JP7329916B2 - Power supply system and control unit for power supply system - Google Patents

Description

The present invention relates to power systems and control units for power systems.

Conventionally, a power supply system is known that includes a main power supply, a sub power supply, and a protected load that is driven using power supplied from the main power supply or the sub power supply (see, for example, Patent Document 1). . Here, the protected load is a load that requires a stable power supply in the event of an abnormality in the main power supply (for example, when the voltage of the main power supply is excessively low). is provided. In such a power supply system, the load to be protected is disconnected from the main power supply in the event of an abnormality in the main power supply, and power is supplied from the secondary power supply to the load to be protected. Power can be supplied stably.

JP 2018-011458 A

In the power supply system as described above, a power supply with a relatively small capacity such as an electric double layer capacitor (eDLC) may be used as a secondary power supply. In such a case, it has been difficult to supply power to all the protected loads with a single auxiliary power supply. Therefore, conventionally, such a secondary power supply has been provided for each of the loads to be protected. In other words, it was necessary to provide as many secondary power supplies as the number of loads to be protected.

Accordingly, the present invention has been made in view of the above problems, and an object of the present invention is to reduce the number of secondary power sources while enabling power to be appropriately supplied to a load to be protected in the event of an abnormality in the main power source. It is an object of the present invention to provide a new and improved power supply system and control unit for the power supply system.

In order to solve the above problems, according to one aspect of the present invention, a main power supply, an electric double layer capacitor or a sub power supply comprising an electric double layer capacitor, and power supplied from the main power supply or the sub power supply are used. a main switch for connecting and disconnecting electrical connections between the main power supply, the sub-power supply and the plurality of protected loads; the sub-power supply and the plurality of protected loads; and a control device for controlling the operation of the main switch and the switching unit, wherein the auxiliary power supply and the plurality of protected loads are , and are connected in parallel with the main power supply, and the capacity of the auxiliary power supply is a value capable of supplying sufficient power to the plurality of protected loads to the extent that the vehicle in motion can be safely stopped. The secondary power supply, the main switch, the switching unit, and the control device are provided in the same control unit , and the plurality of protected loads are provided with a stable power supply in the event of an abnormality in the main power supply. The required loads, the plurality of protected loads, being a load used to brake the vehicle in motion, a load used to steer the vehicle, and a load used to monitor the vehicle's surroundings. When the main power supply fails, the control device opens the main switch and controls the operation of the switching unit to connect the auxiliary power supply and each of the plurality of protected loads. A power system is provided that controls the connection state.

In order to solve the above problems, according to another aspect of the present invention, there is provided a main power supply, an electric double layer capacitor or a sub power supply comprising an electric double layer capacitor, and a main power supply or sub power supply. A load that is driven using electric power and requires a stable power supply in the event of an abnormality in the main power supply, the load being used to brake a running vehicle, the load being used to steer the vehicle, and and a plurality of protected loads including loads used to monitor surrounding conditions of a vehicle, wherein the secondary power supply and the plurality of protected loads are connected to the main power supply. They are connected in parallel, and the capacity of the auxiliary power supply is set to a value that can sufficiently supply power to the plurality of protected loads to the extent that a running vehicle can be stopped safely. , the control unit includes a main switch for connecting and disconnecting electrical connections between the main power supply, the sub power supply, and the plurality of protected loads; and a connection between the sub power supply and each of the plurality of protected loads. and a control device for controlling the operation of the main switch and the switching unit. A control unit of a power supply system is provided for controlling the connection status between the secondary power supply and each of the plurality of protected loads (40) by controlling the operation of the.

As described above, according to the present invention, it is possible to reduce the number of secondary power sources while appropriately supplying power to the load to be protected in the event of an abnormality in the main power source.

1 is a schematic diagram showing the configuration of a power supply system according to an embodiment of the present invention; FIG. FIG. 3 is a schematic diagram showing the flow of electric power when the main power supply is normal; 4 is a flow chart showing the flow of processing in the first operation example performed by the control device; FIG. 4 is a schematic diagram showing the flow of electric power when the main power supply is abnormal; 9 is a flow chart showing the flow of processing in a second operation example performed by the control device; FIG. 10 is a schematic diagram showing the flow of power when the remaining capacity of the secondary power supply does not fall below the threshold in the second operation example when the main power supply is abnormal;

Preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings. In the present specification and drawings, constituent elements having substantially the same functional configuration are denoted by the same reference numerals, thereby omitting redundant description.

In addition, in this specification and drawings, a plurality of components having substantially the same functional configuration may be distinguished by attaching different alphabets after the same reference numerals. However, when there is no particular need to distinguish between a plurality of constituent elements having substantially the same functional configuration, only the same reference numerals are given to each of the plurality of constituent elements.

<1. Configuration of power supply system>
A configuration of a power supply system 1 according to an embodiment of the present invention will be described with reference to FIG. In the following description, an example in which the power supply system 1 is mounted on a vehicle such as an automobile will be described, but the application of the power supply system of the present invention is not limited to such an example.

FIG. 1 is a schematic diagram showing the configuration of a power supply system 1 according to this embodiment. The power supply system 1 includes a main power supply 10 , a sub power supply 20 , a plurality of protected loads 40 , a main switch 510 , a switching section 520 and a control device 530 . The protected load 40 includes a protected load 40a, a protected load 40b, and a protected load 40c.

The main switch 510 , the switching section 520 and the control device 530 are mounted on the same control unit 50 . Switching section 520 includes sub-switch 522 , sub-switch 524 , sub-switch 526 and sub-switch 528 .

Furthermore, the power supply system 1 includes a generator G, a starter S, a fuse F, a general load 30, a main power supply sensor 12, a remaining capacity sensor 22, a first power supply line 80, and a second power supply line 82. Prepare.

The sub power supply 20 and the plurality of protected loads 40 are connected in parallel with the main power supply 10 respectively. Specifically, the main power supply 10 is connected to the first power supply line 80 . A generator G is connected to the first power supply line 80 . A starter S is connected to the first power supply line 80 . A general load 30 is connected to the first power supply line 80 via a fuse F. Sub power supply 20 is connected to second power supply line 82 via sub switch 522 . A protected load 40 a is connected to the second power supply line 82 via a sub-switch 524 . A protected load 40 b is connected to the second power supply line 82 via a sub-switch 526 . A protected load 40 c is connected to the second power supply line 82 via a sub-switch 528 . The first power line 80 and the second power line 82 are connected via the main switch 510 .

The main power supply 10 is a power storage device that functions as a main power supply source for the power supply system 1 . When the main power supply 10 is normal, power is supplied from the main power supply 10 to each device in the power supply system 1 . As the main power supply 10, for example, a secondary battery such as a lithium ion battery or a lead storage battery is used.

The main power supply sensor 12 detects the voltage and current of the main power supply 10 and outputs the detection results to the control device 530 . The main power supply sensor 12 is provided near the main power supply 10, for example.

The generator G generates power using power from a drive source such as a vehicle engine. Electric power generated by the generator G is charged to the main power supply 10 via an inverter (not shown) and the first power supply line 80 . In addition, the generator G may perform regenerative electric power generation using the rotational force of the drive wheel of a vehicle. Instead of the generator G or together with the generator G, a high-voltage battery (not shown) that outputs power higher than that of the main power supply 10 may be provided as a power supply source for charging the main power supply 10 . Electric power output from the high-voltage battery is charged to the main power supply 10 via the DC/DC converter.

The starter S uses electric power supplied from the main power supply 10 to perform cranking when starting the engine.

The general load 30 is a load that does not require stable power supply when the main power supply 10 is abnormal. In other words, the general load 30 is a load that allows the power supply to become unstable when the main power supply 10 malfunctions. The general load 30 is, for example, a vehicle air conditioner, a sound system, or a car navigation system.

The secondary power supply 20 is a power storage device that functions as a power supply source when the main power supply 10 malfunctions. As the auxiliary power supply 20, for example, a power supply with a relatively small capacity such as an electric double layer capacitor (eDLC) is used. Here, the capacity of the secondary power supply 20 is set to a value that can sufficiently supply power to the protected load 40 to the extent that the running vehicle can be stopped safely. Here, from the viewpoint of making it possible to easily replace the secondary power supply 20 according to the amount of electric power required by the protected loads 40 included in the power supply system 1 and the number of the protected loads 40, the secondary power supply 20 is controlled It is preferably removably connected to unit 50 . On the other hand, for example, from the viewpoint of further miniaturization of the power supply system 1 , the sub power supply 20 may be built in the control unit 50 . Since the sub power supply 20 is built in the control unit 50, the number of wires connecting the sub power supply 20 and the control device 530 can be reduced. In addition, since the sub power supply 20 is built in the control unit 50, the length of the wiring connecting the sub power supply 20 and the control device 530 can be shortened, and the wiring resistance can be reduced. In this embodiment, the secondary power supply 20 is detachably connected to the control unit 50 .

Remaining capacity sensor 22 detects the remaining capacity (charge amount) of secondary power supply 20 and outputs the detection result to control device 530 . The remaining capacity sensor 22 is provided near the sub-power supply 20, for example.

The protected load 40 is a load that requires a stable power supply in the event of an abnormality in the main power supply. The protected load 40 is driven using power supplied from the main power supply 10 or the sub power supply 20 . The protected load 40 includes a protected load 40a, a protected load 40b, and a protected load 40c. The protected load 40b and the protected load 40c are loads that have a stronger relationship with the safety of the vehicle than the protected load 40a. Here, the load that has a strong relationship with the safety of the vehicle includes the load used to brake the running vehicle (e.g., electric brake booster), the load used to steer the vehicle (e.g., electric power steering), and loads (eg, radar and cameras) used to monitor the vehicle's surroundings. The relationship with vehicle safety is determined based on, for example, a vehicle safety requirement level (ASIL: Automotive Safety Integrity Level). Therefore, if the protected load 40b and the protected load 40c are not driven when the main power supply 10 is abnormal, braking, steering, monitoring of surrounding conditions, etc. of the vehicle may be adversely affected. On the other hand, even if the protected load 40a is not driven when the main power supply 10 is abnormal, the degree of adverse effect on vehicle braking, steering, monitoring of surrounding conditions, etc. is relatively low. The protected load 40a is, for example, a vehicle headlight. The protected load 40b is, for example, an electric brake booster of a vehicle. The protected load 40c is, for example, an electric power steering. The protected load 40a, the protected load 40b, and the protected load 40c correspond to an example of the plurality of protected loads according to the present invention, and the protected load 40a corresponds to an example of the predetermined protected load according to the present invention. do.

The main switch 510 disconnects and disconnects electrical connections between the main power supply 10 , the sub power supply 20 and the plurality of protected loads 40 . A semiconductor switch, for example, is used as the main switch 510 . When the main switch 510 is closed, the first power line 80 and the second power line 82 are electrically connected. On the other hand, when the main switch 510 is open, the electrical connection between the first power line 80 and the second power line 82 is released. Specifically, when the sub-switch 522, the sub-switch 524, the sub-switch 526 and the sub-switch 528 are closed, the main power supply 10, the sub-power supply 20 and the plurality of protected loads 40 are connected by closing the main switch 510. When they are electrically connected and the main switch 510 is opened, the electrical connection between the main power supply 10, the sub power supply 20, and the plurality of protected loads 40 is released.

Switching unit 520 switches the connection state between sub power supply 20 and each of the plurality of protected loads 40 . As the sub-switch 522, the sub-switch 524, the sub-switch 526, and the sub-switch 528 included in the switching section 520, for example, semiconductor switches are used. When the sub-switch 522 is closed, the sub-power supply 20 and the second power supply line 82 are electrically connected. On the other hand, when the sub-switch 522 is open, the electrical connection between the sub-power supply 20 and the second power supply line 82 is released. Similarly, electrical connection between the protected load 40a and the second power supply line 82 is disconnected or disconnected depending on whether the sub-switch 524 is opened or closed. Similarly, electrical connection between the protected load 40b and the second power supply line 82 is disconnected or disconnected according to the open/closed state of the sub-switch 526 . Similarly, electrical connection between the protected load 40c and the second power supply line 82 is disconnected or disconnected according to the open/closed state of the sub-switch 528 . In other words, the electrical connection state between the sub-power supply 20 and the protected load 40a, the electrical connection between the sub-power supply 20 and the protected load 40b, and the electrical connection between the sub-power supply 20 and the protected load 40b depend on the open/closed states of the sub-switches 522, 524, 526, and 528. and the electrical connection state between the sub-power supply 20 and the protected load 40c.

The control device 530 controls operations of the main switch 510 and the switching section 520 . The control device 530 outputs, for example, a control signal for opening and closing the main switch 510 to the main switch 510 . Further, the control device 530 outputs a control signal for opening/closing each sub-switch of the switching section 520 to the switching section 520, for example. By appropriately controlling the operations of the main switch 510 and the switching unit 520, the control device 530 can appropriately supply power to the load to be protected in the event of an abnormality in the main power supply, while reducing the number of auxiliary power supplies. and Such control by the control device 530 will be described later in detail.

A part or all of the control device 530 is configured by, for example, a microcomputer, a microprocessor unit, or the like. Also, part or all of the control device 530 may be composed of, for example, an updatable device such as firmware, or may be a program module or the like executed by a command from a CPU or the like. For example, the control device 530 may be one, or may be divided into a plurality of devices.

<2. Operation of Power Supply System>
Next, the operation of the power supply system 1 according to this embodiment will be described.

First, the operation of the power supply system 1 when the main power supply 10 is normal will be described with reference to FIG. FIG. 2 is a schematic diagram showing the flow of power when the main power supply is normal. The white arrows shown in FIG. 2 represent the flow of power output from the main power supply 10 .

As shown in FIG. 2, controller 530 closes main switch 510, sub-switch 524, sub-switch 526 and sub-switch 528 when main power supply 10 is normal. Therefore, as indicated by the white arrows, the power output from the main power supply 10 is supplied to the general load 30 via the first power supply line 80, and is supplied via the first power supply line 80 and the second power supply line 82. are supplied to the protected load 40a, the protected load 40b, and the protected load 40c. Thereby, the general load 30, the protected load 40a, the protected load 40b, and the protected load 40c are driven.

Here, control device 530 may open or close sub-switch 522 according to the remaining capacity (charged amount) of sub-power supply 20 . For example, when the remaining capacity of the secondary power supply 20 exceeds the determination value, the control device 530 can stop charging the secondary power supply 20 by opening the sub-switch 522 . Further, the control device 530 can charge the secondary power source 20 by closing the sub-switch 522 when the remaining capacity of the secondary power source 20 is below the determination value, for example. The determination value is appropriately set to, for example, 100%.

Thus, in the power supply system 1 , the charging of the secondary power supply 20 is controlled by the control device 530 . Further, as will be described later, in the power supply system 1, the discharge of the sub power supply 20 is also controlled by the control device 530. FIG. That is, in the power supply system 1 , charging and discharging of the sub power supply 20 is controlled by the control device 530 , so there is no need to provide another control device within the sub power supply 20 . Therefore, the number of parts in the sub power supply 20 can be reduced.

Next, the operation of the power supply system 1 when the main power supply 10 is abnormal will be described. Two examples of the operation of the power supply system 1 when the main power supply 10 is abnormal will be described below.

(2-1. First operation example)
A first operation example of the power supply system 1 when the main power supply 10 is abnormal will be described with reference to FIGS. 3 and 4. FIG. FIG. 3 is a flow chart showing the flow of processing in the first operation example performed by the control device. The control flow shown in FIG. 3 is started, for example, after the power supply system 1 is started. FIG. 4 is a schematic diagram showing the flow of electric power when the main power supply 10 is abnormal. The white arrows shown in FIG. 4 represent the flow of electric power output from the secondary power supply 20 .

When the control flow shown in FIG. 3 is started, the control device 530 acquires the voltage and current of the main power supply 10 output from the main power supply sensor 12 (step S101).

Next, the control device 530 determines whether or not the main power supply 10 is abnormal (step S103). Specifically, control device 530 determines whether main power supply 10 is abnormal based on at least one of the voltage and current of main power supply 10 .

For example, the control device 530 determines that the main power supply 10 is abnormal when the voltage of the main power supply 10 is lower than the first voltage reference value. Also, for example, the control device 530 determines that the main power supply 10 is abnormal when the voltage of the main power supply 10 is higher than the second voltage reference value. The first voltage reference value is, for example, the lower limit of the voltage at which normal driving of the protected load 40 is guaranteed. Also, the second voltage reference value is, for example, the upper limit value of the voltage at which normal driving of the protected load 40 is guaranteed. Note that the first voltage reference value and the second voltage reference value are not limited to the above examples. The first voltage reference value and the second voltage reference value may be set, for example, to values that further consider the margins with respect to the values in the above example.

Also, for example, the control device 530 determines that the main power supply 10 is abnormal when the current of the main power supply 10 is lower than the first current reference value. Further, for example, the control device 530 determines that the main power supply 10 is abnormal when the current of the main power supply 10 is higher than the second current reference value. The first current reference value is, for example, the lower limit of current that ensures normal driving of the protected load 40 . Also, the second current reference value is, for example, the upper limit value of the current that ensures normal driving of the protected load 40 . Note that the first current reference value and the second current reference value are not limited to the above examples. The first current reference value and the second current reference value may be set, for example, to values that further consider the margins with respect to the values in the above example.

Specifically, a physical failure in the main power supply 10 may cause the voltage of the main power supply 10 to drop below the first voltage reference value. In addition, the voltage of the main power supply 10 may drop below the first voltage reference value due to the fact that the main power supply 10 has been discharged for a long time even though the main power supply 10 has not been charged for a long time. Also, the voltage of the main power supply 10 may exceed the second voltage reference value due to a physical failure in the generator G or an inverter (not shown). Further, when a current large enough to melt the fuse F flows through the power supply system 1 due to a short circuit in the general load 30, the voltage of the main power supply 10 may fall below the first voltage reference value.

Here, when a current large enough to melt the fuse F flows through the power supply system 1 due to a short circuit in the general load 30, the voltage of the main power supply 10 falls below the first voltage reference value faster than the first voltage reference value. The current of the main power supply 10 exceeds the second current reference value. Therefore, in such a case, by determining whether the main power supply 10 is abnormal based on the current of the main power supply 10, it is possible to determine whether the main power supply 10 is abnormal based on the voltage of the main power supply 10. It is possible to determine whether or not the main power supply 10 is abnormal earlier than when determining whether or not.

If it is determined that the main power supply 10 is normal (step S103/NO), the process returns to step S101. On the other hand, if it is determined that the main power supply 10 is abnormal (step S103/YES), the control device 530 opens the main switch 510 (step S105) and controls the operation of the switching unit 520 to A predetermined protected load among the loads 40 (the protected load 40a, the protected load 40b, and the protected load 40c) is disconnected from the sub power supply 20 (step S111). Here, the predetermined protected load is a protected load that has a weaker relationship with vehicle safety than the standard among the plurality of protected loads 40 . In this embodiment, the protected loads having a stronger relationship with vehicle safety than the standard are the protected loads 40b and 40c, and the protected loads having a weaker relationship with vehicle safety than the standard are the protected loads. Protected load 40a. Therefore, the control device 530 disconnects the protected load 40 a and the sub-power supply 20 by opening the sub-switch 524 .

If the sub-switch 522 is open when it is determined that the main power supply 10 is abnormal, the control device 530 performs control to close the sub-switch 522 .

After the above series of processes are performed, the control flow shown in FIG. 3 ends.

As described above, in the first operation example of the power supply system 1 according to the present embodiment, when the main power supply 10 is abnormal, the main switch 510 is opened, so that the main power supply 10, the sub power supply 20, and the plurality of protected loads 40 are connected. is disconnected. That is, the power supply source of the power supply system 1 is switched from the main power supply 10 to the sub power supply 20 . Further, the sub-switch 524 is opened and the sub-switches 522, 526 and 528 are closed, thereby disconnecting the electrical connection between the sub-power supply 20 and the protected load 40a. The power supply 20 is electrically connected to the protected load 40b and the protected load 40c.

Therefore, as indicated by the white arrows in FIG. 4, the power output from the secondary power supply 20 is supplied only to the protected load 40b and the protected load 40c. In other words, the power output from the auxiliary power supply 20 is supplied only to loads that are strongly related to the safety of the vehicle.

As described above, the capacity of the secondary power supply 20 is set to a value that can supply sufficient power to the protected load 40 to safely stop the running vehicle. Specifically, the capacity of the auxiliary power supply 20 is selected so that the load to be protected 40b and the load to be protected 40c can be driven until the running vehicle is stopped at a safe place. On the other hand, the capacity of the auxiliary power supply 20 is smaller than the capacity capable of driving all the protected loads 40 until the running vehicle is stopped at a safe place.

In such a case, if power is supplied from the secondary power supply 20 to all the protected loads 40 when the main power supply 10 is abnormal, the remaining capacity of the secondary power supply 20 will be insufficient before the vehicle stops, and the load 40 to be protected will be supplied with power. No power supply. That is, before the vehicle stops, the protected load 40b and the protected load 40c, which are loads that have a strong relationship with the safety of the vehicle, cannot be driven.

On the other hand, in the power supply system 1 according to this embodiment, the power output from the secondary power supply 20 when the main power supply 10 malfunctions is supplied only to the protected loads 40b and 40c. Therefore, it is possible to prevent the secondary power supply 20 from running out of remaining capacity before the vehicle stops. In other words, the protected load 40b and the protected load 40c, which are loads having a strong relationship with the safety of the vehicle, can be driven until the vehicle stops.

(2-2. Second operation example)
A second operation example of the power supply system 1 when the main power supply 10 is abnormal will be described with reference to FIGS. 5 and 6. FIG. In the second operation example, the control device 530 disconnects the predetermined protected load (protected load 40a) from the sub power supply 20 according to the remaining capacity of the sub power supply 20 when the main power supply 10 is abnormal. Specifically, the control device 530 disconnects the predetermined protected load (protected load 40a) and the secondary power supply 20 when the remaining capacity of the secondary power supply 20 falls below the threshold when the main power supply 10 is abnormal. do. In the following, basically, the contents overlapping with the first operation example are omitted, and the differences from the first operation example will be explained.

FIG. 5 is a flow chart showing the flow of processing in the second operation example performed by the control device. The control flow shown in FIG. 5 is started, for example, after the power supply system 1 is started. FIG. 6 is a schematic diagram showing the flow of power when the remaining capacity of the secondary power supply does not fall below the threshold in the second operation example when the main power supply is abnormal. The white arrows shown in FIG. 6 represent the flow of power output from the secondary power supply 20 .

Since the processing from the start of the control flow shown in FIG. 5 to step S105 is as described in the first operation example, detailed description thereof will be omitted here. After the process of step S105 is performed in the second operation example, the control device 530 acquires the remaining capacity of the secondary power supply 20 output from the remaining capacity sensor 22 (step S107).

Next, control device 530 determines whether or not the remaining capacity of secondary power supply 20 is below a threshold (step S109). The remaining capacity threshold is set to, for example, the minimum required remaining capacity of the secondary power supply 20 (hereinafter also referred to as the minimum remaining capacity) for stopping the running vehicle in a safe place. The minimum remaining capacity is the remaining capacity of the secondary power supply 20 required to drive the protected load 40b and the protected load 40c until the running vehicle is stopped at a safe place. For example, the minimum remaining capacity is the protected load 40b and the protected load 40b until the driver stops the vehicle on a side road across two lanes when the vehicle is traveling in the overtaking lane of a highway at 150 km/h. It may be the remaining capacity of the sub-power supply 20 required to drive the load 40c. Note that the threshold value of the remaining capacity is not limited to the above example, and may be set to a value that further considers a margin with respect to the above example value, for example.

If it is determined that the remaining capacity of the secondary power supply 20 is not below the threshold (step S109/NO), the process returns to step S107. If it is determined that the remaining capacity of the secondary power supply 20 is below the threshold (step S109/YES), the process proceeds to step S111. In step S<b>111 , control device 530 disconnects protected load 40 a from secondary power supply 20 by controlling the operation of switching unit 520 .

As described above, in the second operation example of the power supply system 1 according to the present embodiment, as in the first operation example, the main power supply 10 and the sub power supply are switched by opening the main switch 510 when the main power supply 10 malfunctions. 20 and the plurality of protected loads 40 are disconnected. That is, the power supply source of the power supply system 1 is switched from the main power supply 10 to the sub power supply 20 . On the other hand, in the second operation example of the power supply system 1 according to the present embodiment, unlike the first operation example, when the main power supply 10 malfunctions, the sub-switch 522 and the sub-switch 522 remain open until the remaining capacity of the sub-power supply 20 falls below the threshold. 524, sub-switch 526 and sub-switch 528 are closed. As a result, the state in which the sub power supply 20 is electrically connected to the protected load 40a, the protected load 40b, and the protected load 40c is maintained.

Therefore, as indicated by white arrows in FIG. 6, the power output from the secondary power supply 20 is supplied to the protected load 40a, the protected load 40b, and the protected load 40c. In other words, the power output from the secondary power supply 20 has a relatively weak relationship with the safety of the vehicle, in addition to the loads that have a strong relationship with the safety of the vehicle (for example, the protected load 40b and the protected load 40c). It is supplied to the load (for example, the protected load 40a).

Therefore, in the event of an abnormality in the main power supply 10, until the remaining capacity of the secondary power supply 20 falls below the minimum remaining capacity, in addition to the load that has a strong relationship with the safety of the vehicle, the load that has a relatively weak relationship with the safety of the vehicle is driven. can be made

Further, in the second operation example of the power supply system 1 according to the present embodiment, as in the first operation example, when the main power supply 10 is abnormal and the remaining capacity of the secondary power supply 20 falls below the threshold, the sub-switch 524 is opened. state, and sub-switch 522, sub-switch 526 and sub-switch 528 are closed. Therefore, the electrical connection between the sub power supply 20 and the protected load 40a is released, and the sub power supply 20 and the protected loads 40b and 40c are electrically connected.

Therefore, as indicated by the white arrows in FIG. 4, the power output from the secondary power supply 20 is supplied only to the protected load 40b and the protected load 40c. In other words, the power output from the auxiliary power supply 20 is supplied only to loads that are strongly related to the safety of the vehicle.

As a result, in the second operation example, as in the first operation example, the shortage of the remaining capacity of the secondary power supply 20 before the vehicle stops is suppressed. In other words, the protected load 40b and the protected load 40c, which are loads having a strong relationship with the safety of the vehicle, can be driven until the vehicle stops.

As described above, in the power supply system 1 according to the present embodiment, the control device 530 opens the main switch 510 and controls the operation of the switching unit 520 when the main power supply 10 is abnormal. It controls the connection state with each of the loads 40 . As a result, power can be appropriately supplied to the protected loads 40 without providing the secondary power supply 20 to each of the protected loads 40 . In other words, the number of auxiliary power supplies 20 can be reduced while appropriately supplying power to the protected load 40 when the main power supply 10 is abnormal.

<3. Effect>
Effects obtained by the power supply system 1 according to the present embodiment will be described. The power supply system 1 according to this embodiment includes a switching unit 520 that switches the connection state between the sub power supply 20 and each of the plurality of protected loads 40 . In the power supply system 1 , the controller 530 opens the main switch 510 and controls the operation of the switching unit 520 when the main power supply 10 malfunctions, thereby controlling the connection state between the sub power supply 20 and each of the plurality of protected loads 40 . to control. As a result, the power supply source of the power supply system 1 is switched from the main power supply 10 to the sub power supply 20 when the main power supply 10 malfunctions. In addition, it is possible to appropriately switch the protected load 40 to which power output from the secondary power supply 20 is supplied when the main power supply 10 malfunctions. Therefore, in the power supply system 1 , electric power can be appropriately supplied to the loads 40 to be protected without providing the secondary power supply 20 to each of the loads 40 to be protected. Therefore, it is possible to reduce the number of auxiliary power supplies 20 while appropriately supplying power to the protected load 40 when the main power supply 10 is abnormal.

Preferably, in the power supply system 1 , the controller 530 determines whether or not the main power supply 10 is abnormal based on at least one of the voltage and current of the main power supply 10 . Accordingly, it is possible to appropriately determine whether or not the main power supply 10 is abnormal. Therefore, power can be more appropriately supplied to the protected load 40 when at least one of the voltage and current of the main power supply 10 is abnormal.

Preferably, in the power supply system 1 , the control device 530 controls the operation of the switching unit 520 when the main power supply 10 malfunctions, thereby switching between the predetermined protected load 40 a among the plurality of protected loads 40 and the sub power supply 20 . Disconnect. As a result, for example, based on the need to supply power to each protected load 40, it is possible to more appropriately switch the protected load 40 to which the power output from the secondary power supply 20 is supplied when the main power supply 10 malfunctions. can. Therefore, power can be more appropriately supplied to the protected load 40 when the main power supply 10 is abnormal.

Preferably, in the power supply system 1, the predetermined protected load 40a is a protected load that has a weaker relationship with vehicle safety than the standard among the plurality of protected loads 40. FIG. That is, among the plurality of protected loads 40, the protected load 40a having a weaker relationship with vehicle safety than the standard is disconnected from the secondary power supply 20 when the main power supply 10 malfunctions. As a result, it is possible to more appropriately switch the protected load 40 to which the power output from the secondary power supply 20 is supplied when the main power supply 10 malfunctions, based on the relationship between each protected load 40 and vehicle safety. can. Therefore, power can be more appropriately supplied to the protected load 40 when the main power supply 10 is abnormal.

Preferably, in the power supply system 1 , the control device 530 disconnects the predetermined protected load 40 a from the sub power supply 20 according to the remaining capacity of the sub power supply 20 when the main power supply 10 is abnormal. As a result, for example, when the remaining capacity of the secondary power supply 20 is relatively large when the main power supply 10 is abnormal, the power output from the secondary power supply 20 is reduced to the protected load 40 (for example, In addition to protected load 40b and protected load 40c), power is supplied to protected load 40 (eg, protected load 40a) that has a relatively low need to supply power. On the other hand, for example, when the remaining capacity of the secondary power supply 20 is relatively small when the main power supply 10 is abnormal, the power output from the secondary power supply 20 is reduced to the protected load 40 (for example, the It is supplied only to the protected load 40b and the protected load 40c). Therefore, it is possible to more appropriately switch the protected load 40 to which power output from the sub power supply 20 is supplied when the main power supply 10 malfunctions. Therefore, power can be more appropriately supplied to the protected load 40 when the main power supply 10 is abnormal.

Preferably, in the power supply system 1, the controller 530 disconnects the predetermined protected load 40a from the secondary power supply 20 when the remaining capacity of the secondary power supply 20 falls below the threshold when the main power supply 10 is abnormal. . As a result, the timing of disconnecting the predetermined protected load 40 a from the sub power supply 20 when the main power supply 10 is abnormal can be optimized according to the remaining capacity of the sub power supply 20 . Therefore, it is possible to more appropriately switch the protected load 40 to which power output from the sub power supply 20 is supplied when the main power supply 10 malfunctions. Therefore, power can be more appropriately supplied to the protected load 40 when the main power supply 10 is abnormal.

Preferably, in the power supply system 1 , the main switch 510 , the switching section 520 and the control device 530 are mounted on the same control unit 50 , and the sub power supply 20 is detachably connected to the control unit 50 . Thereby, for example, the secondary power supply 20 can be easily replaced according to the amount of electric power required by the protected loads 40 included in the power supply system 1 and the number of the protected loads 40 .

Preferably, in the power supply system 1 , the main switch 510 , the switching section 520 and the control device 530 are mounted in the same control unit 50 , and the sub power supply 20 is built in the control unit 50 . As a result, for example, it is possible to further reduce the size of the power supply system 1, reduce the number of wires connecting the sub power supply 20 and the control device 530, and reduce the wiring resistance.

<4. Conclusion>
Although the preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, the present invention is not limited to such examples. It is obvious that a person having ordinary knowledge in the technical field to which the present invention belongs can conceive of various modifications or modifications within the scope of the technical idea described in the claims. It is understood that these also naturally belong to the technical scope of the present invention.

For example, each step in the above embodiment does not necessarily have to be processed in chronological order according to the order described as the flowchart. For example, each step in the processing of the above embodiment may be processed in an order different from the order described as the flowchart, or may be processed in parallel.

Further, for example, in the second operation example of the above embodiment, when the remaining capacity of the secondary power supply 20 falls below the threshold, the control device 530 controls the load to be protected and the secondary power supply, which have a relatively weak relationship with the safety of the vehicle. 20 has been described, but the present invention is not limited to such an example. Specifically, a plurality of threshold values may be provided for comparison with the remaining capacity of the secondary power supply 20 . For example, there are three types of protected loads that have a strong relationship with vehicle safety, protected loads that have a medium relationship with vehicle safety, and protected loads that have a relatively weak relationship with vehicle safety. is present, two thresholds for the remaining capacity of the secondary power supply 20 are provided so that the control device 530 can control the safety of the vehicle when the remaining capacity of the secondary power supply 20 falls below the first threshold. If the protected load with a relatively weak relationship with the secondary power supply 20 is disconnected and the remaining capacity of the secondary power supply 20 falls below the second threshold, the protected load with an intermediate relationship with the safety of the vehicle and the sub power supply 20 can be disconnected.

Further, for example, in the above embodiment, an example in which there is one general load 30 and three protected loads 40 are described, but the present invention is not limited to such an example. The number of general loads 30 and protected loads 40 may be changed as appropriate.

Further, for example, in the above embodiment, an example in which the protected load 40b, which has a strong relationship with vehicle safety, is an electric brake booster, and the protected load 40c is an electric power steering, has been described. is not limited to For example, if the vehicle in which the power supply system 1 is mounted is an autonomous vehicle, the load that has a strong relationship with the safety of the vehicle may include an advanced driver assistance system (ADAS).

Further, for example, in the above embodiment, an example was described in which the protected load 40a, which has a weaker relationship with vehicle safety than the protected loads 40b and 40c, is a headlight, but the present invention is limited to such an example. not. For example, the protected load 40a may be a vehicle turn signal, a wiper, or the like.

DESCRIPTION OF SYMBOLS 1... Power supply system 10... Main power supply 12... Main power supply sensor 20... Sub power supply 22... Remaining capacity sensor 30... General load 40, 40a, 40b, 40c... Load to be protected, 50... Control unit, 510... Main switch, 520... Switching unit, 522, 524, 526, 528... Sub switch, 530... Control device, F ... fuse, G ... generator, S ... starter

Claims (9)

a main power supply (10);
a secondary power source (20) comprising an electric double layer capacitor or an electric double layer capacitor;
a plurality of protected loads (40) driven using power supplied from the main power supply (10) or the sub power supply (20);
a main switch (510) for connecting and disconnecting electrical connections between the main power supply (10), the sub power supply (20) and the plurality of protected loads (40);
a switching unit (520) for switching a state of connection between the secondary power supply (20) and each of the plurality of protected loads (40) by a semiconductor switch ;
a control device (530) that controls operations of the main switch (510) and the switching unit (520);
A power supply system (1) comprising
The auxiliary power supply (20) and the plurality of protected loads (40) are connected in parallel with the main power supply (10), and the capacity of the auxiliary power supply (20) is sufficient to ensure the safety of the running vehicle. is set to a value that allows sufficient power to be supplied to the plurality of protected loads (40) to the extent that it can be stopped at
The auxiliary power supply (20), the main switch (510), the switching section (520) and the control device (530) are provided in the same control unit (50),
The plurality of protected loads (40) are loads that require a stable power supply when the main power supply (10) is abnormal, and the plurality of protected loads (40) brake the running vehicle. a load used to steer the vehicle, and a load used to monitor conditions surrounding the vehicle;
The control device (530) opens the main switch (510) and controls the operation of the switching unit (520) when the main power supply (10) malfunctions, thereby controlling the operation of the sub power supply (20) and the plurality of switches. A power supply system (1) that controls the connection status with each of the protected loads (40). The power supply system (1) according to claim 1, wherein said secondary power supply (20) is detachably connected to said control unit (50). The power system (1) according to claim 1, wherein said secondary power supply (20) is housed in said control unit (50). The controller (530) according to any one of claims 1 to 3, wherein the main power supply (10) determines whether or not the main power supply (10) is abnormal based on at least one of the voltage or current of the main power supply (10). or 1. A power supply system (1) according to claim 1. When the main power supply (10) is abnormal, the control device (530) controls the operation of the switching unit (520) to switch a predetermined protected load (40a) out of the plurality of protected loads (40). ) and the secondary power supply (20). The power supply system (1) is mounted on a vehicle,
6. The power supply system (1) according to claim 5 , wherein the predetermined protected load (40a) is a protected load having a weaker relationship with the safety of the vehicle than a standard among the plurality of protected loads (40). ). The control device (530) connects the predetermined protected load (40a) and the secondary power supply (20) according to the remaining capacity of the secondary power supply (20) when the main power supply (10) is abnormal. 7. A power system (1) according to claim 5 or 6, which is released. The control device (530) disconnects the predetermined protected load (40a) from the secondary power supply (20) when the residual capacity falls below a threshold when the main power supply (10) is abnormal. A power supply system (1) according to claim 7, wherein the power supply system (1) a main power supply (10);
a secondary power source (20) comprising an electric double layer capacitor or an electric double layer capacitor;
A running vehicle which is driven by electric power supplied from the main power supply (10) or the auxiliary power supply (20) and requires stable power supply when the main power supply (10) malfunctions. a plurality of protected loads (40) including loads used to brake the vehicle, loads used to steer the vehicle, and loads used to monitor conditions surrounding the vehicle;
A control unit (50) of a power supply system (1) comprising
The auxiliary power supply (20) and the plurality of protected loads (40) are connected in parallel with the main power supply (10), and the capacity of the auxiliary power supply (20) is sufficient to ensure the safety of the running vehicle. is set to a value that allows sufficient power to be supplied to the plurality of protected loads (40) to the extent that it can be stopped at
Said control unit (50) comprises:
a main switch (510) for connecting and disconnecting electrical connections between the main power supply (10), the sub power supply (20) and the plurality of protected loads (40);
a switching unit (520) for switching a state of connection between the secondary power supply (20) and each of the plurality of protected loads (40) by a semiconductor switch ;
a control device (530) that controls operations of the main switch (510) and the switching unit (520);
with
The control device (530) opens the main switch (510) and controls the operation of the switching unit (520) when the main power supply (10) malfunctions, thereby controlling the operation of the sub power supply (20) and the plurality of switches. A control unit (50) of the power supply system (1) for controlling the connection status with each of the protected loads (40).