Redundant power distribution system and method for electric vehicle and electric vehicle

Abstract

The present disclosure relates to a redundant power distribution system and method for an electric vehicle, and the electric vehicle. The redundant power distribution system comprises: a basic power distribution unit, which is used to provide electric energy for the normal operation of the entire vehicle; a first safety control power distribution unit, which is used to provide electric energy for a first braking and steering system, and the first safety control power distribution unit is connected to the output end of the basic power distribution unit via a first switch; and a second safety control power distribution unit, which is used to provide independent electric energy for a second braking and steering system, and the second safety control power distribution unit is connected to the output end of the basic power distribution unit via a second switch.

Description

Technical Field

[0001] The disclosed embodiments relate to the field of driving safety technology, and more specifically, to a redundant power distribution system and method for an electric vehicle and the electric vehicle. Background Art

[0002] Traditional fuel vehicles rely on a low-voltage battery arranged in the front cabin to ensure the energy supply of the entire vehicle when the generator is not started. After the vehicle is successfully ignited, the generator will provide energy for the entire vehicle and charge the battery. When the battery is powered, the problem of ignition failure will occur.

[0003] With the gradual popularization of new energy vehicles, both hybrid vehicles and pure electric vehicles are equipped with a power supply to provide energy for the vehicle's drive motor, and its operating voltage is generally more than 400V. Through the redundant design of the vehicle's power distribution, new energy vehicles can rely on the power supply to provide intelligent charging services for low-voltage batteries at the same time, ensuring that as long as the power supply has electricity, the vehicle will never be fed back, and the previous fuel vehicle feeding phenomenon will not occur. At the same time, in the event of an abnormality in the battery, the power supply and DCDC DC converter can provide redundant power supply to the vehicle control unit, and provide backup power when the battery fails. Through this double insurance design, the vehicle's braking and steering system will not cause the vehicle to lose control due to loss of power distribution, and the control failure caused by battery failure can be successfully avoided.

[0004] However, as the automation and safety requirements of the whole vehicle become higher and higher, the whole vehicle not only needs redundancy in the power distribution system, but also adds redundant control to the braking and steering system involved in the safety control of the whole vehicle. When the braking and steering system itself fails, there is another redundant braking and steering system that can take over in time. However, the power distribution design in the existing technology cannot meet the independent power distribution requirements of the redundant braking and steering system. When any part of the whole vehicle has an abnormality, it may spread to the braking and steering system, causing the vehicle to lose control and affect driving safety. Summary of the invention

[0005] One purpose of the embodiments of the present disclosure is to provide a new technical solution for redundant power distribution of electric vehicles to improve the driving braking safety of electric vehicles.

[0006] According to a first aspect of the present disclosure, a redundant power distribution system for an electric vehicle is provided, the system comprising:

[0007] The basic power distribution unit is used to provide electrical energy for normal operation of the vehicle;

[0008] A first safety control power distribution unit is used to provide electric energy to the first brake steering system, wherein the first safety control power distribution unit is connected to the output end of the basic power distribution unit via a first switch; and

[0009] The second safety control power distribution unit is used to provide independent power for the second braking and steering system. The second safety control power distribution unit is connected to the output end of the basic power distribution unit via a second switch.

[0010] Optionally, the basic power distribution unit includes a power supply and a DC converter, the output end of the power supply is connected to the input end of the DC converter, and the output end of the DC converter is the output end of the basic power distribution unit.

[0011] Optionally, the first safety control power distribution unit is provided with a first power supply, and the second safety control power distribution unit is provided with a second power supply, and the first power supply and the second power supply are two independent power supplies.

[0012] Optionally, the first power source and the second power source are batteries.

[0013] Optionally, the system further includes a power distribution unit, which is respectively connected to the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit, and is used to distribute and manage power according to the operating conditions of each power distribution unit.

[0014] According to a second aspect of the present disclosure, a power distribution control method for a redundant power distribution system of an electric vehicle is provided, the method comprising:

[0015] Control the basic power distribution unit to provide power for the whole vehicle operation and the first braking and steering system;

[0016] When a fault is detected in the basic power distribution unit, controlling the first safety control power distribution unit to provide power to the first brake steering system;

[0017] When a failure of the first safety control power distribution unit is detected, the second safety control power distribution unit is controlled to provide electrical energy to the second brake steering system.

[0018] Optionally, when the basic power distribution unit provides electrical energy for the operation of the entire vehicle and the first braking and steering system, the method includes:

[0019] The first switch and the second switch are controlled to operate so as to charge the first safety control power distribution unit and the second safety control power distribution unit through the basic power distribution unit.

[0020] Optionally, the method further comprises:

[0021] monitoring a handshake signal between the first brake-steering system and the second brake-steering system;

[0022] Whether the first safety control power distribution unit fails is detected according to the handshake signal.

[0023] Optionally, the method further comprises:

[0024] sending control information to the first brake-steering system and the second brake-steering system, the control information including at least one of a brake value, a torque, and a steering angle data;

[0025] When it is detected that the first safety control power distribution unit has no fault, controlling the first braking and steering system to perform an action corresponding to the control information;

[0026] When a fault is detected in the first safety control power distribution unit, the second braking and steering system is controlled to perform an action corresponding to the control information.

[0027] Optionally, when it is detected that the basic power distribution unit fails, the method further includes:

[0028] Controlling the first switch and the second switch to disconnect the basic power distribution unit from the first safety control power distribution unit and the second safety control power distribution unit; and / or,

[0029] In the case where a fault is detected in the first safety control power distribution unit, the method further includes:

[0030] The first switch and the second switch are controlled to operate so as to disconnect the first safety control power distribution unit from the second safety control power distribution unit.

[0031] According to a third aspect of the present disclosure, there is also provided a power distribution control device for a redundant power distribution system, comprising at least one memory and at least one processor, wherein the memory is used to store a computer program, and the processor is used to execute a power distribution control method for a redundant power distribution system of an electric vehicle under the control of the computer program.

[0032] According to a fourth aspect of the present disclosure, an electric vehicle is further provided, comprising a first braking and steering system, a second braking and steering system, a plurality of electronic control units, a power distribution control device according to claim 11, and a redundant power distribution system according to any one of claims 1 to 5; the first braking and steering system is arranged on the power supply circuit of the basic power distribution unit and the first safety control power distribution unit;

[0033] The second braking and steering system is arranged on the power supply circuit of the second safety control power distribution unit;

[0034] The power distribution control device is electrically connected to the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit;

[0035] The plurality of electronic control units are arranged in the redundant power distribution system so as to supply power to the plurality of electronic control units through the redundant power distribution system.

[0036] One beneficial effect of the embodiment of the present disclosure is that the redundant power distribution system of the electric vehicle of the embodiment of the present disclosure includes a basic power distribution unit, a first safety control power distribution unit and a second safety control power distribution unit. When the electric vehicle is in normal working state, the basic power distribution unit is used to supply power to the first safety control power distribution unit and the second safety control power distribution unit to ensure the normal operation of the first braking and steering system; when the basic power distribution unit fails, the first safety control power distribution unit is used to supply power to the first braking and steering system; when the first safety control power distribution unit fails, the second safety control power distribution unit is used to supply power to the second braking and steering system. The basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit can cooperate with each other and be independent of each other, which can ensure that the electric vehicle always has the necessary safety control capabilities under extreme circumstances.

[0037] Other features and advantages of the embodiments of the present disclosure will become apparent from the following detailed description of exemplary embodiments of the present disclosure with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the description, serve to explain the principles of the embodiments of the present disclosure.

[0039] Figure 1 is a schematic diagram of the structure of a redundant power distribution system for an electric vehicle provided in this embodiment;

[0040] Figure 2 This is a step diagram of a redundant power distribution method for an electric vehicle provided in this embodiment;

[0041] Figure 3 is a flow chart of a method for detecting whether a first safety control power distribution unit is faulty provided in this embodiment;

[0042] Figure 4 is a schematic block diagram of a power distribution control device for a redundant power distribution system provided in this embodiment;

[0043] Figure 5 is a schematic structural diagram of an electric vehicle provided in this embodiment; DETAILED DESCRIPTION

[0044] Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangement of components and steps, numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present invention unless otherwise specifically stated.

[0045] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

[0046] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered as part of the specification.

[0047] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0048] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0049] <System Embodiment>

[0050] Figure 1 It is a schematic diagram of the composition structure of a redundant power distribution system of an electric vehicle according to any embodiment of the present disclosure.

[0051] like Figure 1 As shown, the redundant power distribution system includes a basic power distribution unit 110, a first safety control power distribution unit 120 and a second safety control power distribution unit 130. In this embodiment, the output end of the basic power distribution unit 110, the output end of the first safety control power distribution unit 120, and the output end of the second safety control power distribution unit 130 are connected to enable the transmission of network, voltage, current and other signals between the basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130.

[0052] In this embodiment, the basic power distribution unit 110 is used to provide electric energy for the normal operation of the vehicle. The basic power distribution unit 110 includes a power supply 111 and a DC converter 112. The output end of the power supply 111 is connected to the input end of the DC converter 112, and the output end of the DC converter 112 is the output end of the basic power distribution unit 110. When the electric vehicle is operating normally, the power supply 111 provides energy for the vehicle drive motor, and its operating voltage is generally more than 400V. The DC converter 112 is used to convert the AC power of the power supply 111 into DC power, which is used to power the electronic control unit of the vehicle, maintain the normal operation of the electronic control unit, and control the normal operation of the devices related to the safety braking of the vehicle, such as the accelerator, brake, etc.

[0053] In this embodiment, the first safety control power distribution unit 120 is used to provide electrical energy to the first braking and steering system 140, which may include an electric power steering controller (Electric Power Steering, EPS) related to vehicle steering, an electronic hydraulic brake controller (Electro-Hydraulic Braking, EHB) related to braking, and other controllers related to vehicle control.

[0054] In one embodiment, the first safety control distribution unit can also be connected to other devices or equipment related to vehicle safety braking, such as vehicle sensors, and can also be connected to modules arranged between the first safety control distribution unit and the second safety control distribution unit, such as an equipment management module, a vehicle operation monitoring module, etc.

[0055] The first safety control power distribution unit 120 in this embodiment is provided with a first power supply 122, which can be a battery. When the basic power distribution unit 110 is working normally, the first power supply 122 is in a state of storing electric energy. When the basic power distribution unit 110 fails, the first power supply 122 is in a state of discharging, and is used to supply power to the first brake steering system 140, so as to prevent the first brake steering system 140 from stopping working when an accident occurs in the electric vehicle.

[0056] In this embodiment, the second safety control power distribution unit 130 and the first safety control power distribution unit 120 are in parallel relationship and have the same safety level in the system. The second safety control power distribution unit 130 is provided with a second power supply 132, which can also be a battery. The first power supply 122 and the second power supply 132 are two independent power supplies, which can ensure that when the first power supply 122 or the second power supply 132 fails, they do not affect each other, thereby ensuring the power distribution redundancy effect of the system. When the first safety control system fails, the second power supply 132 is in a discharge state and is used to supply power to the second braking and steering system to avoid the second braking and steering system from stopping working when an accident occurs in the electric vehicle. Among them, the second braking and steering system is a redundant braking and steering system controlled by the whole vehicle, that is, the second braking and steering system has the same components as the first braking and steering system 140 to achieve redundancy of the braking and steering system and avoid accidents caused by the overall failure of the first braking and steering system 140.

[0057] In this embodiment, the power distribution of the basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130 is performed by a power distribution unit (PDU), which is connected to the basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130 respectively, and is used to distribute and manage power according to the operating conditions of each power distribution unit. Specifically, the power distribution can be performed by controlling the circuit connection relationship between the basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130 through the PDU. In this embodiment, the first switch 121 is set between the output end of the basic power distribution unit 110 and the output end of the first safety control power distribution unit 120, and the second switch 131 is set between the output end of the basic power distribution unit 110 and the output end of the second safety control power distribution unit 130 to realize the connection and disconnection between the circuits of the basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130.

[0058] In one embodiment, in order to avoid power supply conflicts between the basic power distribution unit 110 and the first safety control power distribution unit 120 and the second safety control power distribution unit 130, that is, to avoid the basic power distribution unit 110 and the first safety control power distribution unit 120 from simultaneously supplying power to the first brake steering system 140, and to avoid the basic power distribution unit 110 and the second safety control power distribution unit 130 from simultaneously supplying power to the second brake steering system, the first switch 121 and the second switch 131 of this embodiment are bidirectional switches, the first switch 121 includes a sub-switch S1 and a sub-switch S2, a diode D1 is connected in parallel at both ends of the sub-switch S1, and a diode D2 is connected in parallel at both ends of the sub-switch S2, similarly, the second switch 131 includes a sub-switch S3 and a sub-switch S4, a diode D3 is connected in parallel at both ends of the sub-switch S3, and a diode D4 is connected in parallel at both ends of the sub-switch S4, wherein the conduction directions of the diode D1 and the diode D2 are opposite, and the conduction directions of the diode D3 and the diode D4 are opposite.

[0059] Therefore, in this embodiment, the on / off of the circuits of the basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130 can be controlled by the PDU to control the on / off of the sub-switch S1, the sub-switch S2, the sub-switch S3 and the sub-switch S4. When the automobile is in normal working state, the basic power distribution unit 110 is used to supply power to the first safety control power distribution unit 120 and the second safety control power distribution unit 130 to ensure the normal operation of the first braking and steering system 140; when the basic power distribution unit 110 fails, the first safety control power distribution unit 120 is used to supply power to the first braking and steering system 140, and to supply power to functional components such as vehicle body accessories to maintain the normal operation of the first braking and steering system 140 and vehicle body accessories; functional components such as vehicle body accessories are, for example, electronic control units (ECUs) that are not related to safety control, such as ECUs that control vehicle accessory devices such as lights and vehicle navigation.

[0060] When the first safety control distribution unit 120 is abnormal, or the basic distribution unit 110 and the first safety control distribution unit 120 are abnormal at the same time, the second safety control unit supplies power to the second braking steering system to ensure the braking safety of the vehicle in the event of a fault and avoid accidents.

[0061] The basic power distribution unit 110, the first safety control power distribution unit 120 and the second safety control power distribution unit 130 can cooperate with each other and be independent of each other. At the same time, there is power distribution redundancy and braking system redundancy, and it has high redundancy performance. In the event of failure of any power distribution unit, another redundant unit can automatically take over, thereby ensuring the safety of the entire vehicle.

[0062] <Method Example>

[0063] Figure 2 A redundant power distribution method for an electric vehicle according to an embodiment is shown in the following steps. The method is implemented by a power distribution control device of the vehicle. The power distribution control device includes a power distribution unit (PDU) and a vehicle control unit (VCU). Figure 1 The redundant power distribution system of an electric vehicle in FIG. 1 is taken as an example to illustrate the redundant power distribution method of this embodiment.

[0064] refer to Figure 2 The redundant power distribution method of this embodiment includes the following steps S210 to S230:

[0065] Step S210, controlling the basic power distribution unit to provide electric energy for the operation of the entire vehicle and the first braking and steering system.

[0066] In this embodiment, the basic power distribution unit is the basic output of the whole vehicle and provides the main power supply for the operation of the whole vehicle. Therefore, when the electric vehicle is working normally, the basic power distribution unit is used to provide power for the operation of the whole vehicle and the first brake steering system. The specific implementation method can control the action of the first switch 121 and the second switch 131 through the PDU. For example, the PDU controls the sub-switch S1 of the first switch 121 to be disconnected and the sub-switch S2 to be closed. The circuit is turned on from the basic power distribution unit to the first safety control power distribution unit. The basic power distribution unit charges the first safety control power distribution unit, and the first power source 122 is in a state of storing electric energy.

[0067] Similarly, the PDU controls the sub-switch S3 of the second switch 131 to be disconnected and the sub-switch S4 to be closed. The circuit is conducted from the basic power distribution unit to the second safety control power distribution unit. The basic power distribution unit charges the second safety control power distribution unit, and the second power supply 132 is in a state of storing electrical energy.

[0068] In this embodiment, the circuit detection function of the PDU itself can be used to detect whether the basic power distribution unit fails. If it is detected that the basic power distribution unit fails, the following step S220 is executed.

[0069] Step S220: When a fault is detected in the basic power distribution unit, control the first safety control power distribution unit to provide power to the first braking and steering system.

[0070] In this embodiment, possible faults of the basic power distribution unit include short circuit faults and open circuit faults. When a short circuit fault occurs in the basic power distribution unit, since the cause of the short circuit is uncertain, it is necessary to isolate the basic power distribution unit from other circuits to avoid the spread of the fault. Specifically, the sub-switch S1 and the sub-switch S2 of the first switch 121 can be controlled by the PDU to be disconnected at the same time, and the circuit between the basic power distribution unit and the first safety control power distribution unit is disconnected. Similarly, the sub-switch S3 and the sub-switch S4 of the second switch can be controlled by the PDU to be disconnected at the same time, and the circuit between the basic power distribution unit and the second safety control power distribution unit is disconnected, thereby ensuring the isolation of the fault.

[0071] When an open circuit fault occurs in the basic power distribution unit, the sub-switch S1 of the first switch 121 can be closed and the sub-switch S2 can be opened by controlling the PDU. At this time, the circuit is conducted from the first safety control power distribution unit to the basic power distribution unit. The first safety control power distribution unit can supply power to both the first brake steering system and the ECU and other devices of the vehicle body accessories.

[0072] In this embodiment, when the basic power distribution unit fails, in order to avoid the first brake steering system being affected and causing vehicle failure, a second brake steering system is set as a brake redundancy system. Therefore, in order to ensure that the second control distribution unit can perform braking actions in time when the first safety control power distribution unit fails, it is necessary to perform fault detection on the first safety control power distribution unit and the first brake steering system.

[0073] In this embodiment, when the basic power distribution unit fails, the first safety control power distribution unit may also fail, thereby causing failure of the first brake steering system. When it is detected that the basic power distribution unit and the first safety control power distribution unit fail at the same time, the connection between the second safety power distribution unit and the first safety control power distribution unit is disconnected. For example, the sub-switch S1 and the sub-switch S2 of the first switch 121 can be controlled by the PDU to be disconnected at the same time, and the circuit between the basic power distribution unit and the first safety control power distribution unit is disconnected. Alternatively, the sub-switch S3 and the sub-switch S4 of the second switch can be controlled by the PDU to be disconnected at the same time, and the circuit between the basic power distribution unit and the second safety control power distribution unit is disconnected, thereby ensuring isolation of the fault.

[0074] refer to Figure 3 , Figure 3 A flow chart of a method for detecting whether a first safety control power distribution unit is faulty is shown. In this embodiment, the method for detecting whether a first safety control power distribution unit is faulty includes the following steps S310 to S330.

[0075] Step S310: sending control information to the first brake steering system and the second brake steering system, wherein the control information includes at least one of a braking value, a torque and a steering angle data.

[0076] In this embodiment, after the VCU collects data such as the motor control system signal, the accelerator pedal signal, and the brake pedal signal, it generates control information through calculation, and the control information includes brake value, torque, and angle information. For example, the VCU collects pressure data of the accelerator pedal, calculates the target acceleration according to the size of the pressure data, and obtains the target power value according to the target acceleration. Similarly, the VCU collects pressure data of the brake pedal, calculates the target brake value according to the size of the pressure data, and the VCU collects signals from the direction sensor, and calculates the target torque and angle data according to the signals from the direction sensor.

[0077] When both the first brake steering system and the second brake steering system are normal, the VCU sends control information to the first brake steering system and the second brake steering system, and at the same time, monitors the handshake signal between the first brake steering system and the second brake steering system to maintain synchronization between the first brake steering system and the second brake steering system. The handshake signal can be an intercommunication signal between the first brake steering system and the second brake steering system, for example, the first brake steering system and the second brake steering system periodically send and receive a pulse signal of the same frequency to each other, and the pulse signal is the handshake signal. Of course, the handshake signal can also be other types of data signals, which will not be repeated here.

[0078] In one embodiment, the handshake signal between the first brake-steering system and the second brake-steering system is sent by the EPS in the first brake-steering system and the EPS in the second brake-steering system to each other.

[0079] When the VCU detects that the handshake signal between the first brake steering system and the second brake steering system is normal, it is determined that the first safety control power distribution unit is operating normally, and step S320 is executed. When the VCU detects that the handshake signal between the first brake steering system and the second brake steering system is abnormal, it is determined that the first safety control power distribution unit is faulty, and step S330 is executed.

[0080] In one embodiment, the abnormal handshake signal may be caused by a circuit failure of the basic power distribution unit or the first safety control power distribution unit, or a network failure between the first brake steering system and the second brake steering system.

[0081] Step S320: When it is detected that the first safety control power distribution unit has no fault, the first braking and steering system is controlled to perform an action corresponding to the control information.

[0082] In this embodiment, when the first safety control power distribution unit is not faulty, that is, the VCU detects a normal handshake signal, at this time, although the first safety control power distribution unit and the second safety control power distribution unit receive the control information sent by the VCU at the same time, the first brake steering system has the priority of executing actions related to the control information, and the VCU controls the first brake steering system to execute actions corresponding to the control information. For example, the VCU generates control information with a turning angle of 20 degrees, and sends the control information to the first brake steering system and the second brake steering system. Since the first brake steering system and the second brake steering system are both normal, the first brake steering system has the execution priority of the action corresponding to the control information, so the VCU controls the EPS of the first brake steering system to make the motor generate auxiliary power of corresponding size and direction to assist the driver in steering operations.

[0083] In one embodiment, after the VCU sends control information including a braking value to the first brake steering system and the second brake steering system, the VCU controls the EPS of the first brake steering system to make the motor generate a braking force corresponding to the braking value to bring about a braking effect.

[0084] Step S330: When a fault is detected in the first safety control power distribution unit, the second braking and steering system is controlled to perform an action corresponding to the control information.

[0085] In this embodiment, when a fault is detected in the first safety control power distribution unit, that is, the VCU detects that the handshake signal between the first safety control power distribution unit and the second safety control power distribution unit is abnormal, the VCU controls the second brake steering system to execute the control information, and the second brake steering system controls the vehicle brake device to execute the action corresponding to the control information according to the control information. For example, when the first safety control power distribution unit is abnormal, it will cause the first brake steering system to be unable to send a handshake signal to the second brake steering system. Then the VCU determines that the first safety control power distribution unit is abnormal. After the VCU sends the control information containing the braking value to the first brake steering system and the second brake steering system, the VCU controls the EPS of the second brake steering system to make the motor generate a braking force corresponding to the braking value to bring about a braking effect.

[0086] Step S230: When it is detected that the first safety control power distribution unit fails, the second safety control power distribution unit is controlled to provide power to the second braking and steering system.

[0087] In this embodiment, when the first safety control power distribution unit fails, regardless of whether the basic power distribution unit is normal, in order to avoid the failure of the first safety control power distribution unit affecting the first brake steering system and ensure the normal operation of the system, it is necessary to provide power to the second brake steering system through the second safety control power distribution unit. The sub-switch S1 and sub-switch S2 of the first switch can be controlled by the PDU to be disconnected at the same time, and the circuit between the first safety control power distribution unit and the second safety control power distribution unit is disconnected. At this time, the VCU controls the second brake steering system to execute the control information, and the second brake steering system controls the vehicle brake device to perform the corresponding action according to the control information, thereby ensuring the redundancy of the brake steering system.

[0088] In this embodiment, when the fault of the first safety control distribution unit is eliminated, the handshake signal between the first safety control distribution unit and the second safety control distribution unit returns to normal, the VCU resumes control of the first braking and steering system, and the VCU first braking and steering system executes the control information of the VCU.

[0089] <Device Example>

[0090] Figure 4A block diagram of a power distribution control device for a redundant power distribution system according to an embodiment is shown. In this embodiment, the power distribution control device 400 includes at least one memory and at least one processor, the memory is used to store a computer program, and the processor is used to execute a method as any of the above method embodiments under the control of the computer program.

[0091] In this embodiment, the processor of the power distribution control device 400 may include a power distribution unit 150 and a vehicle controller 410. The power distribution unit 150 is connected to the basic power distribution unit, the first safety control power distribution unit, and the second safety control power distribution unit, and is used to distribute and manage power according to the operating conditions of each power distribution unit. For example, when the basic power distribution unit provides power for the operation of the whole vehicle and the first brake steering system, the first switch and the second switch are controlled to operate so as to charge the first safety control power distribution unit and the second safety control power distribution unit through the basic power distribution unit; when the basic power distribution unit fails, the first switch and the second switch are controlled to operate so as to disconnect the connection between the basic power distribution unit and the first safety control power distribution unit and the second safety control power distribution unit; and / or, when a failure of the first safety control power distribution unit is detected, the first switch and the second switch are controlled to operate so as to disconnect the connection between the first safety control power distribution unit and the second safety control power distribution unit.

[0092] The vehicle controller is connected to the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit, and is used to monitor the handshake signal between the first brake steering system and the second brake steering system, and detect whether the first safety control power distribution unit is faulty according to the handshake signal. For example, control information is sent to the first brake steering system and the second brake steering system, and the control information includes brake value, torque and angle information; when it is detected that the first safety control power distribution unit is not faulty, the first brake steering system is controlled to execute the control information; when it is detected that the first safety control power distribution unit is faulty, the second brake steering system is controlled to execute the control information.

[0093] <Electric Vehicle Example>

[0094] Figure 5 A schematic structural diagram of an electric vehicle 500 according to an embodiment is shown.

[0095] The electric vehicle 500 includes a first braking and steering system 140 , a second braking and steering system 141 , a plurality of electronic control units ECU, the power distribution control device 400 in the above system embodiment, and a redundant power distribution system.

[0096] The first brake steering system 140 is provided on the power supply circuit of the basic power distribution unit 110 and the first safety control power distribution unit 120;

[0097] The second brake steering system 141 is provided on the power supply circuit of the second safety control power distribution unit 130;

[0098] The power distribution control device 400 is electrically connected to the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit;

[0099] Several electronic control units ECU are arranged in the redundant power distribution system to supply power to the several electronic control units through the redundant power distribution system. The several electronic control units can be arranged in any one of the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit to realize different functions. For example, the electronic control unit that can realize the safety control of the whole vehicle is arranged in the first braking and steering system or the second braking and steering system, such as the ECU that controls the airbag and the anti-lock braking system, which will not be repeated here; the electronic control unit that can realize the safety control of the whole vehicle is not arranged in the basic power distribution unit, such as the ECU that controls the active load and the lights, which will not be repeated here.

[0100] The present invention may be a system, a method and / or a computer program product. The computer program product may include a computer-readable storage medium carrying computer-readable program instructions for causing a processor to implement various aspects of the present invention.

[0101] Computer readable storage medium can be a tangible device that can hold and store instructions used by an instruction execution device. Computer readable storage medium can be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination thereof. More specific examples (non-exhaustive list) of computer readable storage medium include: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a static random access memory (SRAM), a portable compact disk read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanical encoding device, for example, a punch card or a convex structure in a groove on which instructions are stored, and any suitable combination thereof. The computer readable storage medium used here is not interpreted as a transient signal itself, such as a radio wave or other freely propagating electromagnetic wave, an electromagnetic wave propagated by a waveguide or other transmission medium (for example, a light pulse by an optical fiber cable), or an electrical signal transmitted by a wire.

[0102] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing / processing device.

[0103] The computer program instructions for performing the operation of the present invention may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages, such as Smalltalk, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. Computer-readable program instructions may be executed entirely on a user's computer, partially on a user's computer, as an independent software package, partially on a user's computer, partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect via the Internet). In some embodiments, an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), may be personalized by utilizing the state information of the computer-readable program instructions, and the electronic circuit may execute the computer-readable program instructions, thereby realizing various aspects of the present invention.

[0104] Various aspects of the present invention are described herein with reference to the flow charts and / or block diagrams of the methods, devices (systems) and computer program products according to embodiments of the present invention. It should be understood that each box of the flow chart and / or block diagram and the combination of each box in the flow chart and / or block diagram can be implemented by computer-readable program instructions.

[0105] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, so that when these instructions are executed by the processor of the computer or other programmable data processing device, a device that implements the functions / actions specified in one or more boxes in the flowchart and / or block diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause the computer, programmable data processing device, and / or other equipment to work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0106] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operating steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0107] The flow charts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the systems, methods and computer program products according to multiple embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a part of a module, a program segment or an instruction, and a part of the module, a program segment or an instruction contains one or more executable instructions for realizing the specified logical function. In some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented by a dedicated hardware-based system that performs the specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions. It is well known to those skilled in the art that it is equivalent to implement it by hardware, implement it by software, and implement it by combining software and hardware.

[0108] Embodiments of the present invention have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or technical improvements in the marketplace, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein. The scope of the present invention is defined by the appended claims.

Claims

1. A redundant power distribution system for electric vehicles, It is characterized in that The system comprises: The basic power distribution unit is used to provide electrical energy for the normal operation of the vehicle and the first brake and steering system; A first safety control power distribution unit is used to provide power to the first brake steering system when the basic power distribution unit fails, and the first safety control power distribution unit is connected to the output end of the basic power distribution unit via a first switch; and The second safety control power distribution unit is used to provide independent power to the second brake steering system when the first safety control power distribution unit fails. The second safety control power distribution unit is connected to the output end of the basic power distribution unit via a second switch.

2. The system according to claim 1, It is characterized in that The basic power distribution unit includes a power supply and a DC converter. The output end of the power supply is connected to the input end of the DC converter. The output end of the DC converter is the output end of the basic power distribution unit.

3. The system according to claim 1, It is characterized in that The first safety control power distribution unit is provided with a first power supply, and the second safety control power distribution unit is provided with a second power supply. The first power supply and the second power supply are two independent power supplies.

4. The system according to claim 3, It is characterized in that The first power source and the second power source are batteries.

5. The system according to claim 1, It is characterized in that The system further comprises a power distribution unit, which is respectively connected to the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit, and is used for distributing and managing power according to the operating conditions of each power distribution unit.

6. A power distribution control method based on the redundant power distribution system according to any one of claims 1 to 5, It is characterized in that The method comprises: Control the basic power distribution unit to provide power for the whole vehicle operation and the first braking and steering system; When a fault is detected in the basic power distribution unit, controlling the first safety control power distribution unit to provide power to the first brake steering system; When a failure of the first safety control power distribution unit is detected, the second safety control power distribution unit is controlled to provide electrical energy to the second brake steering system.

7. The method according to claim 6, It is characterized in that When the basic power distribution unit provides electrical energy for the whole vehicle operation and the first braking and steering system, the method includes: The first switch and the second switch are controlled to operate so as to charge the first safety control power distribution unit and the second safety control power distribution unit through the basic power distribution unit.

8. The method according to claim 6, It is characterized in that The method further comprises: monitoring a handshake signal between the first brake-steering system and the second brake-steering system; Whether the first safety control power distribution unit fails is detected according to the handshake signal.

9. The method according to claim 8, It is characterized in that The method further comprises: sending control information to the first brake-steering system and the second brake-steering system, the control information including at least one of a brake value, a torque, and a steering angle data; When it is detected that the first safety control power distribution unit has no fault, controlling the first braking and steering system to perform an action corresponding to the control information; When a fault is detected in the first safety control power distribution unit, the second braking and steering system is controlled to perform an action corresponding to the control information.

10. The method according to claim 6, It is characterized in that In the case where a fault is detected in the basic power distribution unit, the method further includes: Controlling the first switch and the second switch to disconnect the basic power distribution unit from the first safety control power distribution unit and the second safety control power distribution unit; and / or, In the case where a fault is detected in the first safety control power distribution unit, the method further includes: The first switch and the second switch are controlled to operate so as to disconnect the first safety control power distribution unit from the second safety control power distribution unit.

11. A power distribution control device based on a redundant power distribution system according to any one of claims 1 to 5, comprising at least one memory and at least one processor, wherein the memory is used to store a computer program, and the processor is used to execute a method according to any one of claims 6 to 10 under the control of the computer program.

12. An electric car, It is characterized in that The electric vehicle comprises a first braking and steering system, a second braking and steering system, a plurality of electronic control units, a power distribution control device according to claim 11, and a redundant power distribution system according to any one of claims 1 to 5; the first braking and steering system is arranged on the power supply circuit of the basic power distribution unit and the first safety control power distribution unit; The second braking and steering system is arranged on the power supply circuit of the second safety control power distribution unit; The power distribution control device is electrically connected to the basic power distribution unit, the first safety control power distribution unit and the second safety control power distribution unit; The plurality of electronic control units are arranged in the redundant power distribution system so as to supply power to the plurality of electronic control units through the redundant power distribution system.

Images