Fault autonomous detection and isolation method for multi-source multi-load power supply system

Abstract

The invention relates to an autonomous fault detection and isolation method for a multi-source multi-load power supply system, and the method comprises the steps: carrying out the collection and analysis of the voltage of a power supply node and load telemetry data, calculating the power supply fault degree of a load, and monitoring the power supply health states of a power supply module and the load in real time; if it is detected that a certain path of output power supply of the secondary power supply module works abnormally, power-on loads under the path of output power supply are sequentially cut off according to the fault degree, and whether the output power supply recovers to work normally or not is detected again; if a certain load is powered off and the working state of the output power supply is normal, other loads which are powered off in the diagnosis process are powered on, and fault diagnosis and isolation of the fault load are completed; and if the working state of the output power supply is still abnormal after all the loads are powered off, switching the backup secondary power supply module and powering up all the loads which are powered off in the diagnosis process. The method is high in universality and can be suitable for a satellite secondary power supply system with multiple sources and multiple loads, and the on-orbit autonomous operation capacity of the satellite is improved.

Description

Technical Field

[0001] The invention belongs to the field of satellite fault diagnosis and processing, and relates to a multi-source and multi-load power supply system fault autonomous detection and isolation method. Background Art

[0002] In order to reduce the launch cost, low-orbit Internet satellites usually adopt the "one rocket, multiple satellites" launch mode, which makes high integration and integration the development direction of low-orbit Internet satellite platforms. In order to further reduce the size and weight of on-board products while meeting the satellite energy distribution, the control subsystem usually uses a cold backup multi-channel output secondary power supply module to provide centralized power supply and distribution to multiple single machines with secondary power supply requirements, such as star sensors, fiber optic gyroscopes, momentum wheels, magnetic torquers, etc.

[0003] Faced with the complex space environment of satellites, multi-source and multi-load power supply systems or stand-alone products have the risk of not being able to work stably for a long time. If a secondary power module fails, or a power supply and distribution line failure occurs in a stand-alone product, and the system fails to detect it, it will cause other stand-alone products powered by the power module to work abnormally, thereby affecting the attitude control of the entire satellite. Therefore, timely detection and isolation of secondary power supply system failures is crucial to satellite safety.

[0004] At present, for multi-source and multi-load power supply system failures, ground operators usually interpret the secondary power module telemetry data and the operating status of the single product, analyze the fault form, and take the action of powering off the single product or switching the secondary power module. Obviously, this solution cannot meet the timeliness of on-board fault diagnosis and processing, and is not conducive to the on-orbit maintenance of large quantities of satellites. Summary of the invention

[0005] The technical problem solved by the present invention is: for a power supply system adopting a multi-source and multi-load centralized power supply design, an on-board fault autonomous detection and isolation method is proposed, which solves the problem that secondary power supply system faults cannot be detected and isolated in time, and ensures the normal operation of the power supply system and stand-alone products.

[0006] The solution of the present invention is:

[0007] A method for autonomously detecting and isolating faults in a multi-source and multi-load power supply system, comprising:

[0008] Step 1: Collect the status signal of the power supply system through the onboard computer;

[0009] Step 2: According to the collected status signal, the power supply fault degree of all loads of each output power supply under the secondary power supply module is calculated in turn;

[0010] Step 3: Perform fault detection on the first output power supply of the secondary power supply module, including steady-state voltage detection, DC power supply transient surge voltage detection and steady-state DC voltage ripple detection;

[0011] Step 4: according to the fault detection result, determine whether the first output power supply is working abnormally. If the first output power supply is working abnormally, proceed to step 5. If the first output power supply is working normally, proceed to step 7.

[0012] Step 5: According to the power supply fault degree of all powered loads of the first output power supply, a first output power supply load isolation sequence is formed, and the loads are subjected to the first output power supply fault isolation processing flow in accordance with the sequence order, and the powered loads are powered off in turn and the output power supply is re-detected to see whether it resumes normal operation; after the process is completed, step 6 is entered;

[0013] Step 6: Determine whether the operation of switching the backup secondary power module is executed in the first output power fault isolation processing flow. If the operation of switching the backup secondary power module is executed, the autonomous fault detection and isolation process of the multi-source and multi-load power supply system is completed; if the operation of switching the backup secondary power module is not executed, proceed to step 7;

[0014] Step 7: Repeat steps 3 to 6 to perform fault detection and isolation procedures on all output power supplies under the secondary power module.

[0015] Furthermore, the status signal includes the steady-state voltage of the output power of the secondary power module and the transient surge voltage of the DC power supply, and the communication status and health status of the load.

[0016] Furthermore, the calculation method of the power supply fault degree is as follows:

[0017] Assume that the i-th load under a certain output power supply, i=1,…,N, has n fault detection items, and n is an integer greater than 1. The calculation method of the load power supply fault degree is:

[0018] Determine the signal fault characteristic parameters of each fault detection item, extract the key fault characteristics, and calculate the detection value of the fault detection item as Xi j ,j=1,…,n∈[0,1];

[0019] According to the actual situation of the load, analyze the impact rate of each fault detection item on the power supply of the secondary power module and set it as Yi j ,j=1,…,n∈[0,1];

[0020] Calculate the failure rate for this load as:

[0021]

[0022] After calculating the failure rate of all loads under the output power supply, the failure rate is normalized, and the power supply failure degree of the i-th load is:

[0023]

[0024] Furthermore, the steady-state voltage detection is:

[0025] Collect the voltage state telemetry value U1 of the first output terminal of the secondary power module and calculate the voltage state of the first output terminal.

[0026] The average voltage in the state is:

[0027]

[0028] Among them, U1 k is the sampling instantaneous voltage, K is the number of sampling points, and K is an integer greater than 1.

[0029] Steady-state voltage detection is to detect the sampling instantaneous voltage U1 k And the steady-state average voltage U1 A Whether it meets the design limit range and whether there is overvoltage or undervoltage.

[0030] Furthermore, the DC power supply transient surge voltage detection is to detect whether the sampled transient voltage generated by the load module during loading and unloading is undervoltage or overvoltage.

[0031] Furthermore, the steady-state DC voltage pulsation detection is:

[0032] Find the maximum voltage U1 in the collected instantaneous voltage MAX and minimum voltage U1 MIN , then the DC voltage ripple value is MAX[U1 MAX -U1 A ,U1 A -U1 MIN ], detect whether the DC voltage ripple value meets the design requirements. Further, the first output power fault isolation processing flow for the load includes:

[0033] a) Read the load power-on status of the first output power supply;

[0034] b) Read the power supply fault degree of all powered loads, sort them from large to small according to the power supply fault degree, and form the load isolation sequence of the first output power supply. The sequence numbers of the loads in the sequence are set from sequence 1 to sequence m;

[0035] c) Autonomously execute sequence 1 load power-off command;

[0036] d) Execute the fault detection of the first output power supply: if the first output power supply resumes normal operation, it indicates that the fault of the load power supply end of sequence 1 of the first output power supply has caused the first output power supply to work abnormally, and the load is kept in the power-off state to isolate it from the entire power supply system, and the fault isolation processing flow is exited; if the first output power supply works abnormally, the power-off instruction of the load of sequence 2 is autonomously executed;

[0037] e) Execute the fault detection of the first output power supply: if the first output power supply resumes normal operation, it indicates that the fault of the load power supply end of sequence 2 of the first output power supply has caused the first output power supply to work abnormally, and the load is kept in the power-off state to isolate it from the entire power supply system, and the sequence 1 load that was powered off during the diagnosis process is powered on, and the fault isolation process is exited; if the first output power supply works abnormally, the power-off instruction of the sequence 3 load is executed autonomously;

[0038] f) Repeat the first output power fault detection until the power-off instruction of the sequence m load is autonomously executed. At this time, if the first output power resumes normal operation, it indicates that the first output power is abnormal due to the fault at the power supply end of the sequence m load of the first output power. The load is kept in the power-off state to isolate it from the entire power supply system, and the loads of the first output power that have been powered off during the diagnosis process are powered on in turn, and the fault isolation process is exited; if the working state of the first output power is still abnormal after all the powered loads are powered off, the first output power is diagnosed as faulty;

[0039] g) Determine whether the first output power belongs to the main secondary power module or the backup secondary power module. If the first output power belongs to the main secondary power module, it means that the main secondary power module is faulty, and send a power-off command to all powered loads of each output power of the main secondary power, and power on the backup secondary power module after power off; if the first output power belongs to the backup secondary power module, it means that the backup secondary power module is faulty, and the main secondary power module has failed before and switched to the backup secondary power module for power supply, and it is now impossible to isolate the faulty secondary power module;

[0040] h) Power on all loads in sequence that were powered off during the diagnostic process and for which no faults were diagnosed.

[0041] Further, when the fault detection and isolation process is performed on the last output power supply under the secondary power supply module, it is not determined whether to execute the operation of switching the backup secondary power supply module.

[0042] In a second aspect, a computer-readable storage medium is proposed, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for autonomous fault detection and isolation of a multi-source and multi-load power supply system are implemented.

[0043] In the third aspect, a multi-source and multi-load power supply system fault autonomous detection and isolation device is proposed, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the multi-source and multi-load power supply system fault autonomous detection and isolation method when executing the computer program.

[0044] The beneficial effects of the present invention compared with the prior art are:

[0045] (1) The present invention proposes a method for autonomously detecting and isolating power supply system faults, which can be adapted to a satellite secondary power supply system with a centralized power supply architecture of a multi-load cold backup shared secondary power supply module, and can quickly detect and isolate power supply faults of a secondary power supply module or a load, thus solving the problem that faults in a traditional multi-source and multi-load power supply system cannot be rapidly and autonomously detected and isolated;

[0046] (2) The present invention also proposes a method for calculating the degree of load power supply failure, which can effectively quantify the degree of load power supply failure and facilitate rapid isolation of the faulty load;

[0047] (3) The present invention can monitor the health status of the power supply system in real time by collecting the status information of the output current and load of the secondary power module and calculating the fault degree. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 It is a schematic diagram of a multi-source and multi-load power supply system of the present invention;

[0049] Figure 2 This is the main flow chart of autonomous fault detection and isolation of the present invention;

[0050] Figure 3 This is a flow chart of the abnormal operation fault processing of the secondary power supply module of the present invention. DETAILED DESCRIPTION

[0051] The present invention will be further described below in conjunction with the embodiments.

[0052] like Figure 1 As shown, the multi-source multi-load power supply system is equipped with a secondary power supply module to supply power to the load. Considering the fault isolation problem, the secondary power supply module needs to be backed up; usually a cold backup method can be adopted, that is, the main secondary power supply module is powered on, and the backup secondary power supply module is not powered on. When the main secondary power supply module fails, the backup secondary power supply module is powered on and the main secondary power supply module is powered off. Each secondary power supply module can have multiple outputs for powering the load, and one output power supply can power multiple loads with the same supply voltage. The switching of the main and backup secondary power supply modules is controlled by the onboard computer.

[0053] The present invention provides a method for autonomous fault detection and isolation of a multi-source and multi-load power supply system. For a power supply system adopting a multi-source and multi-load centralized power supply design, an autonomous detection method based on power supply module fault detection and load fault degree calculation is proposed. Through a fault handling process based on the fault degree, the faulty load or the faulty secondary power supply module is autonomously and quickly isolated to ensure the reliability and safety of the control subsystem product operation.

[0054] like Figure 2 and Figure 3 As shown, the multi-source multi-load power supply system fault autonomous detection and isolation method specifically includes the following steps:

[0055] Step 1), according to the power supply design of the multi-source and multi-load power supply system and the load power-off situation, determine the architecture of the secondary power module output power and its load in the multi-source and multi-load power supply system, and collect the status signal of the power supply system through the onboard computer, including the steady-state voltage of the output power of the secondary power module and the transient surge voltage of the DC power supply, the communication status and health status of the load, etc. After the collection is completed, proceed to step 2);

[0056] In step 1), the secondary power conversion module of the multi-source and multi-load power supply system can convert the primary power input DC / DC into various types of secondary power supplies required by each load, and the secondary power supply module adopts the main backup module cold backup method. The secondary power supply module has multiple outputs, and each output power supply can power multiple loads. As a satellite controller, the onboard computer can output control instructions to control the connection or disconnection of the primary input terminal of the main backup secondary power supply module, and the main backup secondary power supply module provides the output status of each power supply for collection by the onboard computer. At the same time, the onboard computer can output control instructions to connect or disconnect the power supply input terminal of the load, and each load provides telemetry information for collection by the onboard computer. Taking the example that the secondary power supply module outputs M power supplies, and each output power supply supplies power to N loads, M and N are both integers greater than 1. The system that uses multiple loads with cold backup to share the secondary power supply module for centralized power supply is as follows: Figure 1 shown.

[0057] Step 2) autonomously detects faults on the loads powered by the secondary power module, i.e., according to the status signal collected in step 1), calculates the power supply fault degree of all loads of each output power supply under the secondary power module in turn, and proceeds to step 3) after the calculation is completed;

[0058] In step 2), if the i-th (i=1, ..., N) load under a certain output power supply has n fault detection items, where n is an integer greater than 1, the calculation method for the power supply fault degree of the load is:

[0059] a) Determine the signal fault characteristic parameters of each fault detection item, extract the key fault characteristics, and calculate the detection value of the fault detection item as Xij (j=1,…,n)∈[0,1];

[0060] b) According to the actual situation of the load, analyze the impact rate of each fault detection item on the power supply of the secondary power module and set it as Yi j (j=1,…,n)∈[0,1];

[0061] c) Calculate the failure rate of the load

[0062]

[0063] d) After calculating the failure rate of all loads under the output power supply, the failure rate is normalized, and the power supply failure degree of the i-th load is:

[0064]

[0065] Step 3) Perform fault detection on the output power supply of the secondary power supply module V1, including steady-state voltage detection, DC power supply transient surge voltage detection, and steady-state DC voltage ripple detection. After the detection is completed, proceed to step 4);

[0066] The method for detecting the fault of the V1 output power supply in step 3) is as follows:

[0067] a) Steady-state voltage detection: Collect the voltage state telemetry value U1 at the output end of the secondary power module V1. U1 is related to the specific design of the output state circuit of the secondary power module. Then the steady-state average voltage at the output end of V1 is

[0068]

[0069] Among them, U1 k is the sampling instantaneous voltage, K is the number of sampling points, and K is an integer greater than 1.

[0070] Steady-state voltage detection is to detect the sampling instantaneous voltage U1 k And the steady-state average voltage U1 A Whether it meets the design limit range, that is, whether there is overvoltage or undervoltage.

[0071] b) DC power supply transient surge voltage detection: detect whether the sampled transient voltage generated by the load module during loading and unloading is undervoltage or overvoltage.

[0072] c) Steady-state DC voltage ripple detection: Find the maximum voltage U1 in the collected instantaneous voltage MAX and minimum voltage U1 MIN , then the DC voltage ripple value is MAX[U1 MAX -U1 A ,U1 A -U1MIN ] to check whether it meets the design requirements.

[0073] Step 4), according to the detection result in step 3), determine whether the output power supply V1 works abnormally: if the output power supply V1 works abnormally, proceed to step 5); if the output power supply V1 works normally, proceed to step 7);

[0074] Step 5), according to the power supply fault degree of all powered loads of the V1 output power supply, form a V1 output power supply load isolation sequence, and perform the V1 output power supply fault isolation processing flow for the loads in order of the sequence, and cut off the power to the powered loads in turn and re-check whether the output power supply resumes normal operation; after the process is completed, go to step 6);

[0075] In step 5), the V1 output power supply fault isolation process is as follows: Figure 3 As shown, the processing logic is as follows:

[0076] a) Read the load power-on status of the V1 output power supply, such as m∈[0,N] loads are powered on in the V1 output power supply;

[0077] b) Read the power supply fault degree of all powered loads, sort them from large to small according to the power supply fault degree, and form a V1 output power load isolation sequence. The sequence numbers of the loads in the sequence are set from sequence 1 to sequence m;

[0078] c) Autonomously execute sequence 1 load power-off command;

[0079] d) Perform V1 output power fault detection: If the V1 output power returns to normal operation, it indicates that the fault at the power supply end of the sequence 1 load of the V1 output power leads to abnormal operation of the V1 output power. The load is kept in the power-off state to isolate it from the entire power supply system, and the fault isolation process is exited; if the V1 output power is abnormal, the power-off instruction of the sequence 2 load is executed autonomously;

[0080] e) Perform V1 output power fault detection: If the V1 output power returns to normal operation, it indicates that the fault at the power supply end of the sequence 2 load of the V1 output power leads to abnormal operation of the V1 output power. The load is kept in the power-off state to isolate it from the entire power supply system, and the sequence 1 load that was powered off during the diagnosis process is powered on, and the fault isolation process is exited; if the V1 output power is abnormal, the power-off instruction of the sequence 3 load is executed autonomously;

[0081] f) Repeat the above process until the power-off instruction of the load in sequence m is autonomously executed;

[0082] g) Perform V1 output power failure detection: If the V1 output power returns to normal operation, it indicates that the V1 output power is abnormal due to a fault at the power supply end of the sequence m load of the V1 output power. The load is kept powered off to isolate it from the entire power supply system. The V1 output power loads that were powered off during the diagnosis process are powered on in turn, and the fault isolation process is exited. If the V1 output power is still abnormal after all powered loads are powered off, the V1 output power is diagnosed as faulty.

[0083] h) Determine whether the output power of V1 belongs to the main secondary power module or the backup secondary power module: If the output power of V1 belongs to the main secondary power module, it means that the main secondary power module is faulty, and a power-off command is sent to all powered loads of each output power of the main secondary power supply, and the backup secondary power module is powered on after the power is off; If the output power of V1 belongs to the backup secondary power module, it means that the backup secondary power module is faulty, and the main secondary power module has failed before and switched to the backup secondary power module for power supply, and it is now impossible to isolate the faulty secondary power module;

[0084] i) Power on all loads in sequence that were powered off during the diagnostic process and that were not diagnosed as faulty.

[0085] Step 6) Determine whether the switching of the backup secondary power module is performed in the V1 output power fault isolation processing flow: if the switching of the backup secondary power module is performed, the multi-source and multi-load power supply system fault autonomous detection and isolation process is completed; if the switching of the backup secondary power module is not performed, proceed to step 7);

[0086] Step 7) perform fault detection and isolation on all output power supplies under the secondary power supply module in turn, the process is similar to step 3) to step 6) until the VM output power supply is reached, and then proceed to step 8) after completion;

[0087] Step 8) Perform fault detection and isolation process on the VM output power of the secondary power module. Since the VM output power is the last output power of the secondary power module, there is no need to switch to the backup secondary power module for operation judgment. The fault detection and isolation process is similar to step 3) to step 5). After completion, the autonomous fault detection and isolation process of this multi-source and multi-load power supply system ends.

[0088] Embodiment 1:

[0089] A satellite multi-source multi-load cold backup power supply system is powered by the main and secondary power modules, and outputs 3 power supplies. The V1 output power supply is used to power 4 gyroscopes, the V2 output power supply is used to power 3 star sensors, and the V3 output power supply is used to power 4 momentum wheels.

[0090] The onboard computer collects the voltage, current, telemetry output, etc. of the gyroscope, star sensor, and momentum wheel to perform load fault detection:

[0091] Gyro 1 has three fault detection items under S1 and V1 output power supply. The calculated fault detection values ​​are X11=0.3, X12=0.5, and X13=0.4, respectively. The power supply impact rates of the fault detection items are Y11=0.7, Y12=0.2, and Y13=0.4, respectively. The power supply failure rate of gyro 1 is P1=0.47. Similarly, assuming that the power supply failure rate of gyro 2 is P2=0.21, the power supply failure rate of gyro 3 is P3=0.38, and the power supply failure rate of gyro 4 is P4=0.62. Then the power supply failure degree of gyro 1 is Q1=0.280, the power supply failure degree of gyro 2 is Q2=0.125, the power supply failure degree of gyro 3 is Q3=0.226, and the power supply failure degree of gyro 4 is Q4=0.369.

[0092] S2, similarly, assuming that under the V2 output power supply, the power supply fault degree of Star Sensitivity 1 is 0.235, the power supply fault degree of Star Sensitivity 2 is 0.481, and the power supply fault degree of Star Sensitivity 3 is 0.284;

[0093] S3, similarly, assuming that under the V3 output power supply, the power supply fault degree of momentum wheel 1 is 0.235, the power supply fault degree of momentum wheel 2 is 0.251, the power supply fault degree of momentum wheel 3 is 0.284, and the power supply fault degree of momentum wheel 4 is 0.230;

[0094] Working condition 1: Collect the voltages of the 3 output power supplies and perform fault detection on the V1 output power supply. When performing fault detection on the V1 output power supply, it is found that the steady-state voltage is 5V, the maximum voltage is 5.1V, the minimum voltage is 4.8V, and the DC voltage ripple value is 0.2V, which exceeds the design requirement of 0.1V. Therefore, it is judged that the V1 output power supply is working abnormally. All four gyros under the V1 output power supply are powered on. The V1 load isolation sequence formed according to the fault degree is as follows: gyro 4, gyro 1, gyro 3, gyro 2. Execute the power-off command of gyro 4, detect the V1 output power supply, and find that it is still working abnormally. Execute the power-off command of gyro 1, detect the V1 output power supply, and find that it is still working abnormally. Execute the power-off command of gyro 3, perform fault detection on the V1 output power supply, and find that the V1 output power supply is working normally, then send a power-on command to gyro 4 and gyro 3. The backup secondary power supply module was not switched during this fault isolation process, so the V2 and V3 output power supply fault detection continued. Both output power supplies worked normally, and the multi-source and multi-load power supply system fault autonomous detection and isolation process was completed.

[0095] Working condition 2: Collect the voltage of 3 output power supplies and perform fault detection on V1 output power supply. V1 output power supply works normally. Test V2 output power supply and find that V2 output power supply works abnormally. All three star sensors under V2 output power supply are powered on. The V1 load isolation sequence formed according to the fault degree is as follows: star sensor 2, star sensor 3, star sensor 1. Power off the star sensors in turn and perform fault detection on V2 output power supply. Until all three star sensors are powered off, V2 output power supply still works abnormally. It is judged that the main secondary power supply module works abnormally, and power-off instructions are sent to gyro 1, gyro 2, gyro 3, gyro 4, momentum wheel 1, momentum wheel 2, momentum wheel 3, and momentum wheel 4. After all loads are powered off, the onboard computer sends the main secondary power supply module power-off instruction and the backup secondary power supply module power-on instruction. Since no faulty load is found during the diagnosis process, all gyros, star sensors, and momentum wheels are powered on after waiting for the backup secondary power supply module to be powered on. Since the V2 output power fault isolation process involves switching the backup secondary power supply module, the multi-source and multi-load power supply system fault autonomous detection and isolation process is completed.

[0096] In summary, the present application proposes a method for autonomous detection and isolation of faults in a multi-source and multi-load power supply system, which can be applied to a system that supplies power to multiple loads through a cold backup multi-output secondary power supply module, and can autonomously and quickly detect faults in the power supply system and isolate them.

[0097] The present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and when the computer instructions are executed on a computer, the computer executes Figure 2 and Figure 3 The method described.

[0098] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0099] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0100] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0101] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0102] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A method for autonomous fault detection and isolation of a multi-source and multi-load power supply system, characterized in that: The following steps are involved: Step 1: Collect the status signal of the power supply system through the onboard computer; Step 2: According to the collected status signal, the power supply fault degree of all loads of each output power supply under the secondary power supply module is calculated in turn; Step 3: Perform fault detection on the first output power supply of the secondary power supply module, including steady-state voltage detection, DC power supply transient surge voltage detection and steady-state DC voltage ripple detection; Step 4: according to the fault detection result, determine whether the first output power supply is working abnormally. If the first output power supply is working abnormally, proceed to step 5; if the first output power supply is working normally, proceed to step 7; Step 5: According to the power supply fault degree of all powered loads of the first output power supply, a first output power supply load isolation sequence is formed, and the loads are subjected to the first output power supply fault isolation processing flow in accordance with the sequence order, and the powered loads are powered off in turn and the output power supply is re-detected to see whether it resumes normal operation; After the process is completed, proceed to step six; Step 6: Determine whether the operation of switching the backup secondary power supply module is executed in the first output power supply fault isolation processing flow. If the operation of switching the backup secondary power supply module is executed, the autonomous fault detection and isolation process of the multi-source and multi-load power supply system is completed; if the operation of switching the backup secondary power supply module is not executed, proceed to step 7; Step 7: Repeat steps 3 to 6 to perform fault detection and isolation procedures on all output power supplies under the secondary power module.

2. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: The status signal includes the steady-state voltage of the output power of the secondary power module and the transient surge voltage of the DC power supply, and the communication status and health status of the load.

3. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: The calculation method of the power supply fault degree is as follows: Assume that the i-th load under a certain output power supply, i=1,…,N, has n fault detection items, and n is an integer greater than 1. The calculation method of the load power supply fault degree is: Determine the signal fault characteristic parameters of each fault detection item, extract the key fault characteristics, and calculate the detection value of the fault detection item as Xi j ,j=1,…,n∈[0,1]; According to the actual situation of the load, analyze the impact rate of each fault detection item on the power supply of the secondary power module and set it as Yi j ,j=1,…,n∈[0,1]; Calculate the failure rate for this load as: After calculating the failure rate of all loads under the output power supply, the failure rate is normalized, and the power supply failure degree of the i-th load is:

4. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: The steady-state voltage detection is: Collect the voltage state telemetry value U1 of the first output terminal of the secondary power supply module, and calculate the steady-state average voltage of the first output terminal as follows: Among them, U1 k is the sampling instantaneous voltage, K is the number of sampling points, and K is an integer greater than 1. Steady-state voltage detection is to detect the sampling instantaneous voltage U1 k And the steady-state average voltage U1 A Whether it meets the design limit range and whether there is overvoltage or undervoltage.

5. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: The DC power supply transient surge voltage detection is to detect whether the sampled transient voltage generated by the load module during loading and unloading is undervoltage or overvoltage.

6. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: The steady-state DC voltage pulsation detection is: Find the maximum voltage U1 in the collected instantaneous voltage MAX and minimum voltage U1 MIN , then the DC voltage ripple value is MAX[U1 MAX -U1 A ,U1 A -U1 MIN ] to detect whether the DC voltage ripple value meets the design requirements.

7. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: The process of isolating the fault of the first output power supply of the load includes: a) Read the load power-on status of the first output power supply; b) Read the power supply fault degree of all powered loads, sort them from large to small according to the power supply fault degree, and form the load isolation sequence of the first output power supply. The sequence numbers of the loads in the sequence are set from sequence 1 to sequence m; c) Autonomously execute sequence 1 load power-off command; d) Execute the fault detection of the first output power supply: if the first output power supply resumes normal operation, it indicates that the fault of the load power supply end of sequence 1 of the first output power supply has caused the first output power supply to work abnormally, and the load is kept in the power-off state to isolate it from the entire power supply system, and the fault isolation processing flow is exited; if the first output power supply works abnormally, the power-off instruction of the load of sequence 2 is autonomously executed; e) Execute the fault detection of the first output power supply: if the first output power supply resumes normal operation, it indicates that the fault of the load power supply end of sequence 2 of the first output power supply has caused the first output power supply to work abnormally, and the load is kept in the power-off state to isolate it from the entire power supply system, and the sequence 1 load that was powered off during the diagnosis process is powered on, and the fault isolation process is exited; if the first output power supply works abnormally, the power-off instruction of the sequence 3 load is executed autonomously; f) Repeat the first output power fault detection until the power-off instruction of the sequence m load is autonomously executed. At this time, if the first output power resumes normal operation, it indicates that the first output power is abnormal due to the fault at the power supply end of the sequence m load of the first output power. The load is kept in the power-off state to isolate it from the entire power supply system, and the loads of the first output power that have been powered off during the diagnosis process are powered on in turn, and the fault isolation process is exited; if the working state of the first output power is still abnormal after all the powered loads are powered off, the first output power is diagnosed as faulty; g) Determine whether the first output power belongs to the main secondary power module or the backup secondary power module. If the first output power belongs to the main secondary power module, it means that the main secondary power module is faulty, and send a power-off command to all powered loads of each output power of the main secondary power, and power on the backup secondary power module after power off; if the first output power belongs to the backup secondary power module, it means that the backup secondary power module is faulty, and the main secondary power module has failed before and switched to the backup secondary power module for power supply, and it is now impossible to isolate the faulty secondary power module; h) Power on all loads in sequence that were powered off during the diagnostic process and for which no faults were diagnosed.

8. The method for autonomous fault detection and isolation of a multi-source and multi-load power supply system according to claim 1, characterized in that: When the fault detection and isolation process is performed on the last output power supply under the secondary power supply module, it is not determined whether to perform the operation of switching the backup secondary power supply module.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

10. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 8 are implemented.

Images