DE102014214103A1 - Device for supplying at least one consumer - Google Patents

Abstract

The invention relates to a device for supplying at least one load, comprising at least one low-voltage on-board electrical system (30) and one high-voltage on-board electrical system (50), which are interconnected via a DC-DC converter, with a first channel (21) connected to the high-voltage on-board electrical system (50) , with a second channel (23) which is connected to the low-voltage on-board network (30), wherein at least one safety-relevant, functionally redundant first consumer (22a) is connected to the first channel (21) and another, safety-relevant, functionally redundant second consumer (22b) is connected to the second channel (23).

Description

State of the art

The invention relates to a device for supplying at least one consumer according to the preamble of the independent claim. A generic device is already out of the WO 2002/080334 A1 known. Thus, in one exemplary embodiment with an integrated starter generator, a 36V battery, a 12V battery and a double-layer capacitor are provided. The integrated starter generator supplies the 42V electrical system via the connection and the 14V network via a 42/14 V converter. Consumers are connected to the networks. The double-layer capacitor can be connected via switches to the integrated starter generator and the 42V vehicle electrical system. A generic device is also from the DE 10 2007 037 937 A1 known.

It is an object of the present invention to provide a device in order to reliably supply in particular safety-relevant consumers with electrical energy. This object is solved by the features of the independent claim.

Advantages of the invention

The device according to the invention according to the features of the independent claim has the advantage that a reliable supply for safety-relevant consumer takes place. The fact that a multi-voltage vehicle electrical system is provided via which at least one redundant consumer and the other redundant consumer or function-redundant consumer is reliably supplied via the other voltage branch increases the security of supply. According to the invention, the coupling of the at least two vehicle electrical system ducts to two different subnetworks with different voltage levels of, for example, 48V or 14V takes place. In the event of a failure of a subnet, the still functional other subnet can continue to supply at least one vehicle electrical system channel, the first or second vehicle electrical system channel, with electrical energy. The electrical system is scalable depending on the selected energy storage and particularly easy to adapt to specific requirements.

Further expedient developments emerge from further dependent claims and from the description.

drawing

An embodiment of the device according to the invention is shown in the drawing and will be explained in more detail below. It shows:

The single figure is a block diagram of an embodiment of the on-board network topology for supplying in particular function redundant consumers.

A base board network 10 is designed as a multi-voltage vehicle electrical system. It consists of a low voltage electrical system 30 with a vehicle electrical system voltage U1 of bspw. 14 Volt as well as from a high voltage electrical system 50 with a vehicle electrical system voltage U2 of, for example, 48 volts. Low-voltage electrical system 30 and high voltage on-board electrical system 50 are via a DC-DC converter 58 connected with each other. By way of example, the low voltage electrical system includes 30 an energy store 16 and a group of consumers connected in parallel 18 , each connected to ground. The high voltage electrical system 50 includes an energy store 52 , a consumer group 54 and an electric machine 56 , which are each connected in parallel to ground. The high voltage electrical system 50 is through a first channel 21 via a first coupling agent 25 with a first redundant consumer 22a connected. Optionally, to the first redundant consumer 22a (or a group of redundant consumers) an energy storage 34 be provided. First coupling agent 25 , first redundant consumer (or a group of redundant consumers) 22a and optionally the energy storage 34 are part of the first safety-relevant subnetwork 20a ,

The low voltage on-board electrical system 30 is via a second channel 23 via a second coupling agent 27 with a second redundant consumer (or a group of redundant consumers) 22b connected. Optionally, to the second redundant consumer (or a group of redundant consumers) 22b an energy store 36 , also connected to ground, be provided. The second coupling agent 27 and the second redundant consumer 22b and optionally the energy storage 36 are components of a second safety-relevant subnetwork 20b ,

Regarding the energy storage 34 respectively. 36 of the first or second security-relevant subnetwork 20a . 20b Different constellations can be provided. In a first constellation, although the energy storage 34 of the first security-relevant subnetwork 20a as well as the energy storage 36 of the second security-relevant subnetwork 20b available. In an alternative embodiment, the first security-relevant subnetwork is missing 20a now the energy storage 34 while in the second security-related subnet 20b the energy store 36 is available. In a further alternative embodiment it can now be provided that now the energy storage 34 of the first security-relevant subnetwork 20a intended is while the energy store 36 of the second security-relevant subnetwork 20b is missing.

To increase the reliability is now provided that the redundant consumers 22a . 22b be supplied in the manner shown. As a redundant consumer 22a . 22b On the one hand, functionally redundant components can be provided. Alternatively, identical components can be used. It is essential, these redundant or functionally redundant consumers 22a . 22b independent of two on-board networks 30 . 50 with two voltage levels U1, U2, namely a high voltage on-board electrical system 50 and a low voltage electrical system 30 to supply. In particular, for brake systems in the motor vehicle for power-operated brakes is a two-channel energy transfer with at least two independent energy storage 16 . 34 . 36 . 52 intended. For a highly automatic driving therefore a two-channel so-called. Brake-by-wire brake is necessary.

According to the arrangement shown in the figure now has the advantage that due to the two channels 21 . 23 , each of different on-board networks with preferably different voltage levels U1, U2, namely high voltage electrical system 50 and low voltage on-board electrical system 30 , are fed, a fault-tolerant or diversified power supply is provided. Furthermore, the defect is remedied that so far only components are simply present in the electrical system, for example. That so far only an electric steering, only one system for building up the brake pressure and only one radar sensor is available. For high and fully automatic driving functions this is not sufficient, as a functional redundancy is required to ensure the fault tolerance, if a component fails. However, it is not appropriate to supply two electric steering systems by the same electrical system or the same channels. For this, the supply is via two channels 21 . 23 proposed.

At least one security-relevant first consumer 22a is with the first channel 21 connected, while another safety-related, at least functionally to the first consumer 22a redundant second consumer 22b with the second channel 23 connected is. As a safety-relevant consumer 22a . 22b In this context, those are understood to be those which are absolutely necessary for the proper operation of a motor vehicle, for example, in order not to jeopardize the safety of the occupant during ongoing operation of the motor vehicle. This topic plays a special role, especially in the subject of highly automatic and fully automatic driving, since additional components such as sensors or the like are absolutely necessary during the automatic driving operation, which would not be necessary for conventional driving operation. The phrase "at least functionally redundant" expresses the fact that in addition to the mentioned in each case necessary functional redundancy also redundancy in terms of two substantially technically identical components or consumers is meant. The following are examples of safety-relevant consumers 22a . 22b called. In addition to a purely redundant design of safety-relevant consumers 22a . 22b (these consumers 22a . 22b are identically provided at least twice, but over different channels 21 . 23 supplied) are exemplary functionally redundant consumers 22a . 22b specified, in which not identical components are used redundantly, but technically different, but the same functionality (for example, brakes, environment sensing, etc.) are used. As especially functionally redundant consumer 22a . 22b For example, to decelerate the vehicle (brake pressure build-up) a so-called electronic brake booster as the first redundant consumer 22a and an electrohydraulic brake booster as the second redundant load 22b , for steering the vehicle, a first steering actuator 22a and a second steering actuator 22b , regarding the sensor technology forward a radar and a stereo video camera 22a and a lidar 22b , with respect to the sensor, a radar to the rear 22a and a mono camera 22b , regarding the sensors to the side of a radar 22a and a video and ultrasonic sensor 22b , for information processing and trajectory planning for autonomous driving a so-called save-stop module 22a or a central control unit for the automatic control of the vehicle (so-called ADAS control unit (DASy = Driver Assistance System)) are used.

As a safety-relevant consumer, for example, actuator, sensor or sensor or control device are considered, which are indispensable for ensuring an automatic driving operation of a motor vehicle. This may differ depending on the individual case, but the expert will interpret and provide energy in functionally redundant way.

The coupling of the two channels 21 . 23 takes place at the different subnetworks, namely the low voltage on-board electrical system 30 or the high voltage on-board electrical system 50 , If one of the subnets fails, the still functioning subnet can have a channel 21 . 23 continue to supply with electrical energy. The subnets 20a and 20b are with the help of said different equations of energy storage 34 . 36 easily scalable and customizable to specific requirements.

The coupling agents 25 . 27 make the connection of the respective channels 21 . 23 to subnets (high voltage on-board network 50 or low voltage electrical system 30 ) with different voltage levels U1, U2. The two vehicle electrical system ducts 21 . 23 for safety-relevant, redundant consumers 22a . 22b each to the low voltage electrical system 30 as well as to the high voltage on-board electrical system 50 coupled. This is a diversified in terms of security technology energy supply of the channels 21 . 23 ensured. In case of failure of a sub-network (low-voltage electrical system 30 or high voltage on-board electrical system 50 ) at least one more channel 21 or 23 through the still functioning subnet 30 . 50 energized.

Security relevant consumers 22a . 22b can each be supplied with the same voltage, for example 14V or 48V. Alternatively, a supply of consumers 22a . 22b possible with a different voltage; ie one of the consumers 22a . 22b For example, with 14V, the other supplied with 48V.

The coupling agents 25 . 27 can, for example, be designed as power electronic coupling elements and, for example, be realized as a DC-DC converter. Alternatively, switches, such as semiconductor switches as coupling means 25 . 27 be used. Occurs a fault in a subnet 30 . 50 on, z. B. an overvoltage, then the associated channel 21 . 23 by means of the switch as a component of the coupling agent 25 . 27 from the respective subnet 30 . 50 separated. However, the use of switches requires that the supply voltage of the consumer 22a . 22b the voltage of the assigned subnetwork 30 . 50 equivalent. The coupling agent 25 can therefore only be executed as a switch when the consumer 22a also has a supply voltage of U2 of, for example, 48V, the coupling agent 27 can only be executed as a switch when the consumer 22b a supply voltage of U1 equal to 14V of the low-voltage Bornetzes 30 has.

By way of example, the operation of the electrical system according to the figure will be explained. Normally, the electrical system works 10 properly. About the base board network 10 and the electric machine contained therein 56 electrical energy is generated, which in the energy storage 52 can be stored or by consumers 54 respectively. 18 (via the DC-DC converter 58 ) are consumed. Behind the consumers 18 . 54 hide electrical components such as heating, air conditioning or water and gasoline pumps that are not relevant to safety, but may be necessary for the comfort and propulsion.

All safety-relevant consumers 22a . 22b , which are necessary for the highly automatic driving, on the subnets, low voltage on-board power 30 , High voltage on-board electrical system 50 (with the associated channels 21 . 23 divided up). Both channels work 21 . 23 , the system can fully meet all requirements. If a channel falls 21 . 23 off, the safe state can still be reached via highly automatic driving, possibly with functional limitations as shown below.

In the event of a fault, for example, when a short circuit of the supply line in the subnet occurs 20b for the second coupling agent 27 against mass after the coupling agent 27 is the second channel 23 is faulty. Then the voltage breaks in the second channel 23 with the redundant consumers 22b one. These consumers 22b can no longer be properly supplied. The energy storage 36 is disconnected from the grid by one in the coupling agent 27 included switch opens. Since at this moment the vehicle is driving highly automatically, the driver is not responsible. Therefore, the mechanical fallback level is not available and there must be a fallback system that controls the vehicle automatically until either the driver takes over the vehicle and thus can use the mechanical fallback levels of the brake and steering, or automatically put the vehicle in a safe condition is (for example, by a so-called. Safe stop module 22a ). This can mean, for example, automated unrolling on the right side strip. In the following it is assumed that the latter case occurs and the driver does not take over driving. In this case, the vehicle with the remaining components must continue to be automatically controlled and put into safe condition. In the first step, the environment must be via the first on-board electrical system 21 existing sensors (redundant consumers 22a ) capture the environment. Since the number of sensors and thus the operating principles of the environment sensors are reduced, the speed at which the vehicle continues or another emergency program must be reduced. The vehicle is decelerated by the electronic brake booster 22a , connected to the first channel 21 , is supplied with electric power and so can build up brake pressure. In the next step, the so-called save-stop module 22a , finding a suitable place to stop based on sensor and map information, ie via the first channel 21 need the save-stop module 22a as well as the navigation system 22a and the environment sensors 22a be supplied electrically reliable. Furthermore, it must be ensured that the electric steering, which consists of two redundant systems 22a . 22b with electrical supply from the first channel 21 and the second channel 23 at least to ensure the required lane change.

In an alternative embodiment, the energy storage is eliminated 34 , The first channel 21 therefore has no channel-specific energy storage 34 but uses the energy storage 52 of the high voltage on-board electrical system 50 as electrical storage. This embodiment provides a cost-effective approach to the realization of the electrical system 10 with increased reliability. The coupling agent 25 can be realized by a DC-DC converter or a switch. Alternatively, the coupling agent 25 completely omitted, ie the consumer 22a becomes direct with the high voltage on-board electrical system 50 coupled. The second coupling agent 27 can be realized either by a DC-DC converter or by a switch.

In a further alternative embodiment, the energy store is eliminated 36 of the second security-relevant subnetwork 20b , The second channel 23 therefore has no channel-specific energy storage, but uses the energy storage 16 of low voltage on-board electrical system 30 ,

As electrical storage 16 . 34 . 36 . 52 In all embodiments, batteries, but also other storage technologies such as double-layer capacitors can be used.

The electric machine 56 can work in all embodiments optionally only regenerative or both regenerative and motor. There is no restriction with regard to the machine principle. Therefore, for example, claw pole machines, asynchronous machines, synchronous machines or other machine principles can be used.

Optionally, on-board electrical systems can be implemented, which are equipped with more than two subnetworks (low-voltage onboard power supply 30 or high voltage on-board electrical system 50 ) and / or with more than two channels 25 . 27 are equipped.

The described device for supplying in particular safety-relevant consumers is preferably used in the motor vehicle. However, the use is not limited to this.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• WO 2002/080334 A1 [0001]
• DE 102007037937 A1 [0001]

Claims (11)

Device for supplying at least one consumer, comprising at least one low-voltage on-board electrical system ( 30 ) with a first vehicle electrical system voltage (U1) and a high-voltage on-board electrical system ( 50 ) with a second vehicle electrical system voltage (U2), which differs from the first vehicle electrical system voltage (U1), with at least one DC-DC converter ( 58 ), which is the low voltage on-board ( 30 ) with the high voltage on-board electrical system ( 50 ), with a first channel ( 21 ) connected to the high voltage on-board ( 50 ), with a second channel ( 23 ) connected to the low voltage on-board ( 30 ), characterized in that at least one safety-relevant first consumer ( 22a ) with the first channel ( 21 ) and another, safety-relevant, at least functionally, to the first consumer ( 22a ) redundant second consumer ( 22b ) with the second channel ( 23 ) connected is. Device according to one of the preceding claims, characterized in that the low-voltage on-board electrical system ( 30 ) and / or the high voltage on-board electrical system ( 50 ) at least one energy store ( 16 . 52 ). Device according to one of the preceding claims, characterized in that at least one of the safety-relevant, functionally redundant consumers ( 22a . 22b ) at least one energy store ( 16 . 34 . 36 . 52 ) is connected in parallel. Device according to one of the preceding claims, characterized in that at least to the safety-relevant first consumer ( 22a ) a first energy store ( 34 . 52 ) and the further, security-relevant, at least functionally, to the first consumer ( 22a ) redundant second consumer ( 22b ) at least one further energy store ( 16 . 36 ) is connected in parallel. Device according to one of the preceding claims, characterized in that as a safety-relevant consumer ( 22a . 22b ) At least one actuator, at least one sensor or at least one control device are provided to ensure an automatic driving operation of a motor vehicle. Apparatus according to claim 5, characterized in that as actuator at least one electrohydraulic or electronic brake booster, a first and second steering actuator, as a sensor radar and a stereo video camera or a lidar, a radar or a monocamera, a radar or a video and ultrasound sensor system, a navigation system, at least one save-stop module or a central ADAS control unit are provided as the control unit. Device according to one of the preceding claims, characterized in that in an error case only one of the at least two safety-relevant consumers ( 22a . 22b ) be used. Device according to one of the preceding claims, characterized in that in an error case only one of the at least two safety-relevant consumers ( 22a . 22b ) can be used to maintain an emergency operation, in particular by a driving operation with limited speed and / or by a driving operation to achieve a reliable condition such as the approach of a parking position. Device according to one of the preceding claims, characterized in that between one of the safety-relevant, functionally redundant consumer ( 22a . 22b ) and one of the channels ( 21 . 23 ) at least one coupling agent ( 25 . 27 ) is provided. Device according to one of the preceding claims, characterized in that in an error case at least one coupling means ( 25 . 27 ) at least one of the security relevant consumers ( 22a . 22b ) from the associated channel ( 21 . 23 ) separates. Device according to one of the preceding claims, characterized in that as coupling means ( 25 . 27 ) At least one DC-DC converter and / or a switching means is provided.

Images