arrangements for balancing of the load in a network by storage of energy using batteries with converting means the battery being on-board an electric or hybrid vehicle, e.g. vehicle to grid arrangements [V2G], power aggregation, use of the battery for network load balancing, coordinated or cooperative battery charging
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
- H02J9/00—Circuit arrangements for emergency or stand-by power supply, e.g. for emergency lighting
- H02J9/04—Circuit arrangements for emergency or stand-by power supply, e.g. for emergency lighting in which the distribution system is disconnected from the normal source and connected to a standby source
- H02J9/06—Circuit arrangements for emergency or stand-by power supply, e.g. for emergency lighting in which the distribution system is disconnected from the normal source and connected to a standby source with automatic change-over, e.g. UPS systems
Landscapes
- Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Business, Economics & Management (AREA)
- Emergency Management (AREA)
- Charge And Discharge Circuits For Batteries Or The Like (AREA)
Abstract
The invention discloses a safe power supply control system, which at least comprises a central controller, a main power supply module, an auxiliary power supply module, a first controller and a second controller, wherein the main power supply module is connected with the first controller through the first power supply control module and is connected with the second controller through a third power supply controller; the auxiliary power supply module is connected with the first controller through the second power supply control module and connected with the second controller through the fourth power supply controller, and the first controller and the second controller are both connected with a partial load and a redundant load; the central controller controls the state of each power supply control module and controls the on-off of the switch so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load. The invention also discloses a corresponding method. The invention can improve the safety of vehicle power supply and the reliability of the vehicle.
Description
Technical Field
The invention relates to the field of power supply systems of electric automobiles, in particular to a safety power supply control system and a safety power supply control method.
Background
In recent years, with the increasing popularity of driving assistance systems, the public is concerned more and more about smart driving. Automobile intelligent driving is a future development direction, and as the intelligent driving level is higher, the human takeover rate is lower and lower in the future, and the requirement on vehicle safety is higher. There is a time difference between the failure of the intelligent driving system and the taking over of the intelligent driving system by the human driver, and the system still needs to maintain normal operation in the time period, otherwise, serious accidents occur. Reliable safety grid design to guarantee the power supply requirements of redundant loads plays a crucial role in the reliability of the vehicle.
As shown in fig. 1, a schematic diagram of a power supply control circuit of a new energy vehicle type is shown, in which a single-path power supply is distributed to various loads through a fuse box, and once a power supply loop is short-circuited or broken, a critical load may fail, which affects personal safety. With the development of intelligent driving, based on safety considerations, some key safety controllers, actuators and the like need redundancy design, which requires that redundant loads related to driving safety can still work normally after a main grid fails, such as EPS, ibooster and the like. However, as the single power supply processing mode is adopted in fig. 1, when a vehicle collides or other problems cause a short circuit or an open circuit of a power supply harness, a load loses power supply, a function fails, and the safety of the whole vehicle and the personal safety are affected.
As shown in fig. 2, a schematic diagram of a power control circuit of another existing new energy vehicle type is shown, in which a battery pack is supplied with power through a DC/DC converter, and power is distributed by using a fuse box. A redundant load B is added for the safety load B, a hard wire loop power supply is added to be connected with the redundant load, and when the VCU detects that the load B fails, a signal is sent to control the power supply loop of the redundant load B to be connected; the circuit of fig. 2, while overcoming some of the disadvantages presented in fig. 1, presents some risks:
when the DC/DC converter to the fuse box section or the storage battery to the fuse box section is in an open circuit or short circuit state, the load B and the redundant load B lose power supply, cannot work normally, and the redundancy fails;
meanwhile, the load B and the redundant load B need to interact through a network to read the state of the other side, and the on-off of the redundant power switch can be determined, so that once the network loses mutual communication, the redundant mode also has failure risk; therefore, the control circuit still has the defect of insufficient safety.
Disclosure of Invention
The technical problem to be solved by the invention is to provide a safe power supply control system and method, which adopt a main power grid and an auxiliary power grid and cooperate with a plurality of controllers to distribute power supplies, improve the reliability of the power supplies of vehicles, and can meet the requirements of higher-level (such as L4 level) intelligent driving safety.
In order to solve the above technical problems, an aspect of the present invention provides a safety power control system, which includes a central controller, and a main power module, an auxiliary power module, a first controller, and a second controller connected to the central controller, wherein the main power module is connected to the first controller through a first power control module, and is connected to the second controller through a third power controller; the auxiliary power supply module is connected with the first controller through a second power supply control module and connected with the second controller through a fourth power supply controller, and the first controller and the second controller are both connected with a partial load and a redundant load; wherein:
the main power supply module comprises a main DC/DC converter and a main storage battery, wherein the main DC/DC converter is connected with a battery pack; the auxiliary power supply module comprises an auxiliary DC/DC converter and an auxiliary storage battery, wherein the auxiliary DC/DC converter is connected with the battery pack;
the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module respectively comprise a sensor for monitoring voltage and current information and a switch for controlling on-off;
the central controller is used for controlling the on-off of each switch according to the states of each sensor in the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load.
The first power supply control module comprises a first sensor for monitoring voltage and current information of the main power supply module and a first switch for controlling on-off between the main power supply module and the first controller;
the second power supply control module comprises a second sensor for monitoring voltage and current information of the auxiliary power supply module and a second switch for controlling the on-off of the auxiliary power supply module and the first controller;
the third power supply control module comprises a third sensor for monitoring the voltage and current information of the main power supply module and a third switch for controlling the on-off between the main power supply module and the second controller;
the fourth power control module comprises a fourth sensor for monitoring voltage and current information of the auxiliary power module and a fourth switch for controlling on-off between the auxiliary power module and the second controller.
The main power supply module is connected with the first power supply control module, the third power supply control module and the central controller through fuse boxes, and the auxiliary power supply module is connected with the second power supply control module, the fourth power supply control module and the central controller through another fuse box.
One side of the first controller, which is close to the main power supply module, is connected with a first load, a first safety load and a conventional load, and one side of the first controller, which is close to the auxiliary power supply module, is connected with a first load and a second redundant safety load; one side of the second controller, which is close to the main power supply module, is connected with a second safety load, and one side of the second controller, which is close to the auxiliary power supply module, is connected with a first redundant safety load; wherein, the first load is internally provided with double power supplies and is simultaneously connected with the main power supply module and the auxiliary power supply module.
The main storage battery and the auxiliary storage battery are both connected with a storage battery sensor, and each storage battery sensor is connected with the central controller through an LIN wire.
When the first sensor, the second sensor and the third sensor monitor that the current is larger than a first preset value or the voltage is out of a preset range, determining that the monitoring states are abnormal; otherwise, determining that the monitoring state is normal.
The central controller is used for controlling the on-off of each switch in the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module by adopting the following logic:
when the monitoring states of the first sensor and the third sensor are normal, the first switch and the third switch are controlled to be switched on, and the second switch and the fourth switch are controlled to be switched off, so that the first controller and the second controller are only communicated with the main power supply module and are switched off from the auxiliary power supply module;
when the monitoring state of the first sensor is normal and the monitoring state of the third sensor is abnormal, the first switch and the second switch are controlled to be switched on, the third switch and the fourth switch are controlled to be switched off, the first controller is communicated with the main power supply module and the auxiliary power supply module, and the second controller is disconnected with the main power supply module and the auxiliary power supply module;
when the monitoring states of the first sensor and the third sensor are abnormal, the first switch and the third switch are controlled to be switched off, and the second switch and the fourth switch are controlled to be switched on, so that the first controller and the second controller are both only communicated with the auxiliary power module and are switched off from the main power module;
when the monitoring state of the first sensor is abnormal and the monitoring state of the third sensor is normal, the first switch and the second switch are controlled to be switched off, and the third switch and the fourth switch are controlled to be switched on; disconnecting the first controller from both the main power module and the auxiliary power module; and the second controller is communicated with the main power supply module and the auxiliary power supply module.
Accordingly, in another aspect of the present invention, a method for controlling a safety power supply is further provided, which is implemented by using the foregoing system, and includes the following steps:
the sensors in the first power supply control module and the third power supply control module monitor the current and voltage information of the main power supply module in real time; sensors in the second power supply control module and the fourth power supply control module monitor the current and voltage information of the auxiliary power supply module in real time;
the first controller and the second controller respectively determine the state of each sensor according to the monitored current and voltage information and send the state of each sensor and the current state information of the corresponding switch to the central controller;
and the central controller controls the on-off of each switch according to the state of each sensor so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load.
Wherein, further include:
when the current of the first sensor, the second sensor and the third sensor is larger than a first preset value or the voltage of the first sensor, the second sensor and the third sensor is out of a preset range, the monitoring state of the first sensor, the second sensor and the third sensor is determined to be abnormal; otherwise, determining that the monitoring state is normal.
The method comprises the following steps that the central controller controls the on-off of each switch according to the state of each sensor so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load, wherein the steps of controlling the on-off of each switch by the central controller according to the state of each sensor specifically comprise:
when the monitoring states of the first sensor and the third sensor are both normal, the first switch and the third switch are controlled to be switched on, and the second switch and the fourth switch are controlled to be switched off, so that the first controller and the second controller are only communicated with the main power supply module and are disconnected with the auxiliary power supply module;
when the monitoring state of the first sensor is normal and the monitoring state of the third sensor is abnormal, the first switch and the second switch are controlled to be switched on, the third switch and the fourth switch are controlled to be switched off, the first controller is communicated with the main power supply module and the auxiliary power supply module, and the second controller is disconnected with the main power supply module and the auxiliary power supply module;
when the monitoring states of the first sensor and the third sensor are abnormal, the first switch and the third switch are controlled to be switched off, and the second switch and the fourth switch are controlled to be switched on, so that the first controller and the second controller are both only communicated with the auxiliary power module and are switched off from the main power module;
when the monitoring state of the first sensor is abnormal and the monitoring state of the third sensor is normal, the first switch and the second switch are controlled to be switched off, and the third switch and the fourth switch are controlled to be switched on; disconnecting the first controller from both the main power module and the auxiliary power module; and the second controller is communicated with the main power supply module and the auxiliary power supply module.
The embodiment of the invention has the following beneficial effects:
the invention provides a safe power supply control system and a safe power supply control method. By adopting a specific power supply network architecture, when a vehicle main power supply module (namely a main power grid) fails, an auxiliary power supply module (namely an auxiliary power grid) can instantaneously take over and support power supply to a redundant load; by implementing the invention, accidents such as casualties and the like caused by partial key function failures due to abnormal open circuit or short circuit faults of the main power grid can be avoided as much as possible, thereby improving the reliability of the vehicle and meeting the requirements of higher-level (L4 level) intelligent driving safety.
Meanwhile, the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module can simultaneously realize the functions of monitoring the state of the power grid, controlling the distribution of the power grid and diagnosing a fault area of the power grid, so that the safety of a vehicle power supply can be further improved, and the maintenance and repair efficiency can be improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is within the scope of the present invention for those skilled in the art to obtain other drawings based on the drawings without inventive exercise.
FIG. 1 is a schematic diagram of a power control circuit of a new energy vehicle type;
FIG. 2 is a schematic diagram of a power control circuit of another existing new energy vehicle type;
FIG. 3 is a schematic diagram of a safety power control system according to an embodiment of the present invention;
FIG. 4 is a more detailed schematic view of FIG. 3;
fig. 5 is a main flow chart of an embodiment of a safety power control method according to the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the accompanying drawings.
Fig. 1 is a schematic structural diagram illustrating an embodiment of a safety power control system according to the present invention. Referring to fig. 2 together, in this embodiment, the system at least includes a central controller 1, and a main power module 2, an auxiliary power module 3, a first controller 4 and a second controller 5 connected to the central controller 1, where the main power module 2 is connected to the first controller 4 through a first power control module 6, and is connected to the second controller 5 through a third power controller 8; the auxiliary power supply module 3 is connected with the first controller 4 through a second power supply control module 7, is connected with the second controller 5 through a fourth power supply controller 9, and both the first controller 4 and the second controller 5 are connected with a partial load and a redundant load; wherein:
the main power supply module 2 comprises a main DC/DC converter connected with a battery pack and a main storage battery; the auxiliary power module 3 comprises an auxiliary DC/DC converter and an auxiliary storage battery which are connected with a battery pack;
the first power control module 6, the second power control module 7, the third power control module 8 and the fourth power control module 9 all include a sensor for monitoring voltage and current information and a switch for controlling on-off; specifically, the first power control module 6 includes a first sensor for monitoring voltage and current information of the main power module 2 and a first switch for controlling on/off between the main power module 2 and the first controller 4; the second power supply control module 7 comprises a second sensor for monitoring voltage and current information of the auxiliary power supply module 3 and a second switch for controlling on-off between the auxiliary power supply module 3 and the first controller; the third power control module 8 comprises a third sensor for monitoring voltage and current information of the main power module 2 and a third switch for controlling on-off between the main power module 2 and the second controller 5; the fourth power supply control module 9 comprises a fourth sensor for monitoring voltage and current information of the auxiliary power supply module 3 and a fourth switch for controlling on-off between the auxiliary power supply module 3 and the second controller 5; in a specific example, each of the switches described above may be, for example, a switching transistor;
more specifically, the main power module 2 is connected to the first power control module 6, the third power control module 8 and the central controller 1 through a fuse box (PFB), and the auxiliary power module 3 is connected to the second power control module 7, the fourth power control module 9 and the central controller 1 through another fuse box (PFB).
The central controller 1 is configured to control on/off of each switch according to states of each sensor in the first power control module 6, the second power control module 7, the third power control module 8, and the fourth power control module 9, so as to control the main power module or the auxiliary power module to supply power to the corresponding load and the redundant load.
More specifically, the first controller 4 is connected to a first load (load a), a first safety load (load B), and a normal load (load D) on a side close to the main power supply module 2, and is connected to a first load (load a), and a second redundant safety load (redundant load C) on a side close to the auxiliary power supply module 2; the side of the second controller 5 close to the main power supply module 2 is connected with a second safety load (load C), and the side close to the auxiliary power supply module 3 is connected with a first redundant safety load (redundant load B); wherein, a dual power supply circuit is arranged in the first load (load A) and is connected with the main power supply module 2 and the auxiliary power supply module 3.
The main storage battery and the auxiliary storage battery are both connected with a storage battery sensor, and each storage battery sensor is connected with the central controller 1 through an LIN wire. The two storage battery sensors respectively monitor the SOC values of the main storage battery and the auxiliary storage battery and feed back the SOC values to the network through LIN, and for example, the central controller can determine whether the storage batteries need to be charged according to the monitored SOC values of the main storage battery and the auxiliary storage battery; in one example, when the SOC values of the main battery and the auxiliary battery are detected to be less than a preset value (for example, the preset value is set to 75%), the charging operation of the corresponding batteries is required.
In the invention, the battery pack forms a main power grid through a main DC/DC converter, forms an auxiliary power grid through an auxiliary DC/DC converter, and is respectively connected with a PFB and a storage battery to supply power to a load and the storage battery;
in the invention, a first power supply control module 6 and a second power supply control module 7 are responsible for monitoring, controlling and distributing the main and auxiliary network power supplies of a first controller 4; the third power supply control module 8 and the fourth power supply control module 9 are responsible for monitoring, controlling and distributing the main and auxiliary network power supplies of the second controller 5.
In the invention, when the first sensor, the second sensor, the third sensor and the fourth sensor monitor that the current is greater than a first preset value or the voltage is out of a preset range, for example, in one example, the first preset value is 260A, and the preset range is 8-17V; therefore, in some embodiments, if the instantaneous large current exceeds 260A, or the voltage is less than 8V or the voltage exceeds 17V, it is determined that the monitored state of the main power module (main DC/DC converter) or the auxiliary power module (auxiliary DC/DC converter) is abnormal (NOK); otherwise, determining that the monitoring state is normal (OK).
The central controller 1 is configured to control on/off of each switch in the first power control module 6, the second power control module 7, the third power control module 8, and the fourth power control module 9 by using the following logic:
when the monitoring states of the first sensor and the third sensor are both normal (OK), the main network (the main power module) is indicated to have no problem, the first switch and the third switch are controlled to be switched on, and the second switch and the fourth switch are controlled to be switched off, so that the first controller and the second controller are only communicated with the main power module and are switched off from the auxiliary power module;
when the monitoring state of the first sensor is normal (OK) and the monitoring state of the third sensor is abnormal (NOK), the fact that the main network is accessed between the main network PFB and the first controller is free of problems is shown, and when the PFB is partially opened or short-circuited to the second controller, the first switch and the second switch are controlled to be switched on, the third switch and the fourth switch are controlled to be switched off, so that the first controller is communicated with the main power supply module and the auxiliary power supply module, and the second controller is disconnected with the main power supply module and the auxiliary power supply module;
when the monitoring states of the first sensor and the third sensor are both abnormal (NOK), indicating that the whole main network is short-circuited or broken, controlling the first switch and the third switch to be switched off, and controlling the second switch and the fourth switch to be switched on, so that the first controller and the second controller are both only communicated with the auxiliary power module and are switched off from the main power module;
when the monitoring state of the first sensor is abnormal (NOK) and the monitoring state of the third sensor is normal (OK), the situation that a part of the main network PFB is open or short-circuited to the first controller is indicated, and the main network access between the PFB and the second controller is not problematic; the first switch and the second switch are controlled to be switched off, and the third switch and the fourth switch are controlled to be switched on; disconnecting the first controller from both the main power module and the auxiliary power module; and the second controller is communicated with the main power supply module and the auxiliary power supply module.
In summary, in the embodiment of the present invention, when the vehicle state is normal, the main grid provides the load for supplying power, when the vehicle line is abnormal, the power control module detects the grid state, and if the main grid is determined to be failed, the other secondary grid provides the redundant load for supplying power. For example, when a vehicle is in an automatic driving state, when the main power grid fails, the time for people to take over is short, the auxiliary power grid provides power for the redundant load, and the vehicle safety component can normally work under the condition that the main power grid fails; the reliability of the vehicle is improved so as to meet the requirement of intelligent driving safety of the L4 level. Meanwhile, each power supply control module can feed back the state of the power grid in real time so as to realize the auxiliary function of power grid fault diagnosis; therefore, a safety power grid architecture capable of improving intelligent driving safety can be provided.
As shown in fig. 5, a main flow diagram of an embodiment of a secure power control method according to the present invention is provided. In the present embodiment, it is implemented by the system described in the foregoing fig. 3 to fig. 4, and more specifically, the method includes the following steps:
step S10, the sensors in the first power control module and the third power control module monitor the current and voltage information of the main power module in real time; sensors in the second power supply control module and the fourth power supply control module monitor the current and voltage information of the auxiliary power supply module in real time;
step S11, the first controller and the second controller respectively determine the state of each sensor according to the monitored current and voltage information, and send the state of each sensor and the current state information of the corresponding switch to the central controller;
and step S12, the central controller controls the on-off of each switch according to the state of each sensor so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load.
In an embodiment of the present invention, further comprising:
when the first sensor, the second sensor and the third sensor monitor that the current is larger than a first preset value or the voltage is out of a preset range, for example, in one example, the first preset value is 260A, and the preset range is 8-17V; therefore, in some embodiments, if the instantaneous large current exceeds 260A, or the voltage is less than 8V or the voltage exceeds 17V, the monitoring state is determined to be abnormal; otherwise, determining that the monitoring state is normal.
In a specific example, the step S12 specifically includes:
when the monitoring states of the first sensor and the third sensor are normal, the first switch and the third switch are controlled to be switched on, and the second switch and the fourth switch are controlled to be switched off, so that the first controller and the second controller are only communicated with the main power supply module and are switched off from the auxiliary power supply module;
when the monitoring state of the first sensor is normal and the monitoring state of the third sensor is abnormal, the first switch and the second switch are controlled to be switched on, the third switch and the fourth switch are controlled to be switched off, the first controller is communicated with the main power supply module and the auxiliary power supply module, and the second controller is disconnected with the main power supply module and the auxiliary power supply module;
when the monitoring states of the first sensor and the third sensor are abnormal, the first switch and the third switch are controlled to be switched off, and the second switch and the fourth switch are controlled to be switched on, so that the first controller and the second controller are only communicated with the auxiliary power module and are switched off from the main power module;
when the monitoring state of the first sensor is abnormal and the monitoring state of the third sensor is normal, the first switch and the second switch are controlled to be switched off, and the third switch and the fourth switch are controlled to be switched on; disconnecting the first controller from both the main power module and the auxiliary power module; and the second controller is communicated with the main power supply module and the auxiliary power supply module.
Furthermore, a battery sensor is connected to each of the main battery and the auxiliary battery, and each battery sensor is connected to the central controller 1 through a LIN line. The two battery sensors respectively monitor the SOC values of the main battery and the auxiliary battery and feed back the SOC values to the network through LIN, and for example, the central controller can determine whether the batteries need to be charged according to the monitored SOC values of the main battery and the auxiliary battery.
The embodiment of the invention has the following beneficial effects:
the invention provides a safe power supply control system and a safe power supply control method. By adopting a specific power supply network architecture, when a vehicle main power supply module (namely a main power grid) fails, an auxiliary power supply module (namely an auxiliary power grid) can instantaneously take over and support power supply to a redundant load; by implementing the invention, accidents such as casualties and the like caused by partial key function failures due to abnormal open circuit or short circuit faults of the main power grid can be avoided as much as possible, thereby improving the reliability of the vehicle and meeting the requirements of higher-level (L4 level) intelligent driving safety.
Meanwhile, the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module can simultaneously realize the functions of monitoring the state of the power grid, controlling the distribution of the power grid and diagnosing a fault area of the power grid, so that the safety of a vehicle power supply can be further improved, and the maintenance and repair efficiency can be improved.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While the invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not to be limited to the disclosed embodiment, but on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
Claims (10)
1. A safety power supply control system is characterized by at least comprising a central controller, a main power supply module, an auxiliary power supply module, a first controller and a second controller, wherein the main power supply module, the auxiliary power supply module, the first controller and the second controller are connected with the central controller; the auxiliary power supply module is connected with the first controller through a second power supply control module and connected with the second controller through a fourth power supply controller, and the first controller and the second controller are both connected with a partial load and a redundant load; wherein:
the main power supply module comprises a main DC/DC converter and a main storage battery, wherein the main DC/DC converter is connected with a battery pack; the auxiliary power supply module comprises an auxiliary DC/DC converter and an auxiliary storage battery, wherein the auxiliary DC/DC converter is connected with the battery pack;
the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module respectively comprise a sensor for monitoring voltage and current information and a switch for controlling on-off;
the central controller is used for controlling the on-off of each switch according to the states of each sensor in the first power supply control module, the second power supply control module, the third power supply control module and the fourth power supply control module so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load.
2. The method of claim 1, wherein:
the first power supply control module comprises a first sensor for monitoring voltage and current information of the main power supply module and a first switch for controlling the on-off of the main power supply module and the first controller;
the second power supply control module comprises a second sensor for monitoring voltage and current information of the auxiliary power supply module and a second switch for controlling the on-off of the auxiliary power supply module and the first controller;
the third power supply control module comprises a third sensor for monitoring the voltage and current information of the main power supply module and a third switch for controlling the on-off between the main power supply module and the second controller;
the fourth power control module comprises a fourth sensor for monitoring voltage and current information of the auxiliary power module and a fourth switch for controlling on-off between the auxiliary power module and the second controller.
3. The system of claim 2, wherein the primary power module is connected to the first power control module, the third power control module, and the central controller via a fuse box, and the secondary power module is connected to the second power control module, the fourth power control module, and the central controller via another fuse box.
4. The system of claim 3, wherein the first controller is connected with a first load, a first safety load and a normal load at a side close to the main power supply module, and is connected with a first load and a second redundant safety load at a side close to the auxiliary power supply module; one side of the second controller, which is close to the main power supply module, is connected with a second safety load, and one side of the second controller, which is close to the auxiliary power supply module, is connected with a first redundant safety load; wherein, the first load is internally provided with double power supplies and is simultaneously connected with the main power supply module and the auxiliary power supply module.
5. The system as claimed in claim 4, wherein a battery sensor is connected to each of said main battery and said auxiliary battery, each of said battery sensors being connected to said central controller by a LIN line.
6. The system of claim 5, wherein the first sensor, the second sensor, and the third sensor determine that the monitoring status is abnormal when the monitored current is greater than a first preset value or the voltage is outside a preset range; otherwise, determining that the monitoring state is normal.
7. The system of claim 6, wherein the central controller is configured to control the switching of the switches of the first power control module, the second power control module, the third power control module, and the fourth power control module using the following logic:
when the monitoring states of the first sensor and the third sensor are normal, the first switch and the third switch are controlled to be switched on, and the second switch and the fourth switch are controlled to be switched off, so that the first controller and the second controller are only communicated with the main power supply module and are switched off from the auxiliary power supply module;
when the monitoring state of the first sensor is normal and the monitoring state of the third sensor is abnormal, the first switch and the second switch are controlled to be switched on, the third switch and the fourth switch are controlled to be switched off, the first controller is communicated with the main power supply module and the auxiliary power supply module, and the second controller is disconnected with the main power supply module and the auxiliary power supply module;
when the monitoring states of the first sensor and the third sensor are abnormal, the first switch and the third switch are controlled to be switched off, and the second switch and the fourth switch are controlled to be switched on, so that the first controller and the second controller are both only communicated with the auxiliary power module and are switched off from the main power module;
when the monitoring state of the first sensor is abnormal and the monitoring state of the third sensor is normal, the first switch and the second switch are controlled to be switched off, and the third switch and the fourth switch are controlled to be switched on; disconnecting the first controller from both the main power module and the auxiliary power module; and the second controller is communicated with the main power supply module and the auxiliary power supply module.
8. A secure power control method implemented with the system of any one of claims 1 to 7, comprising the steps of:
sensors in the first power supply control module and the third power supply control module monitor current and voltage information of the main power supply module in real time; sensors in the second power supply control module and the fourth power supply control module monitor the current and voltage information of the auxiliary power supply module in real time;
the first controller and the second controller respectively determine the state of each sensor according to the monitored current and voltage information and send the state of each sensor and the current state information of the corresponding switch to the central controller;
and the central controller controls the on-off of each switch according to the state of each sensor so as to control the main power supply module or the auxiliary power supply module to supply power to the corresponding load and the redundant load.
9. The method of claim 8, further comprising:
when the first sensor, the second sensor and the third sensor monitor that the current is larger than a first preset value or the voltage is out of a preset range, determining that the monitoring states are abnormal; otherwise, determining that the monitoring state is normal.
10. The method according to claim 9, wherein the step of controlling the on/off of each switch by the central controller according to the state of each sensor to control the main power module or the auxiliary power module to supply power to the corresponding load and the redundant load specifically comprises:
when the monitoring states of the first sensor and the third sensor are normal, the first switch and the third switch are controlled to be switched on, and the second switch and the fourth switch are controlled to be switched off, so that the first controller and the second controller are only communicated with the main power supply module and are switched off from the auxiliary power supply module;
when the monitoring state of the first sensor is normal and the monitoring state of the third sensor is abnormal, the first switch and the second switch are controlled to be switched on, the third switch and the fourth switch are controlled to be switched off, the first controller is communicated with the main power supply module and the auxiliary power supply module, and the second controller is disconnected with the main power supply module and the auxiliary power supply module;
when the monitoring states of the first sensor and the third sensor are abnormal, the first switch and the third switch are controlled to be switched off, and the second switch and the fourth switch are controlled to be switched on, so that the first controller and the second controller are both only communicated with the auxiliary power module and are switched off from the main power module;
when the monitoring state of the first sensor is abnormal and the monitoring state of the third sensor is normal, the first switch and the second switch are controlled to be switched off, and the third switch and the fourth switch are controlled to be switched on; disconnecting the first controller from both the main power module and the auxiliary power module; and the second controller is communicated with the main power supply module and the auxiliary power supply module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210393439.XA CN114825462B (en) | 2022-04-15 | 2022-04-15 | Safety power supply control system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210393439.XA CN114825462B (en) | 2022-04-15 | 2022-04-15 | Safety power supply control system and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114825462A true CN114825462A (en) | 2022-07-29 |
| CN114825462B CN114825462B (en) | 2023-03-24 |
Family
ID=82536595
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210393439.XA Active CN114825462B (en) | 2022-04-15 | 2022-04-15 | Safety power supply control system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114825462B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115459248A (en) * | 2022-09-09 | 2022-12-09 | 广州汽车集团股份有限公司 | Power distribution circuit, power distribution method and electric equipment |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112046427A (en) * | 2020-09-11 | 2020-12-08 | 中国第一汽车股份有限公司 | Vehicle power supply system and power supply control method |
| CN112078366A (en) * | 2019-06-12 | 2020-12-15 | 广州汽车集团股份有限公司 | Electric vehicle and dual-power control system thereof |
| CN112260394A (en) * | 2020-10-26 | 2021-01-22 | 东风商用车有限公司 | Redundant system of automobile power supply loop |
| US20210066956A1 (en) * | 2019-08-27 | 2021-03-04 | Yazaki Corporation | Vehicle power supply system |
| CN112810692A (en) * | 2020-12-31 | 2021-05-18 | 北京新能源汽车技术创新中心有限公司 | Redundant power supply based on automobile steering system, power supply topological structure and power supply method |
| CN113691010A (en) * | 2021-08-30 | 2021-11-23 | 东风商用车有限公司 | Redundant power supply system and control method |
| US20210402939A1 (en) * | 2019-03-14 | 2021-12-30 | Denso Corporation | Power supply system for mobile object |
| CN216134290U (en) * | 2021-08-20 | 2022-03-25 | 北京车和家信息技术有限公司 | Low-voltage power supply network protection circuit and vehicle |
-
2022
- 2022-04-15 CN CN202210393439.XA patent/CN114825462B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20210402939A1 (en) * | 2019-03-14 | 2021-12-30 | Denso Corporation | Power supply system for mobile object |
| CN112078366A (en) * | 2019-06-12 | 2020-12-15 | 广州汽车集团股份有限公司 | Electric vehicle and dual-power control system thereof |
| US20210066956A1 (en) * | 2019-08-27 | 2021-03-04 | Yazaki Corporation | Vehicle power supply system |
| CN112046427A (en) * | 2020-09-11 | 2020-12-08 | 中国第一汽车股份有限公司 | Vehicle power supply system and power supply control method |
| CN112260394A (en) * | 2020-10-26 | 2021-01-22 | 东风商用车有限公司 | Redundant system of automobile power supply loop |
| CN112810692A (en) * | 2020-12-31 | 2021-05-18 | 北京新能源汽车技术创新中心有限公司 | Redundant power supply based on automobile steering system, power supply topological structure and power supply method |
| CN216134290U (en) * | 2021-08-20 | 2022-03-25 | 北京车和家信息技术有限公司 | Low-voltage power supply network protection circuit and vehicle |
| CN113691010A (en) * | 2021-08-30 | 2021-11-23 | 东风商用车有限公司 | Redundant power supply system and control method |
Non-Patent Citations (1)
| Title |
|---|
| 张戟等: "整车控制器功能安全设计和研究", 《佳木斯大学学报(自然科学版)》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115459248A (en) * | 2022-09-09 | 2022-12-09 | 广州汽车集团股份有限公司 | Power distribution circuit, power distribution method and electric equipment |
| CN115459248B (en) * | 2022-09-09 | 2024-03-29 | 广州汽车集团股份有限公司 | Power distribution circuit, power distribution method and electric equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114825462B (en) | 2023-03-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP6527906B2 (en) | Power distribution system | |
| US7061138B2 (en) | Power supply system with two electrical energy stores | |
| JP6370786B2 (en) | Method and apparatus for management of an electrical energy storage assembly for powering an electric motor vehicle | |
| CN111204222A (en) | Redundant battery management system, redundant management method and power-on and power-off management method | |
| CN112751408A (en) | Power supply circuit and power supply method | |
| CN114825462B (en) | Safety power supply control system and method | |
| US20200341037A1 (en) | Electrical assembly and method | |
| CN216904359U (en) | Intelligent driving power management system and vehicle | |
| CN112947043A (en) | Vehicle redundancy control system, control method thereof and vehicle | |
| US11117532B2 (en) | Electrical assembly and method | |
| JP2005210892A (en) | ENERGY-SUPPLYING DEVICE OF HYBRID VEHICLE WITH AT LEAST ONE x-BY-WIRE SYSTEM | |
| CN214450872U (en) | Redundant braking system, automatic driving system and vehicle | |
| CN217022419U (en) | Autonomous vehicle redundancy architecture and autonomous vehicle | |
| CN114466762A (en) | Control device for vehicle | |
| CN114290906A (en) | High-voltage control device, control method and aircraft | |
| CN114940183B (en) | Distributed power backup control system capable of achieving automatic driving and vehicle | |
| CN116141965A (en) | Low-voltage power supply device and method for electric vehicle and electric vehicle | |
| CN114475489A (en) | Power supply system of automobile, automobile and control method of power supply system of automobile | |
| CN113659617A (en) | Auxiliary power supply management system and method and railway vehicle | |
| JPH10285799A (en) | Power supply equipment for vehicle | |
| CN219499028U (en) | Redundant low-voltage power supply device and vehicle | |
| CN112714711B (en) | System and method for providing redundant power | |
| CN113428015A (en) | Motor control system and method and electric vehicle | |
| CN215681907U (en) | Vehicle power supply redundancy system and vehicle | |
| CN216659876U (en) | Power supply system for rail vehicle |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |