An autonomous driving power redundancy system and driving equipment
By introducing redundant power supply paths into the autonomous driving system, the functional safety issues caused by a single power supply are resolved, ensuring that the system can still operate safely in degraded mode during a failure, thus improving the safety of the autonomous driving system.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- JIANGLING MOTORS
- Filing Date
- 2023-01-19
- Publication Date
- 2026-05-26
AI Technical Summary
The use of a single power supply in the existing technology cannot meet the functional safety requirements of the autonomous driving system, resulting in the steering or braking system failing to work when the power supply fails.
An autonomous driving power redundancy system is adopted, which includes a high-voltage power battery and multiple power supply circuits, namely a first power supply circuit, a second power supply circuit and a third power supply circuit. The high-voltage power battery is connected through a power distribution unit to provide redundant power supply paths and ensure that at least one power supply path is always available.
This enables the autonomous driving system to continue operating safely in a degraded manner even when any power supply path fails, improving the functional safety of the autonomous driving system and avoiding the impact of faults caused by a single power supply.
Smart Images

Figure CN116278754B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of automotive technology, and more specifically to an autonomous driving power redundancy system and driving equipment. Background Technology
[0002] In recent years, with the advancement of technology and the development of the automotive industry, more and more high-tech functions have been applied to automobiles. Intelligent vehicles and smart transportation are the inevitable development trend of the future mobility industry, and autonomous driving is an important component and key technology in the development of vehicle intelligence. From L2-level driver assistance systems to L3 and L4-level autonomous driving systems, they have all received widespread attention. How to achieve safe and worry-free autonomous driving is the most pressing issue for the industry.
[0003] Currently, most autonomous driving systems use a single power supply. When the power supply fails, the functional safety requirements of the autonomous driving system cannot be met, and in extreme cases, the steering or braking system may fail to function. Summary of the Invention
[0004] In view of the shortcomings of the prior art, the purpose of this invention is to provide an autonomous driving power redundancy system and driving equipment, which aims to solve the technical problem that the use of a single power supply in the prior art cannot meet the functional safety requirements of the autonomous driving system.
[0005] One aspect of the present invention is to provide an autonomous driving power redundancy system, the autonomous driving power redundancy system comprising:
[0006] A high-voltage power battery, and a first power supply circuit, a second power supply circuit, and a third power supply circuit respectively connected to the high-voltage power battery;
[0007] The first power supply circuit includes a first DC voltage conversion module, a first storage battery, and a first load component. The high-voltage power battery is connected to the first DC voltage conversion module and is used to supply power to the first storage battery and the first load component.
[0008] The second power supply circuit includes a second DC voltage conversion module, a second battery, and a second load component. The high-voltage power battery is connected to the second DC voltage conversion module and is used to supply power to the second battery and the second load component.
[0009] The third power supply circuit includes a third DC voltage conversion module, a circuit breaker, a third battery, and a third load component. The high-voltage power battery is connected in sequence to the third DC voltage conversion module and the circuit breaker to supply power to the third battery, the third load component, and part of the second load component.
[0010] Compared with existing technologies, the autonomous driving power redundancy system and driving equipment shown in this embodiment have the following advantages: The autonomous driving power redundancy system provided by this invention, by adding multiple power supply options, effectively avoids single-power supply and achieves safer autonomous driving. Specifically, the autonomous driving power redundancy system includes: a high-voltage power battery, and a first power supply circuit, a second power supply circuit, and a third power supply circuit respectively connected to the high-voltage power battery; the first power supply circuit includes a first DC-DC voltage conversion module, a first battery, and a first load component, with the high-voltage power battery connected to the first DC-DC voltage conversion module to supply power to the first battery and the first load component; the second power supply circuit includes a second DC-DC voltage conversion module, a second battery, and a second load component, with the high-voltage power battery connected to the first DC-DC voltage conversion module to supply power to the first battery and the first load component; the second power supply circuit includes a second DC-DC voltage conversion module, a second battery, and a second load component, with the high-voltage power battery connected to the first DC-DC voltage conversion module to supply power to the first battery and the first load component. Two DC-DC voltage conversion modules are connected to power the second battery and the second load components. The third power supply circuit includes a third DC-DC voltage conversion module, a circuit breaker, a third battery, and a third load component. The high-voltage power battery is connected sequentially to the third DC-DC voltage conversion module and the circuit breaker to power the third battery, the third load component, and some of the second load components. The second power supply circuit is the primary power supply circuit, and the third power supply circuit is a backup circuit. Some of the second load components are powered through the second and third power supply circuits. This multi-circuit setup ensures that at least one complete circuit is always available. If any circuit fails, some of the second load components can continue to operate as backup in case of a single power supply circuit failure. This supports the safety degradation actions of the autonomous driving system and improves the safety of the autonomous driving system's functions. This solves the technical problem in existing technologies where a single power supply cannot meet the functional safety requirements of autonomous driving systems.
[0011] According to one aspect of the above technical solution, the first load includes a 12V load, a first electronic power steering system, and a vehicle stability system connected in parallel, wherein the 12V load is used to supply power to the electrical appliances of the driving equipment.
[0012] According to one aspect of the above technical solution, the second load component includes a critical load, a main controller, and a front brake caliper connected in parallel.
[0013] According to one aspect of the above technical solution, the circuit breaker is connected to the critical load for supplying power to the critical load.
[0014] According to one aspect of the above technical solution, the key load includes a main computer, a radar control module, and a sensor hub.
[0015] According to one aspect of the above technical solution, the third load component includes a rear brake caliper, a second electronic power steering system, and a redundant load connected in parallel.
[0016] According to one aspect of the above technical solution, the redundant load includes a redundant controller, a sensor cleaner, and a redundant calculator. The output terminal of the third DC voltage conversion module is connected to the redundant calculator to supply power to the redundant calculator.
[0017] According to one aspect of the above technical solution, the first DC voltage conversion module, the second DC voltage conversion module, and the third DC voltage conversion module are all connected to the high-voltage power battery through a power distribution unit.
[0018] Another aspect of the present invention is to provide a driving device, the driving device comprising the autonomous driving power redundancy system described in any one of the above technical solutions. Attached Figure Description
[0019] The above and / or additional aspects and advantages of the present invention will become apparent and readily understood from the description of the embodiments taken in conjunction with the following drawings, in which:
[0020] Figure 1 This is a circuit diagram of the autonomous driving power redundancy system in the first embodiment of the present invention;
[0021] Figure 2 This is a detailed circuit diagram of the autonomous driving power redundancy system in the first embodiment of the present invention;
[0022] Component symbol explanation in the attached diagram:
[0023] High-voltage power battery 10, power distribution unit 11, first power supply circuit 20, second power supply circuit 30, third power supply circuit 40, first DC voltage conversion module 21, first battery 22, first load assembly 23, 12V load 230, first electronic power steering system 231, vehicle stability system 232, second DC voltage conversion module 31, second battery 32, second load assembly 33, front brake caliper 330, main controller 331, critical load 332, third DC voltage conversion module 41, circuit breaker 42, third battery 43, third load assembly 44, rear brake caliper 440, second electronic power steering system 441, redundant load 442, main calculator 3320, radar control module 3321, sensor hub 3322, redundant controller 4420, sensor cleaner 4421, redundant calculator 4422. Detailed Implementation
[0024] To make the objectives, features, and advantages of the present invention more apparent and understandable, specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. Several embodiments of the present invention are shown in the drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided so that the disclosure of the present invention will be more thorough and complete.
[0025] It should be noted that when an element is referred to as being "fixed to" another element, it can be directly on the other element or there may be an intervening element. When an element is considered to be "connected" to another element, it can be directly connected to the other element or there may be an intervening element. The terms "vertical," "horizontal," "left," "right," "upper," "lower," and similar expressions used herein are for illustrative purposes only and are not intended to indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as limiting the invention.
[0026] In this invention, unless otherwise expressly specified and limited, the terms "installation," "connection," "linking," and "fixing," etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal communication between two components. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances. The term "and / or" as used herein includes any and all combinations of one or more of the related listed items.
[0027] Please see Figures 1-2 The image shows an autonomous driving power redundancy system provided in the first embodiment of the present invention. The autonomous driving power redundancy system includes a high-voltage power battery 10, and a first power supply circuit 20, a second power supply circuit 30, and a third power supply circuit 40 respectively connected to the high-voltage power battery 10. The first power supply circuit 20, the second power supply circuit 30, and the third power supply circuit 40 are all connected to the high-voltage power battery 10 through a power distribution unit 11. The power distribution unit 11 is a product designed to provide power distribution for rack-mounted electrical equipment. It has various series specifications with different functions, installation methods, and different socket combinations, and can provide suitable rack-mounted power distribution solutions for different power environments.
[0028] The first power supply circuit 20 includes a first DC-DC voltage conversion module 21, a first battery 22, and a first load component 23. The high-voltage power battery 10 is connected to the first DC-DC voltage conversion module 21 through a power distribution unit 11 to supply power to the first battery 22 and the first load component 23. The first DC-DC voltage conversion module 21 is a device that converts the high-voltage DC power from the high-voltage power battery 10 into a low-voltage DC power. The first battery 22 is a component that stores and provides electrical energy. As an auxiliary power supply component of the first power supply circuit 20, it smoothly and mitigates current surges in the electrical system through flexible charging and discharging, and assists the first DC-DC voltage conversion module 21 in supplying power to the circuit. When the total power consumption of the first load component 23 does not exceed the power supply capacity of the first DC-DC voltage conversion module 21, the first battery 22 receives and stores a portion of the power output from the first DC-DC voltage conversion module 21. When the total power consumption of the first load component 23 is too high, exceeding the power supply capacity of the first DC-DC voltage conversion module 21, the first battery 22 and the first DC-DC voltage conversion module 21 jointly supply power to the first load component 23. When the first DC voltage conversion module 21 stops working, the first battery 22 discharges to supply power to the first load component 23; when the first DC voltage conversion module 21 resumes normal operation from the stopped working state, the first battery 22 stops discharging and charges in a constant voltage and current limiting manner, and then returns to and maintains the float charging state.
[0029] Furthermore, the first load component 23 includes a 12V load 230, a first electronic power steering system 231, and a vehicle stability system 232 connected in parallel. The 12V load 230 is used to supply power to the electrical appliances of the driving equipment. Among them, the first load component 23 is a conventional load, that is, a load without functional safety requirements.
[0030] In addition, the second power supply circuit 30 includes a second DC voltage conversion module 31, a second battery 32, and a second load component 33. The high-voltage power battery 10 is connected to the second DC voltage conversion module 31 through the power distribution unit 11 to supply power to the second battery 32 and the second load component 33.
[0031] Furthermore, the second load component 33 includes a critical load 332, a main controller 331, and a front brake caliper 330 connected in parallel. The critical load 332 includes a main calculator 3320, a radar control module 3321, and a sensor hub 3322. The critical load 332 is a high-safety-level load. According to functional safety requirements, the relevant controllers with high functional safety requirements, i.e., the critical load 332, need to be connected to two power supplies respectively for backup in case of single power supply circuit failure. Therefore, this invention provides a third power supply circuit 40 as a backup power supply to power the critical load 332.
[0032] Furthermore, the third power supply circuit 40 includes a third DC voltage conversion module 41, a circuit breaker 42, a third battery 43, and a third load component 44. The high-voltage power battery 10 is connected in sequence to the third DC voltage conversion module 41 and the circuit breaker 42 to supply power to the third battery 43 and the third load component 44, as well as to a portion of the second load component 33, that is, to supply power to the third battery 43, the third load component 44, and the critical load 332.
[0033] The critical load 332 is powered by the second power supply circuit 30 and the third power supply circuit 40, with multiple circuits ensuring that at least one complete circuit is always available. Even if any circuit fails, the critical load 332 can continue to operate, thus supporting the safe degrading actions of the autonomous driving system. Simultaneously, when the high-voltage power battery 10 fails, the first battery 22, the second battery 32, and the third battery 43 can ensure the system continues to operate within a certain timeframe.
[0034] Furthermore, the third load component 44 includes a rear brake caliper 440, a second electronic power steering system 441, and a redundant load 442 connected in parallel. The front brake caliper 330 and the rear brake caliper 440 are respectively connected to the second power supply circuit 30 and the third power supply circuit, achieving power redundancy and ensuring their safety level. Simultaneously, to mitigate the impact of electrical components on the driving equipment, the first electronic power steering system 231 and the second electronic power steering system 441 are controlled separately. The first electronic power steering system 231 is controlled by the first power supply circuit 20, and the second electronic power steering system 441 is controlled by the second power supply circuit 30, achieving steering redundancy. The second power supply circuit 30 serves as the main power supply circuit, and the third power supply circuit 40 serves as a backup circuit. The use of the critical load 332 and the redundant load 442 enhances resilience and prevents functional failure due to the failure of the critical load 332 if only one critical load 332 exists.
[0035] The redundant load 442 includes a redundant controller 4420, a sensor cleaner 4421, and a redundant calculator 4422. The output of the third DC-DC voltage conversion module 41 is connected to the redundant calculator 4422 to supply power to the redundant calculator 4422.
[0036] Furthermore, when the third DC voltage conversion module 41 fails, the circuit breaker 42 will disconnect, thus disconnecting the third DC voltage conversion module 41 from the redundant load 442, to ensure that the third battery 43 supplies power to the redundant load 442 and ensure functional safety; when the redundant load 442 fails, the circuit breaker 42 will disconnect, to ensure that the high-voltage power battery 10 supplies power to the redundant power supply 4422 through the third DC voltage conversion module 41 and ensure functional safety.
[0037] It should be noted that, under normal circumstances, circuit breaker 42 is in the closed state. High-voltage power battery 10 supplies power to first battery 22 and first load component 23 through first DC voltage conversion module 21. High-voltage power battery 10 supplies power to second battery 32 and second load component 33 through second DC voltage conversion module 31. High-voltage power battery 10 is connected to circuit breaker 42 through third DC voltage conversion module 41, supplying power to third battery 43, third load component 44, and critical load 332. When the second power supply circuit 30 fails, i.e., any circuit experiences undervoltage, overvoltage, short circuit, or other power system faults, power can be directly supplied to critical load 332 through third power supply circuit 40, ensuring the safety of the autonomous vehicle.
[0038] Furthermore, when circuit breaker 42 detects a fault in the third DC voltage conversion module 41, circuit breaker 42 will disconnect, that is, disconnect the connection between the third DC voltage conversion module 41 and the redundant load 442, to ensure that the third battery 43 supplies power to the redundant load 442 and ensure functional safety; when circuit breaker 42 detects a fault in the redundant load 442, circuit breaker 42 will disconnect, to ensure that the high-voltage power battery 10 supplies power to the redundant power supply 4422 through the third DC voltage conversion module 41 and ensure functional safety.
[0039] Compared with existing technologies, the autonomous driving power redundancy system in this embodiment has the following advantages: By adding multiple power supply options, the autonomous driving power redundancy system provided by this invention can effectively avoid single-power supply, thus improving the safety of autonomous driving. Specifically, the autonomous driving power redundancy system includes: a high-voltage power battery, and a first power supply circuit, a second power supply circuit, and a third power supply circuit respectively connected to the high-voltage power battery; the first power supply circuit includes a first DC-DC voltage conversion module, a first battery, and a first load component, with the high-voltage power battery connected to the first DC-DC voltage conversion module to supply power to the first battery and the first load component; the second power supply circuit includes a second DC-DC voltage conversion module, a second battery, and a second load component, with the high-voltage power battery connected to the second DC-DC voltage conversion module. A voltage conversion module is connected to supply power to the second battery and the second load components. The third power supply circuit includes a third DC voltage conversion module, a circuit breaker, a third battery, and a third load component. The high-voltage power battery is connected sequentially to the third DC voltage conversion module and the circuit breaker to supply power to the third battery, the third load component, and some of the second load components. The second power supply circuit is the primary power supply circuit, and the third power supply circuit is a backup circuit. Some of the second load components are powered through the second and third power supply circuits. This multi-circuit setup ensures that at least one complete circuit is always available. If any circuit fails, some of the second load components can continue to operate as backup in case of a single power supply circuit failure. This supports the safety degradation actions of the autonomous driving system and improves the safety of the autonomous driving system's functions. This solves the technical problem that existing technologies using a single power supply cannot meet the functional safety requirements of autonomous driving systems.
[0040] A second embodiment of the invention provides a driving device that includes the autonomous driving power redundancy system described in the above embodiments.
[0041] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.
[0042] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.
Claims
1. An autonomous driving power redundancy system, characterized in that, The autonomous driving power redundancy system includes: A high-voltage power battery, and a first power supply circuit, a second power supply circuit, and a third power supply circuit respectively connected to the high-voltage power battery; The first power supply circuit includes a first DC voltage conversion module, a first storage battery, and a first load component. The high-voltage power battery is connected to the first DC voltage conversion module and is used to supply power to the first storage battery and the first load component. The second power supply circuit includes a second DC voltage conversion module, a second battery, and a second load component. The high-voltage power battery is connected to the second DC voltage conversion module and is used to supply power to the second battery and the second load component. The second load component includes a key load, a main controller, and a front brake caliper connected in parallel. The third power supply circuit includes a third DC voltage conversion module, a circuit breaker, a third battery, and a third load component. The high-voltage power battery is connected in sequence to the third DC voltage conversion module and the circuit breaker to supply power to the third battery, the third load component, and the critical load. It provides backup power to the critical load when the second power supply circuit fails. The third load component includes a rear brake caliper, a second electronic power steering system, and a redundant load connected in parallel. When the circuit breaker detects a fault in the third DC-DC conversion module, it disconnects the third DC-DC conversion module from the redundant load, ensuring that the third battery supplies power to the redundant load; or when it detects a fault in the redundant load, it disconnects the redundant load, ensuring that the third DC-DC conversion module supplies power to the redundant load.
2. The autonomous driving power redundancy system according to claim 1, characterized in that, The first load component includes a 12V load, a first electronic power steering system, and a vehicle stability system connected in parallel. The 12V load is used to supply power to the electrical appliances of the driving equipment.
3. The autonomous driving power redundancy system according to claim 1, characterized in that, The key payloads include the main computer, radar control module, and sensor hub.
4. The autonomous driving power redundancy system according to claim 1, characterized in that, The redundant load includes a redundant controller, a sensor cleaner, and a redundant calculator. The output of the third DC-DC voltage conversion module is connected to the redundant calculator to supply power to it.
5. The autonomous driving power redundancy system according to claim 1, characterized in that, The first DC voltage conversion module, the second DC voltage conversion module, and the third DC voltage conversion module are all connected to the high-voltage power battery through a power distribution unit.
6. A driving device, characterized in that, The driving equipment includes the autonomous driving power redundancy system described in any one of claims 1-5.