Dual power supply and dual control architecture

Abstract

Dual-power, dual-control architecture. A system for an inverter, comprising a first integrated circuit configured to: supply power to a first set of switches and selectively control the first set of switches and a second set of switches; a second integrated circuit configured to supply power to the second set of switches; and a motor connected to the first set of switches and the second set of switches, wherein the second integrated circuit is further configured to: selectively control the first set of switches and the second set of switches in response to a fault detected in the first integrated circuit, and perform a safe state operation in response to at least one voltage value corresponding to the voltage of the first set of switches being outside a threshold range.

Description

Technical Field

[0001] This disclosure relates to vehicle electric motors, and more particularly to systems and methods for dual-power, dual-control of vehicle electric motors. Background Technology

[0002] Vehicles such as cars, trucks, SUVs, off-road vehicles, minivans, or other suitable vehicles typically include various electric motors, such as permanent magnet motors or other suitable electric motors. These motors can be used in various aspects of vehicle control or operation, such as vehicle propulsion or other suitable aspects of vehicle control or operation.

[0003] Typically, an inverter or frequency converter (e.g., referred to as an inverter system) controls the speed or torque of such a motor. For example, an inverter can receive power from one or more power sources and can regulate the power supplied to the motor to control its speed or torque. During operation, in the event of a component failure in the inverter system, the system can be configured to maintain system safety. In the event of a failure, this is typically achieved by applying a minimal amount of torque to the motor and by limiting the back electromotive force (back EMF) voltage from the motor (e.g., making the back EMF lower than the voltage from the vehicle's high-voltage battery). Summary of the Invention

[0004] This disclosure generally relates to electric motors in vehicles.

[0005] One aspect of the disclosed embodiments includes a system for an inverter. The system includes a first integrated circuit configured to: supply power to a first set of switches using a first high-voltage power supply and a first low-voltage power supply connected to the first integrated circuit, and selectively control the first set of switches and a second set of switches; a second integrated circuit configured to supply power to a second set of switches using a second high-voltage power supply and a second low-voltage power supply connected to the second integrated circuit; and a motor connected to the first set of switches and the second set of switches, wherein the second integrated circuit is further configured to: selectively control the first set of switches and the second set of switches in response to a fault detected in the first integrated circuit, and perform a safe state operation in response to at least one voltage value corresponding to the voltage of the first set of switches being outside a threshold range.

[0006] Another aspect of the disclosed embodiments includes a method. The method includes the steps of: using a first integrated circuit, supplying power to a first set of switches using a first high-voltage power supply and a first low-voltage power supply, the first high-voltage power supply and the first low-voltage power supply being connected to the first integrated circuit. The method further includes using the first integrated circuit to selectively control a first set of switches and a second set of switches. The method further includes using a second integrated circuit, supplying power to a second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit. The method further includes using the first set of switches and the second set of switches to control a motor, wherein the second integrated circuit is configured to: selectively control the first set of switches and the second set of switches in response to a fault detected in the first integrated circuit, and to perform a safe state operation in response to at least one voltage value corresponding to the voltage of the first set of switches being outside a threshold range.

[0007] Another aspect of the disclosed embodiments includes an apparatus. The apparatus includes: a first integrated circuit configured to: supply power to a first set of switches using a first high-voltage power supply and a first low-voltage power supply, the first high-voltage power supply and the first low-voltage power supply being connected to the first integrated circuit, and selectively control the first set of switches and a second set of switches; a second integrated circuit configured to supply power to a second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit; and a motor controlled by the first set of switches and the second set of switches, wherein the second integrated circuit is further configured to: selectively control the first set of switches and the second set of switches in response to an internal signal indicating a fault in the first integrated circuit; return control of the first set of switches to the first integrated circuit in response to the internal signal indicating a fault in the first integrated circuit; and perform a safe state operation in response to at least one voltage value corresponding to the voltage of the first set of switches being outside a threshold range.

[0008] These and other aspects of this disclosure are set forth in the following detailed description of embodiments, the appended claims and drawings. Attached Figure Description

[0009] This disclosure is best understood from the following detailed description when read in conjunction with the accompanying drawings. It should be emphasized that, by convention, the various features in the drawings are not to scale. Rather, for clarity, the dimensions of the various features have been arbitrarily enlarged or reduced.

[0010] Figure 1 A vehicle based on the principles of this disclosure is shown in general.

[0011] Figure 2A controller based on the principles of this disclosure is shown in general.

[0012] Figures 3 to 5 A dual-power, dual-control inverter system based on the principles of this disclosure is generally illustrated.

[0013] Figure 6 This is a flowchart that generally illustrates a dual-power-supply, dual-control method based on the principles of this disclosure.

[0014] Specific implementation party

[0015] The following discussion relates to various embodiments of the invention. While one or more of these embodiments may be preferred, the disclosed embodiments should not be construed as or otherwise used to limit the scope of this disclosure, including the claims. Furthermore, those skilled in the art will understand that the following description has broad application, and any discussion of any embodiment is merely meant to be an example of that embodiment and is not intended to imply that the scope of this disclosure is limited to the described embodiment.

[0016] As described above, vehicles such as cars, trucks, SUVs, off-road vehicles, minivans, or other suitable vehicles typically include various electric motors, such as permanent magnet motors or other suitable electric motors. Such electric motors can be used in various aspects of vehicle control or operation, such as vehicle propulsion or other suitable aspects of vehicle control or operation. Typically, an inverter or frequency converter (e.g., referred to as an inverter system) controls the speed or torque of such an electric motor. For example, an inverter can receive power from one or more power sources and can regulate the power supplied to the electric motor to control the motor's speed or torque.

[0017] During operation, in the event of a component failure in the inverter system, the inverter system can be configured to maintain system safety by placing the system in a safe state. This is typically achieved by applying a minimum amount of torque to the motor and by limiting the back electromotive force (back EMF) voltage from the motor (e.g., making the back EMF lower than the voltage from the vehicle's high-voltage battery).

[0018] In a typical inverter system, the inverter box is configured to achieve a low-torque safety state by applying one of two conditions described by controlling three upper and / or three lower switches to either reinforced / closed or unreinforced / closed states. Typically, the controller uses measured parameters (e.g., motor speed and / or supply voltage) to determine whether to reinforce / close this switch, which may be referred to as the inverter switch. To maintain system safety, such an inverter system can be configured to receive active measurement results and apply the switch reinforcement state for any single point of failure.

[0019] Typically, inverter systems use two power sources to power the inverter box. These two power sources can be referred to as a low-voltage power source (e.g., or low-voltage power supply) and a high-voltage power source (e.g., or high-voltage power supply). The high-voltage power supply may be derived from a high-voltage battery (e.g., the battery may have a rated voltage greater than or equal to 400 volts or other suitable battery voltage), and the low-voltage power supply may be associated with a separate power source in the relevant vehicle.

[0020] To enable the inverter system and / or controller to measure, identify fault conditions, make judgments, and apply switch enhancements, various operating modes can be configured so that the inverter system and / or controller can continue to perform this function, even when a single fault condition exists in the inventor's system.

[0021] Additionally or optionally, a typical inverter system may employ a solution using various diodes as shown. However, this solution has several drawbacks. For example, such a solution typically includes diode connections to provide a power supply commonly referred to as a safety power supply. A short circuit to ground on this safety power supply will disable not only all subsequent control and enhancement capabilities but also both the high-voltage and low-voltage power supplies. Furthermore, the upper and lower switching enhancement circuits in a typical solution can be powered by the same power supply, which can result in a single power supply failure preventing any switching enhancements from functioning. Additionally, such a solution typically includes a control path for switching enhancements. A single failure along this control path can prevent a typical inverter system from enabling proper switching enhancements. Moreover, mechanisms provided or controlled by the backup module of a typical inverter system may suffer from low latency switching, multi-pin usage issues, or may only provide unidirectional switching to the backup module. These limitations in a typical inverter system can make it difficult or impossible to meet safety state requirements.

[0022] Therefore, systems and methods that provide safe-state operating modes in response to a single failure condition may be needed, such as those described herein. In some implementations, the systems and methods described herein can be configured to provide a dual-power, dual-control architecture. For example, refer to... Figures 3 to 5The inverter system 200 includes a dual power supply section 202. The systems and methods described herein can be configured to provide dual power supply selection via a single circuit (e.g., one of a first integrated circuit 204 or a second integrated circuit 206). While the first integrated circuit 204 and the second integrated circuit 206 are shown and described, it should be understood that the first integrated circuit 204 and / or the second integrated circuit 206 may include any suitable circuitry, such as an application-specific integrated circuit (ASIC), a programmable logic array, an optical processor, a programmable logic controller, microcode, a microcontroller, a server, a microprocessor, a digital signal processor, any other suitable circuitry, or combinations thereof. The systems and methods described herein can be configured to prevent single-point-of-failure conditions from causing both the high-voltage and low-voltage power supplies to fail.

[0023] In some embodiments, the systems and methods described herein can be configured to provide the ability to switch between high-voltage and low-voltage power supplies based on power supply levels (e.g., selection from high-voltage and low-voltage power supplies via one or both of the first integrated circuit 204 and the second integrated circuit 206 during operation of the inverter system 200). The systems and methods described herein can be configured to ensure that common faults do not disable both the high-voltage and low-voltage power supplies during fault conditions of the inverter system 200, while also allowing numerous fault conditions to occur to continue operation under normal operating conditions. The systems and methods described herein can be configured to provide power selection capability to each of the circuits in the first integrated circuit 204 and the second integrated circuit 206, such that each of the circuits in the first integrated circuit 204 and the second integrated circuit 206 can be completely self-sufficient in providing all control associated with measuring and actuating motor switches (e.g., upper switch 208 and / or lower switch 210) to operate according to appropriate safe operation. It should be understood that the upper switch 208 may include any suitable number of switches, and the lower switch 210 may include any suitable number of switches. The upper switch 208 and / or the lower switch 210 can be configured to control the operation of the motor 212.

[0024] In some embodiments, the systems and methods described herein can be configured to allow one half of switches 208 and 210 to operate independently of the other half of switches 208 and 210. The systems and methods described herein can be configured to allow each of the first integrated circuit 204 and the second integrated circuit 206 to supply power to the upper switch 208 or the lower switch 210 circuit, while simultaneously allowing each of the first integrated circuit 204 and the second integrated circuit 206 to perform measurement and control functions. This can maintain the inverter system 200 in a safe operating state, even when one half of the inverter system 200 has been affected by a fault condition.

[0025] In some implementations, the systems and methods described herein can be configured to replicate the power selection structure twice (e.g., once for the control and measurement capabilities of each integrated circuit), which can allow the dual-architecture power supply, measurement, and control inverter system 200 to operate safely regardless of where any single fault may exist in the inverter system 200 (e.g., included within one of the first integrated circuit 204 and the second integrated circuit 206).

[0026] In some embodiments, the systems and methods described herein can be configured to connect control mechanism 214 of the first integrated circuit 204 to the power supply upper mechanism 216 of the second integrated circuit 206 and to control mechanism 218 of the second integrated circuit 206. This allows for shared output control of the switching control signals associated with the inverter system 200. Alternatively or additionally, the systems and methods described herein can be configured to allow either control mechanism 214 or control mechanism 218 to operate, but not both simultaneously. In some embodiments, the systems and methods described herein can be configured to allow control mechanism 214 and control mechanism 218 to control only the upper switch 208. In some embodiments, the systems and methods described herein can be configured to allow control mechanism 214 and control mechanism 218 to control only the lower switch 210.

[0027] In some embodiments, the systems and methods described herein can be configured to appropriately signal various output signals to both control mechanisms 214 and 218 under any fault conditions. The systems and methods described herein can be configured to allow a tri-state output driver to attempt to control a specific gate drive control command when one of control mechanisms 214 and 218 determines that the output driver should not be tri-state. As used herein, a tri-state output driver may include a digital output buffer configured to have three possible states: driven high (e.g., low impedance), driven low (e.g., low impedance), and high impedance. The driven high and driven low states allow the digital output buffers to communicate, while the high impedance state allows other output buffers to drive signals without high current or bus connectivity issues.

[0028] In some implementations, the systems and methods described herein can be configured to achieve single-pin, bidirectional, and low-latency switching. A typical inventor's system may employ a backup circuit to allow for safe measurement and control using a watchdog method or a square wave generated at a specific frequency as a signal to the backup circuit. Watchdog monitoring requires numerous communications to send updated acknowledgments over the bus. This results in relatively long cycles between fault detections (e.g., watchdog loss) due to bandwidth limitations on the bus. Using a single pin frequency from primary to backup can reduce fault latency, but to accommodate gate driver control switching and recovery capabilities in a synchronous and controlled manner, more pins may be needed to allow bidirectional communication for the release of backup circuit control via the gate driver line.

[0029] like Figure 4 As generally illustrated, the systems and methods described herein can be configured to use a single signal line to transmit dual-chip control states. The systems and methods described herein can be configured to allow automatic control switching between a primary chipset and a backup chipset over relatively short time periods (e.g., maintaining below all fault-tolerant time intervals). The systems and methods described herein can be configured to program one of the first integrated circuit 204 and the second integrated circuit 206 as a primary integrated circuit and the other as a backup integrated circuit (e.g., an auxiliary integrated circuit). The systems and methods described herein can be configured to use a single line connecting the first integrated circuit 204 and the second integrated circuit 206 together.

[0030] In some implementations, the first integrated circuit 204 and the second integrated circuit 206 have the same or substantially the same construction. The inverter system 200 may include a voltage window comparator, a pull-down resistor, a low current detection, a voltage regulator, pull-up and pull-down switches, other suitable components, or combinations thereof.

[0031] Figure 5 The conditions under which fault filtering, control switching, and latching occur according to the systems and methods described herein are generally illustrated. For example, the signal “FC_IN_CNTRL” is the final signal included when a particular chipset (e.g., the first integrated circuit 204 or the second integrated circuit 206) should be under the control of gate drive control. At 504, the “enforce secondary takeover” section of the inverter system 200 illustrates how a minimum hold time is achieved to re-force pull to the voltage threshold being crossed when the SCNDRY_TKVR external line is outside a predetermined voltage window.

[0032] At 506, the "External Observation" section of the inverter system 200 shows what the "WIN-BAD" status of the SCNDRY_TKVR line is. At 508, an abnormal voltage level is shown where the secondary pin can be shorted to ground by a common ESD protection circuit, and the detection method can be a low VDD supply. In this case, the master device indicates that it is under control. When the master integrated circuit determines that all master integrated circuit functions are in correct operation and capability (e.g., INSSA_BAD goes low), the regulator is enabled and attempts to regulate the "SCNDRY_TKVR" pin. The standby integrated circuit can use the voltage level setting to determine that the regulated voltage is within a predetermined range. If the voltage is not within the range, the standby integrated circuit reinforces the voltage level outside the window, thereby maintaining control of the pin. If the pin voltage is within the voltage window, the pin voltage indicates that the master integrated circuit is under control. Alternatively, if the pin voltage is outside the window, the pin voltage indicates that the standby integrated circuit is under control. This allows for the loss of proper operation on the main integrated circuit without actively driving the signal low, allowing the standby integrated circuit to identify and filter the signal and take over the safe operation of the inverter system 200. In some implementations, control can be transferred from the programmed main integrated circuit to a programmed standby integrated circuit via a third device such as a vehicle controller. This transfer can be initiated via a command signal called FORCE_Secto, which can pull SCNDRY_TKVR low.

[0033] In some implementations, the standby integrated circuit (SIC) can relinquish control, while the primary integrated circuit (PI) can automatically take over control of the inverter system 200. Upon command via SPI to the PRIMARY_tkovr_Req signal or when the standby IC's INSSA determines that it cannot properly control the inverter system 200, the primary integrated circuit can be allowed to readjust the SCNDRY_TKVR line and take over control. In some implementations, the systems and methods described herein can be configured to address all the problems of typical digital-signal-only approaches to inverter systems and can be configured to provide more cost-effective benefits than typical inverter systems.

[0034] In some embodiments, the systems and methods described herein may be configured to provide a first integrated circuit, which may be further configured to power a first set of switches using a first high-voltage power supply and a first low-voltage power supply connected to the first integrated circuit. The first integrated circuit may also be configured to selectively control a first set of switches and a second set of switches. The first high-voltage power supply may be connected in parallel with the first low-voltage power supply.

[0035] In some embodiments, a first set of switches and a second set of switches are connected to the motor and configured to selectively control the motor. The motor may include a permanent magnet motor or other suitable motor. The motor may be associated with a vehicle. It should be understood that although the systems and methods disclosed herein are described as being associated with a vehicle, it should be understood that the systems and methods disclosed herein are applicable to any suitable application.

[0036] In some embodiments, the second integrated circuit may also be configured to supply power to the second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit. The second high-voltage power supply may be connected in parallel with the second low-voltage power supply.

[0037] In some embodiments, the second integrated circuit may also be configured to selectively control a first set of switches and a second set of switches in response to a fault detected in the first integrated circuit, while the first integrated circuit supplies power to the first set of switches and the second integrated circuit supplies power to the second set of switches. In some embodiments, at least one voltage value or frequency represents a fault in the inverter. In some embodiments, the second integrated circuit may be further configured to detect a fault in the first integrated circuit based on internal signals of the first integrated circuit.

[0038] In some embodiments, the second integrated circuit may be further configured to perform a safety state operation in response to at least one voltage value or frequency corresponding to the voltage of the first set of switches being outside a threshold range. In some embodiments, the second integrated circuit may be configured to perform a safety state operation by turning off the first set of switches and the second set of switches. In some embodiments, the second integrated circuit may be configured to perform a safety state operation by enhancing the first set of switches and the second set of switches.

[0039] In some embodiments, in response to a fault in the first integrated circuit, the second integrated circuit can return control of the first set of switches to the first integrated circuit. In some embodiments, in response to determining that a subsequent voltage value or frequency corresponding to the voltage of the first set of switches is within a threshold range, the second integrated circuit can return both the first and second sets of switches to normal operating conditions.

[0040] Figure 1A vehicle 10 according to the principles of this disclosure is generally shown. Vehicle 10 may include any suitable vehicle, such as a passenger car, truck, sport utility vehicle, minivan, off-road vehicle, any other passenger car, any suitable commercial vehicle, or any other suitable vehicle. Although vehicle 10 is shown as a wheeled passenger car for road use, the principles of this disclosure may be applied to other vehicles, such as aircraft, ships, trains, unmanned aerial vehicles, or other suitable vehicles. Vehicle 10 includes a body 12 and a hood 14. A portion of the body 12 defines a passenger compartment 18. Another portion of the body 12 defines an engine compartment 20. The hood 14 may be movably connected to a portion of the body 12 such that when the hood 14 is in a first or open position, the hood 14 provides access to the engine compartment 20, and when the hood 14 is in a second or closed position, the hood 14 covers the engine compartment 20.

[0041] The passenger compartment 18 is located behind the engine compartment 20. The vehicle 10 may include any suitable propulsion system, including an internal combustion engine, one or more electric motors (e.g., an electric vehicle), one or more fuel cells, a hybrid propulsion system (e.g., a hybrid vehicle) comprising a combination of an internal combustion engine, one or more electric motors, and / or any other suitable propulsion system. In some embodiments, the vehicle 10 may include a gasoline engine or a gasoline-fueled engine, such as a spark-ignition engine. In some embodiments, the vehicle 10 may include a diesel-fueled engine, such as a compression-ignition engine. The engine compartment 20 houses and / or contains at least some components of the propulsion system of the vehicle 10. Additionally or alternatively, propulsion controls, such as accelerator actuators (e.g., accelerator pedals), brake actuators (e.g., brake pedals), a steering wheel, and other such components, are arranged in the passenger compartment 18 of the vehicle. The propulsion controls can be actuated or controlled by the driver of the vehicle 10 and can be directly connected to corresponding components of the propulsion system (e.g., throttle valves, brakes, axles, vehicle transmissions, etc.). In some implementations, the propulsion control unit can transmit signals to the vehicle computer (e.g., via drive-by-wire), which in turn can control the corresponding propulsion components of the propulsion system.

[0042] In one embodiment, vehicle 10 includes a transmission communicated with a crankshaft via a flywheel, clutch, or fluid coupling. In some embodiments, the transmission includes a manual transmission. In some embodiments, the transmission includes an automatic transmission. In the case of an internal combustion engine or hybrid vehicle, vehicle 10 may include one or more pistons that cooperate with the crankshaft to generate force, which is transmitted through the transmission to one or more axles that rotate the wheels 22. When vehicle 10 includes one or more electric motors, a vehicle battery and / or fuel cell power the electric motors to rotate the wheels 22. When vehicle 10 includes a vehicle battery to power one or more electric motors, if the battery is depleted, it can be connected to the power grid (e.g., using a wall socket) to charge the battery cells. Additionally or alternatively, vehicle 10 may employ regenerative braking, which uses one or more of the vehicle 10's electric motors as generators to convert kinetic energy lost due to deceleration back into stored energy in the battery.

[0043] Vehicle 10 may include an automated vehicle propulsion system, such as cruise control, adaptive cruise control, automatic braking control, other automated vehicle propulsion systems, or combinations thereof. Vehicle 10 may be an autonomous or semi-autonomous vehicle, or other suitable type of vehicle. Vehicle 10 may include more or fewer features than those generally shown and / or disclosed herein.

[0044] In some implementations, vehicle 10 may include a controller, such as controller 100, as... Figure 2 The controller 100 is generally illustrated. The controller 100 may include any suitable controller, such as an electronic control unit or other suitable controller. The controller 100 may be configured to control various functions, such as the steering system and / or various functions of the vehicle 10. The controller 100 may include a processor 102 and a memory 104. The processor 102 may include any suitable processor, such as those described herein. Additionally or alternatively, in addition to the processor 102, the controller 100 may include any suitable number of processors. The memory 104 may include a single disk or multiple disks (e.g., a hard disk drive) and includes a storage management module that manages one or more partitions within the memory 104. In some embodiments, the memory 104 may include flash memory, semiconductor (solid-state) memory, etc. The memory 104 may include random access memory (RAM), read-only memory (ROM), or a combination thereof. The memory 104 may include instructions that, when executed by the processor 102, cause the processor 102 to control at least various aspects of the vehicle 10.

[0045] In some implementations, controller 100 may be configured to selectively instruct one of the first integrated circuit 204 and the second integrated circuit 206 to operate as a primary and / or auxiliary integrated circuit, respectively. Alternatively, inverter system 200 may operate independently of controller 100.

[0046] In some embodiments, the first integrated circuit 204 may be configured to power the upper switch 208 using power supplied from a first high-voltage power supply 220 and / or a first low-voltage power supply 222. The first high-voltage power supply 220 and the first low-voltage power supply 222 may be connected to the first integrated circuit 204. The first high-voltage power supply 220 may be connected in parallel with the first low-voltage power supply 222. The first integrated circuit 204 may be further configured to selectively control the upper switch 208. The upper switch 208 may operate using power supplied by the power supply upper portion 228 of the first integrated circuit 204 (e.g., in response to control by the first integrated circuit 204).

[0047] The second integrated circuit 206 can be configured to supply power to the upper switch 208 using power supplied from the second high-voltage power supply 224 and the second low-voltage power supply 226. The second high-voltage power supply 224 and the second low-voltage power supply 226 can be connected to the second integrated circuit 206. The second high-voltage power supply 224 can be connected in parallel with the second low-voltage power supply 226. The second integrated circuit 206 can be further configured to selectively control the lower switch 210. The lower switch 210 can operate using power supplied by the upper power supply mechanism 216 (e.g., in response to controlling the second integrated circuit 206).

[0048] The upper switch 208 and / or the lower switch 210 can selectively control the motor 212. The motor may include a permanent magnet motor or other suitable motor. The motor may include any suitable motor within the vehicle 10. Alternatively, the motor may include any suitable motor associated with any suitable system or application including and / or different from the vehicle 10.

[0049] In some embodiments, at least one of the first integrated circuit 204 and the second integrated circuit 206 may be further configured to selectively control all upper switches 208 and lower switches 210 based on at least one voltage value corresponding to a respective first high-voltage power supply to the upper switch 208 and / or the lower switch 210. At least one voltage value or frequency may represent a single fault in the inverter system 200. At least one of the first integrated circuit 204 and / or the second integrated circuit 206 may be configured to act as a backup integrated circuit for the other integrated circuit in the first integrated circuit 204 and the second integrated circuit 206 in response to at least one voltage value or frequency representing a single fault in the inverter system 200.

[0050] In some embodiments, the first integrated circuit 204 may be further configured to supply power to the upper switch 208, as described above. The first integrated circuit 204 may selectively control the upper switch 208 and the lower switch 210. The second integrated circuit 206 may be further configured to supply power to the lower switch 210, as described above.

[0051] In some embodiments, the second integrated circuit 206 may be further configured to detect faults in the first integrated circuit 204. For example, the second integrated circuit 206 may receive from the first integrated circuit a signal indicating that at least one characteristic of the first integrated circuit 204 is outside a corresponding threshold range. For instance, the signal may indicate that the temperature of the first integrated circuit 204 is greater than a threshold temperature. The second integrated circuit 206 may determine a fault occurring in the first integrated circuit 204 based on this signal.

[0052] In response to a signal detected in the first integrated circuit 204, the second integrated circuit 206 can take over control of the upper switch 208 and the lower switch 210 from the first integrated circuit 204. When the second integrated circuit 206 controls the upper switch 208 and the lower switch 210, the first integrated circuit 204 can continue to supply power to the upper switch 208, while the second integrated circuit 206 can continue to supply power to the lower switch 210.

[0053] In some embodiments, the second integrated circuit 206 may be further configured to measure, independently of the first integrated circuit 204, the voltage supporting the use of the upper switch 208 (e.g., referred herein as the voltage corresponding to the upper switch 208, the voltage associated with the upper switch 208, the voltage of the upper switch 208, etc.). For example, the upper switch 208 may be connected to a positive high-voltage power supply (e.g., a voltage supply having ~+200 volts or other suitable values), and the lower switch 210 may be connected to a negative high-voltage power supply (e.g., a voltage supply having ~-200 volts or other suitable values). The voltage supporting the use of the upper switch 208 may be associated with the positive high-voltage power supply (e.g., the voltage supporting the use of the lower switch 210 (e.g., referred herein as the voltage corresponding to the lower switch 210, the voltage associated with the lower switch 210, the voltage of the lower switch 210, etc.) may be associated with the negative high-voltage power supply). The second integrated circuit 206 may perform a safe state operation in response to a voltage exceeding a threshold. In some embodiments, the second integrated circuit 206 may be configured to perform a safety state operation by turning off the upper switch 208 and the lower switch 210. In some embodiments, the second integrated circuit 206 may be configured to perform a safety state operation by enhancing the upper switch 208 and the lower switch 210.

[0054] In some embodiments, in response to a fault abort in the first integrated circuit 204, the second integrated circuit 206 can return control of the upper switch 208 and / or the lower switch 210 to the first integrated circuit 204. In some embodiments, in response to determining that the subsequent voltage of the upper switch 208 is within a threshold range, the second integrated circuit 206 can return the upper switch 208 and the lower switch 210 to a normal operating state. It should be understood that although the first integrated circuit 204 is described herein as a primary integrated circuit and the second integrated circuit 206 is described herein as an auxiliary integrated circuit, either the first integrated circuit 204 or the second integrated circuit 206 can be designated as a primary integrated circuit or a secondary integrated circuit. Therefore, the first integrated circuit 204 can be configured to perform the same or similar functions as the second integrated circuit 206, and / or the second integrated circuit 206 can be configured to perform the same or similar functions as the first integrated circuit 204.

[0055] In some embodiments, controller 100 and / or inverter system 200 may perform the methods described herein. However, the methods performed by controller 100 and / or inverter system 200 as described herein are not intended to be limiting, and any type of software executing on the controller or processor may perform the methods described herein without departing from the scope of this disclosure. For example, a controller of a processor executing software within a computing device may perform the methods described herein.

[0056] Figure 6 This is a flowchart generally illustrating a dual-power-supply dual-control method 600 according to the principles of this disclosure. At 602, method 600 uses a first integrated circuit 204 to supply power to a first set of switches (e.g., upper switch 208) using a first high-voltage power supply (e.g., first high-voltage power supply 220) and a first low-voltage power supply (e.g., first low-voltage power supply 222). The first high-voltage power supply 220 and the first low-voltage power supply 222 may be connected to the first integrated circuit 204.

[0057] At 604, method 600 uses a first integrated circuit 204 to selectively control a first set of switches (e.g., upper switch 208) and a second set of switches (e.g., lower switch 210).

[0058] At 606, method 600 uses a second integrated circuit (e.g., second integrated circuit 206) to power a second set of switches (e.g., lower switch 210) using a second high-voltage power supply (e.g., second high-voltage power supply 224) and a second low-voltage power supply (e.g., second low-voltage power supply 226). The second high-voltage power supply and the second low-voltage power supply may be connected to the second integrated circuit 206.

[0059] At 608, method 600 uses a first set of switches (e.g., upper switch 208) and a second set of switches (e.g., lower switch 210) to control a motor, such as motor 212. In some embodiments, a second integrated circuit 206 is configured to selectively control the first set of switches (e.g., upper switch 208) and the second set of switches (e.g., lower switch 210) in response to a fault detected in the first integrated circuit 204. In some embodiments, the second integrated circuit 206 is configured to perform a safety state operation in response to at least one voltage value corresponding to the voltage of the first set of switches (e.g., the upper switch) being outside a threshold range.

[0060] Clause 1. A system for an inverter, the system comprising:

[0061] The first integrated circuit is configured as follows:

[0062] A first high-voltage power supply and a first low-voltage power supply are used to power a first set of switches, the first high-voltage power supply and the first low-voltage power supply being connected to the first integrated circuit; and

[0063] Selectively control the first group of switches and the second group of switches;

[0064] A second integrated circuit is configured to supply power to the second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit; and

[0065] The electric motor is connected to the first set of switches and the second set of switches.

[0066] The second integrated circuit is further configured as follows:

[0067] In response to a fault detected in the first integrated circuit, the first set of switches and the second set of switches are selectively controlled, and in response to at least one voltage value corresponding to the voltage of the first set of switches being outside the range of a threshold, a safe state operation is performed.

[0068] Clause 2. The system according to Clause 1, wherein the first high-voltage power supply is connected in parallel to the first low-voltage power supply.

[0069] Clause 3. The system according to Clause 1, wherein the second high-voltage power supply is connected in parallel to the second low-voltage power supply.

[0070] Clause 4. The system according to Clause 1, wherein the at least one voltage value represents a fault in the inverter.

[0071] Clause 5. The system according to Clause 1, wherein the second integrated circuit is further configured to detect a fault in the first integrated circuit based on internal signals of the first integrated circuit.

[0072] Clause 6. The system according to Clause 1, wherein the electric motor comprises a permanent magnet electric motor.

[0073] Clause 7. The system described in Clause 1, wherein the electric motor is associated with the vehicle.

[0074] Clause 8. The system according to Clause 1, wherein the first set of switches and the second set of switches selectively control the operation of the motor.

[0075] Clause 9. The system according to Clause 1, wherein the second integrated circuit is configured to perform the safety state operation by turning off the first set of switches and the second set of switches.

[0076] Clause 10. The system according to Clause 1, wherein the second integrated circuit is configured to perform the safety state operation by enhancing the first set of switches and the second set of switches.

[0077] Clause 11. The system according to Clause 1, wherein, in response to the second integrated circuit selectively controlling the first set of switches and the second set of switches, the first integrated circuit supplies power to the first set of switches, and the second integrated circuit supplies power to the second set of switches.

[0078] Clause 12. The system according to Clause 1, wherein, in response to a fault abort in the first integrated circuit, the second integrated circuit returns control of the first set of switches to the first integrated circuit.

[0079] Clause 13. A method comprising the following steps:

[0080] A first integrated circuit is used to power a first set of switches using a first high-voltage power supply and a first low-voltage power supply, wherein the first high-voltage power supply and the first low-voltage power supply are connected to the first integrated circuit.

[0081] The first integrated circuit is used to selectively control the first group of switches and the second group of switches;

[0082] The second integrated circuit is used to power the second set of switches using a second high-voltage power supply and a second low-voltage power supply, with the second high-voltage power supply and the second low-voltage power supply connected to the second integrated circuit.

[0083] The motor is controlled using the first set of switches and the second set of switches.

[0084] The second integrated circuit is configured as follows:

[0085] In response to a fault detected in the first integrated circuit, the first set of switches and the second set of switches are selectively controlled, and in response to at least one voltage value corresponding to the voltage of the first set of switches being outside the range of a threshold, a safe state operation is performed.

[0086] Clause 14. The method according to Clause 13, wherein the electric motor comprises a permanent magnet electric motor.

[0087] Clause 15. The method according to Clause 13, wherein the electric motor is associated with the vehicle.

[0088] Clause 16. The method according to Clause 13, wherein the second integrated circuit is configured to perform the safety state operation by turning off the first set of switches and the second set of switches.

[0089] Clause 17. The method according to Clause 13, wherein the second integrated circuit is configured to perform the safety state operation by enhancing the first set of switches and the second set of switches.

[0090] Clause 18. The method according to Clause 13, wherein, in response to the second integrated circuit selectively controlling the first group of switches and the second group of switches, the first integrated circuit supplies power to the first group of switches, and the second integrated circuit supplies power to the second group of switches.

[0091] Clause 19. The method according to Clause 13, wherein, in response to a fault abort in the first integrated circuit, the second integrated circuit returns control of the first set of switches to the first integrated circuit.

[0092] Clause 20. An apparatus comprising:

[0093] The first integrated circuit is configured as follows:

[0094] A first high-voltage power supply and a first low-voltage power supply are used to power a first set of switches, the first high-voltage power supply and the first low-voltage power supply being connected to the first integrated circuit; and

[0095] Selectively control the first group of switches and the second group of switches;

[0096] A second integrated circuit is configured to supply power to the second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit; and

[0097] The electric motor is controlled by a first set of switches and a second set of switches.

[0098] The second integrated circuit is further configured as follows:

[0099] In response to an internal signal indicating a fault in the first integrated circuit, the first group of switches and the second group of switches are selectively controlled; in response to the internal signal indicating a fault in the first integrated circuit, control of the first group of switches is returned to the first integrated circuit; and in response to at least one voltage value corresponding to the voltage of the first group of switches being outside the threshold range, a safe state operation is performed.

[0100] The foregoing discussion is intended to illustrate the principles and various implementations of this disclosure. Once the foregoing disclosure is fully understood, many variations and modifications will become apparent to those skilled in the art. The appended claims are intended to be construed as encompassing all such variations and modifications.

[0101] The word “example” is used herein to mean used as an example, instance, or illustration. Any aspect or design described herein as an “example” is not necessarily to be construed as preferred or advantageous over other aspects or designs. Rather, the use of the word “example” is intended to present the concept in a specific manner. As used in this application, the term “or” is intended to mean an inclusive “or” rather than an exclusive “or.” That is, unless otherwise stated or clearly apparent from the context, “X comprises A or B” is intended to mean any natural substitution of inclusion. That is, “X comprises A or B” is satisfied in any of the foregoing cases if X comprises A; X comprises B; or X comprises both A and B. Furthermore, the articles “a” and “an” used in this application and the appended claims should generally be interpreted as meaning “one or more” unless otherwise stated or clearly indicated from the context. Additionally, the use of the terms “implementation” or “an implementation” throughout the text is not intended to mean the same implementation or embodiment unless so described.

[0102] The systems, algorithms, methods, instructions, etc., described herein can be implemented in hardware, software, or any combination thereof. The hardware may include, for example, a computer, intellectual property (IP) core, application-specific integrated circuit (ASIC), programmable logic array, optical processor, programmable logic controller, microcode, microcontroller, server, microprocessor, digital signal processor, or any other suitable circuit. In the claims, the term "processor" should be understood to include any of the foregoing hardware, individually or in combination. The terms "signal" and "data" are used interchangeably.

[0103] As used herein, the term "module" can include a packaged functional hardware unit designed for use with other components, an instruction set executable by a controller (e.g., a processor executing software or firmware), processing circuitry configured to perform a specific function, and a separate hardware or software component that interfaces with a larger system. For example, a module can include application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), circuits, digital logic circuits, analog circuits, combinations of discrete circuits, gates, and other types of hardware or combinations thereof. In other embodiments, a module can include memory storing instructions executable by a controller to implement the features of the module.

[0104] Furthermore, in one aspect, for example, the system described herein may be implemented using a general-purpose computer or general-purpose processor having a computer program that, when executed, performs any of the corresponding methods, algorithms, and / or instructions described herein. Additionally or alternatively, for example, a special-purpose computer / processor may be used, which may contain additional hardware for performing any of the methods, algorithms, or instructions described herein.

[0105] Furthermore, all or part of the implementation of this disclosure may take the form of a computer program product accessible from, for example, a computer-usable or computer-readable medium. A computer-usable or computer-readable medium can be any device capable of, for example, tangibly containing, storing, communicating, or transmitting a program for use by or in conjunction with any processor. Such a medium can be, for example, an electronic, magnetic, optical, electromagnetic, or semiconductor device. Other suitable media are also available.

[0106] The above embodiments, implementations, and aspects have been described to allow for easy understanding of this disclosure without limiting it. Rather, this disclosure is intended to cover various modifications and equivalent arrangements included within the scope of the appended claims, consistent with the broadest interpretation to include all such modifications and equivalent structures permitted by law.

Claims

1. An inverter system including a first set of switches and a second set of switches, wherein the first set of switches and the second set of switches are used to control the operation of a motor, the inverter system further comprising: A first integrated circuit, the first integrated circuit being configured to: The first set of switches is powered by a first high-voltage power supply and a first low-voltage power supply, which are connected to the first integrated circuit. Selectively control the first group of switches and the second group of switches; A second integrated circuit is configured to supply power to the second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit. The second integrated circuit is further configured as follows: In response to a fault detected in the first integrated circuit, selectively control the first group of switches and the second group of switches; and In response to at least one voltage value corresponding to the voltage of the first set of switches being outside the threshold range, a safety state operation is performed.

2. The inverter system according to claim 1, wherein, The first high-voltage power supply is connected in parallel with the first low-voltage power supply.

3. The inverter system according to claim 1, wherein, The second high-voltage power supply is connected in parallel with the second low-voltage power supply.

4. The inverter system according to claim 1, wherein, The at least one voltage value indicates a fault in the inverter.

5. The inverter system according to claim 1, wherein, The second integrated circuit is also configured to detect the fault in the first integrated circuit based on internal signals of the first integrated circuit.

6. The inverter system according to claim 1, wherein, The electric motor includes a permanent magnet motor.

7. The inverter system according to claim 1, wherein, The electric motor is associated with the vehicle.

8. The inverter system according to claim 1, wherein, The first set of switches and the second set of switches selectively control the operation of the motor.

9. The inverter system according to claim 1, wherein, The second integrated circuit is configured to perform the safety state operation by turning off the first set of switches and the second set of switches.

10. The inverter system according to claim 1, wherein, The second integrated circuit is configured to perform the safety state operation by enhancing the first set of switches and the second set of switches.

11. The inverter system according to claim 1, wherein, In response to the second integrated circuit selectively controlling the first group of switches and the second group of switches, the first integrated circuit supplies power to the first group of switches, and the second integrated circuit supplies power to the second group of switches.

12. The inverter system according to claim 1, wherein, In response to the fault termination in the first integrated circuit, the second integrated circuit returns control of the first set of switches to the first integrated circuit.

13. A method for controlling an inverter system, the method comprising the following steps: A first integrated circuit is used to power a first set of switches using a first high-voltage power supply and a first low-voltage power supply, wherein the first high-voltage power supply and the first low-voltage power supply are connected to the first integrated circuit. The first integrated circuit is used to selectively control the first group of switches and the second group of switches; The second integrated circuit is used to power the second set of switches using a second high-voltage power supply and a second low-voltage power supply, with the second high-voltage power supply and the second low-voltage power supply connected to the second integrated circuit. The motor is controlled using the first set of switches and the second set of switches, wherein the second integrated circuit is configured as follows: In response to a fault detected in the first integrated circuit, selectively control the first group of switches and the second group of switches; and In response to at least one voltage value corresponding to the voltage of the first set of switches being outside the threshold range, a safety state operation is performed.

14. The method according to claim 13, wherein, The electric motor includes a permanent magnet motor.

15. The method according to claim 13, wherein, The electric motor is associated with the vehicle.

16. The method according to claim 13, wherein, The second integrated circuit is configured to perform the safety state operation by turning off the first set of switches and the second set of switches.

17. The method according to claim 13, wherein, The second integrated circuit is configured to perform the safety state operation by enhancing the first set of switches and the second set of switches.

18. The method according to claim 13, wherein, In response to the second integrated circuit selectively controlling the first group of switches and the second group of switches, the first integrated circuit supplies power to the first group of switches, and the second integrated circuit supplies power to the second group of switches.

19. The method according to claim 13, wherein, In response to a fault in the first integrated circuit, the second integrated circuit returns control of the first set of switches to the first integrated circuit.

20. An apparatus for controlling an inverter system, the apparatus comprising: The first integrated circuit is configured as follows: The first set of switches is powered by a first high-voltage power supply and a first low-voltage power supply, and the first high-voltage power supply and the first low-voltage power supply are connected to the first integrated circuit. as well as Selectively control the first group of switches and the second group of switches; A second integrated circuit is configured to supply power to the second set of switches using a second high-voltage power supply and a second low-voltage power supply, the second high-voltage power supply and the second low-voltage power supply being connected to the second integrated circuit; and The electric motor is controlled by the first set of switches and the second set of switches. The second integrated circuit is further configured to: In response to an internal signal indicating a fault in the first integrated circuit, the first set of switches and the second set of switches are selectively controlled; In response to the internal signal of the first integrated circuit indicating a fault termination in the first integrated circuit, control of the first set of switches is returned to the first integrated circuit; and In response to at least one voltage value corresponding to the voltage of the first set of switches being outside the threshold range, a safety state operation is performed.

Images