Motor Controllers and Electric Vehicles

Abstract

The present invention discloses a motor controller and an electric vehicle, wherein the motor controller comprises: a main control chip, a power chip, a shut-off path module, a drive circuit module, and an IGBT power module, wherein the power chip is connected to the main control chip, and the power chip is used to provide a low-voltage power supply to the main control chip; the main control chip, the shut-off path module, the drive circuit module, and the IGBT power module are connected in sequence, and the main control chip is used to obtain multiple groups of recovery signals, and control the drive circuit module to output corresponding drive signals through the shut-off path module according to the multiple groups of recovery signals, so as to control the IGBT power module to enter a corresponding safety mode. Thus, on the basis of not changing the hardware structure of the motor controller, corresponding drive signals are generated according to the multiple groups of recovery signals to control the IGBT power module to enter a corresponding safety mode, thereby ensuring the safety and reliability of the motor controller while avoiding the increase in the manufacturing cost of the whole vehicle, and improving the driving experience of the user.

Description

Technical Field

[0001] The present invention relates to the field of vehicle technology, and in particular to a motor controller and an electric vehicle. Background Art

[0002] With the rapid development of my country's new energy vehicle industry, the safety of electric vehicles has gradually attracted more attention. The International Organization for Standardization (ISO) has also studied and formulated the ISO 26262 functional safety international standard specifically for automotive electronic and electrical systems, aiming to improve user driving safety.

[0003] However, the problem with the related technology is that the input of the motor controller in a pure electric vehicle mainly comes from the high-voltage power supply provided by the power battery, and the control object is a high-power drive motor. Due to the working characteristics of high voltage and high power, the motor controller often needs to use precise and complex design to detect and handle faults, which undoubtedly increases the manufacturing cost of the entire vehicle and sacrifices part of the user's driving experience. Summary of the invention

[0004] The present invention aims to solve one of the technical problems in the related art to at least a certain extent. To this end, the first purpose of the present invention is to propose a motor controller that can generate corresponding drive signals according to multiple sets of sampling signals without changing the hardware structure of the motor controller to control the IGBT power module to enter the corresponding safety mode, thereby ensuring the safety and reliability of the motor controller and improving the user's driving experience while avoiding an increase in the manufacturing cost of the entire vehicle.

[0005] A second object of the present invention is to provide an electric vehicle.

[0006] In order to achieve the above-mentioned purpose, the motor controller proposed in the embodiment of the first aspect of the present invention includes: a main control chip, a power chip, a shutdown path module, a drive circuit module, and an IGBT power module, wherein the power chip is connected to the main control chip, and the power chip is used to provide a low-voltage power supply for the main control chip; the main control chip, the shutdown path module, the drive circuit module and the IGBT power module are connected in sequence, and the main control chip is used to obtain multiple groups of recovery signals, and control the drive circuit module to output corresponding drive signals through the shutdown path module according to the multiple groups of recovery signals, so as to control the IGBT power module to enter the corresponding safety mode.

[0007] According to the motor controller of the embodiment of the present invention, the power chip is connected to the main control chip to provide a low-voltage power supply to the main control chip through the power chip, and the main control chip, the shutdown path module, the drive circuit module and the IGBT power module are connected in sequence to obtain multiple groups of recovery signals through the main control chip, and the drive circuit module is controlled to output corresponding drive signals through the shutdown path module according to the multiple groups of recovery signals to control the IGBT power module to enter the corresponding safety mode. Therefore, on the basis of not changing the hardware structure of the motor controller, the corresponding drive signal is generated according to the multiple groups of recovery signals to control the IGBT power module to enter the corresponding safety mode, thereby ensuring the safety and reliability of the motor controller while avoiding the increase of the manufacturing cost of the whole vehicle, and improving the driving experience of the user.

[0008] In addition, the motor controller according to the above embodiment of the present invention may also include the following additional technical features:

[0009] According to one embodiment of the present invention, the main control chip is specifically used for: after judging that the motor controller fails or the recovery signal is abnormal according to the multiple sets of recovery signals, and judging that the current PWM working mode of the motor controller is the normal working mode, stopping the output of the PWM control signal, and controlling the drive circuit module to output the corresponding drive signal through the shutdown path module according to the multiple sets of recovery signals, so as to control the IGBT power module to enter the corresponding safety mode.

[0010] According to one embodiment of the present invention, the shutdown path module includes a first shutdown path and a second shutdown path, wherein the first shutdown path is used to output an emergency shutdown signal to the drive circuit module so that the drive circuit module controls the IGBT power module to enter a hardware lower bridge arm active short-circuit safety mode, and the second shutdown path is used to control the drive circuit module to output a corresponding drive signal to control the IGBT power module to enter a software bridge arm active short-circuit safety mode or a full bridge arm disconnection safety mode.

[0011] According to one embodiment of the present invention, the recovery signal includes a hardware fault signal, a shutdown control signal and a bridge arm drive signal, and the hardware fault signal includes at least one of a power chip fault signal, a drive circuit module fault signal, a three-phase current hardware fault signal and a DC bus current hardware fault signal.

[0012] According to one embodiment of the present invention, the drive circuit module fault signal includes an upper bridge arm drive circuit fault signal and a lower bridge arm drive circuit fault signal, wherein, when the recovery signal is the hardware fault signal, and the hardware fault signal is the upper bridge arm drive circuit fault signal and the lower bridge arm drive circuit fault signal, the main control chip is also used to output an emergency shutdown signal to the drive circuit module through the first shutdown path, so that the drive circuit module controls the IGBT power module to enter a hardware lower bridge arm active short-circuit safety mode; when the recovery signal is the hardware fault signal, and the hardware fault signal is the upper bridge arm drive circuit fault signal or the lower bridge arm drive circuit fault signal, the main control chip is also used to control the drive circuit module to output a corresponding drive signal through the second shutdown path, so as to control the IGBT power module to enter a software bridge arm active short-circuit safety mode, wherein the software bridge arm active short-circuit safety mode includes a software upper bridge arm active short-circuit safety mode and a software lower bridge arm active short-circuit safety mode.

[0013] According to one embodiment of the present invention, when the recovery signal is the hardware fault signal, and the hardware fault is not the drive circuit module fault signal, the main control chip is also used to control the drive circuit module to output a corresponding drive signal through the second shutdown path to control the IGBT power module to enter a combined safety mode, wherein the combined safety mode switches between a software-based bridge arm active short-circuit safety mode and a full bridge arm disconnection safety mode according to the motor speed.

[0014] According to one embodiment of the present invention, when the recovery signal is the shutdown control signal and it is determined that the shutdown control signal output is abnormal based on the shutdown control signal, the main control chip is also used to output an emergency shutdown signal to the drive circuit module through the first shutdown path, so that the drive circuit module controls the IGBT power module to enter a hardware-type lower bridge arm active short-circuit safety mode.

[0015] According to one embodiment of the present invention, the bridge arm drive signal includes an upper bridge arm drive signal and a lower bridge arm drive signal, wherein, when the recovery signal is the bridge arm drive signal, and it is determined according to the bridge arm drive signal that the output of the upper bridge arm drive signal is abnormal and the output of the lower bridge arm drive signal is abnormal, the main control chip is also used to output an emergency shutdown signal to the drive circuit module through the first shutdown path, so that the drive circuit module controls the IGBT power module to enter a hardware lower bridge arm active short-circuit safety mode; when the recovery signal is the bridge arm drive signal, and it is determined according to the bridge arm drive signal that the output of the upper bridge arm drive signal is abnormal or the output of the lower bridge arm drive signal is abnormal, the main control chip is also used to control the drive circuit module to output a corresponding drive signal through the second shutdown path to control the IGBT power module to enter a software bridge arm active short-circuit safety mode.

[0016] According to one embodiment of the present invention, the main control chip is also used to control the drive circuit module to output a corresponding drive signal through the shutdown path module according to the safety mode arbitration strategy and the multiple groups of recovery signals, so as to control the IGBT power module to enter the corresponding safety mode, wherein the safety mode arbitration strategy includes the priority of each safety mode.

[0017] In order to achieve the above-mentioned object, the electric vehicle provided in the second embodiment of the present invention includes the above-mentioned motor controller.

[0018] According to the electric vehicle of the embodiment of the present invention, the above-mentioned motor controller is adopted, which can generate corresponding drive signals according to multiple groups of sampling signals without changing the hardware structure of the motor controller, so as to control the IGBT power module to enter the corresponding safety mode, thereby avoiding an increase in the manufacturing cost of the whole vehicle while ensuring the safety and reliability of the motor controller and improving the user's driving experience.

[0019] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 is a block diagram of a motor controller according to an embodiment of the present invention;

[0021] Figure 2 is a schematic diagram of electrical connection relationships of a motor controller according to an embodiment of the present invention;

[0022] Figure 3 is a block diagram of an electric vehicle according to an embodiment of the present invention. DETAILED DESCRIPTION

[0023] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, and should not be construed as limiting the present invention.

[0024] The motor controller and the electric vehicle according to the embodiments of the present invention will be described below with reference to the accompanying drawings.

[0025] It should be understood that the prior art method for managing the safety status of a pure electric vehicle motor controller after a fault involves hardware changes, which increases the manufacturing cost of the entire vehicle. The embodiment of the present invention proposes a motor controller. Thus, without changing the hardware structure of the motor controller, corresponding drive signals are generated based on multiple sets of sampling signals to control the IGBT power module to enter a corresponding safety mode, thereby ensuring the safety and reliability of the motor controller and improving the user's driving experience while avoiding an increase in the manufacturing cost of the entire vehicle.

[0026] Figure 1 is a block diagram of a motor controller according to an embodiment of the present invention.

[0027] Specifically, Figure 1 As shown, the motor controller 100 includes: a main control chip 10 , a power chip 20 , a shutdown path module 30 , a drive circuit module 40 and an IGBT power module 50 .

[0028] Among them, the power chip 20 is connected to the main control chip 10, and the power chip 20 is used to provide a low-voltage power supply to the main control chip 10; the main control chip 10, the shutdown path module 30, the drive circuit module 40 and the IGBT power module 50 are connected in sequence, and the main control chip 10 is used to obtain multiple groups of recovery signals, and control the drive circuit module 40 to output corresponding drive signals through the shutdown path module 30 according to the multiple groups of recovery signals, so as to control the IGBT power module 50 to enter the corresponding safety mode.

[0029] Specifically, in some embodiments of the present invention, the power chip 20 can provide a low-voltage power supply for the normal operation of the main control chip 10, thereby ensuring that the main control chip 10 can control the drive circuit module 40 to output corresponding drive signals through the shutdown path module 30 according to multiple sets of recovery signals, so as to control the IGBT power module 50 to enter the corresponding safety mode.

[0030] It should be noted that, in some embodiments of the present invention, the power chip 20 also has a monitoring function, which can monitor the state of the power chip 20 itself and the working state of the main control chip 10, and can feedback the corresponding recovery signal to the main control chip 10 when the working state of the main control chip 10 or the power chip 20 is abnormal. The shutdown path module 30 can output the corresponding drive circuit module control signal to the drive circuit module 40 according to the corresponding safety mode, and can feedback the corresponding recovery signal to the main control chip 10. The drive circuit module 40 can output the corresponding drive signal to the IGBT power module 50 according to the drive circuit module 40 control signal, and can feedback the corresponding recovery signal to the main control chip 10. The IGBT power module 50 can enter the corresponding safety mode according to the corresponding drive signal.

[0031] In addition, if Figure 2 As shown, in some embodiments of the present invention, the main control chip 10 can also be connected to the three-phase current hardware and the DC bus current hardware to obtain the recovery signal of the three-phase current hardware feedback and the recovery signal of the DC bus current hardware feedback. The IGBT power module can also be connected to the drive motor to control the drive motor to output torque normally.

[0032] It should be understood that in the above-mentioned embodiment of the present invention, the main control chip 10 can control the drive circuit module 40 to output corresponding drive signals through the shutdown path module 30 according to multiple sets of recovery signals fed back by the power chip 20, the shutdown path module 30, the drive circuit module 40, the IGBT power module 50, the three-phase current hardware and the DC bus current hardware, so as to control the IGBT power module 50 to enter the corresponding safety mode. Therefore, on the basis of not changing the hardware structure of the motor controller 100, corresponding drive signals are generated according to multiple sets of recovery signals to control the IGBT power module 50 to enter the corresponding safety mode, thereby ensuring the safety and reliability of the motor controller 100 while avoiding the increase of the manufacturing cost of the whole vehicle, and improving the driving experience of the user.

[0033] Furthermore, the main control chip 10 is specifically used for: after judging that the motor controller 100 fails or the recovery signal is abnormal according to multiple sets of recovery signals, and judging that the current PWM working mode of the motor controller 100 is the normal working mode, stopping the output of the PWM control signal, and controlling the drive circuit module 40 to output the corresponding drive signal through the shutdown path module 30 according to the multiple sets of recovery signals, so as to control the IGBT power module 50 to enter the corresponding safety mode.

[0034] Specifically, when the motor controller 100 fails or the recovery signal is abnormal, if the fault or the recovery signal abnormality is not handled in time, the reliability of the motor controller 100 will be reduced, thereby endangering the driving safety of the user. Therefore, in one embodiment of the present invention, when the main control chip 10 determines that the motor controller 100 fails or the recovery signal is abnormal based on multiple sets of recovery signals, and determines that the current PWM working mode of the motor controller 100 is the normal working mode, it can also stop outputting the PWM control signal, and control the drive circuit module 40 to output the corresponding drive signal through the shutdown path module 30 based on the multiple sets of recovery signals, so as to control the IGBT power module 50 to enter the corresponding safety mode.

[0035] It should be understood that in the above-mentioned embodiment of the present invention, the main control chip 10 can stop outputting the PWM control signal to implement wave sealing processing after judging that the motor controller 100 fails or the recovery signal is abnormal based on multiple sets of recovery signals, and judging that the current PWM working mode of the motor controller 100 is the normal working mode, so as to ensure the reliability of the motor controller 100 first, and provide transition time for the subsequent control of the drive circuit module 40 to output the corresponding drive signal through the shutdown path module 30 based on multiple sets of recovery signals to control the IGBT power module 50 to enter the corresponding safety mode, thereby improving the stability of the motor controller 100.

[0036] Furthermore, if Figure 2 As shown, the shutdown path module 30 includes a first shutdown path and a second shutdown path, wherein the first shutdown path is used to output an emergency shutdown signal to the drive circuit module 40, so that the drive circuit module 40 controls the IGBT power module 50 to enter a hardware-type lower bridge arm active short-circuit safety mode, and the second shutdown path is used to control the drive circuit module 40 to output a corresponding drive signal to control the IGBT power module 50 to enter a software-type bridge arm active short-circuit safety mode or a full bridge arm disconnection safety mode.

[0037] Specifically, if Figure 3 As shown, in some embodiments of the present invention, the main control chip 10 can output an emergency shutdown signal to the drive circuit module 40 through the first shutdown path in the shutdown path module 30, so that the drive circuit module 40 controls the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode, and can also control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path in the shutdown path module 30 to control the IGBT power module 50 to enter the software bridge arm active short-circuit safety mode or the full bridge arm disconnection safety mode.

[0038] It should be understood that in the above-mentioned embodiments of the present invention, the main control chip 10 can respectively output an emergency shutdown signal through the first shutdown path in the shutdown path module 30 to the drive circuit module 40, so that the drive circuit module 40 controls the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode, and can control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter the software bridge arm active short-circuit safety mode or the full bridge arm disconnection safety mode, thereby improving the reliability of the motor controller 100 and enhancing the user's driving experience.

[0039] Furthermore, the recovery signal includes a hardware fault signal, a shutdown control signal and a bridge arm drive signal, and the hardware fault signal includes at least one of a power chip fault signal, a drive circuit module fault signal, a three-phase current hardware fault signal and a DC bus current hardware fault signal.

[0040] It should be noted that, in some embodiments of the present invention, the three-phase current hardware fault signal also includes a motor U-phase current hardware overcurrent fault signal, a motor V-phase current hardware overcurrent fault signal and a motor W-phase current hardware overcurrent fault signal, and the DC bus current hardware fault signal also includes a DC bus current hardware overcurrent fault signal and a DC bus current hardware overvoltage fault signal.

[0041] It should be understood that in the above-mentioned embodiment of the present invention, when the main control chip 100 determines that the motor controller 100 fails or the recovery signal is abnormal based on at least one of the power chip fault signal, the drive circuit module fault signal, the three-phase current hardware fault signal and the DC bus current hardware fault signal, the shutdown control signal and the bridge arm drive signal, and determines that the current PWM working mode of the motor controller 100 is the normal working mode, it can also stop outputting the PWM control signal to achieve wave sealing processing, thereby giving priority to ensuring the reliability of the motor controller 100, and for the subsequent control of the drive circuit module 40 to output the corresponding drive signal through the shutdown path module 30 according to multiple groups of recovery signals to control the IGBT power module 50 to enter the corresponding safety mode. Provide transition time, thereby improving the stability of the motor controller 100.

[0042] In combination with a specific embodiment of the present invention, the specific implementation method of the main control chip 10 in the embodiment of the present invention controlling the driving circuit module 40 to output a corresponding driving signal through the shutdown path module 30 to control the IGBT power module 50 to enter a corresponding safety mode is described below.

[0043] Furthermore, the driving circuit module fault signal includes an upper bridge arm driving circuit fault signal and a lower bridge arm driving circuit fault signal, wherein, when the recovery signal is a hardware fault signal, and the hardware fault signal is an upper bridge arm driving circuit fault signal and a lower bridge arm driving circuit fault signal, the main control chip 10 is also used to output an emergency shutdown signal to the driving circuit module 40 through the first shutdown path, so that the driving circuit module 40 controls the IGBT power module 50 to enter a hardware lower bridge arm active short-circuit safety mode.

[0044] Specifically, in some embodiments of the present invention, when the main control chip 10 determines that the upper bridge arm drive circuit and the lower bridge arm drive circuit of the drive circuit module 40 fail at the same time based on the upper bridge arm drive circuit fault signal and the lower bridge arm drive circuit fault signal, resulting in the upper bridge arm and the lower bridge arm of the IGBT power module 50 being unable to be effectively controlled according to the PWM control signal of the main control chip 10, at this time, the main control chip 10 can output an emergency shutdown signal to the drive circuit module 40 through the first shutdown path, so that the drive circuit module 40 controls the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode.

[0045] Furthermore, when the recovery signal is a hardware fault signal, and the hardware fault signal is an upper bridge arm driving circuit fault signal or a driving lower bridge arm circuit fault signal, the main control chip 10 is also used to control the driving circuit module 40 to output a corresponding driving signal through the second shutdown path to control the IGBT power module 50 to enter a software-based bridge arm active short-circuit safety mode, wherein the software-based bridge arm active short-circuit safety mode includes a software-based upper bridge arm active short-circuit safety mode and a software-based lower bridge arm active short-circuit safety mode.

[0046] Specifically, in some embodiments of the present invention, when the main control chip 10 determines that the upper bridge arm drive circuit of the drive circuit module 40 has a fault based on the upper bridge arm drive circuit fault signal, resulting in the upper bridge arm of the IGBT power module 50 being unable to be effectively controlled according to the PWM control signal of the main control chip 10, at this time, since the lower bridge arm of the IGBT power module 50 is controllable, the main control chip 10 can control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter the software-based lower bridge arm active short-circuit safety mode in the software-based bridge arm active short-circuit safety mode.

[0047] Alternatively, in some other embodiments of the present invention, when the main control chip 10 determines that the lower bridge arm drive circuit of the drive circuit module 40 has a fault based on the lower bridge arm drive circuit fault signal, resulting in the lower bridge arm of the IGBT power module 50 being unable to be effectively controlled according to the PWM control signal of the main control chip 10, at this time, since the upper bridge arm of the IGBT power module 50 is controllable, the main control chip 10 can control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter the software-based upper bridge arm active short-circuit safety mode in the software-based bridge arm active short-circuit safety mode.

[0048] It should be understood that in the above-mentioned embodiment of the present invention, the main control chip 10 can determine the state of the bridge arm driving circuit of the driving circuit module 40 according to the recovery signal, so as to control the IGBT power module 50 to enter the hardware-type lower bridge arm active short-circuit safety mode, the software-type upper bridge arm active short-circuit safety mode or the software-type lower bridge arm active short-circuit safety mode through the first shutdown path or the second shutdown path according to the state of the bridge arm driving circuit of the driving circuit module 40, thereby improving the reliability of the motor controller 100 and enhancing the user's driving experience.

[0049] Furthermore, when the recovery signal is a hardware fault signal, and the hardware fault signal is not a drive circuit module fault signal, the main control chip 10 is also used to control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter a combined safety mode, wherein the combined safety mode switches between a software-based bridge arm active short-circuit safety mode and a full bridge arm disconnection safety mode according to the motor speed.

[0050] Specifically, in some embodiments of the present invention, when the main control chip 10 receives a hardware fault signal, and the hardware fault signal is not a drive circuit module fault signal, it can be determined that the drive circuit module 40 has not had an upper bridge arm drive circuit fault and a lower bridge arm drive circuit fault. At this time, since the upper bridge arm drive circuit and the lower bridge arm drive circuit of the drive circuit module 40 can operate normally, the main control chip 10 can control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter the combined safety mode.

[0051] It should be noted that in some embodiments of the present invention, the combined safety mode can be switched between a software-based bridge arm active short-circuit safety mode and a full-bridge arm disconnection safety mode according to the motor speed. For example, when the motor controller 100 fails and the motor speed is greater than the speed threshold, the main control chip 10 can control the drive circuit module 40 through the second shutdown path to output a corresponding drive signal to control the IGBT power module 50 to enter the software-based bridge arm active short-circuit safety mode, and when the motor controller 100 fails and the motor speed is less than the speed threshold, the main control chip 10 can control the drive circuit module 40 through the second shutdown path to output a corresponding drive signal to control the IGBT power module 50 to enter the full-bridge arm disconnection safety mode.

[0052] Optionally, in some embodiments of the present invention, the speed point with the same braking torque in the software-type bridge arm active short-circuit safety mode and the full bridge arm disconnection safety mode can be obtained through prior experiments, and the above-mentioned speed threshold can be determined based on the speed point. For example, assuming that the speed is 3000rpm, the software-type bridge arm active short-circuit safety mode and the full bridge arm disconnection safety mode have the same braking torque, then the speed of 3000rpm can be determined as the speed threshold.

[0053] It should be understood that in the above-mentioned embodiment of the present invention, the main control chip 10 can determine the bridge arm driving circuit state of the driving circuit module 40 according to the recovery signal, and then control the driving circuit module 40 to output the corresponding driving signal through the second shutdown path according to the bridge arm driving circuit state of the driving circuit module 40, so as to control the IGBT power module 50 to enter the combined safety mode, so as to control the IGBT power module 50 to enter the software-type bridge arm active short-circuit safety mode when the motor rotates at high speed, thereby avoiding the motor from generating high back electromotive force, and control the IGBT power module 50 to enter the full bridge arm disconnection safety mode when the motor rotates at low speed, thereby avoiding the motor from generating a large braking torque, so as to further improve the reliability of the motor controller 100 and enhance the user's driving experience.

[0054] Furthermore, when the recovery signal is a shutdown control signal and it is determined that the shutdown control signal output is abnormal based on the shutdown control signal, the main control chip 10 is also used to output an emergency shutdown signal to the drive circuit module 40 through the first shutdown path, so that the drive circuit module 40 controls the IGBT power module 50 to enter a hardware-type lower bridge arm active short-circuit safety mode.

[0055] Specifically, in some embodiments of the present invention, when the main control chip 10 receives a shutdown control signal but does not receive a fault signal fed back by the main control chip 10 and the power chip 20, it can be determined that the shutdown control signal output is abnormal. At this time, the main control chip 10 can output an emergency shutdown signal to the drive circuit module 40 through the first shutdown path, so that the drive circuit module 40 can control the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode.

[0056] It should be understood that in the above-mentioned embodiment of the present invention, the main control chip 10 can determine whether the shutdown control signal output is abnormal according to the recovery signal, and output the emergency shutdown signal to the drive circuit module 40 through the first shutdown path when the shutdown control signal output is abnormal, so that the drive circuit module 40 can control the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode, thereby improving the stability of the motor controller 100 and enhancing the user's driving experience.

[0057] Furthermore, the bridge arm drive signal includes an upper bridge arm drive signal and a lower bridge arm drive signal, wherein, when the recovery signal is a bridge arm drive signal, and it is determined according to the bridge arm drive signal that the upper bridge arm drive signal output is abnormal and the lower bridge arm drive signal output is abnormal, the main control chip 10 is also used to output an emergency shutdown signal to the drive circuit module 40 through the first shutdown path, so that the drive circuit module 40 controls the IGBT power module 50 to enter a hardware lower bridge arm active short-circuit safety mode.

[0058] Specifically, in some embodiments of the present invention, when the main control chip 10 determines that the upper bridge arm drive signal output of the driving circuit module 40 is abnormal and the lower bridge arm drive signal output is abnormal based on the upper bridge arm drive signal and the lower bridge arm drive signal, since the driving circuit module 40 simultaneously has the upper bridge arm drive signal output abnormality and the lower bridge arm drive signal output abnormality, which causes the upper bridge arm and the lower bridge arm of the IGBT power module 50 to fail to work normally, at this time, the main control chip 10 can output an emergency shutdown signal to the driving circuit module 40 through the first shutdown path, so that the driving circuit module 40 controls the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode.

[0059] Furthermore, when the recovery signal is a bridge arm drive signal, and it is determined based on the bridge arm drive signal that the upper bridge arm drive signal output is abnormal or the lower bridge arm drive signal output is abnormal, the main control chip 10 is also used to control the drive circuit module 40 to output a corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter a software-based bridge arm active short-circuit safety mode.

[0060] Specifically, in some embodiments of the present invention, when the main control chip 10 determines that the output of the upper bridge arm drive signal of the drive circuit module 40 is abnormal based on the upper bridge arm drive signal, resulting in the upper bridge arm of the IGBT power module 50 being unable to be effectively controlled according to the PWM control signal of the main control chip 10, at this time, since the lower bridge arm of the IGBT power module 50 is controllable, the main control chip 10 can control the drive circuit module 40 to output the corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter the software-based lower bridge arm active short-circuit safety mode in the software-based bridge arm active short-circuit safety mode.

[0061] Alternatively, in some other embodiments of the present invention, when the main control chip 10 determines that the output of the lower bridge arm drive signal of the drive circuit module 40 is abnormal based on the lower bridge arm drive signal, resulting in the lower bridge arm of the IGBT power module 50 being unable to be effectively controlled according to the PWM control signal of the main control chip 10, at this time, since the upper bridge arm of the IGBT power module 50 is controllable, at this time, the main control chip 10 can control the drive circuit module 40 to output the corresponding drive signal through the second shutdown path to control the IGBT power module 50 to enter the software-based upper bridge arm active short-circuit safety mode in the software-based bridge arm active short-circuit safety mode.

[0062] It should be understood that in the above-mentioned embodiment of the present invention, the main control chip 10 can determine the output state of the bridge arm drive signal of the driving circuit module 40 according to the recovery signal, so as to control the IGBT power module 50 to enter the hardware-type lower bridge arm active short-circuit safety mode, the software-type upper bridge arm active short-circuit safety mode or the software-type lower bridge arm active short-circuit safety mode through the first shutdown path or the second shutdown path according to the output state of the bridge arm drive signal of the driving circuit module 40, thereby improving the reliability of the motor controller 100 and enhancing the user's driving experience.

[0063] Furthermore, the main control chip 10 is also used to control the drive circuit module 40 to output a corresponding drive signal through the shutdown path module 30 according to the safety mode arbitration strategy and multiple groups of recovery signals, so as to control the IGBT power module 50 to enter the corresponding safety mode, wherein the safety mode arbitration strategy includes the priority of each safety mode.

[0064] Optionally, in some embodiments of the present invention, the priority of the hardware lower bridge arm active short-circuit safety mode is greater than that of the software bridge arm active short-circuit safety mode, and the priority of the software bridge arm active short-circuit safety mode is greater than that of the combined safety mode, wherein the priority of the software upper bridge arm active short-circuit safety mode in the software bridge arm active short-circuit safety mode is consistent with the priority of the software lower bridge arm active short-circuit safety mode.

[0065] For example, in some embodiments of the present invention, when the main control chip 10 determines that a lower bridge arm driving circuit fault occurs in the driving circuit module 40 based on multiple sets of recovery signals, and determines that the lower bridge arm driving signal output of the driving circuit module 40 is abnormal, at this time, since the safety mode corresponding to the lower bridge arm driving circuit fault is the software-based upper bridge arm active short-circuit safety mode, and the safety mode corresponding to the lower bridge arm driving signal output abnormality is the software-based upper bridge arm active short-circuit safety mode, in other words, the safety mode requirements of the two are consistent. Therefore, the main control chip 10 can control the driving circuit module 40 to output the corresponding driving signal through the second shutdown path to control the IGBT power module 50 to enter the software-based upper bridge arm active short-circuit safety mode.

[0066] Alternatively, in other embodiments of the present invention, when the main control chip 10 determines that the upper bridge arm drive circuit and the lower bridge arm drive circuit faults occur simultaneously in the drive circuit module 40 based on multiple sets of recovery signals, and determines that the upper bridge arm drive signal output of the drive circuit module 40 is abnormal, at this time, since the safety mode corresponding to the simultaneous upper bridge arm drive circuit and lower bridge arm drive circuit faults is the hardware lower bridge arm active short-circuit safety mode, the safety mode corresponding to the upper bridge arm drive signal output abnormality is the software lower bridge arm active short-circuit safety mode, and the priority of the hardware lower bridge arm active short-circuit safety mode is greater than the priority of the software lower bridge arm active short-circuit safety mode, the main control chip 10 can output an emergency shutdown signal to the drive circuit module 40 through the first shutdown path, so that the drive circuit module 40 controls the IGBT power module 50 to enter the hardware lower bridge arm active short-circuit safety mode.

[0067] Alternatively, in other embodiments of the present invention, when the main control chip 10 determines that an upper bridge arm driving circuit fault occurs in the driving circuit module 40 based on multiple sets of recovery signals, and determines that the lower bridge arm driving signal output of the driving circuit module 40 is abnormal, at this time, since the safety mode corresponding to the upper bridge arm driving circuit fault is the software-based lower bridge arm active short-circuit safety mode, the safety mode corresponding to the lower bridge arm driving signal output abnormality is the software-based upper bridge arm active short-circuit safety mode, and the priority of the software-based lower bridge arm active short-circuit safety mode is consistent with the priority of the software-based upper bridge arm active short-circuit safety mode, therefore, following the priority ascending principle, the main control chip 10 can output an emergency shutdown signal to the driving circuit module 40 through the first shutdown path, so that the driving circuit module 40 controls the IGBT power module 50 to enter the hardware-based lower bridge arm active short-circuit safety mode.

[0068] It should be understood that in the above-mentioned embodiments of the present invention, the main control chip 10 can determine the safety mode that the motor controller 100 needs to enter based on the recovery signal and the safety mode arbitration strategy, and then the main control chip 10 can control the IGBT power module 50 to enter the corresponding safety mode through the first shutdown path or the second shutdown path, thereby improving the reliability of the motor controller 100 and enhancing the user's driving experience.

[0069] In summary, according to the motor controller 100 of the embodiment of the present invention, the power chip 20 is connected to the main control chip 10 to provide a low-voltage power supply to the main control chip 10 through the power chip 20, and the main control chip 10, the shutdown path module 30, the drive circuit module 40 and the IGBT power module 50 are connected in sequence to obtain multiple groups of recovery signals through the main control chip 10, and the drive circuit module 40 is controlled to output corresponding drive signals through the shutdown path module 30 according to the multiple groups of recovery signals to control the IGBT power module 50 to enter the corresponding safety mode. Therefore, on the basis of not changing the hardware structure of the motor controller 100, the corresponding drive signals are generated according to the multiple groups of recovery signals to control the IGBT power module 50 to enter the corresponding safety mode, thereby ensuring the safety and reliability of the motor controller 100 while avoiding the increase of the manufacturing cost of the whole vehicle, and improving the driving experience of the user.

[0070] Based on the same inventive concept, Figure 3 As shown, the embodiment of the present invention further proposes an electric vehicle 1000 corresponding to the aforementioned motor controller 100 .

[0071] It should be noted that the specific implementation of the electric vehicle 1000 of the embodiment of the present invention corresponds one-to-one to the specific implementation of the motor controller 100 of the aforementioned embodiment of the present invention, and will not be described again here to reduce redundancy.

[0072] In summary, according to the electric vehicle of the embodiment of the present invention, the above-mentioned motor controller 100 is adopted, which can generate corresponding drive signals according to multiple groups of sampling signals without changing the hardware structure of the motor controller 100, so as to control the IGBT power module 50 to enter the corresponding safety mode, thereby avoiding an increase in the manufacturing cost of the whole vehicle while ensuring the safety and reliability of the motor controller 100 and improving the driving experience of the user.

[0073] It should be noted that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection portion with one or more wirings (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0074] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0075] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0076] In the description of the present invention, it is to be understood that the terms “center”, “longitudinal”, “lateral”, “length”, “width”, “thickness”, “up”, “down”, “front”, “back”, “left”, “right”, “vertical”, “horizontal”, “top”, “bottom”, “inside”, “outside”, “clockwise”, “counterclockwise”, “axial”, “radial”, “circumferential”, etc., indicating orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as limiting the present invention.

[0077] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0078] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements, unless otherwise clearly defined. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0079] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0080] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A motor controller, characterized in that: The motor controller includes: a main control chip, a power chip, a shutdown path module, a drive circuit module, and an IGBT power module, wherein: The power chip is connected to the main control chip, and the power chip is used to provide a low-voltage power supply for the main control chip; The main control chip, the shutdown path module, the drive circuit module and the IGBT power module are connected in sequence, and the main control chip is used to obtain multiple groups of recovery signals, and control the drive circuit module to output corresponding drive signals through the shutdown path module according to the multiple groups of recovery signals, so as to control the IGBT power module to enter the corresponding safety mode; The shutdown path module includes a first shutdown path and a second shutdown path, wherein the first shutdown path is used to output an emergency shutdown signal to the drive circuit module so that the drive circuit module controls the IGBT power module to enter a hardware lower bridge arm active short-circuit safety mode, and the second shutdown path is used to control the drive circuit module to output a corresponding drive signal to control the IGBT power module to enter a software bridge arm active short-circuit safety mode or a full bridge arm disconnection safety mode; The recovery signal includes a hardware fault signal, a shutdown control signal and a bridge arm drive signal, and the hardware fault signal includes at least one of a power chip fault signal, a drive circuit module fault signal, a three-phase current hardware fault signal and a DC bus current hardware fault signal; The driving circuit module fault signal includes an upper bridge arm driving circuit fault signal and a lower bridge arm driving circuit fault signal, wherein: When the recovery signal is the hardware fault signal, and the hardware fault signal is the upper bridge arm drive circuit fault signal and the lower bridge arm drive circuit fault signal, the main control chip is also used to output an emergency shutdown signal to the drive circuit module through the first shutdown path, so that the drive circuit module controls the IGBT power module to enter the hardware lower bridge arm active short-circuit safety mode; When the recovery signal is the hardware fault signal, and the hardware fault signal is the upper bridge arm drive circuit fault signal or the lower bridge arm drive circuit fault signal, the main control chip is also used to control the drive circuit module to output a corresponding drive signal through the second shutdown path to control the IGBT power module to enter a software-type bridge arm active short-circuit safety mode, wherein the software-type bridge arm active short-circuit safety mode includes a software-type upper bridge arm active short-circuit safety mode and a software-type lower bridge arm active short-circuit safety mode; When the recovery signal is the hardware fault signal, and the hardware fault is not the drive circuit module fault signal, the main control chip is further used to control the drive circuit module to output a corresponding drive signal through the second shutdown path to control the IGBT power module to enter a combined safety mode, wherein the combined safety mode switches between a software-type bridge arm active short-circuit safety mode and a full bridge arm disconnection safety mode according to the motor speed; The main control chip is also used to control the drive circuit module to output a corresponding drive signal through the shutdown path module according to the safety mode arbitration strategy and the multiple groups of recovery signals, so as to control the IGBT power module to enter a corresponding safety mode, wherein the safety mode arbitration strategy includes the priority of each safety mode; Among them, the priority of the hardware lower bridge arm active short-circuit safety mode is greater than that of the software bridge arm active short-circuit safety mode, and the priority of the software bridge arm active short-circuit safety mode is greater than that of the combined safety mode. Among them, the priority of the software upper bridge arm active short-circuit safety mode in the software bridge arm active short-circuit safety mode is consistent with the priority of the software lower bridge arm active short-circuit safety mode.

2. The motor controller according to claim 1, characterized in that: The main control chip is specifically used for: After determining that the motor controller fails or the recovery signal is abnormal based on the multiple sets of recovery signals, and determining that the current PWM operating mode of the motor controller is the normal operating mode, stop outputting the PWM control signal, and control the drive circuit module to output the corresponding drive signal through the shutdown path module based on the multiple sets of recovery signals, so as to control the IGBT power module to enter the corresponding safety mode.

3. The motor controller according to claim 1, characterized in that: When the recovery signal is the shutdown control signal and it is determined that the shutdown control signal output is abnormal based on the shutdown control signal, the main control chip is also used to output an emergency shutdown signal to the drive circuit module through the first shutdown path, so that the drive circuit module controls the IGBT power module to enter a hardware-type lower bridge arm active short-circuit safety mode.

4. The motor controller according to claim 1, characterized in that: The bridge arm driving signal includes an upper bridge arm driving signal and a lower bridge arm driving signal, wherein: When the recovery signal is the bridge arm drive signal, and when it is determined that the upper bridge arm drive signal output is abnormal and the lower bridge arm drive signal output is abnormal according to the bridge arm drive signal, the main control chip is also used to output an emergency shutdown signal to the drive circuit module through the first shutdown path, so that the drive circuit module controls the IGBT power module to enter a hardware-type lower bridge arm active short-circuit safety mode; When the recovery signal is the bridge arm drive signal, and when it is determined that the upper bridge arm drive signal output is abnormal or the lower bridge arm drive signal output is abnormal according to the bridge arm drive signal, the main control chip is also used to control the drive circuit module to output a corresponding drive signal through the second shutdown path to control the IGBT power module to enter a software-based bridge arm active short-circuit safety mode.

5. An electric vehicle, characterized in that: The electric vehicle comprises a motor controller as claimed in any one of claims 1 to 4.

Images