Distribution box fault diagnosis and recovery control method and device, and storage medium

By differentially controlling the recovery logic of the main power supply branch and the secondary power supply branch, the problem of the distribution box not considering key factors during fault recovery is solved, intelligent fault diagnosis and recovery are achieved, and the safety and reliability of the distribution box are improved.

CN120697560APending Publication Date: 2025-09-26JILIN ZHONG YING HIGH TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510744135.7
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-06-05
Publication Date
2025-09-26

AI Technical Summary

Technical Problem

The recovery logic of existing distribution boxes after power failures is not intelligent enough and does not take key factors into consideration, resulting in recovery failures or safety hazards. The main line and load protection have poor coordination and lack of global optimization, which may lead to system-level failures.

Method used

A distribution box fault diagnosis and recovery control method is provided. Through the differentiated control logic of the main power supply branch and the secondary power supply branch, combined with the collision status, power input and initial power-on factors, the power supply to critical loads is restored first, realizing intelligent fault recovery.

Benefits of technology

It improves the response timeliness and reliability of power distribution fault recovery, ensures priority power supply to critical loads, and reduces the risk of system-level failures.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120697560A_ABST
    Figure CN120697560A_ABST
Patent Text Reader

Abstract

The invention provides a distribution box fault diagnosis and recovery control method, which comprises a main power supply branch circuit power supply recovery step, and comprises the following steps: judging whether the following conditions are simultaneously satisfied: receiving a collision signal of a vehicle end and a second power supply branch circuit where a storage battery is located is in an open circuit state; if so, recovering the power supply of the main power supply branch to the post-stage load module according to the first control logic; and if not, recovering the power supply of the main power supply branch to the post-stage load module according to the second control logic. According to the control method disclosed by the invention, the power supply of the second power supply branch which is collided and is in the open-circuit state is preferentially recovered according to the first control logic, so that the response timeliness and reliability of power distribution fault recovery are guaranteed.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of new energy vehicles, and in particular to a method, device and storage medium for fault diagnosis and recovery control of a distribution box. Background Art

[0002] With the rapid development of new energy vehicles, the complexity of vehicle electrical systems has increased significantly. Traditional power distribution solutions can no longer meet the requirements of high safety, high reliability, and intelligence. Currently, intelligent power distribution boxes, as the core component of the vehicle's 12V primary power distribution, undertake key functions such as power distribution, load protection, and fault diagnosis. However, existing power distribution boxes have at least the following problems:

[0003] The recovery logic after a power failure is not intelligent enough. Existing solutions typically use a fixed delay or simple retry mechanism during fault recovery. These mechanisms fail to consider key factors such as the crash state, power input (KL15 / KL87 / KL89), and initial power-on. This can lead to recovery failures or safety hazards.

[0004] Poor coordination between main circuit and load protection: The protection strategies for the main circuit (DCDC / BAT) and the load are often designed independently, lacking global optimization. For example, when the DCDC is overloaded, the load disconnection sequence is not properly coordinated, and when fault recovery occurs, power supply to critical loads is not properly prioritized, which may lead to system-level failures. Summary of the Invention

[0005] In response to the above-mentioned problems in the prior art, an embodiment of the present disclosure provides a method for fault diagnosis and recovery control of a distribution box. The distribution box includes a main power supply branch, which includes a first power supply branch and a second power supply branch. The input end of the first power supply branch is used to connect to an on-board DC power supply, and the input end of the second power supply branch is used to connect to a battery. The output end of the first power supply branch is connected to the output end of the second power supply branch and serves as the output end of the main power supply branch to supply power to a subsequent load module.

[0006] The control method includes:

[0007] The main power supply branch power restoration steps include:

[0008] Determine whether the following conditions are met simultaneously: a collision signal from the vehicle end is received and the second power supply branch is in an open circuit state;

[0009] If both conditions are met, the power supply of the main power supply branch to the subsequent load module is restored according to the first control logic;

[0010] If the conditions are not met at the same time, the power supply from the main power supply branch to the subsequent load module is restored according to the second control logic.

[0011] Optionally, the first control logic includes:

[0012] When it is determined that the number of collision recovery times is less than the first preset counting threshold, after waiting for the first preset timing period, the second power supply branch is controlled to be turned on, and the collision recovery times counter value is increased by 1.

[0013] Optionally, the second control logic includes a first sub-control logic and a second sub-control logic.

[0014] If both conditions are met: no collision signal from the vehicle end is received and the second power supply branch is in an open circuit state, the power supply from the second power supply branch to the subsequent load module is restored according to the first sub-control logic;

[0015] If the conditions are not met at the same time, the power supply from the first power supply branch to the subsequent load module is restored according to the second sub-control logic.

[0016] Optionally, the first sub-control logic includes:

[0017] When it is determined that the output voltage of the battery or the output voltage of the output end of the main power supply branch is greater than or equal to a first preset voltage threshold and the number of times the second power supply branch has restored power is less than a second preset counting threshold, after waiting for a second preset timing period, the second power supply branch is controlled to be turned on, and the value of the second power supply branch restoration number counter is incremented by 1;

[0018] The second preset counting threshold is smaller than the first preset counting threshold, and the second preset timing duration is larger than the first preset timing duration.

[0019] Optionally, the second sub-control logic includes:

[0020] When it is determined that the output voltage of the on-board DC power supply or the output voltage of the output end of the main power supply branch is greater than or equal to a second preset voltage threshold, and the number of times the first power supply branch has restored power is less than a third preset counting threshold, after waiting for a third preset timing period, the first power supply branch is controlled to be turned on, and the value of the first power supply branch restoration number counter is incremented by 1;

[0021] The third preset counting threshold is smaller than the first preset counting threshold, and the third preset timing duration is larger than the first preset timing duration.

[0022] Optionally, the post-stage load module includes a plurality of power distribution branches, and the loads on each power distribution branch include a normal power load and a controlled load. The control method further includes a power supply restoration step for the power distribution branch, including:

[0023] S21, determining whether the following conditions are simultaneously met: receiving a vehicle-side collision signal; determining, based on branch switch status information on each power distribution branch, that any power distribution branch is in an open circuit state due to a fault;

[0024] If both conditions are met at the same time, the branch switch on the power supply distribution branch where the vehicle-side domain controller load whose load type is a constant power load is located is closed according to the third control logic, while for the constant power load that is not a vehicle-side domain controller load and the power supply distribution branches where the controlled load is located, the branch closing action is not performed.

[0025] Optionally, the power distribution branch power restoration step includes:

[0026] For S21, if not satisfied at the same time,

[0027] S22, determining whether the following conditions are simultaneously met: no vehicle-side collision signal is received, and it is determined based on the branch switch status information on each power distribution branch that any of the power distribution branches is in an open state due to a fault,

[0028] If both conditions are met, the branch switch on the power distribution branch where the controlled load is located is controlled to be closed according to the fourth control logic, and the branch switch on the power distribution branch where the non-vehicle-side domain controller load is located is controlled to be closed according to the fifth control logic.

[0029] If the conditions are not met simultaneously, the branch switch closing action will not be executed.

[0030] Optionally, the third control logic includes:

[0031] When it is determined that the number of times the vehicle-side domain controller load has restored power is less than the fourth preset counting threshold and it is the first time that the power supply distribution branch where the vehicle-side domain controller load is located has restored power, after waiting for the fourth preset timing period, the branch switch on the power supply distribution branch where the vehicle-side domain controller load is located is controlled to be closed, and the value of the vehicle-side domain controller load power supply restoration times counter is increased by 1.

[0032] Optionally, the fourth control logic includes:

[0033] When it is determined that the number of times the controlled load restores power supply is less than the fifth preset counting threshold, after waiting for the fifth preset timing period, the branch switch on the power supply distribution branch where the controlled load is located is controlled to be closed, and the counter value of the number of times the controlled load restores power supply is increased by 1, wherein the fifth preset timing period is greater than the fourth preset timing period.

[0034] Optionally, the fifth control logic includes:

[0035] When the rising edge of the hard-line signal KL15 is detected, the branch switch on the power supply distribution branch where the constant power load other than the vehicle-end domain controller load is located is controlled to be closed.

[0036] Optionally, before the step of controlling the branch switch on the power distribution branch where the controlled load is located to close according to the fourth control logic, the method further includes:

[0037] Determine whether the signal status bit that controls whether the controlled load is powered on is true. If so, execute step S22. If false, disconnect the branch switch on the power distribution branch controlled by the signal.

[0038] Optionally, the method further includes a main power supply branch fault diagnosis step, including:

[0039] Real-time monitoring of the output current value of the power supply on the first power supply branch or the second power supply branch,

[0040] If the current value output by the on-board DC power supply on the first power supply branch meets any first preset condition of different levels set for the on-board DC power supply, determining that the first power supply branch is faulty and disconnecting the first power supply branch;

[0041] If the current value output by the battery on the second power supply branch meets any second preset condition of different levels set for the battery, it is determined that the second power supply branch is faulty, and the second power supply branch is disconnected;

[0042] Among them, the first preset condition includes a first preset overcurrent threshold and a first preset overcurrent duration, and different levels of the first preset conditions have different first preset overcurrent thresholds and first preset overcurrent durations; the second preset condition includes a second preset overcurrent threshold and a second preset overcurrent duration, and different levels of the second preset conditions have different second preset overcurrent thresholds and second preset overcurrent durations.

[0043] Another aspect of an embodiment of the present disclosure provides a computer device, comprising a memory, a processor, and a computer program stored in the memory, wherein when the computer program is executed by the processor, the computer program executes instructions of the method according to any of the above embodiments.

[0044] Another aspect of the embodiments of the present disclosure provides a computer storage medium having a computer program stored thereon. When the computer program is executed by a processor of a computer device, the computer program executes instructions according to any of the methods described in the above embodiments.

[0045] According to the control method for fault diagnosis and recovery of the distribution box of the embodiment of the present disclosure, the power supply of the second power supply branch in the event of a collision and the second power supply branch being in an open circuit state is restored first according to the first control logic, thereby ensuring the timeliness and reliability of the response of the power distribution fault recovery; for the fault recovery steps of each power distribution branch, in the event of a vehicle collision, the power supply of the power distribution branch where the vehicle-side domain controller load, whose load type is a normal power load, is located is restored first, while in the event of no vehicle collision, the power supply of the normal power load that is not the vehicle-side domain controller load and the power distribution branches where the controlled load is located is restored according to different recovery logics. In this way, the timeliness and reliability of the response of the power distribution fault recovery of the main road and each branch are ensured. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0047] Figure 1 This is a module block diagram of a distribution box according to a preferred embodiment of the present disclosure.

[0048] Figure 2 The present invention is a flowchart of a method for controlling fault diagnosis and recovery of a power distribution box according to a preferred embodiment of the present invention.

[0049] Figure 3 This is a flow chart of restoring the power supply of the main power supply branch to the subsequent load module according to the first control logic.

[0050] Figure 4 This is a flow chart of restoring the power supply of the second power supply branch to the subsequent load module according to the first sub-control logic.

[0051] Figure 5 This is a flow chart of restoring the power supply of the first power supply branch to the subsequent load module according to the second sub-control logic.

[0052] Figure 6 This is a flow chart of controlling the closing of a branch switch on a power supply distribution branch where a vehicle-side domain controller load, whose load type is a constant power load, is located according to a third control logic.

[0053] Figure 7 This is a flow chart of controlling the closing of a branch switch on a power distribution branch where a controlled load is located according to a fourth control logic. DETAILED DESCRIPTION

[0054] The preferred embodiments of the present disclosure are described below in conjunction with the drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present disclosure and are not used to limit the present disclosure. In addition, the embodiments and features in the embodiments of the present disclosure may be combined with each other if no conflict occurs.

[0055] An embodiment of the present disclosure provides a method for fault diagnosis and recovery control of a power distribution box, which is applied to a smart power distribution box.

[0056] like Figure 1 As shown, the intelligent distribution box usually includes a main power supply branch and a main control chip. The main power supply branch includes a first power supply branch and a second power supply branch. The input end of the first power supply branch is used to connect to the vehicle DC power supply, and the input end of the second power supply branch is used to connect to the battery. The output end of the first power supply branch is connected to the output end of the second power supply branch and serves as the output end of the main power supply branch to supply power to the subsequent load module.

[0057] Specifically, a first main road driver chip and a first main road switch can be provided on the first power supply branch, and a second main road driver chip and a second main road switch can be provided on the second branch. The first main road driver chip and the second main road driver chip are both electrically connected to the main control chip. The main control chip controls the closing and opening of the first main road switch and the second main road switch by reading the status information of the first main road driver chip and the second main road driver chip (including but not limited to the output current / voltage / temperature of the battery and the output current / voltage / temperature of the vehicle-mounted DC power supply).

[0058] Similarly, the post-stage load module usually includes multiple power distribution branches, each of which is provided with a branch driver chip and a branch switch. Each branch driver chip is electrically connected to the main control chip. The main control chip controls the closing and opening of each branch switch by reading the status information of each branch driver chip (operating current / voltage / temperature of the branch switch).

[0059] More specifically, the loads on each power distribution branch typically include constant-current loads (always on, typically controlled by an EFUSE) and controlled loads (typically controlled by an HSD). Constant-current loads typically include multiple critical loads such as domain controllers, as well as other constant-current loads such as the main brake system motor, main brake system valve, electronic wipers, and door controllers. Controlled loads typically include cooling fans, windshields, front blowers, and fuel pumps.

[0060] In this embodiment, the first main road driver chip and the second main road driver chip are 2ED2410-EM chips, and each branch road driver chip is a VNF1048 chip.

[0061] like Figure 2 As shown, the power distribution box fault diagnosis and recovery control method includes:

[0062] The main power supply branch power restoration steps include:

[0063] Determine whether the following conditions are met simultaneously: a collision signal from the vehicle end is received and the second power supply branch is in an open circuit state;

[0064] If both conditions are met, the power supply of the main power supply branch to the subsequent load module is restored according to the first control logic;

[0065] If the conditions are not met at the same time, the power supply from the main power supply branch to the subsequent load module is restored according to the second control logic.

[0066] Specifically, restoring the power supply of the main power supply branch to the subsequent load module according to the first control logic includes:

[0067] When it is determined that the number of collision recovery times is less than the first preset counting threshold, after waiting for the first preset timing time, the second power supply branch is controlled to be turned on, and the collision recovery times counter value is increased by 1.

[0068] In this embodiment, if Figure 3 As shown, when it is determined that the number of collision recovery times is less than 5 times and lasts for more than 1 second, the second main switch on the second power supply branch is controlled to be closed, and the collision recovery times counter value is increased by 1.

[0069] Specifically, the second control logic includes a first sub-control logic and a second sub-control logic.

[0070] If both conditions are met: no collision signal from the vehicle end is received and the second power supply branch is in an open circuit state, the power supply from the second power supply branch to the subsequent load module is restored according to the first sub-control logic;

[0071] If the conditions are not met at the same time, the power supply from the first power supply branch to the subsequent load module is restored according to the second sub-control logic.

[0072] More specifically, restoring the power supply of the second power supply branch to the subsequent load module according to the first sub-control logic includes:

[0073] When it is determined that the output voltage of the battery or the output voltage of the output end of the main power supply branch is greater than or equal to the first preset voltage threshold and the number of times the second power supply branch has restored power is less than the second preset counting threshold, after waiting for a second preset timing period, the second power supply branch is controlled to be turned on, and the value of the second power supply branch restoration number counter is incremented by 1;

[0074] The second preset counting threshold is smaller than the first preset counting threshold, and the second preset timing duration is larger than the first preset timing duration.

[0075] In this embodiment, if Figure 4As shown, after determining the battery output voltage or the output voltage of the output end of the main power supply branch ( Figure 4 If the copper busbar voltage in the power supply branch is greater than or equal to 10V and the second power supply branch is restored less than 3 times and lasts for more than 3s, the second main switch on the second power supply branch is controlled to be closed, and the counter value of the second power supply branch power supply restoration times is increased by 1.

[0076] Optionally, restoring the power supply of the first power supply branch to the subsequent load module according to the second sub-control logic includes:

[0077] When it is determined that the output voltage of the on-board DC power supply or the output voltage of the output end of the main power supply branch is greater than or equal to the second preset voltage threshold, and the number of times the first power supply branch restores power is less than the third preset counting threshold, after waiting for the third preset timing period, the first power supply branch is controlled to be turned on, and the value of the first power supply branch restoration number counter is incremented by 1;

[0078] The third preset counting threshold is smaller than the first preset counting threshold, and the third preset timing duration is larger than the first preset timing duration.

[0079] In this embodiment, if Figure 5 As shown, after determining the output voltage of the vehicle DC power supply or the output voltage of the output end of the main power supply branch ( Figure 5 The copper busbar voltage in the power supply is greater than or equal to 10V, the first power supply branch has restored power supply less than 3 times and lasts for more than 3s, the first main switch on the first power supply branch is controlled to be closed, and the counter value of the number of times the first power supply branch has restored power supply is increased by 1.

[0080] From the above, it can be understood that the logic of power supply recovery of the main power supply branch includes four situations (it has been confirmed that the first power supply branch or the second power supply branch is in an open circuit state due to a fault): 1. The second power supply branch where the battery is located is open and the vehicle collides; 2. The second power supply branch where the battery is located is open and the vehicle does not collide; 3. The first power supply branch where the on-board DC power supply is located is open and the vehicle collides; 4. The first power supply branch where the on-board DC power supply is located is open and the vehicle does not collide.

[0081] It can be further understood that for the above-mentioned first situation, power supply restoration is performed according to the first control logic; for the above-mentioned second situation, power supply restoration is performed according to the first sub-control logic; for the above-mentioned third and fourth situations, power supply restoration is performed according to the second sub-control logic.

[0082] Based on the threshold settings for each control logic, in the four aforementioned scenarios, priority is given to restoring power to the secondary power supply branch, where the battery resides, in the event of a collision. This is because the vehicle's DC power supply is typically cut off during a collision, making prioritizing the secondary power supply branch, where the battery resides, more reliable. This restoration logic, which considers the collision state and differentiates the restoration time and number of restoration attempts, ensures timely and reliable response to power distribution failures.

[0083] Specifically, the control method further includes a power supply restoration step of the power distribution branch, including:

[0084] S21, determining whether the following conditions are simultaneously met: receiving a vehicle-side collision signal, and determining, based on branch switch status information on each power distribution branch read by the main control chip, that any power distribution branch is in an open circuit state due to a fault;

[0085] If both conditions are met at the same time, the branch switch on the power supply distribution branch where the vehicle-side domain controller load whose load type is a constant power load is located is closed according to the third control logic, while for the constant power load that is not a vehicle-side domain controller load and the power supply distribution branches where the controlled load is located, the branch closing action is not performed.

[0086] It is understood that in the event of a vehicle collision, only the power supply distribution branch where the vehicle-side domain controller load is located, which is a constant power load, is restored first. This prioritizes power supply to critical loads.

[0087] It can also be understood that the step of determining whether there is a power distribution branch in an open state due to a fault among the power distribution branches based on the branch switch status information on each power distribution branch read by the main control chip is specifically:

[0088] The main control chip reads the status of the branch driver chip on the power distribution branch every 50ms. The branch driver chip detects the operating current / voltage / temperature of the branch switch and, upon learning that the power distribution branch is abnormal, saves the fault code corresponding to the different fault causes, as shown in Table 1 below:

[0089] Table 1

[0090] 0x0: Initial 0x8: Driver shutdown due to abnormality (hardware) 0x1: Normal shutdown 0x9: Short circuit shutdown 0x2: Short circuit shutdown (hardware) 0xA: Overcurrent shutdown 0x3: Overcurrent shutdown (hardware) 0xB: Undervoltage shutdown 0x4: Undervoltage shutdown (hardware) 0xC: MOSFET overtemperature shutdown 0x5: MOSDET overtemperature shutdown (hardware) 0xD: Terminal overtemperature shutdown 0x6: Device overtemperature shutdown (hardware) 0xE:Reserved 0x7: Gate undervoltage shutdown (hardware) 0xF: Invalid

[0091] If the fault code read by the main control chip is any one of 0x2 to 0xD, it is confirmed that the power distribution branch is in an open circuit state due to a fault.

[0092] More specifically, the power distribution branch power restoration step may further include:

[0093] For S21, if not satisfied at the same time,

[0094] S22, determining whether the following conditions are simultaneously met: no vehicle-side collision signal is received, and it is determined based on the branch switch status information on each power distribution branch read by the main control chip that any power distribution branch is in an open state due to a fault.

[0095] If both conditions are met, the branch switch on the power distribution branch where the controlled load is located is controlled to be closed according to the fourth control logic, and the branch switch on the power distribution branch where the non-vehicle-side domain controller load is located is controlled to be closed according to the fifth control logic.

[0096] If the conditions are not met simultaneously, the branch switch closing action will not be executed.

[0097] It can be seen from the above step S22 that it can be understood that when the vehicle does not collide, according to different control logics, the power supply to the normal power loads other than the vehicle-side domain controller loads and the power supply distribution branches where the controlled loads are located are restored.

[0098] Specifically, controlling the branch switch on the power supply distribution branch where the vehicle-side domain controller load, whose load type is a constant power load, is located to be closed according to the third control logic includes:

[0099] When it is determined that the number of times the vehicle-side domain controller load has restored power is less than the fourth preset counting threshold and it is the first time that the power supply distribution branch where the vehicle-side domain controller load is located has restored power, after waiting for the fourth preset timing period, the branch switch on the power supply distribution branch where the vehicle-side domain controller load is located is controlled to be closed, and the value of the vehicle-side domain controller load power supply restoration times counter is increased by 1.

[0100] In this embodiment, Figure 6 As shown, when it is determined that the vehicle-side domain controller load has restored power supply for less than 2 times and it is the first time that the power supply distribution branch where the vehicle-side domain controller load is located has restored power, the branch switch on the power supply distribution branch where the vehicle-side domain controller load is located can be controlled to be closed for more than 1s, and the vehicle-side domain controller load power supply restoration times counter value is increased by 1.

[0101] Specifically, controlling the branch switch on the power distribution branch where the controlled load is located to close according to the fourth control logic includes:

[0102] When it is determined that the number of times the controlled load restores power supply is less than the fifth preset counting threshold, after waiting for the fifth preset timing period, the branch switch on the power supply distribution branch where the controlled load is located is controlled to be closed, and the counter value of the number of times the controlled load restores power supply is increased by 1, wherein the fifth preset timing period is greater than the fourth preset timing period.

[0103] In this embodiment, if Figure 7As shown, when it is determined that the controlled load has restored power supply times less than 2 times, after 3 seconds, the branch switch on the power distribution branch where the controlled load is located can be controlled to close, and the counter value of the controlled load power supply restoration times is increased by 1.

[0104] Specifically, controlling the closing of a branch switch on a power distribution branch where a constant power load other than a vehicle-side domain controller load is located according to the fifth control logic includes:

[0105] When the rising edge of the hard-line signal KL15 is detected, the branch switch on the power supply distribution branch where the constant power load other than the vehicle-end domain controller load is located is controlled to be closed.

[0106] It should be noted that the non-vehicle domain controller loads generally do not include those that are awakened from sleep mode. It should also be noted that the various types of power restoration counts mentioned throughout this disclosure are valid within a sleep-wake cycle. If the system wakes up from sleep mode again, the count value will be reset to zero.

[0107] It can be understood that the response speed of restoring the power supply of the power supply distribution branch where the vehicle-side domain controller load with a constant power load type is located is faster than the response speed of restoring the power supply of the constant power load that is not a vehicle-side domain controller load and the power supply distribution branches where the controlled load is located.

[0108] More specifically, before the step of controlling the branch switch on the power distribution branch where the controlled load is located to close according to the fourth control logic, the method may further include:

[0109] Determine whether the signal status bit for controlling whether the controlled load is powered on is true. If so, execute step S22. If false, disconnect the branch switch on the power distribution branch controlled by the signal.

[0110] It is understood that the signal that controls whether the controlled load is powered on can be a CAN signal, a KL15 signal, or a KL87 / KL89 signal. Therefore, the authenticity of the power-on signal status bit is taken into consideration. When the power-on signal status bit is abnormal, automatic recovery is prohibited, further ensuring the reliability of the recovery of each power distribution branch.

[0111] In some embodiments, the control method further includes a main power supply branch fault diagnosis step, including:

[0112] Real-time monitoring of the output current value of the power supply on the first power supply branch or the second power supply branch,

[0113] If the current value output by the on-board DC power supply on the first power supply branch meets any first preset condition of different levels set for the on-board DC power supply, it is determined that the first power supply branch is faulty, and the first power supply branch is disconnected;

[0114] If the current value output by the battery on the second power supply branch meets any second preset condition of different levels set for the battery, it is determined that the second power supply branch is faulty and the second power supply branch is disconnected;

[0115] Among them, the first preset condition includes a first preset overcurrent threshold and a first preset overcurrent duration, and different levels of first preset conditions have different first preset overcurrent thresholds and first preset overcurrent durations; the second preset condition includes a second preset overcurrent threshold and a second preset overcurrent duration, and different levels of second preset conditions have different second preset overcurrent thresholds and second preset overcurrent durations.

[0116] In this embodiment, three different levels of first preset conditions are set for the vehicle-mounted DC power supply. Similarly, three different levels of second preset conditions are set for the battery, as shown in Table 2.

[0117] Table 2

[0118] grade First preset condition (DCDC) Second preset condition (BAT) Level 1 450A&2s 450A&2.1s Level 2 300A&15s 300A&16s Level 3 220A&120s 220A&125s

[0119] Therefore, a three-level overcurrent protection is adopted, combined with different overcurrent thresholds and delays, taking into account both fast response capability and anti-interference capability.

[0120] It can be understood that the above process is a control process for an overcurrent fault on the main power supply branch. If, during the overcurrent fault control process, the output current value on the first power supply branch is detected to be greater than 715A, this current value is marked as invalid, and the main control chip does not perform any specific action. Similarly, if, during the overcurrent fault control process, the output current value on the second power supply branch is detected to be greater than 870A, this current value is marked as invalid, and the main control chip does not perform any specific action.

[0121] If any of the main power supply branches experiences an excessive instantaneous current and shorts, a hardware disconnect can be directly performed via the first main circuit driver chip on the first power supply branch or the second main circuit driver chip on the second power supply branch. Specifically, the first main circuit driver chip can be configured to directly disconnect the first main circuit switch when the output current on the first power supply branch exceeds 850A. The second main circuit driver chip can be configured to directly disconnect the second main circuit switch when the output current on the second power supply branch exceeds 650A.

[0122] Similarly, the overcurrent fault control logic and short circuit hardware disconnection logic of each power distribution branch can be designed with reference to the main power supply branch, so they are not described in detail.

[0123] The present invention also provides a computer device, comprising a memory, a processor, and a computer program stored in the memory, wherein when the computer program is run by the processor, the computer program executes instructions of the method according to any of the above embodiments.

[0124] The present invention also provides a computer storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor of a computer device, the computer program executes instructions of the method according to any of the above embodiments.

[0125] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0126] It should also be understood that in the embodiments herein, the term "and / or" merely describes an association between associated objects, indicating that three possible relationships exist. For example, "A and / or B" could represent: A alone, A and B simultaneously, or B alone. Furthermore, the character " / " in this document generally indicates an "or" relationship between the associated objects.

[0127] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the composition and steps of each example according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this document.

[0128] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0129] In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices, or units, or can be an electrical, mechanical, or other form of connection.

[0130] Units described as separate components may or may not be physically separate, and components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected based on actual needs to achieve the objectives of the embodiments herein.

[0131] In addition, the functional units in the various embodiments herein may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0132] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the existing technology, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the various embodiments of the method of this article. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program code.

[0133] This article uses specific embodiments to illustrate the principles and implementation methods of this article. The description of the above embodiments is only used to help understand the methods and core ideas of this article. At the same time, for those skilled in the art, based on the ideas of this article, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation to this article.

Claims

1. A method for fault diagnosis and recovery control of a distribution box, characterized in that: The power distribution box includes a main power supply branch, which includes a first power supply branch and a second power supply branch. The input end of the first power supply branch is used to connect to the vehicle-mounted DC power supply, and the input end of the second power supply branch is used to connect to the battery. The output end of the first power supply branch is connected to the output end of the second power supply branch and serves as the output end of the main power supply branch to supply power to the subsequent load module. The control method includes: The main power supply branch power restoration steps include: Determine whether the following conditions are met simultaneously: a collision signal from the vehicle end is received and the second power supply branch is in an open circuit state; If both conditions are met, the power supply of the main power supply branch to the subsequent load module is restored according to the first control logic; If the conditions are not met at the same time, the power supply from the main power supply branch to the subsequent load module is restored according to the second control logic.

2. The method for fault diagnosis and recovery control of a power distribution box according to claim 1, characterized in that: The first control logic includes, When it is determined that the number of collision recovery times is less than the first preset counting threshold, after waiting for the first preset timing period, the second power supply branch is controlled to be turned on, and the collision recovery times counter value is increased by 1.

3. The method for fault diagnosis and recovery control of a power distribution box according to claim 2, characterized in that: The second control logic includes a first sub-control logic and a second sub-control logic, If both conditions are met: no collision signal from the vehicle end is received and the second power supply branch is in an open circuit state, the power supply from the second power supply branch to the subsequent load module is restored according to the first sub-control logic; If the conditions are not met at the same time, the power supply from the first power supply branch to the subsequent load module is restored according to the second sub-control logic.

4. The method for fault diagnosis and recovery control of a distribution box according to claim 3, characterized in that: The first sub-control logic includes: When it is determined that the output voltage of the battery or the output voltage of the output end of the main power supply branch is greater than or equal to a first preset voltage threshold and the number of times the second power supply branch has restored power is less than a second preset counting threshold, after waiting for a second preset timing period, the second power supply branch is controlled to be turned on, and the value of the second power supply branch restoration number counter is incremented by 1; The second preset counting threshold is smaller than the first preset counting threshold, and the second preset timing duration is larger than the first preset timing duration.

5. The method for fault diagnosis and recovery control of a distribution box according to claim 3, characterized in that: The second sub-control logic includes: When it is determined that the output voltage of the on-board DC power supply or the output voltage of the output end of the main power supply branch is greater than or equal to a second preset voltage threshold, and the number of times the first power supply branch has restored power is less than a third preset counting threshold, after waiting for a third preset timing period, the first power supply branch is controlled to be turned on, and the value of the first power supply branch restoration number counter is incremented by 1; The third preset counting threshold is smaller than the first preset counting threshold, and the third preset timing duration is larger than the first preset timing duration.

6. The method for fault diagnosis and recovery control of a power distribution box according to claim 1, characterized in that: The post-stage load module includes a plurality of power distribution branches, and the loads on each power distribution branch include a normal power load and a controlled load. The control method further includes a power distribution branch power recovery step, including: S21, determining whether the following conditions are simultaneously met: receiving a vehicle-side collision signal; determining, based on branch switch status information on each power distribution branch, that any power distribution branch is in an open circuit state due to a fault; If both conditions are met at the same time, the branch switch on the power supply distribution branch where the vehicle-side domain controller load whose load type is a constant power load is located is closed according to the third control logic, while for the constant power load that is not a vehicle-side domain controller load and the power supply distribution branches where the controlled load is located, the branch closing action is not performed.

7. The method for fault diagnosis and recovery control of a power distribution box according to claim 6, characterized in that: The power distribution branch power restoration step includes: For S21, if not satisfied at the same time, S22, determining whether the following conditions are simultaneously met: no vehicle-side collision signal is received, and it is determined based on the branch switch status information on each power distribution branch that any of the power distribution branches is in an open state due to a fault, If both conditions are met, the branch switch on the power distribution branch where the controlled load is located is controlled to be closed according to the fourth control logic, and the branch switch on the power distribution branch where the non-vehicle-side domain controller load is located is controlled to be closed according to the fifth control logic. If the conditions are not met simultaneously, the branch switch closing action will not be executed.

8. The method for fault diagnosis and recovery control of a distribution box according to claim 7, characterized in that: The third control logic includes, When it is determined that the number of times the vehicle-side domain controller load has restored power is less than the fourth preset counting threshold and it is the first time that the power supply distribution branch where the vehicle-side domain controller load is located has restored power, after waiting for the fourth preset timing period, the branch switch on the power supply distribution branch where the vehicle-side domain controller load is located is controlled to be closed, and the value of the vehicle-side domain controller load power supply restoration times counter is increased by 1.

9. The method for fault diagnosis and recovery control of a power distribution box according to claim 8, characterized in that: The fourth control logic includes, When it is determined that the number of times the controlled load restores power supply is less than the fifth preset counting threshold, after waiting for the fifth preset timing period, the branch switch on the power supply distribution branch where the controlled load is located is controlled to be closed, and the counter value of the number of times the controlled load restores power supply is increased by 1, wherein the fifth preset timing period is greater than the fourth preset timing period.

10. The method for fault diagnosis and recovery control of a power distribution box according to claim 7, characterized in that: The fifth control logic includes, When the rising edge of the hard-line signal KL15 is detected, the branch switch on the power supply distribution branch where the constant power load other than the vehicle-end domain controller load is located is controlled to be closed.

11. The method for fault diagnosis and recovery control of a power distribution box according to claim 7, characterized in that: Before the step of controlling the branch switch on the power distribution branch where the controlled load is located to be closed according to the fourth control logic, the method further includes: Determine whether the signal status bit that controls whether the controlled load is powered on is true. If so, execute step S22. If false, disconnect the branch switch on the power distribution branch controlled by the signal.

12. The method for fault diagnosis and recovery control of a power distribution box according to claim 1, characterized in that: It also includes the main power supply branch fault diagnosis steps, include, Real-time monitoring of the output current value of the power supply on the first power supply branch or the second power supply branch, If the current value output by the on-board DC power supply on the first power supply branch meets any first preset condition of different levels set for the on-board DC power supply, determining that the first power supply branch is faulty and disconnecting the first power supply branch; If the current value output by the battery on the second power supply branch meets any second preset condition of different levels set for the battery, it is determined that the second power supply branch is faulty, and the second power supply branch is disconnected; Among them, the first preset condition includes a first preset overcurrent threshold and a first preset overcurrent duration, and different levels of the first preset conditions have different first preset overcurrent thresholds and first preset overcurrent durations; the second preset condition includes a second preset overcurrent threshold and a second preset overcurrent duration, and different levels of the second preset conditions have different second preset overcurrent thresholds and second preset overcurrent durations.

13. A computer device comprising a memory, a processor, and a computer program stored in the memory, characterized in that: When the computer program is executed by the processor, the computer program executes the instructions of the method according to any one of claims 1 to 12.

14. A computer storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor of a computer device, the computer program executes the instructions of the method according to any one of claims 1 to 12.