Redundant power supply system and control method

Abstract

The invention discloses a redundant power supply system and a control method in the field of vehicle electrical systems, and aims to solve the problem of power shortage of a safety load after a platform power supply system breaks down. The system comprises a main storage battery which is communicated with a safety load through a first power supply loop; the backup storage battery is communicated with the safety load through a third power supply loop; the DCDC converter is respectively communicated with the first power supply loop and the third power supply loop through the second power supply loop; the control unit is used for acquiring the operation state of each component and each power supply loop; the isolating switch circuit is used for respectively controlling the on-off of each power supply loop; the triple power supplies cooperate with each other and are combined with the design of a special power supply loop, so that continuous power supply of a safety load (such as a braking / steering ECU) can still be ensured when any single power supply or single loop fails, and the hidden danger of power shortage of the safety load after the failure of the traditional scheme is thoroughly solved; the isolation switch circuit reduces the influence of power failure of other parts on the safety load.

Description

Technical Field

[0001] The present invention relates to a redundant power supply system and a control method, and belongs to the field of vehicle electrical systems. Background Art

[0002] The field of vehicle electrical systems has developed rapidly in recent years. The power supply systems previously developed based on pure fuel platforms and hybrid platforms are beginning to be unable to meet the power needs of pure electric platform vehicles.

[0003] Pure electric platforms typically have two power sources: a battery and a DCDC (Direct Current to Direct Current) converter. The battery's power is simply converted through the power supply circuit before it can power various safety and non-safety loads. The DCDC converter, on the other hand, converts the incoming high-voltage electricity into a low-voltage state before it can be used to power various safety and non-safety loads through the power supply circuit. Upon detecting a fault, the pure electric platform's power supply system disconnects the circuit, affecting other loads on the platform. Sometimes, a power outage due to a fault causes safe and non-safety loads to occupy the same power source, effectively interfering with the safety and non-safety loads. Sometimes, even a fault in an unsafe load can cause a power outage, which can lead to a power shortage for the safety loads, shortening their operating time or even causing a shutdown.

[0004] Therefore, the existing platform power supply system has the problem of power shortage of safety loads after a fault occurs. Summary of the Invention

[0005] The purpose of this application is to overcome the deficiencies in the prior art and to provide a redundant power supply system that has the potential or serves as an execution platform to supply power to a safe load after a power supply system fails, and a redundant power supply control method that satisfies the requirement of supplying power to a safe load after a power supply system fails.

[0006] To achieve the above objectives, this application is implemented using the following technical solutions: In a first aspect, the present application provides a redundant power supply system, comprising: The main battery is connected to the safety load through the first power supply circuit; A backup battery connected to the safety load via a third power supply circuit; a DCDC converter, connected to the first power supply circuit and the third power supply circuit respectively through a second power supply circuit; A control unit is used to obtain the operating status of each component and each power supply circuit; An isolating switch circuit is connected to the control unit signal, and the isolating switch circuit is used to control the on-off between the second power supply circuit and the first power supply circuit and the third power supply circuit respectively.

[0007] In some embodiments of the first aspect of the present application, the isolation switch circuit includes a first isolation switch circuit for controlling the connection and disconnection between the second power supply circuit and the first power supply circuit and a second isolation switch circuit for controlling the connection and disconnection between the second power supply circuit and the third power supply circuit.

[0008] In some embodiments of the first aspect of the present application, an intelligent power switch group is further included, wherein the intelligent power switch group includes a second electronic fuse for controlling the on / off connection between the safety load and the first power supply circuit and a third electronic fuse for controlling the on / off connection between the safety load and the third power supply circuit.

[0009] In some embodiments of the first aspect of the present application, the isolation switch circuit includes a device with an overcurrent hard-off protection function.

[0010] In a second aspect, the present application further provides a redundant power supply method, which is executed by a control unit and includes: Obtain the operating status of the main battery, DCDC converter, backup battery and each power supply circuit; In response to the occurrence of a set fault type, the isolation switch circuit is controlled according to the fault source to perform an isolation and disconnection operation corresponding to the source.

[0011] In some embodiments of the second aspect of the present application, in response to the occurrence of a set fault type, controlling the isolation switch circuit to perform an isolation and disconnection operation corresponding to the source of the fault includes at least one of the following: In response to a set fault type occurring in the DCDC converter, controlling the first isolation switch circuit and the second isolation switch circuit to perform isolation and disconnection operations; In response to a set fault type occurring in the main battery, controlling the first isolating switch circuit to perform an isolating and disconnecting operation; In response to a set fault type occurring in the backup battery, controlling the second isolation switch circuit to perform an isolation and disconnection operation; In response to a set fault type occurring in the second power supply circuit, controlling the first isolation switch circuit and the second isolation switch circuit to perform isolation and disconnection operations; In response to a set fault type occurring in the first power supply circuit, controlling the first isolation switch circuit to perform an isolation and disconnection operation; In response to a set fault type occurring in the third power supply circuit, the second isolation switch circuit is controlled to perform an isolation and disconnection operation.

[0012] In some embodiments of the second aspect of the present application, the set fault type includes overvoltage, undervoltage and overcurrent.

[0013] In some embodiments of the second aspect of the present application, in response to the occurrence of a set fault type, controlling the isolation switch circuit to perform an isolation disconnection operation corresponding to the source according to the fault source further includes: Obtaining the operating status of the safety load; In response to a set fault type occurring in the safety load, the second electronic fuse and the third electronic fuse perform a circuit protection operation.

[0014] In a third aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method for controlling a redundant power supply system as described in any one of the embodiments of the first aspect.

[0015] In a fourth aspect, the present application also provides a computer program product, comprising a computer program / instruction, characterized in that when the computer program / instruction is executed by a processor, the steps of the control method of the redundant power supply system described in any embodiment of the first aspect are implemented.

[0016] Compared with the prior art, the present invention has the following beneficial effects: The redundant power supply system and control method provided in this application utilize triple power synergy—a main battery, a backup battery, and a DC-DC converter—combined with a dedicated power supply circuit design to ensure continuous power supply to safety loads (such as the brake / steering ECU) even when any single power source or circuit fails. This completely eliminates the potential safety load power shortage after a failure in traditional solutions. The isolation switch circuit reduces the impact of power outages on safety loads caused by failures in other components. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the present application or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0018] Figure 1 is a schematic structural diagram of the redundant power supply system provided in this embodiment; Figure 2 is a flowchart of the steps of the control method of the redundant power supply system provided by this embodiment; In the picture: 1. Main battery; 2. DCDC converter; 3. Intelligent power distribution module; 3.1. MCU; 4. Non-safety load; 5. Safety load; 6. Backup battery; 7. Isolation switch circuit; 7.1, first isolating switch; 7.2, second isolating switch; 8.1, first intelligent power switch; 8.2, second electronic fuse; 8.3, third electronic fuse; 9.1, first power supply circuit; 9.2, second power supply circuit; 9.3, third power supply circuit. DETAILED DESCRIPTION

[0019] It should be noted that: in some embodiments, "hard disconnection" means that the isolation device directly cuts off the circuit without being controlled by the control unit, which can achieve a microsecond response and meet the "functional safety rapid isolation" requirements; "soft disconnection" means that the isolation device is controlled by the control unit and then disconnects the circuit, which can achieve a millisecond response.

[0020] The technical solution of the present invention is described in detail below through the accompanying drawings and specific embodiments. It should be understood that the embodiments of the present application and the specific features in the embodiments are detailed descriptions of the technical solution of the present application, rather than limitations on the technical solution of the present application. Unless there is a conflict, the embodiments of the present application and the technical features in the embodiments can be combined with each other.

[0021] The term "and / or" in this document simply describes a relationship between related objects, indicating that three possible relationships exist. For example, "A and / or B" can mean: A exists alone, A and B exist simultaneously, or B exists alone. Additionally, the character " / " in this document generally indicates an "or" relationship between the related objects. Example 1

[0022] This embodiment provides a redundant power supply system to provide a platform with the potential to ensure power supply to safe loads after a power supply system failure. When a power supply system failure occurs, executing the control method on the redundant power supply system provided in this embodiment can ensure power supply to safe loads.

[0023] refer to Figure 1 , the redundant power supply system provided in this embodiment includes, The main battery 1 is connected to the safety load 5 through the first power supply circuit 9.1; The backup battery 6 is connected to the safety load 5 through the third power supply circuit 9.3; The DCDC converter 2 is connected to the first power supply circuit 9.1 and the third power supply circuit 9.3 through the second power supply circuit 9.2; A control unit is used to obtain the operating status of each component and each power supply circuit; The isolating switch circuit 7 is connected to the control unit signal, and is used to control the on-off between the second power supply circuit 9.2 and the first power supply circuit 9.1 and the third power supply circuit 9.3 respectively.

[0024] In this embodiment, the DCDC converter 2 supplies power to the safety load 5 via two power supply circuits. Even if the main battery 1 or related circuits fail, the DCDC converter 2 can still supply power to the safety load 5 via the third power supply circuit 9.3. Similarly, if the third power supply circuit 9.3 is unavailable, the safety load 5 can still be supplied with power via the first power supply circuit 9.1. At the same time, the backup battery 6 can also supply power to the safety load 5, reducing the probability of power shortage of the safety load 5 in the event of a power platform failure. At the same time, the safety load 5 has at least the second power supply circuit 9.2 and the third power supply circuit 9.3 to supply power to it, reducing the degree to which non-safety loads 4 occupy power resources.

[0025] By implementing a reasonable control method in this embodiment, it is possible to effectively ensure the power supply to the safety load 5 after a power supply system failure occurs. Example 2

[0026] Figure 2 This is a flow chart of a control method for a redundant power supply system in the first embodiment of the present invention. This flow chart only shows the logical sequence of the method described in this embodiment. In other possible embodiments of the present invention, different methods may be used without conflict. Figure 2 The steps shown or described are accomplished in the order shown.

[0027] The control method of the redundant power supply system provided in this embodiment can be applied to a terminal, such as Figure 1 The MCU3.1 is used as the control unit to execute the control method. Figure 2 , the method of this implementation specifically includes the following steps: Obtain the operating status of the main battery 1, DCDC converter 2, backup battery 6 and each power supply circuit; In response to the occurrence of a set fault type, the isolation switch circuit 7 is controlled according to the fault source to perform an isolation and disconnection operation corresponding to the source.

[0028] The control method of the redundant power supply system provided in this embodiment is not only based on the operating status of each component; it is also based on monitoring and identifying the operating status of each power supply circuit to achieve precise control of the corresponding isolation and disconnection operations, thereby reducing the impact on the power supply of the safety load 5 when the circuit is disconnected to handle the fault.

[0029] The control method of the redundant power supply system provided in this embodiment can be applied to the redundant power supply system provided in the first embodiment, and has corresponding functional modules and beneficial effects of the execution method, which will not be described in detail here. Example 3

[0030] This embodiment also provides a redundant power supply system and a control method for a redundant power supply system. This embodiment is optimized based on Example 1 and Example 2 to improve the technical effect and refine the technical solution. For details not fully described in this embodiment, please refer to Example 1 or Example 2.

[0031] As one example, refer to Figure 1 The isolating switch circuit 7 includes a first isolating switch circuit 7.1 for controlling the on-off between the second power supply circuit 9.2 and the first power supply circuit 9.1 and a second isolating switch circuit 7.2 for controlling the on-off between the second power supply circuit 9.2 and the third power supply circuit 9.3.

[0032] The first isolating switch circuit 7.1 and the second power supply circuit 9.2 can be controlled by the control unit to perform isolation and disconnection operations.

[0033] The control method of the second embodiment can be improved accordingly.

[0034] As one embodiment, the "in response to the occurrence of a set fault type, controlling the isolation switch circuit 7 to perform an isolation and disconnection operation corresponding to the source of the fault" mentioned in the first embodiment includes at least one of the following: A. In response to a predetermined fault type occurring in the DCDC converter 2, the first isolating switch circuit 7.1 and the second isolating switch circuit 7.2 are controlled to perform isolation and disconnection operations. The main battery 1 and the redundant backup battery 6 supply power to the safety load 5 via the first power supply circuit 9.1 and the third power supply circuit 9.3, respectively. The main battery 1 has sufficient power, and the backup battery 6 provides a supplementary power to prevent the safety load 5 from running out of power.

[0035] B. In response to a set fault type occurring in the main battery 1, the first isolating switch circuit 7.1 is controlled to perform an isolation and disconnection operation; power is supplied to the safety load 5 via the second power supply circuit 9.2, the third power supply circuit 9.3, and the third power supply circuit 9.3 via the DCDC converter 2 and the backup battery 6. The DCDC converter 2 converts high-voltage power from other sources into low-voltage power, which is then used to supply power to the safety load 5, thereby preventing power shortages in the safety load 5.

[0036] C. In response to a set fault type occurring in the backup battery 6, the second isolating switch circuit 7.2 is controlled to perform an isolation and disconnection operation; the backup battery 6 itself is not the power supply source for the safety load 5, so the second isolating switch circuit 7.2 can be directly controlled to perform an isolation and disconnection operation to isolate the backup battery 6.

[0037] D. In response to a set fault type occurring in the second power supply circuit 9.2, the first isolating switch circuit 7.1 and the second isolating switch circuit 7.2 are controlled to perform an isolation and disconnection operation. A fault occurs in the second power supply circuit 9.2, requiring it to be isolated from the system and the platform. Therefore, the first isolating switch circuit 7.1 and the second isolating switch circuit 7.2 are controlled to perform an isolation and disconnection operation. The main battery 1 has sufficient power and the backup battery 6 is used as a supplement to prevent power shortage of the safety load 5.

[0038] E. In response to a set fault type occurring in the first power supply circuit 9.1, the first isolating switch circuit 7.1 is controlled to perform an isolation and disconnection operation. Because the safety load 5 has a dedicated power supply circuit isolated from the non-safety load 4, the safety load 5 is powered by the second power supply circuit 9.2-third power supply circuit 9.3 and the third power supply circuit 9.3 through the DCDC converter 2 and the backup battery 6. The DCDC converter 2 converts high-voltage power from other sources into low-voltage power, which is then used to power the safety load 5, thereby preventing power shortages in the safety load 5.

[0039] F. In response to a predetermined fault type occurring in the third power supply circuit 9.3, the second isolating switch circuit 7.2 is controlled to perform an isolation and disconnection operation. Since the backup battery 6 itself is not the power supply source for the safety load 5, the second isolating switch circuit 7.2 can be directly controlled to perform an isolation and disconnection operation to isolate the third power supply circuit 9.3. Simultaneously, the DCDC converter 2 can supply power to the safety load 5 via another circuit, namely, the first power supply circuit 9.1.

[0040] As one embodiment, the set fault types include overvoltage, undervoltage and overcurrent. These faults may be referred to as secondary faults and may be handled by soft disconnection of the affected loads.

[0041] As one example, refer to Figure 1 The control unit can use a pre-programmed MCU 3.1, and the MCU 3.1, the isolation switch circuit 7, each power supply circuit and the power switch (electronic fuse, high-side driver HSD, etc.) on the circuit are integrated into the intelligent power distribution module 3.

[0042] As one embodiment, the redundant power supply system provided in this embodiment further includes an intelligent power switch group, which includes a second electronic fuse 8.2 for controlling the connection between the safety load 5 and the first power supply circuit 9.1, and a third electronic fuse 8.3 for controlling the connection between the safety load 5 and the third power supply circuit 9.3. The electronic fuses, based on MOSFET shutdown control, provide overcurrent and short-circuit protection, and feature software-configurable current thresholds and self-recovery. They can serve as a supplementary control for the isolation switch circuit 7.

[0043] As one embodiment, the isolating switch circuit 7 includes a device with an overcurrent hard disconnection protection function, that is, Figure 1 The first and second isolating switches 7.1 and 7.2 shown in the figure are designed to directly disconnect when an overcurrent exceeds a certain limit or a short circuit occurs, without requiring a control unit to make a decision. As one embodiment, a device with overcurrent hard-disconnect protection can be constructed using a sampling resistor, a pre-driver, and a MOSFET (metal-oxide-semiconductor transistor). Other options, such as a latching relay, are also possible. It is worth noting that overvoltage, undervoltage, and overcurrent below a certain threshold can be treated as secondary faults requiring control unit software processing, while short circuits are treated as primary faults requiring immediate disconnection of the isolating switch circuit 7 without control unit software processing.

[0044] As one example, refer to Figure 1 The service objects of the intelligent power distribution module 3 also include some non-safety loads 4. As one embodiment, the non-safety loads 4 are connected to the first power supply circuit 9.1 in parallel with the safety loads 5. It is based on the parallel connection method that the non-safety loads 4 are isolated from the safety loads 5, and the power supply impact on the safety loads 5 is reduced when the non-safety loads 4 fail. As one embodiment, the intelligent power switch group also includes multiple first intelligent power switches 8.1. The first intelligent power switches correspond one-to-one to the non-safety loads 4 and are used to control the connection between the non-safety loads 4 and the first power supply circuit 9.1. In addition to using electronic fuses, the first intelligent power switches 8.1 can also use high-side drivers. The high-side drivers are used for load on / off control and can be controlled by software signals. They support microsecond-level disconnection and can also detect open circuits / short circuits / overtemperatures.

[0045] Based on the above, in the second embodiment, “the step of controlling the isolation switch circuit 7 to perform an isolation and disconnection operation corresponding to the fault source in response to the occurrence of a set fault type” further includes at least one of the following: Obtaining the operating status of the safety load 5; G. In response to a set fault type occurring in the safety load 5, the second electronic fuse 8.2 and the third electronic fuse 8.3 perform a circuit protection operation to prevent the safety load 5 from being further damaged and extend the service life of the safety load 5.

[0046] As one embodiment, the safety load 5 includes an intelligent driving circuit component.

[0047] The redundant power supply system and control method provided in this embodiment isolates the safe load 5 from the unsafe load 4. While traditional solutions often require high costs for independent protection control units, this embodiment mitigates this issue and offers a lower cost. Traditional solutions can only disconnect abnormal loads by blowing fuses, which lacks self-recovery and requires fuse replacement. This embodiment, by analyzing different situations and implementing different isolation measures, allows for later recovery. It also significantly reduces cost and weight, eases system design complexity, increases isolation range, and reduces maintenance. Example 4

[0048] This embodiment provides a computer-readable storage medium having a computer program stored thereon. When the program is executed by a processor, the steps of the control method of the redundant power supply system provided in the first or second embodiment are implemented.

[0049] The computer-readable storage medium provided in this embodiment has the same technical effects as those in Embodiment 1 or 2, and will not be described in detail here. Example 5

[0050] This embodiment provides a computer program product having a computer program stored thereon, which, when executed by a processor, implements the steps of the control method for a redundant power supply system provided in Embodiment 1 or Embodiment 2. The computer program product provided in this embodiment can be transmitted, distributed, and downloaded in the form of a signal via the Internet.

[0051] The computer program product provided in this embodiment has the same technical effects as those in Embodiment 1 or 2, and will not be described in detail here.

[0052] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0053] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0054] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0055] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0056] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, features defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the present invention, unless otherwise specified, "multiple" means two or more.

[0057] In the description of the present invention, it should be noted that, unless otherwise expressly specified or limited, the terms "mounted," "connected," and "connected" should be understood in a broad sense. For example, they may refer to fixed connections, detachable connections, or integral connections; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; and internal communication between two components. Those skilled in the art will understand the specific meanings of the above terms in the present invention based on specific circumstances.

[0058] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the technical principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A redundant power supply system, characterized in that: include, The main battery (1) is connected to the safety load (5) via the first power supply circuit (9.1); A backup battery (6) is connected to the safety load (5) via a third power supply circuit (9.3); A DCDC converter (2) is connected to the first power supply circuit (9.1) and the third power supply circuit (9.3) respectively via a second power supply circuit (9.2); A control unit is used to obtain the operating status of each component and each power supply circuit; An isolating switch circuit (7) is connected to the control unit signal, and the isolating switch circuit (7) is used to control the on / off between the second power supply circuit (9.2) and the first power supply circuit (9.1) and the third power supply circuit (9.3).

2. The redundant power supply system according to claim 1, characterized in that: The isolating switch circuit (7) comprises a first isolating switch circuit (7.1) for controlling the on / off between the second power supply circuit (9.2) and the first power supply circuit (9.1), and a second isolating switch circuit (7.2) for controlling the on / off between the second power supply circuit (9.2) and the third power supply circuit (9.3).

3. The redundant power supply system according to claim 2, characterized in that: The device also includes an intelligent power switch group, which includes a second electronic fuse (8.2) for controlling the on / off switching between the safety load (5) and the first power supply circuit (9.1) and a third electronic fuse (8.3) for controlling the on / off switching between the safety load (5) and the third power supply circuit (9.3).

4. The redundant power supply system according to any one of claims 1 to 3, characterized in that: The isolating switch circuit (7) includes a device with an overcurrent hard disconnection protection function.

5. A redundant power supply method, executed by a control unit, characterized in that: include, Obtaining the operating status of the main battery (1), the DCDC converter (2), the backup battery (6) and each power supply circuit; In response to the occurrence of a set fault type, the isolation switch circuit (7) is controlled according to the fault source to perform an isolation disconnection operation corresponding to the source.

6. The redundant power supply method according to claim 5, wherein: In response to the occurrence of a set fault type, the isolating switch circuit (7) is controlled according to the fault source to perform an isolation disconnection operation corresponding to the source, including at least one of the following: In response to a set fault type occurring in the DCDC converter (2), controlling the first isolating switch circuit (7.1) and the second isolating switch circuit (7.2) to perform an isolation and disconnection operation; In response to a set fault type occurring in the main battery (1), controlling the first isolating switch circuit (7.1) to perform an isolation and disconnection operation; In response to a set fault type occurring in the backup battery (6), controlling the second isolating switch circuit (7.2) to perform an isolation disconnection operation; In response to a set fault type occurring in the second power supply circuit (9.2), controlling the first isolating switch circuit (7.1) and the second isolating switch circuit (7.2) to perform an isolation and disconnection operation; In response to a set fault type occurring in the first power supply circuit (9.1), controlling the first isolating switch circuit (7.1) to perform an isolation and disconnection operation; In response to a set fault type occurring in the third power supply circuit (9.3), the second isolating switch circuit (7.2) is controlled to perform an isolation and disconnection operation.

7. The redundant power supply method according to claim 6, wherein: The set fault types include overvoltage, undervoltage and overcurrent.

8. The control method of the redundant power supply system according to claim 5, characterized in that: The method of responding to a set fault type and controlling the isolation switch circuit (7) to perform an isolation disconnection operation corresponding to the source according to the fault source also includes: Obtaining the operating status of the safety load (5); In response to a set fault type occurring in the safety load (5), the second electronic fuse (8.2) and the third electronic fuse (8.3) perform a circuit protection operation.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the control method of the redundant power supply system according to any one of claims 5 to 8 are implemented.

10. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instruction is executed by a processor, the steps of the control method of the redundant power supply system according to any one of claims 5 to 8 are implemented.

Images