Redundant power supply system and control method
The redundant power supply system and control method solve the problems of increased circuit board area and high cost in the prior art, provide low-cost power supply protection without increasing the circuit board area, and improve the safety and reliability of the system.
Patent Information
- Application Number
- CN202510672845.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-05-23
- Publication Date
- 2025-10-10
AI Technical Summary
In the prior art, in the vehicle power supply system, the prior art has the problems of increased circuit board area and high cost.
A redundant power supply system and a control method are adopted. By setting up a redundant power supply system, a redundant power supply system and a redundant control method, the existing technology is solved. The existing patent application embodiment provides a redundant patent system. By setting up a redundant patent specification, a redundant power supply system is provided. A solution is provided. By setting up a redundant power supply system and a control method, the problem that the architecture of the existing vehicle power supply system will cause the circuit board area to increase and the cost to remain high is solved.
It provides low-cost power protection without increasing the circuit board area, avoids the problem of a short circuit of a low-safety-level functional module affecting a high-safety-level functional module, and improves the safety and reliability of the system.
Smart Images
Figure CN120756290A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of power supply control technology, and in particular to a redundant power supply system and a control method. Background Art
[0002] New energy vehicle electric drive control systems are increasingly adopting highly integrated designs, integrating not only motor control (single or dual motors) but also engine control, transmission control unit (TCU), vehicle control unit (VCU), thermal management, and other functions as needed. With the increase in integrated functions and modules, the problem of mutual interference among failures among these modules increases. In particular, a short circuit in a low-security module can affect a higher-security module. Existing solutions typically employ a parallel architecture with multiple microcontrollers and power modules, with each module controlled independently. This approach increases circuit board area and maintains high costs. Summary of the Invention
[0003] The purpose of the embodiments of the present application is to provide a redundant power supply system and control method to solve the problem that the architecture of the existing vehicle power supply system will lead to an increase in circuit board area and high costs.
[0004] In the first aspect, an embodiment of the present application provides a redundant power supply system, comprising a first power supply module, a second power supply module, a power fusion module, a detection and protection module and a vehicle function module connected in sequence, and also comprising a single-chip microcomputer, wherein the single-chip microcomputer is connected to the first power supply module, the second power supply module, the power fusion module, the detection and protection module and the vehicle function module, and the detection and protection module is connected to the first power supply module and the second power supply module; the power fusion module is used to distribute power to the first power supply module and the second power supply module, and the detection and protection module is used to perform power detection and protection on the first power supply module, the second power supply module and the vehicle function module; the single-chip microcomputer is used to control the operation of the first power supply module, the second power supply module and the detection and protection module when a fault occurs.
[0005] In the above implementation process, the embodiment of the present application sets a first power supply module, a second power supply module and a power supply fusion module to realize redundant backup of the power supply. The single-chip microcomputer detects faults and controls the operation of the first power supply module, the second power supply module and the detection and protection module to detect and protect the vehicle functional modules respectively. Cross-protection is achieved by adopting redundant backup power supply and power supply detection and protection module. The redundant backup power supply provides power output in the event that one of the power supplies fails, and avoids increasing the circuit board area, thereby realizing low-cost power supply protection.
[0006] Furthermore, the first power supply module includes a low-voltage battery and a low-voltage power supply circuit, and the low-voltage power supply circuit is connected to the low-voltage battery, the single-chip microcomputer, the detection and protection module and the power fusion module.
[0007] In the above implementation process, a low-voltage power supply is provided to meet the operation of the vehicle functional modules with low output voltage.
[0008] Furthermore, the second power supply module includes a high-voltage battery and a high-voltage to low-voltage circuit, and the high-voltage to low-voltage circuit is connected to the high-voltage battery, the single-chip microcomputer, the detection and protection module and the power fusion module.
[0009] In the above implementation process, a high-voltage power supply is provided to meet the operation of the vehicle functional modules with high output voltage.
[0010] Furthermore, the vehicle functional module includes a motor upper bridge module, a TCU module, a VCU module, an engine module and a motor lower bridge module, and the detection and protection module is respectively connected to the motor upper bridge module, the TCU module, the VCU module, the engine module and the motor lower bridge module.
[0011] In the above implementation process, the vehicle functional modules are detected and protected respectively to avoid affecting other vehicle functional modules after a short circuit in a vehicle functional module.
[0012] Furthermore, the power fusion module includes a first merging circuit and a second merging circuit, the first merging circuit connects the first power module and the detection and protection module, and the second merging circuit connects the second power module and the detection and protection module.
[0013] In the above implementation process, a power fusion module is provided to convert and distribute the power of the first power module and the second power module, and to supply power to the vehicle functional modules.
[0014] Further, the detection protection module comprises a first detection protection circuit, a second detection protection circuit, a third detection protection circuit, a fourth detection protection circuit, a fifth detection protection circuit, a sixth detection protection circuit and a seventh detection protection circuit; the first detection protection circuit is connected with the second power module, the single-chip microcomputer and the first combining circuit, the second detection protection circuit is connected with the first power module, the single-chip microcomputer and the second combining circuit, the third detection protection circuit is connected with the motor upper bridge module, the single-chip microcomputer and the first combining circuit, the fourth detection protection circuit is connected with the TCU module, the single-chip microcomputer and the first combining circuit, the fifth detection protection circuit is connected with the VCU module, the single-chip microcomputer and the second combining circuit, the sixth detection protection circuit is connected with the engine module, the single-chip microcomputer and the second combining circuit, and the seventh detection protection circuit is connected with the motor lower bridge module, the single-chip microcomputer and the second combining circuit.
[0015] In the implementation process, the vehicle function modules are detected and protected respectively, so that the other vehicle function modules are not affected when a short circuit occurs in a vehicle function module; the first power module and the second power module are detected and protected respectively, so that a reaction can be taken quickly when a fault occurs in one of the power modules.
[0016] In the second aspect, the embodiments of the present application provide a redundant power supply control method, which is based on the redundant power supply system described above, and specifically comprises the following steps:
[0017] In the case that the first power module fails, the single-chip microcomputer controls the first power module to cut off the power supply;
[0018] In the case that the second power module fails, the single-chip microcomputer controls the second power module to cut off the power supply;
[0019] When the single-chip microcomputer receives the fault signal of the vehicle function module, the single-chip microcomputer controls the detection protection module to cut off the power supply of the corresponding vehicle function module;
[0020] Based on the set fault judgment rule, the single-chip microcomputer controls the running state of the motor.
[0021] Further, based on the set fault judgment rule, the single-chip microcomputer controls the running state of the motor, which comprises the following steps:
[0022] If the fault level is the first level, the single-chip microcomputer controls the motor to stop and enter a safe state;
[0023] If the fault level is the second level, the single-chip microcomputer controls the power supply to continue to supply power;
[0024] When the power supply is normal, the single-chip microcomputer control system continues normal operation.
[0025] When the number of failures of the power supply reaches a set threshold, the motor is controlled to stop.
[0026] Further, the single-chip microcomputer controls the running state of the motor based on a set failure judgment rule, including:
[0027] whether the vehicle function module that fails belongs to a set key function module;
[0028] If yes, the single-chip microcomputer controls the motor to stop and enter a safe state;
[0029] If no, the single-chip microcomputer controls the power supply to continue to supply;
[0030] When the power supply is normal, the single-chip microcomputer control system continues normal operation.
[0031] When the number of failures of the power supply reaches a set threshold, the motor is controlled to stop.
[0032] Further, the single-chip microcomputer controls the running state of the motor based on a set failure judgment rule, including:
[0033] If both the first power supply module and the second power supply module fail, the single-chip microcomputer controls the motor to stop, enters a safe state, and issues an alarm;
[0034] If the first power supply module or the second power supply module fails, the single-chip microcomputer controls the power supply to continue to supply;
[0035] When the power supply is normal, the single-chip microcomputer control system continues normal operation.
[0036] When the number of failures of the power supply reaches a set threshold, the motor is controlled to stop. BRIEF DESCRIPTION OF DRAWINGS
[0037] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be regarded as a limitation on the scope, and for those skilled in the art, other related drawings can also be obtained without creative labor on the basis of these drawings.
[0038] Figure 1 A structural schematic diagram of a redundant power supply system provided by the first embodiment of the present application;
[0039] Figure 2A flowchart of a redundant power supply control method provided in the second embodiment of the present application. DETAILED DESCRIPTION
[0040] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.
[0041] It should be noted that in the description of this application, the terms "first" and "second" are used only to distinguish descriptions and should not be understood to indicate or imply relative importance. Furthermore, the step numbers herein are only for the convenience of explaining the embodiments of this application and do not serve to limit the order in which the steps are to be executed. The methods provided in the embodiments of this application can be executed by relevant terminal devices, and the following description will be based on a redundant power supply system as an example of the execution subject.
[0042] Please see Figure 1 , Figure 1 A structural diagram of a redundant power supply system provided for the first embodiment of the present application. The first embodiment of the present application provides a redundant power supply system, comprising: a first power supply module, a second power supply module, a power fusion module, a detection and protection module, and a vehicle function module connected in sequence, and further comprising a single-chip microcomputer, the single-chip microcomputer connecting the first power supply module, the second power supply module, the power fusion module, the detection and protection module, and the vehicle function module, the detection and protection module connecting the first power supply module and the second power supply module; the power fusion module is used to distribute power to the first power supply module and the second power supply module, the detection and protection module is used to perform power detection and protection on the first power supply module, the second power supply module, and the vehicle function module; the single-chip microcomputer is used to control the operation of the first power supply module, the second power supply module, and the detection and protection module when a fault occurs.
[0043] As mentioned above, the embodiment of the present application sets a first power supply module, a second power supply module and a power supply fusion module to realize redundant backup of the power supply. The single-chip microcomputer detects faults and controls the operation of the first power supply module, the second power supply module and the detection and protection module to detect and protect the vehicle functional modules respectively. Cross-protection is achieved by adopting redundant backup power supply and power supply detection and protection module. The redundant backup power supply provides power output in the event that one of the power supplies fails, and avoids increasing the circuit board area, thereby realizing low-cost power supply protection.
[0044] In some embodiments, the first power supply module includes a low-voltage battery and a low-voltage power supply circuit, and the low-voltage power supply circuit is connected to the low-voltage battery, the single-chip microcomputer, the detection and protection module and the power fusion module; thereby, a low-voltage power supply is set to meet the operation of the vehicle functional module with low output voltage.
[0045] In some embodiments, the second power supply module includes a high-voltage battery and a high-voltage to low-voltage circuit, and the high-voltage to low-voltage circuit is connected to the high-voltage battery, the single-chip microcomputer, the detection and protection module and the power fusion module; thereby, a high-voltage power supply is set to meet the operation of the vehicle functional module with high output voltage.
[0046] In some embodiments, the vehicle functional module includes a motor upper bridge module, a TCU module, a VCU module, an engine module and a motor lower bridge module, and the detection and protection module is respectively connected to the motor upper bridge module, the TCU module, the VCU module, the engine module and the motor lower bridge module; thereby, the vehicle functional modules are detected and protected respectively to avoid affecting other vehicle functional modules after a short circuit in a certain vehicle functional module.
[0047] It can be understood that the motor upper bridge module is a key component in the motor drive circuit. It is usually used in conjunction with the lower bridge module to form an H-bridge structure to realize the forward rotation, reverse rotation, speed regulation and braking functions of the motor.
[0048] It is understandable that the TCU module, namely the Transmission Control Unit, plays a key role in the car.
[0049] As you can understand, the VCU (Vehicle Control Unit) module is the vehicle controller, which is the core control unit of new energy vehicles (such as electric vehicles and hybrid vehicles). It is responsible for coordinating and managing the vehicle's subsystems to ensure efficient and safe operation of the vehicle.
[0050] It is understandable that the engine module is the core of the vehicle's power system, responsible for converting the chemical energy of the fuel into mechanical energy to drive the vehicle, while also assuming the important responsibilities of controlling, monitoring and protecting the engine's operation.
[0051] It can be understood that the motor lower bridge module is a key component in the motor drive circuit. It cooperates with the upper bridge module to form an H-bridge structure, and together realizes the motor's forward rotation, reverse rotation, speed regulation and braking functions.
[0052] In some embodiments, the power fusion module includes a first merging circuit and a second merging circuit, the first merging circuit connects the first power module and the detection and protection module, and the second merging circuit connects the second power module and the detection and protection module; thus, a power fusion module is set to convert and distribute the power of the first power module and the second power module, and supply power to the vehicle functional module.
[0053] Optionally, the merging circuit is used to merge different power supplies, which can be a series merger or a parallel merger, for example, using a diode to merge two power supplies.
[0054] Optionally, the detection protection circuit is used to detect and protect the power supply of the circuit. When the power supply exceeds a set threshold, the hardware and / or microcontroller protection method is triggered. For example, components such as chips or switches can be used as the detection protection circuit.
[0055] In some embodiments, the detection and protection module includes a first detection and protection circuit, a second detection and protection circuit, a third detection and protection circuit, a fourth detection and protection circuit, a fifth detection and protection circuit, a sixth detection and protection circuit, and a seventh detection and protection circuit; the first detection and protection circuit is connected to the second power module, the single-chip microcomputer, and the first merging circuit, the second detection and protection circuit is connected to the first power module, the single-chip microcomputer, and the second merging circuit, the third detection and protection circuit is connected to the motor upper bridge module, the single-chip microcomputer, and the first merging circuit, the fourth detection and protection circuit is connected to the TCU module, the single-chip microcomputer, and the first merging circuit, the fifth detection and protection circuit is connected to the VCU module, the single-chip microcomputer, and the second merging circuit, the sixth detection and protection circuit is connected to the engine module, the single-chip microcomputer, and the second merging circuit, and the seventh detection and protection circuit is connected to the motor lower bridge module, the single-chip microcomputer, and the second merging circuit; thereby, the vehicle functional modules are detected and protected respectively to avoid affecting other vehicle functional modules after a short circuit in a vehicle functional module; the first power module and the second power module are detected and protected respectively, so that a quick response can be taken when one of the power supplies fails.
[0056] Please refer to Figure 1 In the figure, the low-voltage battery and the high-voltage battery are redundant circuits. The power supply of the entire system can be supplied by either the low-voltage battery alone or the high-voltage battery alone. The current output capabilities of both can meet the needs of all modules.
[0057] After the power fusion circuit appropriately distributes power to all modules in the system, the first merging circuit (merging circuit 1) and the second merging circuit (merging circuit 2) merge the two backup power circuits and distribute power to each module based on the distribution results. The first detection and protection circuit (detection-protection circuit 1) and the second detection and protection circuit (detection-protection circuit 2) are controlled by the microcontroller and provide current feedback to the microcontroller.
[0058] When a short circuit fault occurs in any module, the third detection and protection circuit, the fourth detection and protection circuit, the fifth detection and protection circuit, the sixth detection and protection circuit and the seventh detection and protection circuit (detection-protection circuits 3 to 7) will respectively play a role: on the one hand, they will inform the microcontroller, and on the other hand, the microcontroller will shut down the detection, protection circuit or detection-protection circuit by itself; this ensures that any module will not affect the operation of other modules, thereby improving the safety and reliability of the product.
[0059] Depending on the number of integrated modules in the controller, detection and protection circuits can be added as needed, and modules that are similarly affected can be placed under the same detection and protection circuit as needed.
[0060] High-voltage battery redundant circuit: High-voltage battery + high-voltage to low-voltage circuit, which can be the high-voltage battery pack of the new energy vehicle after DC-DC conversion or direct high-voltage to low-voltage conversion, or it can be another independent low-voltage battery, which is redundant with the low-voltage battery + low-voltage power supply circuit.
[0061] As described above, the embodiment of the present application discloses a high-safety redundant power supply system. By adding redundant power supply circuits and related protection control strategies, it is ensured that in the event of a low-voltage battery failure, the redundant power supply circuits and related protection control strategies can still be used to provide redundant power supply for the motor module and other modules. In the absence of a failure that violates the safety target, the entire vehicle can be guaranteed to be limp, the availability of the entire vehicle can be maximized, and user satisfaction is improved. In the event of a low-voltage battery failure, if a failure that violates the safety target occurs at the same time, the low-voltage redundant power supply circuit can also be used to ensure that the electric drive system enters a safe state, thereby improving the safety of the electric drive system. On the other hand, for controllers that integrate multiple functions, such as TCU, engine control, and VCU modules, a low-cost power protection circuit is added to the power supply of each functional module to avoid parallel power supply modules for each module, thereby reducing costs.
[0062] Please see Figure 2 , Figure 2 The second embodiment of the present application provides a redundant power supply control method, which is implemented based on the redundant power supply system described above and specifically includes:
[0063] 100. When the first power module fails, the single chip microcomputer controls the first power module to cut off power supply.
[0064] Optionally, when the second detection and protection circuit detects that the first power module has failed, specifically, the low-voltage battery has failed, the second detection and protection circuit sends a signal of the low-voltage battery failure to the single-chip microcomputer, and the single-chip microcomputer controls the low-voltage power circuit to be cut off, thereby cutting off the power supply of the first power module (low-voltage battery); thus, power is supplied through the second power module (high-voltage battery), and the power of the second power module passes through the first merging circuit and the second merging circuit to supply power to each vehicle functional module.
[0065] 200. When the second power module fails, control the second power module to cut off power supply through the single chip microcomputer.
[0066] Optionally, when the first detection and protection circuit detects that the second power module has failed, specifically, the high-voltage battery has failed, the first detection and protection circuit sends a signal of the high-voltage battery failure to the single-chip microcomputer, and the single-chip microcomputer controls the high-voltage to low-voltage circuit to cut off, thereby cutting off the power supply to the second power module (high-voltage battery); thus, power is supplied through the first power module (low-voltage battery), and the power of the first power module passes through the first merging circuit and the second merging circuit to supply power to each vehicle functional module.
[0067] 300. When the single chip microcomputer receives a fault signal from the vehicle function module, it controls the detection and protection module to cut off the power supply of the corresponding vehicle function module.
[0068] For example, when the third detection and protection circuit detects a fault in the motor bridge module, the third detection and protection circuit sends a fault signal to the single-chip microcomputer, and the single-chip microcomputer controls the third detection and protection circuit to cut off and stop supplying power to the motor bridge module; thereby avoiding affecting other vehicle functional modules after the motor bridge module is short-circuited.
[0069] 400. Based on the set fault judgment rule, the single chip microcomputer controls the operating state of the motor.
[0070] In some embodiments, the single chip microcomputer controls the running state of the motor based on the set fault judgment rule, including:
[0071] If the fault level is the first level, the single chip microcomputer controls the motor to stop and enter a safe state;
[0072] If the fault level is the second level, the single chip microcomputer controls the power supply to continue to be supplied;
[0073] When the power supply is normal, the single chip microcomputer control system continues to operate normally;
[0074] When the number of failed power supply attempts reaches the set threshold, the motor is controlled to stop.
[0075] It can be understood that the first level, the second level, and the set number threshold are all set according to the specific vehicle operation requirements; optionally, it can be set that two vehicle function modules fail at the same time as the first level, and it can be set that one of the important vehicle function modules fails as the first level. For example, when the VCU module fails, the fault level is the first level, and the microcontroller immediately controls the motor to stop, enter a safe state, and alarm; optionally, it can be set that only one vehicle function module with a low safety level fails as the second level. For example, when the humidity sensor module fails, the fault level is the second level; optionally, the set number threshold can be two, three or more times.
[0076] In some embodiments, the single chip microcomputer controls the running state of the motor based on the set fault judgment rule, including:
[0077] Determine whether the faulty vehicle functional module belongs to a set key functional module;
[0078] If yes, the single chip microcomputer controls the motor to stop and enter a safe state;
[0079] If not, the single chip microcomputer controls the power supply to continue to be supplied;
[0080] When the power supply is normal, the single chip microcomputer control system continues to operate normally;
[0081] When the number of failed power supply attempts reaches the set threshold, the motor is controlled to stop.
[0082] It is understandable that the key function modules can be set according to the specific vehicle operation requirements. For example, the motor drive module, VCU, etc. are set as key function modules, while the humidity sensor module, brightness sensor module, etc. are not set as key function modules.
[0083] In some embodiments, the single chip microcomputer controls the running state of the motor based on the set fault judgment rule, including:
[0084] If both the first power module and the second power module fail, the single chip microcomputer controls the motor to stop, enter a safe state, and sound an alarm;
[0085] If the first power module or the second power module fails, the single chip microcomputer controls the power supply to continue;
[0086] When the power supply is normal, the single chip microcomputer control system continues to operate normally;
[0087] When the number of failed power supply attempts reaches the set threshold, the motor is controlled to stop.
[0088] It can be understood that when one of the power modules fails, the other power module supplies power, and when both power modules fail, an alarm is needed.
[0089] In the above, in the case that the first power module fails, the single-chip microcomputer controls the first power module to cut off power supply; in the case that the second power module fails, the single-chip microcomputer controls the second power module to cut off power supply; when the single-chip microcomputer receives the failure signal of the vehicle function module, the single-chip microcomputer controls the detection protection module to cut off power supply of the corresponding vehicle function module; based on the set failure judgment rule, the single-chip microcomputer controls the running state of the motor; the vehicle function module is detected and protected respectively, and two ways of redundant backup power supply and power supply detection protection module are cross-protected, the redundant backup power supply provides power output in the case that one of the power supplies fails, and realizes low-cost power supply protection without increasing the area of the circuit board.
[0090] In several embodiments provided in the present application, it should be understood that the disclosed apparatus and method can also be implemented by other manners. The apparatus embodiments described above are only schematic, for example, the flowcharts and block diagrams in the drawings show the possible implementation architectures, functions and operations of the apparatus, method and computer program product according to the embodiments of the present application. In this regard, each block in the flowcharts or block diagrams can represent a module, a program segment or a part of code, which contains one or more executable instructions for implementing the specified logic function. It should also be noted that, in some alternative implementation manners, the functions noted in the blocks can also occur in different order from that noted in the drawings. For example, two consecutive blocks can actually be executed substantially in parallel, and sometimes they can also be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and the combination of blocks in the block diagrams and / or flowcharts, can be implemented by a dedicated hardware-based system for implementing the specified functions or actions, or can be implemented by a combination of special-purpose hardware and computer instructions.
[0091] In addition, each functional module in each embodiment of the present application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.
[0092] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.
[0093] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any modifications or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.
Claims
1. A redundant power supply system, characterized in that: It includes a first power supply module, a second power supply module, a power fusion module, a detection and protection module and a vehicle function module connected in sequence, and also includes a single-chip microcomputer, the single-chip microcomputer is connected to the first power supply module, the second power supply module, the power fusion module, the detection and protection module and the vehicle function module, the detection and protection module is connected to the first power supply module and the second power supply module; the power fusion module is used to distribute power to the first power supply module and the second power supply module, and the detection and protection module is used to perform power detection and protection on the first power supply module, the second power supply module and the vehicle function module; the single-chip microcomputer is used to control the operation of the first power supply module, the second power supply module and the detection and protection module when a fault occurs.
2. The redundant power supply system according to claim 1, wherein: The first power supply module includes a low-voltage battery and a low-voltage power supply circuit. The low-voltage power supply circuit is connected to the low-voltage battery, the single-chip microcomputer, the detection and protection module, and the power fusion module.
3. The redundant power supply system according to claim 1, wherein: The second power supply module includes a high-voltage battery and a high-voltage to low-voltage circuit, and the high-voltage to low-voltage circuit is connected to the high-voltage battery, the single-chip microcomputer, the detection and protection module, and the power fusion module.
4. The redundant power supply system according to claim 1, wherein: The vehicle function module includes a motor upper bridge module, a TCU module, a VCU module, an engine module and a motor lower bridge module, and the detection and protection module is respectively connected to the motor upper bridge module, the TCU module, the VCU module, the engine module and the motor lower bridge module.
5. The redundant power supply system according to claim 4, wherein: The power fusion module includes a first merging circuit and a second merging circuit. The first merging circuit connects the first power module and the detection and protection module. The second merging circuit connects the second power module and the detection and protection module.
6. The redundant power supply system according to claim 5, characterized in that: The detection and protection module includes a first detection and protection circuit, a second detection and protection circuit, a third detection and protection circuit, a fourth detection and protection circuit, a fifth detection and protection circuit, a sixth detection and protection circuit and a seventh detection and protection circuit; the first detection and protection circuit is connected to the second power supply module, the single-chip microcomputer and the first merging circuit, the second detection and protection circuit is connected to the first power supply module, the single-chip microcomputer and the second merging circuit, the third detection and protection circuit is connected to the motor upper bridge module, the single-chip microcomputer and the first merging circuit, the fourth detection and protection circuit is connected to the TCU module, the single-chip microcomputer and the first merging circuit, the fifth detection and protection circuit is connected to the VCU module, the single-chip microcomputer and the second merging circuit, the sixth detection and protection circuit is connected to the engine module, the single-chip microcomputer and the second merging circuit, and the seventh detection and protection circuit is connected to the motor lower bridge module, the single-chip microcomputer and the second merging circuit.
7. A redundant power supply control method, characterized in that: The redundant power supply system according to any one of claims 1 to 6 is implemented, specifically comprising: In the event of a failure of the first power module, the single chip microcomputer controls the first power module to cut off power supply; In the event of a failure of the second power supply module, the single chip microcomputer controls the second power supply module to cut off power supply; When the single chip microcomputer receives a fault signal from the vehicle function module, it controls the detection and protection module to cut off the power supply of the corresponding vehicle function module; Based on the set fault judgment rules, the single chip microcomputer controls the running state of the motor.
8. The redundant power supply control method according to claim 7, wherein: The single chip microcomputer controls the running state of the motor based on the set fault judgment rule, including: If the fault level is the first level, the single chip microcomputer controls the motor to stop and enter a safe state; If the fault level is the second level, the single chip microcomputer controls the power supply to continue to be supplied; When the power supply is normal, the single chip microcomputer control system continues to operate normally; When the number of failed power supply attempts reaches the set threshold, the motor is controlled to stop.
9. The redundant power supply control method according to claim 7, wherein: The single chip microcomputer controls the running state of the motor based on the set fault judgment rule, including: Determine whether the faulty vehicle functional module belongs to a set key functional module; If yes, the single chip microcomputer controls the motor to stop and enter a safe state; If not, the single chip microcomputer controls the power supply to continue to be supplied; When the power supply is normal, the single chip microcomputer control system continues to operate normally; When the number of failed power supply attempts reaches the set threshold, the motor is controlled to stop.
10. The redundant power supply control method according to claim 7, wherein: The single chip microcomputer controls the running state of the motor based on the set fault judgment rule, including: If both the first power module and the second power module fail, the single chip microcomputer controls the motor to stop, enter a safe state, and sound an alarm; If the first power module or the second power module fails, the single chip microcomputer controls the power supply to continue; When the power supply is normal, the single chip microcomputer control system continues to operate normally; When the number of failed power supply attempts reaches the set threshold, the motor is controlled to stop.