Fault protection method and system for electric drive system of electric vehicle

Abstract

The present invention discloses a fault protection method and system for an electric vehicle electric drive system; the method includes: acquiring various real-time parameters of the electric drive system; determining whether the electric drive system has a fault according to the acquired various parameters, determining whether the current torque output limit of the electric drive system is Tmax, if so, determining whether the opening protection switch of the motor controller is detected to be disconnected; if so, determining that the electric drive system has a secondary fault; if not, determining that the electric drive system has a primary fault; judging whether the current torque output limit of the electric drive system is 0, if not, determining that the electric drive system has a tertiary fault; if so, determining whether the fault is allowable to be restored within the current power-on cycle, if so, judging whether the IGBT is turned off; if not, determining that the electric drive system has a sixth-level fault; if the IGBT is not turned off, determining that the electric drive system has a fourth-level fault; if the IGBT is turned off, determining that the electric drive system has a fifth-level fault.

Description

Technical Field

[0001] The present invention relates to the technical field of new energy vehicles, and particularly to a fault protection method and system for an electric drive system of an electric vehicle. Background Art

[0002] The statements in this part only mention the background art related to the present invention and do not necessarily constitute prior art.

[0003] With the development of electric vehicle technology, the market share of electric vehicles has been continuously expanding, and the service objects have gradually changed from initial large customers to private users. Endurance is no longer the only focus of electric vehicles. Users have begun to pay attention to the driving experience of electric vehicles. When a fault occurs in the electric drive system of the vehicle, the electric vehicle will suddenly lose power, and there will be no power output when stepping on the accelerator pedal, which seriously affects the user's vehicle use safety and driving experience.

[0004] The current processing mechanism of the electric vehicle drive system after a fault occurs is not perfect enough. It only roughly classifies the faults and performs actions such as limiting power output and turning off the tubes (IGBT modules), without making a detailed classification according to the fault triggering mechanism. Summary of the Invention

[0005] In order to solve the deficiencies of the prior art, the present invention provides a fault protection method and system for an electric drive system of an electric vehicle; classifies the faults according to the severity of the faults, and performs targeted processing for different levels of electric drive system faults, so as to improve the user's driving experience and reduce safety-related problems.

[0006] In the first aspect, the present invention provides a fault protection method for an electric drive system of an electric vehicle;

[0007] The fault protection method for an electric drive system of an electric vehicle, which is applied to a motor controller, includes:

[0008] Obtain various real-time parameters of the electric drive system; according to the obtained various parameters, determine whether a fault occurs in the electric drive system. If so, determine whether the current torque output limit of the electric drive system is Tmax;

[0009] Determine whether the current torque output limit of the electric drive system is Tmax, where Tmax is the maximum allowable output torque when the electric drive system is working normally; if so, determine whether the open cover protection switch of the motor controller is detected to be disconnected; if not, determine whether the current torque output limit of the electric drive system is 0;

[0010] Determine whether the open cover protection switch of the motor controller is detected to be disconnected. If so, determine that the electric drive system has a secondary fault; if not, determine that the electric drive system has a primary fault;

[0011] Determine whether the torque output limit of the current electric drive system is 0. If so, determine whether the fault is allowable to be recovered within the current power-on cycle; if not, determine that the electric drive system has a level-three fault.

[0012] Determine whether the fault is allowable to be recovered within the current power-on cycle. If so, determine whether the insulated gate bipolar transistor (IGBT) of the motor controller is turned off; if not, determine that the electric drive system has a level-six fault.

[0013] Determine whether the insulated gate bipolar transistor (IGBT) of the motor controller is turned off. If it is not turned off, determine that the electric drive system has a level-four fault; if it is turned off, determine that the electric drive system has a level-five fault.

[0014] In a second aspect, the present invention provides a fault protection system for an electric vehicle electric drive system.

[0015] The fault protection system for an electric vehicle electric drive system includes:

[0016] An acquisition module, which is configured to: acquire various real-time parameters of the electric drive system; determine whether the electric drive system has a fault according to the acquired various parameters. If so, determine whether the torque output limit of the current electric drive system is Tmax.

[0017] A first determination module, which is configured to: determine whether the torque output limit of the current electric drive system is Tmax, where Tmax is the maximum allowable output torque when the electric drive system is operating normally. If so, determine whether the open cover protection switch of the motor controller is detected to be disconnected; if not, determine whether the torque output limit of the current electric drive system is 0.

[0018] A second determination module, which is configured to: determine whether the open cover protection switch of the motor controller is detected to be disconnected. If so, determine that the electric drive system has a level-two fault; if not, determine that the electric drive system has a level-one fault.

[0019] A third determination module, which is configured to: determine whether the torque output limit of the current electric drive system is 0. If so, determine whether the fault is allowable to be recovered within the current power-on cycle; if not, determine that the electric drive system has a level-three fault.

[0020] A fourth determination module, which is configured to: determine whether the fault is allowable to be recovered within the current power-on cycle. If so, determine whether the insulated gate bipolar transistor (IGBT) of the motor controller is turned off; if not, determine that the electric drive system has a level-six fault.

[0021] A fifth determination module, which is configured to: determine whether the insulated gate bipolar transistor (IGBT) of the motor controller is turned off. If it is not turned off, determine that the electric drive system has a level-four fault; if it is turned off, determine that the electric drive system has a level-five fault.

[0022] In a third aspect, the present invention further provides an electronic device, including:

[0023] a memory for non - temporarily storing computer - readable instructions; and

[0024] a processor for running the computer - readable instructions,

[0025] wherein, when the computer - readable instructions are run by the processor, the method described in the first aspect above is executed.

[0026] In a fourth aspect, the present invention further provides a storage medium that non - temporarily stores computer - readable instructions, wherein when the non - temporary computer - readable instructions are executed by a computer, the instructions for executing the method described in the first aspect are executed.

[0027] In a fifth aspect, the present invention further provides a computer program product, including a computer program that, when run on one or more processors, is used to implement the method described in the first aspect above.

[0028] Compared with the prior art, the beneficial effects of the present invention are:

[0029] Classify faults according to the severity of the faults, and conduct targeted processing for different levels of electric drive system faults, so as to improve the user's driving and riding experience and reduce safety - related problems. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The accompanying drawings forming a part of this specification are used to provide a further understanding of the present invention. The schematic embodiments and descriptions thereof of the present invention are used to explain the present invention and do not constitute an improper limitation of the present invention.

[0031] Figure 1 is a state machine block diagram of the motor controller for Embodiment 1;

[0032] Figure 2 is a schematic diagram of the electric drive system for Embodiment 1. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0033] It should be noted that the following detailed description is exemplary and is intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those of ordinary skill in the technical field to which the present invention belongs.

[0034] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present invention. As used herein, unless the context clearly indicates otherwise, the singular forms are also intended to include the plural forms. In addition, it should also be understood that the terms "comprising" and "having" and any of their variations are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0035] In the case of no conflict, the embodiments in the present invention and the features in the embodiments can be combined with each other.

[0036] All data acquisition in this embodiment is based on compliance with laws, regulations and user consent for the legal application of data.

[0037] Embodiment 1

[0038] This embodiment provides a fault protection method for an electric vehicle electric drive system;

[0039] A fault protection method for an electric vehicle electric drive system, applied to a motor controller, includes:

[0040] S101: Obtain various real-time parameters of the electric drive system; according to the obtained various parameters, determine whether the electric drive system has a fault. If so, enter S102;

[0041] S102: Determine whether the current torque output limit of the electric drive system is Tmax, where Tmax is the maximum allowable output torque when the electric drive system is working normally. If so, enter S103; if not, enter S104;

[0042] S103: Determine whether it is detected that the open cover protection switch of the motor controller is disconnected. If so, determine that the electric drive system has a secondary fault; if not, determine that the electric drive system has a primary fault;

[0043] S104: Judge whether the current torque output limit of the electric drive system is 0. If so, enter S105; if not, determine that the electric drive system has a tertiary fault;

[0044] S105: Determine whether the fault is allowable to be restored within the current power-on cycle. If so, enter S106; if not, determine that the electric drive system has a sixth-level fault;

[0045] S106: Determine whether the insulated gate bipolar transistor (IGBT) of the motor controller is turned off. If it is not turned off, it is determined that a level 4 fault has occurred in the electric drive system; if it is turned off, it is determined that a level 5 fault has occurred in the electric drive system.

[0046] As Figure 2 shown, the electric drive system includes: a motor controller, the motor controller is respectively connected to the motor and the vehicle controller, and the vehicle controller is connected to the instrument panel.

[0047] Further, the various real-time parameters include: voltage, current, speed, and torque.

[0048] Further, to determine whether a fault has occurred in the electric drive system according to the obtained various parameters, the various parameters are compared with corresponding different set thresholds to determine whether a fault has occurred in the electric drive system.

[0049] Further, after it is determined that a level 1 fault has occurred in the electric drive system, it further includes:

[0050] The motor controller reports the level 1 fault to the vehicle controller; after the vehicle controller receives the level 1 fault reported by the motor controller, the vehicle controller maintains the current working state and does not take any action.

[0051] Further, after it is determined that a level 2 fault has occurred in the electric drive system, it further includes:

[0052] The motor controller reports the level 2 fault to the vehicle controller; when the vehicle controller receives the level 2 fault reported by the motor controller, the vehicle controller determines whether the driver's seat belt is fastened and whether the four doors and two hoods are closed. If both conditions are met, the vehicle controller maintains the current state with the first element being to meet the driving needs of the user; if one of the conditions is not met, the vehicle controller requests to disconnect the high voltage and turn off the Ready light, with the first element being to protect the safety of the user and prevent electric shock when the user or maintenance personnel open the motor controller.

[0053] Further, after it is determined that a level 3 fault has occurred in the electric drive system, it further includes:

[0054] The motor controller reports the level 3 fault to the vehicle controller; when the vehicle controller receives the level 3 fault reported by the motor controller, the vehicle controller operates with power limited according to the output capacity of the MCU.

[0055] Further, after it is determined that a level 4 fault has occurred in the electric drive system, it further includes:

[0056] The motor controller reports a level-4 fault to the vehicle controller; when the vehicle controller receives the level-4 fault reported by the motor controller, the vehicle controller requests the motor controller torque to be 0 Nm, the instrument lights up the motor fault light, and the Ready light remains on; after waiting for the motor controller fault to recover, the vehicle controller resumes the vehicle power output, and the waiting time is calibrated according to the actual vehicle driving experience and set to 3 - 5 seconds; if the motor controller fault has not recovered during the waiting time, the vehicle controller will upgrade the fault and take level-6 fault actions.

[0057] Further, after determining that a level-5 fault occurs in the electric drive system, it further includes:

[0058] The motor controller reports a level-5 fault to the vehicle controller; when the vehicle controller receives the level-5 fault reported by the motor controller, the vehicle controller requests the motor controller torque to be 0 Nm, the instrument lights up the motor fault light, and the Ready light remains on; after waiting for the motor controller fault to recover, the vehicle controller resumes the vehicle power output, and the waiting time is calibrated according to the actual vehicle driving experience and set to 3 - 5 seconds; if the motor controller fault has not recovered during the waiting time, the vehicle controller will upgrade the fault and take level-6 fault actions.

[0059] For a level-4 fault, the insulated gate bipolar transistor IGBT does not need to be turned off. But for a level-5 fault, in order to protect the motor controller from being damaged, the insulated gate bipolar transistor IGBT is turned off.

[0060] Further, after determining that a level-6 fault occurs in the electric drive system, it further includes:

[0061] The motor controller reports a level-6 fault to the vehicle controller; when the vehicle controller receives the level-6 fault reported by the motor controller, the vehicle controller controls the working mode to switch to the Emergency Discharge mode and the state to switch to the Disable state.

[0062] For the fault protection of the electric drive system, the following steps are adopted: First, the faults are classified according to the fault severity, the least severe fault can be defined as a level-1 fault, and the most severe fault can be defined as a level-6 fault; second, the fault actions, the working mode, and the state of the motor controller for each level are specified, and the electric drive system faults are classified according to the above rules and filled into the corresponding fault levels in turn; finally, the vehicle controller only needs to take actions according to the fault level uploaded by the electric drive system and inform the user through the instrument, without having to identify and judge each fault of the electric drive system.

[0063] As Figure 1 shown, the state machine block diagram of the motor controller. Its main definitions are as follows:

[0064] (1) Initialization Mode Init: When the key is powered on, the motor controller enters the initialization operation.

[0065] (2) Standby Mode: After initialization is completed, it enters this mode and waits for a mode switching request from the vehicle control unit VCU. The status in this mode is defaulted to the disabled state Disable.

[0066] (3) Operational Mode: The state switching of the operational mode follows the VCU state request. This mode includes four states:

[0067] Disabled State Disable: Initial state.

[0068] Torque Control: In this state, it responds to the torque request of the vehicle control unit VCU, including positive torque and negative torque.

[0069] Speed Control: In this state, it responds to the speed request of the vehicle control unit VCU, including zero speed control.

[0070] Offline Calibration Offset Calibration: In this state, it runs the automatic calibration program for the initial angle of the motor rotor position, detects the initial position angle and writes it into the corresponding storage space. It can only be switched from the Disable state to the Offset Calibration state.

[0071] (4) Power-down Mode: The state switches to Disable.

[0072] (5) After-run Mode: In this mode, the motor controller MCU actively discharges when the conditions are met. When the MCU determines that the power-down conditions are met, it performs the power-down operation and saves the relevant data; the state in this mode always remains Disable.

[0073] (6) Emergency Discharge Mode: In this mode, the motor controller MCU actively discharges when the conditions are met. When the motor controller MCU determines that the power-down conditions are met, it performs the power-down operation and saves the relevant data; the state in this mode always remains Disable.

[0074] As shown in Table 1, the fault classification and actions of the electric drive system. The fault protection strategy of the motor controller is mainly used to protect the controller itself, and the faults are defined as level 1 fault to level 6 fault from minor to severe in sequence.

[0075] Level 1 Fault: A fault that has no impact on the power output of the electric drive system and only affects some unimportant functions is defined as a Level 1 fault. When a Level 1 fault occurs, the MCU maintains its original working state, does not handle the fault, but only records it for reference. For example, the fault of the MCU losing communication with the BMS.

[0076] Level 2 Fault: A fault that has no impact on the power output of the electric drive system but may pose a high-voltage safety risk is defined as a Level 2 fault. When a Level 2 fault occurs, the MCU maintains its original working state and only reports the fault to the vehicle controller, which will handle it according to the vehicle driving conditions. For example, the MCU cover opening protection fault.

[0077] Level 3 Fault: A fault that locally affects the power output ability of the electric drive system is defined as a Level 3 fault. At this time, the MCU needs to operate with power limited to avoid further escalation of the fault. For example, the motor over-temperature warning.

[0078] Level 4 Fault: A fault that the electric drive system cannot currently output power but can be restored within the current power-on cycle is defined as a Level 4 fault. When a Level 4 fault occurs, the MCU outputs a torque of 0 NM and waits for the fault to be restored. After the fault is restored, the MCU can resume power output; for example, the motor over-temperature fault.

[0079] Level 5 Fault: A fault that the electric drive system cannot currently output power and needs to immediately turn off the IGBT but can be restored within the current power-on cycle is defined as a Level 5 fault. When a Level 5 fault occurs, the MCU needs to immediately turn off the IGBT, wait for the fault to be restored and then turn on the device again to resume power output. For example, the DC bus under-voltage fault, where zero torque control cannot be achieved at high speed.

[0080] Level 6 Fault: A fault that the electric drive system cannot currently output power and cannot be restored within the current power-on cycle is defined as a Level 6 fault. After a Level 6 fault occurs, the mode directly switches to Emergency Discharge, the status switches to Disable, and the IGBT is turned off. For example, the phase current hardware over-current fault, which requires a key signal as a trigger source to clear the fault.

[0081] Table 1 Fault Classification and Actions of the Electric Drive System

[0082]

[0083]

[0084] Table 2 Fault Actions of the Vehicle Controller

[0085]

[0086] As shown in Table 2, the vehicle controller has a fault action. According to the severity of the fault, the faults are classified, and corresponding actions are taken for the motor controller for different levels of electric drive system faults. At the same time, the vehicle controller processes the faults from the vehicle perspective based on the fault levels uploaded by the electric drive system, improving the user's driving experience and reducing safety-related problems.

[0087] Embodiment 2

[0088] This embodiment provides a fault protection system for an electric vehicle's electric drive system;

[0089] The fault protection system for an electric vehicle's electric drive system includes:

[0090] An acquisition module, which is configured to: acquire various real-time parameters of the electric drive system; based on the acquired various parameters, determine whether the electric drive system has a fault. If so, determine whether the current torque output limit of the electric drive system is Tmax;

[0091] A first determination module, which is configured to: determine whether the current torque output limit of the electric drive system is Tmax, where Tmax is the maximum allowable output torque when the electric drive system is operating normally. If so, determine whether the open cover protection switch of the motor controller is detected to be disconnected. If not, determine whether the current torque output limit of the electric drive system is 0;

[0092] A second determination module, which is configured to: determine whether the open cover protection switch of the motor controller is detected to be disconnected. If so, determine that the electric drive system has a secondary fault. If not, determine that the electric drive system has a primary fault;

[0093] A third determination module, which is configured to: determine whether the current torque output limit of the electric drive system is 0. If so, determine whether the fault is allowable to recover within the current power-on cycle. If not, determine that the electric drive system has a tertiary fault;

[0094] A fourth determination module, which is configured to: determine whether the fault is allowable to recover within the current power-on cycle. If so, determine whether the insulated gate bipolar transistor IGBT of the motor controller is turned off. If not, determine that the electric drive system has a sixth-level fault;

[0095] A fifth determination module, which is configured to: determine whether the insulated gate bipolar transistor IGBT of the motor controller is turned off. If not, determine that the electric drive system has a fourth-level fault. If so, determine that the electric drive system has a fifth-level fault.

[0096] It should be noted here that the above-mentioned acquisition module, first determination module, second determination module, third determination module, fourth determination module, and fifth determination module correspond to steps S101 to S106 in the first embodiment. The examples and application scenarios implemented by the above modules and the corresponding steps are the same, but are not limited to the content disclosed in the first embodiment above. It should be noted that the above modules, as part of the system, can be executed in a computer system such as a set of computer-executable instructions.

[0097] In the above embodiments, the descriptions of each embodiment have their own emphases. For parts not detailed in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0098] The proposed system can be implemented in other ways. For example, the system embodiments described above are merely illustrative. For example, the above-mentioned module division is only a logical function division. In actual implementation, there can be other division methods. For example, multiple modules can be combined or integrated into another system, or some features can be ignored or not executed.

[0099] Embodiment Three

[0100] This embodiment also provides an electronic device, including: one or more processors, one or more memories, and one or more computer programs; wherein, the processor is connected to the memory, and the above one or more computer programs are stored in the memory. When the electronic device runs, the processor executes the one or more computer programs stored in the memory, so that the electronic device executes the method described in the first embodiment above.

[0101] It should be understood that in this embodiment, the processor may be a central processing unit CPU, and the processor may also be other general-purpose processors, digital signal processors DSP, application-specific integrated circuits ASIC, off-the-shelf programmable gate arrays FPGA, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0102] The memory may include a read-only memory and a random access memory, and provide instructions and data to the processor. A part of the memory may also include a non-volatile random access memory. For example, the memory may also store information about the device type.

[0103] In the implementation process, each step of the above method can be completed by the integrated logic circuit in the hardware of the processor or the instructions in the form of software.

[0104] The method in Embodiment 1 can be directly implemented by a hardware processor, or by a combination of hardware and software modules in the processor. The software module can be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. This storage medium is located in the memory, and the processor reads the information in the memory and combines its hardware to complete the steps of the above method. To avoid repetition, it will not be described in detail here.

[0105] Those of ordinary skill in the art can realize that the units and algorithm steps of each example described in conjunction with this embodiment can be implemented by electronic hardware or a combination of computer software and electronic hardware. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0106] Embodiment 4

[0107] This embodiment also provides a computer-readable storage medium for storing computer instructions. When the computer instructions are executed by a processor, the method described in Embodiment 1 is completed.

[0108] The above is only the preferred embodiment of the present invention and is not used to limit the present invention. For those skilled in the art, the present invention can have various changes and modifications. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. Fault protection method for an electric drive system of an electric vehicle, characterized in that, Applied to a motor controller, including: Obtain various real-time parameters of the electric drive system; based on the obtained various parameters, determine whether the electric drive system has a fault. If so, determine whether the current torque output limit of the electric drive system is Tmax; Determine whether the current torque output limit of the electric drive system is Tmax, where Tmax is the maximum allowable output torque when the electric drive system is operating normally. If so, determine whether the open cover protection switch of the motor controller is detected to be disconnected. If not, determine whether the current torque output limit of the electric drive system is 0; Determine whether the open cover protection switch of the motor controller is detected to be disconnected. If so, determine that the electric drive system has a secondary fault. If not, determine that the electric drive system has a primary fault; Determine whether the current torque output limit of the electric drive system is 0. If so, determine whether the fault is allowable to be recovered within the current power-on cycle. If not, determine that the electric drive system has a tertiary fault; Determine whether the fault is allowable to be recovered within the current power-on cycle. If so, determine whether the insulated gate bipolar transistor IGBT of the motor controller is turned off. If not, determine that the electric drive system has a sixth-level fault; Determine whether the insulated gate bipolar transistor IGBT of the motor controller is turned off. If it is not turned off, determine that the electric drive system has a fourth-level fault. If it is turned off, determine that the electric drive system has a fifth-level fault; After determining that the electric drive system has a primary fault, it further includes: The motor controller reports the primary fault to the vehicle controller; after receiving the primary fault reported by the motor controller, the vehicle controller maintains the current working state and does not take any action; After determining that the electric drive system has a secondary fault, it further includes: The motor controller reports the secondary fault to the vehicle controller; when the vehicle controller receives the secondary fault reported by the motor controller, the vehicle controller determines whether the current driver's seat belt is fastened and whether the four doors and two covers are closed. If both conditions are met, the vehicle controller maintains the current state with the first element being to meet the driving needs of the user. If one of the conditions is not met, the vehicle controller requests to disconnect the high voltage and turn off the Ready light, with the first element being to protect the safety of the user and prevent electric shock when the user or maintenance personnel open the motor controller; After determining that the electric drive system has a tertiary fault, it further includes: The motor controller reports the tertiary fault to the vehicle controller; when the vehicle controller receives the tertiary fault reported by the motor controller, the vehicle controller operates with power limited according to the output capacity of the motor controller; After determining that the electric drive system has a fourth-level fault, it further includes: The motor controller reports the fourth-level fault to the vehicle controller; when the vehicle controller receives the fourth-level fault reported by the motor controller, the vehicle controller requests that the torque of the motor controller be 0 Nm, the instrument lights up the motor fault light, and at the same time does not turn off the Ready light; wait for the vehicle controller to restore the vehicle power output after the motor controller fault is recovered. The waiting time is calibrated according to the actual driving experience of the vehicle and is set to 3 - 5 seconds; if the motor controller fault has not been recovered during the waiting time, the vehicle controller will upgrade the fault and take the actions for a sixth-level fault; It is determined that a fifth-level fault occurs in the electric drive system, and then it further includes: The motor controller reports the fifth-level fault to the vehicle controller; when the vehicle controller receives the fifth-level fault reported by the motor controller, the vehicle controller requests the motor controller torque to be 0 Nm, the instrument lights up the motor fault light, and at the same time, the Ready light is not extinguished; after waiting for the motor controller fault to recover, the vehicle controller resumes the vehicle power output, and the waiting time is calibrated according to the actual vehicle driving experience and set to 3-5 seconds; if the motor controller fault has not recovered during the waiting time, the vehicle controller will upgrade the fault and take sixth-level fault actions; It is determined that a sixth-level fault occurs in the electric drive system, and then it further includes: The motor controller reports the sixth-level fault to the vehicle controller; when the vehicle controller receives the sixth-level fault reported by the motor controller, the vehicle controller controls the working mode to switch to the emergency discharge mode Emergency Discharge, and the state switches to the disable state Disable.

2. The fault protection system of the electric drive system for an electric vehicle, based on the fault protection method of the electric drive system for an electric vehicle as described in claim 1, is characterized in that, It includes: An acquisition module, which is configured to: acquire various real-time parameters of the electric drive system; determine whether a fault occurs in the electric drive system according to the acquired various parameters, and if so, determine whether the current torque output limit of the electric drive system is Tmax; A first determination module, which is configured to: determine whether the current torque output limit of the electric drive system is Tmax, where Tmax is the maximum allowable output torque when the electric drive system is working normally; if so, determine whether the open cover protection switch of the motor controller is detected to be disconnected; if not, determine whether the current torque output limit of the electric drive system is 0; A second determination module, which is configured to: determine whether the open cover protection switch of the motor controller is detected to be disconnected, and if so, determine that a second-level fault occurs in the electric drive system; If not, it is determined that a first-level fault occurs in the electric drive system; A third determination module, which is configured to: determine whether the current torque output limit of the electric drive system is 0, and if so, determine whether the fault is allowable to recover within the current power-on cycle; if not, determine that a third-level fault occurs in the electric drive system; A fourth determination module, which is configured to: determine whether the fault is allowable to recover within the current power-on cycle, and if so, determine whether the insulated gate bipolar transistor IGBT of the motor controller is turned off; if not, determine that a sixth-level fault occurs in the electric drive system; A fifth determination module, which is configured to: determine whether the insulated gate bipolar transistor IGBT of the motor controller is turned off. If it is not turned off, it is determined that a fourth-level fault occurs in the electric drive system; if it is turned off, it is determined that a fifth-level fault occurs in the electric drive system.

3. An electronic device, characterized in that it includes: A memory for non-temporarily storing computer-readable instructions; And A processor for running the computer-readable instructions, wherein, when the computer-readable instructions are run by the processor, the method described in claim 1 above is executed.

4. A storage medium, characterized in that, Non-temporarily store computer-readable instructions, wherein when the non-temporary computer-readable instructions are executed by a computer, the instructions for executing the method described in claim 1 are executed.

Images