Power-on and power-off monitoring system and method based on sequential logic

Abstract

The invention provides a power-on and power-off monitoring system and method based on sequential logic, and relates to the technical field of low-voltage power supply system control, and the system comprises a contact type normally-open power switch, a chassis VCU, a domain control module, an interface board, a monitoring module, and a sequential control unit. The action sequence of assemblies such as a power switch, a storage battery relay and a domain control module is coordinated through preset logic, power source impact or part damage caused by sequential disorder of a traditional system is avoided, the power supply sequential of peripherals such as a display screen and a laser radar is accurately controlled through communication between an RS485 and the domain control module, current impact caused by simultaneous power-on of multiple devices is avoided, and the system reliability is improved. The interface board controls double lines to be connected for 3 seconds through a relay in the board to trigger the storage and charging master control to be powered on, so that the stability and traceability of a trigger signal are ensured, the problem of starting failure caused by signal interference in a traditional trigger mode is solved, and the power-on feedback success rate of the storage and charging master control is improved.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of low-voltage power supply system control, more specifically, relates to a power-on and power-off monitoring system based on time sequence logic and a method thereof. BACKGROUND

[0002] In the field of low-voltage power supply system, the traditional design has significant shortcomings. In the prior art, the storage and charging system, domain control system and chassis system often adopt a non-independent power supply mode. When the domain control and chassis system share a power supply, they are easily disturbed by current surges such as motor starting, and the storage and charging system lacks independent hot standby design, resulting in poor stability of 12V output. There is a lack of hot standby power supply switching logic, and when the main power supply fails, the standby power supply is delayed by more than 500ms, and the storage battery also faces the risk of over-discharge due to the lack of voltage threshold protection.

[0003] In terms of emergency stop response mechanism, the traditional emergency stop switch needs to be manually reset on site and cannot be remotely released, which may cause secondary accidents due to reset delay in large equipment or high-risk scenarios. When the emergency stop signal is transmitted through the bus, there is a communication delay of more than 100ms, which causes the chassis to stop and the high-voltage to be cut off out of sync, which poses a safety hazard.

[0004] In terms of power-on and power-off control logic, the traditional scheme lacks time sequence control, and the module startup sequence is chaotic, which may cause power surges. For example, if the storage and charging system is not powered on in the specified order, it may damage the power module. At the same time, there is a lack of timeout monitoring and abnormal processing mechanism. When the domain control or storage and charging master control fails to start, it cannot cut off the power supply in time, and when the storage battery voltage is abnormal, it cannot automatically switch to the redundant power supply or power off, which seriously affects the system reliability. SUMMARY

[0005] To solve the above technical problems, the present application provides a power-on and power-off monitoring system based on time sequence logic and a method thereof to solve the above problems.

[0006] A power-on and power-off monitoring system based on time sequence logic, comprising: A contact type normally open power switch for inputting power-on and power-off control signals, the power switch being connected to the chassis VCU; A chassis VCU connected to the power switch for monitoring the control signals and generating time sequence control instructions, the VCU being provided with constant power by the chassis storage battery in the system power-off state and being kept in a dormant low-power consumption state; A domain control module connected to the chassis VCU through CAN bus communication for receiving the time sequence control instructions and executing the power-on or power-off process; An interface board connected to the domain control module and the storage and charging master control for transmitting power-on or power-off signals; A monitoring module for monitoring the state signals of each component in real time and feeding back to the chassis VCU and domain control module through CAN bus or two-wire on-off. a timing control unit integrated in the chassis VCU or domain control module, used to coordinate the action sequence of the power switch, battery relay, domain control module, interface board and storage and charging master according to preset timing logic.

[0007] Preferably, the timing control unit includes a timeout monitoring module for setting the domain control module power-on response threshold (such as 370 message reception timeout) and the storage and charging master power-on feedback threshold, and generating an instruction to turn off the battery relay when the threshold is exceeded.

[0008] Preferably, the monitoring module includes a voltage monitoring unit and a relay state monitoring unit for real-time monitoring of battery voltage, 12V power output voltage, and on-off state of main positive and negative relays and power supply relays, and feeding back to the VCU and domain control module.

[0009] Preferably, it also includes a self-restoring normally closed emergency stop switch, which is branched to the chassis VCU, storage and charging controller and interface board, and the monitoring module feeds back the emergency stop state to the domain control module in real time when the emergency stop takes effect, interrupts the power-on and power-off process and executes emergency power-off.

[0010] Preferably, the low-voltage power supply system includes independent hot standby power sources (power source A and power source B) of the storage and charging system and common hot standby power sources (power source C and battery) of the chassis system and the domain control system, and the monitoring module is also used to monitor the switching state of the hot standby power source and trigger the redundant power supply logic when the main power fails.

[0011] Preferably, the response logic of the emergency stop switch includes: when the emergency stop takes effect after pressing for 1 second, the monitoring module controls the chassis to stop and engage the brake, the storage and charging system to disconnect the high voltage, and the domain control state light to flash red; when the emergency stop switch is pressed for 5 seconds or the platform sends a release command, the monitoring module feeds back the emergency stop release signal to each component to restore the normal timing of the system.

[0012] Another technical problem to be solved by the present application is to provide a power-on and power-off monitoring method based on timing logic, comprising the following steps: S1: monitor the long press signal of the power switch, and when a long press of 3 seconds is detected, trigger the system power-on process: the chassis VCU turns on the battery relay, the interface board and the domain control module are powered on in turn, and the domain control module sends a 370 keep-alive message to the VCU; S2: the interface board sends a power-on signal to the storage and charging master, triggers the storage and charging master to power on through the in-board relay control double-line connection for 3 seconds, and the storage and charging master feeds back the state to the domain control module after turning on the main positive and negative relays; S3: the domain control module queries the high-voltage power-on state, and if it is normal, turns on the power supply relay, and at the same time the chassis VCU monitors the 12V power supply and battery voltage, and turns off the battery output after 30 seconds when the voltage is lower than 12V. S4: When the power switch is pressed for 5 seconds, the system power-off process is triggered: the domain control module starts the power-off logic, stops discharging externally, and notifies the interface board to turn off the external relay, and then turns off the power supply relay and the main positive and negative relays; S5: When the chassis VCU does not receive the high-voltage power-off message from the domain control module within the preset time, the battery relay is cut off, and the whole vehicle power-off is completed.

[0013] Preferably, in the power-on process, the domain control module communicates with the interface board through the RS485 interface, and the interface board serves as a 12V power supply convergence point to control the on-off timing of external device power supply.

[0014] Preferably, in the power-off process, the domain control module first performs software environment protection, and then turns off the external device power supply, the power supply, and the high-voltage relay in sequence. After the storage and charging master control stops sending the keep-alive signal, the domain control module performs soft power-off and feeds back the power-off state to the platform.

[0015] Preferably, the keep-alive signal is a 370 message periodically sent by the domain control module, and the chassis VCU confirms the power-on state of the domain control module by receiving the message. If it is not received within the set time, the battery relay is turned off.

[0016] Compared with the prior art, the present application has the following beneficial effects: 1. Precise timing control improves stability: By presetting the action sequence of components such as power switch, battery relay, and domain control module, the traditional system is prevented from being damaged by power impact or component damage caused by timing disorder. For example, when powering on, the domain control module first sends a 370 keep-alive message to confirm the state, and then triggers the storage and charging master control to power on, ensuring that the startup sequence of each subsystem is conflict-free. The actual power-on process takes only 12 seconds, which is more efficient than the traditional scheme.

[0017] 2. Timeout monitoring mechanism enhances fault tolerance: The timing control unit has a timeout monitoring module, which sets the domain control power-on response threshold (5 seconds) and the storage and charging feedback threshold (10 seconds). If the threshold is exceeded, the battery is automatically turned off to prevent system deadlock caused by component failure. If the VCU does not receive the domain control 370 message within 5 seconds, the power is immediately cut off to prevent excessive discharge of the battery, and the fault handling response time is less than 100ms. 3, the power supply A and the power supply B form a hot backup in parallel, and are isolated by a Schottky diode. When the power supply A fails, the power supply B automatically takes over the power supply within 50ms, ensuring that the storage and charging system 12V output is uninterrupted. The independent power supply design isolates the power supply interference of the domain control / chassis system, making the 12V output fluctuation range ≤±0.3V, which improves the stability compared with the traditional common power supply scheme. The power supply C and the battery form a "main supply-supplement" mode, and the output voltage of the power supply C is higher than that of the battery. In normal times, the power supply C supplies power and supplements power. When the power supply C fails, the battery automatically cuts in. When the VCU monitors that the voltage is less than 12V, it starts a 30-second countdown to shut down the output, avoiding over-discharge of the battery.

[0018] 4, hardware direct connection realizes fast braking: the self-recovery normally closed emergency stop switch is directly connected to the chassis VCU, the storage and charging controller and the interface board through three hard lines. When the emergency stop is triggered by pressing for 1 second, the chassis is stopped and the brake is engaged, and the storage and charging system is cut off. Compared with the traditional bus transmission scheme, the response speed is improved. It supports local long press for 5 seconds and remote command to release, and after release, the system restarts in time sequence, avoiding the low efficiency problem of traditional emergency stop which needs manual on-site reset. When remotely released, the system only needs 1.2 seconds from the platform sending the command to the system returning to normal state, which is suitable for unattended or high-risk scenes.

[0019] 5, real-time monitoring of voltage and relay: the monitoring module real-time feedbacks the battery voltage, 12V power output and relay state. When the 12V voltage is abnormal for more than 20 seconds, the redundant power supply switching or power down protection is automatically started to avoid component damage caused by voltage fluctuation. When the power is down, the domain control module first executes software protection such as data saving, and then successively shuts down peripherals, power supply and high voltage relay, ensuring that the system state is traceable. If the VCU does not receive the domain control high voltage power-off message for more than 30 seconds, the battery is forcibly cut off to prevent the risk of "false power down". The power-down process takes 8 seconds, ensuring safe shutdown of the equipment.

[0020] 6, the interface board as a power supply convergence point communicates with the domain control module through RS485 to accurately control the power supply timing of display screen, laser radar and other peripherals, avoiding current impact caused by multiple devices being powered on at the same time. The interface board controls the double-line connection through the internal relay to trigger the storage and charging master power-on for 3 seconds, ensuring the stability and traceability of the trigger signal, solving the start failure problem caused by signal interference in the traditional trigger method, and improving the success rate of storage and charging master power-on feedback. BRIEF DESCRIPTION OF DRAWINGS

[0021] Fig. 1 is the system power-on and power-off control logic diagram in the application; Fig. 2 is the principle diagram of low-voltage electricity in the application. DETAILED DESCRIPTION

[0022] The embodiments of the present application will be further described in details below with reference to the accompanying drawings and examples. The following examples are used to illustrate the present application but cannot be used to limit the scope of the present application.

[0023] Referring to Figs. 1-2 The present application provides a power-on and power-off monitoring system based on timing logic and a method thereof.

[0024] The power-on and power-off monitoring system based on timing logic comprises: The present system is applied to a low-voltage power supply system (12V) and specifically comprises: Power switch module: a contact type normally open power switch is adopted, which is installed on the front panel of the equipment and is connected to the signal input end of the chassis VCU through two wires, and is used to input the control signal of long press 3 seconds power-on or long press 5 seconds power-off.

[0025] Chassis VCU: an integrated timing control unit and an overtime monitoring module are adopted, which is connected to the chassis 12V storage battery through a normal power interface, maintains a dormant low-power state (power consumption ≤1W) when the system is powered off, and only monitors the power switch signal in real time. The VCU communicates with the domain control module through the CAN bus (baud rate: 500kbps) and controls the storage battery to supply power to the outside through the relay.

[0026] Domain control module: connected to the interface board through the RS485 interface, receives the 378 power-on / power-off request instruction sent by the VCU, executes software environment initialization or protection, and periodically sends 370 keep-alive messages (period: 100ms) to the VCU to confirm the system state.

[0027] Interface board: as a 12V power supply convergence point, the double-line on-off is controlled through the relay in the board, after receiving the power-on signal of the domain control module, the trigger signal of 3 seconds is sent to the storage and charging master control, and the power supply relay of the external device (such as display screen, laser radar) is controlled.

[0028] Storage and charging master control: connected to independent hot standby power supply (power supply A and power supply B), the input end of power supply A is connected to the front stage of main positive and main negative relays, and power supply B is connected by main positive and main negative relays after the system is powered on, and the outputs of the two are connected in parallel to form 12V hot standby power supply. After receiving the power-on signal of the interface board, the storage and charging master control sequentially connects the self-destruction board and the main positive and main negative relays, and feeds back the relay state to the domain control module.

[0029] Emergency stop switch module: a self-recovery normally closed switch is adopted, which is divided into three branches and connected to the hard-wire input end of the chassis VCU, the emergency stop interface of the storage and charging controller and the signal port of the interface board respectively. When the emergency stop is triggered by pressing for 1 second, the high-voltage output of the storage and charging system is directly interrupted and the chassis is stopped.

[0030] Embodiment of power-on and power-off timing control method: 1. System power-on process: Trigger condition: hold the power switch for 3 seconds and release, VCU monitors the high level signal for 3 seconds.

[0031] Execution steps: VCU response: turn on the battery relay, 12V battery supplies power to the outside, VCU sends 378 power-on request to the domain control module.

[0032] Domain control and interface board start: domain control module sends 370 keep-alive message to VCU after power-on, interface board is powered on synchronously and sends a trigger signal (voltage: 12V, current: 2A) to the storage and charging master for 3 seconds.

[0033] Storage and charging system starts: after receiving the trigger signal, the storage and charging master turns on the self-destruction board power supply, then closes the main positive and negative relays, and the power supply B outputs 12V to form a hot standby with power supply A. The relay status is fed back to the domain control module.

[0034] High voltage and power supply connection: domain control module queries high voltage power-on state (such as voltage ≥ 100V), if normal, turn on the power supply relay, chassis DCDC power supply outputs 13.8V, at the same time VCU monitors the battery voltage, when the voltage < 12V, turn off the battery output after 30 seconds.

[0035] Peripheral device starts: interface board controls the peripheral device relay to turn on, display screen, laser radar and other devices are powered on, status light is always green, and the speaker broadcasts "power-on success".

[0036] 2. System power-off process: Trigger condition: hold the power switch for 5 seconds and release, VCU confirms the signal for 5 seconds.

[0037] Execution steps: Domain control power-off logic: VCU sends 378 power-off command through CAN, domain control module starts software environment protection, stops discharging to the outside and notifies the interface board to turn off the peripheral device relay.

[0038] High voltage and power supply cut-off: domain control module controls the storage and charging master to turn off the power supply relay, then turns off the main positive and negative relays, the storage and charging system stops high voltage output, the liquid cooling system and DCAC power supply are powered off in turn.

[0039] Low voltage power supply is turned off: chassis DCDC power supply is powered off, storage and charging master stops sending keep-alive signal, domain control module performs soft power-off and feedbacks the power-off state to the platform, and sends 370 high voltage power-off message to VCU.

[0040] Battery cut-off: if VCU does not receive 370 high voltage power-off message from domain control module for more than 30 seconds, automatically cut off the battery relay to complete the vehicle power-off.

[0041] Redundant power supply and emergency stop response timing collaboration embodiment: 1. Low-voltage power supply redundancy control: Charging system redundancy: Power supply A (input voltage: 200-400V, output: 12V / 5A) is directly connected to the front stage of the main positive and negative relays. When the system is initially powered on, it is powered by the chassis battery. After the self-destruction board is turned on, power supply A starts. Power supply B (same specification) is powered on after the main positive and negative relays are turned on. The outputs of the two are connected in parallel through a Schottky diode, forming a "main-back hot switching" mode. When power supply A fails (such as output voltage <11V), power supply B automatically takes over the power supply, and the switching time is <50ms.

[0042] Domain control and chassis redundancy: After the high-voltage input of power supply C (output: 12V / 10A) is connected, the output voltage is set to 13.2V (higher than the battery voltage 12.8V). When working normally, it is powered by power supply C and charges the battery. When power supply C fails, the battery automatically switches to power supply. When the VCU detects that the battery voltage is <12V, it starts a 30-second countdown to shut down the output.

[0043] 2. Emergency stop safety response timing: Emergency stop takes effect: press the emergency stop switch for 1 second and release it. The switch state changes from normally closed to open circuit, and three branch signals are triggered respectively: Chassis VCU: controls the motor brake to stop, and the braking distance is ≤0.5m (when the vehicle speed is ≤5km / h); Charging controller: turns off the main positive and negative relays, cuts off the high-voltage output, and powers off the self-destruction board; Interface board: sends an emergency stop signal to the domain control module, and the domain control control status light flashes red (frequency: 1Hz).

[0044] Emergency stop release: Local release: long press the emergency stop switch for 5 seconds, the switch state returns to normally closed, and the system restarts according to the power-on process; Remote release: the platform sends an emergency stop release command to the VCU through the CAN bus, and the VCU notifies the domain control module to restore normal timing, and the status light turns green.

[0045] Timing monitoring and abnormal handling embodiment: 1. Timeout monitoring mechanism: Power-on timeout: after the VCU sends a 378 power-on request, if it does not receive a 370 keep-alive message from the domain control module within 5 seconds, it automatically turns off the battery relay to prevent the battery from over-discharging; Charging feedback timeout: after the interface board sends a power-on signal to the charging main control, if it does not receive a main positive relay feedback signal within 10 seconds, the domain control module determines that the charging system has failed and starts the power-off process.

[0046] 2. Voltage abnormality handling: When the VCU monitors that the 12V power supply output voltage is <11.5V or >13.5V, an alarm is sent to the domain control module, and the domain control power supply C adjusts the output (±0.5V); if the voltage continues to be abnormal for more than 20 seconds, the redundant power supply switching or power down protection is started.

[0047] Implementation effect verification: In new energy equipment testing, the system realizes: Power-on timing time: the total time from power switch triggering to peripheral device startup is 12 seconds, which meets the design requirements; Power-off timing time: the total time from triggering to vehicle power-off is 8 seconds, which meets the safety specifications; Redundant switching: when power supply A fails, power supply B switches without obvious interruption, and the device operates normally; Emergency stop response: pressing the emergency stop to the chassis brake stop time <0.3 seconds, high voltage cut-off time <0.5 seconds, which meets the GB / T38031-2021 standard.

[0048] The above implementation combines hardware redundancy design and timing logic control to ensure the safety, reliability and fault tolerance capability of the low-voltage power supply system during power-on and power-off, especially suitable for industrial equipment scenarios with high requirements for power supply continuity.

[0049] Working principle: Redundant working principle of low-voltage power supply system: 1. Independent hot standby power supply mechanism of storage and charging system: Redundant design of power supply A and power supply B: the input end of power supply A is directly connected to the front stage of the main positive and negative relay, and when the system is initially powered on, the 12V constant power is provided by the chassis battery, triggering the self-destruction board to connect the high-voltage input of power supply A, making it start first and output 12V. Then the main positive and negative relay is closed, and power supply B is powered on, forming a parallel hot standby power supply with power supply A. The two are isolated by a Schottky diode output, and when power supply A fails (such as output voltage <11V), power supply B automatically takes over the power supply, with a switching time <50ms, ensuring the continuity of the storage and charging system power supply.

[0050] Independent power supply anti-interference design: the power supply of the storage and charging system is independent of the domain control and chassis system, avoiding interference of other subsystem power fluctuations (such as current impact when the motor starts) on the storage and charging module, improving the stability of 12V output (fluctuation range ≤±0.3V).

[0051] 2. Common hot standby power supply mechanism of domain control and chassis system: Power supply C and the coordination of the battery: the chassis provides a 12V battery as a constant power, system power supply C high voltage input switch, output 12V (voltage set to 13.2V, higher than the 12.8V of the battery), so the normal work is mainly by power supply C power, while the battery power (charging voltage 13.8V). When power supply C failure, the battery automatically cut into power, VCU monitoring battery voltage < 12V when starting 30 seconds countdown, timeout after the shutdown to protect the battery.

[0052] Emergency stop safety response working principle: 1. Emergency stop signal trigger and execution logic: Hardware direct connection fast response: self-recovery normally closed emergency stop switch is divided into three hard-wire branches, directly connected to the chassis VCU, storage and charging controller and interface board, to avoid the delay of transmission through the bus (response time < 10ms). Press the switch for 1 second and then release, the switch state changes from normally closed to open circuit, each branch is triggered synchronously: Chassis VCU: immediately control the motor brake to stop, the braking distance is ≤0.5m when the vehicle speed ≤5km / h; Storage and charging controller: turn off the main positive and negative relays, cut off the high voltage output, and self-destroy the board power off; Interface board: send emergency stop signal to the domain control module, and the domain control control status light flashes red at a frequency of 1Hz.

[0053] 2. Emergency stop release dual-mode control: Local release: long press the emergency stop switch for 5 seconds, the switch returns to the normally closed state, and the system restarts according to the power-on procedure; Remote release: the platform sends an emergency stop release command to the VCU through the CAN bus, the VCU notifies the domain control module to clear the emergency stop state, the status light turns green, and each subsystem returns to normal timing.

[0054] Power-on and power-off timing control working principle: 1. System power-on timing logic: Trigger and power start: long press the power switch for 3 seconds, VCU monitors the high level signal for 3 seconds, then turns on the battery relay, and the 12V battery supplies power externally. VCU sends 378 power-on request to the domain control module through CAN, and the domain control module powers on and periodically sends 370 keep-alive messages (period 100ms) to VCU, while the interface board is powered on and controls the double-wire connection for 3 seconds through the board relay, triggering the storage and charging master to start.

[0055] High voltage and power supply connection: After receiving the trigger signal, the storage and charging master control sequentially connects the self-destruction board, the main positive and negative relays, and the power supply B and power supply A in parallel to output 12V. After the domain control module queries the high voltage state (voltage ≥ 100V) is normal, the power supply relay is turned on, the chassis DCDC power supply outputs 13.8V to power the chassis motor and domain control module.

[0056] Voltage monitoring and protection: VCU real-time monitoring of battery voltage, when the voltage < 12V, start 30 seconds countdown, after timeout, turn off the battery output; At the same time, monitor the 12V power output, if the voltage is abnormal (< 11.5V or > 13.5V) for 20 seconds, start redundant power switching or power down protection.

[0057] 2. System power down timing logic: Trigger and software protection: Long press the power switch for 5 seconds, VCU timing confirmation signal for 5 seconds, send 378 power down command to domain control module through CAN, domain control first executes software environment protection (such as saving running data), stops discharging to the outside and notifies the interface board to turn off the external relay (such as display screen, laser radar power supply).

[0058] High voltage and power supply cut-off: Domain control module controls the storage and charging master control to turn off the power supply relay, then turns off the main positive and negative relays, the storage and charging system stops high voltage output, the liquid cooling system and DCAC power supply are powered off in turn. After the chassis DCDC power supply is powered off, the storage and charging master control stops sending keep-alive signals.

[0059] Low voltage power supply cut-off and timeout protection: Domain control module executes soft power down and feedbacks the state to the platform, and sends 370 high voltage power-off message to VCU. If VCU does not receive the message for more than 30 seconds, automatically cut off the battery relay to complete the vehicle power down, avoiding excessive discharge of the battery.

[0060] Timing monitoring and abnormal handling principle: 1. Timeout monitoring mechanism: Power-up stage: After VCU sends the power-on request, if it does not receive the 370 keep-alive message from the domain control within 5 seconds, it determines that the domain control has failed to start, and turns off the battery relay; After the interface board triggers the storage and charging master control, if it does not receive the main positive relay feedback within 10 seconds, it determines that the storage and charging system has failed, and starts the power down process.

[0061] Power-down stage: The timeout threshold for VCU waiting for the domain control high voltage power-off message is set to 30 seconds, after which the battery is forcibly cut off to ensure safe power-off of the system.

[0062] 2. Timing coordination of redundant power supply and emergency stop: When the emergency stop takes effect, the redundant power supply (power supply A / B) of the storage and charging system maintains 12V output to maintain the low-power operation of VCU and domain control module to receive the emergency stop release command; In the power-on and power-off processes, if an emergency stop signal is detected, the current timing is interrupted immediately, the emergency stop response is executed preferentially, and after the emergency stop is removed, the power-on and power-off processes are reentered.

[0063] Embodiments of the application are presented for the purpose of illustration and description, and are not intended to be exhaustive or to limit the application to the precise forms disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art. Embodiments were chosen and described in order to best explain the principles of the application and its practical application, and to thereby enable others skilled in the art to best utilize the application with various modifications as are suited to the particular use contemplated.

Claims

1. A power-on / off monitoring system based on timing logic, characterized in that... ,include: A normally open contact power switch is used to input power-on / off control signals. The power switch is connected to the chassis VCU. The chassis VCU is connected to the power switch and is used to monitor control signals and generate timing control commands. When the system is powered off, the VCU is powered by the chassis battery and maintains a low-power sleep state. The domain control module is connected to the chassis VCU via a CAN bus and is used to receive timing control commands and execute power-on or power-off procedures. The interface board connects to the domain control module and the main controller for energy storage and charging, and is used to transmit power-on or power-off signals. The monitoring module is used to monitor the status signals of each component in real time and feed them back to the chassis VCU and domain control module via CAN bus or two-wire switching. The timing control unit, integrated into the chassis VCU or domain control module, is used to coordinate the action sequence of the power switch, battery relay, domain control module, interface board and energy storage main controller according to preset timing logic.

2. A power-on / off monitoring method based on timing logic, applied to the system described in claim 1, characterized in that, Includes the following steps: S1: Monitor the long press signal of the power switch. When a long press is detected for 3 seconds, the system power-on process is triggered: the chassis VCU connects the battery relay, the interface board and the domain control module are powered on in sequence, and the domain control module sends a 370 keep-alive message to the VCU. S2: The interface board sends a power-on signal to the main controller of the energy storage and charging system. The main controller of the energy storage and charging system is powered on after the dual-line connection is controlled by the relay inside the board for 3 seconds. After the main positive and main negative relays are connected, the main controller of the energy storage and charging system feeds back the status to the domain control module. S3: The domain control module queries the high-voltage power-on status. If it is normal, it connects the power supply relay. At the same time, the chassis VCU monitors the 12V power supply and battery voltage. When the voltage is lower than 12V, the battery output is turned off after 30 seconds. S4: When the power switch is detected to be pressed and held for 5 seconds, the system power-down process is triggered: the domain control module starts the power-down logic, stops external discharge and notifies the interface board to turn off the peripheral relays, and then turns off the power supply relay and the main positive and main negative relays. S5: If the chassis VCU does not receive a high-voltage power failure message from the domain control module within a preset time, it disconnects the battery relay and completes the vehicle power-off.

3. The system according to claim 1, characterized in that, The timing control unit includes a timeout monitoring module, which is used to set the power-on response threshold of the domain control module and the power-on feedback threshold of the storage and charging master controller. When the threshold is exceeded, a command to shut down the battery relay is generated.

4. The system according to claim 1, characterized in that, The monitoring module includes a voltage monitoring unit and a relay status monitoring unit, which are used to monitor the battery voltage, 12V power output voltage, and the on / off status of the main positive and negative relays and the power supply relay in real time, and feed the feedback to the VCU and the domain control module.

5. The system according to claim 1, characterized in that, It also includes a self-resetting normally closed emergency stop switch. The emergency stop switch has three branches that are connected to the chassis VCU, the energy storage and charging controller and the interface board respectively. When the emergency stop is activated, the monitoring module provides real-time feedback of the emergency stop status to the domain control module, interrupts the power-on and power-off process and performs an emergency power-off.

6. The method according to claim 2, characterized in that, During the power-on process, the domain control module communicates with the interface board via the RS485 interface. The interface board, as the 12V power convergence point, controls the on / off timing of the power supply to peripherals.

7. The method according to claim 2, characterized in that, During the power-down process, the domain control module first performs software environmental protection, then sequentially shuts down the power supply to peripherals, the power supply to the main power source, and the high-voltage relay. After the main controller of the energy storage and charging stops sending keep-alive signals, the domain control module performs a soft power-down and feeds back the power-down status to the platform.

8. The system according to claim 1, characterized in that, The low-voltage power supply system includes an independent hot standby power supply for the energy storage and charging system and a shared hot standby power supply for the chassis system and the domain control system. The monitoring module is also used to monitor the switching status of the hot standby power supply and trigger the redundant power supply logic when the main power supply fails.

9. The method according to claim 2, characterized in that, The keep-alive signal is a message periodically sent by the domain control module. The chassis VCU confirms the power-on status of the domain control module by receiving this message. If it does not receive the message within a set time, it shuts off the battery relay.

10. The system according to claim 5, characterized in that, The emergency stop switch response logic includes: when the emergency stop is activated after pressing for 1 second, the monitoring module controls the chassis to brake, disconnects the high voltage of the energy storage and charging system, and flashes the red indicator light; when the emergency stop switch is pressed for 5 seconds or the platform sends a release command, the monitoring module sends an emergency stop release signal to each component, restoring the system to normal timing.

Images