Intelligent driving dual-redundancy power supply system
Technical Field
The invention belongs to the field of automatic driving of electric automobiles, and particularly relates to an intelligent driving dual-redundancy power supply system.
Background
From the safety perspective of the automatic driving function, except for the processing of dangerous scenes of extreme working conditions (such as rockfall, construction roads or traffic accidents) in the environment, for application scenes influencing driving safety, such as the scenes from automatic driving L2 to L4, such as braking, steering, automatic parking, automatic driving and the like, if the power supply fails in the operation of the whole vehicle, the corresponding function of the controller fails, the control of steering and braking is lost, and further serious consequences can be caused. In order to meet the safety requirement of the automatic driving function and avoid the failure of the controller caused by the failure of the low-voltage power supply, the double redundancy design consideration of the power supply of the whole controller network is required.
Disclosure of Invention
The intelligent driving dual-redundancy power supply system disclosed by the invention can avoid that even if one power supply fails, the other power supply provides energy for the automatic driving controller, thereby ensuring normal function and driving safety.
The invention discloses an intelligent driving dual-redundancy power supply system, which comprises a main power supply loop and a secondary power supply loop; the main power supply loop comprises a main power supply protector, a main fuse box, a main storage battery, a main automatic driving controller, a vehicle body stabilizing system controller and an electric power steering controller; the slave power circuit comprises a slave power protector, a slave fuse box, a slave storage battery, a slave automatic driving controller, a base brake controller and a base steering controller;
the main power supply protector is electrically connected with the main storage battery and controls the main storage battery to respectively supply power to the main automatic driving controller, the vehicle body stabilizing system controller and the electric power steering controller through the main fuse box;
the auxiliary power supply protector is electrically connected with the auxiliary storage battery and controls the auxiliary storage battery to respectively supply power to the auxiliary automatic driving controller, the basic brake controller and the basic steering controller through the auxiliary fuse box;
when the main power supply protector or the slave power supply protector detects that the corresponding power supply loop is abnormal, the control switch of the main power supply protector is disconnected, and the other power supply protector keeps normal power supply of the corresponding power supply loop.
Further, when the main power supply protector detects that an overvoltage fault, an undervoltage fault or an overcurrent fault exists on a main power supply circuit, the protector switch of the main power supply protector is switched off, and therefore power supply of the main storage battery to the main automatic driving controller, the vehicle body stabilizing system controller and the electric power steering controller is switched off.
Further, when the slave power supply protector detects that the slave power supply loop has overvoltage or undervoltage or overcurrent faults, the protector switch of the slave power supply protector is disconnected, and therefore the slave storage battery is disconnected from supplying power to the slave automatic driving controller, the base braking controller and the base steering controller.
Furthermore, the main power supply circuit also comprises a vehicle-mounted electrical appliance load, and the main storage battery supplies power to the vehicle-mounted electrical appliance load through the main fuse box.
Furthermore, the intelligent driving dual-redundancy power supply system further comprises a power battery, wherein the power battery is electrically connected with the main power supply protector and the auxiliary power supply protector respectively, charges the main storage battery through the on-off control of the main power supply protector, and charges the auxiliary storage battery through the on-off control of the auxiliary power supply protector.
The beneficial technical effects of the invention are as follows: the main power supply loop and the slave power supply loop are arranged, the main power supply loop is provided with the main power supply protector, the slave power supply loop is provided with the slave power supply protector, the corresponding power supply loop is cut off by judging the overvoltage or undervoltage or overcurrent fault existing in the power supply loop, and the other power supply loop keeps a working state, so that a driver can be ensured to park a vehicle to a safe area even if the other power supply loop breaks down, the running safety of the vehicle is ensured, the failure of a controller caused by the failure of the power supply is avoided, and the function of the whole vehicle is further influenced.
Drawings
FIG. 1 is a diagram of an architecture of a dual redundant power system for intelligent driving.
Detailed Description
The present invention will be described in detail with reference to the accompanying drawings.
The invention discloses an intelligent driving dual-redundancy power supply system which comprises a main power supply loop, a secondary power supply loop and a power battery, wherein the main power supply loop is connected with the secondary power supply loop; the main power circuit comprises a main power protector 2, a main fuse box 6, a main storage battery 4, a main automatic driving controller 8, a vehicle body stabilizing system controller 9, a vehicle-mounted electrical appliance load 11 and an electric power steering controller 10; the slave power circuit comprises a slave power protector 3, a slave fuse box 7, a slave storage battery 5, a slave automatic driving controller 12, a base brake controller 13 and a base steering controller 14;
the main power supply protector is electrically connected with the main storage battery and controls the main storage battery to respectively supply power to the main automatic driving controller, the vehicle body stabilizing system controller, the vehicle-mounted electrical appliance load and the electric power steering controller through the main fuse box;
the slave power supply protector is electrically connected with the slave storage battery and controls the slave storage battery to respectively supply power to the slave automatic driving controller, the base brake controller and the base steering controller through the slave fuse box;
the master power protector 2 and the slave power protector 3 may be the same type of protector or different types of protector, and if they are the same type of protector, they should not fail due to a single point or common cause failure.
The power battery 1 is respectively electrically connected with the main power supply protector and the slave power supply protector, charges the main storage battery through the on-off control of the main power supply protector, and charges the slave storage battery through the on-off control of the slave power supply protector.
In the automatic driving process of the vehicle, when the main power supply protector or the secondary power supply protector detects that the corresponding power supply loop is abnormal, the control switch of the main power supply protector is switched off, and the other power supply protector keeps the normal power supply of the corresponding power supply loop. And giving a certain prompt to the driver corresponding to the automatic driving controller, and stopping the vehicle to a safe area by the driver according to the prompt of automatic driving.
The circuit loop is abnormal and has the following two conditions:
1) when the main power supply protector detects that the main power supply loop has an overvoltage or undervoltage or overcurrent fault, the protector switch is switched off, so that the power supply of the main storage battery to the main automatic driving controller, the vehicle body stabilizing system controller and the electric power steering controller is switched off.
2) When the slave power supply protector detects that the slave power supply loop has overvoltage or undervoltage or overcurrent faults, the protector switch of the slave power supply protector is disconnected, and therefore the slave storage battery is disconnected from supplying power to the slave automatic driving controller, the base braking controller and the base steering controller.
The above-mentioned overvoltage or undervoltage or overcurrent faults are present in three specific fault problems of the low-voltage supply network:
1) harness/fuse box failures, including open harness, high harness impedance, unintended fuse, etc.;
2) low safety level load faults including load short circuit, high quiescent current, unexpected load operation, etc.;
3) battery faults including battery overcooling, battery open circuit, battery aging, battery overshoot, etc.
When the power supply loop is detected to be abnormal and the vehicle is parked in a safe area, the related specific faults are solved by the following methods:
the fault of the wire harness/fuse box is solved through intelligent fuse/wire harness protection and diagnosis;
the low safety level load fault is solved by isolating the low safety level load failure;
and (4) solving the 12V storage battery fault through battery state monitoring.
According to the intelligent driving dual-redundancy power supply system disclosed by the invention, because the situation that the main power supply protector 2 and the auxiliary power supply protector 3 fail simultaneously can not occur, one power supply can supply power to the whole vehicle controller network under any situation. The normal running of the vehicle can be ensured by the main power supply protector loop and the auxiliary power supply protector loop, so that the safety of automatic driving can be improved by the dual-redundancy design.