Control Method, Control Device, and Electronic Device of High-Voltage Interlock System

Abstract

The present invention discloses a control method, a control device, and an electronic device for a high-voltage interlock system. Among them, the method includes the following steps: obtaining an interlock switch signal and a vehicle status signal, where the interlock switch signal includes at least one of the following: a switch level signal, a switch status signal, and the vehicle status signal includes at least one of the following: a stationary state signal, a starting state signal; performing a redundancy determination on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy determination result; generating a control instruction set based on the redundancy determination result and the vehicle status signal, and the control instruction set is used to control the vehicle's battery to perform high-voltage power-off and high-voltage power-on. The present invention solves the technical problem of misjudgment of the high-voltage interlock system in the related art.

Description

Technical Field

[0001] The present invention relates to the technical field of new energy vehicles, and in particular to a control method, a control device, and an electronic device for a high-voltage interlocking system. Background Art

[0002] High-voltage safety is a crucial area for new energy vehicles, and stringent anti-electric shock design is consistently implemented throughout the vehicle and assembly processes. High-voltage interlocking, a common safety design within the industry, prohibits the vehicle from receiving high-voltage power if the interlock switch indicates a potential risk of electric shock. However, with the continued expansion of the new energy market, user complaints are growing regarding vehicle inoperability caused by high-voltage interlocking alarms triggered by assembly quality issues.

[0003] The current high-voltage interlock solution in the industry is basically as follows: interlock switches are built into high-voltage connectors and covers, and the vehicle is responsible for connecting each interlock switch in series and monitoring the voltage signal status. However, based solely on the voltage signal from this series circuit, the vehicle cannot reliably determine the true status of the interlock switches. For example, occasional poor contact between the switches or internal assembly quality issues can interfere with the voltage signal, ultimately causing the vehicle to misjudge the status, preventing the user from driving, and significantly affecting the driving experience.

[0004] Currently, existing patents primarily focus on control systems and methods for connecting high-voltage interlock switches in series based on assembly layout or vehicle functional classification. The prior art discloses a high-voltage interlock system for pure electric vehicles and a pure electric vehicle utilizing the system. The system comprises: a first high-voltage interlock circuit for the VCU, comprising an MCU, an onboard charger input plug-in, an MCU high-voltage wiring plug-in, an onboard charger high-voltage wiring plug-in, and a high-voltage junction box input plug-in; a second high-voltage interlock circuit for the VCU, comprising an air-conditioning compressor input plug-in and an air-conditioning compressor high-voltage wiring plug-in; and a vehicle VCU that, upon detecting an interlock disconnection in the first high-voltage interlock circuit of the VCU, records fault information, maintains vehicle movement, or shuts off the vehicle's power system based on vehicle speed; and upon detecting an interlock disconnection in the second high-voltage interlock circuit of the VCU, records fault information and illuminates the corresponding fault indicator light. This avoids frequent high-voltage power outages that impact user experience and the lifespan of electrical components.

[0005] The prior art also discloses an electric vehicle high-voltage interlocking circuit, comprising a main high-voltage interlocking circuit and an air-conditioning high-voltage interlocking circuit connected to the high-voltage interlocking circuit via a CAN bus; the main high-voltage interlocking circuit is provided with a main high-voltage interlocking switch, an air-conditioning high-voltage interlocking switch and a first maintenance interlocking switch connected in series with each other; the air-conditioning high-voltage interlocking circuit is provided with an air-conditioning electric compressor interlocking switch, an air-conditioning PTC heater interlocking switch and a second maintenance interlocking switch connected in series with each other; the circuit design of the present invention is simple, the cost is low and the safety is high.

[0006] The prior art also discloses a vehicle high - voltage loop interlock system, including: a main discharge loop interlock unit, a motor three - phase loop interlock unit, a high - voltage accessory loop interlock unit, and a slow - charge loop interlock unit. The present invention focuses on the positioning of the vehicle interlock state and formulates different vehicle strategies according to the functional importance of each loop.

[0007] In summary, the patents in the industry cannot achieve the impact on vehicle judgment caused by poor contact of the interlock switch or voltage signal interference; in terms of vehicle control strategies, they currently focus on hierarchical control, either cutting off the high - voltage power or giving an instrument alarm, which is still not user - friendly enough.

[0008] Currently, in the industry, only from the low - voltage voltage signal of the switch series circuit, the true state of the interlock switch cannot be reliably distinguished. For example, occasional poor contact of the switch or interference with the voltage signal caused by internal quality problems of the assembly may ultimately cause misjudgment of the vehicle. In order to improve the reliability of vehicle interlock detection, the complexity of the detection circuit can be increased or the interlock structure of the connector can be changed, but this will lead to a continuous increase in vehicle cost. Therefore, how to reduce misjudgment without significantly increasing costs under the existing technical conditions has become an urgent problem to be solved. Summary of the Invention

[0009] The embodiments of the present invention provide a control method, a control device, and an electronic device for a high - voltage interlock system to at least solve the technical problem of misjudgment of the high - voltage interlock system in the related art.

[0010] According to one embodiment of the present invention, a control method for a high - voltage interlock system is provided. The method includes the following steps: obtaining an interlock switch signal and a vehicle state signal, where the interlock switch signal includes at least one of the following: a switch level signal, a switch state signal, and the vehicle state signal includes at least one of the following: a stationary state signal, a start state signal; making a redundancy judgment on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy judgment result; generating a control instruction set based on the redundancy judgment result and the vehicle state signal, and the control instruction set is used to control the vehicle battery to perform high - voltage power - off and high - voltage power - on.

[0011] Optionally, the method further includes: obtaining a start state signal; generating a first control instruction in the control instruction set based on the switch level signal, the redundancy judgment result, and the start state signal, and the first control instruction is used to control the battery to perform high - voltage power - on.

[0012] Optionally, the method further includes: when the obtained switch status signal is a switch-off signal and the determined switch level signal is the first interlock level, determining whether the power supply protection switch in the interlock module is off, where both ends of the power supply protection switch are electrically connected to the power supply and the high-voltage relay of the battery; when it is determined that the power supply protection switch is off and the obtained vehicle status signal is a stationary status signal, generating a second control instruction in the control instruction set, where the second control instruction is used to control the battery of the vehicle to perform high-voltage power-off.

[0013] Optionally, the method further includes: when the obtained switch status signal is a switch-off signal and the determined switch level signal is the second interlock level, determining whether the cover parallel switch in the interlock module is off, where the cover parallel switch is arranged in parallel with the interlock switch; when it is determined that the cover parallel switch is off and the obtained vehicle status signal is a stationary status signal, generating a second control instruction.

[0014] Optionally, the method further includes: when the obtained switch status signal is a switch-off signal and the determined switch level signal is the third interlock level, obtaining the port voltage values of each high-voltage assembly port in the interlock module; when the port voltage values are within a first preset range and the obtained vehicle status signal is a stationary status signal, generating a second control instruction.

[0015] Optionally, the method further includes: obtaining a start status signal; when the obtained switch status signal is a switch-on signal and the power supply protection switch is in the closed state, generating a first control instruction.

[0016] Optionally, the method further includes: obtaining a start status signal; when it is determined that the switch status signal of at least one of the interlock switch and the cover parallel switch is a switch-on signal, generating a first control instruction.

[0017] Optionally, the method further includes: obtaining a start status signal; sending a start confirmation signal; receiving a user confirmation signal, where the user confirmation signal includes at least one of the following: a confirmation start signal, a confirmation not to start signal; when the received user confirmation signal is a confirmation start signal and the port voltage values are within a first preset range, generating a first control instruction.

[0018] According to one embodiment of the present invention, a control device for a high-voltage interlock system is further provided. The control device includes: an acquisition unit configured to acquire an interlock switch signal and a vehicle state signal, where the interlock switch signal includes at least one of the following: a switch level signal and a switch state signal, and the vehicle state signal includes at least one of the following: a stationary state signal and a start state signal; a determination unit configured to perform a redundancy determination on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy determination result; and a generation unit configured to generate a control instruction set based on the redundancy determination result and the vehicle state signal, where the control instruction set is used to control the vehicle's battery to perform high-voltage power-off and high-voltage power-on.

[0019] According to another aspect of the embodiments of the present invention, an electronic device is further provided, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to run the computer program to execute the above-mentioned control method of the high-voltage interlock system.

[0020] In the embodiments of the present invention, an interlock switch signal and a vehicle state signal are acquired, where the interlock switch signal includes at least one of the following: a switch level signal and a switch state signal, and the vehicle state signal includes at least one of the following: a stationary state signal and a start state signal; a redundancy determination is performed on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy determination result; and a control instruction set is generated based on the redundancy determination result and the vehicle state signal, where the control instruction set is used to control the vehicle's battery to perform high-voltage power-off and high-voltage power-on. By classifying the interlock switch and performing a redundancy determination, false judgment of the vehicle caused by user's incorrect operation is avoided, thereby achieving the technical effect of more reliably judging the state of the interlock switch, and further solving the technical problem of false judgment of the high-voltage interlock system in the related art. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The drawings described herein are used to provide a further understanding of the present invention, and constitute a part of this application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation to the present invention. In the drawings:

[0022] Figure 1 is a hardware structure block diagram of an electronic device for a control method of a high-voltage interlock system according to one embodiment of the present invention;

[0023] Figure 2 is a flowchart of a control method of a high-voltage interlock system according to one optional embodiment of the present invention;

[0024] Figure 3 is a flowchart of a control method of a high-voltage interlock system according to one optional embodiment of the present invention;

[0025] Figure 4It is a schematic structural diagram of a high-voltage interlock system according to an alternative embodiment of the present invention;

[0026] Figure 5 It is a block diagram of the structure of a control device of a high-voltage interlock system according to an embodiment of the present invention. Specific embodiments

[0027] In order to enable those skilled in the art of the present technology to better understand the solution of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0028] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and do not have to be used to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances so that the embodiments of the present invention described here can be implemented in an order different from those illustrated or described here. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0029] According to an embodiment of the present invention, an embodiment of a control method for a high-voltage interlock system is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. And, although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order than here.

[0030] This method embodiment can be executed in an electronic device or a similar computing device that includes a memory and a processor in a vehicle. Taking running on the electronic device of a vehicle as an example, as Figure 1As shown, the electronic device of a vehicle may include one or more processors 102 (the processors may include, but are not limited to, processing devices such as a central processing unit (CPU), a graphics processing unit (GPU), a digital signal processing (DSP) chip, a microcontroller unit (MCU), a field programmable gate array (FPGA), a neural network processor (NPU), a tensor processor (TPU), an artificial intelligence (AI) type processor, etc.) and a memory 104 for storing data. Optionally, the electronic device of the above-mentioned vehicle may further include a transmission device 106 for communication functions, an input / output device 108, and a display device 110. Those of ordinary skill in the art can understand that Figure 1 The structure shown is only schematic and does not limit the structure of the above-mentioned electronic device of the vehicle. For example, the electronic device of the vehicle may further include more or fewer components than those described in the above structure, or have a configuration different from that described in the above structure.

[0031] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the information processing method in the embodiments of the present invention. The processor 102 executes various functional applications and data processing by running the computer programs stored in the memory 104, that is, implements the above-mentioned information processing method. The memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memories. In some instances, the memory 104 may further include a memory remotely located relative to the processor 102, and these remote memories can be connected to the mobile terminal through a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0032] The transmission device 106 is used to receive or send data via a network. Specific examples of the above-mentioned network may include a wireless network provided by a communication provider of a mobile terminal. In one instance, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices through a base station and thus communicate with the Internet. In one instance, the transmission device may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0033] The display device 110 can be, for example, a touch-screen liquid crystal display (LCD) and a touch display (also referred to as a "touch screen" or "touch display screen"). The liquid crystal display enables a user to interact with the user interface of the mobile terminal. In some embodiments, the above-mentioned mobile terminal has a graphical user interface (GUI), and the user can perform human-computer interaction with the GUI through finger contacts and / or gestures on the touch-sensitive surface. The human-computer interaction function may optionally include the following interactions: creating web pages, drawing, word processing, creating electronic documents, games, video conferencing, instant messaging, sending and receiving emails, call interfaces, playing digital videos, playing digital music, and / or web browsing, etc. The executable instructions for performing the above human-computer interaction functions are configured / stored in a computer program product or a readable storage medium executable by one or more processors.

[0034] Figure 2 is a flowchart of a control method for a high-voltage interlock system according to an embodiment of the present invention, as Figure 2 shown, the process includes the following steps:

[0035] Step S21, obtaining an interlock switch signal and a vehicle state signal, where the interlock switch signal includes at least one of the following: a switch level signal, a switch state signal, and the vehicle state signal includes at least one of the following: a stationary state signal, a start state signal;

[0036] Among them, the switch level signal varies according to the classification method of the switch level. For example, in an exemplary embodiment of the present application, the interlock switch is divided into three levels according to the electric shock risk level. The interlock switches in different levels are in different interlock modules, and each interlock module is redundantly designed. Specifically, in this embodiment, there are a total of an A-level interlock module, a B-level interlock module, and a C-level interlock module. Among them, the A-level interlock module includes a low-voltage maintenance switch and its interlock switch, a high-voltage port of the battery pack and its interlock switch, and a power supply protection switch. The B-level interlock module includes a high-voltage assembly with a detachable cover, the cover and its interlock switch. The C-level interlock module includes other high-voltage assemblies of the whole vehicle and their interlock switches.

[0037] The switch state signal includes at least a switch closed signal and a switch open signal.

[0038] Step S22, making a redundancy judgment on the interlock module where the interlock switch is located according to the switch level signal, and obtaining a redundancy judgment result;

[0039] It should be noted that when making a redundancy judgment, according to the switch level signal

[0040] Step S23, generating a control instruction set based on the redundancy judgment result and the vehicle state signal, and the control instruction set is used to control the high-voltage power-off and high-voltage power-on of the vehicle's battery.

[0041] Through the above steps, an interlock switch signal and a vehicle status signal are obtained. The interlock switch signal includes at least one of the following: a switch level signal and a switch status signal. The vehicle status signal includes at least one of the following: a stationary state signal and a start state signal. According to the switch level signal, a redundancy judgment is performed on the interlock module where the interlock switch is located to obtain a redundancy judgment result. Based on the redundancy judgment result and the vehicle status signal, a control instruction set is generated. The control instruction set is used to control the vehicle's battery to perform high-voltage power-off and high-voltage power-on. By classifying the interlock switch by level and performing a redundancy judgment, it avoids misjudgment of the vehicle caused by user's incorrect operation, thus achieving the technical effect of more reliably judging the status of the interlock switch, and further solving the technical problem of misjudgment of the high-voltage interlock system in the related art.

[0042] Optionally, in step S23, generating a control instruction set based on the redundancy judgment result and the vehicle status signal includes the following execution steps:

[0043] Step S2310, obtain the start state signal;

[0044] Step S2311, based on the switch level signal, the redundancy judgment result, and the start state signal, generate a first control instruction in the control instruction set. The first control instruction is used to control the battery to perform high-voltage power-on.

[0045] That is to say, after the redundancy judgment is performed in the high-voltage interlock system in this embodiment, it is judged whether high-voltage power-on can be performed based on the vehicle's start state signal, the redundancy judgment result, and the switch level signal. In this way, the vehicle's high-voltage power-on can be controlled more intelligently according to the risk level of the interlock switch, and according to the characteristics of the actual application scenario, the vehicle can avoid misjudgment problems of the whole vehicle caused by accidental poor contact of vehicle internal components, vehicle internal quality problems, signal interference, etc., improving the user experience.

[0046] Optionally, in step S23, generating a control instruction set based on the redundancy judgment result and the vehicle status signal includes the following execution steps:

[0047] Step S2320, when the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is the first interlock level, judge whether the power supply protection switch in the interlock module is off, where both ends of the power supply protection switch are electrically connected to the power supply and the high-voltage relay of the battery respectively;

[0048] Specifically, in an exemplary embodiment of the application, the interlock switch at the first interlock level is arranged in the low-voltage maintenance switch.

[0049] Step S2321: When it is determined that the power supply protection switch is off and the vehicle status signal obtained is a stationary status signal, generate a second control instruction in the control instruction set, where the second control instruction is used to control the vehicle's battery to perform high-voltage power-off.

[0050] That is to say, when both the interlock switch at the first interlock level and the power supply protection switch are off, and it is determined that the vehicle is stationary, control the vehicle's battery to perform high-voltage power-off. Since the low-voltage maintenance switch is a component that is easily accessible to users in actual applications, this setting can prevent users from getting an electric shock during vehicle maintenance and ensure the personal safety of users. It should be noted that, according to actual needs, the setting position and the number of interlock switches at the first interlock level can be changed.

[0051] Optionally, in step S23, based on the redundancy judgment result and the vehicle status signal, the control instruction set is generated including the following execution steps:

[0052] Step S2330: When the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is at the second interlock level, judge whether the cover parallel switch in the interlock module is off, where the cover parallel switch is arranged in parallel with the interlock switch;

[0053] Specifically, in an exemplary embodiment of the present application, the interlock switch at the second interlock level is arranged in a high-voltage assembly with a detachable cover, the cover parallel switch is arranged in parallel with the interlock switch, and both the cover parallel switch and the interlock switch are electrically connected to the vehicle management unit.

[0054] Step S2331: When it is determined that the cover parallel switch is off and the vehicle status signal obtained is a stationary status signal, generate a second control instruction.

[0055] That is to say, when both the interlock switch at the second interlock level and the cover parallel switch are off, and it is determined that the vehicle is stationary, control the vehicle's battery to perform high-voltage power-off. Since the cover assembly is the only assembly that the staff can touch the high-voltage live part by hand during maintenance, when both the interlock switch and the cover parallel switch are off, it is determined that the cover has been fully opened, and at this time, high-voltage power-off can protect the personal safety of the staff.

[0056] Optionally, in step S23, based on the redundancy judgment result and the vehicle status signal, the control instruction set is generated including the following execution steps:

[0057] Step S2340: When the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is at the third interlock level, obtain the port voltage values of each high-voltage assembly port in the interlock module;

[0058] Step S2341: When it is determined that the port voltage value is within the first preset range and the obtained vehicle status signal is a stationary status signal, a second control instruction is generated.

[0059] It should be noted that in step S2341, the first preset range can be a numerical range where the port voltage value is lower than the output voltage value of the power battery. Since the layout positions of the high-voltage assemblies in the vehicle are not easily accessible to personnel, combining steps S2340 and S2341, by monitoring the voltage value of the high-voltage assembly port to determine whether the high-voltage connector of the high-voltage assembly is disconnected, it is possible to avoid misoperations of high-voltage power-off caused by the failure of the interlock switch itself.

[0060] Optionally, in step S2320, when it is determined that the switch level signal is the first interlock level, the following execution steps are further included in determining whether the power supply protection switch in the interlock module is disconnected:

[0061] Step S2322: Obtain the start status signal;

[0062] Step S2323: When the obtained switch status signal is a switch closed signal and the power supply protection switch is in the closed state, a first control instruction is generated.

[0063] That is to say, only when both the interlock switch and its power supply protection switch are in the closed state can high-voltage power-on be executed. At this time, the low-voltage maintenance switch is fully restored to the closed state, which can ensure the personal safety of the staff and avoid safety accidents.

[0064] Optionally, in step S2330, when it is determined that the switch level signal is the second interlock level, after determining whether the cover parallel switch in the interlock module is disconnected, the following execution steps are included:

[0065] Step S2332: Obtain the start status signal;

[0066] Step S2333: When it is determined that the switch status signal of at least one of the interlock switch and the cover parallel switch is a switch closed signal, a first control instruction is generated.

[0067] That is to say, when any one of the interlock switch and its cover parallel switch is in the closed state, high-voltage power-on can be executed. When only one of the interlock switch and its cover parallel switch is in the disconnected state, it can be determined that the cover is not fully opened and there is no risk of electric shock to personnel for the time being. At this time, the vehicle can still execute high-voltage power-on. Compared with the prior art, the risk level classification of the interlock switch is more detailed, and the vehicle status switching better meets the actual needs of users.

[0068] Optionally, in step S2340, when it is determined that the switch level signal is the third interlock level, after obtaining the port voltage values of each high-voltage assembly port in the interlock module, the following execution steps are further included:

[0069] Step S2342, obtain the start state signal;

[0070] Step S2343, send a start confirmation signal;

[0071] Step S2344, receive the user confirmation signal, and the user confirmation signal includes at least one of the following: a confirmation start signal, a confirmation not to start signal;

[0072] Step S2345, when the received user confirmation signal is a confirmation start signal and the port voltage value is within the first preset range, generate a first control instruction.

[0073] It should be noted that in step S2343, sending the start confirmation signal can include various methods, such as voice reminder, text reminder, image reminder, etc., mainly used to ask the user whether to confirm starting the vehicle.

[0074] Steps S2342 to S2345 are designed to control that when the interlock of any high-voltage assembly in the vehicle is disconnected, according to the user's intention, high-voltage power-on and starting of the vehicle can still be performed, avoiding the situation where the user cannot move the vehicle.

[0075] Figure 3 It is a schematic diagram of the control method of the high-voltage interlock system according to an optional embodiment of the present invention. Figure 4 It is a structural schematic diagram of the high-voltage interlock system according to an embodiment of the present invention. Figure 3 The control method shown can be used to control Figure 4 The high-voltage interlock system shown. [[ID=BO]]

[0076] As Figure 4 shown, the high-voltage interlock system includes an A-level safety detection circuit, a B-level safety detection circuit, a C-level safety detection circuit, a battery management unit, and a vehicle management unit. Among them, the A-level safety detection circuit includes a low-voltage maintenance switch, an interlock switch with an interlock level of A-1 (hereinafter referred to as interlock switch A-1), a power supply protection switch, and an interlock switch with an interlock level of A-2 (hereinafter referred to as interlock switch A-2). The B-level safety detection circuit includes a total assembly cover, an interlock switch with an interlock level of B-1 (hereinafter referred to as interlock switch B-1) and an interlock switch with an interlock level of B-2 (hereinafter referred to as interlock switch B-2). The C-level safety detection circuit includes the vehicle high-voltage assembly and its interlock switch, such as interlock switches C-1 to C-n shown in the figure.

[0077] Specifically, both ends of the power supply protection switch are electrically connected to the 12V power supply and the high-voltage relay port of the power battery. The interlock switches A-1 and A-2 are arranged in series. The interlock switches B-1 and B-2 are arranged in parallel. Both the interlock switch B-1 and the interlock switch B-2 are electrically connected to the vehicle management unit. The high-voltage assembly ports corresponding to the interlock switches C-1 to C-n are respectively electrically connected to the high-voltage output end of the power battery. The vehicle management unit communicates with the battery management unit, and both the battery management unit and the vehicle management unit can communicate with the human-machine interface.

[0078] As Figure 3 shown, the control method of the high-voltage interlock system specifically includes the following steps:

[0079] Step S301: Receive the interlock switch signal. The interlock switch signal includes at least an interlock level signal and a switch status signal. The switch status signal includes at least a switch-off signal and a switch-on signal. When the switch-off signal of any interlock switch is received, go to step S302;

[0080] Step S302: Interlock level judgment. According to the switch level signal in the received interlock switch signal, the interlock level and the interlock module where the interlock switch is located can be judged;

[0081] Step S303: Redundancy judgment, determine the redundancy judgment result;

[0082] Specifically, as Figure 3 shown, when the interlock switch A-1 is turned off, redundancy judgment is performed on the power supply protection switch in the A-level safety detection circuit. When the power supply protection switch is turned off, it is confirmed that the low-voltage maintenance switch has been turned off; when one of the interlock switches B-1 and B-2 is turned off, redundancy judgment is performed on the other interlock switch. When both interlock switches are turned off, it is confirmed that the assembly cover has been opened; when any one of the interlock switches C-1 to C-n is turned off, redundancy judgment is performed on the voltage of the high-voltage assembly port corresponding to the interlock switch to determine that the high-voltage connector of the high-voltage assembly has been disconnected. When it is determined that the low-voltage maintenance switch has been turned off, the assembly cover has been opened, or the high-voltage connector of the high-voltage assembly has been disconnected, go to step S304.

[0083] Step S304: Obtain the vehicle speed information of the vehicle, judge whether the vehicle is in a stationary state according to the vehicle speed information. When it is determined that the vehicle is in a stationary state, go to step S305;

[0084] Step S305: Perform high-voltage power-off;

[0085] Specifically, when the interlock level is A, the battery management unit immediately powers down under high voltage; when the interlock level is B or C, the vehicle management unit notifies the battery management unit to perform high-voltage power-down.

[0086] Step S306: Determine whether the user has an operation to start the vehicle, that is, whether a vehicle start signal is received. If the user has an operation to start the vehicle, proceed to step 307;

[0087] Step S307: Perform redundancy judgment to determine the redundancy judgment result;

[0088] Specifically, when the interlock level is A, when it is determined that both the interlock switch A-1 and the power supply protection switch are closed, proceed to step S308; when the interlock level is B, when it is determined that both the interlock switch B-1 and the interlock switch B-2 are in the closed state, proceed to step S308; when the interlock level is C, perform user interface requirement confirmation. For example, the vehicle management unit issues a query through the human-machine interface "The interlock status is abnormal. On the premise of confirming the safety of personnel, do you want to resume high-voltage power-on?", and the user can choose to continue high-voltage power-on or cancel high-voltage power-on. When the user confirms to continue high-voltage power-on, after confirming that the high-voltage assembly port is in the non-powered state, proceed to step S308.

[0089] Step S308: The vehicle management unit notifies the battery management unit to perform high-voltage power-on.

[0090] Optionally, in step S307, when it is determined that one of the interlock switch A-1 and the power supply protection switch is in the open state, the battery management unit can prompt through the human-machine interaction interface "Please restore the maintenance switch and then start the vehicle"; when it is determined that at least one of the interlock switch B-1 and the interlock switch B-2 is in the open state, the vehicle management unit can prompt through the human-machine interaction interface "Please check the interlock system", and the vehicle does not perform high-voltage power-down operation. Moreover, only when both the interlock switch B-1 and the interlock switch B-2 are in the closed state, the alarm prompt on the human-machine interface will disappear.

[0091] Those skilled in the art should understand that the above-mentioned ways of prompting through the human-machine interaction interface can be various ways such as warning light prompting, voice prompting, text prompting, and image prompting.

[0092] Adopting the high-voltage interlock system and the control method of the high-voltage interlock system in the above embodiments, the achievable technical effects are as follows:

[0093] The low-voltage maintenance switch is usually arranged in a place where the staff can easily access it (such as the front engine compartment). The low-voltage maintenance switch is used as part of the Class A safety detection circuit. When the low-voltage maintenance switch is pulled out, the battery management unit recognizes that the interlock switch A-1 is in the off state. The battery management unit determines that the high-voltage relay is in the off state by detecting the voltage value at the end of the high-voltage relay connected to the 12V power supply. At this time, it can be determined that the power supply protection switch is off. That is to say, when the low-voltage maintenance switch is pulled out, both the interlock switch A-1 and the power supply protection switch are in the off state. At this time, since the high-voltage relay is off, the battery realizes high-voltage power-off. Before the low-voltage maintenance switch is restored to its original state after being pulled out, when the staff starts high-voltage power-on, since the high-voltage relay is off and the 12V power supply is missing, the battery management unit can prompt "Please restore the maintenance switch before starting the vehicle" through the human-machine interface. In this embodiment, an additional interlock switch A-2 is added to determine whether the connection between the battery management unit and the Class A safety detection circuit is normal, so that when the high-voltage interlock system fails due to connection line problems during the control process, the cause of the failure can be quickly determined.

[0094] The high-voltage assembly with a detachable cover is usually arranged in a place where the staff can access it relatively easily, and it is the only assembly that the staff can touch the high-voltage live part by hand during the maintenance and detection process. The high-voltage assembly with a detachable cover is used as part of the Class B safety detection circuit. The high-voltage assembly with a detachable cover includes a detachable cover, an interlock switch B-1, and an interlock switch B-2. The interlock switch B-1 and the interlock switch B-2 are arranged in parallel. In fact, the interlock switch B-1 and the interlock switch B-2 are redundant judgment parts for each other. When one of the interlock switches is off, it is necessary to determine the redundant judgment result by judging the state of the other interlock switch. When the staff fully opens the cover, both the interlock switch B-1 and the interlock switch B-2 are in the off state. At this time, it can be judged according to the vehicle state of the whole vehicle. When the vehicle is in a stationary state, the vehicle management unit informs the battery management unit to perform high-voltage power-off through a communication method (such as CAN line); when it is detected that only one of the interlock switch B-1 and the interlock switch B-2 is off, the vehicle management unit regards the cover as not fully opened, and there is no risk of electric shock to the personnel temporarily, so it informs the human-machine interface through the CAN line "Please check the interlock system", and the vehicle will not perform high-voltage power-off; finally, only when both the interlock switches B-1 and B-2 are restored to the closed state, the alarm information on the human-machine interface will disappear.

[0095] Since the remaining high-voltage assemblies are usually not easily accessible due to their layout positions, and the high-voltage connectors have special locking mechanisms, usually only professional personnel can disassemble them, and after disassembly, they should meet the electric shock protection design of IPXXB. Therefore, these assemblies and their interlock switches are defined as part of the Class C safety detection circuit. The high-voltage assembly includes the interlock switches C-1, …, C-n at the high-voltage assembly ports and the voltage detection module on the high-voltage input side. The voltage detection module is the redundant judgment module for each interlock switch. When the interlock switch of a certain high-voltage assembly is in the off state, the vehicle management unit detects whether the input voltage of the high-voltage assembly is abnormal. If there is a significant difference between the input voltage and the output voltage of the power battery, it is determined that the high-voltage connector of the high-voltage assembly has been disconnected. At this time, if the vehicle is in a stationary state, high-voltage power-off can be executed; before the interlock switch is closed, when the vehicle start operation of the operator is detected, the vehicle management unit can send an inquiry through the human-machine interface "The interlock state is abnormal. On the premise of ensuring personal safety, do you want to resume high-voltage power-on?", and according to the user's intention, for example, when the user confirms to start the vehicle, high-voltage power-on is executed.

[0096] It can be seen from the above effect analysis that when the low-voltage maintenance switch is pulled out, the vehicle's high-voltage power-off, and the high-voltage interlock system will prevent the user's high-voltage power-on operation; when the personnel fully open the cover, the vehicle's high-voltage power-off, when the personnel partially open the cover, the vehicle does not execute high-voltage power-off, but the vehicle management unit will prompt the user of the state of the high-voltage interlock system, and when the staff partially open the cover, the vehicle can execute high-voltage power-on operation; when the interlock state of any high-voltage assembly is not restored and the staff starts the vehicle, the vehicle management unit interacts with the personnel to confirm the user's intention and executes high-voltage power-on according to the user's intention. That is to say, in the high-voltage interlock system in this embodiment, different high-voltage power-on measures are taken according to the level of the interlock switch, avoiding the "one-size-fits-all" vehicle high-voltage interlock method in the prior art, improving the reliability of the interlock system monitoring, effectively avoiding the vehicle misjudgment caused by poor contact of the interlock switch itself, voltage signal interference, connecting wire harness problems and the quality problems of the high-voltage assembly itself. The vehicle can resume high-voltage power-on and vehicle driving according to the user's intention, avoiding the problem of the decline of the user experience caused by the vehicle being unable to move.

[0097] In this embodiment, a vehicle is also provided. The vehicle includes a high-voltage interlock system, and the high-voltage interlock system is the high-voltage interlock system in the above embodiment. Optionally, the vehicle can be a new energy vehicle. The new energy vehicle equipped with the above high-voltage interlock system and its control method can achieve the balance between personnel electric shock protection and user driving convenience through the high-voltage interlock system, improve the user experience, and effectively protect the safety of personnel. And when adopting the above high-voltage interlock system, there is no need to increase the complexity of the circuit and change the interlock structure of the connector, and the vehicle cost is controlled within a lower range, and the manufacturing cost of the new energy vehicle is within a reasonable range.

[0098] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions for causing a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in various embodiments of the present invention.

[0099] In this embodiment, a control device for a high-voltage interlock system is also provided. This device is used to implement the above embodiments and preferred implementation manners, and those that have been described will not be repeated. As used hereinafter, the term "module" can be a combination of software and / or hardware that can achieve a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware is also possible and contemplated.

[0100] Figure 5 is a structural block diagram of a control device for a high-voltage interlock system according to one embodiment of the present invention. As Figure 5 shown, the device includes: an acquisition unit 52, and the acquisition unit 52 is used to acquire an interlock switch signal and a vehicle state signal. Among them, the interlock switch signal includes at least one of the following: a switch level signal, a switch state signal, and the vehicle state signal includes at least one of the following: a stationary state signal, a startup state signal; a determination unit 54, and the determination unit 54 is used to perform a redundancy determination on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy determination result; a generation unit 56, and the generation unit 56 is used to generate a control instruction set based on the redundancy determination result and the vehicle state signal, and the control instruction set is used to control the vehicle battery to perform high-voltage power-off and high-voltage power-on.

[0101] Through the above control device, an interlock switch signal and a vehicle state signal are acquired, where the interlock switch signal includes at least one of the following: a switch level signal, a switch state signal, and the vehicle state signal includes at least one of the following: a stationary state signal, a startup state signal; according to the switch level signal, a redundancy determination is performed on the interlock module where the interlock switch is located to obtain a redundancy determination result; based on the redundancy determination result and the vehicle state signal, a control instruction set is generated, and the control instruction set is used to control the vehicle battery to perform high-voltage power-off and high-voltage power-on. By classifying the interlock switch by level and performing a redundancy determination, the misjudgment of the vehicle caused by the user's misoperation is avoided, thereby achieving the technical effect of more reliably judging the state of the interlock switch, and further solving the technical problem of misjudgment of the high-voltage interlock system in the related art.

[0102] It should be noted that the above-mentioned modules can be implemented by software or hardware. For the latter, it can be implemented in the following ways, but not limited to: all the above-mentioned modules are located in the same processor; or, the above-mentioned modules are respectively located in different processors in any combination form.

[0103] An embodiment of the present invention also provides a storage medium, in which a computer program is stored. Wherein, the computer program is set to execute the steps in any one of the above method embodiments when running.

[0104] Optionally, in this embodiment, the above storage medium can be set to store a computer program for executing the following steps:

[0105] Step S1, obtain an interlock switch signal and a vehicle status signal. Wherein, the interlock switch signal includes at least one of the following: a switch level signal, a switch status signal, and the vehicle status signal includes at least one of the following: a stationary state signal, a start state signal;

[0106] Step S2, perform a redundancy judgment on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy judgment result;

[0107] Step S3, generate a control instruction set based on the redundancy judgment result and the vehicle status signal, and the control instruction set is used to control the vehicle's battery to perform high-voltage power-off and high-voltage power-on.

[0108] Optionally, in this embodiment, the above storage medium may include but is not limited to: various media such as a USB flash drive, a read-only memory (ROM for short), a random access memory (RAM for short), a mobile hard disk, a magnetic disk, or an optical disc that can store a computer program.

[0109] An embodiment of the present invention also provides a processor, which is set to run a computer program to execute the steps in any one of the above method embodiments.

[0110] Optionally, in this embodiment, the above processor can be set to execute the following steps through a computer program:

[0111] Step S1, obtain an interlock switch signal and a vehicle status signal. Wherein, the interlock switch signal includes at least one of the following: a switch level signal, a switch status signal, and the vehicle status signal includes at least one of the following: a stationary state signal, a start state signal;

[0112] Step S2, perform a redundancy judgment on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy judgment result;

[0113] Step S3: Based on the redundancy determination result and the vehicle status signal, generate a control instruction set for controlling the vehicle's battery to perform high-voltage power-off and high-voltage power-on.

[0114] An embodiment of the present invention also provides an electronic device, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to run the computer program to execute the control method of the above high-voltage interlock system.

[0115] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments and optional implementation manners, and will not be elaborated herein.

[0116] The above serial numbers of the embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0117] In the above embodiments of the present invention, the descriptions of each embodiment have their own focuses. For the parts not detailed in a certain embodiment, reference may be made to the relevant descriptions of other embodiments.

[0118] In the several embodiments provided by the present application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only illustrative. For example, the division of the units can be a logical function division, and there can be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections to each other can be through some interfaces. The indirect couplings or communication connections of the units or modules can be in an electrical or other form.

[0119] The units described as separate components may or may not be physically separated. The components displayed as units may or may not be physical units, that is, they can be located in one place or distributed to multiple units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0120] In addition, in each embodiment of the present invention, the functional units can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated units can be implemented in the form of hardware or in the form of software functional units.

[0121] When the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, read-only memories (ROMs), random access memories (RAMs), mobile hard disks, magnetic disks, or optical discs.

[0122] The above are only the preferred embodiments of the present invention. It should be noted that for those of ordinary skill in the art, without departing from the principle of the present invention, several improvements and modifications can be made, and these improvements and modifications should also be regarded as the protection scope of the present invention.

Claims

1. A control method for a high-voltage interlock system, characterized in that The method includes the following steps: Obtain an interlock switch signal and a vehicle status signal, where the interlock switch signal at least includes a switch level signal and a switch status signal, and the vehicle status signal includes at least one of the following: a stationary state signal, a startup state signal; Classify the interlock switches into three levels according to the electric shock risk level. The first interlock level includes a low-voltage maintenance switch and its interlock switch, a high-voltage port of the battery pack and its interlock switch, and a power supply protection switch. The second interlock level includes a high-voltage assembly with a detachable cover, the cover and its interlock switch. The third interlock level includes other high-voltage assemblies of the whole vehicle and their interlock switches; According to the switch level signal, perform a redundancy judgment on the interlock module where the interlock switch is located to obtain a redundancy judgment result; Based on the redundancy judgment result and the vehicle status signal, generate a control instruction set for controlling the high-voltage power-off and high-voltage power-on of the vehicle's battery; Wherein, when the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is the third interlock level, obtain the port voltage values of each high-voltage assembly port in the interlock module; Obtain the startup state signal; Send a startup confirmation signal; Receive a user confirmation signal, where the user confirmation signal includes at least one of the following: a confirmation startup signal, a confirmation not to start signal; When the received user confirmation signal is the confirmation startup signal and the port voltage value is within a first preset range, generate a first control instruction for controlling the high-voltage power-on of the battery; 2. The method according to claim 1, characterized in that, The method further includes: Obtain the startup state signal; Based on the switch level signal, the redundancy judgment result and the startup state signal, generate a first control instruction in the control instruction set; 3. The method according to claim 2, wherein The method further includes: When the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is the first interlock level, judge whether the power supply protection switch in the interlock module is off, where both ends of the power supply protection switch are electrically connected to a power supply and a high-voltage relay of the battery respectively; When it is determined that the power supply protection switch is off and the obtained vehicle status signal is the stationary state signal, generate a second control instruction in the control instruction set, where the second control instruction is used to control the high-voltage power-off of the vehicle's battery; 4. The method according to claim 3, characterized in that The method further includes: When the obtained switch status signal is the switch-off signal and it is determined that the switch level signal is the second interlock level, judge whether the cover parallel switch in the interlock module is off, where the cover parallel switch is arranged in parallel with the interlock switch; When it is determined that the cover parallel switch is off and the obtained vehicle status signal is the stationary state signal, generate the second control instruction.

5. The method according to claim 3, characterized in that, When the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is the third interlock level, after obtaining the port voltage values of each high-voltage assembly port in the interlock module, the method further includes: When it is determined that the port voltage value is within the first preset range and the obtained vehicle status signal is the stationary status signal, generate the second control instruction.

6. The method according to claim 3, characterized in that, The method further includes: Obtain the start status signal; When the obtained switch status signal is a switch-closed signal and the power supply protection switch is in the closed state, generate the first control instruction.

7. The method according to claim 4, wherein The method further includes: Obtain the start status signal; When it is determined that the switch status signal of at least one of the interlock switch and the cover parallel switch is a switch-closed signal, generate the first control instruction.

8. A control device for a high-voltage interlock system, characterized in that, The control device includes: An acquisition unit, which is used to acquire an interlock switch signal and a vehicle status signal, where the interlock switch signal at least includes a switch level signal and a switch status signal, and the vehicle status signal includes at least one of the following: a stationary status signal, a start status signal; The interlock switch is divided into three levels according to the electric shock risk level. The first interlock level includes a low-voltage maintenance switch and its interlock switch, a high-voltage port of the battery pack and its interlock switch, and a power supply protection switch. The second interlock level includes a high-voltage assembly with a detachable cover, the cover and its interlock switch. The third interlock level includes other high-voltage assemblies of the whole vehicle and their interlock switches; A determination unit, which is used to perform redundancy judgment on the interlock module where the interlock switch is located according to the switch level signal to obtain a redundancy judgment result; A generation unit, which is used to generate a control instruction set based on the redundancy judgment result and the vehicle status signal, and the control instruction set is used to control the battery of the vehicle to perform high-voltage power-off and high-voltage power-on; Wherein, when the obtained switch status signal is a switch-off signal and it is determined that the switch level signal is the third interlock level, obtain the port voltage values of each high-voltage assembly port in the interlock module; Obtain the start status signal; Send a start confirmation signal; Receive a user confirmation signal, and the user confirmation signal includes at least one of the following: a confirmation start signal, a confirmation not to start signal; When the received user confirmation signal is the confirmation start signal and the port voltage value is within the first preset range, generate a first control instruction, and the first control instruction is used to control the battery to perform high-voltage power-on.

9. An electronic device, comprising a memory and a processor, characterized in that, A computer program is stored in the memory, and the processor is configured to run the computer program to execute the control method of the high-voltage interlock system described in any one of claims 1 to 7.

Images