JP2023008684A - Power supply controller and power supply control method - Google Patents

Abstract

To provide a power supply controller and a power supply control method that can prevent an electric shock due to a leak of electricity.SOLUTION: A power supply controller comprises a control part. The control part turns off a power supply system if a vehicle stops on occurrence of a ground fault and the driver leaves the vehicle with the power supply on. The control part comprises a first system which supplies electric power from a main power supply to a first load and a second system which supplies electric power from a subordinate power supply to a second load. The control part turns off a switch for secondary-side battery which connects the subordinate power supply to the second system after the ground fault of the first system, and turns off a switch for primary-side battery which connects the main power supply to the first system after a ground fault of the second system.SELECTED DRAWING: Figure 1

Description

The disclosed embodiments relate to a power control device and a power control method.

Conventionally, even if a power failure such as a ground fault occurs while the vehicle is traveling by automatic driving, it is possible to evacuate to a safe place and stop the vehicle. 2. Description of the Related Art There is a redundant power supply system that supplies power to an in-vehicle device (load) for automatic operation from the other power supply system when a ground fault occurs in the power supply system (see, for example, Patent Document 1).

The redundant power supply system includes a first system connected to a first load for automatic operation, a second system connected to a second load having the same function as the first load, and a power supply between the first system and the second system. and an inter-system switch capable of connecting and disconnecting the

The redundant power supply system normally connects an intersystem switch to supply power from the main power supply to the first load and the second load. When a ground fault occurs in the first system, the redundant power supply system cuts off the inter-system switch to supply power from the auxiliary power supply to the second load, and when a ground fault occurs in the second system cuts off the grid switch to supply power from the main power supply to the first load.

JP 2018-182864 A

However, if the vehicle stops when a ground fault occurs and the driver gets out of the vehicle while the power is on, there is a risk of being electrocuted by electric leakage.

One aspect of the embodiments has been made in view of the above, and an object thereof is to provide a power supply control device and a power supply control method capable of preventing electric shock due to electric leakage.

A power control device according to an aspect of an embodiment includes a control unit. The control unit turns off the power system when the vehicle stops when a ground fault occurs and the driver gets off the vehicle while the power is on.

A power supply control device and a power supply control method according to an aspect of an embodiment can prevent electric shock due to electric leakage.

FIG. 1 is an explanatory diagram illustrating a configuration example of a power control device according to an embodiment. FIG. 2 is an explanatory diagram showing an operation example of the power supply control device according to the embodiment. FIG. 3 is an explanatory diagram showing an operation example of the power supply control device according to the embodiment. FIG. 4 is an explanatory diagram showing an operation example of the power supply control device according to the embodiment. FIG. 5 is an explanatory diagram showing an operation example of the power supply control device according to the embodiment. FIG. 6 is an explanatory diagram showing an operation example of the power supply control device according to the embodiment. FIG. 7 is an explanatory diagram illustrating an operation example of the power supply control device according to the embodiment; 8 is a flowchart illustrating an example of a process executed by a control unit of the power control device according to the embodiment; FIG.

Embodiments of a power control device and a power control method will be described in detail below with reference to the accompanying drawings. In addition, this invention is not limited by embodiment shown below. In the following, a power supply control device installed in a vehicle equipped with an automatic driving function and supplying electric power to a load will be described as an example. may be

In the following description, the vehicle in which the power control device is mounted is an electric vehicle or a hybrid vehicle, but the vehicle in which the power control device is mounted may be an internal combustion engine driven vehicle.

In addition, the power supply control device according to the embodiment includes a main power supply and a sub power supply. It may be installed in any device that backs up.

[1. Configuration of power supply control device]
FIG. 1 is an explanatory diagram illustrating a configuration example of a power control device according to an embodiment. As shown in FIG. 1 , the power control device 1 according to the embodiment is connected to a main power source 10 , a first load 101 , a general load 102 , a second load 103 and an automatic operation control device 100 . The power supply control device 1 has a first system 110 that supplies the power of the main power supply 10 to the first load 101 and the general load 102, and a second system 120 that supplies the power of the secondary power supply 20, which will be described later, to the second load 103. Prepare.

The first load 101 includes a load for automatic operation. For example, the first load 101 includes a steering motor, an electric brake device, an in-vehicle camera, a radar, etc. that operate during automatic driving. General loads 102 include, for example, displays, air conditioners, audio, video, and various lights.

The second load 103 has functions similar to those of the first load 101 . The second load 103 includes, for example, devices that operate during automatic driving, such as a steering motor, an electric brake device, an in-vehicle camera, and a radar. The first load 101 , the general load 102 and the second load 103 operate with power supplied from the power control device 1 . The automatic driving control device 100 is a device that operates the first load 101 or the second load 103 to control the automatic driving of the vehicle.

The main power supply 10 includes a DC/DC converter (hereinafter referred to as "DC/DC 11") and a lead battery (hereinafter referred to as "PbB 12"). The battery of the main power supply 10 may be any secondary battery other than PbB12.

DC/DC 11 is connected to a generator and a high-voltage battery having a higher voltage than PbB 12 , steps down the voltage of the generator and high-voltage battery, and outputs the voltage to first system 110 . A generator is, for example, an alternator that converts the kinetic energy of a running vehicle into electricity to generate electricity. A high-voltage battery is, for example, a battery for driving a vehicle mounted on an electric vehicle or a hybrid vehicle.

When the main power supply 10 is installed in an engine vehicle, an alternator (generator) is provided instead of the DC/DC 11 . DC/DC 11 charges PbB 12, supplies power to first load 101 and general load 102, supplies power to second load 103, and charges secondary power supply 20, which will be described later.

The power supply control device 1 includes a secondary power supply 20, an inter-system switch 41, a secondary battery switch 42, a primary battery switch 43, a control unit 3, a first voltage sensor 51, a second voltage and a sensor 52 . The secondary power supply 20 is a backup power supply in case the power supply from the main power supply 10 becomes impossible. The secondary power supply 20 includes a lithium ion battery (hereinafter referred to as "LiB21"). The secondary battery 20 may be any secondary battery other than LiB21.

Inter-system switch 41 is provided in inter-system line 130 that connects first system 110 and second system 120 , and is a switch capable of connecting and disconnecting first system 110 and second system 120 . The secondary battery switch 42 is a switch that connects the sub power supply 20 to the second system 120 . The primary battery switch 43 is a switch that connects the main power supply 10 to the first system 110 .

The first voltage sensor 51 is provided in the first system 110 to detect the voltage of the first system 110 and output the detection result to the control unit 3 . Second voltage sensor 52 is provided in second system 120 , detects the voltage of second system 120 , and outputs the detection result to control unit 3 .

The control unit 3 includes a microcomputer having a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and various circuits. Note that the control unit 3 may be configured by hardware such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The control unit 3 controls the operation of the power supply control device 1 by causing the CPU to execute programs stored in the ROM using the RAM as a work area. When the control unit 3 is activated, the primary battery switch 43 and the inter-system switch 41 are turned on, and the secondary battery switch 42 is turned off.

Control unit 3 detects a ground fault in first system 110 or second system 120 based on the detection results input from first voltage sensor 51 and second voltage sensor 52 . A specific example of the ground fault detection method by the control unit 3 will be described later.

When the ground fault in the first system 110 or the second system 120 is detected, the control unit 3 notifies the automatic operation control device 100 to that effect. In addition, when the ground fault of the first system 110 or the second system 120 is detected, the control unit 3 may notify the automatic operation control device 100 that automatic operation is impossible. Moreover, when the ground fault of the 1st system|strain 110 or the 2nd system|strain 120 is not detected, the control part 3 may notify the automatic operation control apparatus 100 that an automatic operation is possible.

When a power failure such as a ground fault occurs in the first system 110, the control unit 3 shuts off the inter-system switch 41, turns on the secondary battery switch 42, and connects the auxiliary power supply 20 to the second power supply. Power is supplied to the load 103 . Further, when a power failure such as a ground fault occurs in the second system 120, the control unit 3 shuts off the inter-system switch 41 and shuts off the secondary battery switch 42. to the first load 101 and the general load 102 .

As a result, even if one of the systems has a ground fault during automatic operation, the power supply control device 1 uses the other system, and the automatic operation control device 100 makes the vehicle evacuate to a safe place and stop the vehicle. be able to. Next, the operation of the power control device 1 will be described with reference to FIGS. 2 to 7. FIG.

[2. Normal Operation of Power Control Device]
Control unit 3 shuts off secondary battery switch 42 and closes primary battery switch 43 as shown in FIG. and inter-system switch 41 are turned on to supply power from main power supply 10 to first load 101 , general load 102 , and second load 103 .

[3. Operation of Power Supply Control Device When Ground Fault Occurs]
Next, the operation of the power supply control device 1 when a ground fault occurs will be described with reference to FIGS. 3 to 7. FIG. As shown in FIG. 3, in the power supply control device 1, for example, when a ground fault 200 occurs in the first system 110 or when a ground fault 201 occurs in the second system 120, an overload is directed toward the ground fault point. Since the current flows, the voltage detected by the first voltage sensor 51 and the second voltage sensor 52 becomes equal to or less than the ground fault threshold.

Therefore, when the voltage detected by the second voltage sensor 52 becomes equal to or less than the ground fault threshold, the control unit 3 provisionally determines that the ground fault 200 or 201 has occurred in the first system 110 or the second system 120. do. When the control unit 3 provisionally determines that the ground faults 200 and 201 have occurred, it cuts off the inter-system switch 41 and turns on the secondary battery switch 42 . As a result, the connection between the first system 110 and the second system 120 is cut off, power is supplied from the main power supply 10 to the first system 110 , and power is supplied from the auxiliary power supply 20 to the second system 120 .

When ground faults 200 and 201 occur in first system 110 or second system 120, the voltage detected by first voltage sensor 51 also becomes equal to or less than the ground fault threshold. Therefore, when the voltage detected by at least one of the first voltage sensor 51 and the second voltage sensor 52 becomes equal to or lower than the ground fault threshold, the control unit 3 controls the first system 110 or the second system 120. It can also be provisionally determined that a ground fault has occurred.

After that, the control unit 3 returns until the voltage detected by the first voltage sensor 51 is equal to or less than the ground fault threshold for a predetermined time or more and the voltage detected by the second voltage sensor 52 exceeds the ground fault threshold within a predetermined time. If so, it is determined that a ground fault 200 has occurred in the first system 110 .

Then, as shown in FIG. 4, the control unit 3 shuts off the primary battery switch 43, supplies power from the secondary power supply 20 to the second load 103, and notifies the automatic operation control device 100 to that effect. . As a result, the automatic driving control device 100 can operate the second load 103 with the electric power supplied from the auxiliary power supply 20 to make the vehicle evacuate to a safe place and stop the vehicle.

Thereafter, after the vehicle has stopped, the driver may exit the vehicle with the power source (eg, IG (ignition switch)) turned on. At this time, as shown in FIG. 4, the connected state between the sub power supply 20 and the second load 103 is maintained. Therefore, if the electric leakage occurs in the second system 120 when getting off the vehicle, the driver may get an electric shock if, for example, he touches the vehicle after getting off the vehicle.

Therefore, the control unit 3 turns off the power supply system when the vehicle stops when the ground fault 200 occurs and the driver gets off the vehicle with the power supply (for example, IG) turned on. Specifically, when the ground fault 200 in the first system 110 is detected, the control unit 3 disconnects the first system 110 and the second system 120, and the second system 120 in which the ground fault 200 does not occur is used for evacuation running. let it take control.

After that, when the vehicle stops after evacuation control due to the ground fault 200 in the first system 110 and the driver gets off the vehicle with the power source (for example, IG) turned on, the control unit 3 switches the second system 120. Considering the possibility that a serious ground fault has occurred, the secondary battery switch 42 is turned off as shown in FIG.

For example, after the vehicle has stopped after the evacuation control, the control unit 3 determines that the power is on based on the IG signal input from the IG, and determines that the driver is on based on the door sensor signal and the seating sensor signal. When it is determined that the user has gotten off the vehicle, the secondary battery switch 42 is turned off.

As a result, the power supply control device 1 can cut off the connection between the secondary power supply 20 and the second load 103, so even if a new ground fault occurs in the second system 120, the driver who gets off the vehicle can It is possible to prevent the electric shock of the driver due to electric leakage when touching the vehicle.

Further, after the control unit 3 provisionally determines that a ground fault has occurred in the first system 110 or the second system 120, the voltage detected by the second voltage sensor 52 is equal to or less than the ground fault threshold even after a predetermined time has passed. , and when the voltage detected by the first voltage sensor 51 recovers to exceed the ground fault threshold value within a predetermined time, it is officially determined that the ground fault 201 has occurred in the second system 120 .

Then, as shown in FIG. 6, the control unit 3 shuts off the secondary battery switch 42, supplies power from the main power supply 10 to the first load 101, and notifies the automatic operation control device 100 to that effect. do. As a result, the automatic driving control device 100 can operate the first load 101 with the electric power supplied from the main power supply 10 to evacuate the vehicle to a safe place and stop the vehicle.

After the vehicle has stopped, the driver may then leave the vehicle with the power source (eg, IG) turned on. At this time, as shown in FIG. 6, the main power supply 10 and the first load 101 are kept connected. For this reason, if an electric leakage occurs in the first system 110 when getting off the vehicle, the driver may get an electric shock if, for example, he touches the vehicle after getting off the vehicle.

Therefore, the control unit 3 turns off the power supply system when the vehicle stops when the ground fault 201 occurs and the driver gets off the vehicle with the power supply (for example, IG) turned on. Specifically, when the ground fault 201 in the second system 120 is detected, the control unit 3 disconnects the first system 110 and the second system 120, and the first system 110 in which the ground fault 201 does not occur is used for evacuation running. let it take control.

After that, when the vehicle stops after evacuation control due to the ground fault 201 of the second system 120 and the driver gets off the vehicle with the power source (for example, IG) turned on, Considering the possibility that a serious ground fault has occurred, as shown in FIG. 7, the primary battery switch 43 is turned off.

For example, after the vehicle has stopped after the evacuation control, the control unit 3 determines that the power is on based on the IG signal input from the IG, and determines that the driver is on based on the door sensor signal and the seating sensor signal. When it is determined that the passenger has gotten off the vehicle, the primary battery switch 43 is turned off.

As a result, the power supply control device 1 can disconnect the connection between the main power supply 10 and the first load 101, so even if the driver touches the vehicle after getting off the vehicle, it is possible to prevent the driver from receiving an electric shock due to electric leakage. can.

In addition, in the power supply control device 1, when the first load 101 or the general load 102 is temporarily overloaded instead of the ground faults 200 and 201, the voltage detected by the first voltage sensor 51 is temporarily may fall below the ground fault threshold. Further, in the power supply control device 1, when the second load 103 is temporarily overloaded, the voltage detected by the second voltage sensor 52 may temporarily fall below the ground fault threshold.

In this case, in the power supply control device 1 , power is continuously supplied from the main power supply 10 to the first load 101 and the general load 102 , and power is supplied from the secondary power supply 20 to the second load 103 . Therefore, control unit 3 temporarily determines that ground faults 200 and 201 have occurred in first system 110 or second system 120, and then controls first voltage sensor 51 and second voltage sensor 52 before a predetermined time elapses. If both of the voltages detected by and recover to exceed the ground fault threshold, it is a temporary voltage drop and it is determined that there is no abnormality in the power supply. After that, in order to return to the normal operation shown in FIG. 2, the control unit 3 shuts off the secondary battery switch 42 and turns on the inter-system switch 41 again.

[4. Processing executed by the control unit]
Next, processing executed by the control unit 3 of the power control device 1 will be described with reference to FIG. 8 is a flowchart illustrating an example of a process executed by a control unit of the power control device according to the embodiment; FIG. 6 is a flow chart showing an example of processing executed by a control unit of the power supply control device according to the embodiment;

The control unit 3 repeatedly executes the processing shown in FIG. 8 during normal operation. Specifically, as shown in FIG. 8, the controller 3 first determines whether or not a ground fault has occurred (step S101). When determining that the ground fault has not occurred (step S101, No), the control unit 3 repeats the process of step S101 until the ground fault occurs.

When the control unit 3 determines that a ground fault has occurred (step S101, Yes), it shuts off the inter-system switch 41 and turns on the secondary battery switch 42 (step S102). Then, control unit 3 determines whether or not there is a ground fault in first system 110 (step S103).

When the controller 3 determines that the first system 110 has a ground fault (step S103, Yes), it shuts off the primary battery switch 43 (step S104). At this time, the control unit 3 notifies the automatic operation control device 100 that the first system 110 has a ground fault, and uses the second system 120 to cause the vehicle to run for evacuation.

After that, the control unit 3 determines whether or not the evacuation travel is completed (step S105). Specifically, it is determined that the evacuation traveling is completed when the vehicle stops after the evacuation traveling is started. When the control unit 3 determines that the evacuation travel is not completed, that is, the vehicle is not stopped (step S105, No), the determination processing of step S105 is repeated until the evacuation travel is completed. Then, when the controller 3 determines that the evacuation running is completed (step S105, Yes), it determines whether or not the driver got off the vehicle without the IG-OFF operation (step S106).

If the control unit 3 determines that the driver has not exited the vehicle without the IG-OFF operation (step S106, No), the determination process of step S106 is repeated until it is determined that the driver has exited the vehicle without the IG-OFF operation. . When the control unit 3 determines that the driver has gotten off the vehicle without the IG-OFF operation (step S106, Yes), the control unit 3 shuts off the secondary battery switch 42 (step S107), and ends the process.

When the control unit 3 determines in step S103 that there is no ground fault in the first system 110 (step S103, No), it determines whether or not there is a ground fault in the second system 120 (step S108). When the control unit 3 determines that there is no ground fault in the second system 120 (step S108, No), it determines that the ground fault has not occurred and turns on the inter-system switch 41 to return to the normal state. The switch 42 is turned off (step S113), and the process ends.

Further, when the controller 3 determines that there is a ground fault in the second system 120 (step S108, Yes), it shuts off the secondary battery switch 42 (step S109). At this time, the control unit 3 notifies the automatic operation control device 100 that the second system 120 has a ground fault, and uses the first system 110 to cause the vehicle to run for evacuation.

After that, the control unit 3 determines whether or not the evacuation has been completed, that is, whether or not the vehicle has stopped (step S110). When the control unit 3 determines that the evacuation travel is not completed, that is, the vehicle is not stopped (step S110, No), the determination processing of step S110 is repeated until the evacuation travel is completed. When the controller 3 determines that the evacuation run is completed (step S110, Yes), the controller 3 determines whether the driver got off the vehicle without the IG-OFF operation (step S111).

If the control unit 3 determines that the driver has not exited the vehicle without the IG-OFF operation (step S111, No), the determination process of step S111 is repeated until it is determined that the driver has exited the vehicle without the IG-OFF operation. . When the control unit 3 determines that the driver has gotten off the vehicle without the IG-OFF operation (step S111, Yes), the control unit 3 shuts off the primary battery switch 43 (step S112), and ends the process.

In the above-described embodiment, the case where the power supply control device 1 stops the vehicle after the evacuation control and the driver gets off the vehicle while the power is on has been described, but the power supply system is turned off. An example.

The power supply control device 1 turns off the power system when the vehicle stops during normal operation and the driver gets off the vehicle while the power is on after completing the evacuation traveling by manual operation, not by automatic operation. can also be As a result, the power supply control device 1 can be used to prevent the driver from touching the vehicle when the vehicle stops during manual operation or during normal operation and the driver gets off the vehicle while the power is on. Also, it is possible to prevent the electric shock of the driver due to electric leakage.

Further, the case where the power supply control device 1 includes the primary battery switch 43 and the secondary battery switch 42 has been described so far, but the power supply control device 1 includes the primary battery switch 43 and the secondary battery switch 43 . Either one of the battery switches 42 may be provided.

Further effects and modifications can be easily derived by those skilled in the art. Therefore, the broader aspects of the invention are not limited to the specific details and representative embodiments so shown and described. Accordingly, various changes may be made without departing from the spirit or scope of the general inventive concept defined by the appended claims and equivalents thereof.

1 power control device 10 main power supply 11 DC/DC
12PbB
20 Sub power supply 21 LiB
3 control unit 41 inter-system switch 42 secondary battery switch 43 primary battery switch 51 first voltage sensor 52 second voltage sensor 100 automatic operation control device 101 first load 102 general load 103 second load 110 first first Line 120 2nd line

Claims (4)

1. A power supply control device comprising: a control unit that turns off a power system when a vehicle stops when a ground fault occurs and a driver gets off the vehicle while the power is on. a first system that supplies power from the main power supply to the first load;
a second system that supplies power from the secondary power supply to the second load;
a secondary battery switch that connects the secondary power supply to the second system;
with
The control unit
When a ground fault is detected, the first system and the second system are disconnected, and when a ground fault occurs in the first system, the secondary battery switch is turned on to perform evacuation running control in the second system, 2. The power supply control device according to claim 1, wherein the secondary battery switch is turned off when the vehicle is stopped by the evacuation control and the driver gets off the vehicle while the power is on. a first system that supplies power from the main power supply to the first load;
a second system that supplies power from the secondary power supply to the second load;
a primary battery switch that connects the main power supply to the first system;
with
The control unit
When a ground fault is detected, the first system and the second system are disconnected, and when a ground fault occurs in the second system, the primary battery switch is turned on to perform evacuation running control in the first system, 2. The power control device according to claim 1, wherein the primary battery switch is turned off when the vehicle is stopped by the evacuation control and the driver gets off the vehicle while the power is on. A power control method executed by a control unit of a power control device,
A power supply control method characterized by turning off a power supply system when a vehicle stops when a ground fault occurs and a driver gets out of the vehicle while the power supply is on.

Images