CN215681907U - Vehicle power supply redundancy system and vehicle - Google Patents

Abstract

The present disclosure relates to a vehicle power supply redundancy system and a vehicle, the vehicle power supply redundancy system comprises a power supply, at least one first functional unit and at least one second functional unit, wherein the power consumption of the first functional unit is larger than that of the second functional unit; the first functional unit is correspondingly provided with a first voltage reduction circuit, a second voltage reduction circuit and a first selection circuit, and the first voltage reduction circuit and the second voltage reduction circuit are alternately connected to the first functional unit through the first selection circuit; the second functional unit is correspondingly provided with a third voltage reduction circuit and a second selection circuit, the first voltage reduction circuit and/or the second voltage reduction circuit are/is connected into the second selection circuit, and the voltage reduction circuits connected into the second selection circuit are alternately connected into the second functional unit through the second voltage reduction circuit. Through the technical scheme disclosed by the invention, a power supply redundancy scheme with lower cost is realized.

Description

Vehicle power supply redundancy system and vehicle

Technical Field

The present disclosure relates to the field of vehicle technologies, and in particular, to a vehicle power supply redundancy system and a vehicle.

Background

For an Automotive ECU (Electronic Control Unit) with a high ASIL (automatic Safety integrity Level) requirement, a redundancy design is usually added to a place where a system or a device completes a task and plays a key role, for example, a redundancy design is added to a power supply system, during product development, specifically, a set of functional channels with the same functions are added to ensure that the system or the device can still normally work when individual devices fail, so that the failure probability of the system or the device is reduced, and the working reliability of the system is improved.

However, in the conventional power redundancy scheme, each functional unit needs to adopt multiple power supply branches for mutual backup, which results in a significant increase in the cost of the power supply system and brings a great cost pressure to the whole car factory.

SUMMERY OF THE UTILITY MODEL

In order to solve the technical problem or at least partially solve the technical problem, the present disclosure provides a vehicle power redundancy system and a vehicle, which implement a lower cost power redundancy scheme.

In a first aspect, an embodiment of the present disclosure provides a vehicle power supply redundancy system, including:

the power supply comprises a power supply, at least one first functional unit and at least one second functional unit, wherein the power consumption of the first functional unit is larger than that of the second functional unit;

the first functional unit is correspondingly provided with a first voltage reduction circuit, a second voltage reduction circuit and a first selection circuit, the first voltage reduction circuit and the second voltage reduction circuit are electrically connected with the power supply, the first selection circuit is respectively electrically connected with the first voltage reduction circuit, the second voltage reduction circuit and the first functional unit, and the first voltage reduction circuit and the second voltage reduction circuit are alternately connected into the first functional unit through the first selection circuit;

the second functional unit is correspondingly provided with a third voltage reduction circuit and a second selection circuit, the third voltage reduction circuit is electrically connected with the power supply, the second selection circuit is respectively electrically connected with the third voltage reduction circuit and the second functional unit, the first voltage reduction circuit and/or the second voltage reduction circuit are/is connected into the second selection circuit, and the voltage reduction circuit connected into the second selection circuit is alternately connected into the second functional unit through the second voltage reduction circuit.

Optionally, the first functional unit includes a plurality of first functional unit sub-modules, and the first functional unit sub-modules are backed up with each other; and/or the presence of a gas in the gas,

the second functional unit comprises a plurality of second functional unit sub-modules, and the second functional unit sub-modules are backup to each other.

Optionally, the second functional unit is electrically connected to the output terminal of the power supply, the enable control terminal of the first voltage-reducing circuit, the enable control terminal of the second voltage-reducing circuit, and the enable control terminal of the third voltage-reducing circuit, respectively, and the second functional unit monitors the output voltage of the power supply;

the second functional unit controls the first voltage reduction circuit, the second voltage reduction circuit and the third voltage reduction circuit to be turned off or turned on according to the output voltage of the power supply, and controls output power supply voltage abnormity alarm information according to the output voltage of the power supply.

Optionally, the second functional unit is electrically connected to the output terminal of the first voltage-reducing circuit, the enable control terminal of the first voltage-reducing circuit, the output terminal of the second voltage-reducing circuit, the enable control terminal of the second voltage-reducing circuit, the output terminal of the third voltage-reducing circuit, and the enable control terminal of the third voltage-reducing circuit, respectively.

Optionally, the second functional unit monitors the output voltage of the first voltage-reducing circuit, and the second functional unit controls the first voltage-reducing circuit to be turned on or off according to the output voltage of the first voltage-reducing circuit, and controls to output first voltage-reducing circuit abnormality alarm information according to the output voltage of the first voltage-reducing circuit;

the second functional unit monitors the output voltage of the second voltage reduction circuit, controls the second voltage reduction circuit to be switched on or switched off according to the output voltage of the second voltage reduction circuit, and controls and outputs second voltage reduction circuit abnormity alarm information according to the output voltage of the second voltage reduction circuit;

the second functional unit monitors the output voltage of the third voltage reduction circuit, controls the third voltage reduction circuit to be switched on or switched off according to the output voltage of the third voltage reduction circuit, and controls and outputs third voltage reduction circuit abnormality alarm information according to the output voltage of the third voltage reduction circuit.

Optionally, the second functional unit monitors the output current of the first voltage-reducing circuit, and the second functional unit controls the first voltage-reducing circuit to be turned on or off according to the output current of the first voltage-reducing circuit, and controls output load abnormality alarm information according to the output current of the first voltage-reducing circuit;

the second functional unit monitors the output current of the second voltage reduction circuit, controls the second voltage reduction circuit to be switched on or switched off according to the output current of the second voltage reduction circuit, and controls output load abnormity alarm information according to the output current of the second voltage reduction circuit;

the second functional unit monitors the output current of the third voltage reduction circuit, controls the third voltage reduction circuit to be switched on or switched off according to the output current of the third voltage reduction circuit, and controls output load abnormity alarm information according to the output current of the third voltage reduction circuit.

Optionally, the second functional unit is electrically connected to the output end of the first voltage-reducing circuit, the output end of the second voltage-reducing circuit, and the selection control end of the first selection circuit, and the second functional unit is switched to the voltage-reducing circuit of the first functional unit through the first selection circuit according to the output signal of the first voltage-reducing circuit and the output signal of the second voltage-reducing circuit.

Optionally, the first functional unit is an environment sensing unit, and the second functional unit is a vehicle control unit.

Optionally, the first functional unit includes a first environment-aware processor, a second environment-aware processor, a first power management circuit and a second power management circuit, the first power management circuit is electrically connected to the first selection circuit and the first environment-aware processor, the second power management circuit is electrically connected to the first selection circuit and the second environment-aware processor, the first power management circuit controls a power-on timing sequence of the first environment-aware processor, and the second power management circuit controls a power-on timing sequence of the second environment-aware processor;

the second functional unit comprises a vehicle control processor and a third power management circuit, the third power management circuit is respectively electrically connected with the second selection circuit and the vehicle control processor, and the third power management circuit controls the power-on time sequence of the vehicle control processor.

In a second aspect, embodiments of the present disclosure also provide a vehicle including the vehicle power redundancy system according to the first aspect.

Compared with the prior art, the technical scheme provided by the embodiment of the disclosure has the following advantages:

the vehicle power supply redundancy system comprises a power supply, at least one first functional unit and at least one second functional unit, wherein the power consumption of the first functional unit is larger than that of the second functional unit, the first functional unit is correspondingly provided with a first voltage reduction circuit, a second voltage reduction circuit and a first selection circuit, the first voltage reduction circuit and the second voltage reduction circuit are electrically connected with the power supply, the first selection circuit is respectively and electrically connected with the first voltage reduction circuit, the second voltage reduction circuit and the first functional unit, the first voltage reduction circuit and the second voltage reduction circuit are alternately connected into the first functional unit through the first selection circuit, the second functional unit is correspondingly provided with a third voltage reduction circuit and a second selection circuit, the third voltage reduction circuit is electrically connected with the power supply, the second selection circuit is respectively and electrically connected with the third voltage reduction circuit and the second functional unit, the first voltage reduction circuit and/or the second voltage reduction circuit are connected into the second selection circuit, the voltage reduction circuit connected to the second selection circuit is alternately connected to the second functional unit through the second voltage reduction circuit. Therefore, on the basis of ensuring the normal work of each functional unit, the voltage reduction circuits corresponding to different functional units are selected and operated, the number of the voltage reduction circuits in the vehicle power supply redundancy system is effectively reduced, and a power supply redundancy scheme with lower cost is realized.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.

In order to more clearly illustrate the embodiments or technical solutions in the prior art of the present disclosure, the drawings used in the description of the embodiments or prior art will be briefly described below, and it is obvious for those skilled in the art that other drawings can be obtained according to the drawings without inventive exercise.

FIG. 1 is a schematic diagram of a vehicle power redundancy system according to an embodiment of the present disclosure;

FIG. 2 is a schematic diagram of a vehicle power redundancy system according to the related art;

FIG. 3 is a schematic diagram of another embodiment of a vehicle power redundancy system;

fig. 4 is a schematic flowchart of a method for protecting a safety mechanism of a vehicle power redundancy system according to an embodiment of the present disclosure.

Detailed Description

In order that the above objects, features and advantages of the present disclosure may be more clearly understood, aspects of the present disclosure will be further described below. It should be noted that the embodiments and features of the embodiments of the present disclosure may be combined with each other without conflict.

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present disclosure, but the present disclosure may be practiced in other ways than those described herein; it is to be understood that the embodiments disclosed in the specification are only a few embodiments of the present disclosure, and not all embodiments.

Fig. 1 is a schematic structural diagram of a vehicle power supply redundancy system according to an embodiment of the present disclosure. As shown in fig. 1, the vehicle power supply redundancy system includes a power supply 10, at least one first functional unit 1, and at least one second functional unit 2, and the power consumption of the first functional unit 1 is greater than the power consumption of the second functional unit 2. Exemplarily, fig. 1 shows one first functional unit 1 and one second functional unit 2, the power consumption of the first functional unit 1 being larger than the power consumption of the second functional unit 2.

The first functional unit 1 is correspondingly provided with a first voltage reduction circuit 3, a second voltage reduction circuit 4 and a first selection circuit 5, the first voltage reduction circuit 3 and the second voltage reduction circuit 4 are electrically connected with a power supply 10, the first selection circuit 5 is respectively electrically connected with the first voltage reduction circuit 3, the second voltage reduction circuit 4 and the first functional unit 1, and the first voltage reduction circuit 3 and the second voltage reduction circuit 4 are alternately connected into the first functional unit 1 through the first selection circuit 5. Illustratively, the power source 10 may be a 12V battery in a vehicle, the first voltage-reducing circuit 3 and the second voltage-reducing circuit 4 perform voltage-reducing processing on the output voltage of the power source 10, the first selection circuit 5 may implement or operation logic to perform a function of selecting one of the first voltage-reducing circuit 3 and the second voltage-reducing circuit 4, and the selected voltage-reducing circuit outputs a voltage-reduced power source signal to the first functional unit 1 to supply the first functional unit 1 to operate normally.

The second functional unit 2 is correspondingly provided with a third voltage reduction circuit 6 and a second selection circuit 7, the third voltage reduction circuit 6 is electrically connected with a power supply 10, the second selection circuit 7 is respectively electrically connected with the third voltage reduction circuit 6 and the second functional unit 2, the first voltage reduction circuit 3 and/or the second voltage reduction circuit 4 are/is connected into the second selection circuit 7, and the voltage reduction circuits connected into the second selection circuit 7 are alternately connected into the second functional unit 2 through the second voltage reduction circuit 4. Specifically, the third voltage-reducing circuit 6 reduces the output voltage of the power supply 10, and fig. 1 exemplarily sets that both the first voltage-reducing circuit 3 and the second voltage-reducing circuit 4 are connected to the second selection circuit 7, and may also set that the first voltage-reducing circuit 3 is connected to the second selection circuit 7 alone, or set that the second voltage-reducing circuit 4 is connected to the second selection circuit 7 alone. Taking the first voltage-reducing circuit 3 and the second voltage-reducing circuit 4 both connected to the second selection circuit 7 as an example, the second selection circuit 7 can implement or logic operation to implement the function of selecting one from three to the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6, and the selected voltage-reducing circuit outputs the power signal after voltage-reducing processing to the second functional unit 2 so as to supply the second functional unit 2 to work normally.

The power consumption of the first functional unit 1 is greater than that of the second functional unit 2, and it can be set that the output capacity of the power supply 10 in the vehicle power supply redundant system is greater than the maximum rated value required by the first functional unit 1, that is, the power supply of the first functional unit 1 has a margin, and the margin is taken as the redundant power supply of the second functional unit 2 with relatively low power consumption and is subjected to or operation with the third voltage reduction circuit 6 corresponding to the second functional unit 2 through the second selection circuit 7, so that the second functional unit 2 has three-way power supply redundancy, that is, corresponding to the first functional unit 1, after one of the first voltage reduction circuit 3 and the second voltage reduction circuit 4 has a problem, the other voltage reduction circuit can normally supply the first functional unit 1 for operation, and the first voltage reduction circuit 3 and the second voltage reduction circuit 4 are backup for the first functional unit 1. Corresponding to the second functional unit 2, after one or two of the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6 have a problem, the rest of the voltage-reducing circuits can be normally supplied to the second functional unit 2 to work, and the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6 are mutually backup for the second functional unit 2.

Fig. 2 is a schematic diagram of a vehicle power supply redundancy system adopted in the related art. As shown in fig. 2, in the conventional power redundancy scheme, each functional unit needs to use multiple power supply branches for backup, which results in a significant increase in the cost of the power system and a large cost pressure on the whole car factory. In the embodiment of the present disclosure, the first voltage-reducing circuit 3 and/or the second voltage-reducing circuit 4 corresponding to the first functional unit 1 and the third voltage-reducing circuit 6 corresponding to the second functional unit 2 are used for performing an or operation, so that the second functional unit 2 has two or three power supply redundancies, as long as one voltage-reducing circuit normally works, the power supply of the second functional unit 2 is not affected, on the basis of reducing the cost of one power supply branch, safer redundant power supply in a vehicle is realized, that is, on the basis of ensuring the normal work of each functional unit, the voltage-reducing circuits corresponding to different functional units are selected for operation, the number of voltage-reducing circuits in a vehicle power supply redundancy system is effectively reduced, and a power supply redundancy scheme with lower cost is realized.

It should be noted that fig. 1 only exemplarily shows that the vehicle power redundancy system includes one first functional unit 1 and one second functional unit 2, and the number of the first functional unit 1 and the second functional unit 2 in the vehicle power redundancy system is not limited, and the vehicle power redundancy system may also include a plurality of first functional units 1 or a plurality of second functional units 2, and the voltage-reducing circuit corresponding to the first functional unit 1 may be configured to provide redundant power branches for the plurality of second functional units 2 at the same time, which is not specifically limited in the embodiment of the present disclosure.

Optionally, as shown in fig. 1, the first functional unit 1 may include a plurality of first functional unit sub-modules 11, and the first functional unit sub-modules 11 are backed up with each other; and/or, the second functional unit 2 includes a plurality of second functional unit sub-modules 21, and the second functional unit sub-modules 21 are backup to each other, that is, the first functional unit 1 may be set to include a plurality of first functional unit sub-modules 11 and the second functional unit 2 includes a plurality of second functional unit sub-modules 21, the first functional unit 1 may also be set to include a plurality of first functional unit sub-modules 11 and the second functional unit 2 includes one second functional unit sub-module 21, and the second functional unit 2 may also be set to include a plurality of second functional unit sub-modules 21 and the first functional unit 1 includes one first functional unit sub-module 11.

Specifically, for the first functional unit 1, the first functional unit sub-modules 11 have the same function, any first functional unit sub-module 11 in the first functional unit 1 has a problem, and the remaining first functional unit sub-modules 11 can support the first functional unit 1 to realize the normal function thereof, that is, the first functional unit sub-modules 11 are mutually backed up. Similarly, for the second functional unit 2, the second functional unit sub-modules 21 have the same function, and any one of the second functional unit sub-modules 21 in the second functional unit 2 has a problem, and the rest of the second functional unit sub-modules 21 can support the second functional unit 2 to realize the normal function thereof, i.e. the second functional unit sub-modules 21 are backup to each other, thereby effectively improving the safety level of the vehicle power supply redundant system and avoiding the functional failure of the functional unit caused by the failure of the devices in the functional unit.

It should be noted that, in the implementation rate of the present disclosure, the number of the first functional unit sub-modules 11 included in the first functional unit 1 and the number of the second functional unit sub-modules 21 included in the second functional unit 2 are not specifically limited. It should be further noted that the first functional unit 1 corresponds to two voltage-reducing circuits, namely, the first voltage-reducing circuit 3 and the second voltage-reducing circuit 4, and the first functional unit 1 may include more than two first functional unit sub-modules 11, and in the embodiment of the present disclosure, the power supply correspondence between the first voltage-reducing circuit 3 and the second voltage-reducing circuit 4 and the first functional unit sub-modules 11 is not specifically limited, so that it is only required to ensure that each first functional unit sub-module 11 has a corresponding voltage-reducing circuit to supply power thereto.

Alternatively, as shown in fig. 1, the second functional unit 2 may be respectively electrically connected to the output terminal of the power supply 10, the enable control terminal of the first step-down circuit 3, the enable control terminal of the second step-down circuit 4, and the enable control terminal of the third step-down circuit 6, the second functional unit 2 monitors the output voltage of the power supply 10, the second functional unit 2 controls the first step-down circuit 3, the second step-down circuit 4, and the third step-down circuit 6 to be turned off or on according to the output voltage of the power supply 10, and controls the output of the power supply voltage abnormality alarm information according to the output voltage of the power supply 10.

Specifically, the second functional unit 2 monitors the output voltage of the power supply 10, and when the second functional unit 2 monitors that the output voltage of the power supply 10 is normal, the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6 are controlled to be turned on, that is, the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6 are controlled to normally operate. When the second functional unit 2 monitors that the output voltage of the power supply 10 is abnormal, that is, when the output voltage of the power supply 10 is monitored to be too high or too low, the second functional unit 2 turns off the enable signals of all the voltage reduction circuits, that is, controls the first voltage reduction circuit 3, the second voltage reduction circuit 4 and the third voltage reduction circuit 6 to be turned off, so as to avoid the damage of devices in the vehicle power supply redundant system. In addition, when the second functional unit 2 monitors that the output voltage of the power supply 10 is abnormal, it may also control to output alarm information of the abnormal power supply voltage, for example, may control a display device of a vehicle to display a word indicating that the output voltage of the power supply is abnormal, so as to remind a relevant person to perform timely maintenance on the power supply 10. Meanwhile, the second functional unit 2 can also continue to monitor the output voltage of the power supply 10 through an additional comparator, and when the output voltage of the power supply 10 returns to normal, the second functional unit 2 can automatically enable the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6, and all power supply branches return to power supply.

Alternatively, as shown in fig. 1, the second functional unit 2 may be arranged to be electrically connected to the output terminal of the first step-down circuit 3, the enable control terminal of the first step-down circuit 3, the output terminal of the second step-down circuit 4, the enable control terminal of the second step-down circuit 4, the output terminal of the third step-down circuit 6, and the enable control terminal of the third step-down circuit 6, respectively. It should be noted that fig. 3 only exemplarily shows that devices at two ends of a dotted line are in an electrical connection relationship, a specific connection port between two devices is not detailed, and a dotted line does not limit only one actual connection line between two devices, nor does it limit a transmission direction of electrical signals between devices.

As shown in fig. 1, the second functional unit 2 may be configured to monitor the output voltage of the first voltage-reducing circuit 3, and the second functional unit 2 controls the first voltage-reducing circuit 3 to be turned on or off according to the output voltage of the first voltage-reducing circuit 3, and controls the output of the first voltage-reducing circuit abnormality alarm information according to the output voltage of the first voltage-reducing circuit 3; the second functional unit 2 monitors the output voltage of the second voltage-reducing circuit 4, the second functional unit 2 controls the second voltage-reducing circuit 4 to be switched on or switched off according to the output voltage of the second voltage-reducing circuit 4, and controls and outputs second voltage-reducing circuit abnormality alarm information according to the output voltage of the second voltage-reducing circuit 4; the second functional unit 2 monitors the output voltage of the third step-down circuit 6, and the second functional unit 2 controls the third step-down circuit 6 to be turned on or off according to the output voltage of the third step-down circuit 6, and controls and outputs third step-down circuit abnormality alarm information according to the output voltage of the third step-down circuit 6.

Specifically, for example, the power supply branch where the first voltage-reducing circuit 3 is located, the second functional unit 2 monitors the output voltage of the first voltage-reducing circuit 3, when the second functional unit 2 monitors that the output voltage of the first voltage-reducing circuit 3 is normal, the first voltage-reducing circuit 3 is controlled to be turned on, that is, the first voltage-reducing circuit 3 is controlled to work normally, the second functional unit 2 monitors that the output voltage of the first voltage-reducing circuit 3 is abnormal, that is, when the output voltage of the first voltage-reducing circuit 3 is monitored to be too high or too low, the second functional unit 2 determines that it is possible that the first voltage-reducing circuit 3 has a fault, the second functional unit 2 turns off an enable signal of the first voltage-reducing circuit 3, that is, the first voltage-reducing circuit 3 is controlled to be turned off, and damage to devices in the vehicle power supply redundancy system is avoided. In addition, when the second function unit 2 monitors that the output voltage of the first voltage reduction circuit 3 is abnormal, the abnormal alarm information of the first voltage reduction circuit can be controlled to be output, for example, a display device of a vehicle can be controlled to display the abnormal characters output by the first voltage reduction circuit, so that related personnel can be reminded to maintain the first voltage reduction circuit 3 in time. Similarly, the monitoring process of the output voltage of the second voltage-reducing circuit 4 and the output voltage of the third voltage-reducing circuit 6 is similar to the monitoring process of the output voltage of the first voltage-reducing circuit 3, and is not repeated here.

Alternatively, as shown in fig. 1, the second functional unit 2 may be configured to monitor the output current of the first voltage-reducing circuit 3, and the second functional unit 2 controls the first voltage-reducing circuit 3 to be turned on or off according to the output current of the first voltage-reducing circuit 3, and controls the output of the load abnormality alarm information according to the output current of the first voltage-reducing circuit 3; the second functional unit 2 monitors the output current of the second voltage reduction circuit 4, the second functional unit 2 controls the second voltage reduction circuit 4 to be switched on or switched off according to the output current of the second voltage reduction circuit 4, and controls output load abnormity alarm information according to the output current of the second voltage reduction circuit 4; the second functional unit 2 monitors the output current of the third step-down circuit 6, and the second functional unit 2 controls the third step-down circuit 6 to be turned on or off according to the output current of the third step-down circuit 6, and controls output load abnormality alarm information according to the output current of the third step-down circuit 6.

Specifically, for example, the power supply branch where the first voltage-reducing circuit 3 is located, the second functional unit 2 monitors the output current of the first voltage-reducing circuit 3, when the second functional unit 2 monitors that the output current of the first voltage-reducing circuit 3 is normal, the first voltage-reducing circuit 3 is controlled to be turned on, that is, the first voltage-reducing circuit 3 is controlled to work normally, the second functional unit 2 monitors that the output current of the first voltage-reducing circuit 3 is abnormal, that is, when the output current of the first voltage-reducing circuit 3 is monitored to be too high or too low, the second functional unit 2 determines that the load fault possibly caused by the vehicle power supply redundancy system is caused, the second functional unit 2 turns off the enable signal of the first voltage-reducing circuit 3, that is, the first voltage-reducing circuit 3 is controlled to be turned off. In addition, when the second functional unit 2 monitors that the output current of the first voltage reduction circuit 3 is abnormal, it may also control to output a load abnormality alarm message, for example, may control a display device of a vehicle to display a word of load abnormality. Similarly, the monitoring process of the output current of the second voltage-reducing circuit 4 and the output current of the third voltage-reducing circuit 6 is similar to the monitoring process of the output current of the first voltage-reducing circuit 3, and is not repeated here.

Optionally, as shown in fig. 1, the second functional unit 2 is electrically connected to the output end of the first voltage-reducing circuit 3, the output end of the second voltage-reducing circuit 4, and the selection control end of the first selection circuit 5, and the second functional unit 2 is switched to the voltage-reducing circuit of the first functional unit 1 through the first selection circuit 5 according to the output signal of the first voltage-reducing circuit 3 and the output signal of the second voltage-reducing circuit 4. Note that the connection relationship between the second functional unit 2 and the first selection circuit 5 is not shown in fig. 2.

Specifically, the second functional unit 2 counts the service conditions of the first voltage reduction circuit 3 and the second voltage reduction circuit 4 by monitoring the output signal of the first voltage reduction circuit 3 and the output signal of the second voltage reduction circuit 4, and then selects the first voltage reduction circuit 3 to be connected to the first functional unit 1 or selects the second voltage reduction circuit 4 to be connected to the first functional unit 1 by the first selection circuit 5, and intelligently adjusts the power supply priority of the first voltage reduction circuit 3 and the second voltage reduction circuit 4, so that the long-time high-load operation of the first voltage reduction circuit 3 or the second voltage reduction circuit 4 is avoided, and the probability of the first voltage reduction circuit 3 and the second voltage reduction circuit 4 breaking down is reduced.

The embodiment of the disclosure monitors the output voltage of the power supply and the output voltage and the output current of each step-down circuit in real time through the second functional unit 2 with higher power supply redundancy, can find power failure in the vehicle power supply redundancy system in time, control on/off and send out an alarm, avoid the system from continuously working under a non-redundancy state, and effectively improve the safety of the vehicle power supply redundancy system.

On the basis of the above embodiment, the first function unit 1 may be provided as an environment sensing unit, and the second function unit 2 may be provided as a vehicle control unit. For example, the vehicle may be an autonomous vehicle, the environment sensing unit may be configured to process vehicle surrounding environment parameters acquired by a camera or a laser radar on the vehicle, and the vehicle control unit may be configured to control various driving parameters of the vehicle, so as to ensure driving safety of the vehicle and personal safety in the vehicle. The power consumption of the environment sensing unit is larger than that of the vehicle control unit, the vehicle control unit directly concerns the vehicle running safety and the safety of people in the vehicle, and the environment sensing unit is a safety core component of the automatic driving area controller, so the functional safety requirement of the vehicle control unit is high. In the embodiment of the disclosure, for the vehicle control unit with higher safety level requirement, the first voltage-reducing circuit 3, the second voltage-reducing circuit 4 and the third voltage-reducing circuit 6 can be utilized to realize redundant power supply for the vehicle control unit at most, so as to improve the safety level of the vehicle control unit.

Fig. 3 is a schematic structural diagram of another vehicle power redundancy system provided in the embodiments of the present disclosure. With reference to fig. 1 and fig. 3, it may be arranged that the first functional unit 1 includes a first context-aware processor 81, a second context-aware processor 82, a first power management circuit 91 and a second power management circuit 92, where the first power management circuit 91 is electrically connected to the first selection circuit 5 and the first context-aware processor 81, respectively, the second power management circuit 92 is electrically connected to the first selection circuit 5 and the second context-aware processor 82, respectively, the first power management circuit 91 controls a power-on timing of the first context-aware processor 81, and the second power management circuit 92 controls a power-on timing of the second context-aware processor 82. The second functional unit 2 includes a vehicle control processor 83 and a third power management circuit 93, the third power management circuit 93 is electrically connected to the second selection circuit 7 and the vehicle control processor 83, respectively, and the third power management circuit 93 controls the power-on timing of the vehicle control processor 83.

Specifically, the environmental awareness Processor may be, for example, an environmental awareness MPU (Main processing Unit), the vehicle control Processor may be, for example, a vehicle control MCU (Micro Controller Unit), the first voltage reduction circuit 3 and the second voltage reduction circuit 4 implement first-level voltage reduction corresponding to the environmental awareness Unit, and for the first environmental awareness Processor 81 and the second environmental awareness Processor 82, multiple power supplies are provided to the first environmental awareness Processor 81 and the second environmental awareness Processor 82, so the first power management circuit 91 is set to control the power-on timing of the first environmental awareness Processor 81, and the second power management circuit 92 is set to control the power-on timing of the second environmental awareness Processor 82.

The environment perception unit adopts two processors with similar functions to do work energy redundantly, namely, the first functional unit 1 comprises two first functional unit submodules 11, namely the environment perception unit comprises a first environment perception processor 81 and a second environment perception processor 82, when the first environment perception processor 81 and the second environment perception processor 82 work normally, the first environment perception processor 81 and the second environment perception processor 82 perform perception fusion, so that the accuracy of results of perception, recognition, distance measurement and the like of a vehicle is ensured. When one processor fails, for example, when the first context aware processor 81 or the second context aware processor 82 fails, the system's functionality degrades, but the other processor can still ensure the basic safety requirements of the vehicle power redundancy system, such as sensing obstacles and identifying safe parking areas, etc.

The context awareness unit has few SOC (System On Chip) schemes for ASIL-D security level, and the vehicle control unit has more ASIL-D schemes, i.e. FIG. 3 may set the context awareness unit to include two context awareness processors, a first context awareness processor 81 and a second context awareness processor 82, and the vehicle control unit to include only one vehicle control processor 83. The processor of the vehicle control unit can select a high-safety MCU which is in accordance with ASIL-D, the vehicle control unit operates the control algorithm of the vehicle to control the vehicle to normally run when working normally, and meanwhile, the vehicle control unit can also obtain the working state of the environment sensing unit, and when the vehicle control unit monitors that the environment sensing unit is in failure, an alarm can be sent out and the vehicle can be safely stopped.

The power consumption of environmental perception unit is high, the electric current is big, vehicle control unit's power consumption is less relatively, the electric current is less relatively, adopt two way independent power supplies, first voltage reduction circuit 3 and second voltage reduction circuit 4 carry out the scheme of OR operation promptly, realize the redundant power supply to environmental perception unit, adopt independent power supply, third voltage reduction circuit 6 supplies power for vehicle control unit promptly, simultaneously with first voltage reduction circuit 3, second voltage reduction circuit 4 and third pressure circuit carry out OR operation, so that the power supply surplus of first voltage reduction circuit 3 and second voltage reduction circuit 4 is as vehicle control unit's duplicate power redundancy, it is higher to realize the redundancy, the stronger power redundancy scheme of security, in order to satisfy vehicle control unit's power safety requirement.

The vehicle control unit monitors the output voltage of the power supply 10, the output voltage and the output current of each voltage reduction circuit, executes a corresponding safety mechanism according to the monitoring result, if a power failure is found when the vehicle runs, the vehicle control unit controls the vehicle to be stopped to a safe area as soon as possible to execute related operations, and if the power failure is found when the vehicle stops, the vehicle control unit directly executes the operations and sends out an alarm signal.

Fig. 4 is a schematic flowchart of a method for protecting a safety mechanism of a vehicle power redundancy system according to an embodiment of the present disclosure. As shown in fig. 4, the safety mechanism protection method of the vehicle power supply redundancy system includes:

s101, starting.

S102, judging whether the output voltage of the power supply is normal or not; if yes, go to step S103; if not, go to S106.

S103, judging whether the output voltage of the voltage reduction circuit is normal or not; if yes, executing S104; if not, executing S108;

s104, judging whether the output current of the voltage reduction circuit is normal or not; if yes, go to step S105; if not, executing S110;

and S105, intelligently adjusting the power supply sequence of the first voltage reduction circuit and the second voltage reduction circuit.

And S106, outputting the output voltage abnormity alarm information of the power supply.

And S107, turning off all the voltage reduction circuits.

And S108, outputting corresponding voltage reduction circuit abnormity alarm information.

And S109, closing the corresponding voltage reduction circuit.

S110, outputting load fault alarm information;

and S111, closing the corresponding voltage reduction circuit.

And S112, ending.

The embodiment of the disclosure performs an or operation on the power supplies of different functional units, and can realize a power supply redundancy scheme with lower cost and higher safety on the premise of ensuring the normal work of each functional unit. This disclosed embodiment still carries out intelligent monitoring to the power link, has increased the security of vehicle power redundancy system work, and this disclosed embodiment carries out real time monitoring to the output voltage of power, the output voltage and the output current of each way step-down power supply through the higher second functional unit of power supply redundancy promptly, can in time discover power failure and control break-make and send alarm information, avoids the system to continue work under no redundant state, ensures system security. Therefore, on the basis of ensuring the normal work of each functional unit, the voltage reduction circuits corresponding to different functional units are selected and operated, the number of the voltage reduction circuits in the vehicle power supply redundancy system is effectively reduced, the power supply redundancy scheme with lower cost is realized, the power supply redundancy scheme with higher redundancy is realized for the core safety device, and the intelligent power supply monitoring and processing mechanism is provided.

The embodiment of the present disclosure further provides a vehicle including the vehicle power supply redundancy system according to the above embodiment, so that the vehicle provided by the embodiment of the present disclosure has the beneficial effects described in the above embodiment. The vehicle provided by the embodiment of the disclosure can be an automatic driving vehicle, for different automatic driving technical schemes and different types of automobile ECUs, the number and the composition of the functional units can be different, and after the power supply is input, the power supply redundancy scheme is realized by performing OR operation on the power supplies of the different functional units. In addition, the vehicle according to the embodiment of the present disclosure may be a fuel-powered vehicle, a pure electric vehicle, a hybrid electric vehicle, or the like, and the embodiment of the present disclosure is not particularly limited thereto.

It is noted that, in this document, relational terms such as "first" and "second," and the like, may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

The foregoing are merely exemplary embodiments of the present disclosure, which enable those skilled in the art to understand or practice the present disclosure. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the disclosure. Thus, the present disclosure is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

1. A vehicle power supply redundancy system, comprising:

the power supply comprises a power supply, at least one first functional unit and at least one second functional unit, wherein the power consumption of the first functional unit is larger than that of the second functional unit;

the first functional unit is correspondingly provided with a first voltage reduction circuit, a second voltage reduction circuit and a first selection circuit, the first voltage reduction circuit and the second voltage reduction circuit are electrically connected with the power supply, the first selection circuit is respectively electrically connected with the first voltage reduction circuit, the second voltage reduction circuit and the first functional unit, and the first voltage reduction circuit and the second voltage reduction circuit are alternately connected into the first functional unit through the first selection circuit;

the second functional unit is correspondingly provided with a third voltage reduction circuit and a second selection circuit, the third voltage reduction circuit is electrically connected with the power supply, the second selection circuit is respectively electrically connected with the third voltage reduction circuit and the second functional unit, the first voltage reduction circuit and/or the second voltage reduction circuit are/is connected into the second selection circuit, and the voltage reduction circuit connected into the second selection circuit is alternately connected into the second functional unit through the second voltage reduction circuit.

2. The vehicle power supply redundancy system of claim 1, wherein the first functional unit comprises a plurality of first functional unit sub-modules, the first functional unit sub-modules backup each other; and/or the presence of a gas in the gas,

the second functional unit comprises a plurality of second functional unit sub-modules, and the second functional unit sub-modules are backup to each other.

3. The vehicle power supply redundancy system according to claim 1, wherein the second functional unit is electrically connected to an output terminal of the power supply, an enable control terminal of the first step-down circuit, an enable control terminal of the second step-down circuit, and an enable control terminal of the third step-down circuit, respectively, the second functional unit monitoring an output voltage of the power supply;

the second functional unit controls the first voltage reduction circuit, the second voltage reduction circuit and the third voltage reduction circuit to be turned off or turned on according to the output voltage of the power supply, and controls output power supply voltage abnormity alarm information according to the output voltage of the power supply.

4. The vehicle power supply redundancy system according to claim 1, wherein the second functional unit is electrically connected to the output terminal of the first step-down circuit, the enable control terminal of the first step-down circuit, the output terminal of the second step-down circuit, the enable control terminal of the second step-down circuit, the output terminal of a third step-down circuit, and the enable control terminal of the third step-down circuit, respectively.

5. The vehicle power supply redundancy system according to claim 4, wherein the second function unit monitors the output voltage of the first step-down circuit, controls the first step-down circuit to be turned on or off according to the output voltage of the first step-down circuit, and controls to output first step-down circuit abnormality warning information according to the output voltage of the first step-down circuit;

the second functional unit monitors the output voltage of the second voltage reduction circuit, controls the second voltage reduction circuit to be switched on or switched off according to the output voltage of the second voltage reduction circuit, and controls and outputs second voltage reduction circuit abnormity alarm information according to the output voltage of the second voltage reduction circuit;

the second functional unit monitors the output voltage of the third voltage reduction circuit, controls the third voltage reduction circuit to be switched on or switched off according to the output voltage of the third voltage reduction circuit, and controls and outputs third voltage reduction circuit abnormality alarm information according to the output voltage of the third voltage reduction circuit.

6. The vehicle power supply redundancy system according to claim 4, wherein the second function unit monitors the output current of the first step-down circuit, controls the first step-down circuit to be turned on or off according to the output current of the first step-down circuit, and controls output of load abnormality warning information according to the output current of the first step-down circuit;

the second functional unit monitors the output current of the second voltage reduction circuit, controls the second voltage reduction circuit to be switched on or switched off according to the output current of the second voltage reduction circuit, and controls output load abnormity alarm information according to the output current of the second voltage reduction circuit;

the second functional unit monitors the output current of the third voltage reduction circuit, controls the third voltage reduction circuit to be switched on or switched off according to the output current of the third voltage reduction circuit, and controls output load abnormity alarm information according to the output current of the third voltage reduction circuit.

7. The vehicle power supply redundancy system according to claim 1, wherein the second functional unit is electrically connected to the output terminal of the first step-down circuit, the output terminal of the second step-down circuit, and the selection control terminal of the first selection circuit, respectively, and the second functional unit is switched into the step-down circuit of the first functional unit by the first selection circuit according to the output signal of the first step-down circuit and the output signal of the second step-down circuit.

8. The vehicle power supply redundancy system of any of claims 1-7, wherein the first functional unit is a context awareness unit and the second functional unit is a vehicle control unit.

9. The vehicle power redundancy system of claim 8, wherein the first functional unit comprises a first context aware processor, a second context aware processor, a first power management circuit electrically coupled to the first selection circuit and the first context aware processor, respectively, and a second power management circuit electrically coupled to the first selection circuit and the second context aware processor, respectively, the first power management circuit controlling a power-up timing of the first context aware processor, the second power management circuit controlling a power-up timing of the second context aware processor;

the second functional unit comprises a vehicle control processor and a third power management circuit, the third power management circuit is respectively electrically connected with the second selection circuit and the vehicle control processor, and the third power management circuit controls the power-on time sequence of the vehicle control processor.

10. A vehicle comprising a vehicle power supply redundancy system according to any of claims 1 to 9.

Images