Power supply device, power supply system and method

Abstract

The embodiment of the invention provides a power supply device, a power supply system and a method, and the power supply device comprises a power supply bus which is connected with the output end of a voltage conversion unit through a bidirectional isolation unit and is connected with a low-voltage battery through another bidirectional isolation unit, the bidirectional isolation unit is used for controlling connection and disconnection between the bus and the voltage conversion unit or the low-voltage battery, the bidirectional isolation unit comprises two switches which are connected in series, the two switches which are connected in series are respectively connected with a diode in parallel, and the two diodes are arranged in a back-to-back manner; the power supply device further comprises another circuit which is electrically connected with the bus and used for supplying power to the load. The scheme of the embodiment of the invention can be applied to new energy vehicles such as electric vehicles and hybrid electric vehicles, and the function safety performance of power supply of the vehicles can be improved.

Description

Technical Field

[0001] Embodiments of the present application relate to the field of power electronics technology, and more specifically, to a power supply device, a power supply system and a method. Background Art

[0002] Different from the power supply method of traditional fuel vehicles, for new energy vehicles such as electric vehicles and hybrid vehicles, high-voltage power batteries (hereinafter referred to as high-voltage batteries) and low-voltage batteries are generally used to power autonomous driving equipment, car entertainment equipment, and low-voltage loads such as door locks and wipers. With the development of intelligence and electrification, the number of loads has increased significantly, which has increased the probability of failure of the power supply system. Moreover, as the level of vehicle autonomous driving increases, the functional safety requirements for the vehicle power supply system are also gradually increasing.

[0003] In view of this, a solution that can improve the safety of the vehicle's power supply function needs to be developed urgently. Summary of the invention

[0004] The embodiments of the present application provide a power supply device, a power supply system and a method, which can improve the functional safety performance of the power supply system of a vehicle.

[0005] In a first aspect, a power supply device is provided, which includes a first circuit, a second circuit, a first isolation unit, and a second isolation unit; the first end of the first isolation unit is electrically connected to the first circuit, the second end of the first isolation unit is used to be connected to the first output end of the voltage conversion unit, and the first isolation unit is used to control the on-off between the first circuit and the first output end of the voltage conversion unit; the second end of the second isolation unit is electrically connected to the first circuit, the second end of the second isolation unit is used to be connected to a first battery, and the second isolation unit is used to control the on-off between the first circuit and the first battery; the second circuit is electrically connected to the first circuit and is used to supply power to a first load; wherein the first isolation unit and the second isolation unit are bidirectional isolation units, the bidirectional isolation units include a first switch, a second switch, a first diode, and a second diode, the first diode is connected in parallel with the first switch, the second diode is connected in parallel with the second switch, the first switch is connected in series with the second switch, and the anode of the first diode is connected to the anode of the second diode; the second circuit is connected to the first circuit and is used to supply power to the first load.

[0006] For example, the voltage conversion unit may be a DC-DC converter, and the power supply device may include power supply devices 140, 150, 160, 170 or their variations or extensions. For another example, taking the power supply device 140 as an example, the power supply device 140 includes a circuit 1410, and the circuit 1410 may be connected to the DC-DC converter and the low-voltage battery 131 through the isolation unit 141 and the isolation unit 142 respectively; the power supply device 140 may also include a circuit 1411 for powering the safety load 171, and / or, include a circuit 1421 for powering the conventional load 181. That is, for the power supply device 140, the circuit 1410 may be understood as a first circuit, the circuit 1411 or the circuit 1421 may be understood as a second circuit, the isolation unit 141 may be understood as a first isolation unit, and the isolation unit 142 may be understood as a second isolation unit. For another example, for the power supply device 160, the circuit 1610 may be understood as a first circuit of the power supply device 160. The first load may be any load.

[0007] In one embodiment, the first circuit can be understood as a circuit connecting the first isolation unit and the second isolation unit, and there is a connection point between the second circuit for supplying power to the first load and the first circuit.

[0008] Since the bidirectional isolation unit includes two switches arranged in series, each of the two switches in series is connected in parallel with a diode, and the two diodes are arranged back to back. In the present application, by respectively arranging bidirectional isolation units between the bus and the two power branches of the voltage conversion device and the low-voltage battery, the connection between the bus and any power branch can be completely disconnected, and the influence of overvoltage, undervoltage, short circuit and other faults of any power branch on the bus voltage can be avoided, thereby ensuring the stability of the bus voltage. By supplying power to the load through the second circuit connected to the bus, the normal power supply to the load can be guaranteed when any power branch fails, thereby improving the functional safety performance of the power supply system.

[0009] In combination with the first aspect, in certain implementations of the first aspect, the device may also include: a first control unit, used to obtain first status information, the first status information is used to indicate the status of the first output terminal of the voltage conversion unit and / or the output terminal of the first battery; when the first status information indicates that the status of the first output terminal of the voltage conversion unit is abnormal, the first isolation unit is controlled to be disconnected, and the second isolation unit is controlled to be turned on; or, when the first status information indicates that the output of the first battery is abnormal, the second isolation unit is controlled to be disconnected, and the first isolation unit is controlled to be turned on.

[0010] Exemplarily, the state abnormality of the output terminal of the voltage conversion unit may include voltage conversion unit output overvoltage, voltage conversion unit output undervoltage or voltage conversion unit short circuit; battery output abnormality may include battery short circuit or battery output undervoltage.

[0011] In the present application, when the voltage conversion unit has a short circuit, output overvoltage, output undervoltage or other faults, the first isolation unit is controlled to be disconnected to cut off the connection between the voltage conversion unit and the bus, and the first battery maintains the voltage of the bus, thereby ensuring normal power supply to the load. When the first battery has a short circuit or output undervoltage or other abnormalities, the second isolation unit is controlled to be disconnected, which can cut off the connection between the first battery and the bus, and the voltage conversion unit maintains the voltage of the bus, thereby ensuring normal power supply to the load. In this way, the power supply redundancy performance of the power supply device can be improved.

[0012] In combination with the first aspect, in some implementations of the first aspect, the device may further include: a first management unit, configured to control the first isolation unit to be disconnected and control the second isolation unit to be connected when the first control unit operates abnormally.

[0013] For example, for the power supply device 140, the control unit 1 can be understood as the first control unit, and the management unit 1 can be understood as the first management unit. The management unit 1 can obtain the operating status of the control unit 1, and when the operation of the control unit 1 is abnormal, the isolation unit 141 can be controlled to be disconnected, and the isolation unit 142 can be controlled to be turned on.

[0014] For another example, for the power supply device 160, the control unit 2 can be understood as the first control unit included therein, and the management unit 2 can be understood as the first management unit included therein.

[0015] In the present application, when the first control unit works abnormally, the voltage of the bus is maintained by the first battery by controlling the first isolation unit to be disconnected and the second isolation unit to be turned on. It can also be said that the bus is controlled to be in a safe mode. By controlling the bus to work in this safe mode, the fluctuation of the bus voltage caused by the abnormal operation of the control unit can be avoided, thereby ensuring the normal power supply to the load.

[0016] In combination with the first aspect, in certain implementations of the first aspect, the first load is a safety load, and the first management unit can also be used to: when the first control unit operates abnormally, after determining that the power supply of the first load is normal, control the first control unit to restart.

[0017] In the present application, when it is determined that the power supply of the safety load is normal, by timely controlling the first control unit to restart, the time that the power supply device is in the safety mode can be shortened, which is beneficial to reducing the consumption of low-voltage battery power.

[0018] In combination with the first aspect, in certain implementations of the first aspect, the first management unit can also be used to: supply power to the first control unit through the first port of the first management unit; obtain the output status of the first port, and when the output of the first port is abnormal, control the first isolation unit to disconnect, and control the second isolation unit to turn on.

[0019] In the present application, when the first management unit supplies power to the first control unit, when the output of the first management unit is abnormal, the power supply device is controlled to be in a safe mode, which can avoid the abnormal operation of the first control unit caused by the abnormal output of the first management unit, and further avoid the fluctuation of the bus voltage caused by the abnormal operation of the control unit, thereby ensuring the normal power supply to the load.

[0020] In combination with the first aspect, in certain implementations of the first aspect, the functional safety of the management unit meets the requirements of automotive safety integrity level (ASIL) B, and / or the functional safety of the first control unit meets the requirements of ASIL B, and / or the functional safety of the first isolation unit and the second isolation unit meets the requirements of ASIL B.

[0021] In the present application, the first isolation unit and the second isolation unit meet the requirements of ASILB. For faults such as undervoltage, overvoltage, short circuit of the voltage conversion unit, short circuit, undervoltage of the first battery, etc., the power supply device can meet the ASILB level.

[0022] In combination with the first aspect, in certain implementations of the first aspect, the first load may be a safety load, which may include at least a first power supply interface and a second power supply interface, the second circuit is connected to the first power supply interface of the first load, and the power supply device may also include a third circuit, a fourth circuit, a third isolation unit and a fourth isolation unit; the first end of the third isolation unit is electrically connected to the third circuit, the second end of the third isolation unit is used to be connected to the second output end of the voltage conversion unit, and the third isolation unit is used to control the on-off between the third circuit and the second output end of the voltage conversion unit; the first end of the fourth isolation unit is electrically connected to the third circuit, the second end of the fourth isolation unit is used to be connected to the second battery, the third isolation unit is used to control the on-off between the third circuit and the second battery, and the third isolation unit and the fourth isolation unit are bidirectional isolation units; the fourth circuit is electrically connected to the third circuit to power the first load.

[0023] In one embodiment, the power supply device may be the power supply device 170 and its extension or deformation. For example, for the power supply device 170, the circuit 1410 may be understood as the first circuit, the circuit 1610 may be understood as the third circuit, and assuming that the first load is the safety load 171, correspondingly, the circuit 1411 may be understood as the second circuit, and the circuit 1611 may be understood as the fourth circuit. The isolation units 141, 142, 161, and 162 in the power supply device 170 may be understood as the first isolation unit, the second isolation unit, the third isolation unit, and the fourth isolation unit, respectively.

[0024] In the present application, the power supply device includes two power supply buses, the first circuit and the third circuit, which can provide two power supplies to the safety load through the two power supply buses, respectively, to meet the two-way power supply requirements of the safety load. Furthermore, a bidirectional isolation unit is provided between the two power supply buses and the corresponding power supply branches, which can meet the high redundancy requirements for the power supply to the safety load and ensure the normal power supply to the safety load.

[0025] In combination with the first aspect, in certain implementations of the first aspect, the power supply device may further include a fifth isolation unit, the second circuit is connected to the power supply interface of the first load through the fifth isolation unit, and the fifth isolation unit is used to control the on and off between the second circuit and the first load; the first control unit may also be used to: when the first load is short-circuited, control the fifth isolation unit to disconnect.

[0026] In the present application, when the load is short-circuited, the fifth isolation unit is controlled to disconnect and the connection between the faulty load and the bus is disconnected, so that the bus voltage drop caused by the short-circuit of the faulty load can be avoided, and the stability of the bus voltage can be guaranteed, thereby ensuring the normal power supply to other loads.

[0027] In combination with the first aspect, in certain implementations of the first aspect, the device may also include: a second control unit, used to obtain second status information, the second status information is used to indicate the status of the second output terminal of the voltage conversion unit and / or the second battery; when the second status information indicates that the output of the second output terminal of the voltage conversion unit is abnormal, the third isolation unit is controlled to be disconnected, and the fourth isolation unit is controlled to be turned on; or, when the second status information indicates that the output of the second battery is abnormal, the fourth isolation unit is controlled to be disconnected, and the third isolation unit is controlled to be turned on.

[0028] For example, for the power supply device 170, the control unit 1 in the control module 145 can be understood as the first control unit, and the control unit 2 in the control module 165 can be understood as the second control unit. Accordingly, the management unit 1 can be understood as the first management unit, and the management unit 2 can be understood as the second management unit.

[0029] In the present application, when the output of the voltage conversion unit is abnormal, the third isolation unit is controlled to be disconnected and the fourth isolation unit is controlled to be turned on, so as to avoid the abnormal output of the voltage conversion unit affecting the voltage of the third circuit (i.e., the second power supply bus), thereby ensuring the normal power supply of the second power supply bus to the load. When the second battery sends an abnormality such as a short circuit or output undervoltage, the fourth isolation unit is controlled to be disconnected and the third isolation unit is controlled to be turned on, and the voltage conversion unit maintains the voltage of the second power supply bus, thereby ensuring its normal power supply to the load.

[0030] In combination with the first aspect, in certain implementations of the first aspect, the device may also include: a second management unit, used to control the third isolation unit to disconnect and the fourth isolation unit to turn on when the second control unit operates abnormally; and / or, when the second control unit operates abnormally, after determining that the power supply of the safety load connected to the power supply device is normal, control the second control unit to restart.

[0031] In conjunction with the first aspect, in some implementations of the first aspect, the first control unit and the second control unit are heterogeneous, and the first management unit and the second management unit are heterogeneous. For example, the first control unit and the second control unit are of different models, architectures, and manufacturers.

[0032] In the present application, the first control unit and the second control unit are heterogeneous, and the first management unit and the second management unit are heterogeneous, which can avoid common cause failures between the first control unit and the second control unit, and can avoid common cause failures between the first management unit and the second management unit.

[0033] In combination with the first aspect, in certain implementations of the first aspect, the functional safety of the second control unit and the second management unit meets the requirements of ASIL B.

[0034] In some possible implementations, the power supply device 170 may also only include the control module 145. For example, the functional safety of the control unit 1 in the control module 145 can meet the ASIL D level, so that the functional safety of the control of the isolation unit can achieve the ASIL D level.

[0035] In the present application, the isolation unit corresponding to a busbar is controlled by the first control unit and the second control unit respectively. When the first control unit and the second control unit meet the requirements of ASILB, the functional safety of the control of the isolation unit can reach the ASILD level. The first and second management units manage the first control unit and the second control unit respectively. When the first management unit and the second management unit meet the requirements of ASILB, the functional safety performance of the management of the control unit can reach the ASILD level. Therefore, chips and processors with lower functional safety levels can be used to achieve higher levels of functional safety performance, which can reduce costs on the one hand and shorten the development and verification cycle on the other.

[0036] In combination with the first aspect, in some implementations of the first aspect, the overcurrent protection threshold of the first isolation unit may be smaller than the overcurrent protection threshold of the second isolation unit.

[0037] Optionally, the overcurrent protection threshold of the third isolation unit may be smaller than the overcurrent protection threshold of the fourth isolation unit.

[0038] When a short circuit occurs in the power supply system and causes the isolation unit to be disconnected, since the overcurrent protection threshold of the first isolation unit is lower than the overcurrent protection threshold of the second isolation unit, the first isolation unit will be disconnected before the second isolation unit. The power supply device can operate in a safe mode, thereby improving the power supply redundancy performance of the power supply system.

[0039] In a second aspect, a power supply system is provided, the system comprising a first power supply unit and a first battery. The first power supply unit comprises a first circuit, a second circuit, a first isolation unit and a second isolation unit. The first isolation unit, the second isolation unit, the first circuit and the second circuit can refer to the description of the first aspect above.

[0040] For example, the first power supply unit may include the power supply device 140 or 160. For another example, for a power supply system using the power supply device 170, the first power supply unit may include a portion of the power supply device 170 corresponding to the first power supply subsystem (such as the circuit 1410, the isolation units 141, 142, and the power supply circuit 1411 corresponding to the load, and / or the circuit 1421), or the first power supply unit may include a portion of the power supply device 170 corresponding to the second power supply subsystem (such as the circuit 1610, the isolation units 161, 162, and the power supply circuit 1611 corresponding to the load, and / or the circuit 1621).

[0041] In combination with the second aspect, in certain implementations of the second aspect, the power supply system may further include a second power supply unit and a second battery. The second power supply unit includes a fifth circuit, a sixth circuit, a sixth isolation unit, and a seventh isolation unit; the first end of the sixth isolation unit is electrically connected to the fifth circuit, the second end of the sixth isolation unit is used to be connected to the second output end of the voltage conversion unit, and the sixth isolation unit is used to control the on-off between the fifth circuit and the second output end of the voltage conversion unit; the first end of the seventh isolation unit is electrically connected to the fifth circuit, the second end of the seventh isolation unit is used to be electrically connected to the second battery, the seventh isolation unit is used to control the on-off between the fifth circuit and the second battery, and the sixth isolation unit and the seventh isolation unit are bidirectional isolation units; the sixth circuit, electrically connected to the fifth circuit, can be used to power the first load.

[0042] Exemplarily, the first load is a safety load, and the first circuit and the fifth circuit can be understood as two power supply buses of the power supply system. For example, the power supply system can be the power supply system 300 and its deformation or expansion. For another example, when the first power supply unit is the power supply device 140, the second power supply unit can be the power supply device 160. For another example, when the first power supply unit is the part of the power supply device 170 corresponding to the first power supply subsystem, the second power supply unit can be the part of the power supply device 170 corresponding to the second power supply subsystem.

[0043] In one embodiment, assuming that the first load is a safety load 171, the isolation units 141, 142, 161, 162 may correspond to the first isolation unit, the second isolation unit, the sixth isolation unit, and the seventh isolation unit, respectively, the circuits 1410 and 1610 may be understood as the first circuit and the fifth circuit, respectively, and the circuits 1411 and 1611 may be understood as the second circuit and the sixth circuit, respectively.

[0044] In the present application, two power supply buses can be used to provide two power supplies to the safety load respectively, meeting the two-way power supply requirements of the safety load. Furthermore, a bidirectional isolation unit is provided between the two power supply buses and the corresponding power supply branches, which can meet the high redundancy requirements for power supply to the safety load and ensure the normal power supply to the safety load.

[0045] In combination with the second aspect, in certain implementations of the second aspect, the first power supply unit may further include: a first control unit, used to obtain first status information, wherein the first status information may be used to indicate the status of the first output terminal of the voltage conversion unit and / or the output terminal of the first battery; when the first status information indicates that the status of the first output terminal of the voltage conversion unit is abnormal, the first isolation unit is controlled to be disconnected, and the second isolation unit is controlled to be turned on; or, when the first status information indicates that the output of the first battery is abnormal, the second isolation unit is controlled to be disconnected, and the first isolation unit is controlled to be turned on.

[0046] In combination with the second aspect, in certain implementations of the second aspect, the first power supply unit may also include: a first management unit, used to control the first isolation unit to disconnect and control the second isolation unit to turn on when the first control unit operates abnormally; and / or, when the first control unit operates abnormally, after determining that the power supply to the first load is normal, control the first control unit to restart.

[0047] In combination with the second aspect, in certain implementations of the second aspect, the first management unit can also be used to: supply power to the first control unit through the first port; obtain the output status of the first port, and when the output of the first port is abnormal, control the first isolation unit to disconnect and control the second isolation unit to turn on.

[0048] In combination with the second aspect, in certain implementations of the second aspect, the second circuit is connected to the first power supply interface of the first load through a fifth isolation unit, and the fifth isolation unit can be used to control the on and off between the second circuit and the first load. The first control unit can also be used to control the fifth isolation unit to disconnect when the first load is short-circuited.

[0049] In combination with the second aspect, in certain implementations of the second aspect, the second power supply unit may further include: a third control unit, used to obtain third state information, the third state information is used to indicate the state of the second output end of the voltage conversion unit and / or the output end of the second battery; when the third state information indicates that the output of the second output end of the voltage conversion unit is abnormal, the sixth isolation unit is controlled to be disconnected, and the seventh isolation unit is controlled to be turned on; or, when the third state information indicates that the output of the second battery is abnormal, the seventh isolation unit is controlled to be disconnected, and the sixth isolation unit is controlled to be turned on.

[0050] In combination with the second aspect, in certain implementations of the second aspect, the second power supply unit may also include: a third management unit, used to control the sixth isolation unit to disconnect and the seventh isolation unit to turn on when the third control unit operates abnormally; and / or, when the third control unit operates abnormally, after determining that the power supply to the first load is normal, control the third control unit to restart.

[0051] In combination with the second aspect, in certain implementations of the second aspect, the third management unit can also be used to: supply power to the second control unit through the third port; obtain the output status of the third port, and when the output of the third port is abnormal, control the sixth isolation unit to disconnect and control the seventh isolation unit to turn on.

[0052] In combination with the second aspect, in certain implementations of the second aspect, the sixth circuit is connected to the second power supply interface of the first load through an eighth isolation unit, and the eighth isolation unit is used to control the on and off between the sixth circuit and the first load; the third control unit can also be used to: when the first load is short-circuited, control the eighth isolation unit to disconnect.

[0053] Exemplarily, when the branch where the second power supply interface of the first load is located is short-circuited, the eighth isolation unit can be controlled to be disconnected. If the branch where the first power supply interface of the first load is located is working normally at this time, the fifth isolation unit can be controlled to be turned on.

[0054] In one embodiment, taking the power supply system 300 as an example, the first power supply unit may be the power supply device 140, and the second power supply unit may be the power supply device 160. The control unit 1 and the control unit 2 may be understood as the first control unit and the third control unit, respectively, and the management units 1 and 2 may be understood as the first management unit and the third management unit, respectively. Assuming that the first load is the safety load 171, the isolation units 1431 and 1631 may be understood as the fifth isolation unit and the eighth isolation unit, respectively.

[0055] In combination with the second aspect, in some implementations of the second aspect, the first management unit and the third management unit are heterogeneous, and / or the first control unit and the third control unit are heterogeneous.

[0056] In combination with the second aspect, in certain implementations of the second aspect, the functional safety of the third control unit and the third management unit meets the requirements of ASILB, and / or the functional safety of the first control unit and the first management unit meets the requirements of ASILB, and / or the functional safety of the first isolation unit and the second isolation unit meets the requirements of ASILB, and / or the functional safety of the sixth isolation unit and the seventh isolation unit meets the requirements of ASILB.

[0057] In combination with the second aspect, in certain implementations of the second aspect, the overcurrent protection threshold of the first isolation unit is smaller than the overcurrent protection threshold of the second isolation unit, and / or the overcurrent protection threshold of the sixth isolation unit is smaller than the overcurrent protection threshold of the seventh isolation unit.

[0058] In combination with the second aspect, in certain implementations of the second aspect, the first power supply device may also include a seventh circuit and a ninth isolation unit, the seventh circuit being electrically connected to the first circuit and used to be connected to the second load through the ninth isolation unit, and the ninth isolation unit may be used to control the on and off between the seventh circuit and the second load; the first control unit may also be used to: control the ninth isolation unit to disconnect when the second load is short-circuited.

[0059] Exemplarily, when the ninth isolation unit is turned on, the first power supply device can supply power to the second load through the seventh circuit.

[0060] In combination with the second aspect, in certain implementations of the second aspect, the second power supply device may further include an eighth circuit, which is electrically connected to the fifth circuit and is used to be connected to the third load through a tenth isolation unit, and the tenth isolation unit may be used to control the on and off between the eighth circuit and the third load; the second control unit may also be used to: when the third load is short-circuited, control the tenth isolation unit to disconnect.

[0061] Exemplarily, when the tenth isolation unit is turned on, the second power supply device can supply power to the third load through the eighth circuit.

[0062] In one embodiment, the second load and the third load may be two power supply interfaces of the same safety load. For example, taking the power supply system 300 as an example, assuming that the second load and the third load are two power supply interfaces of the safety load 17n (n is a positive integer), the isolation units 143n and 163n may be understood as the ninth isolation unit and the tenth isolation unit, respectively.

[0063] In yet another embodiment, the second load or the third load may be a normal load.

[0064] In a third aspect, a method is provided, which can be applied to a first power supply unit, the first power supply unit comprising a first circuit, a second circuit, a first isolation unit and a second isolation unit; the first end of the first isolation unit is electrically connected to the first circuit, the second end of the first isolation unit is used to connect to the first output end of the voltage conversion unit, and the first isolation unit is used to control the on-off between the first circuit and the first output end of the voltage conversion unit; the first end of the second isolation unit is electrically connected to the first circuit, the second end of the second isolation unit is used to connect to the first battery, and the second isolation unit is used to control the on-off between the first circuit and the first battery; the second circuit is electrically connected to the first circuit to supply power to a first load; the first isolation unit and the second isolation unit are bidirectional isolation units. The method comprises: when a first fault is detected, controlling at least one of the voltage conversion unit and the first battery to supply power to the first load.

[0065] For example, the method can be executed by control units 1, 2, or by control modules 145, 165, or by power supply devices 140, 160 provided with the above-mentioned control modules, or by power supply system 300, or by a vehicle provided with a power supply device or a power supply system.

[0066] In combination with the third aspect, in certain implementations of the third aspect, the first fault includes at least one of the following: the output of the voltage conversion unit is greater than or equal to the first threshold, the output of the voltage conversion unit is less than or equal to the second threshold, and the voltage conversion unit is short-circuited, and controlling at least one of the voltage conversion unit and the first battery to power the first load may include: controlling the first isolation unit to disconnect and controlling the second isolation unit to turn on, and powering the first load through the first battery.

[0067] In combination with the third aspect, in certain implementations of the third aspect, the first fault includes at least one of the following: the output of the first battery is less than or equal to a third threshold and the first battery is short-circuited, and controlling at least one of the voltage conversion unit and the first battery to power the first load includes: controlling the second isolation unit to disconnect and controlling the first isolation unit to turn on, and powering the first load through the voltage conversion unit.

[0068] In a fourth aspect, a method is provided, which can be applied to a power supply system, the power supply system comprising a first power supply unit, a second power supply unit, a first battery and a second battery. The method comprises: when a second fault is detected, controlling at least two of the voltage conversion unit, the first battery and the second battery to supply power to the first load.

[0069] For example, the method may be executed by the control unit 1, 2, or by the control module 145, 165, or by the power supply device 140, 160 provided with the above control module, or by the power supply system 300, or by a vehicle provided with the power supply device or the power supply system. With regard to the first power supply unit and the second power supply unit, reference may be made to the description in the above second aspect.

[0070] In combination with the fourth aspect, in certain implementations of the fourth aspect, the second fault includes that the output of the voltage conversion unit is greater than or equal to the first threshold, the output of the voltage conversion unit is less than or equal to the second threshold, or the voltage conversion unit is short-circuited, and controlling at least two of the voltage conversion unit, the first battery, and the second battery to power the first load may include: controlling the first isolation unit and the sixth isolation unit to be disconnected, and controlling the second isolation unit and the seventh isolation unit to be turned on, so as to power the first load through the first battery and the second battery.

[0071] In combination with the fourth aspect, in certain implementations of the fourth aspect, the second fault includes that the output of the first battery is less than or equal to a third threshold or the first battery is short-circuited, and controlling at least two of the voltage conversion unit, the first battery, and the second battery to power the first load may include: controlling the second isolation unit to disconnect, and controlling the first isolation unit, the sixth isolation unit, and the seventh isolation unit to turn on, to power the first load through the voltage conversion unit and the second battery.

[0072] In one embodiment, the control module 145 may directly control the on and off of the isolation units 141 and 142 , and may communicate with the control module 165 through a communication circuit to achieve control over the isolation units 161 and 162 .

[0073] In combination with the fourth aspect, in certain implementations of the fourth aspect, the method may further include: acquiring battery status information of the first battery and the second battery; and controlling power balance between the first battery and the second battery according to the battery status information.

[0074] In combination with the fourth aspect, in certain implementations of the fourth aspect, controlling the charge balance between the first battery and the second battery includes: when the charge difference between the first battery and the second battery is greater than or equal to a fourth threshold, controlling the seventh isolation unit to be disconnected, and controlling the first isolation unit, the second isolation unit, and the sixth isolation unit to be turned on.

[0075] In a fifth aspect, a vehicle is provided, comprising a high-voltage battery and a voltage conversion unit, wherein the high-voltage battery is electrically connected to an input terminal of the voltage conversion unit; the vehicle further comprises a power supply device as in any possible implementation of the first aspect, wherein a first isolation unit of the power supply device is electrically connected to a first output terminal of the voltage conversion unit; or, the vehicle further comprises a power supply system as in any possible implementation of the second aspect, wherein a first isolation unit of the power supply system is electrically connected to a first output terminal of the voltage conversion unit.

[0076] In a sixth aspect, a computer program product is provided, the computer program product comprising: a computer program code, when the computer program code is run on a computer, the computer executes the method in any possible implementation of the third aspect or the fourth aspect.

[0077] In a seventh aspect, a computer-readable medium is provided, wherein the computer-readable medium stores instructions, and when the instructions are executed by a processor, the processor implements the method in any possible implementation of the third aspect or the fourth aspect.

[0078] In an eighth aspect, a chip is provided, the chip comprising a circuit, the circuit being used to execute the method in any possible implementation of the third aspect or the fourth aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0079] Figure 1 is a schematic diagram of a power supply system provided in an embodiment of the present application;

[0080] Figure 2 is a schematic diagram of a power supply subsystem provided in an embodiment of the present application;

[0081] Figure 3 is a schematic diagram of a bidirectional isolation unit provided in an embodiment of the present application;

[0082] Figure 4 is a schematic diagram of another power supply subsystem provided in an embodiment of the present application;

[0083] Figure 5 is a schematic diagram of a power supply system provided in an embodiment of the present application;

[0084] Figure 6 is a schematic diagram of another power supply system provided in an embodiment of the present application;

[0085] Figure 7 is a schematic block diagram of a power supply device provided in an embodiment of the present application;

[0086] Figure 8 is a structural schematic diagram of another power supply subsystem provided in an embodiment of the present application;

[0087] Fig. 9 It is a schematic diagram of a process of a power supply method provided in an embodiment of the present application;

[0088] Fig.10 It is a flowchart diagram of another power supply method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0089] The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0090] In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is a kind of association relationship that describes associated objects, indicating that three relationships can exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In the present application, "at least one" means one or more, and "multiple" means two or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0091] The prefixes such as "first" and "second" used in the embodiments of the present application are only used to distinguish different description objects, and have no limiting effect on the position, order, priority, quantity or content of the described objects. The use of prefixes such as ordinal numbers used to distinguish description objects in the embodiments of the present application does not constitute a limitation on the described objects. For the statement of the described objects, please refer to the description in the context of the claims or embodiments, and the use of such prefixes should not constitute an unnecessary limitation.

[0092] The power supply system provided in the present application is suitable for vehicles that need to be driven by an electric drive, wherein the vehicles may include road vehicles, water vehicles, air vehicles, industrial equipment, agricultural equipment, or entertainment equipment, etc. For example, the vehicle may be a vehicle, which is a vehicle in a broad sense, and may be a vehicle (such as a commercial vehicle, a passenger car, a motorcycle, a flying car, a train, etc.), an industrial vehicle (such as a forklift, a trailer, a tractor, etc.), an engineering vehicle (such as an excavator, a bulldozer, a crane, etc.), agricultural equipment (such as a mower, a harvester, etc.), amusement equipment, a toy vehicle, etc. The embodiment of the present application does not specifically limit the type of vehicle. For another example, the vehicle may be a vehicle such as an airplane or a ship. For example, the vehicles in the present application may include pure electric vehicle / battery electric vehicle (pureEV / battery EV), hybrid electric vehicle (hybrid electric vehicle, HEV), range extended electric vehicle (rangeextended electric vehicle, REEV), plug-in hybrid electric vehicle (plug-in hybrid electric vehicle, PHEV) or new energy vehicle (new energy vehicle, NEV), etc.

[0093] With the development of intelligent driving technology, vehicles have also developed from the original purely manual driving mode to the autonomous driving mode. Current and future vehicles may include one or more of the autonomous driving levels L0-L5. The above autonomous driving levels (L0-L5) are based on the grading standards of the Society of Automotive Engineers (SAE). Among them, level L0 is no automation; level L1 is driving assistance; level L2 is partial automation; level L3 is conditional automation; level L4 is highly automated; level L5 is fully automated. The tasks of monitoring road conditions and responding to levels L1 to L3 are completed by the driver and the system, and the driver is required to take over dynamic driving tasks. Levels L4 and L5 allow the driver to completely transform into the role of a passenger.

[0094] To meet the needs of autonomous driving, the system complexity of vehicles is also increasing, and the risks from system failures and random hardware failures are increasing. To deal with the above risks, it is necessary to pay attention to the behavior of each system and hardware of the vehicle after a failure to avoid unacceptable risks caused by its functional safety failure, that is, functional safety. The functional safety level of systems or hardware in current and future vehicles may include quality management (QM), and one or more of ASIL A to ASIL D. The above functional safety levels are based on the grading standards of the Society of Automotive Engineers (SAE). Among them, the functional safety level QM can be understood as having nothing to do with functional safety.

[0095] Figure 1 A power supply system is shown. Figure 1 As shown, in the traditional solution, the load in the system is directly connected to the direct current direct current converter (DC / DC) circuit 120 and the low-voltage battery. The DC / DC circuit can convert the DC high voltage of the high-voltage battery 110 into a DC low voltage for use by the load, or to charge the low-voltage battery 130. A fuse is set between the load and the power supply (low-voltage battery and DC / DC circuit), and the fuse will blow when any branch is short-circuited. According to the requirements for functional safety, loads can be divided into conventional loads and safety loads. Conventional loads can be understood as loads without functional safety requirements, and safety loads can be understood as loads with functional safety requirements.

[0096] In one embodiment, taking an electric car or a hybrid car as an example, Figure 1 The low-voltage battery shown may include a 12-volt (volt, V) battery of the vehicle, the high-voltage battery may include a power battery, the conventional load may include a QM-level load such as a horn and an audio system of the vehicle, and the safety load may include an electronic stability program (ESP), an electronic parking brake system (EPB), an electric power steering control unit (EPS) and other electrical equipment that have functional safety level requirements, Figure 1 The power supply device including the fuse may include a power distribution box of the vehicle.

[0097] The traditional method has the following problems: 1) Since the DC / DC circuit is directly connected in parallel with the low-voltage battery, the unexpected overvoltage and undervoltage of the DC / DC will directly affect the operation of the safety load and the charging process of the low-voltage battery; 2) The safety load and the conventional load are connected in parallel in the power supply circuit through the fuse. For any safety load, although the fuse corresponding to the fault branch will be blown when there is a short circuit in the branch where other loads are located, the slow fuse blowing speed will cause the voltage of the power supply system to drop, thereby affecting the operation of the safety load. For example, for the automatic driving controller, the voltage drop of the power supply system will cause the automatic driving controller to restart. Considering that the restart process of the automatic driving controller generally takes more than ten seconds, in the high-level automatic driving scenario, the restart period may cause an accident that seriously threatens the safety of the vehicle and personal safety. In addition, the fuse is a consumable part, and its melting process is random and cannot be detected, which will also affect the power supply safety of the safety load. Due to the above problems, the power supply system under the current technical background is difficult to meet the requirements of L3 and above high-level automatic driving for the safety of low-voltage power supply functions. To meet the requirements of functional safety, the power supply system of L3 and above advanced autonomous driving needs to have a redundant design to avoid unexpected risks caused by single point failure.

[0098] In view of this, embodiments of the present application provide a power supply device, a power supply system and a method.

[0099] The following will be combined with the attached Figures 2 to 7 , describe the technical solutions in the embodiments of the present application.

[0100] For example, Figure 2 It is a schematic diagram of a power supply subsystem provided in an embodiment of the present application. Figure 2 The power supply subsystem 100 shown may include a high voltage battery 110 , a DC / DC circuit 120 , a low voltage battery 131 , a power supply device 140 , one or more safety loads, and / or one or more normal loads.

[0101] In one embodiment, the low-voltage battery 131 and the low-voltage battery 130 may be the same or different.

[0102] Exemplarily, the power supply device 140 may include an interface 146 for connecting to the high-voltage battery side, may include an interface 147 for connecting to the low-voltage battery side, and may include a power supply interface for connecting to the load side.

[0103] In one embodiment, if Figure 2 As shown, the power supply device 140 can be connected to the DC / DC circuit 120 via an interface 146 , thereby being connected to the high voltage battery 110 . The power supply device 140 can be connected to the low voltage battery 131 via an interface 147 .

[0104] In another embodiment, the power supply subsystem 100 may include conventional loads 181 to 18m (m is a positive integer), and the power supply device 140 may be connected to the conventional loads 181 to 18m respectively through conventional load power supply interfaces 1491 to 149m, thereby providing power to the conventional loads.

[0105] In yet another embodiment, the power supply subsystem 100 may include safety loads 171 to 17n (n is a positive integer). The power supply device 140 may supply power to the one or more safety loads through safety load power supply interfaces 1481 to 148n respectively.

[0106] Exemplarily, the safety load may include at least two power supply interfaces. For example, the safety load 17n may include at least power supply interfaces 17n_1 and 17n_2, which may be referred to as safety load 17n_1 and safety load 17n_2, respectively. The power supply device 140 may be connected to any power supply interface of the safety load 17n, thereby supplying power to the safety load. In other words, the safety load 17n supports at least two power supplies, and the interfaces of the two power supplies are power supply interfaces 17n_1 and 17n_2, respectively. For another example, the safety load 171 may be a vehicle control unit (VCU), which may support two power supplies. To meet the requirements of functional safety, in the power supply subsystem 100, the power supply device 140 may be connected to one power supply interface of the VCU (such as power supply interface 171_1) through interface 1481, and another power supply subsystem may supply power to another power supply interface of the VCU (such as power supply interface 171_2), thereby supplying power to the safety load through two power supply subsystems.

[0107] VCU provides two power supplies. For another example, the safety load may also include an autonomous driving domain controller, which may include two power supplies, and may be connected to one power supply interface of the autonomous driving domain controller through the safety load power supply interface of the power supply device 140, thereby powering the autonomous driving domain controller. For another example, the power supply device 140 may be connected to the safety loads 171_1 to 17n_1 respectively through the safety load power supply interfaces 1481 to 148n, thereby powering the safety load. For another example, in some possible implementations, the safety load may also include EPS, ESC, etc.

[0108] In another embodiment, only with respect to the power supply device 140, the multiple power supply interfaces provided by it may be the same or similar. For example, with respect to the power supply device 140, the power supply interface 1481 and the power supply interface 1491 may be the same interface, or in other words, the parameters of the two may be the same. Furthermore, when it is necessary to use the power supply device 140 in a power supply system, the multiple interfaces may be set according to the loads used in the actual situation so that they can match the corresponding loads. After matching, the parameters of the power supply interface 1481 and the power supply interface 1491 may be different.

[0109] In another embodiment, among the multiple power supply interfaces included in the power supply device 140, a preset part can be a power supply interface for a safety load, such as the above-mentioned safety load power supply interface 1481 to 148n, and another part can be a power supply interface for a conventional load, such as the above-mentioned conventional load power supply interface 1491 to 149m.

[0110] It should be understood that Figure 2 Function and Figure 1 Parts with the same or similar functions as in Figure 1 Same number, specific functions can be found in the above description.

[0111] Exemplarily, the power supply device 140 includes a first circuit 1410, an isolation unit 141 and an isolation unit 142. The isolation unit 141 is disposed between the first circuit 1412 and the interface 146, and can be used to control the on / off between the first circuit 1410 and the DC / DC circuit. The isolation unit 142 is disposed between the first circuit 1412 and the interface 147, and can be used to control the on / off between the first circuit 1410 and the low-voltage battery 131. The isolation unit 141 and the isolation unit 142 can be bidirectional isolation units.

[0112] In some possible implementations, the functional safety level of the isolation unit 141 and the isolation unit 142 may be ASILB.

[0113] In some possible implementations, the overcurrent protection threshold of the isolation unit 141 is smaller than the overcurrent protection threshold of the isolation unit 142 .

[0114] In the embodiment of the present application, the overcurrent protection threshold of the isolation unit 141 is smaller than that of the isolation unit 142. When there is a short circuit on the high-voltage battery side where the DC / DC circuit is located, the isolation unit 141 can be disconnected first, and the isolation unit 142 can remain in the on state, and the load can be powered by the low-voltage battery 131 to ensure the normal power supply of the power supply system. Since the power supply voltage of the low-voltage battery may decrease as the power supply time increases, through the above method, the low-voltage battery can be used as little as possible to power the load during the normal power supply process, so that when the DC / DC circuit has an overcurrent fault, the power supply fault caused by the undervoltage of the low-voltage battery can be reduced, and the number of charge and discharge times of the low-voltage battery can be reduced, which is conducive to improving its service life.

[0115] For example, Figure 3 is a schematic diagram of a bidirectional isolation unit provided in an embodiment of the present application. Figure 3 As shown, the bidirectional isolation unit 101 may include a first switch 102, a second switch 103, a first diode 104 and a second diode 105, wherein the first switch 102 is connected in series with the second switch 103, the first diode 104 and the second diode 105 are connected in parallel with the first switch 102 and the second switch 103 respectively, and the first diode 104 and the second diode 105 are arranged back to back.

[0116] In some possible implementations, the electronic device formed by the first switch 102 and the first diode 104 in parallel, and / or the electronic device formed by the second switch 102 and the second diode 105 in parallel, may include a metal-oxide-semiconductor field-effect transistor (MOSFET), an insulated gate bipolar transistor, or a bipolar junction transistor. For example, the bidirectional isolation unit 101 may be formed by two MOSFETs (referred to as MOS transistors) arranged back to back and in series.

[0117] Assume that the isolation units 141 and 142 are not configured as bidirectional isolation units. For example, taking the isolation unit 141 as an example, the isolation unit 141 may only use a single MOS tube or a single bipolar junction tube. That is to say, assuming that the isolation unit 141 only uses a switch connected in parallel with a diode, this method will lead to the following problems: 1) If the isolation unit 141 only includes a switch 102 and a parallel diode 104, when the switch 102 is disconnected, if the DC / DC circuit is short-circuited, the current in the circuit 1410 can still flow to one side of the DC / DC circuit through the diode 104, thereby causing a voltage drop in the bus voltage. 2) If the isolation unit 141 only includes a switch 103 and a parallel diode 105, when the switch 103 is disconnected, if the DC / DC circuit is over-voltage, the voltage in the circuit 1410 can still be affected through the diode 105, thereby affecting the operation of the safety load. That is, if the isolation unit 141 is not configured as a bidirectional isolation unit, when the isolation unit 141 is in the disconnected state, the DC / DC circuit and the circuit 1410 cannot be completely isolated. Similarly, if the isolation unit 142 is not configured as a bidirectional isolation unit, when the isolation unit 142 is in the disconnected state, the low-voltage battery 131 and the circuit 1410 cannot be completely isolated.

[0118] When the bidirectional isolation unit 101 is in the disconnected state, the switches 102 and 103 are both in the disconnected state. Compared with the solution of using only one switch in parallel with the diode, using a single MOS tube, a single bipolar junction tube, etc., the isolation unit 141 is set as a bidirectional isolation unit. When it is disconnected, the isolation unit 141 can completely isolate the connection between the DC / DC circuit and the circuit 1410, so that the fault of the DC / DC circuit cannot affect the voltage and current of the bus. Similarly, the isolation unit 142 is set as a bidirectional isolation unit. When it is disconnected, the isolation unit 142 can completely isolate the influence of the low-voltage battery on the voltage and current of the circuit 1410.

[0119] The power supply device 140 may further include a second circuit for supplying power to the load. The second circuit may connect the first circuit and the power supply interface of the power supply device 140. An isolation unit may be provided between the second circuit and the power supply interface, and the isolation unit may be used to control the on-off between the first circuit 1410 and the load.

[0120] It should be noted that the "interface" involved in this application mainly refers to the port connected to the device (such as power supply, load, etc.) through a wire (or wire). For example, the power supply interface of the power supply device 140 can be understood as the port provided by the power supply device for powering the electrical equipment, such as interface 1481; the power supply interface of the load can be understood as the port provided by the load for connecting to the power supply device. By connecting the port on the power supply device side and the port on the load side through a wire, the power supply device 140 can supply power to the load.

[0121] In one embodiment, if Figure 2 As shown, any circuit in the circuits 1411 to 141n can be understood as the second circuit. Taking the safety load power supply interface 148n as an example, when the corresponding isolation unit 143n is turned on, the load 17n_1 can be connected to the first circuit 1410 through the second circuit 141n, so that the power supply subsystem 100 can supply power to the load through the first circuit 1410 and the second circuit 141n via the interface 148n. When the isolation unit 143n is disconnected, the first circuit 1410 is disconnected from the load 17n_1.

[0122] In another embodiment, any circuit in the circuits 1421 to 142m can be understood as the second circuit. Taking the conventional load power supply circuit 149m as an example, when the corresponding isolation unit 144m is turned on, the load 18m can be connected to the first circuit 1410 through the second circuit 142m, so that the power supply subsystem 100 can power the load.

[0123] In another embodiment, taking the safety load 17n_1 as an example, when the isolation units 141 and 142 are both turned on, the bus voltage can be maintained by the high-voltage battery and the low-voltage battery, so that the load can be powered; when the isolation unit 141 is turned on and the isolation unit 142 is disconnected, the high-voltage battery is used to power the load; when the isolation unit 142 is turned on and the isolation unit 141 is disconnected, the low-voltage battery is used to power the load.

[0124] Exemplarily, the power supply device 140 may include a control module 145, and the on and off of the plurality of isolation units may be controlled by the control module 145. For example, the control module 145 may be an intelligent distribution unit (IDU).

[0125] For example, Figure 4 It is a schematic diagram of another power supply subsystem provided in an embodiment of the present application. Figure 4 The illustrated power supply subsystem 200 may include a high voltage battery 110 , a DC / DC circuit 120 , a low voltage battery 132 , a power supply device 160 , one or more safety loads, and / or one or more normal loads.

[0126] Exemplarily, the power supply device 160 may include an interface 166 for connecting to the high-voltage battery side, may include an interface 167 connected to the low-voltage battery side, and may include a power supply interface for connecting to the load side. For example, the power supply subsystem 200 may include conventional loads 191 to 19p (p is a positive integer), and the power supply device 160 may be connected to the conventional loads 191 to 19p respectively through conventional load power supply interfaces 1691 to 169p. For another example, the power supply device 160 may include safety load power supply interfaces 1681 to 168n, which are connected to safety loads 171_2 to 17n_2 respectively, and can supply power to the safety loads 171 to 17n. For another example, for a certain power supply interface of the power supply device 140 or 160, when connected to a safety load, it can be understood as a safety load power supply interface, and when connected to a conventional load, it can be understood as a conventional load power supply interface.

[0127] In some possible implementations, in the power supply subsystem 100, 200, the power supply device 140, 160 may include an idle power supply interface that is not connected to the load. When a new power-consuming device is added to the power supply system, the new power-consuming device may be powered through the idle power supply interface.

[0128] Exemplarily, the power supply device 160 includes a circuit 1610, an isolation unit 161 and an isolation unit 162. The isolation unit 161 is arranged between the circuit 1612 and the interface 166, and can be used to control the on-off between the circuit 1610 and the DC / DC circuit. The isolation unit 162 is arranged between the circuit 1612 and the interface 167, and can be used to control the on-off between the circuit 1610 and the low-voltage battery 132. The isolation units 161 and 162 can be bidirectional isolation units.

[0129] In some possible implementations, the overcurrent protection threshold of the isolation unit 161 is smaller than the overcurrent protection threshold of the isolation unit 162 .

[0130] Exemplarily, the power supply device 160 may also include a circuit for supplying power to a load, such as circuits 1611 to 161n, circuits 1621 to 162p, which may be used to connect the circuit 1610 to a power supply interface of a corresponding load. An isolation unit may be provided to control the on-off between the circuit 1610 and the load, such as isolation units 1631, 1641, etc.

[0131] Exemplarily, the power supply device 160 may include a control module 165 , and the control module 165 may control the operation between the plurality of isolation units in the power supply device 160 .

[0132] It should be understood that Figure 4 Function and Figure 2 Parts with the same or similar functions as in Figure 2For the same number, the specific function can refer to the above description. The functions of the components with different numbers or names can also be the same or similar.

[0133] In one embodiment, the low voltage battery 132 and the low voltage battery 131 are two different low voltage batteries, but the types of the two batteries can be the same or similar, for example, both are lead-acid batteries or lithium batteries. In some possible implementations, the types of the two batteries can be different.

[0134] In another embodiment, although the loads in the power supply subsystems 100 and 200 are different, as far as the power supply device 140 and the power supply device 160 are concerned, the circuit 1410 and the circuit 1610 can be used for the high-voltage battery to charge the corresponding low-voltage battery, and the functions of the circuit 1410 and the circuit 1610 are the same or similar. It can also be said that they play similar roles in the power supply subsystems 100 and 200. The isolation units 141 and 161 can be used to control the on-off between the DC / DC circuit and the circuits 1410 and 1610, respectively, and the isolation units 142 and 162 can be used to control the on-off between the circuits 1410 and 1610 and the corresponding low-voltage batteries 131 and 132, respectively. The circuit 1411 and the circuit 1611 are used to connect the load to the circuits 1410 and 1610, respectively. The isolation unit 1431 and the isolation unit 1631 are used to control the on-off between the circuits 1410 and 1610 and the corresponding loads, respectively.

[0135] The following combination Figure 5 and Figure 6 The power supply system provided in the embodiment of the present application is introduced.

[0136] For example, Figure 5 It is a schematic diagram of a power supply system provided in an embodiment of the present application. Figure 4 The power supply system 300 shown may include a first power supply subsystem and a second power supply subsystem. The first power supply subsystem may include a high-voltage battery 110, a DC / DC circuit 120, a power supply device 140 and a low-voltage battery 131. The second power supply subsystem may include a high-voltage battery 110, a DC / DC circuit 120, a power supply device 160 and a low-voltage battery 132. Figure 5 The first power supply subsystem involved can be understood as Figure 2 The second power supply subsystem can be understood as an expansion or deformation of the power supply subsystem 100 shown in FIG. Figure 4 The power supply subsystem 200 shown is an expansion or deformation. It should be understood that Figure 5 Zhongyu Figure 2 , Figure 4 Functionally identical components are used. Figure 2 , Figure 4 For the same numbers, their specific functions can refer to the above description.

[0137] In one embodiment, as described above, the safety loads 17n_1 and 17n_2 can be understood as two power supply interfaces of the safety load 17n, and the power supply system 300 can include one or more safety loads, such as safety loads 171 to 17n. The two power supplies of the safety loads can be provided by the first power supply subsystem and the second power supply subsystem respectively.

[0138] In another embodiment, the power supply system 300 may include one or more conventional loads, and the power supply of the conventional loads may be provided by the first power supply subsystem or the second power supply subsystem. For example, the power supply system may include conventional loads 181 to 18m powered by the circuit 1410, and / or conventional loads 191 to 19p powered by the circuit 1610.

[0139] In some possible implementations, the control module 145 and the control module 165 may communicate via the internal circuit of the vehicle. For example, the IDU1 and the IDU2 may communicate via the internal circuit of the vehicle.

[0140] In some possible implementations, a power supply device may be used to supply power to the loads in the power supply system. Figure 6 is a schematic diagram of another power supply system provided in an embodiment of the present application. Compared with the power supply system 300, Figure 6 The power supply system 400 shown only includes the power supply device 170 .

[0141] like Figure 6 As shown, the power supply device 170 may include a circuit 1410, isolation units 141 and 142, and circuits 1411 to 141n and / or circuits 1421 to 142m. The power supply device 170 may also include a circuit 1610, isolation units 161 and 162, and circuits 1611 to 161n and / or circuits 1621 to 162p. The power supply device 170 may also include control modules 145 and 165. In one embodiment, the control modules 145 and 165 may adopt a heterogeneous design to prevent common cause failures. In other words, the power supply device 170 may be understood as a combination of the power supply device 140 and the power supply device 160.

[0142] Similar to the power supply system 300 , in the power supply system 400 , the isolation unit 141 can be connected to the DC / DC circuit through the interface 146 , and the isolation unit 161 can be connected to the DC / DC circuit through the interface 166 ; the isolation unit 142 can be connected to the low-voltage battery 131 through the interface 147 , and the isolation unit 162 can be connected to the low-voltage battery 132 through the interface 167 .

[0143] The power supply system 400 may include a first power supply subsystem and a second power supply subsystem. For example, the first power supply subsystem may include a high-voltage battery 110, a DC / DC circuit 120, an isolation unit 141, a circuit 1410, an isolation unit 142, and circuits 1411 to 141n and / or circuits 1421 to 142m. For another example, the second power supply subsystem may include a high-voltage battery 110, a DC / DC circuit 120, an isolation unit 161, a circuit 1610, an isolation unit 162, and circuits 1611 to 161n and / or circuits 1621 to 162p.

[0144] Exemplarily, the load connected to any power supply interface of the power supply devices 140 , 160 , 170 may be a single load or a group of loads including one or more loads.

[0145] In one embodiment, taking the conventional load 191 as an example, Figure 6 As shown, conventional load 191 may refer to a group of loads, including conventional loads 1911 to 191q (q is a positive integer). The group of loads may distribute power to conventional loads 1911 to 191q through a control unit, such as a vehicle interface unit (VIU). In this scenario, power supply device 170 may be understood as a primary power distribution device, and the VIU may be understood as a secondary power distribution device. In other words, a multi-stage power distribution method may be used to power the loads.

[0146] Combination of the above Figures 2 to 6 The connection method between the various components in the power supply system is introduced. The following takes the power supply system 300 as an example to briefly introduce the working method of the power supply system.

[0147] Assume that in the power supply system 300, the default state of the isolation units 141 and 161 used to control the on and off between the bus and the DC / DC circuit is the on state, the default state of the isolation units 142 and 162 used to control the on and off between the bus and the low-voltage battery is the on state, and the default state of the isolation units 1431 to 143n, 1441 to 144m, 1631 to 163n, and 1641 to 164p used to control the on and off between the bus and the load is the off state.

[0148] Scenario 1: How the power supply system works under normal power usage.

[0149] In a normal power supply scenario, when power is supplied to a load in an enabled or working state, the isolation unit corresponding to the load can be controlled to be in an on state, and when power is not required for the load, the isolation unit corresponding to the load is in an off state. Other isolation units can be in a default state. For example, taking the safety load 17n as an example, when the safety load 17n is in a working state, the isolation units 143n and 163n corresponding to the load can be controlled to be in an on state, so that two power supplies can be provided to the load through the circuit 1410 and the circuit 1610. For another example, taking the conventional load 19p as an example, when power is supplied to it, the isolation unit 164p is in an on state, and when power is not required to it, the isolation unit 164p is in an off state.

[0150] Scenario 2: Redundant working scheme of the power supply system when the DC / DC circuit is undervoltage or short-circuited.

[0151] Exemplarily, undervoltage of the DC / DC circuit may refer to the voltage of the output end of the DC / DC circuit (the end connected to the interface 146, 166) being less than or equal to a preset undervoltage threshold (such as 8V, 9V). Undervoltage of the DC / DC circuit may cause the restart of safety loads such as the autonomous driving domain controller and VCU, affecting driving safety.

[0152] When the DC / DC circuit is under-voltage or short-circuited, the isolation units 141 and 161 may be controlled to be disconnected, and the isolation units 142 and 162 may be controlled to be in a conducting state.

[0153] For the first power supply subsystem, the isolation unit 141 is disconnected and the isolation unit 142 is turned on, and the low-voltage battery 131 ensures normal power supply to the loads 17n_1, 18m, etc. through the circuit 1410.

[0154] For the second power supply subsystem, the isolation unit 161 is disconnected and the isolation unit 162 is turned on, and the low-voltage battery 132 ensures normal power supply to the loads 17n_2, 19p, etc. through the circuit 1610.

[0155] In one embodiment, when the functional safety of the isolation units 141 and 142 meets the ASIL B level, for undervoltage or short circuit of the DC / DC circuit, the functional safety level of the first power supply subsystem can reach the ASIL B level. When the functional safety of the isolation units 161 and 162 meets the ASIL B level, for undervoltage or short circuit of the DC / DC circuit, the functional safety level of the second power supply subsystem can reach the ASIL B level. Thus, for undervoltage or short circuit of the DC / DC circuit, the overall functional safety level of the power supply system 300 can reach the ASIL D level.

[0156] Scenario 3: Redundant working scheme of the power supply system when the DC / DC circuit is overvoltage.

[0157] For example, DC / DC circuit overvoltage may refer to the output end of the DC / DC circuit being greater than or equal to a preset overvoltage threshold (such as 14V, 15V). DC / DC circuit overvoltage will affect the bus voltage, and the safety load working in an overvoltage scenario may result in reduced service life, unexpected errors, etc.

[0158] When the DC / DC circuit is over-voltage, the isolation units 141 and 161 may be controlled to be disconnected, and the isolation units 142 and 162 may be controlled to be in a conducting state.

[0159] For the first power supply subsystem, the isolation unit 141 is disconnected and the isolation unit 142 is turned on, and the low voltage battery 131 ensures normal power supply of the loads 17n_1, 18m, etc. Similarly, for the second power supply subsystem, the low voltage battery 132 ensures normal power supply of the loads 17n_2, 19p, etc.

[0160] When the functional safety of the isolation units 141 and 142 meets the ASIL B level, the functional safety level of the first power supply subsystem can reach the ASIL B level for DC / DC circuit overvoltage. When the functional safety of the isolation units 161 and 162 meets the ASIL B level, the functional safety level of the second power supply subsystem can reach the ASIL B level for DC / DC circuit overvoltage. Thus, the overall functional safety level of the power supply system 300 can reach the ASIL D level for DC / DC circuit overvoltage.

[0161] Scenario 4: Redundant working scheme of the power supply system when the low-voltage battery (131, 132) is short-circuited.

[0162] When the low-voltage battery 131 is short-circuited, the isolation unit 142 may be controlled to be disconnected, and the control units 141 , 161 , and 162 may be in a default state.

[0163] When the low-voltage battery 132 is short-circuited, the isolation unit 162 may be controlled to be disconnected, and the control units 141 , 142 , and 161 may be in a default state.

[0164] Taking the short circuit of the low voltage battery 131 as an example, for the first power supply subsystem, the isolation unit 142 is disconnected and the isolation unit 141 is turned on, and the high voltage battery 110 guarantees the normal power supply of the loads 17n_1, 18m, etc. through the DC / DC circuit. The second power supply subsystem can work normally.

[0165] When the functional safety of the isolation units 141 and 142 meets the ASIL B level, the functional safety level of the first power supply subsystem can reach the ASIL B level for a short circuit of the low-voltage battery 131. When the functional safety of the isolation units 161 and 162 meets the ASIL B level, the functional safety level of the second power supply subsystem can reach the ASIL B level for a short circuit of the low-voltage battery 132. Thus, for a short circuit of the low-voltage battery (131, 132), the overall functional safety level of the power supply system 300 can reach the ASIL D level.

[0166] Scenario 5: Working plan of the power supply system in the low-voltage battery charging scenario.

[0167] In one embodiment, when the low voltage batteries 131 and 132 are charged simultaneously, the isolation units 141 , 142 , 161 and 162 may be controlled to be in a conducting state.

[0168] In yet another embodiment, when only the low-voltage battery 131 is charged, the isolation unit 162 may be controlled to be disconnected, and the isolation units 141 , 142 , and 161 may be controlled to be in an on state.

[0169] In yet another embodiment, when only the low-voltage battery 132 is charged, the isolation unit 142 may be controlled to be disconnected, and the isolation units 141 , 161 , and 162 may be controlled to be in an on state.

[0170] In actual usage scenarios, when charging the low-voltage batteries (131, 132), the charging voltage required by the low-voltage batteries (131, 132) may change.

[0171] In one embodiment, the charging voltage required by the low-voltage battery 131 is less than the charging voltage required by the low-voltage battery 132. In this case, only the low-voltage battery 131 can be charged, the isolation unit 162 can be controlled to be disconnected, and the isolation units 141, 142 and 161 can be controlled to be in a conductive state. The DC / DC circuit can charge the low-voltage battery 131 through the circuit 1410 and supply power to the load corresponding to the circuit 1410. Since the isolation unit 161 is in a conductive state, although the isolation unit 162 is disconnected and the DC / DC circuit cannot charge the low-voltage battery 132, the DC / DC circuit can still supply power to the load 191 and the like through the circuit 1610. Furthermore, during the continuous charging process, when the charging voltage required by the low-voltage battery 131 is the same as that of the low-voltage battery 132, the isolation unit 162 can be controlled to be turned on, so that the DC / DC circuit can charge the low-voltage batteries 131 and 132 at the same time.

[0172] In another embodiment, the power supply system 300 can control the power balance between the low-voltage battery 131 and the low-voltage battery 132. For example, when the remaining power of the low-voltage battery 131 is less than that of the low-voltage battery 132, and the difference in the remaining power between the two is greater than or equal to the preset threshold, the isolation unit 162 can be controlled to disconnect, so that only the low-voltage battery 131 can be powered. For another example, when the difference in the remaining power between the low-voltage battery 131 and the low-voltage battery 132 is 10%, 15% or other preset proportions of the total battery capacity of the low-voltage battery 131, it can be considered that the difference in the remaining power between the two is greater than or equal to the preset threshold. For another example, when the difference in the remaining power between the low-voltage battery 131 and the low-voltage battery 132 is greater than or equal to 1.5 ampere hours, 2 ampere hours, or other preset values, it can be considered that the difference in the remaining power between the two is greater than or equal to the preset threshold.

[0173] In another embodiment, the control modules 145 and 165 can obtain the remaining battery power of the low-voltage batteries 131 and 132, and when receiving a charging instruction, can determine to charge only the low-voltage battery 131 or 132, or to charge both the batteries 131 and 132. The control modules 145 and 165 can communicate through the internal circuit of the vehicle to ensure that when charging the low-voltage battery, at most only one of the isolation units 141, 142, 161, and 162 is in a disconnected state.

[0174] In the embodiment of the present application, by adjusting the on-off state between the isolation units 141 , 142 , 161 and 162 , a variety of charging methods can be achieved, and the function of charging control and management of the low-voltage battery 131 and / or 132 can be realized.

[0175] Scenario 6: Redundant working scheme of the power supply system in the scenario where there is a short circuit on the load side.

[0176] When a short circuit occurs in a circuit branch where the load is located, the isolation unit corresponding to the branch is controlled to be disconnected.

[0177] For example, when the conventional load 181 is short-circuited, the isolation unit 1441 may be controlled to be disconnected. For another example, when the conventional load 191 is short-circuited, the isolation unit 1641 may be controlled to be disconnected. For another example, when the safety load 171_1 is short-circuited, the isolation unit 1431 may be controlled to be disconnected. If the safety load 171_2 is normal, the isolation unit 1631 may be controlled to be in a conducting state, thereby ensuring that one circuit of the safety load 171 is powered, and preventing its function from failing.

[0178] Since the safety load in the power supply system may be restarted due to a drop in the bus voltage, in an embodiment of the present application, when a short circuit occurs in a circuit branch where some loads are located, the isolation unit corresponding to the faulty branch in the power supply device can be controlled to be disconnected, so that the faulty branch is isolated from the bus (circuit 1410 and circuit 1460), thereby preventing the faulty branch from affecting the current and voltage of the bus, thereby ensuring normal power supply to other loads and ensuring the normal operation of the safety load.

[0179] It should be noted that in the embodiment of the present application, the high-voltage battery side, the low-voltage battery side, and the load side are relative to the power supply device (140, 160, 170). The high-voltage battery side may refer to the part of the loop before the interface (interface 146, 166) connecting the power supply device and the DC / DC circuit, such as the high-voltage battery, the DC / DC circuit, and the circuit between the high-voltage battery and the DC / DC. The low-voltage battery side may refer to the part of the loop after the interface (interface 147, 167) connecting the power supply device and the low-voltage battery side, such as the low-voltage batteries 131, 132. The load side may refer to the part of the loop after the interface (such as interface 1431, 1641, etc.) connecting the power supply device and the load, such as load 171_1, load 191.

[0180] In the embodiment of the present application, components with a functional safety level of ASIL B are used as isolation units 141, 142, 161, and 162. Through the cooperation between the isolation units 141, 142, 161, and 162, the functional safety of the first and second power supply subsystems can reach the ASIL B level, and the overall functional safety of the power supply system can reach the ASIL D level. In addition, since the functional safety level of the above components used in the power supply device is relatively low, the cost of the power supply device can be reduced.

[0181] The following Figure 5 Taking the power supply system 300 as an example, Figure 7 The power supply devices 140 and 160 are briefly described.

[0182] For example, Figure 7 is a schematic block diagram of a power supply device provided in an embodiment of the present application. Figure 7 As shown, Figure 7 (a) and (b) in the figure respectively show the structural schematic diagrams of the power supply devices 140 and 160.

[0183] Exemplarily, the power supply device 140 may include a control module 145, and the power supply device 160 may include a control module 165. The control module 145 may include a control unit 1 and may further include a management unit 1; the control module 165 may include a control unit 2 and may further include a management unit 2.

[0184] Exemplarily, the control module can be used to obtain the voltage output by the power supply (DC / DC circuit and low-voltage battery), and when the voltage is less than or equal to a preset value, the corresponding isolation unit is controlled to be disconnected.

[0185] In one embodiment, taking the control unit 1 as an example, the control unit 1 can obtain the voltage at the output end of the DC / DC circuit (that is, the voltage of the detection interface 146). For example, when the DC / DC circuit is undervoltage, the isolation unit 141 is controlled to be disconnected. For another example, when the DC / DC circuit is overvoltage, the isolation unit 141 is controlled to be disconnected. This can prevent the fault of the DC / DC circuit from affecting the voltage of the circuit 1410.

[0186] In another embodiment, the control unit 1 can detect the voltage at the output end of the low-voltage battery 131 (in other words, the voltage of the detection interface 147), and when the voltage value is less than or equal to a preset threshold (such as 9.5V, 9.2V), the isolation unit 142 is controlled to disconnect.

[0187] In another embodiment, when the DC / DC circuit is undervoltage or short-circuited, the control unit 2 can control the isolation unit 161 to be disconnected. When the low-voltage battery 132 is short-circuited, the control unit 2 can control the isolation unit 162 to be disconnected.

[0188] In the embodiment of the present application, the isolation units 141, 142, 161, and 162 are bidirectional isolation units. By controlling the corresponding isolation units to disconnect, the connection between the DC / DC circuit or the low-voltage battery and the bus can be completely cut off, thereby ensuring normal power supply to the load.

[0189] In another embodiment, taking the control unit 1 as an example, when the branch where the load (such as the conventional load 181) is located is short-circuited, the isolation unit (such as the isolation unit 1441) corresponding to the control branch is disconnected. In this way, the overcurrent fault caused by the short circuit can be avoided, the drop of the bus voltage caused by the short circuit can be avoided, and the normal power supply of other loads can be guaranteed.

[0190] Exemplarily, the management unit may be used to obtain the operating status of the control module, and when the control module operates abnormally, the isolation unit on the high-voltage battery side of the power supply device may be controlled to be disconnected.

[0191] For example, the control module can be powered by the management unit, which can detect its own output voltage, and when detecting that its own output voltage is abnormal, the isolation unit on the high-voltage battery side of the power supply device can be disconnected, and the isolation unit on the low-voltage battery side can be kept in a conducting state.

[0192] The following takes the control unit 1 and the management unit 1 as examples for introduction.

[0193] In one embodiment, the control unit 1 can be powered by the management unit 1, and the management unit 1 can obtain the voltage at its output end, and when the output voltage exceeds a preset range, the power supply device 140 is controlled to enter a safe mode. For example, the preset range can be (4.9, 5.2), [4.8, 5.2] or other ranges. In the safe mode, the isolation unit 141 on the high-voltage battery side of the power supply device 140 is in a disconnected state, and the isolation unit 142 on the low-voltage battery side is in a conducting state. For the first power supply subsystem, the low-voltage battery 131 supplies power to the load in the power supply subsystem.

[0194] In another embodiment, the management unit 1 may obtain the operating status of the control unit 1, and when the control unit 1 operates abnormally, the power supply device 140 may be controlled to be in a safe mode.

[0195] In another embodiment, the management unit 1 can configure a watchdog for the control unit 1. When the control unit 1 malfunctions (for example, the program run by the control unit 1 runs away, the program runs at an unexpected time, the program does not run in a preset order, etc.), the control unit 1 is controlled to reset and the control module 145 is in a safe mode.

[0196] In some possible implementations, the management unit 1 may include a safety pin, and when it is detected that the control unit 1 operates abnormally, the control module 145 is put into a safety mode through the safety pin.

[0197] Exemplarily, the management unit may store security data, such as a preset threshold for determining whether the voltage at the power output terminal is undervoltage or overvoltage, a preset threshold for determining whether the output voltage of the management unit is normal, etc. When it is detected that the security data has been illegally modified, the power supply device is controlled to be in a safe mode, and the low-voltage battery supplies power to the load of the corresponding power supply subsystem.

[0198] Exemplarily, the management unit 1 and the management unit 2 may be a system basis chip (SBC), and the control unit 1 and the control unit 2 may be a microcontroller unit (MCU). For example, the control module 145 may include SBC1 and MCU1, and the control module 165 may include SBC2 and MCU2.

[0199] In one embodiment, the functional safety level of MCU1 and MCU2 is ASIL B, and MCU1 and MCU2 adopt heterogeneous design to avoid common cause failure of MCU1 and MCU2.

[0200] In another embodiment, the functional safety level of SBC1 and SBC2 is ASIL B, and SBC1 and SBC2 adopt heterogeneous design to avoid common cause failure of SBC1 and SBC2.

[0201] When the functional safety of MCU1 , MCU2 , SBC1 , and SBC2 can meet the requirements of ASILB, the overall functional safety level of the control unit of the power supply system 300 can reach the ASILD level.

[0202] In some possible implementations, MCU1 and MCU2 may be products of different manufacturers, and SBC1 and SBC2 may be products of different manufacturers.

[0203] For example, Figure 8 1 is a schematic diagram of the structure of another power supply subsystem provided in an embodiment of the present application. The power supply subsystem 500 can supply power to the load 211 and the load 212 through the power supply device 150. The load 211 can be connected to the circuit 1511 via the power supply interface 1581. The load 212 can be connected to the circuit 1512 through the power supply interface 1582. The power supply subsystem 500 can be understood as an extension of the power supply subsystem 100 or 200. The power supply device 150 can be understood as an extension of the power supply device 140 or 160. The load 211 and / or 212 can be a safety load or a conventional load.

[0204] In one embodiment, the power supply subsystem 500 may include a capacitor 1549, which may be determined based on the length and diameter of the wiring harness of the power supply subsystem. For example, in the case of instantaneous large currents such as when the capacitive load is started, the output terminal is short-circuited to the ground, and the power supply is short-circuited to the ground in the power supply system, the inductance in the power supply system will delay the rate of change of the current in the loop, thereby affecting the timeliness of the power supply. The capacitance of the capacitor 1549 may be determined based on the length and diameter of the power line in the power supply subsystem 500, so that the capacitor 1549 can compensate for the effect of the inductance in the power supply loop on the rate of change of the power supply current, so that the power supply device or the power supply system can still ensure a safe power supply voltage range under extreme current conditions. For another example, in the power supply subsystem, the low-voltage battery 131 is connected to the interface 147 through a wiring harness with a length of 7 meters and a cross-sectional area of ​​35 square millimeters. The capacitance of the capacitor 1549 may be determined to be 2.2*10 based on the length and cross-sectional area of ​​the wiring harness. -4 Farad (F) The above description of the capacitor 1549 is only an example. In the specific implementation process, the capacitance of the capacitor may also be other values, which is not limited in the embodiment of the present application.

[0205] In another embodiment, the load 211 may be an inductive load, and the power supply device 150 may include a freewheeling diode 1541. By providing the freewheeling diode 1541, a freewheeling effect can be played on the inductive load or the inductance in the wire to prevent unexpected overvoltage damage to the load 211.

[0206] In another embodiment, the load 212 may be a capacitive load, and the power supply circuit 1512 of the load may be connected in parallel with a pre-charging circuit, in which a pre-charging switch 1542 and a pre-charging resistor 1543 may be provided. The on-off of the pre-charging switch 1542 may be controlled by the control module 145. When it is necessary to power the load 212, the pre-charging switch 1542 may be turned on first, and then the isolation unit 1532 may be turned on. By setting the pre-charging circuit, the impact current at the moment of turn-on can be reduced to avoid the problem of switch misprotection. The on-off of the pre-charging switch 1542 may be controlled by the control module 145.

[0207] In another embodiment, by setting a static circuit wake-up threshold, the entire vehicle can be awakened when the static current of the entire vehicle is too large, and the isolation unit corresponding to the abnormal load can be controlled to disconnect, thereby avoiding damage to the low-voltage battery due to power loss. For example, the load 211 can be a central control screen, and the control module 145 of the power supply device 150 can monitor the current in the power supply circuit. When the working current in the branch 1511 is greater than or equal to the wake-up threshold (such as 100 mA) during the sleep process of the central control screen, the control module 145 can control the isolation unit 1531 to disconnect. For another example, the wake-up threshold corresponding to the load can be determined according to the working characteristics of each load in the power supply system.

[0208] The low-voltage battery involved in the present application (such as low-voltage batteries 130, 131, 132) can be a 12V battery, or a 24V battery, or a 36V battery, or a 48V battery. The embodiments of the present application do not limit the specific form of the low-voltage battery.

[0209] For example, Fig. 9 It is a process diagram of a power supply method provided in an embodiment of the present application. The method can be executed by the above-mentioned power supply device, or can be executed by a processor or chip in the power supply device, or can be executed by a power supply system or a vehicle.

[0210] S910, detecting whether a first fault occurs.

[0211] S920: When a first fault is detected, control at least one of the voltage conversion unit and the first battery to supply power to a first load.

[0212] Optionally, the first fault may include at least one of the following: the output of the voltage conversion unit is greater than or equal to the first threshold, the output of the voltage conversion unit is less than or equal to the second threshold, and the voltage conversion unit is short-circuited, and controlling at least one of the voltage conversion unit and the first battery to power the first load may include: controlling the first isolation unit to disconnect and controlling the second isolation unit to turn on, so as to power the first load through the first battery.

[0213] Optionally, the first fault may include at least one of the following: the output of the first battery is less than or equal to a third threshold and the first battery is short-circuited, and controlling at least one of the voltage conversion unit and the first battery to power the first load may include: controlling the second isolation unit to disconnect and controlling the first isolation unit to turn on, and powering the first load through the voltage conversion unit.

[0214] For example, Fig.10 This is a schematic diagram of a power supply method provided in an embodiment of the present application. The method can be executed by the power supply system in the above embodiment, or can also be executed by the power supply device in the above embodiment, or can be executed by the control unit, processor or chip in the power supply system. The method 1000 may include:

[0215] S1010, detecting whether a second fault occurs.

[0216] Exemplarily, the power supply system may include the power supply system 300 in the above-mentioned embodiment, the first battery and the second battery may include the low-voltage batteries in the above-mentioned embodiment (for example, low-voltage batteries 131 and 132, respectively), the voltage conversion unit may include the voltage conversion unit in the above-mentioned embodiment (for example, a DC / DC circuit), and the first load may include the safety load in the above-mentioned embodiment (for example, safety loads 171, 17n).

[0217] S1020: When a second fault is detected, control at least two of the voltage conversion unit, the first battery, and the second battery to supply power to the safety load.

[0218] Exemplarily, the second fault includes, but is not limited to: abnormal output of the voltage conversion unit, abnormal output of the first battery and / or abnormal output of the second battery.

[0219] The output of the voltage conversion unit is abnormal, including but not limited to output overvoltage of the voltage conversion unit, output undervoltage of the voltage conversion unit, and short circuit of the voltage conversion unit.

[0220] The battery output is abnormal, including but not limited to battery output undervoltage and first battery short circuit.

[0221] For example, when the second fault is detected, the specific method of controlling at least two of the voltage conversion unit, the first battery and the second battery to supply power to the first load can refer to Figures 5 to 7 The description of the corresponding parts of the embodiment will not be repeated here.

[0222] Optionally, the second fault includes that the output of the voltage conversion unit is greater than or equal to the first threshold, the output of the voltage conversion unit is less than or equal to the second threshold, or the voltage conversion unit is short-circuited, and the controlling of the voltage conversion unit, at least two of the first battery and the second battery to power the first load includes: controlling the first isolation unit and the sixth isolation unit to be disconnected, and controlling the second isolation unit and the seventh isolation unit to be turned on, so as to power the first load through the first battery and the second battery.

[0223] Optionally, the second fault includes that the output of the first battery is less than or equal to a third threshold or the first battery is short-circuited, and the controlling of at least two of the voltage conversion unit, the first battery and the second battery to power the first load includes: controlling the second isolation unit to be disconnected, and controlling the first isolation unit, the sixth isolation unit and the seventh isolation unit to be turned on, to power the first load through the voltage conversion unit and the second battery.

[0224] Optionally, the method may further include: acquiring battery status information of the first battery and the second battery; and controlling power balancing between the first battery and the second battery according to the battery status information.

[0225] Optionally, controlling the charge balance between the first battery and the second battery includes: when the charge difference between the first battery and the second battery is greater than or equal to a fourth threshold, controlling the seventh isolation unit to be disconnected, and controlling the first isolation unit, the second isolation unit and the sixth isolation unit to be turned on.

[0226] In one embodiment, taking the power supply system 300 as an example, the MCU1 of the power supply device 140 and the MCU2 of the power supply device 160 can obtain the remaining battery power of the low-voltage batteries 131 and 132. When receiving a charging instruction, the MCU1 and the MCU2 can determine to charge only one low-voltage battery or charge two low-voltage batteries. The MCU1 and the MCU2 can communicate through the internal circuit of the vehicle, so that when charging the low-voltage battery, at most only one isolation unit among the isolation units 141, 142, 161 and 162 is disconnected.

[0227] An embodiment of the present application also provides a vehicle, which includes the above-mentioned power supply device or the above-mentioned power supply system.

[0228] The embodiment of the present application also provides a computer program product, which includes a computer program code. When the computer program code runs on a computer, the computer implements the method in the embodiment of the present application.

[0229] The embodiment of the present application also provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the computer implements the method in the embodiment of the present application.

[0230] The embodiment of the present application also provides a chip, including a circuit, for executing the method in the embodiment of the present application.

[0231] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0232] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0233] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0234] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0235] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0236] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0237] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A power supply device, characterized in that: comprising a first circuit, a second circuit, a first isolation unit and a second isolation unit, The first end of the first isolation unit is electrically connected to the first circuit, the second end of the first isolation unit is used to be connected to the first output end of the voltage conversion unit, and the first isolation unit is used to control the connection between the first circuit and the first output end of the voltage conversion unit; A first end of the second isolation unit is electrically connected to the first circuit, a second end of the second isolation unit is used to be connected to the first battery, and the second isolation unit is used to control the connection and disconnection between the first circuit and the first battery; The second circuit is electrically connected to the first circuit and is used to supply power to the first load; Among them, the first isolation unit and the second isolation unit are bidirectional isolation units, and the bidirectional isolation unit includes a first switch, a second switch, a first diode and a second diode, the first diode is connected in parallel with the first switch, the second diode is connected in parallel with the second switch, the first switch is connected in series with the second switch, and the anode of the first diode is connected to the anode of the second diode.

2. The power supply device according to claim 1, characterized in that: The device also includes: a first control unit, configured to obtain first status information, wherein the first status information is used to indicate a status of the first output terminal of the voltage conversion unit and / or an output terminal of the first battery; When the first state information indicates that the state of the first output terminal of the voltage conversion unit is abnormal, controlling the first isolation unit to be disconnected and controlling the second isolation unit to be turned on; or, When the first status information indicates that the output of the first battery is abnormal, the second isolation unit is controlled to be disconnected, and the first isolation unit is controlled to be turned on.

3. The power supply device according to claim 2, characterized in that: The device also includes: The first management unit is used to control the first isolation unit to be disconnected and control the second isolation unit to be connected when the first control unit operates abnormally.

4. The power supply device according to claim 3, characterized in that: The first load is a security load, and the first management unit is further used to: When the first control unit operates abnormally, after determining that the first load is powered normally, the first control unit is controlled to restart.

5. The power supply device according to claim 3 or 4, characterized in that: The first management unit is further configured to: supplying power to the first control unit via the first port of the first management unit; The output state of the first port is obtained, and when the output of the first port is abnormal, the first isolation unit is controlled to be disconnected, and the second isolation unit is controlled to be turned on.

6. The power supply device according to any one of claims 1 to 5, wherein the first load is a safety load, the safety load at least comprises a first power supply interface and a second power supply interface, the second circuit is connected to the first power supply interface of the first load, The power supply device further includes a third circuit, a fourth circuit, a third isolation unit and a fourth isolation unit. The first end of the third isolation unit is electrically connected to the third circuit, the second end of the third isolation unit is used to be connected to the second output end of the voltage conversion unit, and the third isolation unit is used to control the connection between the third circuit and the second output end of the voltage conversion unit; The first end of the fourth isolation unit is electrically connected to the third circuit, the second end of the fourth isolation unit is used to connect to the second battery, the fourth isolation unit is used to control the connection between the third circuit and the second battery, and the third isolation unit and the fourth isolation unit are the bidirectional isolation units; A fourth circuit is electrically connected to the third circuit and is used to supply power to the first load.

7. The power supply device according to any one of claims 2 to 6, characterized in that: The power supply device further includes a fifth isolation unit, the second circuit supplies power to the first load through the fifth isolation unit, and the fifth isolation unit is used to control the connection and disconnection between the second circuit and the first load; The first control unit is further configured to: When the first load is short-circuited, the fifth isolation unit is controlled to be disconnected.

8. The power supply device according to claim 7, characterized in that: The device also includes: a second control unit, used for acquiring second status information, where the second status information is used for indicating a status of the second output terminal of the voltage conversion unit and / or the second battery; When the second state information indicates that the state of the second output terminal of the voltage conversion unit is abnormal, controlling the third isolation unit to be disconnected, and controlling the fourth isolation unit to be turned on; or, When the second state information indicates that the output of the second battery is abnormal, the fourth isolation unit is controlled to be disconnected, and the third isolation unit is controlled to be turned on.

9. The power supply device according to claim 8, characterized in that: The device also includes: a second management unit, configured to control the third isolation unit to be disconnected and the fourth isolation unit to be turned on when the second control unit operates abnormally; and / or When the second control unit operates abnormally, after determining that the first load is powered normally, the second control unit is controlled to restart.

10. The power supply device according to any one of claims 1 to 9, characterized in that: An overcurrent protection threshold of the first isolation unit is smaller than an overcurrent protection threshold of the second isolation unit.

11. A power supply system, characterized in that: comprising a first power supply unit and a first battery, wherein the first power supply unit comprises a first power supply unit and a first battery, The first power supply unit includes a first circuit, a second circuit, a first isolation unit and a second isolation unit. The first end of the first isolation unit is electrically connected to the first circuit, the second end of the first isolation unit is used to be connected to the first output end of the voltage conversion unit, and the first isolation unit is used to control the connection between the first circuit and the first output end of the voltage conversion unit; A first end of the second isolation unit is electrically connected to the first circuit, a second end of the second isolation unit is connected to the first battery, and the second isolation unit is used to control the connection and disconnection between the first circuit and the first battery; The second circuit is electrically connected to the first circuit and is used to supply power to the first load; The first isolation unit and the second isolation unit are bidirectional isolation units, and the bidirectional isolation unit includes a first switch, a second switch, a first diode and a second diode, the first diode is connected in parallel with the first switch, the second diode is connected in parallel with the second switch, the first switch is connected in series with the second switch, and the anode of the first diode is connected to the anode of the second diode.

12. The system according to claim 11, characterized in that The power supply system further includes a second power supply unit and a second battery, The second power supply unit includes a fifth circuit, a sixth circuit, a sixth isolation unit and a seventh isolation unit, The first end of the sixth isolation unit is electrically connected to the fifth circuit, the second end of the sixth isolation unit is used to be connected to the second output end of the voltage conversion unit, and the sixth isolation unit is used to control the connection between the fifth circuit and the second output end of the voltage conversion unit; The first end of the seventh isolation unit is electrically connected to the fifth circuit, the second end of the seventh isolation unit is electrically connected to the second battery, the seventh isolation unit is used to control the connection and disconnection between the fifth circuit and the second battery, and the sixth isolation unit and the seventh isolation unit are the bidirectional isolation units; The sixth circuit is electrically connected to the fifth circuit and is used to supply power to the first load.

13. A power supply method, characterized in that: Applied to a first power supply unit, the first power supply unit includes a first circuit, a second circuit, a first isolation unit and a second isolation unit, The first end of the first isolation unit is electrically connected to the first circuit, the second end of the first isolation unit is used to be connected to the first output end of the voltage conversion unit, and the first isolation unit is used to control the connection between the first circuit and the first output end of the voltage conversion unit; A first end of the second isolation unit is electrically connected to the first circuit, a second end of the second isolation unit is used to be connected to the first battery, and the second isolation unit is used to control the connection and disconnection between the first circuit and the first battery; The second circuit is electrically connected to the first circuit and is used to supply power to the first load; The first isolation unit and the second isolation unit are bidirectional isolation units, and the bidirectional isolation unit includes a first switch, a second switch, a first diode and a second diode, the first diode is connected in parallel with the first switch, the second diode is connected in parallel with the second switch, the first switch is connected in series with the second switch, and the anode of the first diode is connected to the anode of the second diode; The method comprises: When a first fault is detected, at least one of the voltage conversion unit and the first battery is controlled to supply power to the first load.

14. The method according to claim 13, characterized in that The first fault includes at least one of the following: the output of the voltage conversion unit is greater than or equal to a first threshold, the output of the voltage conversion unit is less than or equal to a second threshold, and the voltage conversion unit is short-circuited, and the controlling at least one of the voltage conversion unit and the first battery to supply power to the first load includes: The first isolation unit is controlled to be disconnected, and the second isolation unit is controlled to be connected, so that the first load is powered by the first battery.

15. The method according to claim 13, characterized in that The first fault includes at least one of the following: the output of the first battery is less than or equal to a third threshold and the first battery is short-circuited, and the controlling at least one of the voltage conversion unit and the first battery to supply power to the first load includes: The second isolation unit is controlled to be disconnected, and the first isolation unit is controlled to be turned on, so as to supply power to the first load through the voltage conversion unit.

16. A vehicle, characterized in that: comprising a high-voltage battery and a voltage conversion unit, wherein the high-voltage battery is electrically connected to an input terminal of the voltage conversion unit; The vehicle further comprises a power supply device according to any one of claims 1 to 10, wherein a first isolation unit of the power supply device is electrically connected to a first output terminal of the voltage conversion unit; or The vehicle further comprises a power supply system as claimed in claim 11 or 12, wherein a first isolation unit of the power supply system is electrically connected to a first output terminal of the voltage conversion unit.

17. A computer-readable storage medium, characterized in that: Instructions are stored thereon, and when the instructions are executed by a processor, the processor implements the method according to any one of claims 13 to 15.

18. A chip, characterized in that: The chip comprises a circuit for performing the method according to any one of claims 13 to 15 .

19. A computer program product, characterized in that The computer program product comprises: a computer program code, and when the computer program code is run on a computer, the computer is enabled to execute the method according to any one of claims 13 to 15.

Images