Power supply redundancy system

Abstract

A power supply redundancy system includes: a main battery that supplies power to a first load unit and a second load unit; the auxiliary energy storage device at least supplies power to the second load unit; a switching unit that switches power supply paths from the main battery and the sub-energy storage device to the first load unit and the second load unit; the control board is provided with a switching control unit, and the switching control unit is used for switching and controlling the switching unit; and a case accommodating at least the main battery, the secondary energy storage device, and the switching unit. The control board is operable by receiving a supply of power from the primary battery and the secondary energy storage device.

Description

Technical Field

[0001] The invention relates to a power supply redundancy system. Background Art

[0002] In the related art, there is a power supply redundancy system mounted on a vehicle, which supplies power to a load from a sub-battery when a main battery becomes abnormal, etc. As such a power supply redundancy system, there is also a system including a first load unit, the first load unit including auxiliary equipment such as an air conditioning device or a car navigation device in addition to functions required for vehicle travel, and a second load unit for performing a degraded function such as at least evacuating the vehicle to a safe place when power cannot be supplied to the first load unit, and having a redundant configuration for the loads (see Patent Document 1).

[0003] Reference List

[0004] Patent Literature

[0005] Patent Document 1: JP2021-119728A Summary of the invention

[0006] However, in the power supply redundant system disclosed in Patent Document 1, the main battery, the sub-battery, and the switching unit for switching the power supply path from the main battery and the sub-battery are provided separately, and the main battery, the sub-battery, and the switching unit are connected by a thick and difficult-to-bend wire harness. Therefore, due to the bending of the wire harness, it is necessary to set these three elements at a certain distance, and there is a limitation in the close setting, making it difficult to reduce the size of the power supply redundant system.

[0007] The battery pack in the related art is equipped with a control circuit for controlling the switching unit, and the control circuit is powered by the battery pack. Therefore, a redundant configuration is not incorporated into the control circuit, and when a problem occurs in the power supply to the control circuit, the power supply redundancy system cannot perform appropriate protection.

[0008] The present invention aims to solve such problems in the related art. The object of the present invention is to provide a power supply redundancy system which is smaller in size and can provide more appropriate protection.

[0009] The power supply redundancy system of the present invention includes a main battery for supplying power to a first load unit and a second load unit, a secondary energy storage device for supplying power to at least the second load unit, a switching unit for switching the power supply path from the main battery and the secondary energy storage device to the first load unit and the second load unit, a control board on which a switching control unit is mounted, a switching control unit for switching and controlling the switching unit, and a housing for accommodating at least the main battery, the secondary energy storage device, and the switching unit. The control board can be operated by receiving power supply from the main battery and the secondary energy storage device.

[0010] According to the present invention, it is possible to provide a power supply redundancy system which is reduced in size and capable of providing more appropriate protection. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 is a block diagram of a power supply redundancy system according to an embodiment of the present invention;

[0012] Figure 2 It is shown Figure 1 A perspective view of the dual battery shown;

[0013] Figure 3 It is shown Figure 1 a block diagram showing details of the control board;

[0014] Figure 4 is a block diagram showing the operation of the power supply redundant system according to the present embodiment, and shows an example in a normal state;

[0015] Figure 5 is a block diagram showing the operation of the power supply redundant system according to the present embodiment, and shows an example when the main battery or the DC / DC converter is in an abnormal state;

[0016] Figure 6 is a block diagram showing the operation of the power supply redundant system according to the present embodiment, and shows an example when the sub-battery or the second load unit is in an abnormal state;

[0017] Figure 7 is a block diagram showing a power supply redundancy system according to a second embodiment;

[0018] Figure 8 is a block diagram showing a power supply redundancy system according to a third embodiment;

[0019] Fig. 9 is a block diagram showing a power supply redundant system according to a fourth embodiment;

[0020] Fig.10 is a block diagram showing a power supply redundancy system according to a fifth embodiment;

[0021] Fig.11 is a block diagram showing a power supply redundant system according to a sixth embodiment;

[0022] Fig.12 is a block diagram showing a power supply redundancy system according to a seventh embodiment;

[0023] Fig.13 is a block diagram showing a power supply redundant system according to an eighth embodiment;

[0024] Fig.14 is a block diagram showing a power supply redundant system according to a ninth embodiment;

[0025] Fig.15 is a block diagram showing a power supply redundant system according to a tenth embodiment;

[0026] Fig.16 is a block diagram showing a power supply redundancy system according to an eleventh embodiment;

[0027] Fig.17 is a block diagram showing a power supply redundant system according to a twelfth embodiment; and

[0028] Fig.18 is a block diagram showing a power supply redundant system according to a thirteenth embodiment. DETAILED DESCRIPTION

[0029] The present invention will be described below with reference to preferred embodiments. The present invention is not limited to the embodiments to be described below, and the embodiments may be appropriately changed without departing from the scope of the present invention. In the embodiments described below, there may be illustrations and descriptions in which a part of the configuration is omitted, and it goes without saying that known or well-known techniques are appropriately applied to the details of the omitted techniques within the scope not contradictory to the contents described below.

[0030] Figure 1 FIG. 1 is a block diagram of a power supply redundancy system according to a first embodiment of the present invention. Figure 1 As shown, the power supply redundant system 1 is installed on an electric vehicle or the like that performs autonomous driving, and can supply power to a first load unit LO1 and a second load unit LO2. In the power supply redundant system 1, the first load unit LO1 includes loads necessary for the vehicle to travel, such as a steering device and a braking device, and loads corresponding to auxiliary devices such as air conditioners and audio devices. The second load unit LO2 is implemented by loads necessary for the vehicle to travel, such as a steering device and a braking device. For example, when the power supply redundant system 1 according to the present embodiment is installed on an autonomous driving vehicle, autonomous driving is usually performed by supplying power to the first load unit LO1. On the other hand, in the event of an abnormality in the main battery (see reference numeral B1) or in a similar situation to be described later, the power supply redundant system 1 supplies power to the second load unit LO2 and performs autonomous driving, such as evacuating the vehicle to a safe place.

[0031] The first load unit LO1 and the second load unit LO2 are not limited to the above example as long as the second load unit LO2 exhibits a more degraded function than the first load unit LO1. In the following description, an example will be described in which the power supply redundant system 1 is installed on an autonomous driving vehicle, and the first load unit LO1 and the second load unit LO2 are as described above.

[0032] In addition to the first load unit LO1 and the second load unit LO2, the power supply redundancy system 1 also includes a DC / DC converter (step-down unit) 10, a dual battery 20, a control board 30, an operating voltage generating unit 40, and sensors S1 and S2. The dual battery 20 includes a main battery B1, a secondary battery (secondary energy storage device) B2, and a first switching unit SW1.

[0033] The DC / DC converter 10 receives a voltage higher than the main battery B1 and the sub-battery B2 (several hundred volts, 48 ​​volts, etc.) and reduces the voltage. The DC / DC converter 10 is connected to the first load unit LO1 and can provide reduced voltage power to the first load unit LO1.

[0034] Figure 2 for Figure 1 A perspective view of the dual battery 20 is shown. Figure 2 As shown, the dual battery 20 includes terminals A to C, and a housing BO that accommodates at least the main battery B1 , the sub-battery B2 , and the first switching unit SW1 , in addition to the main battery B1 , the sub-battery B2 , and the first switching unit SW1 .

[0035] In the dual battery 20, terminal A is connected to the DC / DC converter 10, and terminal B is grounded. Terminal C is connected to the second load unit LO2. Terminal A in the dual battery 20 is connected to the positive electrode side of the main battery B1. Terminal B is connected to the negative electrode sides of the main battery B1 and the sub-battery B2. Terminal C is connected to the positive electrode side of the sub-battery B2. The first switching unit SW1 is provided on the connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2. The main battery B1, the sub-battery B2, and the first switching unit SW1 enter a switching state through, for example, a bus bar that allows a large current.

[0036] The main battery B1 is implemented by a rechargeable secondary battery. The main battery B1 is connected to the DC / DC converter 10 via the terminal A, and can store power using power from the DC / DC converter 10 at times other than, for example, during autonomous driving. The main battery B1 is connected to the first load unit LO1, and is also connected to the second load unit LO2 via the first switching unit SW1 and the terminal C. Therefore, the main battery B1 according to the present embodiment can supply power to both the first load unit LO1 and the second load unit LO2.

[0037] Similar to the main battery B1, the sub-battery B2 is implemented by a rechargeable secondary battery. The sub-battery B2 may be of the same type and capacity as the main battery B1, or may be of a different type or capacity. The sub-battery B2 is connected to the second load unit LO2 via the terminal C. Therefore, the sub-battery B2 according to the present embodiment can supply power to the second load unit LO2. Since the sub-battery B2 is also connected to the first load unit LO1 via the first switching unit SW1 and the terminal A, the sub-battery B2 can supply power to the first load unit LO1. In addition, the sub-battery B2 can store power using power from the DC / DC converter 10 at times other than during autonomous driving.

[0038] The first switching unit SW1 is implemented by a switch such as a semiconductor, etc. The first switching unit SW1 can be changed between an open state and a closed state according to a command from the control board 30 .

[0039] A plurality of sensors S1, S2 detect at least one abnormality in the main battery B1 and the sub-battery B2. The first sensor S1 detects an abnormality in the DC / DC converter 10 or the main battery B1, and is implemented by, for example, a voltage sensor externally attached near the terminal A. The second sensor S2 detects an abnormality in the sub-battery B2 or the second load unit LO2, and is, for example, a voltage sensor externally attached near the terminal C. The first sensor S1 and the second sensor S2 transmit sensor signals corresponding to the detected voltage values ​​to the control board 30.

[0040] The first sensor S1 and the second sensor S2 are not limited to voltage sensors, but can also be implemented by current sensors. In particular, near the terminal C, when a short circuit fault or the like occurs in the second load unit LO2, the current change occurs earlier than the voltage change, so it is preferred that the second sensor S2 is configured to include a current sensor. In addition, the sensors S1 and S2 are externally attached to the dual battery 20, but are not particularly limited to being externally attached to the dual battery 20, and are preferably built-in. This is because when the sensors S1 and S2 are built-in, the switching control of the first switching unit SW1 can be performed faster by using analog operation. In addition, the first switching unit SW1 is not limited to the case of switching by analog operation, and can be switched by microcomputer operation.

[0041] The control board 30 is used to control the power supply redundant system 1. In the present embodiment, the control board 30 is configured to operate by receiving power supply from both the main battery B1 and the sub-battery B2. In the present embodiment, the control board 30 is disposed outside the outer shell BO constituting the dual battery 20. However, the present invention is not limited thereto, and the control board 30 may be disposed within the shell BO as an element of the dual battery 20.

[0042] The operating voltage generating unit 40 generates an operating voltage (e.g., 5V) for the control board 30 and is implemented by a regulator using an OR circuit. The operating voltage generating unit 40 generates an operating voltage for the control board 30 in a state where power is supplied from at least one of the main battery B1 and the sub-battery B2. The operating voltage generating unit 40 is also disposed outside the outer shell BO constituting the dual battery 20. However, the present invention is not limited thereto, and the control board 30 may be disposed within the shell BO as an element of the dual battery 20.

[0043] Figure 3 To display Figure 1 A block diagram of the control board 30 is shown in detail. Figure 3 As shown, the control board 30 includes a voltage input unit 31 , an AD converter 32 , an abnormality determination unit 33 , a switching control unit 34 , a reference voltage generation unit 35 , and an operation assurance unit 36 ​​.

[0044] The voltage input unit 31 is for receiving the operating voltage from the operating voltage generating unit 40. Each functional unit of the control board 30 operates by receiving power from the voltage input unit 31.

[0045] The AD converter 32 receives analog sensor signals from a plurality of sensors S1 and S2 and digitizes the analog sensor signals. The abnormality determination unit 33 determines the abnormality based on the sensor signal digitized by the AD converter 32. In the present embodiment, when the sensor signal from the first sensor S1 is an abnormal value, the abnormality determination unit 33 determines that the main battery B1 or the DC / DC converter 10 is in an abnormal state. When the sensor signal from the second sensor S2 is an abnormal value, the abnormality determination unit 33 determines that the sub-battery B2 or the second load unit LO2 is in an abnormal state. The abnormality determination unit 33 is not limited to the case where the abnormality determination is performed based on the sensor signal digitized by the AD converter 32, and preferably performs the abnormality determination using an analog circuit, for example, when the analog sensor signal is input by a comparator and exceeds a determination threshold, performs the abnormality determination. This is because when an analog circuit is used, it is easier to respond immediately when an abnormality is determined.

[0046] The switching control unit 34 performs switching control on the first switching unit SW1. By switching the first switching unit SW1 by the switching control unit 34, at least one of the first load unit LO1 and the second load unit LO2 can be operated, and for example, a minimum restriction function related to automatic driving is ensured.

[0047] The reference voltage generating unit 35 is a functional unit that generates a reference voltage. The operation guarantee unit 36 ​​guarantees the operation of the sensors S1 and S2. The operation guarantee unit 36 ​​has, for example, Figure 1The path shown is disconnected and only the reference voltage is applied to the sensors S1 and S2. In the state where only the reference voltage is applied, sensor signals corresponding to the reference voltage are output from the sensors S1 and S2. The operation guarantee unit 36 ​​checks whether the sensor signal corresponding to the reference voltage is output at this time, and determines whether the sensors S1 and S2 are operating normally. When the operation guarantee unit 36 ​​determines that the sensors S1 and S2 are not operating properly, a predetermined warning or the like is issued. For example, the reference voltage generated by the reference voltage generating unit 35 is also used as the reference voltage of the AD converter 32.

[0048] Next, the operation of the power supply redundant system 1 according to the present embodiment will be described. Figures 4 to 6 : is a block diagram showing the operation of the power supply redundant system 1 according to the present embodiment. Figure 4 An example in a normal state is shown. Figure 5 An example is shown when the main battery B1 or the DC / DC converter 10 is in an abnormal state. Figure 6 An example in which the sub-battery B2 or the second load unit LO2 is in an abnormal state is shown. Figures 4 to 6 In the figure, the bold line indicates the flow of current.

[0049] First, if Figure 4 As shown, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the first switching unit SW1. In this state, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. In addition, power can be supplied from the sub-battery B2 to the second load unit LO2. Power can be supplied from the sub-battery B2 to the first load unit LO1.

[0050] like Figure 5 As shown, it is assumed that an abnormality such as a short-circuit fault occurs in the DC / DC converter 10 or the main battery B1. In this case, the switching control unit 34 disconnects the first switching unit SW1. In this state, since an abnormality occurs in the DC / DC converter 10 or the main battery B1, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0051] like Figure 6As shown, it is assumed that an abnormality such as a short-circuit fault occurs in the sub-battery B2 or the second load unit LO2. In this case as well, the switching control unit 34 disconnects the first switching unit SW1. In this state, a process of disconnecting the sub-battery B2 in which an abnormality has occurred is performed. Therefore, power can be supplied from the DC / DC converter 10 or the main battery B1 to the first load unit LO1 without being affected by the abnormality on the sub-battery B2 side, and automatic driving or the like can be performed.

[0052] Next, the operation of the redundant power supply system 1 according to the present embodiment will be described. First, in the redundant power supply system 1 according to the present embodiment, the main battery B1, the sub-battery B2, and the first switching unit SW1 are connected by a bus bar or the like, and are housed in the same housing BO. Therefore, it is not necessary to connect the three elements with a large-diameter wire harness. Therefore, it is not necessary to ensure the distance between the three elements due to the influence of the wire harness having a large diameter, and the size of the redundant power supply system 1 is reduced.

[0053] In addition, in the above Figure 5 In the example shown, an abnormality occurs on the main battery B1 side, but the sub-battery B2 is normal. Therefore, the operating voltage generating unit 40 supplies the operating voltage to the control board 30 through the sub-battery B2. Figure 6 In the example shown, an abnormality occurs on the sub-battery B2 side, but the main battery B1 is normal. Therefore, the operating voltage generating unit 40 supplies the operating voltage to the control board 30 through the main battery B1. Therefore, the control board 30 also has a redundant configuration, which contributes to more appropriate protection.

[0054] In this way, according to the power supply redundancy system 1 in the first embodiment, since the main battery B1, the sub-battery B2 and the first switching unit SW1 are housed in the same housing BO, it is not necessary to use a large-diameter wire harness to connect the main battery B1, the sub-battery B2 and the first switching unit SW1, and the size can be reduced. Since the control board 30 can operate by receiving power supply from both the main battery B1 and the sub-battery B2, a redundant configuration is also applied to the control circuit. Therefore, even when the power supply from one side is cut off, the control board 30 can operate the first switching unit SW1 by the power supply from the other side, and more appropriate protection can be achieved. Therefore, the size can be reduced and more appropriate protection can be achieved.

[0055] In addition, when only the reference voltage is applied to the sensors S1 and S2, it is determined whether the sensors S1 and S2 are operating normally based on the sensor signals. Therefore, for example, when the vehicle is stopped, by applying the reference voltage to the sensors S1 and S2 and checking whether the sensor signals corresponding to the reference voltage are obtained, the operation of the sensors S1 and S2 can be guaranteed.

[0056] Next, a second embodiment according to the present invention will be described. The power supply redundant system according to the second embodiment is similar to the power supply redundant system of the first embodiment except for a part of the configuration and operation. Hereinafter, the differences from the first embodiment will be described.

[0057] Figure 7 2 is a block diagram of a redundant power supply system according to a second embodiment. Unlike the dual battery 20 according to the first embodiment, the dual battery 21 according to the second embodiment has two switching units SW1 and SW2.

[0058] The dual battery 21 according to the second embodiment will be described in detail. The dual battery 21 according to the second embodiment includes a first switching unit SW1 and a second switching unit SW2 on a connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2. Of the two switching units SW1 and SW2, the main battery B1 side is the first switching unit SW1, and the sub-battery B2 side is the second switching unit SW2. The switching control unit 34 of the control board 30 controls the switching units SW1 and SW2 to switch between an open state and a closed state. In the second embodiment, the terminal C is connected to a connection point P1 located between the first switching unit SW1 and the second switching unit SW2.

[0059] Furthermore, in the second embodiment, the sub-battery B2 includes an abnormality detection unit for detecting an abnormality in the sub-battery B2 and transmitting information to the control board 30 when the abnormality is detected. Therefore, the abnormality determination unit 33 of the control board 30 can determine three types of abnormalities, namely, an abnormality in the DC / DC converter 10 or the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0060] Next, we will refer to Figure 7 The operation of the power supply redundant system 2 according to the second embodiment is described. First, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the first switching unit SW1 and opens the second switching unit SW2. Therefore, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. On the other hand, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power cannot be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0061] The switching control unit 34 can close the second switching unit SW2 to supply power from the sub-battery B2 to the first load unit LO1 and the second load unit LO2. In this case, when there is a voltage difference between the main battery B1 and the sub-battery B2, current flows from one of the main battery B1 and the sub-battery B2 to the other. Therefore, when the second switching unit SW2 is closed, the power supply redundant system 2 includes a backflow prevention circuit that prevents such flow.

[0062] Assume that an abnormality such as a short circuit fault occurs in the DC / DC converter 10 or the main battery B1. In this case, the switching control unit 34 opens the first switching unit SW1 and closes the second switching unit SW2. In this state, since an abnormality occurs in the DC / DC converter 10 or the main battery B1, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0063] Assume that an abnormality occurs in the second load unit LO2, such as a short circuit fault. In this case, the switching control unit 34 disconnects the first switching unit SW1 and the second switching unit SW2. In this state, a process of disconnecting the second load unit LO2 side in which the abnormality has occurred is performed. Therefore, power can be supplied to the first load unit LO1 from the DC / DC converter 10 or the main battery B1 without being affected by the abnormality in the second load unit LO2, and automatic driving, etc. can be performed. When the second load unit LO2 includes a plurality of loads and each load includes a switch or a fuse, only the load in which the abnormality occurs can be cut off by using the function of the switch or the fuse. In this case, the switching control unit 34 does not need to disconnect the first switching unit SW1 and the second switching unit SW2, and the switching control unit 34 can, for example, close the first switching unit SW1 and disconnect the second switching unit SW2. In addition, when the first load unit LO1 is abnormal, similar control can be performed.

[0064] Furthermore, it is assumed that the sub-battery B2 has an abnormality, such as a short-circuit fault. Also in this case, the switching control unit 34 closes the first switching unit SW1 and opens the second switching unit SW2 in a normal state. Therefore, the switching control unit 34 supplies power to the first load unit LO1 and the second load unit LO2 through the normal DC / DC converter 10 or the main battery B1, and disconnects the sub-battery B2.

[0065] In this way, according to the power supply redundant system 2 of the second embodiment, similarly to the first embodiment, it is possible to reduce the size and realize more appropriate protection, and the operations of the sensors S1 and S2 can be ensured.

[0066] Next, a third embodiment according to the present invention will be described. The power supply redundant system according to the third embodiment is similar to the power supply redundant system of the second embodiment except for a part of the configuration and operation. Hereinafter, the difference from the second embodiment will be described.

[0067] Figure 8 2 is a block diagram of a power supply redundancy system according to a third embodiment. In addition to the dual battery 21 according to the second embodiment, the dual battery 22 according to the third embodiment further includes a charging control unit CC.

[0068] The charging control unit CC controls the charging of the sub-battery B2, monitors whether the sub-battery B2 has enough power to drive the second load unit LO2, and charges it with a required amount when the power is insufficient. The charging control unit CC is provided on a connection line L2, which is connected from the connection point P1 to the sub-battery B2 without passing through the second switching unit SW2.

[0069] When the dual battery 22 includes the charging control unit CC in the third embodiment, it is preferable to provide a backflow prevention circuit between the input side of the charging control unit CC and the connection point P1 or between the output side of the charging control unit CC and the sub-battery B2. Although it is assumed that the charging of the sub-battery B2 is performed by the function of the charging control unit CC, some functions may be performed by control from the control board 30 or a host electronic control unit (ECU).

[0070] Next, we will refer to Figure 8 The operation of the power supply redundant system 3 according to the third embodiment is described. First, the control of the first switching unit SW1 and the second switching unit SW2 in a normal state or an abnormal state is the same as that in the second embodiment.

[0071] In the third embodiment, for example, the charging control unit CC monitors the charge of the sub-battery B2 in a normal state and charges the sub-battery B2 when determining that the sub-battery B2 does not have enough charge for the second load unit LO2 to operate when the main battery B1 side is abnormal.

[0072] In this way, according to the power supply redundant system 3 of the third embodiment, similarly to the second embodiment, it is possible to reduce the size and realize more appropriate protection, and the operations of the sensors S1 and S2 can be ensured.

[0073] Next, a fourth embodiment according to the present invention will be described. The power supply redundant system according to the fourth embodiment is similar to the power supply redundant system of the second embodiment except for a part of the configuration and operation. Hereinafter, the difference from the second embodiment will be described.

[0074] Fig. 92 is a block diagram of a power supply redundancy system according to a fourth embodiment. In addition to the dual battery 21 according to the second embodiment, the dual battery 23 according to the fourth embodiment further includes a third switching unit SW3.

[0075] The third switching unit SW3 is provided on the connection line L3 connecting the DC / DC converter 10 and the main battery B1. More specifically, the third switching unit SW3 is provided closer to the DC / DC converter 10 side than the connection point P2, where the connection line L1 branches from the connection line L3 toward the sub-battery B2. Similar to the first switching unit SW1 and the second switching unit SW2, the third switching unit SW3 can be changed between the open state and the closed state according to the instruction from the control board 30.

[0076] Furthermore, in the fourth embodiment, the main battery B1 includes an abnormality detection unit for detecting an abnormality in the main battery B1 and transmitting information to the control board 30 when an abnormality is detected. The sub-battery B2 also has a similar function. Therefore, the abnormality determination unit 33 of the control board 30 can determine four types of abnormalities, namely, an abnormality in the DC / DC converter 10, an abnormality in the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0077] The main battery B1 may not include an abnormality detection unit that detects an abnormality in the main battery B1. In this case, first, by detecting an abnormality based on a sensor signal from the first sensor S1, it can be determined that the DC / DC converter 10 or the main battery B1 is abnormal. Thereafter, when the switching control unit 34 disconnects the third switching unit SW3 and the sensor signal from the first sensor S1 returns to a normal state, it can be determined that the main battery B1 is abnormal. When the switching control unit 34 disconnects the third switching unit SW3 and the sensor signal from the first sensor S1 does not return to a normal state, it can be determined that the DC / DC converter 10 is abnormal. Also in this case, the abnormality determination unit 33 of the control board 30 can determine four types of abnormalities, namely, an abnormality in the DC / DC converter 10, an abnormality in the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0078] Next, we will refer to Fig. 9The operation of the power supply redundant system 4 according to the fourth embodiment is described. First, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the first switching unit SW1 and the third switching unit SW3, and opens the second switching unit SW2. Therefore, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. On the other hand, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power cannot be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0079] The switching control unit 34 can close the second switching unit SW2 to supply power from the sub-battery B2 to the first load unit LO1 and the second load unit LO2. In this case, when there is a voltage difference between the main battery B1 and the sub-battery B2, a backflow prevention circuit is provided as in the second embodiment.

[0080] Assume that an abnormality such as a short-circuit fault occurs in the DC / DC converter 10. In this case, the switching control unit 34 closes the first switching unit SW1 and the second switching unit SW2, and opens the third switching unit SW3. In this state, since the third switching unit SW3 is opened, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the main battery B1 and the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0081] It is also assumed that the main battery B1 has an abnormality such as a short-circuit fault. In this case, the switching control unit 34 opens the first switching unit SW1 and the third switching unit SW3, and closes the second switching unit SW2. In this state, power is supplied from the DC / DC converter 10 to the first load unit LO1, and power is supplied from the sub-battery B2 to the second load unit LO2. Therefore, automatic driving by the first load unit LO1, minimum operation by the second load unit LO2, etc. are performed.

[0082] Assume that an abnormality occurs in the second load unit LO2, such as a short circuit fault. In this case, the switching control unit 34 disconnects the first switching unit SW1 and the second switching unit SW2, and closes the third switching unit SW3. In this state, the process of disconnecting the second load unit LO2 in which the abnormality has occurred is performed. Therefore, the first load unit LO1 can be powered from the DC / DC converter 10 or the main battery B1 without being affected by the abnormality in the second load unit LO2, and automatic driving, etc. can be performed. When the second load unit LO2 includes a plurality of loads and each load includes a switch or a fuse, as in the second embodiment, by using the function of the switch or the fuse, only the load in which the abnormality occurs can be cut off. In this case, the switching control unit 34 does not need to disconnect the first switching unit SW1 and the second switching unit SW2, and the switching control unit 34 can, for example, close the first switching unit SW1 and disconnect the second switching unit SW2.

[0083] Furthermore, it is assumed that an abnormality such as a short-circuit fault occurs in the sub-battery B2. Also in this case, the switching control unit 34 closes the first switching unit SW1 and the third switching unit SW3, and opens the second switching unit SW2, as in a normal state. Therefore, power is supplied to the first load unit LO1 and the second load unit LO2 through the normal DC / DC converter 10 or the main battery B1, and the sub-battery B2 can be disconnected.

[0084] Here, when the main battery B1 does not include an abnormality detection unit for detecting an abnormality of the main battery B1, it is necessary for the abnormality determination unit 33 to determine whether the sensor signal of the first sensor S1 returns to a normal value when the third switching unit SW3 is in a disconnected state. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it is determined whether the sensor signal of the first sensor S1 returns to a normal value. In this case, the switching control unit 34 disconnects the first switching unit SW1 and the third switching unit SW3, and closes the second switching unit SW2. That is, the switching control unit 34 is in the same switching state as when the main battery B1 is abnormal, and connects the sub-battery B2 and the second load unit LO2. Therefore, the power supply redundant system 4 first connects the sub-battery B2 and the second load unit LO2, and causes the second load unit LO2 to perform a minimum operation, etc., until it is determined which one of the DC / DC converter 10 and the main battery B1 is abnormal. Switching control unit 34 specifies which of DC / DC converter 10 and main battery B1 is abnormal based on whether the sensor signal of first sensor S1 returns to a normal value, and after specifying, sets first to third switching units SW1 to SW3 to the above-mentioned switching states.

[0085] In this way, the power supply redundant system 4 according to the fourth embodiment, similarly to the second embodiment, can be reduced in size and achieve more appropriate protection, and can ensure the operations of the sensors S1 and S2.

[0086] Furthermore, according to the fourth embodiment, the sub-battery B2 and the second load unit LO2 are connected until it is determined which of the DC / DC converter 10 and the main battery B1 is abnormal. Therefore, first, by operating the second load unit LO2 using the sub-battery B2, for example, time can be gained until the abnormal portion is specified while the minimum vehicle running or the like is performed by the second load unit LO2, and thereafter, appropriate measures can be taken.

[0087] Next, a fifth embodiment according to the present invention will be described. The power supply redundant system according to the fifth embodiment is similar to the power supply redundant system of the fourth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the fourth embodiment will be described.

[0088] Fig.10 is a block diagram of a power supply redundant system according to a fifth embodiment. In addition to the dual battery 23 according to the fourth embodiment, the dual battery 24 according to the fifth embodiment further includes a charging control unit CC. The charging control unit CC is the same as that described in the third embodiment, and is provided on a connection line L2 that connects the connection point P1 to the sub-battery B2 without passing through the second switching unit SW2.

[0089] Next, we will refer to Fig.10 The operation of the power supply redundant system 5 according to the fifth embodiment is described. First, the control of the first switching unit SW1, the second switching unit SW2, and the third switching unit SW3 in a normal state or an abnormal state is the same as that in the fourth embodiment.

[0090] In addition, in the fifth embodiment, for example, the charging control unit CC monitors the charge of the sub-battery B2 in a normal state, and when determining that the sub-battery B2 does not have enough charge for the second load unit LO2 to function when the main battery B1 side is abnormal, the charging control unit CC charges the sub-battery B2.

[0091] In this way, the power supply redundant system 5 according to the fifth embodiment can be reduced in size and achieve more appropriate protection similar to the fourth embodiment, and can ensure the operation of the sensors S1 and S2. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0092] Next, a sixth embodiment according to the present invention will be described. The power supply redundant system according to the sixth embodiment is similar to the power supply redundant system of the first embodiment except for a part of the configuration and operation. Hereinafter, the differences from the first embodiment will be described.

[0093] Fig.11 is a block diagram of a power supply redundancy system according to a sixth embodiment. Unlike the dual battery 20 according to the first embodiment, the dual battery 25 according to the sixth embodiment does not include a connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2 and the first to third switching units SW1 to SW3. On the other hand, the dual battery 25 according to the sixth embodiment includes fourth to sixth switching units SW4 to SW6. Similar to the above-mentioned first to third switching units SW1 to SW3, the fourth to sixth switching units SW4 to SW6 switch between an open state and a closed state under the control of the control board 30.

[0094] In this dual battery 25, the fourth switching unit SW4 is provided between the terminal A and the positive electrode side of the main battery B1. The negative electrode side of the main battery B1 is connected to the terminal B. One end of the fifth switching unit SW5 is connected to the terminal A, and the other end is connected to the sixth switching unit SW6. The other end of the sixth switching unit SW6 is connected to the positive electrode side of the sub-battery B2, and the negative electrode side of the sub-battery B2 is connected to the terminal B. The connection point P3 between the fifth switching unit SW5 and the sixth switching unit SW6 is connected to the terminal C. In the sixth embodiment, two terminals A are provided in order to provide a redundant configuration. However, the present invention is not particularly limited to this, and a configuration in which the terminal A is combined into one and branches into a path leading to the fourth switching unit SW4 in the dual battery 25 and a path leading to the fifth switching unit SW5 may be adopted.

[0095] In the sixth embodiment, the main battery B1 includes an abnormality detection unit that detects an abnormality in the main battery B1 and transmits information to the control board 30 when the abnormality is detected. The sub-battery B2 also has a similar function. Therefore, the abnormality determination unit 33 of the control board 30 can determine four types of abnormalities, that is, an abnormality in the DC / DC converter 10, an abnormality in the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0096] As in the fourth embodiment, the main battery B1 may not include an abnormality detection unit that detects an abnormality in the main battery B1. In this case, as described in the fourth embodiment, the abnormality determination unit 33 detects an abnormality in the DC / DC converter 10 or the main battery B1 based on the sensor signal from the first sensor S1. Thereafter, the switching control unit 34 turns off the fourth switching unit SW4. When the sensor signal from the first sensor S1 returns to a normal state, the abnormality determination unit 33 determines that the main battery B1 is abnormal. When the sensor signal from the first sensor S1 does not return to a normal state, the abnormality determination unit 33 determines that the DC / DC converter 10 is abnormal.

[0097] Furthermore, for the connection point P3, for the same reason as described in the second embodiment, it is preferable to include a backflow prevention circuit.

[0098] Next, we will refer to Fig.11 The operation of the power supply redundant system 6 according to the sixth embodiment is described. First, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5, and opens the sixth switching unit SW6. Therefore, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. On the other hand, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power cannot be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0099] Assume that an abnormality such as a short-circuit fault occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4 and the fifth switching unit SW5, and closes the sixth switching unit SW6. In this state, since only the sixth switching unit SW6 is closed, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0100] It is also assumed that an abnormality such as a short-circuit fault occurs in the main battery B1. In this case, the switching control unit 34 opens the fourth switching unit SW4, and closes the fifth switching unit SW5 and the sixth switching unit SW6. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. Therefore, automatic driving by the first load unit LO1, minimum operation by the second load unit LO2, etc. are performed.

[0101] Assume that an abnormality occurs in the second load unit LO2, such as a short circuit fault. In this case, the switching control unit 34 disconnects the fifth switching unit SW5 and the sixth switching unit SW6, and closes the fourth switching unit SW4. In this state, a process of disconnecting the second load unit LO2 in which an abnormality occurs is performed. Therefore, power can be supplied to the first load unit LO1 from the DC / DC converter 10 or the main battery B1 without being affected by the abnormality in the second load unit LO2, and automatic driving, etc. can be performed. When the second load unit LO2 includes a plurality of loads and each load includes a switch or a fuse, only the load in which the abnormality occurs can be cut off by using the function of the switch or the fuse. In this case, for example, the switching control unit 34 can set the fourth to sixth switching units SW4 to SW6 to the same state as in the normal state.

[0102] Furthermore, it is assumed that an abnormality such as a short circuit fault occurs in the sub-battery B2. Also in this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5, and opens the sixth switching unit SW6, as in a normal state. Therefore, power is supplied to the first load unit LO1 and the second load unit LO2 through the normal DC / DC converter 10 or the main battery B1, and the sub-battery B2 can be disconnected.

[0103] When the main battery B1 does not include an abnormality detection unit for detecting an abnormality of the main battery B1 as in the fourth embodiment, it is necessary for the abnormality determination unit 33 to determine whether the sensor signal of the first sensor S1 returns to a normal value when the fourth switching unit SW4 is in a disconnected state. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it is determined whether the sensor signal of the first sensor S1 returns to a normal value. In this case, the switching control unit 34 disconnects the fourth switching unit SW4 and the fifth switching unit SW5, and closes the sixth switching unit SW6. That is, the switching control unit 34 is in the same switching state as when the DC / DC converter 10 is abnormal, and connects the sub-battery B2 and the second load unit LO2. Therefore, the power supply redundant system 6 first connects the sub-battery B2 and the second load unit LO2, and causes the second load unit LO2 to perform a minimum operation, etc., until it is determined which one of the DC / DC converter 10 and the main battery B1 is abnormal. Switching control unit 34 specifies which of DC / DC converter 10 and main battery B1 is abnormal based on whether the sensor signal of first sensor S1 returns to a normal value, and after specifying, sets fourth to sixth switching units SW4 to SW6 to the above-mentioned switching states.

[0104] In this way, the power supply redundant system 6 according to the sixth embodiment, similar to the first embodiment, can be reduced in size and achieve more appropriate protection, and can ensure the operations of the sensors S1 and S2.

[0105] Furthermore, according to the sixth embodiment, similarly to the fourth embodiment, appropriate measures can be taken after buying time until the abnormal portion is pointed out.

[0106] Next, a seventh embodiment according to the present invention will be described. The power supply redundant system according to the seventh embodiment is similar to the power supply redundant system of the sixth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the sixth embodiment will be described.

[0107] Fig.122 is a block diagram of a power supply redundant system according to a seventh embodiment. In addition to the dual battery 25 according to the sixth embodiment, the dual battery 26 according to the seventh embodiment includes a charging control unit CC. The charging control unit CC is the same as that described in the third embodiment, and is provided on a connection line L4 that connects the connection point P3 to the sub-battery B2 without passing through the sixth switching unit SW6.

[0108] Next, we will refer to Fig.12 The operation of the power supply redundant system 7 according to the seventh embodiment is described. First, the control of the switching units SW4 to SW6 in a normal state or an abnormal state is the same as that in the sixth embodiment.

[0109] In addition, in the seventh embodiment, for example, the charging control unit CC monitors the charge of the sub-battery B2 in a normal state, and when determining that the sub-battery B2 does not have enough charge for the second load unit LO2 to function when the main battery B1 side is abnormal, the charging control unit CC charges the sub-battery B2.

[0110] In this way, the power supply redundant system 7 according to the seventh embodiment can be reduced in size and achieve more appropriate protection similar to the sixth embodiment, and can ensure the operation of sensors S1 and S2. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0111] Next, an eighth embodiment according to the present invention will be described. The power supply redundant system according to the eighth embodiment is similar to the power supply redundant system of the sixth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the sixth embodiment will be described.

[0112] Fig.13 is a block diagram of a power supply redundant system according to an eighth embodiment. Unlike the dual battery 25 according to the sixth embodiment, the dual battery 27 according to the eighth embodiment includes a connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2. The dual battery 27 according to the eighth embodiment includes a seventh switching unit SW7 instead of the fifth switching unit SW5 of the dual battery 25 according to the sixth embodiment. Similar to the first to sixth switching units SW1 to SW6, the seventh switching unit SW7 switches between an open state and a closed state under the control of the control board 30.

[0113] This dual battery 27 does not include the fifth switching unit SW5, and the terminal A is connected only to the fourth switching unit SW4. The seventh switching unit SW7 is provided between the fourth switching unit SW4 and the main battery B1. The connection point P5 between the fourth switching unit SW4 and the seventh switching unit SW7 is connected to the terminal B from the sixth switching unit SW6 via the sub-battery B2. The connection point P5 is also connected to the terminal C.

[0114] Next, we will refer to Fig.13The operation of the power supply redundant system 8 according to the eighth embodiment is described. First, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the seventh switching unit SW7, and opens the sixth switching unit SW6. Therefore, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. On the other hand, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power cannot be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0115] Assume that an abnormality such as a short-circuit fault occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4 and the seventh switching unit SW7, and closes the sixth switching unit SW6. In this state, since only the sixth switching unit SW6 is closed, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0116] It is also assumed that an abnormality such as a short-circuit fault occurs in the main battery B1. In this case, the switching control unit 34 opens the seventh switching unit SW7, and closes the fourth switching unit SW4 and the sixth switching unit SW6. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. Therefore, automatic driving by the first load unit LO1, minimum operation by the second load unit LO2, etc. are performed.

[0117] Assume that an abnormality, such as a short circuit fault, occurs in the second load unit LO2. In this case, the switching control unit 34 disconnects all of the fourth switching unit SW4, the sixth switching unit SW6, and the seventh switching unit SW7. In this state, a process of disconnecting the second load unit LO2 in which the abnormality occurs is performed. Therefore, power can be supplied from the DC / DC converter 10 to the first load unit LO1 without being affected by the abnormality in the second load unit LO2, and automatic driving or the like can be performed. When the second load unit LO2 includes a plurality of loads and each load includes a switch or a fuse, as in the above-mentioned embodiment, by using the function of the switch or the fuse, only the load in which the abnormality occurs can be cut off. In this case, for example, the switching control unit 34 can set the fourth switching unit SW4, the sixth switching unit SW6, and the seventh switching unit SW7 to the same state as in the normal state.

[0118] Furthermore, it is assumed that an abnormality such as a short-circuit fault occurs in the sub-battery B2. Also in this case, the switching control unit 34 closes the fourth switching unit SW4 and the seventh switching unit SW7, and opens the sixth switching unit SW6, as in a normal state. Therefore, power is supplied to the first load unit LO1 and the second load unit LO2 through the normal DC / DC converter 10 or the main battery B1, and the sub-battery B2 can be disconnected.

[0119] When the main battery B1 does not include an abnormality detection unit that detects an abnormality of the main battery B1 as in the fourth embodiment, it is necessary for the abnormality determination unit 33 to determine whether the sensor signal of the first sensor S1 returns to a normal value when the fourth switching unit SW4 is in a disconnected state. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it is determined whether the sensor signal of the first sensor S1 returns to a normal value. In this case, the switching control unit 34 disconnects the fourth switching unit SW4 and the seventh switching unit SW7, and closes the sixth switching unit SW6. That is, the switching control unit 34 is in the same switching state as when the DC / DC converter 10 is abnormal, and connects the sub-battery B2 and the second load unit LO2. Therefore, the power supply redundant system 8 first connects the sub-battery B2 and the second load unit LO2, and causes the second load unit LO2 to perform a minimum operation, etc., until it is determined which one of the DC / DC converter 10 and the main battery B1 is abnormal. The switching control unit 34 specifies the abnormal position based on whether the sensor signal of the first sensor S1 returns to a normal value, and after specifying the abnormal position, sets the fourth switching unit SW4, the sixth switching unit SW6, and the seventh switching unit SW7 to the above switching states.

[0120] In this way, the power supply redundant system 8 according to the eighth embodiment can be reduced in size and achieve more appropriate protection similar to the sixth embodiment, and can ensure the operation of sensors S1 and S2. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0121] Next, a ninth embodiment according to the present invention will be described. The power supply redundant system according to the ninth embodiment is similar to the power supply redundant system of the eighth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the eighth embodiment will be described.

[0122] Fig.14 is a block diagram of a power supply redundant system according to a ninth embodiment. In addition to the dual battery 27 according to the eighth embodiment, the dual battery 28 according to the ninth embodiment further includes a charging control unit CC. The charging control unit CC is the same as that described in the third embodiment, and is provided on a connection line L5 that connects a connection point P6 located between the connection point P5 and the sixth switching unit SW6 to the sub-battery B2 without passing through the sixth switching unit SW6.

[0123] Next, we will refer to Fig.14 The operation of the power supply redundant system 9 according to the ninth embodiment is described. First, the control of the switching units SW4, SW6, and SW7 in a normal state or an abnormal state is the same as that in the eighth embodiment.

[0124] In addition, in the ninth embodiment, for example, the charging control unit CC monitors the charge of the sub-battery B2 in a normal state, and when determining that the sub-battery B2 does not have enough charge for the second load unit LO2 to function when the main battery B1 side is abnormal, the charging control unit CC charges the sub-battery B2.

[0125] In this way, the power supply redundant system 9 according to the ninth embodiment can be reduced in size and achieve more appropriate protection similar to the eighth embodiment, and can ensure the operation of sensors S1 and S2. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0126] Next, a tenth embodiment according to the present invention will be described. The power supply redundant system according to the tenth embodiment is similar to the power supply redundant system of the sixth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the sixth embodiment will be described.

[0127] Fig.15 is a block diagram of a power supply redundant system according to a tenth embodiment. Unlike the dual battery 25 according to the sixth embodiment, the dual battery 29 according to the tenth embodiment includes a connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2, and the eighth switching unit SW8 is provided on the connection line L1. Similar to the first to seventh switching units SW1 to SW7, the eighth switching unit SW8 switches between an open state and a closed state under the control of the control board 30. The eighth switching unit SW8 is provided between a connection point P7 between the fourth switching unit SW4 and the main battery B1 and a connection point P3 between the fifth switching unit SW5 and the sixth switching unit SW6.

[0128] Next, we will refer to Fig.15 The operation of the power supply redundant system 1a according to the tenth embodiment is described. First, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5, and disconnects the sixth switching unit SW6 and the eighth switching unit SW8. Therefore, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. On the other hand, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power cannot be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0129] Assume that an abnormality such as a short-circuit fault occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4, the fifth switching unit SW5, and the eighth switching unit SW8, and closes the sixth switching unit SW6. In this state, since only the sixth switching unit SW6 is closed, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0130] In addition, the switching control unit 34 may open the fourth switching unit SW4 and the fifth switching unit SW5 and close the sixth switching unit SW6 and the eighth switching unit SW8 in an abnormal state of the DC / DC converter 10. In this state, since the sixth switching unit SW6 and the eighth switching unit SW8 are in a closed state, the second load unit LO2 may be powered by the main battery B1 and the sub-battery B2.

[0131] It is also assumed that an abnormality such as a short-circuit fault occurs in the main battery B1. In this case, the switching control unit 34 opens the fourth switching unit SW4 and the eighth switching unit SW8, and closes the fifth switching unit SW5 and the sixth switching unit SW6. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. Therefore, automatic driving by the first load unit LO1, minimum operation by the second load unit LO2, etc. are performed.

[0132] Assume that an abnormality, such as a short circuit fault, occurs in the second load unit LO2. In this case, the switching control unit 34 closes the fourth switching unit SW4, and disconnects the fifth switching unit SW5, the sixth switching unit SW6, and the eighth switching unit SW8. In this state, the process of disconnecting the second load unit LO2 in which the abnormality occurs is performed. Therefore, power can be supplied to the first load unit LO1 from the DC / DC converter 10 or the main battery B1 without being affected by the abnormality in the second load unit LO2, and automatic driving, etc. can be performed. When the second load unit LO2 includes a plurality of loads and each load includes a switch or a fuse, as in the sixth embodiment, by using the function of the switch or the fuse, only the load in which the abnormality occurs can be cut off. In this case, for example, the switching control unit 34 can set the fourth to sixth switching units SW4 to SW6 and the eighth switching unit SW8 to the same state as in the normal state.

[0133] Furthermore, it is assumed that an abnormality such as a short-circuit fault occurs in the sub-battery B2. Also in this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5, and opens the sixth switching unit SW6 and the eighth switching unit SW8, as in a normal state. Therefore, power is supplied to the first load unit LO1 and the second load unit LO2 through the normal DC / DC converter 10 or the main battery B1, and the sub-battery B2 can be disconnected.

[0134] When the main battery B1 does not include an abnormality detection unit that detects an abnormality of the main battery B1 as in the sixth embodiment, the switching control unit 34 disconnects at least the fourth switching unit SW4 and disconnects the DC / DC converter 10 and the main battery B1. The abnormality determination unit 33 needs to determine whether the sensor signal of the first sensor S1 returns to a normal value after the disconnection. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it is determined whether the sensor signal of the first sensor S1 returns to a normal value. In this case, the switching control unit 34 disconnects the fourth switching unit SW4, the fifth switching unit SW5, and the eighth switching unit SW8, and closes the sixth switching unit SW6. That is, when the DC / DC converter 10 is abnormal, the switching control unit 34 connects the sub-battery B2 and the second load unit LO2 in the same state as one of the two switching states. Therefore, the power supply redundant system 1a first connects the sub-battery B2 and the second load unit LO2, and causes the second load unit LO2 to perform a minimum operation, etc., until it is determined which one of the DC / DC converter 10 and the main battery B1 is abnormal. The switching control unit 34 specifies the abnormal position based on whether the sensor signal of the first sensor S1 returns to a normal value, and after specifying the abnormal position, sets the fourth to sixth switching units SW4 to SW6 and the eighth switching unit SW8 to the above-mentioned switching states.

[0135] In this way, the redundant power supply system 1a according to the tenth embodiment can be downsized and more appropriately protected similarly to the sixth embodiment, and can ensure the operation of the sensors S1 and S2. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0136] Next, an eleventh embodiment according to the present invention will be described. The power supply redundant system according to the eleventh embodiment is similar to the power supply redundant system of the tenth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the tenth embodiment will be described.

[0137] Fig.161 is a block diagram of a power supply redundant system according to an eleventh embodiment. In addition to the dual battery 29 according to the tenth embodiment, the dual battery 20a according to the eleventh embodiment includes a charging control unit CC. The charging control unit CC is the same as that described in the third embodiment, and is provided on a connection line L4 that connects a connection point P4 located between the connection point P3 and the sixth switching unit SW6 to the sub-battery B2 without passing through the sixth switching unit SW6.

[0138] Next, we will refer to Fig.16 The operation of the power supply redundant system 1b according to the eleventh embodiment is described. First, the control of the switching units SW4 to SW6 and SW8 in a normal state or an abnormal state is the same as that in the tenth embodiment.

[0139] In the eleventh embodiment, for example, the charging control unit CC monitors the charge of the sub-battery B2 in a normal state and charges the sub-battery B2 when determining that the sub-battery B2 does not have enough charge for the second load unit LO2 to operate when the main battery B1 side is abnormal.

[0140] In this way, according to the power supply redundant system 1b of the eleventh embodiment, similar to the tenth embodiment, the size can be reduced and more appropriate protection can be achieved, and the operation of the sensors S1 and S2 can be guaranteed. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0141] Next, a twelfth embodiment according to the present invention will be described. The power supply redundant system according to the twelfth embodiment is similar to the power supply redundant system of the sixth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the sixth embodiment will be described.

[0142] Fig.17 is a block diagram of a power supply redundant system according to a twelfth embodiment. In addition to the dual battery 25 according to the sixth embodiment, the dual battery 20b according to the twelfth embodiment includes a ninth switching unit SW9. Similar to the first to eighth switching units SW1 to SW8, the ninth switching unit SW9 switches between an open state and a closed state under the control of the control board 30. The ninth switching unit SW9 is disposed closer to the DC / DC converter 10 side than the fourth switching unit SW4 and the fifth switching unit SW5. Therefore, the terminal A of the dual battery 20b is connected to one end of the ninth switching unit SW9, and the fourth switching unit SW4 and the fifth switching unit SW5 are connected in parallel to the other end of the ninth switching unit SW9.

[0143] Next, we will refer to Fig.17The operation of the power supply redundant system 1c according to the twelfth embodiment is described. First, it is assumed that the DC / DC converter 10, the main battery B1, the sub-battery B2, etc. are in a normal state without abnormality. In this case, the switching control unit 34 closes the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9, and opens the sixth switching unit SW6. Therefore, power can be supplied from the DC / DC converter 10 and the main battery B1 to the first load unit LO1 and the second load unit LO2. On the other hand, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power cannot be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0144] Assume that an abnormal situation such as a short-circuit fault occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9, and closes the sixth switching unit SW6. In this state, since only the sixth switching unit SW6 is closed, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 through the sub-battery B2. Therefore, the second load unit LO2 can be driven and the minimum operation related to the automatic driving, etc. can be performed.

[0145] In addition, the switching control unit 34 may close the fourth switching unit SW4 and the fifth switching unit SW5 and open the sixth switching unit SW6 and the ninth switching unit SW9 in an abnormal state of the DC / DC converter 10. In this state, since the fourth switching unit SW4 and the fifth switching unit SW5 are in a closed state, the first load unit LO1 and the second load unit LO2 may be powered by the main battery B1 and the sub-battery B2.

[0146] When an abnormality such as a short circuit fault occurs in the main battery B1, the switching control unit 34 opens the fourth switching unit SW4 and closes the fifth switching unit SW5, the sixth switching unit SW6 and the ninth switching unit SW9. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. Therefore, automatic driving through the first load unit LO1, minimum operation through the second load unit LO2, etc. are performed.

[0147] Assume that an abnormality, such as a short circuit fault, occurs in the second load unit LO2. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the ninth switching unit SW9, and disconnects the fifth switching unit SW5 and the sixth switching unit SW6. In this state, a process of disconnecting the second load unit LO2 in which the abnormality occurs is performed. Therefore, power can be supplied to the first load unit LO1 from the DC / DC converter 10 or the main battery B1 without being affected by the abnormality in the second load unit LO2, and automatic driving, etc. can be performed. When the second load unit LO2 includes a plurality of loads and each load includes a switch or a fuse, only the load in which the abnormality occurs can be cut off by using the function of the switch or the fuse. In this case, for example, the switching control unit 34 can set the fourth to sixth switching units SW4 to SW6 and the ninth switching unit SW9 to the same state as in the normal state.

[0148] Furthermore, it is assumed that the sub-battery B2 has an abnormality, such as a short-circuit fault. Also in this case, as in the normal state, the switching control unit 34 closes the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9, and opens the sixth switching unit SW6. Therefore, the first load unit LO1 and the second load unit LO2 are powered by the normal DC / DC converter 10 or the main battery B1, and the sub-battery B2 can be disconnected.

[0149] When the main battery B1 does not include an abnormality detection unit for detecting an abnormality of the main battery B1 as in the fourth embodiment, it is necessary for the abnormality determination unit 33 to determine whether the sensor signal of the first sensor S1 returns to a normal value when the fourth switching unit SW4 and the ninth switching unit SW9 are in a disconnected state. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it is determined whether the sensor signal of the first sensor S1 returns to a normal value. In this case, the switching control unit 34 disconnects the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9, and closes the sixth switching unit SW6. That is, when the DC / DC converter 10 is abnormal, the switching control unit 34 connects the sub-battery B2 and the second load unit LO2 in the same state as one of the two switching states. Therefore, the power supply redundant system 1c first connects the sub-battery B2 and the second load unit LO2, and causes the second load unit LO2 to perform a minimum operation, etc., until it is determined which one of the DC / DC converter 10 and the main battery B1 is abnormal. The switching control unit 34 specifies the abnormal position based on whether the sensor signal of the first sensor S1 returns to a normal value, and after specifying the abnormal position, sets the fourth to sixth switching units SW4 to SW6 and the ninth switching unit SW9 to the above-mentioned switching states.

[0150] In this way, according to the redundant power supply system 1c of the twelfth embodiment, similar to the sixth embodiment, the size can be reduced and more appropriate protection can be achieved, and the operation of the sensors S1 and S2 can be guaranteed. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0151] Next, a thirteenth embodiment according to the present invention will be described. The power supply redundant system according to the thirteenth embodiment is similar to the power supply redundant system of the twelfth embodiment except for a part of the configuration and operation. Hereinafter, the difference from the twelfth embodiment will be described.

[0152] Fig.18 2 is a block diagram of a power supply redundant system according to a thirteenth embodiment. In addition to the dual battery 20b according to the twelfth embodiment, the dual battery 20c according to the thirteenth embodiment further includes a charging control unit CC. The charging control unit CC is the same as that described in the third embodiment, and is provided on a connection line L4 that connects a connection point P4 located between the connection point P3 and the sixth switching unit SW6 to the sub-battery B2 without passing through the sixth switching unit SW6.

[0153] Next, we will refer to Fig.18 The operation of the power supply redundant system 1d according to the thirteenth embodiment is described. First, the control of the switching units SW4 to SW6 and SW9 in a normal state or an abnormal state is the same as that in the twelfth embodiment.

[0154] In the thirteenth embodiment, for example, the charging control unit CC monitors the charge of the sub-battery B2 in a normal state and charges the sub-battery B2 when determining that the sub-battery B2 does not have enough charge for the second load unit LO2 to operate when the main battery B1 side is abnormal.

[0155] In this way, according to the power supply redundant system 1d of the thirteenth embodiment, similar to the twelfth embodiment, it is possible to reduce the size and realize more appropriate protection, and it is possible to ensure the operation of the sensors S1 and S2. Appropriate measures can be taken after buying time until the abnormal part is pointed out.

[0156] Although the present invention has been described based on the embodiments, the present invention is not limited to the embodiments, and changes may be made without departing from the gist of the present invention, or the techniques of the embodiments may be combined. In addition, known or well-known techniques may be combined if possible.

[0157] For example, although the dual batteries 20 to 29 and 20a to 20c include the sub-battery B2 in the embodiment, the dual batteries 20 to 29 and 20a to 20c may be implemented by a storage device such as a large-capacity capacitor instead of the sub-battery B2 which does not interfere with the operation in the embodiment.

[0158] In this embodiment, the abnormality determination unit 33 is mounted on the control board 30. However, the present invention is not limited thereto, and the abnormality determination unit 33 may be mounted on a higher-level ECU or the like.

Claims

1. A power supply redundancy system, comprising: a main battery, supplying power to the first load unit and the second load unit; A secondary energy storage device, supplying power to at least the second load unit; a switching unit, switching a power supply path from the main battery and the auxiliary energy storage device to the first load unit and the second load unit; A control panel, on which a switching control unit is mounted, the switching control unit being used to switch and control the switching unit; and The housing at least contains the main battery, the secondary energy storage device and the switching unit, wherein The control board is operable by receiving power supply from the main battery and the secondary energy storage device.

2. The redundant power supply system according to claim 1, further comprising: A sensor detects at least one abnormal state of the main battery and the secondary energy storage device, wherein The control board includes a reference voltage generating unit generating a reference voltage and an operation guarantee unit applying only the reference voltage to the sensor, and The operation assurance unit determines whether the sensor operates properly based on a sensor signal when only the reference voltage is applied to the sensor.

3. The redundant power supply system according to claim 1, further comprising: a step-down unit that receives a voltage higher than the voltage of the main battery and the secondary energy storage device, steps down the voltage, and supplies the voltage to a load, wherein The switching control unit connects the auxiliary energy storage device and the second load unit until the switching control unit indicates which one of the main battery and the step-down unit is abnormal. When the switching control unit indicates that the step-down unit is abnormal, the switching control unit controls the switching unit to set a power supply path when the step-down unit is abnormal, and In a case where the switching control unit indicates that the main battery is abnormal, the switching control unit controls the switching unit to set a power supply path when the main battery is abnormal.

Images