Safety control method and safety control system of motor controller and storage medium

Abstract

The invention relates to the field of motor control, in particular to a safety control method of a motor controller, a safety control system of the motor controller and a computer storage medium. According to one aspect of the invention, the safety control method for the motor controller comprises the following steps: obtaining a counter electromotive force value and a bus voltage value of a motor, and comparing the counter electromotive force value of the motor with the bus voltage value; executing a first safety control strategy in response to the fact that the back electromotive force value of the motor is smaller than the bus voltage value; and executing a second safety control strategy in response to the condition that the back electromotive force value of the motor is greater than or equal to the bus voltage value, wherein the first safety control strategy is selectively switched during execution of the second safety control strategy based on a comparison of a current value of the electric machine with a current threshold.

Description

Technical Field

[0001] The present application relates to the field of motor control, and more specifically to a safety control method of a motor controller, a safety control system of a motor controller, and a computer storage medium. Background Art

[0002] In electric vehicles, the normal operation of the electric drive system composed of the motor and the motor controller is extremely important. The motor controller controls the motor to work according to the set direction, speed, angle, response time, etc. Once the electric drive system fails, it may cause damage to the device and even affect the vehicle's control. For example, when the car is driving at high speed, too high back electromotive force is generated at the three-phase end of the motor. The resulting braking torque will affect the vehicle's control and may cause the battery to overcharge. In addition, when the excessive back electromotive force is rectified to the DC capacitor in the controller, the DC bus voltage will be raised, and there is a risk of damaging the power device.

[0003] Therefore, in the event of a fault in the electric drive system, active safety control measures need to be taken. Currently, common active safety control measures include active short circuit discharge (ASC) and safety pulse off (SPO).

[0004] However, the above ASC and SPO cannot guarantee the safe operation of the motor controller. For example, when the three phases of the motor enter ASC at the same time, the stator voltage changes suddenly, and the internal winding current goes through a process from transient to steady state. The superposition of transient current and steady current produces a large current shock. The current shock generated on the motor stator winding may cause the motor to overheat, thereby increasing the risk of inverter damage and demagnetization of the magnetic steel on the rotor. When the motor back electromotive force is greater than the bus voltage, SPO will cause uncontrollable rectification, which may affect the DC side power supply and cause the risk of overcharging. Summary of the invention

[0005] In order to solve or at least alleviate one or more of the above problems, the following technical solutions are provided.

[0006] According to a first aspect of the present application, a safety control method for a motor controller is provided, the method comprising the following steps: obtaining a back-electromotive force value and a bus voltage value of a motor and comparing the back-electromotive force value of the motor with the bus voltage value; executing a first safety control strategy in response to the back-electromotive force value of the motor being less than the bus voltage value; and executing a second safety control strategy in response to the back-electromotive force value of the motor being greater than or equal to the bus voltage value; wherein during the execution of the second safety control strategy, the first safety control strategy is selectively switched to based on a comparison between the current value of the motor and a current threshold.

[0007] According to the safety control method of the motor controller described in one embodiment of the present application, obtaining the back electromotive force value of the motor includes: obtaining the magnetic flux and speed of the motor rotor at the current temperature; and obtaining the back electromotive force value of the motor based on the product of the magnetic flux and the speed of the motor rotor.

[0008] According to the safety control method of the motor controller described in one embodiment of the present application or any one of the above embodiments, the first safety control strategy includes a safety pulse shutdown operation, and the second safety control strategy includes a switching control operation between an active short-circuit operation and a safety pulse shutdown operation.

[0009] According to the safety control method of the motor controller described in one embodiment of the present application or any of the above embodiments, the safety pulse shutdown operation includes: controlling each power device in the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in a disconnected state.

[0010] According to the safety control method of the motor controller described in one embodiment of the present application or any one of the above embodiments, the active short-circuit operation includes: controlling the power device of one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state, and controlling the power device of the other of the upper bridge arm and the lower bridge arm to be in the off state.

[0011] According to the safety control method of the motor controller described in one embodiment of the present application or any one of the above embodiments, the switching control operation between the active short-circuit operation and the safety pulse shutdown operation includes: controlling the power device of one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to remain in the disconnected state; and controlling the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state with a variable duty cycle.

[0012] According to the safety control method of the motor controller described in one embodiment of the present application or any one of the above embodiments, controlling the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state with a variable duty cycle includes: controlling the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state with a variable duty cycle that gradually increases from a preset initial duty cycle to a maximum duty cycle, so that when the variable duty cycle increases to the maximum duty cycle, the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to remain in the on state.

[0013] According to the safety control method of the motor controller described in one embodiment of the present application or any one of the above embodiments, selectively switching to the first safety control strategy based on the comparison between the current value of the motor and the current threshold during the execution of the second safety control strategy includes: switching to the first safety control strategy in response to the current value of the motor being greater than the current threshold; and executing the second safety control strategy in response to the current value of the motor being less than or equal to the current threshold.

[0014] According to the safety control method of the motor controller according to one embodiment of the present application or any one of the above embodiments, selectively switching to the first safety control strategy based on the comparison between the current value of the motor and the current threshold during the execution of the second safety control strategy further includes: switching to the first safety control strategy in response to one or more current values ​​of the three-phase current of the motor being greater than the current threshold; and executing the second safety control strategy in response to each current value of the three-phase current of the motor being less than or equal to the current threshold.

[0015] According to the second aspect of the present application, a safety control system for a motor controller is provided, the system comprising: a memory; a processor coupled to the memory; and a computer program stored on the memory and running on the processor, the running of the computer program resulting in the execution of the steps of the safety control method for the motor controller according to the first aspect of the present application.

[0016] According to a third aspect of the present application, a computer storage medium is provided, wherein the computer storage medium includes instructions, and the instructions, when run, execute the steps of the safety control method for the motor controller according to the first aspect of the present application.

[0017] The safety control scheme of the motor controller according to one or more embodiments of the present application can selectively execute the first safety control strategy and the second safety control strategy by comparing the back electromotive force value of the motor with the bus voltage value, and selectively switch to the first safety control strategy based on the comparison of the current value of the motor with the current threshold during the execution of the second safety control strategy, thereby achieving safe control of the motor within the full speed range, reducing the risk of motor overheating and rotor magnet demagnetization caused by transient current caused by ASC, and improving the safety performance of the motor controller. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The above and / or other aspects and advantages of the present application will become clearer and easier to understand through the following description of various aspects in conjunction with the accompanying drawings, in which the same or similar units are represented by the same reference numerals. In the accompanying drawings:

[0019] Figure 1A flow chart of a safety control method of a motor controller according to one or more embodiments of the present application is shown.

[0020] Figure 2 A flow chart of a safety control method of a motor controller according to one or more embodiments of the present application is shown.

[0021] Figure 3 A schematic diagram showing the inverter of a typical motor controller.

[0022] Figure 4 A schematic diagram showing a variable duty cycle for performing a switching control operation between an active short-circuit operation and a safety pulse shut-off operation according to an embodiment of the present application is shown.

[0023] Figure 5 A schematic block diagram of a safety control system of a motor controller according to one or more embodiments of the present application is shown. DETAILED DESCRIPTION

[0024] The description of the following specific embodiments is merely exemplary in nature and is not intended to limit the disclosed technology or the application and use of the disclosed technology. In addition, it is not intended to be bound by any express or implied theory presented in the aforementioned technical field, background technology or the following specific embodiments.

[0025] In the following detailed description of the embodiments, many specific details are set forth in order to provide a more thorough understanding of the disclosed technology. However, it is apparent to one of ordinary skill in the art that the disclosed technology can be practiced without these specific details. In other instances, well-known features are not described in detail to avoid unnecessarily complicating the description.

[0026] Terms such as "comprising" and "including" indicate that in addition to the units and steps directly and clearly stated in the specification, the technical solution of the present application does not exclude the situation of having other units and steps that are not directly or clearly stated. Terms such as "first" and "second" do not indicate the order of units in terms of time, space, size, etc., but are only used to distinguish between units.

[0027] Hereinafter, various exemplary embodiments according to the present application will be described in detail with reference to the accompanying drawings.

[0028] Figure 1 A flow chart of a safety control method of a motor controller according to one or more embodiments of the present application is shown.

[0029] like Figure 1 As shown in , in step S101, the back electromotive force value and the bus voltage value of the motor are obtained and the back electromotive force value of the motor is compared with the bus voltage value.

[0030] Optionally, in step S101, the flux and speed of the motor rotor at the current temperature can be obtained, and the back electromotive force value of the motor can be obtained based on the product of the flux of the motor rotor and the speed. Exemplarily, the correspondence between the rotor temperature and the flux value can be calibrated experimentally, for example, the relationship between the short-circuit current amplitude, the speed and the permanent magnet flux value can be obtained by performing a steady-state short-circuit test on the motor at different speeds at different rotor temperatures. Optionally, the bus voltage value can be obtained by a bus voltage detection device in a voltage drive system. For example, the bus voltage detection device can be implemented as a voltage transformer installed on the bus. Exemplarily, the motor can include a DC motor, an asynchronous motor, a permanent magnet synchronous motor, a switched reluctance motor, and the like.

[0031] In one embodiment, before obtaining the back electromotive force value and bus voltage value of the motor, the real-time state of the motor controller is monitored. When the real-time state is determined to be a drive fault state, a drive fault signal is generated based on the drive fault state, and in response to the drive fault signal, the motor controller is triggered to control the motor into a safety protection state. In other words, when a vehicle fails and affects driving safety, a safety control method for a motor controller according to one or more embodiments of the present application is executed. Exemplarily, vehicle failures may include loss of control of the entire vehicle, power battery failure, abnormal motor speed during vehicle driving, power device failure in the inverter of the motor controller, and the like.

[0032] In step S103 , in response to the back electromotive force value of the motor being smaller than the bus voltage value, the first safety control strategy is executed.

[0033] Optionally, the first safety control strategy may include an SPO operation, which is used to control each power device in the upper bridge arm and the lower bridge arm of the inverter of the motor controller to be in a disconnected state. It should be noted that in the SPO operation, by controlling each power device in the upper bridge arm and the lower bridge arm of the inverter to be in a disconnected state, the motor is open-circuited, and the motor is stopped by mechanical damping. Exemplarily, the power device may include a power transistor (GTR), a gate turn-off thyristor (GTO), a field effect transistor (MOSFET), an insulated gate bipolar transistor (IGBT), an integrated gate-commutated thyristor (IGCT), a symmetrical gate-commutated thyristor (SGCT), etc.

[0034] In step S105 , in response to the motor back electromotive force value being greater than or equal to the bus voltage value, the second safety control strategy is executed, wherein during the execution of the second safety control strategy, the first safety control strategy is selectively switched based on the comparison between the motor current value and the current threshold.

[0035] Optionally, the second safety control strategy includes a switching control operation between an ASC operation and an SPO operation, and the ASC operation can be used to control the power device of one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state, and the power device of the other of the upper bridge arm and the lower bridge arm to be in the off state. In the ASC operation, by controlling the power device of one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state and controlling the power device of the other bridge arm to be in the off state, it can be ensured that the back electromotive force acts on the three-phase winding inside the motor, thereby realizing the separation of the motor and the controller, without affecting the safety of energy storage elements such as batteries and capacitors on the DC side.

[0036] Compared with directly executing the ASC operation, the switching control operation between the ASC operation and the SPO operation can effectively reduce the torque shock and can better suppress the phase current when the back electromotive force value is greater than or equal to the bus voltage value (ie, when the vehicle is traveling at high speed).

[0037] In one embodiment, the switching control operation between the ASC operation and the SPO operation may include controlling the power device of one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to remain in an off state, and controlling the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in an on state with a variable duty cycle. It should be noted that the variable duty cycle is used to indicate the proportion of the ASC operation in the switching control operation between the ASC operation and the SPO operation.

[0038] In one embodiment, the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller can be controlled to be in the on state with a variable duty cycle that gradually increases from a preset initial duty cycle to a maximum duty cycle, so that when the variable duty cycle increases to the maximum duty cycle, the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to remain in the on state, thereby entering the ASC operation from the switching control operation between the ASC operation and the SPO operation. Exemplarily, the preset initial duty cycle can be set in the range of 0%-40%, and the maximum duty cycle can be set to 100%, thereby achieving a smooth switch to the ASC operation. Exemplarily, the duration of the switching control operation between the ASC operation and the SPO operation can be set between 10 milliseconds and 20 milliseconds, thereby achieving a smooth switch to the ASC operation and ensuring that the vehicle user has no obvious perception, thereby achieving the comfort of vehicle driving.

[0039] In one embodiment, during the execution of the second safety control strategy, the current value of the motor can be collected in real time using a current sensor and the current value of the motor can be compared with the current threshold. When the current value of the motor is greater than the current threshold, the first safety control strategy can be switched; when the current value of the motor is less than or equal to the current threshold, the second safety control strategy can be continuously executed. In one embodiment, during the execution of the second safety control strategy, each of the three-phase currents of the motor collected can be compared with the current threshold. When one or more current values ​​of the three-phase currents of the motor are greater than the current threshold, the first safety control strategy can be switched; when each current value of the three-phase currents of the motor is less than or equal to the current threshold, the second safety control strategy can be continuously executed. In one embodiment, the current threshold can be set according to the steady-state current value of the current ASC, so as to effectively protect the motor and prevent the erroneous switching of the safety control strategy. Exemplarily, when the transient current value of the ASC is 1.1 times the steady-state current value of the ASC, the current threshold can be set to about 1.3 times the steady-state current value of the ASC.

[0040] During the execution of the second safety control strategy, the motor current is monitored by comparing the motor current value with the current threshold, so as to avoid directly entering the switching control operation between the ASC operation and the SPO operation when the actual back electromotive force is less than the bus voltage (for example, due to the inaccurate back electromotive force value obtained in step S101). At this time, the switching control operation cannot effectively suppress the inrush current on the stator winding, which may cause the motor to overheat and increase the risk of inverter damage and magnetic steel demagnetization on the rotor.

[0041] In one or more embodiments of the present application, the switching point of the safety control strategy is determined in real time through the back electromotive force value, the bus voltage value, and the current value of the motor, and the safety state of the motor controller is reasonably controlled and adjusted to minimize the generation of unexpected torque, reduce the risk of motor overheating and rotor magnet demagnetization caused by transient current, ensure the service life of the motor, and improve the safety and controllability of the vehicle.

[0042] According to one aspect of the present application, the safety control method for a motor controller proposed can selectively execute a first safety control strategy and a second safety control strategy by comparing the back electromotive force value of the motor with the bus voltage value, and selectively switch to the first safety control strategy based on a comparison between the current value of the motor and the current threshold during the execution of the second safety control strategy. This can achieve safe control of the motor within the full speed range, reduce the risk of motor overheating and rotor magnet demagnetization caused by transient current caused by ASC, and improve the safety performance of the motor controller.

[0043] Figure 2 A flow chart of a safety control method of a motor controller according to one or more embodiments of the present application is shown.

[0044] like Figure 2 As shown in FIG. 1 , in step S201 , a safety protection state is entered according to motor fault information.

[0045] In step S203, it is determined whether the back electromotive force value of the motor is less than the bus voltage value. If it is determined that the back electromotive force value of the motor is less than the bus voltage value, the process proceeds to step S205; otherwise, the process proceeds to step S207.

[0046] In step S205, the first security control strategy is executed.

[0047] Optionally, the first safety control strategy may include an SPO operation for controlling each power device in an upper bridge arm and a lower bridge arm in an inverter of the motor controller to be in a disconnected state.

[0048] In step S207, the second safety control strategy is executed, and during the execution of the second safety control strategy, it is determined whether the current value of the motor is greater than the current threshold. If it is determined that the current value of the motor is greater than the current threshold, the process switches to step S205 to execute the first safety control strategy; otherwise, the process proceeds to step S209.

[0049] Optionally, the second safety control strategy includes a switching control operation between an ASC operation and an SPO operation, wherein the ASC operation can be used to control the power devices of one of the upper and lower bridge arms in the inverter of the motor controller to be in an on state, and to control the power devices of the other of the upper and lower bridge arms to be in an off state.

[0050] In step S209, the second safety control strategy is continuously executed to switch to the ASC operation.

[0051] Optionally, the power device of one of the upper and lower bridge arms in the inverter of the motor controller can be controlled to remain in the disconnected state, and the power device of the other of the upper and lower bridge arms in the inverter of the motor controller can be controlled to be in the on state with a variable duty cycle. It should be noted that the variable duty cycle is used to indicate the proportion of the ASC operation in the switching control operation between the ASC operation and the SPO operation. In one embodiment, the power device of the other of the upper and lower bridge arms in the inverter of the motor controller can be controlled to be in the on state with a variable duty cycle that gradually increases from a preset initial duty cycle to a maximum duty cycle, so that when the variable duty cycle increases to the maximum duty cycle, the power device of the other of the upper and lower bridge arms in the inverter of the motor controller is controlled to remain in the on state, thereby entering the ASC operation from the switching control operation between the ASC operation and the SPO operation.

[0052] Figure 3A schematic diagram showing the inverter of a typical motor controller.

[0053] like Figure 3 As shown in , the inverter 300 includes an upper bridge arm and a lower bridge arm, the upper bridge arm includes power devices S1, S3 and S5, and the lower bridge arm includes power devices S2, S4 and S6, and the power devices of the upper bridge arm and the lower bridge arm are respectively connected to reverse parallel diodes. The upper bridge arm of the inverter 300 is connected to the positive electrode of the battery B, and the lower bridge arm of the inverter 300 is connected to the negative electrode of the battery B. The AC side (i.e. Figure 3 The right side of the inverter 300 is connected to the motor M. By controlling the on and off of each power device in the upper bridge arm and the lower bridge arm, the direction and magnitude of the current can be controlled, thereby controlling the speed and torque of the motor M. A bus capacitor C is connected in parallel to the input end of the inverter 300.

[0054] As described above, the SPO operation can be used to control each power device in the upper bridge arm and the lower bridge arm of the inverter of the motor controller to be in the disconnected state. Figure 3 As shown, the SPO operation can be used to Figure 3 The power devices S1, S3 and S5 in the upper bridge arm and the power devices S2, S4 and S6 in the lower bridge arm shown in are controlled to be in the off state. The ASC operation is used to control the power devices in one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller to be in the on state, and to control the power devices in the other of the upper bridge arm and the lower bridge arm to be in the off state. For example, referring to Figure 3 As shown, the ASC operation can be used to Figure 3 The power devices S1, S3 and S5 in the upper arm shown in FIG. 1 are controlled to be in the on state and the power devices S2, S4 and S6 in the lower arm are controlled to be in the off state, or the ASC operation can be used to Figure 3 The power devices S1 , S3 and S5 in the upper arm shown in FIG. 1 are controlled to be in an off state, and the power devices S2 , S4 and S6 in the lower arm are controlled to be in an on state.

[0055] It should be noted that Figure 3 The topology of the inverter of the motor controller is shown only as an example for explaining the SPO operation and the ASC operation. Without departing from the spirit and scope of the present application, the inverter of the motor controller may also be implemented as other topologies.

[0056] Figure 4 A schematic diagram showing a variable duty cycle for performing a switching control operation between an active short-circuit operation and a safety pulse shut-off operation according to an embodiment of the present application is shown.

[0057] like Figure 4As shown in the figure, the horizontal axis represents time, and the vertical axis represents the variable duty cycle for performing the switching control operation between the active short-circuit operation and the safety pulse off operation, wherein the time period between t1 and t2 shows the time for performing the switching control operation between the active short-circuit operation and the safety pulse off operation, and D1, D2, D3, D4, and D5 respectively represent the variable duty cycles of the switching control operation during multiple sub-periods between t1 and t2.

[0058] During the period from t1 to t2, the power device of one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller can be controlled to remain in the disconnected state, and the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller can be controlled to be in the on state with a variable duty cycle D1, D2, D3, D4, and D5.

[0059] Exemplarily, the variable duty cycles D1, D2, D3, D4, and D5 can be set to initial duty cycles of 20%, 40%, 60%, 80%, and a maximum duty cycle of 100%, respectively, and after t2, the ASC operation is completely switched. Exemplarily, the period between t1 and t2 can be set between 10 milliseconds and 20 milliseconds, so as to achieve a smooth switch to the ASC operation and ensure that the vehicle user has no obvious perception, thereby achieving the comfort of vehicle driving. Exemplarily, the preset initial duty cycle D1 can be set within the range of 0%-40%.

[0060] Figure 5 A schematic block diagram of a safety control system of a motor controller according to one or more embodiments of the present application is shown.

[0061] like Figure 5 As shown in FIG. 5 , a safety control system 500 for a motor controller includes a memory 510, a processor 520, and a computer program 530 stored in the memory 510 and executable on the processor 520. The processor 520 executes the computer program 530 to implement a safety control method for a motor controller according to one aspect of the present application.

[0062] In addition, the present application may also be implemented as a computer storage medium, in which a program for causing a computer to execute a safety control method for a motor controller according to one aspect of the present application is stored.

[0063] Here, as computer storage media, various forms of computer storage media can be used, such as disks (for example, magnetic disks, optical disks, etc.), cards (for example, memory cards, optical cards, etc.), semiconductor memories (for example, ROMs, non-volatile memories, etc.), and tapes (for example, magnetic tapes, cassettes, etc.).

[0064] In the applicable situation, hardware, software or a combination of hardware and software can be used to realize the various embodiments provided by the application. Moreover, in the applicable situation, without departing from the scope of the application, the various hardware components and / or software components set forth herein can be combined into a composite component comprising software, hardware and / or both. In the applicable situation, without departing from the scope of the application, the various hardware components and / or software components set forth herein can be divided into subcomponents comprising software, hardware or both. In addition, in the applicable situation, it is contemplated that the software component can be implemented as a hardware component, and vice versa.

[0065] Software (such as program code and / or data) according to the present application can be stored on one or more computer storage media. It is also contemplated that the software identified herein can be implemented using one or more general or special-purpose computers and / or computer systems, networked and / or otherwise. Where applicable, the order of the various steps described herein can be changed, combined into composite steps, and / or divided into sub-steps to provide the features described herein.

[0066] The embodiments and examples set forth herein are provided to best illustrate embodiments according to the present application and its specific applications, and thereby enable those skilled in the art to implement and use the present application. However, those skilled in the art will appreciate that the above description and examples are provided only for ease of illustration and example. The description set forth is not intended to cover all aspects of the present application or to limit the present application to the precise form disclosed.

Claims

1. A safety control method for a motor controller, It is characterized in that The method comprises the following steps: Acquire a back electromotive force value and a bus voltage value of the motor and compare the back electromotive force value of the motor with the bus voltage value; executing a first safety control strategy in response to a back electromotive force value of the motor being less than a bus voltage value; as well as executing a second safety control strategy in response to a back electromotive force value of the motor being greater than or equal to the bus voltage value; During the execution of the second safety control strategy, the first safety control strategy is selectively switched based on a comparison between the current value of the motor and a current threshold.

2. The method according to claim 1, wherein the back electromotive force value of the motor is obtained include: Get the magnetic flux and speed of the motor rotor at the current temperature; as well as The back electromotive force value of the motor is obtained based on the product of the magnetic flux and the rotation speed of the motor rotor. 3 . The method according to claim 1 , wherein the first safety control strategy comprises a safety pulse off operation, and the second safety control strategy comprises a switching control operation between an active short circuit operation and a safety pulse off operation.

4. The method of claim 3, wherein the safety pulse shutoff operation include: Each power device in the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to be in a disconnected state.

5. The method of claim 3, wherein the active short circuit operation include: A power device of one of an upper bridge arm and a lower bridge arm in an inverter of a motor controller is controlled to be in an on state, and a power device of the other of the upper bridge arm and the lower bridge arm is controlled to be in an off state.

6. The method of claim 3, wherein the switching control operation between the active short circuit operation and the safety pulse off operation include: Controlling a power device in one of an upper bridge arm and a lower bridge arm in an inverter of a motor controller to remain in an off state; as well as A power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to be in a conducting state at a variable duty cycle.

7. The method according to claim 6, wherein the power device of the other of the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to be in a conducting state with a variable duty cycle. include: The power device of the other one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to be in the on state with a variable duty cycle that gradually increases from a preset initial duty cycle to a maximum duty cycle, so that when the variable duty cycle increases to the maximum duty cycle, the power device of the other one of the upper bridge arm and the lower bridge arm in the inverter of the motor controller is controlled to remain in the on state.

8. The method of claim 1, wherein during execution of the second safety control strategy, the first safety control strategy is selectively switched to based on a comparison between the current value of the motor and a current threshold. include: In response to the current value of the motor being greater than the current threshold, switching to the first safety control strategy; as well as The second safety control strategy is executed in response to the current value of the motor being less than or equal to the current threshold.

9. The method according to claim 8, wherein during the execution of the second safety control strategy, selectively switching to the first safety control strategy based on the comparison between the current value of the motor and the current threshold value is further performed. include: switching to the first safety control strategy in response to one or more current values ​​of the three-phase currents of the motor being greater than the current threshold; as well as The second safety control strategy is executed in response to each current value of the three-phase current of the motor being less than or equal to the current threshold.

10. A safety control system for a motor controller, It is characterized in that The system comprises: Memory; a processor coupled to the memory; and A computer program stored on the memory and running on the processor, wherein the running of the computer program results in the execution of the safety control method of the motor controller according to any one of claims 1 to 9.

11. A computer storage medium, It is characterized in that The computer storage medium includes instructions, which, when executed, execute the safety control method for the motor controller according to any one of claims 1 to 9.

Images