Efficient and accurate control system for new energy commercial truck based on DSP redundancy

Abstract

The invention discloses an efficient and accurate control system for a new energy commercial truck based on DSP redundancy. According to the invention, the dual-core DSP is adopted to improve the system performance. One core focuses on wave sending processing, voltage, current and temperature sampling work, operation control algorithm and communication functions; and the other core is used for detection and protection, fault processing, a self-learning algorithm and a fault pre-judgment algorithm. Meanwhile, the CAL coprocessor is used for sharing a signal calculation processing task, remarkably reducing CPU load and improving the overall operation efficiency of the system, and two groups of power modules are mutually backed up, so that when one group of power supply fails, the other group of power supply can be quickly switched, stable power supply of the system is ensured, system shutdown caused by power supply failure is effectively avoided, and the service life of the system is prolonged. Precise detection of three-phase current is achieved through a hardware addition circuit, three sets of data are displayed at the same time and verified mutually, data misjudgment caused by faults of a single collection point is prevented, and therefore reliable data support is provided for precise control of a system.

Description

Technical Field

[0001] The present invention belongs to the technical field of new energy truck control, and specifically is a high-efficiency and accurate control system for new energy commercial trucks based on DSP redundancy. Background Art

[0002] In new energy vehicles, the motor drive controller plays the role of running the motor and protecting the motor. In the current situation where the operating environment of new energy commercial trucks is becoming increasingly complex, the motor drive control system faces unprecedented challenges. With the improvement of the intelligence level of vehicles, more auxiliary functions such as automatic driving assistance and vehicle networking communication generate data interaction with the motor drive system, which further increases the processing burden of the traditional single DSP control system. At the same time, strict regulations require vehicles to ensure safe operation under various extreme working conditions. The stability and reliability of traditional solutions are severely tested when dealing with harsh environments such as low temperature, high temperature, high humidity and strong electromagnetic interference. For example, in a high temperature environment, the heat dissipation problem of a single DSP chip is aggravated, which is easy to cause performance degradation and even crashes, seriously affecting the normal driving of the vehicle. Moreover, the existing solutions rely on simple threshold judgments in fault diagnosis, and it is difficult to accurately capture some intermittent faults or hidden faults, which not only increases the difficulty of vehicle maintenance, but also buries hidden dangers for driving safety. In the motor drive control system of new energy commercial trucks, with the continuous improvement of vehicle performance and strict requirements for safety.

[0003] However, the traditional single DSP control system can no longer meet the high reliability requirements under complex working conditions. On the one hand, when a single DSP processes complex wave generation, sampling, control algorithms, and communication functions, it is easy to encounter performance bottlenecks caused by excessive loads; on the other hand, the insufficient reliability of the power module and the imperfect fault detection and protection mechanism make it impossible for the system to respond promptly and effectively when faced with sudden faults, which may lead to secondary faults and cause major safety accidents. In addition, there are also deficiencies in the recording and analysis of fault data, which is not conducive to the subsequent research and development, optimization and upgrading work. Summary of the invention

[0004] The purpose of the present invention is to provide a high-efficiency and accurate control system for new energy commercial trucks based on DSP redundancy in order to solve the above-mentioned problems.

[0005] The technical solution adopted by the present invention is as follows: A high-efficiency and accurate control system for new energy commercial trucks based on DSP redundancy, comprising: Dual-core DSP main circuit, used to execute motor drive control algorithm and fault detection protection, including core 1 and core 2; Redundant power supply circuit module provides stable power supply for the system through dual power supply switching mechanism; Multi-point sampling and verification circuit, used to collect IGBT bus voltage, three-phase current, temperature data and perform hardware-level redundancy verification; The black box storage circuit is independent of the main control circuit and cyclically stores key data before and after the fault; Independent safety chip monitoring module, directly controls PWM sealing and relay shutdown based on automotive-grade safety chip; The dual-core DSP main circuit, redundant power supply circuit, multi-point sampling and verification circuit, black box storage circuit and independent safety chip monitoring are interconnected through a CAN bus, an SPI interface and a shared memory.

[0006] In a preferred embodiment, the dual-core DSP main circuit is internally provided with: Core 1 is connected to the IGBT drive circuit through the SPI interface and is responsible for generating PWM signals, executing the FOC algorithm, and collecting voltage, current, and temperature data in real time; Core 2 communicates with the independent safety chip through the CAN bus, monitors fault signals in real time and executes protection algorithms; Core 1 and core 2 synchronize status data through shared memory and seamlessly switch control in the event of a failure.

[0007] In a preferred embodiment, the redundant power supply circuit adopts a dual-power supply design of the LM2596S chip, and monitors the input voltage in real time through a voltage comparator; When the main power supply is abnormal, it switches to the backup power supply through the MOSFET switch, and the switching time is less than 1ms; The output power is connected to the dual-core DSP main circuit and peripheral circuits through a multi-stage filter circuit.

[0008] In a preferred embodiment, the multi-point sampling and verification circuit is used to collect three-phase current signals through an isolation amplifier circuit and connect a hardware addition circuit to perform redundancy verification; Temperature data is collected through thermistor voltage divider circuits, which are redundantly arranged in the DSP chip, IGBT module and power module; The collected data is converted by ADC and transmitted to the dual-core DSP main circuit through the SPI interface.

[0009] In a preferred embodiment, the black box storage circuit uses W25Q128 SPI Flash and AT24C256 EEPROM chips, which are isolated from the main circuit via an independent SPI / I2C interface; The storage module inside the black box storage circuit is independently powered, and the physical distance between the module and the main control board is greater than 10 cm. The module cyclically stores the voltage, current, and temperature data for 10 seconds before and after the fault.

[0010] In a preferred embodiment, the independent safety chip monitoring module is based on the N32A455 automotive-grade MCU, and directly collects bus voltage, IGBT temperature and current signals through independent ADC channels; When overcurrent or overtemperature is detected, the PWM output and relay are directly shut down through the GPIO interface, with a response time of <1ms; It communicates with Core 2 via the CAN bus, has a higher priority than the main DSP, and triggers an emergency brake signal to the vehicle's braking system.

[0011] In a preferred embodiment, the switching logic of the redundant power supply circuit includes intelligent load distribution: when the temperature of the main power supply exceeds a threshold, the backup power supply is automatically started to share the load, and a power status alarm is sent to the dual-core DSP main circuit via the CAN bus.

[0012] In a preferred embodiment, the black box storage circuit integrates the AES-128 encryption algorithm, and the encrypted data is remotely transmitted to the cloud platform via a wireless communication module (such as 4G / LoRa) for fault analysis.

[0013] In a preferred embodiment, the independent safety chip monitors the built-in self-diagnosis function, regularly checks the status of the chip's internal ADC, comparator and communication interface, and takes over the protection function through the redundant safety chip in case of failure; The independent safety chip monitors and is linked to the vehicle steering system. When a motor failure causes abnormal torque, a speed limit instruction is sent to the steering controller via the CAN bus to prevent the vehicle from losing control.

[0014] In a preferred embodiment, the hardware addition circuit of the multi-point sampling and verification circuit adopts a three-group redundant design, and cross-compares the three-phase current values ​​to eliminate abnormal data and trigger redundant acquisition channels to re-sample.

[0015] In summary, due to the adoption of the above technical solution, the beneficial effects of the present invention are: 1. In the present invention, a dual-core DSP (such as DSP28337) is used to improve system performance. One core is dedicated to processing wave generation, voltage, current and temperature sampling, running control algorithms and communication functions; the other core is used for detection and protection, fault handling, self-learning algorithms and fault pre-judgment algorithms. At the same time, the CAL coprocessor is used to share signal calculation and processing tasks, significantly reducing the CPU load and improving the overall operating efficiency of the system.

[0016] 2. In the present invention, a dual-power switching protection mechanism is designed for the vulnerable low-voltage power module in the motor drive system of new energy commercial trucks. The two groups of power modules back up each other. When one group of power fails, it can quickly switch to the other group to ensure stable power supply of the system and effectively avoid system shutdown caused by power failure.

[0017] 3. In the present invention, the bus voltage, current and temperature of all IGBTs are fully collected, and the traditional method of collecting only a single bus voltage, two-phase current and one temperature is abandoned. Accurate detection of three-phase current is achieved through hardware addition circuit, and three sets of data are displayed simultaneously and cross-checked to prevent data misjudgment caused by failure of a single collection point, thereby providing reliable data support for precise control of the system.

[0018] 4. In the present invention, a storage circuit similar to a black box is designed, which uses an external Flash or EEPROM module to continuously and cyclically store data before and after the fault. The module is kept at a certain distance from the main control board, and can effectively protect the stored data from damage when the system fails, explodes or overcurrent occurs, providing a strong basis for tracing and analyzing the cause of the accident, while reducing the primary damage to the module caused by the accident and the secondary damage to the main storage unit during the disassembly process.

[0019] 5. In the present invention, a safety chip based on the national technology automotive grade MCU N32A455 is introduced. In addition to the main control DSP, it independently undertakes the task of monitoring major faults such as voltage, current, temperature, and speed. The safety chip has the ability to directly control the motor wave, the main control relay or the bus relay to close. When a fault is detected, measures can be taken quickly to avoid the occurrence of secondary faults, effectively protect key components such as IGBT from damage, and ensure the safety of vehicle operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 The overall circuit diagram of the control system of the present invention; Figure 2 This is a power supply circuit diagram based on LM2596 in the present invention; Figure 3 It is a schematic diagram of the redundant power supply circuit in the present invention; Figure 4 It is a three-phase current acquisition circuit diagram in the present invention; Figure 5 The redundant three-phase current addition circuit diagram of the present invention; Figure 6 It is the temperature, current and voltage acquisition circuit diagram of the present invention; Figure 7 This is a redundant temperature acquisition circuit diagram in the present invention; Figure 8 A redundant storage circuit diagram in the present invention; Fig. 9 This is a monitoring circuit diagram of an independent safety chip in the present invention; DETAILED DESCRIPTION

[0021] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention. Example

[0022] Reference Figure 1-9 , a high-efficiency and accurate control system for new energy commercial trucks based on DSP redundancy, including: Main circuit based on dual-core DSP Power redundancy circuit Multi-point sampling and calibration circuit Black box storage circuit Independent security chip monitoring Based on the large framework and peripheral function allocation of DSP28337, this solution builds the overall hardware architecture with DSP28337 as the core. It has high-performance processing capabilities and rich peripheral interfaces, which can meet the complex needs of the motor drive control system of new energy commercial trucks. The dual-core architecture enables the system to reasonably allocate different functional modules to different cores. Adding power supply and sampling redundant circuits can improve the stability of the system. Under complex working conditions, it can face sudden failures and improve the fault tolerance of the system. Adding storage redundant circuits can help R&D personnel to upgrade and improve in the future and quickly locate the cause of the failure. Adding redundant circuits to the safety monitoring chip can increase the failure rate, extend the system service life, and avoid the occurrence of secondary accidents.

[0023] The dual-core DSP main circuit adopts TI's TMS320F28337 dual-core processor with a main frequency of 200MHz and integrated FPU and CLA coprocessor.

[0024] The DSP-based control circuit mainly includes: 3.3V, 3.0V, 1.2V and other power supplies 1, redundant power supply 2; Flash, EEPROM-based storage circuit, redundant EEPROM storage circuit; isolated gate drive circuit, ADC sampling circuit based on isolation op amp, monitoring and protection circuit based on comparator, temperature, voltage, and current redundant sampling circuit; CAN, SPI, USB and other communication circuits, resolver or magnetic encoder communication circuit for speed and angle reading; IGBT or SIC drive circuit.

[0025] The specific functions are allocated as follows: Core 1: Mainly responsible for wave control, achieving efficient motor drive through precise PWM signal generation and execution of FOC drive algorithm; at the same time, it undertakes the sampling task of key parameters such as voltage, current, temperature, and obtains system operation status data in real time; runs the control algorithm and dynamically adjusts the motor operation parameters according to the sampled data to achieve precise control; in addition, it is also responsible for the communication function between the system and external devices to ensure real-time transmission and interaction of data.

[0026] Core 2: Focus on system detection and protection, monitor fault signals in real time during system operation, quickly respond to and handle various faults, monitor fault signals (overcurrent, overtemperature, voltage abnormality) in real time; run self-learning algorithms, continuously optimize control strategies through analysis and learning of system operation data, self-learn basic motor parameters by driving motor rotation; execute fault pre-judgment algorithms (based on historical data trend analysis), warn of potential fault risks in advance, and provide guarantee for stable operation of the system; Optimized design: The CLA coprocessor is responsible for the calculations in the FOC algorithm, PID algorithm, and filtering algorithm. The CAL coprocessor is used to perform complex signal calculations and processing, effectively sharing the core load, improving the overall system performance, and reducing CPU occupancy.

[0027] Redundancy mechanism: Core 1 and core 2 synchronize status data through shared memory and seamlessly switch control in the event of a failure.

[0028] Redundant power supply circuit modules, such as Figure 2 As shown in the figure, on the basis of using LM2596S chip as the buck module, an input voltage monitoring and feedback circuit is added. In the figure, the V-5V potential voltage feedback signal is divided by two resistors, and the potential of the collection point is 2.5V. The circuit can monitor the change of input voltage in real time and feedback the information to the monitoring management chip. The circuit composed of D2 and Q1 can realize input voltage undervoltage lockout. By monitoring the input voltage, it ensures that the system stops working when the voltage is insufficient to avoid abnormal operation or damage to the device. When the input voltage is lower than the set threshold, UVLO forces the system to shut down or enter sleep mode to ensure that the device is in a controllable state. Suppress the impact of power transient drop (such as voltage fluctuation when the vehicle starts) on the system to avoid frequent restarts. Feedback circuit When the input voltage fluctuation is far beyond the normal range, the monitoring management chip will disable some chips, cut off some circuits, and trigger an alarm. At the same time, in order to improve the anti-interference ability of the power module, a multi-stage filtering circuit is added to the circuit. The capacitors and resistors in the figure can refer to multiple capacitors and resistors, which can effectively filter out high-frequency noise and electromagnetic interference in the power input and ensure the purity of the power output. Commonly used 3.3V power supplies or power supplies with severe heating: Based on the redundant design of two groups of the same structure, power supply status monitoring and intelligent switching algorithms are introduced. By real-time monitoring of the output voltage, current, temperature and other parameters of each group of power supplies, when the voltage comparator monitors the power supply status in real time, it triggers the MOSFET to switch the power supply path. When an abnormality is detected in one group of power supplies (such as low voltage, excessive current, high temperature, etc.), the intelligent switching algorithm starts quickly, seamlessly switches the load to another group of normal power supplies, and issues a fault alarm message. In addition, in order to reduce the heating problem of the power module, an efficient parallel structure design is adopted. For example, when it is detected that the load capacity of power supply 1 is too large and the temperature rises too high, but it still works normally, by turning on the MOS switch of power supply 2, power supply 2 can share the current pressure, reduce local heating, and reduce the workload of power supply 1, ensuring the stability of the power module under long-term high-load operation.

[0029] like Figure 4 As shown, the multi-point sampling and verification circuit uses a FET (field effect transistor) operational amplifier, two-stage amplification, and then passes through a protection circuit and finally ADC for collection. The motor control circuit uses three sets of phase current sampling, and a redundant hardware addition circuit is used to obtain another current. Compared with the traditional circuit, only two phase currents are sampled, and the other phase current is obtained by software calculation according to the current relationship ib=-(ia+ic). In this patent, a set of redundant current sampling and hardware current addition circuits are designed ( Figure 5 ), data verification can be performed to obtain accurate current data, and abnormal current fluctuations caused by poor contact in a certain phase can be checked. This approach can effectively identify and eliminate erroneous data caused by interference, sampling circuit failure and other factors, thereby ensuring that the acquired current data is accurate and reliable, providing solid data support for efficient and accurate control of the motor, and greatly improving the stability and reliability of the system operation.

[0030] Figure 6 It is the temperature sampling, current sampling and voltage sampling in the motor control circuit. Temperature sampling includes motor, IGBT drive module and main control circuit board; current sampling includes bus current, three-phase current and low-voltage power supply current; voltage includes low-voltage power supply voltage, 12V, 5V, 3.3V, 1.2V voltage, bus voltage, IGBT gate voltage and the voltage between IGBT collector and emitter.

[0031] Figure 7 It is a simple redundant temperature detection structure. The sample is measured through a thermistor. As the temperature changes, the voltage value across the thermistor changes. By reading the voltage value, the current temperature is obtained. The redundant sampling circuit of this patent refers to: 1. Place thermistors at multiple locations on the main control board to collect temperature changes, such as DSP chip (internal chip temperature value can be used), DCDC power supply with large current load (5V, 12V), and ambient temperature of the main control board; collect the temperature of each IGBT. If a single circuit board integrates 3 groups of IGBTs, more than two thermistors should be placed, and a redundant comparison circuit should be made; 2 Redundant bus voltage acquisition, compared with the traditional one, which only collects the bus voltage on one IGBT, redundant bus voltage sampling needs to take three sets of voltages and make a comparison circuit to obtain the maximum bus voltage; 3. Redundant current sampling circuit, collects the front-end current and the back-end current, compares the current size, and prevents erroneous reading.

[0032] Redundant current sampling can accurately determine the failure of a single IGBT and a single power supply, so that if a single IGBT is damaged, it will not affect the adjacent IGBTs. In the multi-point acquisition circuit, in addition to the comprehensive acquisition of the bus voltage, current, and temperature of all IGBTs and the use of hardware addition circuits to achieve accurate detection of three-phase currents, a data preprocessing and anomaly detection module is also added. After data acquisition, this module first performs preprocessing operations such as filtering and amplification on the data to improve the accuracy and stability of the data. Then, through the built-in anomaly detection algorithm, the collected data is analyzed in real time to determine whether there are data anomalies, such as data mutations, exceeding the normal range, etc. If abnormal data is detected, the redundant acquisition channel is immediately started, the data is re-collected, and the abnormal data is marked and recorded to provide a basis for subsequent fault diagnosis.

[0033] The black box storage circuit uses an external Flash or EEPROM module to continuously store data before and after the fault in a loop, and adds data encryption and accident analysis functions. The redundant storage circuit is designed to be far away from the source of the accident, and the environment is relatively convenient. It can be designed as a module connected to the periphery of the main control circuit board to prevent secondary damage caused by the occurrence of the accident and the inability to read the chip. Through the data encryption algorithm, the data stored in the module is encrypted to ensure the security and integrity of the data and prevent the data from being illegally tampered with or stolen. At the same time, the wireless communication module can be used to realize the remote transmission of black box data. When the vehicle fails or data analysis is required, maintenance personnel or management personnel can read the data in the black box to facilitate fault diagnosis and vehicle performance evaluation. In addition, in order to further improve the reliability of data storage, a data verification and repair mechanism is added to the black box storage circuit to regularly verify the stored data. If the data is found to be wrong or damaged, it is repaired in time to ensure the accuracy of the stored data.

[0034] Choice of redundant memory chip: W25Q128SPIFlash, capacity 16MB, erase and write times 100,000 times, data retention period 20 years; AT24C256IICEEPROM, capacity 256kb, erase and write times 1 million times, data retention period 100 years.

[0035] Anti-interference design: The storage module is physically isolated from the main control board (distance > 10cm).

[0036] The power supply is independently supplied to prevent data loss due to main power failure.

[0037] Data management: Circular storage strategy: write system status data (voltage, current, temperature, speed) every 100ms, and retain data 10 seconds before and after the fault.

[0038] Data encryption: AES-128 encryption algorithm is used for storage to prevent tampering.

[0039] The independent safety chip monitoring module is an automotive-grade MCU with an operating temperature of -40℃~125℃, which complies with the ISO26262ASIL-B standard. A safety chip based on the national technology automotive-grade MCU N32A455 is introduced. The chip runs independently of the main control DSP and has powerful monitoring and protection functions. Through the CAN communication and SPI communication interfaces, the safety chip can directly read key data such as temperature, current, voltage, and speed, and monitor the status of the resolver encoder in real time. Using its internal ADC and comparator, accurate detection and safety protection of the system can be achieved. When a fault is detected, the safety chip has a higher priority and can directly perform PWM wave sealing processing, turn off some relays, control the vehicle to slow down or turn off the output, and stop the vehicle from running, thereby effectively protecting key components such as IGBT from damage and avoiding high-risk situations caused by failure of the main control DSP, such as bombing.

[0040] The independent safety chip monitoring module has a powerful monitoring and protection function, and has added a linkage function with other safety systems of the vehicle. For example, when the safety chip detects a serious fault in the motor, which may cause the vehicle to lose control, it immediately sends a signal to the vehicle's braking system to start the emergency braking procedure to ensure that the vehicle stops safely. At the same time, the safety chip also communicates with the vehicle's steering system and intervenes in the steering system when necessary to prevent the vehicle from making dangerous turns due to motor failure. In addition, the safety chip has a self-diagnosis function for its own working status, and regularly tests each module inside the chip to ensure that the chip is always in normal working condition. If a fault is found in itself, the redundant safety chip (if any) will be started in time or the fault information will be sent to the main control DSP to ensure the safety and reliability of the system. From the above, it can be seen that the new energy commercial truck control hardware solution based on DSP redundancy of the present invention can meet the complex requirements of the motor drive control system of new energy commercial trucks. The dual-core architecture enables the system to reasonably allocate different functional modules to different cores. The redundancy of power supply, sampling, storage, and safety monitoring circuits can improve the stability and reliability of the system and improve the fault tolerance of the system under complex working conditions.

[0041] From the above we can know: In the present invention, a dual-core DSP (such as DSP28337) is used to improve system performance. One core is dedicated to processing wave generation, voltage, current and temperature sampling, running control algorithms and communication functions; the other core is used for detection and protection, fault handling, self-learning algorithms and fault pre-judgment algorithms. At the same time, the CAL coprocessor is used to share signal calculation and processing tasks, significantly reducing the CPU load and improving the overall operating efficiency of the system.

[0042] In the present invention, a dual-power switching protection mechanism is designed for the vulnerable low-voltage power module in the motor drive system of new energy commercial trucks. Through the two groups of power modules backing up each other, when one group of power fails, it can quickly switch to the other group to ensure stable power supply of the system and effectively avoid system shutdown caused by power failure.

[0043] In the present invention, the bus voltage, current and temperature of all IGBTs are fully collected, and the traditional method of only collecting a single bus voltage, two-phase current and one temperature is abandoned. The accurate detection of three-phase current is realized through the hardware addition circuit, and the three sets of data are displayed simultaneously and cross-checked to prevent data misjudgment caused by failure of a single collection point, thereby providing reliable data support for the precise control of the system.

[0044] In the present invention, a storage circuit similar to a black box is designed, which uses an external Flash or EEPROM module to continuously and cyclically store data before and after the fault. The module is kept at a certain distance from the main control board, and can effectively protect the stored data from damage when the system fails, explodes or overcurrent occurs, providing a strong basis for tracing and analyzing the cause of the accident, while reducing the primary damage to the module caused by the accident and the secondary damage to the main storage unit during the disassembly process.

[0045] In the present invention, a safety chip based on the national technology automotive grade MCU N32A455 is introduced. In addition to the main control DSP, it independently undertakes the task of monitoring major faults such as voltage, current, temperature, and speed. The safety chip has the ability to directly control the motor wave, the main control relay or the bus relay to close. When a fault is detected, measures can be taken quickly to avoid the occurrence of secondary faults, effectively protect key components such as IGBT from damage, and ensure the safety of vehicle operation.

[0046] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprise" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0047] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An efficient and accurate control system for new energy commercial trucks based on DSP redundancy, characterized by ,include: Dual-core DSP main circuit, used to execute motor drive control algorithm and fault detection protection, including core 1 and core 2; Redundant power supply circuit module provides stable power supply for the system through dual power supply switching mechanism; Multi-point sampling and verification circuit, used to collect IGBT bus voltage, three-phase current, temperature data and perform hardware-level redundancy verification; The black box storage circuit is independent of the main control circuit and cyclically stores key data before and after the fault; Independent safety chip monitoring module, directly controls PWM sealing and relay shutdown based on automotive-grade safety chip; The dual-core DSP main circuit, redundant power supply circuit, multi-point sampling and verification circuit, black box storage circuit and independent safety chip monitoring are interconnected through a CAN bus, an SPI interface and a shared memory.

2. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The internal configuration of the dual-core DSP main circuit includes: Core 1 is connected to the IGBT drive circuit through the SPI interface and is responsible for generating PWM signals, executing the FOC algorithm, and collecting voltage, current, and temperature data in real time; Core 2 communicates with the independent safety chip through the CAN bus, monitors fault signals in real time and executes protection algorithms; Core 1 and core 2 synchronize status data through shared memory and seamlessly switch control in the event of a failure.

3. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The redundant power supply circuit adopts the dual-circuit power supply design of the LM2596S chip, and monitors the input voltage in real time through a voltage comparator; When the main power supply is abnormal, it switches to the backup power supply through the MOSFET switch, and the switching time is less than 1ms; The output power is connected to the dual-core DSP main circuit and peripheral circuits through a multi-stage filter circuit.

4. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The multi-point sampling and verification circuit is used to collect three-phase current signals through an isolation amplifier circuit and connect a hardware addition circuit to perform redundancy verification; Temperature data is collected through thermistor voltage divider circuits, which are redundantly arranged in the DSP chip, IGBT module and power module; The collected data is converted by ADC and transmitted to the dual-core DSP main circuit through the SPI interface.

5. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The black box storage circuit uses W25Q128 SPI Flash and AT24C256 EEPROM chips, which are isolated from the main circuit through an independent SPI / I2C interface; The storage module inside the black box storage circuit is independently powered, and the physical distance between the module and the main control board is greater than 10 cm. The module cyclically stores the voltage, current, and temperature data for 10 seconds before and after the fault.

6. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The independent safety chip monitoring module is based on the N32A455 automotive-grade MCU, and directly collects bus voltage, IGBT temperature and current signals through independent ADC channels; When overcurrent or overtemperature is detected, the PWM output and relay are directly shut down through the GPIO interface, with a response time of <1ms; It communicates with Core 2 via the CAN bus, has a higher priority than the main DSP, and triggers an emergency brake signal to the vehicle's braking system.

7. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The switching logic of the redundant power supply circuit includes intelligent load distribution: when the temperature of the main power supply exceeds a threshold, the backup power supply is automatically started to share the load, and a power supply status alarm is sent to the dual-core DSP main circuit via the CAN bus.

8. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The black box storage circuit integrates the AES-128 encryption algorithm, and the encrypted data is remotely transmitted to the cloud platform through the wireless communication module for fault analysis.

9. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The independent safety chip monitors the built-in self-diagnosis function, regularly checks the status of the chip's internal ADC, comparator and communication interface, and takes over the protection function through the redundant safety chip in case of failure; The independent safety chip monitors and is linked to the vehicle steering system. When a motor failure causes abnormal torque, a speed limit instruction is sent to the steering controller via the CAN bus to prevent the vehicle from losing control.

10. The efficient and accurate control system for new energy commercial trucks based on DSP redundancy as claimed in claim 1, characterized in that: The hardware addition circuit of the multi-point sampling and verification circuit adopts a three-group redundant design, which eliminates abnormal data and triggers redundant acquisition channels to re-sample by cross-comparing the three-phase current values.

Images