Vehicle safety control method and system and vehicle

Abstract

The invention relates to the technical field of fuel cells, in particular to a safety control method and system of a vehicle and the vehicle. The method comprises the following steps: acquiring first insulation state information of a fuel cell cooling system and second insulation state information of a power cell cooling system in a vehicle in real time, performing insulation fault detection on the vehicle according to the first insulation state information and the second insulation state information, determining a detection result of the insulation fault, and determining the insulation state of the vehicle according to the detection result of the insulation fault. And controlling to execute an insulation fault processing strategy matched with the detection result of the insulation fault. According to the method and the device, when the insulation fault early warning of the vehicle is detected, the power source causing the insulation fault is judged, and different processing strategies are executed for prevention according to different power sources causing the insulation fault, so that the safety and the reliability of the vehicle are improved.

Description

Technical Field

[0001] The present invention relates to the field of fuel cell technology, and in particular to a vehicle safety control method, system and vehicle. Background Art

[0002] In the power system of fuel cell vehicles, the hybrid system of fuel cell plus power battery is widely used. However, for these two types of batteries, the control of coolant conductivity is crucial. If the battery coolant conductivity is too large, it may cause serious safety problems such as short circuit and electric shock to users. However, current research mainly focuses on the control of coolant conductivity and insulation fault handling of a single battery, while ignoring the handling of insulation faults in hybrid mode. As a result, when the vehicle is in hybrid mode, insulation faults cannot be effectively prevented, causing safety problems. Therefore, in hybrid mode, when insulation faults occur, how to safely control the vehicle becomes an urgent problem to be solved. Summary of the invention

[0003] Based on this, it is necessary to provide a vehicle safety control method, system and vehicle to address the above technical issues, so as to solve the safety problems caused by insulation failure in hybrid mode.

[0004] A first aspect of an embodiment of the present application provides a vehicle safety control method, including: collecting first insulation state information of a fuel cell cooling system and second insulation state information of a power battery cooling system in a vehicle in real time, performing insulation fault detection on the vehicle according to the first insulation state information and the second insulation state information, and determining a detection result of the insulation fault; According to the detection result of the insulation fault, control is performed to execute an insulation fault processing strategy that matches the detection result of the insulation fault.

[0005] A second aspect of an embodiment of the present application provides a vehicle safety control system, comprising: a fuel cell cooling system, a power battery cooling system and a vehicle controller, wherein the vehicle controller is connected to the fuel cell cooling system and the power battery cooling system, and the vehicle controller is used to execute the vehicle safety control method described in any one of the first aspects of the claim.

[0006] A third aspect of an embodiment of the present application provides a vehicle, comprising a vehicle safety control system.

[0007] Compared with the prior art, the present invention has the following beneficial effects: The first insulation state information of the fuel cell cooling system and the second insulation state information of the power battery cooling system in the vehicle are collected in real time, and the vehicle is subjected to insulation fault detection according to the first insulation state information and the second insulation state information, and the detection result of the insulation fault is determined. According to the detection result of the insulation fault, the insulation fault processing strategy matching the detection result of the insulation fault is controlled and executed. In the present application, when an insulation fault warning is detected in the vehicle, the power source causing the insulation fault is determined, and different processing strategies are executed to prevent it according to different power sources causing the insulation fault, thereby improving the safety and reliability of the vehicle. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0009] Figure 1 is a flow chart of a vehicle safety control method provided in Embodiment 1 of the present invention; Figure 2 is a flow chart of a vehicle safety control method provided by Embodiment 2 of the present invention; Figure 3 is a flow chart of a vehicle safety control method provided by Embodiment 3 of the present invention; Figure 4 is a flow chart of a vehicle safety control method provided by a fourth embodiment of the present invention; Figure 5 is a flow chart of a vehicle safety control method provided in Embodiment 5 of the present invention; Figure 6 is a flow chart of a vehicle safety control method provided by Embodiment 6 of the present invention; Figure 7 is a flow chart of a vehicle safety control method provided by Embodiment 7 of the present invention; Figure 8 is a schematic structural diagram of a vehicle safety control system provided by Embodiment 8 of the present invention; Fig. 9 It is a schematic diagram of a vehicle provided in Embodiment 9 of the present invention. DETAILED DESCRIPTION

[0010] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0011] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0012] It should also be understood that the term "and / or" used in the present description and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0013] As used in the present specification and the appended claims, the term "if" may be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" may be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]", depending on the context.

[0014] In addition, in the description of the present specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0015] References to "one embodiment" or "some embodiments" etc. described in the present specification mean that one or more embodiments of the present invention include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0016] It should be understood that the order of execution of the steps in the following embodiments does not imply a precedence of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0017] In order to illustrate the technical solution of the present invention, specific embodiments are provided below for illustration.

[0018] See also Figure 1 , is a flow chart of a vehicle safety control method provided by Embodiment 1 of the present invention, such as Figure 1 As shown, the vehicle safety control method may include the following steps.

[0019] S101: collecting first insulation state information of a fuel cell cooling system and second insulation state information of a power battery cooling system in a vehicle in real time, performing insulation fault detection on the vehicle according to the first insulation state information and the second insulation state information, and determining a detection result of the insulation fault.

[0020] In step S101, first insulation status information of a fuel cell cooling system and second insulation status information of a power battery cooling system in a vehicle are collected in real time, wherein the first insulation status information includes the insulation resistance of a fuel cell in the fuel cell cooling system, and the second insulation status information includes the insulation resistance of the power battery. According to the first insulation status information and the second insulation status information, an insulation fault detection is performed on the vehicle to determine a detection result of the insulation fault, wherein the detection result of the insulation fault includes an early warning of an insulation fault and a corresponding insulation fault, and the early warning of the insulation fault includes an early warning of no insulation fault, an early warning of a fuel cell insulation fault, an early warning of a power battery insulation fault, and an early warning of a dual battery insulation fault, and the insulation fault includes an early warning of a fuel cell insulation fault and an early warning of a power battery insulation fault.

[0021] In this embodiment, first insulation status information of the fuel cell cooling system and second insulation status information of the power battery cooling system in the vehicle are collected in real time, and insulation fault detection is performed on the vehicle based on the first insulation status information and the second insulation status information, wherein when determining the detection result of the insulation fault, it can be determined based on the insulation resistance value.

[0022] In this embodiment, corresponding judgment conditions are set for the detection results of insulation faults, such as when the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, it is considered that the fuel cell cooling system has a fuel cell insulation fault warning, when the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, it is considered that the power battery cooling system has a power battery insulation fault warning, when the insulation resistance of the fuel cell in the first insulation state information is not greater than the second preset resistance, it is considered that the fuel cell cooling system has a fuel cell insulation fault, when the insulation resistance of the power battery in the second insulation state information is not greater than the second preset resistance, it is considered that the power battery cooling system has a power battery insulation fault. Among them, the first preset threshold is greater than the second preset threshold, and the third preset threshold is greater than the fourth preset threshold.

[0023] It should be noted that, in this embodiment, the early warning of insulation fault includes no insulation fault early warning, fuel cell insulation fault early warning, power battery insulation fault early warning, and dual battery insulation fault. Among them, if the insulation resistance of the fuel cell in the first insulation state information is not less than the first preset resistance, and the insulation resistance of the power battery in the second insulation state information is not less than the first preset resistance, it is determined to be no insulation fault early warning. If the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, it is determined to be a fuel cell insulation fault early warning. If the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, it is determined to be a power battery insulation fault early warning. If the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, and the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, it is determined to be a dual battery insulation fault early warning.

[0024] In this embodiment, insulation fault warnings are divided into different types, so that different control strategies can be implemented for different types, thereby improving the safety control of the vehicle.

[0025] S102: According to the insulation fault detection result, control execution of an insulation fault processing strategy that matches the insulation fault detection result.

[0026] In step S102, according to the detection result of the insulation fault, control is performed to execute an insulation fault processing strategy that matches the detection result of the insulation fault, wherein the insulation fault processing strategy is a strategy for making the vehicle drive safely.

[0027] In this embodiment, according to the detection result of the insulation fault, the insulation fault processing strategy that matches the detection result of the insulation fault is controlled to be executed, wherein the process of executing the insulation fault processing strategy includes a corresponding human-computer interaction process, that is, different strategies are executed according to the operation instructions of different users. Through the human-computer interaction process, the actual usage scenario can be taken into account to increase the reliability of the insulation processing strategy.

[0028] Optionally, according to the insulation fault detection result, controlling execution of an insulation fault processing strategy that matches the insulation fault detection result includes: If the insulation fault detection result is no insulation fault warning, the vehicle is controlled to operate in the hybrid power output mode.

[0029] In this embodiment, in the hybrid power output mode, if the detection result of the insulation fault is no insulation fault warning, that is, there is no abnormality in the fuel cell cooling system and the power battery cooling system, the vehicle is controlled to operate in the hybrid power output mode, wherein the hybrid power output mode is that the fuel cell and the power battery provide power to the vehicle at the same time.

[0030] See also Figure 2 , is a flow chart of a vehicle safety control method provided by Embodiment 2 of the present invention, such as Figure 2 As shown, according to the detection result of the insulation fault, controlling the execution of the insulation fault processing strategy matching the detection result of the insulation fault also includes: S201: If the insulation fault detection result is a fuel cell insulation fault warning, obtaining an operation instruction of the first user; S202: If the operation instruction of the first user is not to switch to the pure electric power output mode, control the vehicle to restrict driving, perform insulation fault detection on the vehicle, determine the insulation fault detection result, and if the insulation fault detection result is a fuel cell insulation fault, control the vehicle to switch to the pure electric power output mode; S203: In the pure electric power output mode, performing insulation fault detection on the power battery cooling system of the vehicle, and if there is a power battery insulation fault warning in the power battery cooling system, obtaining an operation instruction from the second user; S204: If the operation instruction of the second user is to perform maintenance without stopping, the vehicle is controlled to limit driving, and an insulation fault detection is performed on the power battery cooling system of the vehicle. If a power battery insulation fault occurs in the power battery cooling system, the vehicle is stopped and powered off.

[0031] In this embodiment, in the hybrid power output mode, if the insulation fault detection result is a fuel cell insulation fault warning, that is, the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, the display shows whether to switch to the pure electric power output mode, wherein the pure electric power output mode is a mode in which a power battery is used to provide power for the vehicle, and the user makes a selection according to the actual scenario to obtain the first user operation instruction. If the user chooses not to switch to the pure electric power output mode, that is, the first user's operation instruction is not to switch to the pure electric power output mode, the vehicle is controlled to limit driving, that is, the vehicle's running speed and power are limited, and the vehicle's speed and power are limited to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0032] The user chooses not to switch to the pure electric power output mode, that is, the vehicle still runs in the hybrid power output mode, and the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a fuel cell insulation fault, that is, the insulation resistance of the fuel cell is not greater than the second preset resistance, the vehicle is controlled to switch to the pure electric power output mode, that is, the power battery is used to provide power for the vehicle.

[0033] In the pure electric power output mode, the vehicle's power battery cooling system is tested for insulation faults. If there is a power battery insulation fault warning in the power battery cooling system, that is, the insulation resistance of the power battery is less than the third preset resistance and greater than the fourth preset resistance, the display shows whether to stop for maintenance. The user makes a choice according to the actual scenario and obtains a second user operation instruction. If the second user operation instruction is to stop for maintenance, the vehicle is stopped and powered off. If the second user operation instruction is not to stop for maintenance, the vehicle is controlled to limit driving, that is, limit the vehicle's running speed and power, and limit the vehicle's speed and power to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0034] In the pure electric power output mode, the vehicle's power battery cooling system continues to be tested for insulation faults. If the power battery cooling system has a power battery insulation fault, the vehicle is stopped and powered off. If the vehicle is restarted, the vehicle is stopped and powered off again.

[0035] After the user chooses not to switch into the pure electric power output mode, the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a dual battery insulation fault warning, that is, the detection result of the insulation fault is a fuel cell insulation fault warning and a power battery insulation fault warning, that is, the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, and the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, a choice of whether to stop the vehicle and power off appears in the display. If the user chooses not to stop the vehicle and power off, that is, the sixth user's operation instruction is to power off without stopping the vehicle, the vehicle is controlled to limit its driving, that is, the vehicle's running speed and power are limited, and the vehicle's speed and power are limited to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0036] The vehicle continues to run, and the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a power battery insulation fault, that is, the insulation resistance of the power battery is not greater than the second preset resistance, the vehicle is controlled to enter the fuel cell power output mode, that is, the fuel cell is used to provide power for the vehicle.

[0037] In the fuel cell power output mode, the fuel cell cooling system of the vehicle is tested for insulation faults. If a fuel cell insulation fault exists in the fuel cell cooling system, that is, the insulation resistance of the fuel cell is not greater than a second preset resistance, the vehicle is stopped and powered off.

[0038] Under the dual battery insulation fault warning, continue driving and perform insulation fault detection on the vehicle again. If the insulation fault detection result is a fuel cell insulation failure, the vehicle is controlled to switch to pure electric power output mode, that is, use the power battery to provide power for the vehicle.

[0039] In the pure electric power output mode, the vehicle's power battery cooling system is checked for insulation faults. If there is a power battery insulation fault in the power battery cooling system, that is, the insulation resistance of the power battery is not greater than a second preset resistance, the vehicle is stopped and powered off. If the vehicle is started again, the stopping and powering-off process continues.

[0040] See also Figure 3 , is a flow chart of a vehicle safety control method provided by Embodiment 3 of the present invention, such as Figure 3 As shown, after obtaining the operation instruction of the first user, the method further includes: S301: If the operation instruction of the first user is to switch into the pure electric power output mode, an insulation fault detection is performed on the power battery cooling system of the vehicle, and if there is a power battery insulation fault warning in the power battery cooling system, an operation instruction of the second user is obtained; S302: If the operation instruction of the second user is non-stop maintenance, the vehicle is controlled to be restricted from driving, and an insulation fault detection is performed on the power battery cooling system of the vehicle. If a power battery insulation fault exists in the power battery cooling system, an operation instruction of the third user is obtained; S303: If the third user operation instruction is to switch the fuel cell power output mode, the vehicle is controlled to limit driving, and the fuel cell cooling system of the vehicle is tested for insulation faults. If the fuel cell cooling system has a fuel cell insulation fault, the vehicle is stopped and powered off.

[0041] In this embodiment, after the selection of whether to switch to the pure electric power output mode appears in the display, the user makes a selection according to the actual scenario and obtains the first user operation instruction. If the user chooses to switch to the pure electric power output mode, that is, the operation instruction of the first user is to switch to the pure electric power output mode, the vehicle uses the pure electric power output mode to operate, and the insulation fault detection is performed on the power battery cooling system of the vehicle. If there is a power battery insulation fault warning in the power battery cooling system, that is, the insulation resistance of the power battery is less than the third preset resistance value and greater than the fourth preset resistance value, the selection of whether to stop for maintenance appears in the display, and the user makes a selection according to the actual scenario to obtain the second user operation instruction. If the second user operation instruction is to stop for maintenance, the vehicle is stopped and powered off. If the second user operation instruction is not to stop for maintenance, the vehicle is controlled to limit driving, that is, limit the running speed and power of the vehicle, and limit the speed and power of the vehicle to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0042] In the pure electric power output mode, the vehicle's power battery cooling system is tested for insulation faults. If there is a power battery insulation fault in the power battery cooling system, the display will show whether to switch to the fuel cell power output mode. The user makes a choice based on the actual scenario and obtains a third user operation instruction. If the third user operation instruction is to switch to the fuel cell power output mode, the vehicle is controlled to limit driving, that is, to limit the vehicle's running speed and power, and limit the vehicle's speed and power to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power. If the third user operation instruction is not to switch to the fuel cell power output mode, the vehicle is stopped and powered off.

[0043] After switching the fuel cell power output mode, the fuel cell is used to power the vehicle, and the fuel cell cooling system of the vehicle is tested for insulation faults. If there is a fuel cell insulation fault in the fuel cell cooling system, the vehicle is stopped and powered off. If the vehicle is restarted, the shutdown is continued.

[0044] See also Figure 4, is a flow chart of a vehicle safety control method provided by Embodiment 4 of the present invention, such as Figure 4 As shown, according to the detection result of the insulation fault, controlling the execution of the insulation fault processing strategy matching the detection result of the insulation fault also includes: S401: If the insulation fault detection result is a power battery insulation fault warning, obtaining a fourth user operation instruction; S402: If the fourth user operation instruction is not to switch to the fuel cell power output mode, the vehicle is controlled to be restricted from driving, an insulation fault detection is performed on the vehicle, and the insulation fault detection result is determined. If the insulation fault detection result is a power battery insulation fault, the vehicle is controlled to switch to the fuel cell power output mode; S403: In the fuel cell power output mode, performing insulation fault detection on the fuel cell cooling system of the vehicle, and if there is a fuel cell insulation fault warning in the fuel cell cooling system, obtaining an operation instruction of the second user; S404: If the operation instruction of the second user is to perform maintenance without stopping, the vehicle is controlled to limit driving, and the fuel cell cooling system of the vehicle is tested for insulation faults. If the fuel cell cooling system has a fuel cell insulation fault, the vehicle is stopped and powered off.

[0045] In this embodiment, in the hybrid power output mode, if the insulation fault detection result is a power battery insulation fault warning, that is, the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, the display shows whether to switch to the fuel cell power output mode, wherein the fuel cell power output mode is a mode in which a fuel cell is used to provide power for the vehicle, and the user makes a selection according to the actual scenario to obtain the fourth user operation instruction. If the user chooses not to switch to the fuel cell power output mode, that is, the fourth user's operation instruction is not to switch to the fuel cell power output mode, then the vehicle is controlled to limit driving, that is, limit the vehicle's running speed and power, and limit the vehicle's speed and power to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0046] The user chooses not to switch to the fuel cell power output mode, that is, the vehicle still runs in the hybrid power output mode, and the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a power battery insulation fault, that is, the insulation resistance of the power battery is not greater than the second preset resistance, the vehicle is controlled to switch to the fuel cell power output mode, that is, the fuel cell is used to provide power for the vehicle.

[0047] In the fuel cell power output mode, the fuel cell cooling system of the vehicle is tested for insulation faults. If there is a fuel cell insulation fault warning in the fuel cell cooling system, that is, the insulation resistance of the fuel cell is less than the first preset resistance and greater than the second preset resistance, the display shows whether to stop for maintenance. The user makes a choice according to the actual scenario and obtains the second user operation instruction. If the second user operation instruction is to stop for maintenance, the vehicle is stopped and powered off. If the second user operation instruction is not to stop for maintenance, the vehicle is controlled to limit driving, that is, limit the vehicle's running speed and power, and limit the vehicle's speed and power to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0048] In the fuel cell power output mode, the fuel cell cooling system of the vehicle continues to be tested for insulation faults. If there is a fuel cell insulation fault in the fuel cell cooling system, the vehicle is stopped and powered off.

[0049] After the user chooses not to switch into the fuel cell power output mode, the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a dual battery insulation fault warning, that is, the detection result of the insulation fault is a fuel cell insulation fault warning and a power battery insulation fault warning, that is, the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, and the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, a choice of whether to stop and power off appears in the display. If the user chooses not to stop and power off, that is, the operation instruction of the sixth user is to power off without stopping, the vehicle is controlled to limit its driving, that is, the vehicle's running speed and power are limited, and the vehicle's speed and power are limited to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0050] The vehicle continues to run, and the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a power battery insulation fault, that is, the insulation resistance of the power battery is not greater than the second preset resistance, the vehicle is controlled to enter the fuel cell power output mode, that is, the fuel cell is used to provide power for the vehicle.

[0051] In the fuel cell power output mode, the fuel cell cooling system of the vehicle is checked for insulation faults. If a fuel cell insulation fault exists in the fuel cell cooling system, that is, the insulation resistance of the fuel cell is not greater than a second preset resistance, the vehicle is stopped and powered off. If the vehicle is restarted, the shutdown is continued.

[0052] Under the dual battery insulation fault warning, continue driving and perform insulation fault detection on the vehicle again. If the insulation fault detection result is a fuel cell insulation failure, the vehicle is controlled to switch to pure electric power output mode, that is, use the power battery to provide power for the vehicle.

[0053] In the pure electric power output mode, the vehicle's power battery cooling system is checked for insulation faults. If the power battery cooling system has a power battery insulation fault, that is, the insulation resistance of the power battery is not greater than a second preset resistance, the vehicle is stopped and powered off. If the vehicle is restarted, the stopping and powering-off process continues.

[0054] See also Figure 5 , is a flow chart of a vehicle safety control method provided by Embodiment 5 of the present invention, such as Figure 5 As shown, after obtaining the fourth user operation instruction, the method further includes: S501: If the operation instruction of the fourth user is to switch into the fuel cell power output mode, an insulation fault detection is performed on the fuel cell cooling system of the vehicle, and if there is a fuel cell insulation fault warning in the fuel cell cooling system, an operation instruction of the second user is obtained; S502: If the operation instruction of the second user is to perform maintenance without stopping, the vehicle is controlled to be restricted from driving, and an insulation fault detection is performed on the fuel cell cooling system of the vehicle. If a fuel cell insulation fault exists in the fuel cell cooling system, an operation instruction of the fifth user is obtained; S503: If the fifth user operation instruction is to switch to the pure electric power output mode, the vehicle is controlled to restrict driving, and an insulation fault detection is performed on the power battery cooling system of the vehicle. If a power battery insulation fault occurs in the power battery cooling system, the vehicle is stopped and powered off.

[0055] In this embodiment, after the selection of whether to switch to the fuel cell power output mode appears in the display, the user makes a selection according to the actual scenario and obtains the fourth user operation instruction. If the user chooses to switch to the pure electric power output mode, that is, the fourth user's operation instruction is to switch to the pure electric power output mode, the vehicle uses the fuel cell power output mode to operate, and the fuel cell cooling system of the vehicle is tested for insulation faults. If there is a fuel cell insulation fault warning in the fuel cell cooling system, that is, the insulation resistance of the fuel cell is less than the first preset resistance and greater than the second preset resistance, the selection of whether to stop for maintenance appears in the display, and the user makes a selection according to the actual scenario to obtain the second user operation instruction. If the second user operation instruction is to stop for maintenance, the vehicle is stopped and powered off. If the second user operation instruction is not to stop for maintenance, the vehicle is controlled to limit driving, that is, limit the running speed and power of the vehicle, and limit the speed and power of the vehicle to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0056] In the fuel cell power output mode, the fuel cell cooling system of the vehicle is tested for insulation faults. If there is a fuel cell insulation fault in the fuel cell cooling system, the display will show whether to switch to the pure electric power output mode. The user makes a choice based on the actual scenario and obtains the fifth user operation instruction. If the fifth user operation instruction is to switch to the pure electric battery power output mode, the vehicle is controlled to limit driving, that is, the vehicle's running speed and power are limited to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power. If the fifth user operation instruction is not to switch to the pure electric power output mode, the vehicle is stopped and powered off. If the vehicle is restarted, the parking and power-off execution will continue.

[0057] After switching to the pure electric power output mode, the power battery is used to power the vehicle, and the vehicle's power battery cooling system is checked for insulation faults. If there is a power battery insulation fault in the power battery cooling system, the vehicle is stopped and powered off.

[0058] See also Figure 6 , is a flow chart of a vehicle safety control method provided by Embodiment 6 of the present invention, such as Figure 6 As shown, according to the detection result of the insulation fault, controlling the execution of the insulation fault processing strategy matching the detection result of the insulation fault also includes: S601: If the insulation fault detection result is a dual-battery insulation fault warning, a sixth user operation instruction is obtained; S602: If the sixth user operation instruction is to power off without stopping the vehicle, control the vehicle to limit driving, perform insulation fault detection on the vehicle, and determine the insulation fault detection result; S603: If the insulation fault detection result is a power battery insulation fault, control the vehicle to switch into a fuel cell power output mode; S604: Perform insulation fault detection on the fuel cell cooling system of the vehicle. If there is an insulation fault in the fuel cell, the vehicle is stopped and powered off.

[0059] In this embodiment, in the hybrid power output mode, if the detection result of the insulation fault is a dual battery insulation fault warning, that is, the detection result of the insulation fault is a fuel cell insulation fault warning and a power battery insulation fault warning, that is, the insulation resistance of the fuel cell in the first insulation state information is less than the first preset resistance and greater than the second preset resistance, and the insulation resistance of the power battery in the second insulation state information is less than the third preset resistance and greater than the fourth preset resistance, a choice of whether to stop the vehicle and power off appears in the display. If the user chooses not to stop the vehicle and power off, that is, the operation instruction of the sixth user is to power off without stopping the vehicle, the vehicle is controlled to limit its driving, that is, the vehicle's running speed and power are limited, and the vehicle's speed and power are limited to a certain range, so that the vehicle can be in a safe state when driving according to the corresponding speed and power.

[0060] The vehicle continues to run, and the insulation fault of the vehicle is detected to determine the detection result of the insulation fault. If the detection result of the insulation fault is a power battery insulation fault, that is, the insulation resistance of the power battery is not greater than the second preset resistance, the vehicle is controlled to enter the fuel cell power output mode, that is, the fuel cell is used to provide power for the vehicle.

[0061] In the fuel cell power output mode, the fuel cell cooling system of the vehicle is checked for insulation faults. If a fuel cell insulation fault exists in the fuel cell cooling system, that is, the insulation resistance of the fuel cell is not greater than a second preset resistance, the vehicle is stopped and powered off. If the vehicle is restarted, the shutdown is continued.

[0062] See also Figure 7 , is a flow chart of a vehicle safety control method provided by Embodiment 7 of the present invention, such as Figure 7 As shown, after determining the detection result of the insulation fault, it also includes: S701: If the insulation fault detection result is a fuel cell insulation fault, the vehicle is controlled to switch into a pure electric power output mode; S702: Perform insulation fault detection on the power battery cooling system of the vehicle. If the power battery cooling system has a power battery insulation fault, the vehicle is stopped and powered off.

[0063] In this embodiment, under the dual battery insulation fault warning, the vehicle continues to drive and performs insulation fault detection on the vehicle again. If the insulation fault detection result is a fuel cell insulation fault, the vehicle is controlled to switch to a pure electric power output mode, that is, the power battery is used to provide power for the vehicle.

[0064] In the pure electric power output mode, the vehicle's power battery cooling system is checked for insulation faults. If the power battery cooling system has a power battery insulation fault, that is, the insulation resistance of the power battery is not greater than a second preset resistance, the vehicle is stopped and powered off. If the vehicle is restarted, the stopping and powering-off process continues.

[0065] The first insulation state information of the fuel cell cooling system and the second insulation state information of the power battery cooling system in the vehicle are collected in real time, and the vehicle is subjected to insulation fault detection according to the first insulation state information and the second insulation state information, and the detection result of the insulation fault is determined. According to the detection result of the insulation fault, the insulation fault processing strategy matching the detection result of the insulation fault is controlled and executed. In the present application, when an insulation fault warning is detected in the vehicle, the power source causing the insulation fault is determined, and different processing strategies are executed to prevent it according to different power sources causing the insulation fault, thereby improving the safety and reliability of the vehicle.

[0066] See also Figure 8 , is a schematic diagram of the structure of a vehicle safety control system 80 provided in Embodiment 8 of the present invention, such as Figure 8 As shown, the vehicle safety control system 80 includes a fuel cell cooling system 81, a power battery cooling system 82 and a vehicle controller 83. The vehicle controller 83 is connected to the fuel cell cooling system 81 and the power battery cooling system 82. The vehicle controller 83 is used for the vehicle safety control method.

[0067] In this embodiment, the fuel cell cooling system 81 and the power battery cooling system 82 detect the insulation status information of the corresponding battery within a preset interval time period, and send the corresponding insulation status information to the vehicle controller 83, control the real-time acquisition of the first insulation status information of the fuel cell cooling system 81 and the second insulation status information of the power battery cooling system 82, and perform insulation fault detection on the vehicle according to the first insulation status information and the second insulation status information to determine the detection result of the insulation fault; It should be noted that the fuel cell cooling system 81 and the power battery cooling system 82 send corresponding signals to the vehicle controller 83 as insulation status information. The vehicle controller 83 performs insulation fault detection on the vehicle according to the received signals and determines the detection result of the insulation fault. For example, the fuel cell cooling system 81 sends a fuel cell insulation status signal and a fuel cell insulation fault status signal to the vehicle controller 83. The fuel cell insulation status signal includes a fuel cell no abnormality signal "0", a fuel cell insulation fault warning signal "1" and a fuel cell insulation fault signal "2". The fuel cell insulation fault status signal includes a fuel cell no insulation fault signal "0" and a fuel cell insulation fault signal "1".

[0068] The power battery cooling system 82 sends a power battery insulation status signal and a power battery insulation fault status signal to the vehicle controller 83. The power battery insulation status signal includes a power battery normal abnormality signal "0", a power battery insulation fault warning signal "1" and a power battery insulation fault signal "2". The power battery insulation fault status signal includes a power battery no insulation fault signal "0" and a power battery insulation fault signal "1".

[0069] The vehicle controller 83 performs insulation fault detection on the vehicle according to the received signal and determines the detection result of the insulation fault. Among them, the detection result of the insulation fault includes the insulation state of the vehicle and the insulation fault state of the vehicle. The corresponding signal of the insulation state of the vehicle includes the signal "00" indicating that the insulation state of the vehicle is normal, the signal "11" indicating the insulation fault warning of the fuel cell in the fuel cell power output mode, the signal "12" indicating the insulation fault warning of the power battery in the pure electric power output mode, the signal "13" indicating the insulation fault warning of the fuel cell in the hybrid power output mode, the signal "14" indicating the insulation fault warning of the power battery in the hybrid power output mode, the signal "15" indicating the insulation fault warning of both the fuel cell and the power battery in the hybrid power output mode, the signal "21" indicating the insulation fault of the fuel cell in the fuel cell power output mode, the signal "22" indicating the insulation fault of the power battery in the pure electric power output mode, the signal "23" indicating the insulation fault of the fuel cell in the hybrid power output mode, the signal "24" indicating the insulation fault of the power battery in the hybrid power output mode, and the signal "25" indicating the insulation fault of the dual battery in the hybrid power output mode. The insulation fault state signal of the vehicle includes the signal "0" indicating no insulation fault, the signal "1" indicating the insulation fault warning of the fuel cell, the signal "2" indicating the insulation fault of the power battery, and the signal "3" indicating the insulation fault of the dual battery.

[0070] The vehicle's safety control system 20 also includes an instrument display, which is used for user interaction. The instrument display prompt signal includes an instrument display no prompt signal "0x0", a fuel cell insulation fault warning, whether to switch to the pure electric power output mode signal "0x1", a power battery insulation fault warning, whether to switch to the fuel cell power output mode signal "0x2", a fuel cell insulation fault warning, whether to stop for maintenance signal "0x3", a power battery insulation fault warning, whether to stop for maintenance signal "0x4", a dual battery insulation fault warning, whether to stop and power off signal "0x5", a fuel cell insulation fault, switch to the pure electric power output mode signal "1x1", a power battery insulation fault, switch to the fuel cell power output mode signal "1x2", a fuel cell insulation fault, stop and power off "1x3", a power battery insulation fault, stop and power off signal "1x4", a dual battery insulation fault, stop and power off signal "1x5", whether to switch to the pure electric power output mode signal "2x1", whether to switch to the fuel cell power output mode signal "2x2", a failure signal to switch to the pure electric power output mode "2x3", and a failure signal to switch to the fuel cell power output mode "2x4".

[0071] It should be noted that the instrument display includes corresponding prompt lights, and the prompt lights give prompts according to the corresponding prompt signals. If there is no insulation fault, the corresponding prompt signal is "0", and the prompt light is off. If there is an insulation fault warning, the corresponding prompt signal is "1", and the prompt light is yellow. If there is an insulation fault, the corresponding prompt signal is "2", and the prompt light is red.

[0072] When the vehicle controller 83 controls the corresponding mode, it uses the corresponding mode signal to indicate the switch-in and switch-out. For example, the hybrid power output mode signal includes the switch-out hybrid power output mode signal as "0" and the switch-on hybrid power output mode signal as "1". The fuel cell power output mode signal includes the shut-off fuel cell signal as "0" and the switch-on fuel cell signal as "1". The pure electric power output mode signal includes the shut-off power battery signal as "0" and the switch-on power battery signal as "1".

[0073] In the process of controlling the restricted driving of the vehicle, the signal for controlling the restricted driving of the vehicle includes a signal "0" for not reducing the running speed and power of the vehicle, and a signal "1" for reducing the running speed and power of the vehicle. The signals corresponding to the process of stopping and powering off include a start-up power-on signal and a stop-power-off signal, the start-up power-on signal is "0", and the stop-power-off signal is "1". The signals corresponding to the process of starting and powering on include a stop-power-off signal and a start-up power-on signal, the stop-power-off signal is "0", and the start-power-on signal is "1".

[0074] In the hybrid power output mode, the fuel cell cooling system detects the insulation resistance of the fuel cell at regular intervals. If the insulation resistance of the fuel cell is detected to be greater than the preset first preset resistance for two consecutive times, the fuel cell insulation state signal "0", the fuel cell insulation fault state signal "0", and the insulation resistance of the fuel cell are sent to the vehicle controller. The power battery cooling system detects the insulation resistance of the power battery at regular intervals. If the insulation resistance of the power battery is detected to be greater than the preset third preset resistance for two consecutive times, the power battery insulation state signal "0", the power battery insulation fault state signal "0", and the insulation resistance of the power battery are sent to the vehicle controller. The vehicle controller performs insulation fault detection on the vehicle based on the received information and determines that the detection result of the insulation fault is no insulation fault warning. The vehicle insulation state signal of the vehicle controller is set to "0", the vehicle insulation fault state signal is set to "0", the prompt light in the instrument display is off, the instrument display prompts "0x0", and the hybrid power output mode continues to be used. The hybrid power output mode enable signal is set to "1", the fuel cell power output mode enable signal "1" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "1" is sent to the power battery cooling system.

[0075] In the hybrid power output mode, the fuel cell cooling system detects the insulation resistance of the fuel cell at regular intervals. If the insulation resistance of the fuel cell is detected to be less than the first preset resistance and greater than the second preset resistance for two consecutive times, the fuel cell insulation status signal "1", the fuel cell insulation fault status signal "0", and the insulation resistance of the fuel cell are sent to the vehicle controller. The power battery cooling system detects the insulation resistance of the power battery at regular intervals. If the insulation resistance of the power battery is detected to be greater than the preset third preset resistance for two consecutive times, the power battery insulation status signal "0", the power battery insulation fault status signal "0", and the insulation resistance of the power battery are sent to the vehicle controller. The vehicle controller performs insulation fault detection on the vehicle based on the received information, and determines that the detection result of the insulation fault is a fuel cell insulation fault warning.

[0076] In hybrid output mode, the fuel cell insulation fault warning is provided, but the power battery has no insulation fault warning. The insulation fault handling strategies include: The vehicle insulation status signal is set to "13", the vehicle insulation fault status signal is set to "0", the warning light in the instrument display is yellow, and the instrument display prompt signal is "0x1", that is, the fuel cell insulation fault warning, whether to switch to the pure electric power output mode signal. The user makes a choice based on the actual scenario. If the user chooses not to switch to the pure electric power output mode, the hybrid power output mode is enabled and set to "1", and the fuel cell power output mode enable signal "1" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "1" is sent to the power battery cooling system. The warning light in the instrument display is yellow, and the instrument display prompt signal is set to "0x0". The vehicle continues to operate in the hybrid power output mode, and the vehicle limit driving signal is set to "1" to reduce the power and reduce the speed of the vehicle.

[0077] The fuel cell cooling system detects the insulation resistance of the fuel cell at regular intervals. If the insulation resistance of the fuel cell is detected to be no greater than the second preset resistance for two consecutive times, the fuel cell cooling system sends the fuel cell insulation status signal "2" to the vehicle controller, the vehicle insulation status signal is set to "23", the vehicle insulation fault status signal is set to "3", the prompt light in the instrument display is red, and the instrument display prompt signal is set to "1x1", that is, the fuel cell insulation fault, the pure electric power output mode signal is switched on, and the hybrid power output mode enable signal is set to "0". The vehicle controller sets the fuel cell power output mode enable signal to "0" and sends it to the fuel cell cooling system, and sets the pure electric power output mode enable signal to "1" and sends it to the power battery cooling system. The vehicle operates in pure electric power output mode.

[0078] In the pure electric power output mode, the power battery cooling system detects the insulation resistance of the power battery at regular intervals. If the insulation resistance of the power battery is detected to be less than the third preset resistance and greater than the fourth preset resistance for two consecutive times, the power battery insulation status signal "1" and the power battery insulation fault status signal "0" are sent to the vehicle controller, and the vehicle insulation status signal is set to "12". The warning light in the instrument display lights up yellow, and the instrument display prompt signal is set to "0x4", which is a power battery insulation fault warning and a signal of whether to stop for maintenance. If the user chooses to stop for maintenance, the pure electric power output mode enable signal "0" is sent to the power battery cooling system to shut down the power battery. The parking power-off signal is set to "1". If the user chooses not to stop for maintenance, the vehicle restriction driving control signal is set to "1", the vehicle is restricted from driving, the warning light in the instrument display lights up yellow, and the instrument display prompt signal is set to "0x0".

[0079] In the pure electric power output mode, if the insulation resistance of the power battery is detected to be no greater than the fourth preset resistance for two consecutive times, the power battery cooling system will send the power battery insulation status signal "2" to the vehicle controller, and the vehicle insulation status signal will be set to "22", and the vehicle insulation fault status signal will be set to "2". The warning light in the instrument display will light up red, and the instrument display warning signal will be set to "1x4", that is, the power battery insulation fault, the stop power-off signal, the pure electric power output mode enable signal will be set to "0" and sent to the power battery cooling system, the power battery will be turned off, and the stop power-off signal will be set to "1". If the user starts the power-on, the start power-on signal will be set to "1", and the stop power-off signal will continue to be set to "1", and the start power-on signal will be set to "0".

[0080] In hybrid output mode, there is a fuel cell insulation fault warning, and there is no insulation fault warning for the power battery. If the vehicle continues to operate in the hybrid output mode, and the insulation resistance of the power battery is detected twice in succession to be less than the preset third preset resistance and greater than the preset fourth threshold, that is, a dual battery insulation fault warning, the fuel cell cooling system sends the fuel cell insulation status signal "1" and the fuel cell insulation fault status signal "0" to the vehicle controller, and the power battery cooling system sends the power battery insulation status signal "1" and the power battery insulation fault status signal "0" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "15" and sets the vehicle insulation fault status signal to "0". The prompt light in the instrument display is yellow, and the instrument display prompts the signal "0x5", which is a dual battery insulation fault warning, whether to stop and power off. If the user chooses to stop and power off, the hybrid output mode enable signal is set to "0", and the fuel cell power output mode enable signal "0" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "0," is sent to the power battery cooling system, and the stop and power off signal is set to "1". If the user chooses to power off without stopping, the vehicle's restricted driving signal is set to "1", the vehicle reduces power and speed, the hybrid power output mode enable signal is set to "1", and the vehicle controller sets the fuel cell power output mode enable signal to "1" and sends it to the fuel cell cooling system, and sets the pure electric power output mode enable signal to "1" and sends it to the power battery cooling system. The prompt light in the instrument display lights up yellow, and the instrument display prompt signal is set to "0x0".

[0081] After continuing to operate in the hybrid output mode, if the insulation resistance of the fuel cell is detected to be no greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. If the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation state signal "2" and the power battery insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "25" and the vehicle insulation fault state signal to "3". The warning light in the instrument display turns red. The instrument display prompts the signal "1x5", i.e., dual battery insulation failure, parking power-off signal, and the hybrid output mode activation signal is set to "0". The fuel cell power output mode activation signal "0" is sent to the fuel cell cooling system, and the pure electric power output mode activation signal "0" is sent to the power battery cooling system. The parking power-off signal is set to "1". If the user starts the power-on, the start power-on signal is set to "1", and the parking power-off signal continues to be set to "1", and the start power-on signal is set to "0".

[0082] After continuing to operate in the hybrid power output mode, if the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation state signal "2" and the power battery insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "24" and the vehicle insulation fault state signal to "3", the warning light in the instrument display turns red, and the instrument display prompts the signal "1x2", that is, the power battery insulation fault, cuts into the fuel cell power output mode signal, sets the hybrid power output mode enable signal to "0", sends the fuel cell power output mode enable signal "1" to the fuel cell cooling system, and sends the pure electric power output mode enable signal "0" to the power battery cooling system. The vehicle controller sets the vehicle insulation state signal to "11" and the vehicle insulation fault state signal to "0", sets the vehicle control limit driving signal to "1" and sends it to the fuel cell cooling system, the warning light in the instrument display turns yellow, and the instrument display prompt signal is set to "0x0", that is, there is no prompt signal, and the vehicle operates in the fuel cell power output mode.

[0083] In the fuel cell power output mode, if the insulation resistance of the fuel cell is detected to be no greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation status signal "2" and the fuel cell insulation fault status signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "21" and the vehicle insulation fault status signal to "1", the warning light in the instrument display turns red, and the instrument display prompts the signal "1x3", i.e., fuel cell insulation fault, stop and power off signal, and sends the fuel cell power output mode activation signal "0" to the fuel cell cooling system, and sets the stop and power off signal to "1".

[0084] After continuing to operate in the hybrid power output mode, if the insulation resistance of the fuel cell is detected to be no greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "23" and the vehicle insulation fault state signal to "3", the warning light in the instrument display turns red, and the instrument display prompt signal "1x1", that is, the fuel cell insulation fault, cuts into the pure electric power output mode signal, sets the hybrid power output mode enable signal to "0", sends the fuel cell power output mode enable signal "0" to the fuel cell cooling system, and sends the pure electric power output mode enable signal "1" to the power battery cooling system. The vehicle controller sets the vehicle insulation state signal to "12", sets the vehicle insulation fault state signal to "0", sets the vehicle control vehicle restricted driving signal to "1" and sends it to the power battery cooling system, the warning light in the instrument display turns yellow, and the instrument display prompt signal is set to "0x0", that is, there is no prompt signal, and the vehicle operates in the pure electric power output mode.

[0085] In the pure electric power output mode, if the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation status signal "2" and the power battery insulation fault status signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "22" and the vehicle insulation fault status signal to "2". The warning light in the instrument display turns red, and the instrument display prompts the signal "1x4", that is, the power battery insulation fault, the parking power-off signal, and the pure electric power output mode enable signal "0" is sent to the power battery cooling system, and the parking power-off signal is set to "1". If the user starts the power-on, the start power-on signal is set to "1", and the parking power-off signal continues to be set to "1", and the start power-on signal is set to "0".

[0086] In hybrid power output mode, there is a fuel cell insulation fault warning, and there is no insulation fault warning for the power battery. The instrument display prompts a signal "0x1", which is a fuel cell insulation fault warning. After the signal of whether to switch to the pure electric power output mode is displayed, if the user chooses to switch to the pure electric power output mode, the hybrid power output mode is enabled and set to "0", and the fuel cell power output mode enable signal "0" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "1" is sent to the power battery cooling system. The warning light in the instrument display is off, and the instrument display prompt signal is set to "0x0", and the vehicle runs in pure electric power output mode.

[0087] In the pure electric power output mode, the power battery cooling system detects the insulation resistance of the power battery at regular intervals. If the insulation resistance of the power battery is detected to be less than the third preset resistance and greater than the fourth preset resistance for two consecutive times, the power battery insulation status signal "1" and the power battery insulation fault status signal "0" are sent to the vehicle controller, and the vehicle insulation status signal is set to "12". The warning light in the instrument display lights up yellow, and the instrument display prompt signal is set to "0x4", which is a power battery insulation fault warning and a signal of whether to stop for maintenance. If the user chooses to stop for maintenance, the pure electric power output mode enable signal "0" is sent to the power battery cooling system to shut down the power battery. The parking power-off signal is set to "1". If the user chooses not to stop for maintenance, the vehicle restriction driving control signal is set to "1", the vehicle is restricted from driving, the warning light in the instrument display lights up yellow, and the instrument display prompt signal is set to "0x0".

[0088] After the vehicle is controlled to restrict driving, the vehicle continues to operate in pure electric power output mode. If the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system will send the power battery insulation status signal "2" and the power battery insulation fault status signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "22", sets the vehicle insulation fault state signal to "2", the warning light in the instrument display turns red, and the instrument display prompt signal "2x2", that is, whether to switch into the fuel cell power output mode signal. If the user chooses to switch into the fuel cell power output mode, the vehicle restriction driving signal is set to "1", so that the vehicle reduces power and speed, and the fuel cell power output mode activation signal "1" is sent to the fuel cell cooling system, and the pure electric power output mode activation signal "0" is sent to the power battery cooling system. The vehicle controller sets the vehicle insulation state signal to "11", sets the vehicle insulation fault state signal to "0", controls the vehicle restriction driving signal to "1" and sends it to the fuel cell cooling system, the warning light in the instrument display turns yellow, and the instrument display prompt signal is set to "0x0", that is, there is no prompt signal, and the vehicle runs in the fuel cell power output mode. In the fuel cell power output mode, if the insulation resistance of the fuel cell is detected to be not greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "21" and the vehicle insulation fault status signal to "1". The warning light in the instrument display lights up red, and the instrument display prompts the signal "1x3", that is, the fuel cell insulation fault, the stop power-off signal, and the enable fuel cell power output mode signal is set to "0" and sent to the fuel cell cooling system, and the stop power-off signal is set to "1". If the user starts the power-on, the start power-on signal is set to "1", and the stop power-off signal continues to be set to "1", and the start power-on signal is set to "0".

[0089] In hybrid output mode, there is no warning for fuel cell insulation failure, but there is a warning for power battery insulation failure. Implementation of insulation fault handling strategies includes: The vehicle controller sets the vehicle insulation status signal to "14", the vehicle insulation fault status signal to "0", the warning light in the instrument display turns yellow, and the instrument display prompts a signal "0x2", which is a power battery insulation fault warning, indicating whether to switch to the fuel cell power output mode. The user makes a choice based on the actual scenario. If the user chooses not to switch to the fuel power output mode, the hybrid power output mode is enabled and set to "1", and the fuel cell power output mode enable signal "1" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "1" is sent to the power battery cooling system. The warning light in the instrument display turns yellow, and the instrument display prompt signal is set to "0x0". The vehicle continues to operate in the hybrid power output mode, and the vehicle limit driving signal is set to "1" to reduce the power and speed of the vehicle.

[0090] The power battery cooling system detects the insulation resistance of the power battery at regular intervals. If the insulation resistance of the power battery is detected to be no greater than the fourth preset resistance for two consecutive times, the power battery cooling system sends the power battery insulation status signal "2" to the vehicle controller, the vehicle insulation status signal is set to "24", the vehicle insulation fault status signal is set to "3", the prompt light in the instrument display is red, and the instrument display prompt signal is set to "1x2", that is, the power battery insulation fault, the fuel cell power output mode signal is switched on, and the hybrid power output mode enable signal is set to "0". The vehicle controller sets the fuel cell power output mode enable signal to "1" and sends it to the fuel cell cooling system, and sets the pure electric power output mode enable signal to "0" and sends it to the power battery cooling system. The vehicle operates in the fuel cell power output mode.

[0091] In the fuel cell power output mode, the fuel cell cooling system detects the insulation resistance of the fuel cell at regular intervals. If the insulation resistance of the fuel cell is detected to be less than the first preset resistance and greater than the second preset resistance for two consecutive times, the fuel cell insulation status signal "1" and the fuel cell insulation fault status signal "0" are sent to the vehicle controller, and the vehicle insulation status signal is set to "11". The warning light in the instrument display turns on yellow, and the instrument display prompt signal is set to "0x3", which is a fuel cell insulation fault warning and a signal of whether to stop for maintenance. If the user chooses to stop for maintenance, the fuel cell power output mode enable signal "0" is sent to the fuel cell cooling system to shut down the fuel cell. The parking signal is set to "1". If the user chooses not to stop for maintenance, the vehicle restriction driving control signal is set to "1", the vehicle is restricted from driving, the warning light in the instrument display turns on yellow, and the instrument display prompt signal is set to "0x0".

[0092] In the fuel cell power output mode, if the insulation resistance of the power battery is detected to be no greater than the second preset resistance for two consecutive times, the fuel cell cooling system will send the power battery insulation status signal "2" to the vehicle controller, and the vehicle insulation status signal will be set to "21", and the vehicle insulation fault status signal will be set to "2". The warning light in the instrument display will light up red, and the instrument display warning signal will be set to "1x3", that is, the fuel cell insulation fault, the stop power-off signal, the fuel cell power output mode enable signal will be set to "0" and sent to the fuel cell cooling system, the fuel cell will be turned off, and the stop power-off signal will be set to "1". If the user starts the power-on, the start power-on signal will be set to "1", and the stop power-off signal will continue to be set to "1", and the start power-on signal will be set to "0".

[0093] In the hybrid output mode, there is no warning for fuel cell insulation failure, but there is a warning for power battery insulation failure. If the vehicle continues to operate in the hybrid output mode, if the insulation resistance of the fuel cell is detected to be less than the preset first resistance and greater than the preset second threshold for two consecutive times, that is, a dual battery insulation failure warning, the fuel cell cooling system sends the fuel cell insulation status signal "1" and the fuel cell insulation fault status signal "0" to the vehicle controller, and the power battery cooling system sends the power battery insulation status signal "1" and the power battery insulation fault status signal "0" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "15" and sets the vehicle insulation fault status signal to "0". The prompt light in the instrument display is yellow, and the instrument display prompts the signal "0x5", which is a dual battery insulation failure warning, and whether to stop and power off. If the user chooses to stop and power off, the hybrid output mode enable signal is set to "0", and the fuel cell power output mode enable signal "0" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "0," is sent to the power battery cooling system, and the stop and power off signal is set to "1". If the user chooses to power off without stopping, the hybrid power output mode enable signal is set to "1", the vehicle controller sets the fuel cell power output mode enable signal to "1" and sends it to the fuel cell cooling system, sets the pure electric power output mode enable signal to "1" and sends it to the power battery cooling system, the prompt light in the instrument display lights up yellow, the instrument display prompt signal is set to "0x0", and the vehicle restricted driving signal is set to "1".

[0094] After continuing to operate in the hybrid output mode, if the insulation resistance of the fuel cell is detected to be no greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. If the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation state signal "2" and the power battery insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "25" and the vehicle insulation fault state signal to "3". The warning light in the instrument display turns red. The instrument display prompts the signal "1x5", i.e., dual battery insulation failure, parking power-off signal, and the hybrid output mode activation signal is set to "0". The fuel cell power output mode activation signal "0" is sent to the fuel cell cooling system, and the pure electric power output mode activation signal "0" is sent to the power battery cooling system. The parking power-off signal is set to "1". If the user starts the power-on, the start power-on signal is set to "1", and the parking power-off signal continues to be set to "1", and the start power-on signal is set to "0".

[0095] After continuing to operate in the hybrid power output mode, if the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation state signal "2" and the power battery insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "24" and the vehicle insulation fault state signal to "3", the warning light in the instrument display turns red, and the instrument display prompts the signal "1x2", that is, the power battery insulation fault, cuts into the fuel cell power output mode signal, sets the hybrid power output mode enable signal to "0", sends the fuel cell power output mode enable signal "1" to the fuel cell cooling system, and sends the pure electric power output mode enable signal "0" to the power battery cooling system. The vehicle controller sets the vehicle insulation state signal to "11" and the vehicle insulation fault state signal to "0", sets the vehicle control limit driving signal to "1" and sends it to the fuel cell cooling system, the warning light in the instrument display turns yellow, and the instrument display prompt signal is set to "0x0", that is, there is no prompt signal, and the vehicle operates in the fuel cell power output mode.

[0096] In the fuel cell power output mode, if the insulation resistance of the fuel cell is detected to be no greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "21" and the vehicle insulation fault state signal to "1". The warning light in the instrument display turns red, and the instrument display prompts the signal "1x3", that is, the fuel cell insulation fault, the parking power-off signal, and the activation of the fuel cell power output mode signal "0" is sent to the fuel cell cooling system, and the parking power-off signal is set to "1". If the user starts the power-on, the start power-on signal is set to "1", and the parking power-off signal is continued to be set to "1", and the start power-on signal is set to "0".

[0097] After continuing to operate in the hybrid power output mode, if the insulation resistance of the fuel cell is detected to be no greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "23" and the vehicle insulation fault state signal to "3", the warning light in the instrument display turns red, and the instrument display prompt signal "1x1", that is, the fuel cell insulation fault, cuts into the pure electric power output mode signal, sets the hybrid power output mode enable signal to "0", sends the fuel cell power output mode enable signal "0" to the fuel cell cooling system, and sends the pure electric power output mode enable signal "1" to the power battery cooling system. The vehicle controller sets the vehicle insulation state signal to "12", sets the vehicle insulation fault state signal to "0", sets the vehicle control vehicle restricted driving signal to "1" and sends it to the power battery cooling system, the warning light in the instrument display turns yellow, and the instrument display prompt signal is set to "0x0", that is, there is no prompt signal, and the vehicle operates in the pure electric power output mode.

[0098] In the pure electric power output mode, if the insulation resistance of the power battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation status signal "2" and the power battery insulation fault status signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "22" and the vehicle insulation fault status signal to "2". The warning light in the instrument display turns red, and the instrument display prompts the signal "1x4", which means that the power battery insulation is faulty. The parking power-off signal will enable the pure electric power output mode signal "0" and send it to the power battery cooling system, and set the parking power-off signal to "1". If the user starts the power-on, the start power-on signal will be set to "1", and the parking power-off signal will continue to be set to "1", and the start power-on signal will be set to "0".

[0099] In the hybrid power output mode, there is no warning for fuel cell insulation failure, but there is a warning for power battery insulation failure. The instrument display prompts a signal "0x2", which is a warning for power battery insulation failure. After switching to the fuel cell power output mode, if the user chooses to switch to the fuel cell power output mode, the hybrid power output mode is enabled and set to "0", and the fuel cell power output mode enable signal "1" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "0" is sent to the power battery cooling system. The warning light in the instrument display is off, and the instrument display prompt signal is set to "0x0", and the vehicle operates in the fuel cell power output mode.

[0100] In the fuel cell power output mode, the fuel cell cooling system detects the insulation resistance of the fuel cell at regular intervals. If the insulation resistance of the fuel cell is detected to be less than the first preset resistance and greater than the second preset resistance for two consecutive times, the fuel cell insulation status signal "1" and the fuel cell insulation fault status signal "0" are sent to the vehicle controller, and the vehicle insulation status signal is set to "11". The warning light in the instrument display turns on yellow, and the instrument display prompt signal is set to "0x3", which is a fuel cell insulation fault warning and a signal of whether to stop for maintenance. If the user chooses to stop for maintenance, the fuel cell power output mode enable signal "0" is sent to the fuel cell cooling system to shut down the fuel cell. The parking signal is set to "1". If the user chooses not to stop for maintenance, the vehicle restriction driving control signal is set to "1", the vehicle is restricted from driving, the warning light in the instrument display turns on yellow, and the instrument display prompt signal is set to "0x0".

[0101] After the vehicle is controlled to be restricted from driving, the vehicle continues to operate in the fuel cell power output mode. If the insulation resistance of the fuel cell is detected to be not greater than the preset second threshold value for two consecutive times, the fuel cell cooling system sends the fuel cell insulation state signal "2" and the fuel cell insulation fault state signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation state signal to "21" and the vehicle insulation fault state signal to "2". The warning light in the instrument display is red. The instrument display prompt signal "2x1" indicates whether to switch to the pure electric power output mode. If the user chooses to switch to the pure electric power output mode, the fuel cell power output mode enable signal "0" is sent to the fuel cell cooling system, and the pure electric power output mode enable signal "1" is sent to the fuel cell cooling system. The vehicle controller sets the vehicle insulation state signal to "12" and the vehicle insulation fault state signal to "0". The vehicle control limit driving signal is set to "1" and sent to the fuel cell cooling system. The warning light in the instrument display is yellow. The instrument display prompt signal is set to "0x0", that is, there is no prompt signal, and the vehicle operates in the pure electric power output mode.

[0102] In the pure electric power output mode, if the insulation resistance of the pure electric battery is detected to be no greater than the preset fourth threshold value for two consecutive times, the power battery cooling system sends the power battery insulation status signal "2" and the power battery insulation fault status signal "1" to the vehicle controller. The vehicle controller sets the vehicle insulation status signal to "22" and the vehicle insulation fault status signal to "1". The warning light in the instrument display turns red, and the instrument display prompts the signal "1x4", that is, the power battery insulation fault, the parking power-off signal, and the pure electric power output mode enable signal "0" are sent to the power battery cooling system, and the parking power-off signal is set to "1". If the user starts the power-on, the start power-on signal is set to "1", and the parking power-off signal continues to be set to "1", and the start power-on signal is set to "0".

[0103] See also Fig. 9 , is a schematic diagram of the structure of a vehicle 90 provided in Embodiment 9 of the present invention, wherein the vehicle 90 includes a vehicle safety control system 80.

Claims

1. A vehicle safety control method, characterized in that: include: collecting first insulation state information of a fuel cell cooling system and second insulation state information of a power battery cooling system in a vehicle in real time, performing insulation fault detection on the vehicle according to the first insulation state information and the second insulation state information, and determining a detection result of the insulation fault; According to the detection result of the insulation fault, control is performed to execute an insulation fault processing strategy that matches the detection result of the insulation fault.

2. The vehicle safety control method according to claim 1, characterized in that: The controlling, according to the insulation fault detection result, to execute an insulation fault processing strategy matching the insulation fault detection result comprises: If the insulation fault detection result is no insulation fault warning, the vehicle is controlled to operate in a hybrid power output mode.

3. The vehicle safety control method according to claim 1, characterized in that: The controlling, according to the detection result of the insulation fault, to execute an insulation fault processing strategy matching the detection result of the insulation fault further includes: If the insulation fault detection result is a fuel cell insulation fault warning, obtaining an operation instruction of the first user; If the operation instruction of the first user is not to switch to the pure electric power output mode, the vehicle is controlled to limit driving, an insulation fault detection is performed on the vehicle, and a detection result of the insulation fault is determined. If the detection result of the insulation fault is a fuel cell insulation fault, the vehicle is controlled to switch to the pure electric power output mode; In the pure electric power output mode, performing insulation fault detection on the power battery cooling system of the vehicle, and obtaining an operation instruction of a second user if there is a power battery insulation fault warning in the power battery cooling system; If the operation instruction of the second user is non-stop maintenance, the vehicle is controlled to restrict driving, and an insulation fault detection is performed on the power battery cooling system of the vehicle. If a power battery insulation fault occurs in the power battery cooling system, the vehicle is stopped and powered off.

4. The vehicle safety control method according to claim 3, characterized in that: After obtaining the operation instruction of the first user, the method further includes: If the operation instruction of the first user is to switch into the pure electric power output mode, an insulation fault detection is performed on the power battery cooling system of the vehicle, and if there is a power battery insulation fault warning in the power battery cooling system, an operation instruction of the second user is obtained; If the operation instruction of the second user is non-stop maintenance, the vehicle is controlled to be restricted from driving, and an insulation fault detection is performed on the power battery cooling system of the vehicle. If a power battery insulation fault exists in the power battery cooling system, an operation instruction of a third user is obtained; If the third user operation instruction is to switch the fuel cell power output mode, the vehicle is controlled to restrict driving, and the fuel cell cooling system of the vehicle is tested for insulation faults. If the fuel cell cooling system has a fuel cell insulation fault, the vehicle is stopped and powered off.

5. The vehicle safety control method according to claim 1, characterized in that: The controlling, according to the detection result of the insulation fault, to execute an insulation fault processing strategy matching the detection result of the insulation fault further includes: If the insulation fault detection result is a power battery insulation fault warning, obtaining a fourth user operation instruction; If the fourth user operation instruction is not to switch into the fuel cell power output mode, the vehicle is controlled to be restricted from driving, an insulation fault detection is performed on the vehicle, and a detection result of the insulation fault of the vehicle is determined; if the detection result of the insulation fault is a power battery insulation fault, the vehicle is controlled to switch into the fuel cell power output mode; In a fuel cell power output mode, performing insulation fault detection on a fuel cell cooling system of the vehicle, and obtaining an operation instruction of a second user if a fuel cell insulation fault warning exists in the fuel cell cooling system; If the operation instruction of the second user is maintenance without stopping, the vehicle is controlled to restrict driving, and the fuel cell cooling system of the vehicle is tested for insulation faults. If the fuel cell cooling system has a fuel cell insulation fault, the vehicle is stopped and powered off.

6. The vehicle safety control method according to claim 5, characterized in that: After obtaining the fourth user operation instruction, the method further includes: If the operation instruction of the fourth user is to switch into the fuel cell power output mode, an insulation fault detection is performed on the fuel cell cooling system of the vehicle, and if there is a fuel cell insulation fault warning in the fuel cell cooling system, the operation instruction of the second user is obtained; If the operation instruction of the second user is maintenance without stopping, the vehicle is controlled to be restricted from driving, and an insulation fault detection is performed on the fuel cell cooling system of the vehicle. If the fuel cell cooling system has a fuel cell insulation fault, a fifth user operation instruction is obtained; If the fifth user operation instruction is to switch to the pure electric power output mode, the vehicle is controlled to restrict driving, and an insulation fault detection is performed on the power battery cooling system of the vehicle. If a power battery insulation fault occurs in the power battery cooling system, the vehicle is stopped and powered off.

7. The vehicle safety control method according to claim 1, characterized in that: The controlling, according to the detection result of the insulation fault, to execute an insulation fault processing strategy matching the detection result of the insulation fault further includes: If the insulation fault detection result is a dual-battery insulation fault warning, obtaining a sixth user operation instruction; If the sixth user operation instruction is to power off without stopping the vehicle, controlling the vehicle to limit driving, performing insulation fault detection on the vehicle, and determining a detection result of the insulation fault of the vehicle; If the insulation fault detection result is a power battery insulation fault, controlling the vehicle to switch into a fuel cell power output mode; An insulation fault detection is performed on the fuel cell cooling system of the vehicle. If a fuel cell insulation fault occurs in the fuel cell cooling system, the vehicle is stopped and powered off.

8. The vehicle safety control method according to claim 7, characterized in that: After determining the detection result of the insulation fault of the vehicle, the method further includes: If the insulation fault detection result is a fuel cell insulation fault, controlling the vehicle to switch into a pure electric power output mode; An insulation fault detection is performed on a power battery cooling system of the vehicle. If a power battery insulation fault occurs in the power battery cooling system, the vehicle is stopped and powered off.

9. A vehicle safety control system, characterized in that: include: A fuel cell cooling system, a power battery cooling system and a vehicle controller, wherein the vehicle controller is connected to the fuel cell cooling system and the power battery cooling system, and the vehicle controller is used to execute the vehicle safety control method described in any one of claims 1 to 8.

10. A vehicle, characterized in that: The vehicle includes the vehicle safety control system according to claim 9.

Images