Power system control method and system, readable medium and electronic equipment

Abstract

The embodiment of the invention provides a power system control method and system, a readable medium and electronic equipment. The power system control method comprises the steps that operation parameters of a power system are collected; performing signal processing on the operation parameters according to a signal transmission mode to obtain bus signal information and hard wire signal information; verifying the bus signal information and the hard wire signal information to determine effective states of the bus signal and the hard wire signal; and monitoring the high-voltage safety state of the power system according to the verified state information of the bus signal and the hard wire signal, and controlling the power system according to the high-voltage safety state. According to the technical scheme, the high-voltage safety operation parameters of the power system are collected, the collected operation parameters are subjected to signal processing and verification, and the high-voltage safety of the power system is monitored, so that the safety of the power high-voltage system is improved.

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular, to a power system control method, system, readable medium and electronic device. Background Art

[0002] As the number of electric vehicles continues to grow, their safety issues have attracted more and more social attention. Preventing people from getting electric shock from high voltage is an important safety goal of high-voltage power systems to protect the safety of people during normal use of the vehicle. Summary of the invention

[0003] The embodiments of the present application provide a power system control method, system, readable medium and electronic device, which can improve the safety performance of the power system.

[0004] Other features and advantages of the present application will become apparent from the following detailed description, or may be learned in part by the practice of the present application.

[0005] According to one aspect of an embodiment of the present application, a power system control method is provided, the method comprising:

[0006] Collect the operating parameters of the power system;

[0007] Performing signal processing on the operating parameters according to the signal transmission mode to obtain bus signal information and hard-line signal information;

[0008] Verifying the bus signal information and the hard-wire signal information to determine the valid status of the bus signal and the hard-wire signal;

[0009] The high-voltage safety state of the power system is monitored according to the verified state information of the bus signal and the hard-wire signal, and the power system is controlled according to the high-voltage safety state.

[0010] According to one aspect of an embodiment of the present application, a power system control system is provided, the system comprising:

[0011] A signal acquisition module is used to collect operating parameters of the power system;

[0012] A signal processing module, used for performing signal processing on the operating parameters according to a signal transmission mode to obtain bus signal information and hard-line signal information;

[0013] A signal verification module, used to verify the bus signal information and the hard-line signal information to determine the valid status of the bus signal and the hard-line signal;

[0014] The high-voltage safety monitoring module is used to monitor the high-voltage safety status of the power system according to the verified bus signal and the status information of the hard-wire signal, and control the power system according to the high-voltage safety status.

[0015] In some embodiments of the present application, based on the above technical solution, the signal processing module is also used to, if the operating parameters are transmitted through the bus, perform fault check on the bus message corresponding to the transport parameter to obtain bus signal information; if the operating parameters are transmitted through the hard wire, filter the hard wire signal corresponding to the operating parameter to obtain hard wire signal status information.

[0016] In some embodiments of the present application, based on the above technical solution, the signal processing module is also used to perform end-to-end check, bus-off check and timeout check on the bus message, respectively, to obtain end-to-end status, bus-off status and timeout status; if any of the end-to-end status, the bus-off status and the timeout status is a fault state, then the state of the bus signal is a fault state.

[0017] In some embodiments of the present application, based on the above technical solution, the signal verification module is also used to: if the bus signal is in a fault state and lasts for more than a set period, the bus signal is confirmed to be faulty and the message is invalid; if the bus signal is in a normal state and lasts for more than the set period, the bus signal is confirmed to be normal and the message is valid; if the bus signal is in a fault state and does not last for more than the set period, or the bus message is in a normal state and does not last for more than the set period, the bus signal is the same as the state value of the previous period.

[0018] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module is also used to perform anti-shake processing on the verified bus signal and the hard-wire signal; if the bus signal and the hard-wire signal are valid and both are in a fault state, and the signal duration exceeds the set time, the bus signal and the hard-wire signal are confirmed to be in a fault state; if the bus signal and the hard-wire signal are valid and both are in a normal state, and the signal duration exceeds the set time, the bus signal and the hard-wire signal are confirmed to be in a normal state; if the bus signal and the hard-wire signal are valid and both are in a fault state or both are in a normal state, and the duration does not exceed the set time, the bus signal and the hard-wire signal are confirmed to be the same as the state of the previous cycle; if the bus signal and the hard-wire signal are both invalid, the bus signal and the hard-wire signal are confirmed to be in a fault state.

[0019] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module is also used to: if the corresponding bus signal in the collision state is invalid, and the corresponding hard-wire signal in the collision state is valid, then the collision state signal is associated with the corresponding hard-wire signal in the collision state; if the corresponding bus signal in the collision state is valid, and the corresponding hard-wire signal in the collision state is invalid, then the collision state signal is associated with the corresponding total signal in the collision state; if the corresponding bus signal in the collision state and the corresponding hard-wire signal in the collision state are both invalid, then the collision state signal is a fault state.

[0020] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module is also used to trigger an emergency power-off request caused by the collision and trigger a warning prompt request if the collision status signal is a fault state.

[0021] In some embodiments of the present application, based on the above technical solution, the power system includes a power battery management system and an integrated power controller; the high-voltage safety monitoring module is also used to obtain high-voltage interlocking status information corresponding to the power battery management system, the integrated power controller and the hard wire; if the high-voltage interlocking status information corresponding to the power battery management system, the integrated power controller and the hard wire are all in normal state, then the high-voltage interlocking status signal is in normal state; if any of the high-voltage interlocking status information corresponding to the power battery management system, the integrated power controller and the hard wire is in a fault state, then the high-voltage interlocking status signal is in a fault state.

[0022] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module is also used to trigger a warning prompt request if the high-voltage interlock status signal is in a fault state; if the vehicle speed signal is valid and the vehicle speed is less than or equal to a set threshold, or the vehicle speed signal is invalid, then trigger an emergency power-off request caused by the high-voltage interlock status signal.

[0023] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module is also used to trigger a warning prompt request if the insulation status signal corresponding to the power battery management system is a fault state; if the insulation status signal is in a normal state, the emergency power-off request and warning prompt request caused by the insulation fault will not be triggered.

[0024] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module is also used for, if the power-off request caused by collision, the power-off request caused by high-voltage interlock fault, or the emergency power-off request caused by insulation fault are all in non-trigger state, then the emergency power-off request is confirmed to be in non-trigger state; if any request signal among the power-off request caused by collision, the power-off request caused by high-voltage interlock fault, or the emergency power-off request caused by insulation fault is in trigger state, entering standby mode.

[0025] In some embodiments of the present application, based on the above technical solution, the power system includes a main positive relay and a main negative relay; the high-voltage safety monitoring module is also used to monitor the high-voltage safety state of the power system according to the verified bus signal and the status information of the hard-wire signal, and also includes: if the main positive relay state is valid and in a disconnected state, and the motor speed signal is valid and less than or equal to a set threshold, then a residual power discharge request is sent to a drive control unit to discharge the residual power; if the main negative relay state is valid and in a disconnected state, and the motor speed signal is valid and less than or equal to a set threshold, then a residual power discharge request is sent to a drive control unit to discharge the residual power.

[0026] According to one aspect of an embodiment of the present application, a computer-readable medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the power system control method as described in the above embodiment is implemented.

[0027] According to one aspect of an embodiment of the present application, an electronic device is provided, comprising: one or more processors; a storage device for storing one or more computer programs, wherein when the one or more computer programs are executed by the one or more processors, the electronic device implements the power system control method as described in the above embodiments.

[0028] According to one aspect of an embodiment of the present application, a computer program product is provided, the computer program product comprising a computer program stored in a computer-readable storage medium. A processor of an electronic device reads and executes the computer program from the computer-readable storage medium, so that the electronic device executes the power system control method provided in the above various optional embodiments.

[0029] In the technical solutions provided in some embodiments of the present application, the operating parameters of the high-voltage safety of the power system are collected, and after signal processing and verification of the collected operating parameters, the high-voltage safety of the power system is monitored so that a fault alarm can be issued when a fault is detected, thereby achieving the safety goal of preventing electric shock to personnel at ASIL A or higher levels, thereby improving the safety of the electric vehicle power high-voltage system.

[0030] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A flow chart of a power system control method according to an embodiment of the present application is shown.

[0032] Figure 2A flow chart of a power system control method according to an embodiment of the present application is shown.

[0033] Figure 3 A flow chart of a power system control method according to an embodiment of the present application is shown.

[0034] Figure 4 A flow chart of a power system control method according to an embodiment of the present application is shown.

[0035] Figure 5 A flow chart of a power system control method according to an embodiment of the present application is shown.

[0036] Figure 6 A system diagram corresponding to a power system control method according to an embodiment of the present application is shown.

[0037] Figure 7 A system diagram corresponding to a power system control method according to an embodiment of the present application is shown.

[0038] Figure 8 A block diagram of a power system control system according to an embodiment of the present application is shown.

[0039] Fig. 9 A schematic diagram of the structure of a computer system suitable for implementing an electronic device of an embodiment of the present application is shown. DETAILED DESCRIPTION

[0040] The exemplary embodiments are now described in a more comprehensive manner with reference to the accompanying drawings. However, the exemplary embodiments can be implemented in various forms and should not be understood as being limited to these examples; on the contrary, the purpose of providing these embodiments is to make this application more comprehensive and complete, and to fully convey the concept of the exemplary embodiments to those skilled in the art.

[0041] In addition, the features, structures or characteristics described in the present application may be combined in one or more embodiments in any suitable manner. In the following description, there are many specific details so that the embodiments of the present application can be fully understood. However, those skilled in the art will appreciate that when implementing the technical scheme of the present application, all the detailed features in the embodiments may not be needed, one or more specific details may be omitted, or other methods, elements, devices, steps, etc. may be adopted.

[0042] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities may be implemented in software form, or in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0043] The flowcharts shown in the accompanying drawings are only exemplary and do not necessarily include all the contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps can be decomposed, and some operations / steps can be combined or partially combined, so the actual execution order may change according to actual conditions.

[0044] It should be noted that the "multiple" mentioned in this article refers to two or more. "And / or" describes the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship.

[0045] It is understandable that in the specific implementation of this application, related data such as target object information is involved. When the above embodiments of this application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of relevant countries and regions.

[0046] The implementation details of the technical solution of the embodiment of the present application are described in detail below:

[0047] Figure 1 A flow chart of a power system control method according to an embodiment of the present application is shown, and the power system control method can be executed by a vehicle controller. Figure 1 As shown, the power system control method at least includes S101 to S104, which are described in detail as follows:

[0048] In S101 , operating parameters of the power system are collected.

[0049] In some optional embodiments, when collecting the operating parameters of the power system, the signal acquisition module can be used for collection, and the signal acquisition module includes CAN signal collection and hard-line signal collection. Specifically, the CAN signal collection receives the CAN bus signal through the CAN transceiver circuit, wherein the CAN bus signal includes the HVIL (Hazardous Voltage Interlock Loop) state of the BMS, the DC charging gun connection state, the main positive relay state, the main negative relay state, the HVIL state of the IPS (Integrated Power System, integrated power supply controller) and the AC charging gun connection state, the collision CAN signal of the SRS (Supplemental Restraint System, airbag controller), the motor speed and motor bus voltage of the IPU (Integrated Power Unit, motor controller), etc. For hard-line signals, the hard-line signal collection collects the collision hard-line signal and HVIL hard-line signal of the SRS through the PWM circuit, specifically including the PWM duty cycle value, frequency value, high level value and low level value.

[0050] In S102, the operation parameters are processed according to the signal transmission mode to obtain bus signal information and hard-line signal information.

[0051] In some optional embodiments, signal processing is performed on the collected operating parameters. If the operating parameters are transmitted via a CAN bus, they can be considered as bus signals. If the operating parameters are transmitted via a hard wire, they can be considered as hard wire signals. By performing signal processing on the operating parameters according to the signal transmission method, information on the bus signal and the hard wire signal can be obtained.

[0052] In S103, the bus signal information and the hard-wire signal information are verified to determine the validity status of the bus signal and the hard-wire signal.

[0053] In some optional embodiments, the signal after the operating parameters are processed is verified to determine whether the bus signal and the hard-wire signal are valid or invalid, which is beneficial for subsequent monitoring of the safety status of the power system based on the validity of the signal.

[0054] In S104, the high-voltage safety state of the power system is monitored according to the verified state information of the bus signal and the hard-wire signal, and the power system is controlled according to the high-voltage safety state.

[0055] In the technical solutions provided in some embodiments of the present application, the operating parameters of the high-voltage safety of the power system are collected, and after signal processing and verification of the collected operating parameters, the high-voltage safety of the power system is monitored so that a fault alarm can be issued when a fault is detected, thereby achieving the safety goal of preventing electric shock to personnel at ASIL A or higher levels, thereby improving the safety of the electric vehicle power high-voltage system.

[0056] In one embodiment of the present application, the operation parameters are processed according to the signal transmission mode to obtain bus signal information and hard-line signal information, including:

[0057] If the operation parameters are transmitted via the bus, the bus message corresponding to the transport parameters is subjected to fault checking to obtain bus signal information;

[0058] If the operating parameters are transmitted via hard wires, the hard wire signals corresponding to the operating parameters are filtered to obtain hard wire signal status information.

[0059] In this way, the operating parameters are processed differently according to different signal transmission modes, thereby adapting to different signal processing.

[0060] In one embodiment of the present application, if the operating parameters are transmitted via the bus, a bus message corresponding to the transport parameter is subjected to a fault check to obtain bus signal information, including:

[0061] Perform end-to-end check, bus-off check and timeout check on the bus message to obtain end-to-end status, bus-off status and timeout status;

[0062] If any one of the end-to-end state, the bus-off state, and the timeout state is a fault state, the state of the bus signal is a fault state.

[0063] Specifically, when performing fault checking on the bus message (also called CAN message), the CAN message is respectively subjected to E2E (end-to-end) check, Busoff (bus off) check and Timeout (timeout) check, and the E2E state, Busoff state and Timeout state are output. Among them, the E2E check includes CRC and Rolling counter check. If any one of them fails, the E2E state is a fault state; if the CRC and Rolling counter are normal, the E2E state is a normal state. If a Busoff fault occurs in the CAN message, the Busoff state is a fault state, otherwise a normal state is output. If a Timeout fault occurs in the CAN message, the Timeout state is a fault state, otherwise a normal state is output. For hard-line signals, the hard-line signals are filtered and the output signals are checked.

[0064] In this way, the operating parameters are processed differently according to different signal transmission modes, thereby being able to adapt to signal processing in different signal transmission modes.

[0065] In one embodiment of the present application, checking the bus signal information and the hard-wire signal information to determine the valid state of the bus signal and the hard-wire signal includes:

[0066] If the bus signal is in a fault state and lasts for more than the set period, the bus signal confirms the fault and the message is invalid;

[0067] If the bus signal is in normal state and lasts for more than the set period, the bus signal is confirmed to be normal and the message is valid;

[0068] If the bus signal is in a fault state and does not last longer than a set period, or the bus message is in a normal state and does not last longer than a set period, the bus signal has the same state value as the previous period.

[0069] When checking the bus signal information and hardware signal information, if the CAN message fails and lasts for more than 5 cycles, the CAN message status is confirmed fault and the message is invalid; if the CAN message is normal and lasts for more than 5 cycles, the CAN message status is confirmed normal and the message is valid; if the CAN message failure does not last for more than 5 cycles or the CAN message is normal and does not last for more than 5 cycles, the CAN message status is unconfirmed fault and the message validity inherits the previous cycle value. When the CAN message status is confirmed normal, the CAN signal outputs the CAN signal value; when the CAN message status is confirmed fault, the CAN signal outputs a safe alternative value; when the CAN message status is unconfirmed fault, the CAN signal outputs an unconfirmed value, and the unconfirmed value takes the previous cycle value. In addition, the CAN signal validity inherits the validity of the message in which the signal is located. When a Timeout fault occurs in a CAN message, the fault alarm status is sent to the fault alarm module. For hard-wire signals, the PWM duty cycle value, frequency value, high level value and low level value are comprehensively considered to determine whether the hard-wire signal is faulty. If any one of them exceeds the normal range, the hard-wire signal is in a faulty state. The verification method is the same as that for CAN signals and will not be repeated here.

[0070] In this way, the bus signal information and the hard-wire signal information are verified to determine whether the bus signal and the hard-wire signal are valid or invalid, which is beneficial for subsequent monitoring of the safety status of the power system based on the validity of the signal.

[0071] In one embodiment of the present application, monitoring the high voltage safety state of the power system according to the verified bus signal and the state information of the hard line signal includes:

[0072] Anti-shake processing is performed on the verified bus signal and hard-line signal;

[0073] If the bus signal and hard-wire signal are valid and both are in fault state, and the signal duration exceeds the set time, the bus signal and hard-wire signal are confirmed as fault state;

[0074] If the bus signal and hard-wire signal are valid and both are in normal state, and the signal duration exceeds the set time, the bus signal and hard-wire signal are confirmed to be in normal state;

[0075] If the bus signal and the hard-wire signal are valid, and both are in a fault state or both are in a normal state, and the duration does not exceed the set time, the bus signal and the hard-wire signal are confirmed to be the same as the state of the previous cycle;

[0076] If both the bus signal and the hardwire signal are invalid, the bus signal and the hardwire signal are confirmed to be in a fault state.

[0077] In some optional embodiments, see Figure 2 , Figure 2 A flow chart of a power system control method according to an embodiment of the present application is shown. For signal anti-shake processing, the bus signal takes the insulation state signal as an example, and the insulation state signal can be a signal sent by the BMS. The insulation state signal is anti-shake processed. When the insulation state signal is valid, the insulation state signal is in a fault state and the duration exceeds 1s, then the insulation state signal is confirmed as a fault state; when the insulation state signal is valid, the insulation state signal is in a normal state and the duration exceeds 1s, then the insulation state signal is confirmed as a normal state; when the insulation state signal is valid, the insulation state signal is in a fault state and the duration does not exceed 1s or the insulation signal is in a normal state and the duration does not exceed 1s, then the insulation state signal continues to use the previous cycle value; when the insulation signal state is invalid, the insulation signal is confirmed as a fault state.

[0078] In addition, the HVIL signal of the BMS, the HVIL signal of the IPS, the HVIL hard-line signal of the VCU, the collision CAN signal of the SRS, and the collision hard-line signal of the SRS are all processed using the same anti-shake method.

[0079] In this way, since some signals may have glitches, in order to reduce the interference of the glitches on the signals, signal anti-shake processing is performed on each signal to reduce the influence of the interference signal on the monitoring result.

[0080] In one embodiment of the present application, monitoring the high voltage safety state of the power system according to the verified bus signal and the state information of the hard line signal also includes:

[0081] If the corresponding bus signal in the collision state is invalid and the corresponding hard-wire signal in the collision state is valid, the collision state signal is associated with the corresponding hard-wire signal in the collision state;

[0082] If the corresponding bus signal in the collision state is valid and the corresponding hardwire signal in the collision state is invalid, the collision state signal is associated with the corresponding total signal in the collision state;

[0083] If the bus signal corresponding to the collision state and the hard-wire signal corresponding to the collision state are both invalid, the collision state signal is in a fault state.

[0084] Specifically, see Figure 2 If the collision status CAN signal is valid, the collision status signal only depends on the collision status CAN signal; if the collision status CAN signal is invalid and the collision status hard-wire signal is valid, the collision status signal only depends on the collision status hard-wire signal; if both the collision status CAN signal and the hard-wire signal are invalid, the collision status signal is in a fault state.

[0085] In this way, the state of the collision state signal is generally helpful to determine the state of the collision state signal through the corresponding bus signal state and the corresponding hard line state in the collision state.

[0086] In one embodiment of the present application, controlling the power system according to the high-voltage safety state includes:

[0087] If the collision status signal is a fault state, an emergency power-off request caused by the collision is triggered, and a warning prompt request is triggered.

[0088] Furthermore, if the collision status signal is a fault state, an emergency power-off request and a warning prompt request caused by the collision are triggered, and the request is maintained within the current driving cycle until the next driving cycle is resumed; if the result is a normal state, an emergency power-off request and a warning prompt request caused by the collision are not triggered.

[0089] In one embodiment of the present application, the power system includes a power battery management system and an integrated power controller;

[0090] The high voltage safety status of the power system is monitored based on the verified bus signal and the status information of the hard line signal, and also includes:

[0091] Obtain high-voltage interlock status information corresponding to the power battery management system, integrated power controller and hard wire;

[0092] If the power battery management system, the integrated power controller and the high-voltage interlock status information corresponding to the hard line are all in normal state, the high-voltage interlock status signal is in normal state;

[0093] If any of the high-voltage interlock status information corresponding to the power battery management system, the integrated power controller, and the hard line is in a fault state, the high-voltage interlock status signal is in a fault state.

[0094] Specifically, see Figure 3 , Figure 3 A flow chart of a power system control method according to an embodiment of the present application is shown. When making a high-voltage interlock fault judgment, the HVIL status of the BMS, the HVIL status of the IPS, and the hard-line HVIL status are comprehensively judged. If the above three signals are all in a normal state, the HVIL status signal confirms that it is in a normal state; otherwise, if any one of the above three signals is in a fault state, the HVIL status signal confirms that it is in a fault state. If the HVIL status signal is in a fault state, a warning prompt request is triggered; if the HVIL status signal is in a normal state, an emergency power-off request and a warning prompt request caused by an HVIL fault are not triggered.

[0095] In one embodiment of the present application, controlling the power system according to the high-voltage safety state includes:

[0096] If the high voltage interlock status signal is in a fault state, a warning prompt request is triggered;

[0097] If the vehicle speed signal is valid and the vehicle speed is less than or equal to the set threshold, or if the vehicle speed signal is invalid, an emergency power-off request caused by the high-voltage interlock status signal is triggered.

[0098] Specifically, when the HVIL status signal is in a fault state, if the vehicle speed signal is valid and the vehicle speed is less than or equal to 1.5km / h or the vehicle speed signal is invalid, an emergency power-off request caused by the HVIL fault is triggered, and the request is maintained within the current driving cycle until the next driving cycle. If the vehicle speed signal is valid and the vehicle speed is greater than 1.5km / h, the emergency power-off request caused by the HVIL fault is not triggered.

[0099] In this way, when the high-voltage interlock state is a fault state, a warning prompt request is triggered to trigger a warning reminder, and when the vehicle speed signal is valid and the vehicle speed is less than or equal to the set threshold, or the vehicle speed signal is invalid, an emergency power-off request caused by the high-voltage interlock state signal is triggered to perform emergency power-off control, which is beneficial to improving the safety performance of the power system.

[0100] In one embodiment of the present application, monitoring the high voltage safety state of the power system according to the verified bus signal and the state information of the hard line signal also includes:

[0101] If the insulation status signal corresponding to the power battery management system is a fault state, a warning prompt request is triggered;

[0102] If the insulation status signal is in a normal state, the emergency power-off request and warning prompt request caused by the insulation fault will not be triggered.

[0103] Specifically, see Figure 3, when judging the insulation fault, the judgment is made according to the insulation status signal. If the insulation status signal is in a fault state, a warning prompt request is triggered; if the insulation status signal is in a normal state, the emergency power-off request and warning prompt request caused by the insulation fault are not triggered. If there is an insulation fault in the battery pack and high voltage is forced to be applied, it is easy to cause thermal runaway or electric shock risks; if there is an insulation fault outside the battery pack and high voltage is forced to be applied for DC charging and AC charging and discharging, it is easy to cause electric shock risks. Further, when the insulation status signal is in a fault state, if the motor bus voltage is valid before the high voltage is applied and the voltage is less than or equal to 60V, or the motor bus voltage is invalid, an emergency power-off request caused by insulation fault is triggered; if it is detected that the AC charging gun state is valid and in a connected state or the DC charging gun state is valid and in a connected state, or the AC charging gun state is invalid or the DC charging gun state is invalid, an emergency power-off request caused by insulation fault is triggered; if the motor bus voltage is valid and the voltage is greater than 60V, and the AC charging gun state is valid and not in a connected state, and the DC charging gun state is valid and not in a connected state, the emergency power-off request caused by insulation fault is not triggered. If an emergency power-off request is triggered due to an insulation fault, the request must be maintained within the current driving cycle until the next driving cycle.

[0104] In one embodiment of the present application, the method further includes:

[0105] If the power-off request caused by collision, the power-off request caused by high-voltage interlock fault, or the emergency power-off request caused by insulation fault are all in the non-trigger state, the emergency power-off request confirmation is in the non-trigger state;

[0106] If any request signal of the power-off request caused by collision, the power-off request caused by high-voltage interlock fault, or the emergency power-off request caused by insulation fault is in the trigger state, the standby mode is entered.

[0107] Specifically, see Figure 4 , Figure 4A flow chart of a power system control method according to an embodiment of the present application is shown. Comprehensively judging the emergency power-off request caused by collision, the emergency power-off request caused by HVIL fault and the emergency power-off request caused by insulation fault, if the above three request signals are all in a non-triggering state, the emergency power-off request is confirmed to be in a non-triggering state; otherwise, if any of the above three request signals triggers an emergency power-off, the emergency power-off request is confirmed to be in a triggering state. Further, when the emergency power-off request is in a triggering state, the mode request sent to the IPS is to enter the standby mode, that is, to stop working; otherwise, when the emergency power-off request is in a non-triggering state, the mode request sent to the IPS depends on the mode request signal of L1. When the emergency power-off request is in a triggering state and lasts for more than 200ms, the mode request sent to the BMS is an emergency power-off, that is, disconnecting the high-voltage relay; otherwise, when the emergency power-off request is in a non-triggering state or the emergency power-off request is in a triggering state but lasts for no more than 200ms, the mode request sent to the BMS depends on the mode request signal of L1, and the high-voltage functional safety control does not interfere with the mode request sent by L1 to the BMS.

[0108] A judgment is made based on the warning prompt request caused by collision, the warning prompt request caused by HVIL fault and the warning prompt request caused by insulation fault. If the above three request signals are all in the non-triggering state, the fault warning request is in the non-triggering state; otherwise, if any one of the above three request signals is in the triggering state, the fault warning request is in the triggering state.

[0109] In one embodiment of the present application, the power system includes a main positive relay and a main negative relay;

[0110] The high voltage safety status of the power system is monitored based on the verified bus signal and the status information of the hard line signal, and also includes:

[0111] If the main positive relay is in a valid and disconnected state, and the motor speed signal is valid and less than or equal to the set threshold, a residual power discharge request is sent to the drive control unit to discharge the residual power;

[0112] If the main negative relay is in a valid and disconnected state, and the motor speed signal is valid and less than or equal to the set threshold, a residual power discharge request is sent to the drive control unit to discharge the residual power.

[0113] Specifically, see Figure 4, if the main positive relay state is valid and the main positive relay state is disconnected or the main negative relay state is valid and the main negative relay state is disconnected, and the motor speed signal is valid and the motor speed is less than or equal to 300rpm, the mode request sent to the DCU is residual power discharge; if the main positive relay state is valid and the main positive relay state is disconnected or the main negative relay state is valid and the main negative relay state is disconnected, and the motor speed signal is valid and the motor speed is greater than 300rpm or the motor speed signal is invalid, the mode request sent to the DCU depends on the mode request of L1; if the main positive relay state is valid and the main positive relay state is closed and the main negative relay state is valid and the main negative relay state is closed, the mode request sent to the DCU depends on the mode request of L1; if the main positive relay state is invalid and the main negative relay state is invalid, the mode request sent to the DCU depends on the mode request of L1. Further, when the residual power discharge request is sent to the DCU drive control unit and continues for more than 20s, the mode request sent to the DCU depends on the mode request of L1.

[0114] In one embodiment of the present application, the fault alarm request signals from the signal verification module and the high-voltage safety monitoring module are received, the alarm signals are classified, and the corresponding fault light lighting request and text reminder request are sent to the instrument through the signal output module.

[0115] After the fault alarm module is processed, the signal output is processed. For CAN signals, the message containing the signal is added for CRC and Rolling counter protection. The CAN output signal includes BMS emergency power-off request CAN signal, IPS mode request, DCU mode request, and ICM alarm request. For the BMS emergency power-off request hard-wire signal, the emergency power-off request state is converted into the corresponding duty cycle value and frequency value to control the corresponding PWM circuit.

[0116] In order to understand the technical solution of this application as a whole, see Figure 5 , Figure 5 A flow chart of a power system control method according to an embodiment of the present application is shown, the method comprising:

[0117] a: Collect the operating parameters of high voltage safety of the power system;

[0118] b: Perform signal processing on the collected operating parameters;

[0119] c: Check the processed signal;

[0120] d: Monitor the high voltage safety of the power system;

[0121] e: Fault alarm processing;

[0122] f: signal output.

[0123] Among them, monitoring the power system includes:

[0124] d1: signal anti-shake processing;

[0125] d2: collision fault judgment;

[0126] d3: HVIL fault judgment;

[0127] d4: Insulation fault judgment;

[0128] d5: Emergency power-off control;

[0129] d6: Residual electricity discharge control.

[0130] In this way, by collecting the operating parameters of the high-voltage safety of the power system, performing signal processing and verification on the collected operating parameters, monitoring the high-voltage safety of the power system, issuing a fault alarm when a fault is detected, and performing certain processing on the output signal to achieve the safety goal of preventing electric shock to personnel at ASIL A or a higher level, the safety of the electric vehicle power high-voltage system is improved.

[0131] In one embodiment of the present application, the system architecture corresponding to the method is shown in Figure 6 and Figure 7 As shown, Figure 6 shows a system diagram corresponding to a power system control method according to an embodiment of the present application, Figure 7The system diagram corresponding to the power system control method according to an embodiment of the present application is shown. The electric vehicle power high-voltage system of the present invention includes a vehicle control unit (VCU), a high-voltage battery system, an integrated power system (IPS), a slow charging socket, a fast charging socket, an electric compressor (ECP), and a motor control system. The VCU is the core control unit of the power system, which monitors the working conditions of the vehicle and the status of each component, comprehensively determines whether the vehicle is in a special situation that endangers the safety of personnel, and issues an emergency power-off command to cut off the high voltage of the vehicle in time to protect the safety of personnel and avoid the vehicle from carrying high voltage electricity. The high-voltage battery system includes a battery management system (BMS), a module, a fast charging socket, a main positive relay and a main negative relay. The BMS controls the opening and closing of the main positive relay and the main negative relay, and then controls the opening and closing of the entire high-voltage circuit; the high-voltage connector of the high-voltage battery system is provided with an HVIL, and detects the interlocking state of the high-voltage connector to realize the detection of the plug-in and unplugging state of the high-voltage connector. The motor system includes a motor controller (Integrated Power Unit, IPU for short) and a motor. The high-voltage connector of the motor system is bolted. According to the connector requirements in standard GB18384, the high-voltage connector may not be equipped with an HVIL. In the function of high-voltage power supply, the IPU is responsible for discharging the residual electric energy of the high-voltage bus after the high-voltage relay is disconnected. The IPS is equipped with a high-voltage AC connector connected to a slow-charging socket and a high-voltage DC connector connected to the battery, and each is provided with an HVIL for detection by the IPS itself. The airbag controller (Supplemental Restraint System, SRS) outside the power system detects vehicle collisions and sends collision signals to the VCU. The instrument outside the power system receives the warning signal from the VCU to warn the driver.

[0132] The HVIL of the power high-voltage system has a component self-check mode and a hard-wired serial mode. The BMS and IPS adopt the component self-check mode, which detects the connector interlocking status through the component itself, realizes the detection of the plug-in and unplugging status of the high-voltage connector, and sends the HVIL status to the VCU through the CAN bus; the ECP adopts the hard-wired serial mode, initiating the HVIL loop signal from the VCU, first passing through the high-voltage connector of the ECP, and then returning to the VCU, which detects the HVIL status; the VCU comprehensively considers the HVIL status of the BMS, the HVIL status of the IPS, the hard-wired HVIL status and the vehicle status, determines whether to perform an emergency power-off and sends a warning prompt signal to the instrument through the CAN bus.

[0133] SRS sends the collision signal to VCU via CAN bus and hard wire. When VCU detects a collision, it issues an emergency power-off command and sends a warning signal to the instrument.

[0134] BMS performs insulation resistance detection of the high-voltage system and sends insulation detection status signals to VCU via CAN bus. When VCU detects insulation failure, it determines whether to perform emergency power-off and send warning signals to the instrument based on the vehicle situation.

[0135] The VCU integrates HVIL faults, insulation faults, collision status and vehicle status. When emergency power-off is required, it sends a stop working instruction to the high-voltage components through the CAN bus, and sends an emergency power-off instruction to the BMS through the CAN bus and hard wire. After disconnecting the high voltage, it sends a residual power discharge instruction to the IPU and sends a warning prompt signal to the instrument at the same time.

[0136] The following describes an embodiment of the device of the present application, which can be used to execute the power system control method in the above embodiment of the present application. For details not disclosed in the embodiment of the device of the present application, please refer to the embodiment of the power system control method in the above embodiment of the present application.

[0137] Figure 8 A block diagram of a power system control system according to an embodiment of the present application is shown.

[0138] Reference Figure 8 As shown, according to an embodiment of the present application, a power system control system includes:

[0139] The signal acquisition module 801 is used to collect the operating parameters of the power system;

[0140] The signal processing module 802 is used to perform signal processing on the operating parameters according to the signal transmission mode to obtain bus signal information and hard-line signal information;

[0141] A signal verification module 803, used to verify the bus signal information and the hard-line signal information to determine the valid status of the bus signal and the hard-line signal;

[0142] The high-voltage safety monitoring module 804 is used to monitor the high-voltage safety status of the power system according to the verified bus signal and the status information of the hard-line signal, and control the power system according to the high-voltage safety status.

[0143] In some embodiments of the present application, the power system control system also includes a fault alarm module 805 and a signal output module 806. The fault alarm module is used to receive fault alarm request signals from the signal verification module and the high-voltage safety monitoring module, classify the alarm signals, and send corresponding fault light lighting requests and text reminder requests to the instrument through the signal output module. The signal output module includes a CAN output signal and a hard-line output signal. For the CAN signal, the message where the CAN output signal is located adds CRC and Rolling counter protection, and is sent to the corresponding controller through the CAN transceiver and bus. For the hard-line output signal, the emergency power-off hard-line signal is converted into the corresponding duty cycle value and frequency value, the corresponding PWM circuit is controlled, and it is transmitted to the BMS through the hard line.

[0144] In some embodiments of the present application, based on the above technical solution, the signal processing module 802 is also used to, if the operating parameters are transmitted through the bus, perform fault check on the bus message corresponding to the transport parameters to obtain bus signal information; if the operating parameters are transmitted through the hard wire, filter the hard wire signal corresponding to the operating parameters to obtain hard wire signal status information.

[0145] In some embodiments of the present application, based on the above technical solution, the signal processing module 802 is also used to perform end-to-end check, bus off check and timeout check on the bus message, respectively, to obtain the end-to-end status, bus off status and timeout status; if any of the end-to-end status, bus off status and timeout status is a fault state, the state of the bus signal is a fault state.

[0146] In some embodiments of the present application, based on the above technical solution, the signal verification module 803 is also used to: if the bus signal is in a fault state and lasts for more than a set period, the bus signal is confirmed to be faulty and the message is invalid; if the bus signal is in a normal state and lasts for more than a set period, the bus signal is confirmed to be normal and the message is valid; if the bus signal is in a fault state and does not last for more than a set period, or the bus message is in a normal state and does not last for more than a set period, the bus signal is the same as the state value of the previous period.

[0147] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module 804 is also used to perform anti-shake processing on the verified bus signal and hard-wire signal; if the bus signal and the hard-wire signal are valid and both are in a fault state, and the signal duration exceeds the set time, the bus signal and the hard-wire signal are confirmed to be in a fault state; if the bus signal and the hard-wire signal are valid and both are in a normal state, and the signal duration exceeds the set time, the bus signal and the hard-wire signal are confirmed to be in a normal state; if the bus signal and the hard-wire signal are valid and both are in a fault state or both are in a normal state, and the duration does not exceed the set time, the bus signal and the hard-wire signal are confirmed to be the same as the state of the previous cycle; if the bus signal and the hard-wire signal are both invalid, the bus signal and the hard-wire signal are confirmed to be in a fault state.

[0148] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module 804 is also used to: if the corresponding bus signal in the collision state is invalid, and the corresponding hard-wire signal in the collision state is valid, then the collision state signal is associated with the corresponding hard-wire signal in the collision state; if the corresponding bus signal in the collision state is valid, and the corresponding hard-wire signal in the collision state is invalid, then the collision state signal is associated with the corresponding total signal in the collision state; if the corresponding bus signal in the collision state and the corresponding hard-wire signal in the collision state are both invalid, then the collision state signal is in a fault state.

[0149] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module 804 is also used to trigger an emergency power-off request caused by the collision and trigger a warning prompt request if the collision status signal is a fault state.

[0150] In some embodiments of the present application, based on the above technical solution, the power system includes a power battery management system and an integrated power controller; the high-voltage safety monitoring module 804 is also used to obtain high-voltage interlocking status information corresponding to the power battery management system, the integrated power controller and the hard wire; if the high-voltage interlocking status information corresponding to the power battery management system, the integrated power controller and the hard wire are all in normal state, then the high-voltage interlocking status signal is in normal state; if any of the high-voltage interlocking status information corresponding to the power battery management system, the integrated power controller and the hard wire is in a fault state, then the high-voltage interlocking status signal is in a fault state.

[0151] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module 804 is also used to trigger a warning prompt request if the high-voltage interlock status signal is in a fault state; if the vehicle speed signal is valid and the vehicle speed is less than or equal to the set threshold, or the vehicle speed signal is invalid, then trigger an emergency power-off request caused by the high-voltage interlock status signal.

[0152] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module 804 is also used to trigger a warning prompt request if the insulation status signal corresponding to the power battery management system is a fault state; if the insulation status signal is in a normal state, the emergency power-off request and warning prompt request caused by the insulation fault will not be triggered.

[0153] In some embodiments of the present application, based on the above technical solution, the high-voltage safety monitoring module 804 is also used to confirm that the emergency power-off request is in a non-triggering state if the power-off request caused by a collision, the power-off request caused by a high-voltage interlock fault, or the emergency power-off request caused by an insulation fault are all in a non-triggering state; if any request signal among the power-off request caused by a collision, the power-off request caused by a high-voltage interlock fault, or the emergency power-off request caused by an insulation fault is in a triggering state, enter the standby mode.

[0154] In some embodiments of the present application, based on the above technical solution, the power system includes a main positive relay and a main negative relay; the high-voltage safety monitoring module 804 is also used to monitor the high-voltage safety status of the power system according to the verified bus signal and the status information of the hard-wire signal, and also includes: if the main positive relay state is valid and in a disconnected state, and the motor speed signal is valid and less than or equal to the set threshold, then a residual power discharge request is sent to the drive control unit to discharge the residual power; if the main negative relay state is valid and in a disconnected state, and the motor speed signal is valid and less than or equal to the set threshold, then a residual power discharge request is sent to the drive control unit to discharge the residual power.

[0155] Fig. 9 A schematic diagram of the structure of a computer system suitable for implementing an electronic device of an embodiment of the present application is shown.

[0156] It should be noted that Fig. 9 The computer system 900 of the electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0157] like Fig. 9As shown, the computer system 900 includes a central processing unit (CPU) 901, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 902 or the program loaded from the storage part 908 to the random access memory (RAM) 903, such as executing the method in the above embodiment. In the RAM 903, various programs and data required for system operation are also stored. The CPU 901, ROM 902 and RAM 903 are connected to each other through a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.

[0158] The following components are connected to the I / O interface 905: an input section 906 including a keyboard, a mouse, etc.; an output section 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker; a storage section 908 including a hard disk, etc.; and a communication section 909 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 910 as needed so that a computer program read therefrom is installed into the storage section 908 as needed.

[0159] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a computer program for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication section 909, and / or installed from a removable medium 911. When the computer program is executed by a central processing unit (CPU) 901, various functions defined in the system of the present application are executed.

[0160] It should be noted that the computer-readable medium shown in the embodiment of the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, - but not limited to - an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by an instruction execution system, device or device or used in combination with it. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, wherein a computer-readable computer program is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate, or transmit programs for use by or in conjunction with an instruction execution system, apparatus, or device. The computer program contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0161] The flowchart and block diagram in the accompanying drawings illustrate the possible architecture, functions and operations of the system, method and computer program product according to various embodiments of the present application. Wherein, each box in the flowchart or block diagram can represent a module, a program segment, or a part of the code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of the boxes in the block diagram or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and a computer program.

[0162] The units involved in the embodiments described in this application may be implemented by software or hardware, and the units described may also be set in a processor. The names of these units do not, in some cases, constitute limitations on the units themselves.

[0163] As another aspect, the present application also provides a computer-readable medium, which may be included in the electronic device described in the above embodiment; or may exist independently without being assembled into the electronic device. The above computer-readable medium carries one or more computer programs, and when the above one or more computer programs are executed by an electronic device, the electronic device implements the method in the above embodiment.

[0164] It should be noted that, although several modules or units of the equipment for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0165] Through the description of the above implementation methods, it is easy for those skilled in the art to understand that the example implementation methods described here can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the implementation methods of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a touch terminal, or a network device, etc.) to execute the method according to the implementation methods of the present application.

[0166] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the embodiments disclosed herein. The present application is intended to cover any variations, uses or adaptations of the present application, which follow the general principles of the present application and include common knowledge or customary technical means in the art that are not disclosed in the present application.

[0167] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A power system control method, characterized in that: The method comprises: Collect the operating parameters of the power system; Performing signal processing on the operating parameters according to the signal transmission mode to obtain bus signal information and hard-line signal information; Verifying the bus signal information and the hard-wire signal information to determine the valid status of the bus signal and the hard-wire signal; The high-voltage safety state of the power system is monitored according to the verified state information of the bus signal and the hard-wire signal, and the power system is controlled according to the high-voltage safety state.

2. The power system control method according to claim 1, characterized in that: The signal processing of the operating parameters according to the signal transmission mode to obtain bus signal information and hard-line signal information includes: If the operating parameters are transmitted via a bus, a bus message corresponding to the transport parameter is subjected to a fault check to obtain bus signal information; If the operating parameters are transmitted via hard wires, the hard wire signals corresponding to the operating parameters are filtered to obtain hard wire signal status information.

3. The power system control method according to claim 2, characterized in that: If the operating parameters are transmitted via the bus, a bus message corresponding to the transport parameter is subjected to a fault check to obtain bus signal information, including: Performing end-to-end check, bus-off check and timeout check on the bus message respectively to obtain end-to-end status, bus-off status and timeout status; If any one of the end-to-end state, the bus-off state, and the timeout state is a fault state, the state of the bus signal is a fault state.

4. The power system control method according to claim 1, characterized in that: The checking of the bus signal information and the hard-wire signal information to determine the valid states of the bus signal and the hard-wire signal includes: If the bus signal is in a fault state and lasts for more than a set period, the bus signal is confirmed to be faulty and the message is invalid; If the bus signal is in a normal state and lasts longer than the set period, the bus signal is confirmed to be normal and the message is valid; If the bus signal is in a fault state and does not last longer than the set period, or if the bus message is in a normal state and does not last longer than the set period, then the bus signal has the same state value as that of the previous period.

5. The power system control method according to claim 1, characterized in that: The step of monitoring the high-voltage safety state of the power system according to the verified state information of the bus signal and the hard-wire signal comprises: performing anti-shake processing on the verified bus signal and the hard-line signal; If the bus signal and the hard-wire signal are valid and both are in a fault state, and the signal duration exceeds a set time, the bus signal and the hard-wire signal are confirmed to be in a fault state; If the bus signal and the hard-wire signal are valid and both are in normal state, and the signal duration exceeds the set time, then the bus signal and the hard-wire signal are confirmed to be in normal state; If the bus signal and the hard-wire signal are valid, and are both in a fault state or both in a normal state, and the duration does not exceed a set time, then the bus signal and the hard-wire signal are confirmed to be in the same state as the previous cycle; If both the bus signal and the hardwire signal are invalid, then the bus signal and the hardwire signal are confirmed to be in a fault state.

6. The power system control method according to claim 5, characterized in that: The step of monitoring the high-voltage safety state of the power system according to the verified bus signal and the state information of the hard-wire signal also includes: If the corresponding bus signal in the collision state is invalid, and the corresponding hard-wire signal in the collision state is valid, the collision state signal is associated with the corresponding hard-wire signal in the collision state; If the corresponding bus signal in the collision state is valid and the corresponding hard-wire signal in the collision state is invalid, the collision state signal is associated with the corresponding total signal in the collision state; If the bus signal corresponding to the collision state and the hard-wire signal corresponding to the collision state are both invalid, the collision state signal is in a fault state.

7. The power system control method according to claim 6, characterized in that: The controlling the power system according to the high-voltage safety state includes: If the collision status signal is a fault state, an emergency power-off request caused by the collision is triggered, and a warning prompt request is triggered.

8. The power system control method according to claim 5, characterized in that: The power system includes a power battery management system and an integrated power controller; The step of monitoring the high-voltage safety state of the power system according to the verified bus signal and the state information of the hard-wire signal also includes: Obtaining high-voltage interlock status information corresponding to the power battery management system, the integrated power supply controller, and the hard line; If the power battery management system, the integrated power controller and the high-voltage interlock status information corresponding to the hard line are all in normal state, the high-voltage interlock status signal is in normal state; If any of the high-voltage interlock status information corresponding to the power battery management system, the integrated power supply controller and the hard line is in a fault state, the high-voltage interlock status signal is in a fault state.

9. The power system control method according to claim 8, characterized in that: The controlling the power system according to the high-voltage safety state includes: If the high voltage interlock status signal is in a fault state, a warning prompt request is triggered; If the vehicle speed signal is valid and the vehicle speed is less than or equal to the set threshold, or if the vehicle speed signal is invalid, an emergency power-off request caused by the high-voltage interlock status signal is triggered.

10. The power system control method according to claim 5, characterized in that: The step of monitoring the high-voltage safety state of the power system according to the verified bus signal and the state information of the hard-wire signal also includes: If the insulation status signal corresponding to the power battery management system is a fault state, a warning prompt request is triggered; If the insulation status signal is in a normal state, the emergency power-off request and warning prompt request caused by the insulation fault are not triggered.

11. The power system control method according to claim 10, characterized in that: The method further comprises: If the power-off request caused by collision, the power-off request caused by high-voltage interlock fault, or the emergency power-off request caused by insulation fault are all in the non-trigger state, the emergency power-off request confirmation is in the non-trigger state; If any request signal of the power-off request caused by collision, the power-off request caused by high-voltage interlock fault, or the emergency power-off request caused by insulation fault is in the trigger state, the standby mode is entered.

12. The power system control method according to claim 5, characterized in that: The power system includes a main positive relay and a main negative relay; The step of monitoring the high-voltage safety state of the power system according to the verified bus signal and the state information of the hard-wire signal also includes: If the main positive relay is in a valid and disconnected state, and the motor speed signal is valid and less than or equal to a set threshold, a residual power discharge request is sent to the drive control unit to discharge the residual power; If the state of the main negative relay is valid and disconnected, and the motor speed signal is valid and less than or equal to the set threshold, a residual power discharge request is sent to the drive control unit to discharge the residual power.

13. A power system control system, characterized in that: The system comprises: A signal acquisition module is used to collect operating parameters of the power system; A signal processing module, used for performing signal processing on the operating parameters according to a signal transmission mode to obtain bus signal information and hard-line signal information; A signal verification module, used to verify the bus signal information and the hard-line signal information to determine the valid status of the bus signal and the hard-line signal; The high-voltage safety monitoring module is used to monitor the high-voltage safety status of the power system according to the verified bus signal and the status information of the hard-wire signal, and control the power system according to the high-voltage safety status.

14. A computer readable medium, characterized in that The computer readable medium stores a computer program, which, when executed by a processor, implements the power system control method according to any one of claims 1 to 12.

15. An electronic device, characterized in that: include: processor; as well as A memory, configured to store executable instructions of the processor; Wherein, the processor is configured to execute the power system control method described in any one of claims 1 to 12 by executing the executable instructions.

Images