An IGBT protection method, computer device, readable storage medium and motor vehicle

Abstract

The application discloses an IGBT protection method, computer equipment, readable storage medium and motor vehicle, and relates to the technical field of automobiles, and comprises the following steps: a VCU generates a specific working condition request and commands a BMS to disconnect a main contactor; the BMS disconnects the main contactor and sends information about disconnecting the main contactor to an MCU; and the MCU executes active discharge after receiving the information about the BMS disconnecting the main contactor, so as to reduce the voltage of a direct-current bus. The technical scheme provided by the application destroys the necessary condition for IGBT failure, realizes the function purpose of protecting the IGBT, improves the safety of a motor driving core device, and improves the stability of a motor driving controller in the ECU upgrading process of the whole vehicle.

Description

Technical Field

[0001] This invention relates to the field of automotive technology, and more specifically to an IGBT protection method, a computer device, and a readable storage medium. Background Technology

[0002] With increasingly stringent emission regulations for motor vehicles, more and more vehicles are equipped with 12V mild hybrid systems and 48V mild hybrid systems, giving rise to hybrid electric vehicles, plug-in hybrid electric vehicles, and range-extended electric vehicles. Simultaneously, the widespread availability of charging stations and strong government support have led to the rapid development of pure electric vehicles, with the market experiencing continuous high-speed growth and constant technological innovation. In this context, the safety and stability of electric drive systems are receiving increasing attention from OEMs. The motor controller, as the control unit of the electric drive system, plays a crucial role in safety and stability. However, under restart, initialization, or upgrade conditions, the motor drive controller may experience instability, potentially damaging or failing the IGBT, a core component of the motor driver, and even causing overcurrent shoot-through and burnout. Summary of the Invention

[0003] To address the aforementioned problems, this invention provides an IGBT protection method that disrupts the necessary conditions for IGBT failure, thereby achieving the functional objective of protecting the IGBT, improving the safety of core motor drive components, and enhancing the stability of the motor drive controller during the vehicle ECU upgrade process.

[0004] To achieve the above objectives, the present invention adopts the following technical solution:

[0005] An IGBT protection method, wherein the IGBT is used in a motor drive controller of a motor vehicle equipped with a motor, the IGBT protection method includes the following steps:

[0006] The VCU generates a specific operating condition request and commands the BMS to disconnect the main contactor;

[0007] In response to the VCU's command, the BMS disconnects the main contactor and sends the disconnection information to the MCU.

[0008] The information received by the MCU from the BMS includes information that the BMS disconnects the main contactor, and then performs active discharge to reduce the voltage of the DC bus.

[0009] Optionally, the specific operating condition is an MCU request to restart or an MCU program upgrade.

[0010] Currently, with the major trend of vehicle electrification and intelligentization, more and more motor vehicles are equipped with mild hybrid systems, and plug-in hybrids, gasoline hybrids, and range-extended electric vehicles are emerging in large numbers, featuring rich intelligent configurations and complete and complex electronic assemblies such as vehicle infotainment systems and vehicle control systems. At the same time, OEMs have reserved upgrade space for various electronic assemblies; whether it's OTA upgrades or other forms of upgrades, a restart of the ECU and MCU is required. However, despite the development of automotive motor technology over the years, no one has yet discovered the potential instability of the motor drive controller during restart initialization or upgrade conditions, which could damage or cause failure of the IGBT, the core component of the motor driver. Furthermore, no one has proposed a corresponding solution to this technical problem. This invention not only discovers this technical problem that has not been noticed by those skilled in the art, but also utilizes active discharge technology to disrupt the necessary conditions for IGBT failure, thereby protecting the IGBT. The technical solution provided by this invention involves the VCU requesting the BMS to control the main contactor to switch the high-voltage power supply on and off, thereby controlling the DC bus power supply to the MCU. Consequently, under the control of the motor controller, the MCU's IGBTs can utilize the motor to discharge the residual voltage on the DC bus, ensuring the IGBTs are in a safe state when the MCU restarts. Compared to other IGBT protection technologies, this invention eliminates the need for complex hardware protection circuits, simplifying hardware design costs. Utilizing the discharge hardware configuration of the motor windings, through software strategy optimization and the use of existing vehicle network communication, and in coordination with various ECUs, it achieves rapid voltage reduction of the DC bus, quickly lowering the DC bus voltage to the national standard level. This improves the safety of the IGBT, a core component of the motor drive, enhances the stability of the motor drive controller during vehicle ECU upgrades, and ensures the safety of personnel operation.

[0011] Optionally, after the MCU completes active discharge, if the voltage of the DC bus is less than the safety threshold, it will send a positive restart response to the CAN bus network. In response to the positive restart response, the MCU will perform a restart or MCU program upgrade to respond to specific operating condition requests.

[0012] If the DC bus voltage is not less than the safety threshold, a negative restart response is fed back to the CAN bus network. The MCU responds to the negative restart response by not performing a restart or MCU program upgrade in response to the specific operating condition request.

[0013] Since there may be insufficient discharge, a distinction is made between positive and negative restart responses. When the discharge is insufficient, the MCU is prevented from restarting by using a negative restart response to avoid damage to the IGBT due to residual voltage on the DC bus caused by insufficient discharge.

[0014] Optionally, after the MCU performs active discharge for the first time, it determines whether the discharge time has reached the preset duration. If it has reached the preset duration, it determines whether the voltage of the DC bus is less than the safety threshold. If it is not less than the safety threshold, it sends a restart negative response to the CAN bus network.

[0015] If the preset time is not reached, determine whether the voltage of the DC bus is less than the safety threshold. If it is less, provide a positive restart response to the CAN bus network. If it is not less, perform active discharge again until the voltage of the DC bus is less than the safety threshold or the cumulative discharge time is equal to the preset time.

[0016] When the active discharge ends, if the cumulative discharge duration is not greater than the preset duration and the DC bus voltage is less than the safety threshold, a positive restart response is given to the CAN bus network; if the cumulative discharge duration is equal to the preset duration and the DC bus voltage is not less than the safety threshold, a negative restart response is given to the CAN bus network.

[0017] Optionally, the preset duration of active discharge is 600ms.

[0018] Optionally, the safety threshold is 60V.

[0019] Complete discharge is defined as the DC bus voltage falling below the safety threshold. If the discharge reaches the preset duration and the DC bus voltage drops below the safety threshold, discharge time is saved, accelerating ECU or MCU upgrades. If the discharge reaches the preset duration but the DC bus voltage does not drop below the safety threshold, the discharge is insufficient, requiring another discharge. Discharge will stop in two ways: 1. The accumulated discharge time is within the preset duration, and the DC bus voltage is below the safety threshold, indicating sufficient discharge and a positive restart response to the CAN network, ensuring IGBT safety; 2. The accumulated discharge time reaches the preset duration, but the DC bus voltage is not below the safety threshold. In this case, if the preset duration is not reached and the discharge is insufficient to lower the DC bus voltage below the safety threshold, it indicates another malfunction in the ECU or MCU. Therefore, in this situation, operators should be alerted to intervene promptly to prevent insufficient discharge while still responding to a positive restart response to the CAN network, thus avoiding damage to the IGBT from residual voltage on the DC bus.

[0020] Optionally, if the information received by the MCU from the BMS does not contain information about the BMS disconnecting the main contactor, the MCU determines whether the disconnection of the main contactor has timed out. If it has not timed out, the MCU again determines whether the information received from the BMS contains information about the BMS disconnecting the main contactor. If it has timed out, the MCU sends a negative response to the CAN bus network to restart.

[0021] Optionally, the timeout duration is 400-500ms.

[0022] The MCU can only perform active discharge when it receives a message to disconnect the main contactor. Furthermore, if a timeout occurs during main contactor disconnection, a negative response will be triggered to alert the operator, allowing them to immediately intervene and troubleshoot other faults.

[0023] Furthermore, the present invention also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the method described in any of the preceding claims.

[0024] In addition, the present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the method described in any of the above-mentioned embodiments.

[0025] Furthermore, the present invention also provides a motor vehicle equipped with a motor and including a plurality of ECUs and a plurality of MCUs. When the ECUs and / or the MCUs are upgraded, the IGBTs of the motor drive controller are protected by any of the above-described IGBT protection methods.

[0026] Or the motor vehicle may have the aforementioned computer equipment;

[0027] Alternatively, the motor vehicle may have the aforementioned computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the IGBT protection method described above.

[0028] These features and advantages of the present invention will be disclosed in detail in the following specific embodiments and accompanying drawings. The preferred embodiments or means of the present invention will be shown in detail in conjunction with the accompanying drawings, but are not intended to limit the technical solutions of the present invention. In addition, each of these features, elements and components appearing in the following text and drawings is a plurality of, and different symbols or numbers are used for convenience of representation, but all represent parts with the same or similar construction or function. Attached Figure Description

[0029] The present invention will be further described below with reference to the accompanying drawings:

[0030] Figure 1 This is a flowchart of an embodiment of the present invention. Detailed Implementation

[0031] The technical solutions of the embodiments of the present invention will be explained and described below with reference to the accompanying drawings. However, the following embodiments are only preferred embodiments of the present invention and not all of them. Other embodiments obtained by those skilled in the art based on the embodiments in the implementation methods without creative effort are all within the protection scope of the present invention.

[0032] The terms "an embodiment," "example," or "trademark" used in this specification refer to a particular feature, structure, or characteristic described in connection with the embodiment itself that may be included in at least one embodiment disclosed in this patent. The phrase "in an embodiment" appearing in various places throughout the specification does not necessarily refer to the same embodiment.

[0033] Example:

[0034] like Figure 1 As shown, this embodiment provides an IGBT protection method. The IGBT in this embodiment is used in the motor drive controller of a motor-equipped vehicle and is the core component of the motor drive controller, affecting its stability, which in turn affects the smoothness and safety of the vehicle's operation. Motor vehicles equipped with motors include, but are not limited to, 12V mild hybrid, 48V mild hybrid, hybrid, plug-in hybrid, and range-extended vehicles. Therefore, the safety and stability of the IGBT are crucial in these types of vehicles. Currently, with the trend towards electrification and intelligence in automobiles, more and more motor vehicles are equipped with mild hybrid systems, and plug-in hybrids, hybrids, and range-extended powertrains are emerging in large numbers. They are rich in intelligent configurations and equipped with complete and complex electronic assemblies such as vehicle infotainment systems and vehicle control systems. This means that each motor vehicle needs to be equipped with anywhere from a dozen to dozens of ECUs and MCUs. At the same time, OEMs have reserved upgrade space for various electronic assemblies; whether it's an OTA upgrade or other forms of upgrade, it requires a restart of the ECU and MCU. However, despite the development of automotive motor technology over the years, no one has yet discovered the potential instability in motor drive controllers during restart initialization or upgrades that could damage or cause failure of the IGBT, the core component of the motor driver. Furthermore, no solution has been proposed to address this technical problem. Therefore, this embodiment provides an IGBT protection method that not only identifies this previously undiscovered technical problem but also utilizes active discharge technology to disrupt the necessary conditions for IGBT failure, thus protecting the IGBT.

[0035] The IGBT protection method provided in this embodiment includes the following steps:

[0036] The VCU, BMS, and MCU exchange real-time command information via the vehicle's CAN bus network. The VCU generates specific operating condition requests and commands the BMS to disconnect the main contactor. In this embodiment, the specific operating condition is an MCU request to restart or an MCU program upgrade. Specifically, there are two situations for an MCU restart request: one is a restart request from other ECUs in the vehicle after an upgrade, and the other is a restart in response to its own upgrade. A restart after the vehicle has stopped is not a specific operating condition as described in this embodiment. In this case, the MCU transitions from the normal operation phase to shutdown and then enters the power-on initialization phase. After receiving an upgrade program request, the MCU enters the program burning state from the normal operation phase. Under these specific operating conditions, the MCU itself is in an uncontrollable state. If the bus is carrying high voltage and there are abnormal conditions, such as hardware failure or hardware malfunction, the IGBT may be damaged.

[0037] In response to the VCU's command, the BMS disconnects the main contactor and sends this information to the MCU. The MCU parses the information received from the BMS. If the information does not contain the message about the BMS disconnecting the main contactor, the MCU checks if the disconnection has timed out. If not, the MCU checks again to see if the received information does contain the message. If it has timed out, the MCU sends a negative restart response to the CAN bus network, without performing a restart or MCU program upgrade, in response to a specific operating condition request. This response to a specific operating condition includes two methods: a negative restart response, which avoids performing a restart or MCU program upgrade, and a positive restart response, which performs a restart or MCU program upgrade. In this embodiment, the timeout duration is 400-500ms. In other embodiments, the timeout duration can be flexibly selected by those skilled in the art according to actual needs, and is not limited here.

[0038] Active discharge can only be performed if the information received by the MCU from the BMS includes information that the BMS has disconnected the main contactor. Furthermore, if a timeout occurs in the main contactor disconnection, a negative response will be triggered to alert the operator, allowing them to intervene promptly to troubleshoot other faults.

[0039] After receiving the message from the BMS to disconnect the main contactor, the MCU performs active discharge to reduce the DC bus voltage. In this embodiment, the DC bus voltage must be reduced to below a safety threshold to ensure the safety of the IGBT. In this embodiment, the safety threshold is set to 60V according to national standards. In other embodiments, those skilled in the art may set other voltage values ​​according to actual conditions, which are not limited here.

[0040] After the MCU performs its first active discharge, it determines whether the discharge time has reached the preset duration. In this embodiment, the preset duration for active discharge is 600ms. The setting of the preset duration is related to the time limit requirement for MCU restart on the vehicle, and can be flexibly selected by those skilled in the art according to the actual situation, and is not limited here.

[0041] If the active discharge reaches the preset duration of 600ms, determine whether the voltage of the DC bus is less than the safety threshold of 60V. If it is not less than 60V, provide a negative response to restart the CAN bus network.

[0042] If the preset duration of 600ms is not reached, it checks whether the DC bus voltage is less than the safety threshold of 60V. If it is, a positive restart response is sent to the CAN bus network, and a restart or MCU program upgrade is performed to respond to specific operating condition requests. If it is not less than the threshold, active discharge is performed again until the DC bus voltage is less than the safety threshold of 60V or the cumulative discharge duration equals the preset duration of 600ms. It should be noted that "active discharge is performed again until the DC bus voltage is less than the safety threshold of 60V or the cumulative discharge duration equals the preset duration of 600ms" does not refer to a single discharge until the DC bus voltage is less than the safety threshold of 60V. Rather, it refers to a cyclical process of "discharging for a preset time and then checking whether the DC bus voltage drops below the safety threshold. If it does not drop below the safety threshold, another discharge is performed." This cycle continues until the following two conditions are met: the DC bus voltage is less than the safety threshold or the cumulative discharge duration equals the preset duration. At this point, the discharge stopping will result in two outcomes: 1. If the cumulative discharge time is within the preset time range and the DC bus voltage is less than the safety threshold, it indicates that the discharge has been sufficient, allowing for a positive restart response to the CAN network, thus ensuring the IGBT's safety; 2. If the cumulative discharge time reaches the preset time but the DC bus voltage is not less than the safety threshold. In this case, if the preset time has not been reached and the discharge is insufficient to reduce the DC bus voltage below the safety threshold, it indicates a fault in the ECU or MCU. Therefore, operators should be alerted to intervene promptly to prevent insufficient discharge while still allowing a positive restart response to the CAN network, thereby preventing damage to the IGBT from the residual voltage on the DC bus. In other words, "until" here refers to the number of cycles, not the discharge duration. The total cumulative discharge time will still not exceed the preset time of 600ms.

[0043] When active discharge ends, if the cumulative discharge duration is no greater than the preset duration of 600ms and the DC bus voltage is less than the safety threshold of 60V, a positive restart response is sent to the CAN bus network, executing a restart or MCU program upgrade to respond to the specific operating condition request. If the cumulative discharge duration is equal to the preset duration of 600ms and the DC bus voltage is not less than the safety threshold of 60V, a negative restart response is sent to the CAN bus network. No restart or MCU program upgrade is executed to respond to the specific operating condition request.

[0044] Discharge is complete when the DC bus voltage is below the safety threshold of 60V. If the discharge reduces the DC bus voltage to below the safety threshold of 60V within a preset time (including the preset time), discharge time is saved, accelerating the ECU or MCU upgrade process. If the discharge reaches the preset time of 600ms but the DC bus voltage still does not drop below the safety threshold of 60V, it indicates that the discharge is insufficient. Therefore, it is necessary to re-enter the specific operating condition to request discharge again until the DC bus voltage drops below the safety threshold of 60V. In summary, if the discharge stops, only two scenarios will occur: 1. Regardless of the number of discharge cycles, the discharge eventually stops. At this point, the total discharge time does not exceed the preset duration of 600ms, and the DC bus voltage is less than the safety threshold of 60V. This indicates that the discharge has been sufficient, and a positive restart response can be obtained from the CAN network, ensuring the safety of the IGBT. 2. The discharge stops, but the DC bus voltage is still greater than the safety threshold of 60V. In this case, the discharge time must have reached the preset duration of 600ms. Since the preset duration of 600ms has been reached but the discharge is insufficient, failing to reduce the DC bus voltage below the safety threshold of 60V, it indicates that the ECU or MCU has encountered other faults. Therefore, in this situation, operators should be alerted to intervene promptly to prevent insufficient discharge from triggering a restart or MCU program upgrade, thus avoiding damage to the IGBT from the residual voltage on the DC bus.

[0045] After the MCU completes active discharge, if the DC bus voltage is less than the safety threshold of 60V, it sends a positive restart response to the CAN bus network. The MCU responds to the positive restart response by either performing a restart or upgrading the MCU program to meet specific operating condition requests. If the DC bus voltage is not less than the safety threshold, it sends a negative restart response to the CAN bus network. The MCU responds to the negative restart response but does not perform a restart or upgrade the MCU program to meet specific operating condition requests. Because incomplete discharge may occur, a distinction is made between positive and negative restart responses. When discharge is incomplete, a negative restart response prevents the MCU from restarting, avoiding damage to the IGBTs due to residual voltage on the DC bus caused by incomplete discharge.

[0046] The technical solution provided by this invention involves the VCU requesting the BMS to control the main contactor to switch the high-voltage power supply on and off, thereby controlling the DC bus power supply to the MCU. Consequently, under the control of the motor controller, the MCU's IGBTs can utilize the motor to discharge the residual voltage on the DC bus, ensuring the IGBTs are in a safe state when the MCU restarts. Compared to other IGBT protection technologies, this invention eliminates the need for complex hardware protection circuits, simplifying hardware design costs. By utilizing the discharge hardware configuration of the motor windings, optimizing software strategies, and leveraging existing vehicle network communication, it achieves coordinated control with various ECUs, enabling rapid voltage reduction of the DC bus. This quickly lowers the DC bus voltage to the national standard level, improving the safety of the IGBT, a core component of the motor drive, enhancing the stability of the motor drive controller during vehicle ECU upgrades, and ensuring operator safety.

[0047] Meanwhile, this embodiment also provides a computer device, including a memory and a processor. The memory stores a computer program, and when the computer program is executed by the processor, it causes the processor to perform the steps of the above-described IGBT protection method. The steps of the IGBT protection method here can be the steps in the memory analysis methods of the various embodiments described above.

[0048] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. Accordingly, the computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can implement the methods of any of the above embodiments. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in a variety of forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0049] Meanwhile, this embodiment also provides a motor vehicle equipped with a motor. The motor vehicle mentioned in this embodiment includes, but is not limited to, 12V mild hybrid, 48V mild hybrid, gasoline hybrid, plug-in hybrid, and range-extended vehicles, and includes several ECUs and several MCUs. When the ECUs and / or MCUs are upgraded, the IGBT of the motor drive controller is protected by the IGBT protection method described in this embodiment.

[0050] Or the motor vehicle may have the computer equipment described in this embodiment;

[0051] Alternatively, the motor vehicle may have a computer-readable storage medium as described in this embodiment, on which a computer program is stored, which, when executed by a processor, implements the IGBT protection method as described in this embodiment.

[0052] The above are merely specific embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Those skilled in the art should understand that the present invention includes, but is not limited to, the contents described in the accompanying drawings and the specific embodiments above. Any modifications that do not depart from the functional and structural principles of the present invention will be included within the scope of the claims.

Claims

1. An IGBT protection method, wherein the IGBT is used in a motor drive controller of a motor vehicle equipped with a motor, characterized in that, The IGBT protection method includes the following steps: The VCU generates a specific operating condition request and commands the BMS to disconnect the main contactor; the specific operating condition is the MCU requesting a restart or the MCU program being upgraded, and the command to the BMS to disconnect the main contactor is to create a safe discharge condition before the MCU enters an uncontrollable state. In response to the VCU's command, the BMS disconnects the main contactor and sends the disconnection information to the MCU. The information received by the MCU from the BMS includes information that the BMS disconnects the main contactor, and then performs active discharge to reduce the voltage of the DC bus. After the MCU completes active discharge, if the voltage of the DC bus is less than the safety threshold, it will send a positive restart response to the CAN bus network. In response to the positive restart response, the MCU will either perform a restart or upgrade the MCU program to respond to specific operating condition requests. If the DC bus voltage is not less than the safety threshold, a negative restart response is fed back to the CAN bus network. The MCU responds to the negative restart response by not performing a restart or MCU program upgrade in response to specific operating condition requests. After the MCU performs active discharge for the first time, it determines whether the discharge time has reached the preset duration. If it has reached the preset duration, it determines whether the voltage of the DC bus is less than the safety threshold. If it is not less than the safety threshold, it sends a restart negative response to the CAN bus network. If the preset duration is not reached, determine whether the voltage of the DC bus is less than the safety threshold. If it is less, provide a positive restart response to the CAN bus network. If it is not less, perform active discharge again. By cyclically discharging, destroy the failure conditions of the IGBT in the uncontrollable state of the MCU until the voltage of the DC bus is less than the safety threshold or the cumulative discharge duration is equal to the preset duration. When the active discharge ends, if the cumulative discharge duration is not greater than the preset duration and the DC bus voltage is less than the safety threshold, a positive restart response is given to the CAN bus network; if the cumulative discharge duration is equal to the preset duration and the DC bus voltage is not less than the safety threshold, a negative restart response is given to the CAN bus network.

2. The IGBT protection method according to claim 1, characterized in that, The preset duration for active discharge is 600ms.

3. The IGBT protection method according to any one of claims 1 to 2, characterized in that, The safety threshold is 60V.

4. The IGBT protection method according to any one of claims 1 to 2, characterized in that, If the information received by the MCU from the BMS does not contain information about the BMS disconnecting the main contactor, it determines whether the disconnection of the main contactor has timed out. If it has not timed out, the MCU again determines whether the information received from the BMS contains information about the BMS disconnecting the main contactor. If it has timed out, it sends a negative response to the CAN bus network to restart.

5. The IGBT protection method according to claim 4, characterized in that, The timeout duration is 400-500ms.

6. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the IGBT protection method according to any one of claims 1 to 5.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the IGBT protection method according to any one of claims 1 to 5.

8. A motor vehicle, said motor vehicle being equipped with an electric motor, and comprising a plurality of ECUs and a plurality of MCUs, characterized in that, When the ECU and / or the MCU are upgraded, the IGBT of the motor drive controller is protected by the IGBT protection method according to any one of claims 1 to 5; Or the motor vehicle may have the computer equipment as described in claim 6; Alternatively, the motor vehicle may have a computer-readable storage medium as described in claim 7, on which a computer program is stored, which, when executed by a processor, implements the IGBT protection method as described in any one of claims 1 to 5.

Images