Software and hardware combined discharge circuit output overvoltage protection device and method
By using a discharge circuit that combines hardware and software and telemetry judgment through a digital management subsystem, the problems of slow response and false triggering of overvoltage protection in spacecraft discharge circuits have been solved, achieving fast and automatic overvoltage protection and recovery.
Patent Information
- Application Number
- CN202510861133.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-06-25
- Publication Date
- 2025-11-14
AI Technical Summary
Existing spacecraft's overvoltage protection circuits mainly rely on hardware circuits, which have slow response speeds, high power consumption, and require ground commands to recover from false triggers, making it impossible to eliminate faults in a timely manner.
The discharge circuit, which combines hardware and software, performs overvoltage protection status telemetry through the digital management subsystem. It automatically detects false triggers and sends reset commands. The overvoltage protection device is constructed using the battery pack, digital management subsystem, and discharge control unit, including a discharge circuit, isolation diodes, PWM generation circuit, D flip-flop, hysteresis comparator, and telemetry processing circuit, to achieve fast response and automatic recovery.
It achieves fast overvoltage protection for the discharge circuit, reduces false triggering, improves system reliability and response speed, and avoids recovery delays dependent on ground commands.
Smart Images

Figure CN120955835A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to a hardware and software integrated discharge circuit output overvoltage protection device and method, applicable to the field of aerospace power control technology. Background Technology
[0002] Most spacecraft employ fully adjustable buses, requiring the power system to regulate the output voltage of the battery packs to ensure their discharge voltage meets the bus requirements. Therefore, to meet the spacecraft's load bus voltage range requirements, the power system typically includes a discharge circuit. This discharge circuit must have overvoltage protection; it must provide overvoltage protection if the output voltage exceeds the specified range.
[0003] Currently, spacecraft typically use hardware circuits to implement overvoltage protection for the discharge circuit output. The cause of output overvoltage is usually the failure of the control signal. When output overvoltage is detected, the input switch is disconnected through the drive conversion circuit to cut off the discharge circuit, and the faulty circuit is removed from the power supply network, thereby implementing overvoltage fault isolation. After the overvoltage protection is activated, it can only be restored through ground commands. Summary of the Invention
[0004] The technical problem solved by this invention is to overcome the shortcomings of the prior art and provide a hardware and software combined discharge circuit output overvoltage protection device and method, which has a simple system structure, stable control system, and is easy to implement in engineering.
[0005] The technical solution of the present invention is: a hardware and software combined discharge circuit output overvoltage protection device, including a battery pack, a digital tube subsystem and multiple discharge control units;
[0006] The battery pack is connected to each discharge control unit and is used to provide input power to each discharge control unit.
[0007] The discharge control unit is used to regulate the output voltage of the battery pack and has an overvoltage protection function to ensure that the discharge voltage of the battery pack meets the requirements of the bus voltage.
[0008] The digital management subsystem is connected to the discharge control unit and is used to receive overvoltage protection status telemetry and generate overvoltage reset commands.
[0009] The discharge control unit includes a discharge circuit, an isolation diode, a PWM generator circuit, a D flip-flop, a hysteresis comparator, a voltage sampling circuit, and a telemetry processing circuit.
[0010] The output terminal of the battery pack is connected to the input terminal of the discharge circuit to provide input power to the discharge circuit;
[0011] The output of the discharge circuit is connected to the primary bus via an isolation diode, which is used to regulate the primary bus voltage and keep it in a stable state.
[0012] One end of the voltage sampling circuit is connected to the output of the discharge circuit. The voltage at the output of the discharge circuit is acquired through the voltage sampling circuit to obtain the voltage sampling signal. The other end of the voltage sampling circuit is connected to the input of the hysteresis comparator along with the external reference voltage. The voltage sampling signal is compared with the external reference voltage through the hysteresis comparator, and the hysteresis characteristic is introduced to suppress the noise of the input signal.
[0013] The output of the hysteresis comparator is connected to the input of the D flip-flop; the output of the D flip-flop is connected to the input of the PWM generator circuit and the input of the telemetry processing circuit, respectively. The D flip-flop generates an enable control signal. When the voltage sampling signal is higher than the threshold, the PWM generator circuit stops modulation; in addition, the control terminal of the D flip-flop is also connected to the output of the digital management subsystem.
[0014] The output of the PWM generator circuit is connected to the control terminal of the discharge circuit to generate the drive control signal for the discharge circuit.
[0015] The output of the telemetry processing circuit is connected to the input of the digital management subsystem to generate telemetry data for overvoltage protection status.
[0016] A method for output overvoltage protection using the aforementioned device includes:
[0017] 1) Before activating the output overvoltage protection, set the overvoltage protection reset function to 1 and clear the overvoltage counter;
[0018] 2) The telemetry processing circuit collects the telemetry values of telemetry 1 to n under overvoltage protection status and sends them to the data management subsystem;
[0019] 3) When the data management subsystem detects an overvoltage protection status three times in a row, and there is a telemetry value of 1 in telemetry 1 to n, the overvoltage counter is incremented by 1; after time T, the data management subsystem sends an overvoltage protection reset command.
[0020] 4) After the overvoltage protection reset command is sent, it is determined whether the overvoltage counter has reached the quantity N after time T. When the overvoltage counter reaches the quantity N, no further judgment is performed, and no more commands are sent. The overvoltage protection reset autonomous function is set to 0; otherwise, return to step 2) and perform telemetry detection on the next overvoltage protection status.
[0021] If, in step 2), the data management subsystem does not detect overvoltage protection status for three consecutive times and the telemetry values of telemetry 1 to n are all 1, then the hardware overvoltage protection is considered to be falsely triggered, and the overvoltage counter is cleared.
[0022] The T value is 20s to 30s.
[0023] The N = 20 to 30.
[0024] The present invention has the following technical effects:
[0025] (1) The present invention constructs a discharge circuit output overvoltage protection device by a battery pack, a digital management subsystem, and a discharge control unit. When the voltage sampling signal reaches the overvoltage protection threshold, the faulty discharge control unit can be quickly shut down. The discharge control unit remotely outputs the overvoltage protection status to the digital management subsystem and receives the overvoltage reset command. The overvoltage protection control part is completely replaced by discrete components instead of integrated overvoltage protection chips, which overcomes the disadvantages of slow response speed, high power consumption and narrow output range of overvoltage protection chips.
[0026] (2) Overvoltage protection is a protection mechanism for internal circuit malfunctions. If external interference causes the overvoltage protection to be falsely triggered, the output power margin will decrease, and the system reliability will be reduced. Currently, satellite overvoltage protection false triggers all require ground-based command transmission for recovery, which cannot be done in time when communication delays occur. The method of output overvoltage protection described in this invention uses a data management subsystem to collect and judge the overvoltage protection status via telemetry, automatically judging whether the hardware overvoltage protection has been falsely triggered. When a false trigger occurs, the data management subsystem sends an overvoltage reset command to the discharge control unit. After the false trigger is cleared, the system automatically returns to normal operation, overcoming the shortcomings of existing technologies that rely on ground commands for recovery. Attached Figure Description
[0027] Figure 1 This is a system block diagram of a discharge circuit output overvoltage protection device that combines hardware and software.
[0028] Figure 2 This is a flowchart of a hardware and software combined discharge circuit output overvoltage protection method.
[0029] Figure 3 This is an embodiment of a discharge circuit output overvoltage protection device and method that combines hardware and software.
[0030] Figure 4 This is a flowchart example of a hardware and software combined discharge circuit output overvoltage protection method. Detailed Implementation
[0031] The following will combine Figure 1-4 The present invention provides a further detailed description of the hardware and software combined discharge circuit output overvoltage protection device and method.
[0032] like Figure 1 As shown, this is a hardware and software integrated discharge circuit output overvoltage protection device, characterized in that it includes a battery pack, a digital management subsystem, and discharge control units 1 to n.
[0033] The battery pack is connected to each discharge control unit and is used to provide input power to each discharge control unit.
[0034] The discharge control unit is used to regulate the output voltage of the battery pack and has an overvoltage protection function to ensure that the discharge voltage of the battery pack meets the requirements of the bus voltage.
[0035] The digital management subsystem is connected to the discharge control unit and is used to receive overvoltage protection status telemetry 1 to n and generate overvoltage reset commands.
[0036] The discharge control unit includes a discharge circuit, an isolation diode, a PWM generator circuit, a D flip-flop, a hysteresis comparator, a voltage sampling circuit, and a telemetry processing circuit.
[0037] The output terminal of the battery pack is connected to the input terminal of the discharge circuit to provide input power to the discharge circuit;
[0038] The output terminal of the discharge circuit is connected to the primary bus via an isolation diode, which is used to adjust the primary bus voltage to keep it in a stable state.
[0039] One end of the voltage sampling circuit is connected to the output terminal of the discharge circuit. The voltage at the output terminal of the discharge circuit is acquired through the voltage sampling circuit to obtain the voltage sampling signal. The other end of the voltage sampling circuit and the external reference voltage are both connected to the input terminal of the hysteresis comparator. The voltage sampling signal is compared with the external reference voltage through the hysteresis comparator, and the hysteresis characteristic is introduced to suppress the noise of the input signal.
[0040] The output of the hysteresis comparator is connected to the input of the D flip-flop; the output of the D flip-flop is connected to the input of the PWM generator circuit and the input of the telemetry processing circuit respectively. The D flip-flop generates an enable control signal. When the voltage sampling signal is higher than the threshold, the PWM generator circuit stops modulation; in addition, the control terminal of the D flip-flop is also connected to the output of the digital management subsystem.
[0041] The output terminal of the PWM generator circuit is connected to the control terminal of the discharge circuit to generate the drive control signal for the discharge circuit.
[0042] The output of the telemetry processing circuit is connected to the input of the digital management subsystem and is used to generate telemetry data for overvoltage protection status.
[0043] like Figure 2 As shown, the hardware and software combined discharge circuit output overvoltage protection method of this invention includes the following steps:
[0044] 1) When activating the output overvoltage protection, the "Overvoltage Protection Reset Auto Function" must be set to 1, and the "Overvoltage Counter" must be cleared;
[0045] 2) The telemetry values of overvoltage protection status telemetry 1 to n are collected by the telemetry processing circuit of the power supply subsystem and sent to the data management subsystem;
[0046] 3) When the data management subsystem detects an overvoltage protection status three times in a row, and there is a telemetry value of 1 in telemetry 1 to n, the overvoltage counter is incremented by 1; after time T, the data management subsystem sends an overvoltage protection reset command.
[0047] After the overvoltage protection reset command is sent, it is checked whether the overvoltage counter has reached the specified number N after a time T. If the overvoltage counter has reached the specified number N, no further checks are performed, no more commands are sent, and the "overvoltage protection reset autonomous function" is set to 0; otherwise, return to step 2) and check the overvoltage protection status telemetry 1 to n again.
[0048] If the data management subsystem does not detect the overvoltage protection status telemetry values 1 to n as 1 for 3 consecutive times in step 2), then the hardware overvoltage protection is considered to be falsely triggered, and the overvoltage counter is cleared.
[0049] The T = 20s to 30s, and the N = 20 to 30 times.
[0050] like Figure 3 As shown, this embodiment of the present invention is a hardware and software combined discharge circuit output overvoltage protection device, including a battery pack, a digital tube subsystem, and discharge control units 1 to 3;
[0051] The battery pack is connected to each discharge control unit and is used to provide input power to each discharge control unit.
[0052] The discharge control unit is used to regulate the output voltage of the battery pack and has an overvoltage protection function to ensure that the discharge voltage of the battery pack meets the requirements of the bus voltage.
[0053] The digital management subsystem is connected to the discharge control unit and is used to receive overvoltage protection status telemetry 1 to 3 and generate overvoltage reset commands.
[0054] The discharge control unit includes a discharge circuit, an isolation diode, a PWM generator circuit, a D flip-flop, a hysteresis comparator, a voltage sampling circuit, and a telemetry processing circuit.
[0055] The output terminal of the battery pack is connected to the input terminal of the discharge circuit to provide input power to the discharge circuit;
[0056] The output terminal of the discharge circuit is connected to the primary bus via an isolation diode, which is used to adjust the primary bus voltage to keep it in a stable state.
[0057] One end of the voltage sampling circuit is connected to the output terminal of the discharge circuit. The voltage at the output terminal of the discharge circuit is acquired through the voltage sampling circuit to obtain the voltage sampling signal. The other end of the voltage sampling circuit and the external reference voltage are both connected to the input terminal of the hysteresis comparator. The voltage sampling signal is compared with the external reference voltage through the hysteresis comparator, and the hysteresis characteristic is introduced to suppress the noise of the input signal.
[0058] The output of the hysteresis comparator is connected to the input of the D flip-flop; the output of the D flip-flop is connected to the input of the PWM generator circuit and the input of the telemetry processing circuit respectively. The D flip-flop generates an enable control signal. When the voltage sampling signal is higher than the threshold, the PWM generator circuit stops modulation; in addition, the control terminal of the D flip-flop is also connected to the output of the digital management subsystem.
[0059] The output terminal of the PWM generator circuit is connected to the control terminal of the discharge circuit to generate the drive control signal for the discharge circuit.
[0060] The output of the telemetry processing circuit is connected to the input of the digital management subsystem and is used to generate telemetry data for overvoltage protection status.
[0061] like Figure 4 As shown, the hardware and software combined overvoltage protection method for the discharge circuit output in this embodiment of the present invention includes the following steps:
[0062] 1) When activating the output overvoltage protection, the "Overvoltage Protection Reset Auto Function" must be set to 1, and the "Overvoltage Counter" must be cleared;
[0063] 2) The telemetry values of overvoltage protection status telemetry 1 to 3 are collected by the telemetry processing circuit of the power supply subsystem and sent to the data management subsystem;
[0064] 3) When the data management subsystem detects an overvoltage protection status and a telemetry value of 1 in telemetry 1 to 3 is detected 3 times consecutively, the overvoltage counter is incremented by 1; after 30 seconds, the data management subsystem sends an overvoltage protection reset command.
[0065] After the overvoltage protection reset command is sent, a 30-second interval is elapsed before checking if the overvoltage counter has reached a value of 20. If the overvoltage counter reaches 20, no further checks are performed, no more commands are sent, and the "overvoltage protection reset autonomous function" is set to 0. Otherwise, the process returns to step 2) to re-check the overvoltage protection status telemetry 1-3.
[0066] If the data management subsystem does not detect the overvoltage protection status telemetry values of telemetry 1 to 3 as 1 for 3 consecutive times in step 2), then the hardware overvoltage protection is considered to be falsely triggered, and the overvoltage counter is cleared.
Claims
1. A hardware and software integrated discharge circuit output overvoltage protection device, characterized in that, This includes battery packs, a digital management subsystem, and multiple discharge control units; The battery pack is connected to each discharge control unit and is used to provide input power to each discharge control unit. The discharge control unit is used to regulate the output voltage of the battery pack and has an overvoltage protection function to ensure that the discharge voltage of the battery pack meets the requirements of the bus voltage. The digital management subsystem is connected to the discharge control unit and is used to receive overvoltage protection status telemetry and generate overvoltage reset commands.
2. The hardware and software combined discharge circuit output overvoltage protection device according to claim 1, characterized in that, The discharge control unit includes a discharge circuit, an isolation diode, a PWM generator circuit, a D flip-flop, a hysteresis comparator, a voltage sampling circuit, and a telemetry processing circuit. The output terminal of the battery pack is connected to the input terminal of the discharge circuit to provide input power to the discharge circuit; The output of the discharge circuit is connected to the primary bus via an isolation diode, which is used to regulate the primary bus voltage and keep it in a stable state. One end of the voltage sampling circuit is connected to the output of the discharge circuit. The voltage at the output of the discharge circuit is acquired through the voltage sampling circuit to obtain the voltage sampling signal. The other end of the voltage sampling circuit is connected to the input of the hysteresis comparator along with the external reference voltage. The voltage sampling signal is compared with the external reference voltage through the hysteresis comparator, and the hysteresis characteristic is introduced to suppress the noise of the input signal. The output of the hysteresis comparator is connected to the input of the D flip-flop; the output of the D flip-flop is connected to the input of the PWM generator circuit and the input of the telemetry processing circuit, respectively. The D flip-flop generates an enable control signal. When the voltage sampling signal is higher than the threshold, the PWM generator circuit stops modulation; in addition, the control terminal of the D flip-flop is also connected to the output of the digital management subsystem. The output of the PWM generator circuit is connected to the control terminal of the discharge circuit to generate the drive control signal for the discharge circuit. The output of the telemetry processing circuit is connected to the input of the digital management subsystem to generate telemetry data for overvoltage protection status.
3. A method for output overvoltage protection using the device described in claim 1, characterized in that, include: 1) Before activating the output overvoltage protection, set the overvoltage protection reset function to 1 and clear the overvoltage counter; 2) The telemetry processing circuit collects the telemetry values of telemetry 1 to n under overvoltage protection status and sends them to the data management subsystem; 3) When the data management subsystem detects an overvoltage protection status three times in a row, and there is a telemetry value of 1 in telemetry 1 to n, the overvoltage counter is incremented by 1; after time T, the data management subsystem sends an overvoltage protection reset command. 4) After the overvoltage protection reset command is sent, it is determined whether the overvoltage counter has reached the quantity N after time T. When the overvoltage counter reaches the quantity N, no further judgment is performed, and no more commands are sent. The overvoltage protection reset autonomous function is set to 0; otherwise, return to step 2) and perform telemetry detection on the next overvoltage protection status.
4. The method according to claim 3, characterized in that, If, in step 2), the data management subsystem does not detect overvoltage protection status for three consecutive times and the telemetry values of telemetry 1 to n are all 1, then the hardware overvoltage protection is considered to be falsely triggered, and the overvoltage counter is cleared.
5. The method according to claim 3, characterized in that, The T value is 20s to 30s.
6. The method according to claim 3, characterized in that, The N = 20 to 30.