Low-voltage intelligent power distribution system and method suitable for L3 intelligent driving

Abstract

The invention relates to a low-voltage intelligent power distribution system and method suitable for L3 intelligent driving, and belongs to the technical field of automotive electronics and electricies.The low-voltage intelligent power distribution system suitable for L3 intelligent driving comprises a DCU, a main battery PDC module and a redundant battery BMS module; the main battery PDC module comprises a first MCU, a first AFE, a first PNG isolation switch, a second PNG isolation switch, a first eFuse set, a second eFuse set and a first battery. The redundant battery BMS module comprises a second MCU, a second AFE, a Latch latch circuit and a second battery. The redundancy of the vehicle low-voltage power distribution system is effectively improved, and the requirement of L3 intelligent driving is met.

Description

Technical Field

[0001] This invention relates to the field of automotive electronic and electrical technology, and in particular to a low-voltage intelligent power distribution system and method suitable for L3 autonomous driving. Background Technology

[0002] In the current low-voltage field, the Battery Management System (BMS), as a mature battery management controller, can provide power to basic loads. However, with the hard requirements of L3 autonomous driving technology for "fail-to-run" capability (i.e., it must continue to operate to a safe state when a failure occurs), the traditional single-power distribution architecture can no longer meet the needs.

[0003] To achieve safety goals, L3 intelligent driving systems require comprehensive redundancy design for key perception, control, and execution mechanisms, including redundant steering, redundant braking, redundant perception, redundant networks, and redundant power supplies. If a single power supply design is used, a power failure will cause all electrical components to fail, directly leading to loss of control of the autonomous vehicle and posing a risk of injury or death. This fails to meet the core functional safety requirements of "no single point of failure" and "achievement of a safe state."

[0004] Existing vehicle low-voltage power distribution systems are insufficient to meet the requirements of L3 autonomous driving. Therefore, how to design vehicle low-voltage power distribution systems to meet the requirements of L3 autonomous driving has become a technical problem that needs to be solved. Summary of the Invention

[0005] In view of this, it is necessary to provide a low-voltage intelligent power distribution system and method suitable for L3 autonomous driving, so as to solve the problem that the existing vehicle low-voltage power distribution system cannot meet the needs of L3 autonomous driving.

[0006] To address the aforementioned problems, in a first aspect, the present invention provides a low-voltage intelligent power distribution system suitable for L3 autonomous driving, comprising: DCU, main battery PDC module and redundant battery BMS module; The main battery PDC module includes: First MCU, first AFE, first PNG disconnect switch, second PNG disconnect switch, first eFuse set, second eFuse set, and first battery; The redundant battery BMS module includes: Second MCU, second AFE, latch circuit and second battery; The first AFE is communicatively connected to the first battery and the first MCU; The first PNG disconnect switch is electrically connected to the first battery and the first eFuse assembly, and is communicatively connected to the first MCU. The second PNG disconnect switch is electrically connected to the first battery and the second eFuse assembly, and is communicatively connected to the first MCU and the second MCU. The first eFuse assembly is electrically connected to multiple loads and communicatively connected to the first MCU. The second eFuse assembly is electrically connected to multiple loads and communicatively connected to the first MCU. The first MCU is communicatively connected to the first AFE, the first PNG disconnect switch, the second PNG disconnect switch, the first eFuse set, the second eFuse set, the second MCU, and the DCU; The second AFE is communicatively connected to the second battery and the second MCU; The second battery is connected in parallel with the first battery via a latch circuit; The second MCU is communicatively connected to the first MCU, the second AFE, the latch circuit, and the second PNG isolating switch; The first MCU is used to control the on / off state of each eFuse in the first eFuse set based on the load demand command sent by the DCU, determine the fault information of the first battery based on the operating status information of the first battery sent by the first AFE and send it to the second MCU, and control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set and each eFuse in the second eFuse set based on the operating status information of each load sent by the first eFuse set. The second MCU is used to control the on / off state of the latch circuit and the second PNG disconnect switch based on the fault information of the first battery sent by the first MCU, and to determine the fault information of the second battery based on the operating status information of the second battery sent by the second AFE.

[0007] In one possible implementation, the load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set, including: Based on the load demand control command sent by the DCU, the loads that need power supply are determined, and the eFuses in the first eFuse set corresponding to the loads that need power supply are turned on.

[0008] In one possible implementation, controlling the on / off states of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set based on the operating status information of each load sent from the first eFuse set includes: Based on the running status information of each load sent by the first eFuse set, the fault information of each load is determined; If it is determined that there is no faulty load, the first PNG disconnect switch is turned on, the second PNG disconnect switch is turned off, each eFuse in the first eFuse set is turned on, and each eFuse in the second eFuse set is turned off. If a faulty load is detected, the first PNG isolating switch is turned on, the eFuse corresponding to the faulty load in the first eFuse set is turned off, and the other eFuses are turned on.

[0009] In one possible implementation, the control of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU includes: If the first battery is not faulty, the control latch circuit is disconnected; In the event of a fault in the first battery, the control latch circuit is activated, and the second PNG isolation switch is activated.

[0010] In one possible implementation, the second MCU is further configured to control the eFuse corresponding to the preset load in the second eFuse set to turn on after controlling the Latch latch circuit to turn on and controlling the second PNG isolation switch to turn on.

[0011] Secondly, the present invention also provides an L3 intelligent driving low-voltage intelligent power distribution method based on the above-mentioned L3 intelligent driving low-voltage intelligent power distribution system, applied to a first MCU, comprising: Receive load demand command control sent by DCU, first battery operation status information sent by first AFE, and operation status information of each load sent by first eFuse set; The load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set; Based on the operating status information of the first battery sent by the first AFE, the fault information of the first battery is determined and sent to the second MCU; Based on the operating status information of each load sent by the first eFuse set, control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set.

[0012] In one possible implementation, the load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set, including: Based on the load demand control command sent by the DCU, the loads that need power supply are determined, and the eFuses in the first eFuse set corresponding to the loads that need power supply are turned on.

[0013] In one possible implementation, controlling the on / off states of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set based on the operating status information of each load sent from the first eFuse set includes: Based on the running status information of each load sent by the first eFuse set, the fault information of each load is determined; If it is determined that there is no faulty load, the first PNG disconnect switch is turned on, the second PNG disconnect switch is turned off, each eFuse in the first eFuse set is turned on, and each eFuse in the second eFuse set is turned off. If a faulty load is detected, the first PNG isolating switch is turned on, the eFuse corresponding to the faulty load in the first eFuse set is turned off, and the other eFuses are turned on.

[0014] Thirdly, the present invention also provides an L3 intelligent driving low-voltage intelligent power distribution method executed based on the above-mentioned L3 intelligent driving low-voltage intelligent power distribution system, applied to a second MCU, comprising: Receive fault information of the first battery sent by the first MCU and operating status information of the second battery sent by the second AFE; The first MCU controls the on / off state of the latch circuit and the second PNG isolation switch based on the fault information of the first battery. The fault information of the second battery is determined based on the operating status information of the second battery sent by the second AFE.

[0015] In one possible implementation, the control of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU includes: If the first battery is not faulty, the control latch circuit is disconnected; In the event of a fault in the first battery, the control latch circuit is turned on, the second PNG isolation switch is turned on, and the eFuse corresponding to the preset load in the second eFuse set is turned on.

[0016] The beneficial effects of this invention are as follows: The low-voltage intelligent power distribution system and method for L3 intelligent driving provided by this invention realizes safe redundant power distribution under normal operation of the first battery through the main battery PDC module, and realizes load power supply when the main battery PDC module fails through the redundant battery BMS module, thereby ensuring the safe operation of the vehicle when the main battery PDC module fails. This invention effectively improves the redundancy of the vehicle's low-voltage power distribution system and meets the needs of L3 intelligent driving. Attached Figure Description

[0017] Figure 1 A schematic diagram of an embodiment of the low-voltage intelligent power distribution system for L3 autonomous driving provided by the present invention; Figure 2 A schematic flowchart of an embodiment of the low-voltage intelligent power distribution method for L3 autonomous driving provided by the present invention; Figure 3 This is a schematic flowchart of another embodiment of the low-voltage intelligent power distribution method for L3 autonomous driving provided by the present invention; Figure 4 A schematic diagram of an embodiment of the low-voltage intelligent power distribution system provided by the present invention; Figure 5 This is a schematic diagram of another embodiment of the low-voltage intelligent power distribution system provided by the present invention. Detailed Implementation

[0018] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0019] In the description of the embodiments of the present invention, unless otherwise stated, "multiple" means two or more. "And / or" describes the relationship between related objects, indicating that there can be three relationships. For example, A and / or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone.

[0020] The terms "first," "second," etc., used in the embodiments of this invention are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of technical features indicated. Therefore, a technical feature defined with "first" or "second" may explicitly or implicitly include at least one of that feature.

[0021] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of the invention. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0022] This invention provides a low-voltage intelligent power distribution system and method suitable for L3 autonomous driving, which will be described below.

[0023] Figure 1This is a schematic diagram of an embodiment of the low-voltage intelligent power distribution system for L3 autonomous driving provided by the present invention, as shown below. Figure 1 As shown, the low-voltage intelligent power distribution system suitable for L3 autonomous driving includes: DCU, main battery PDC module and redundant battery BMS module; The main battery PDC module includes: First MCU, first AFE, first PNG disconnect switch, second PNG disconnect switch, first eFuse set, second eFuse set, and first battery; The redundant battery BMS module includes: Second MCU, second AFE, latch circuit and second battery; The first AFE is communicatively connected to the first battery and the first MCU; The first PNG disconnect switch is electrically connected to the first battery and the first eFuse assembly, and is communicatively connected to the first MCU. The second PNG disconnect switch is electrically connected to the first battery and the second eFuse assembly, and is communicatively connected to the first MCU and the second MCU. The first eFuse assembly is electrically connected to multiple loads and communicatively connected to the first MCU. The second eFuse assembly is electrically connected to multiple loads and communicatively connected to the first MCU. The first MCU is communicatively connected to the first AFE, the first PNG disconnect switch, the second PNG disconnect switch, the first eFuse set, the second eFuse set, the second MCU, and the DCU; The second AFE is communicatively connected to the second battery and the second MCU; The second battery is connected in parallel with the first battery via a latch circuit; The second MCU is communicatively connected to the first MCU, the second AFE, the latch circuit, and the second PNG isolating switch; The first MCU is used to control the on / off state of each eFuse in the first eFuse set based on the load demand command sent by the DCU, determine the fault information of the first battery based on the operating status information of the first battery sent by the first AFE and send it to the second MCU, and control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set and each eFuse in the second eFuse set based on the operating status information of each load sent by the first eFuse set. The second MCU is used to control the on / off state of the latch circuit and the second PNG disconnect switch based on the fault information of the first battery sent by the first MCU, and to determine the fault information of the second battery based on the operating status information of the second battery sent by the second AFE.

[0024] It should be noted that the low-voltage intelligent power distribution system for L3 autonomous driving provided by this invention can be applied to low-voltage intelligent power distribution scenarios for vehicles, especially for vehicles that require L3 autonomous driving.

[0025] In low-voltage intelligent power distribution, the Domain Control Unit (DCU) first sends a load demand command to the first Microcontroller Unit (MCU), indicating the loads that require power. Upon receiving the load demand command, the first MCU first controls the first Protective Neutral Ground (PNG) disconnector to open. Then, based on the load demand command, it determines the loads requiring power and controls the corresponding eFuse in the first set of electronic fuses (eFuses) to open, thus completing the normal power distribution process.

[0026] During power distribution, the first eFuse set also sends the operating status information (current, voltage, temperature, etc.) of each load to the first MCU. When the first MCU determines that a faulty load exists based on the operating status information of each load, it can control the eFuse corresponding to the faulty load in the first eFuse set to disconnect, preventing the impact of the faulty load from spreading. Furthermore, if the first PNG disconnect switch or the first eFuse set fails, the second PNG disconnect switch and the second eFuse set can be used as redundant power distribution lines to ensure continuous power supply to the loads. The main battery power device control (PDC) module can ensure power distribution safety while the first battery is operating normally.

[0027] In addition, during the power distribution process, the first MCU can also obtain the operating status information (current, voltage, temperature, etc.) of the first battery from the first analog front end (AFE), determine the fault information of the first battery based on the operating status information of the first battery, and send it to the second MCU.

[0028] When the primary battery fails, the second MCU can control the latch circuit and the second PNG disconnect switch to supply power to the load via the second battery. Additionally, the second MCU can obtain the operating status information of the second battery from the second AFE and determine its fault state. In other words, the redundant battery management system (BMS) can provide load power when the primary battery distribution module (PDC) fails, thus ensuring the safe operation of the vehicle during such a failure.

[0029] In summary, the low-voltage intelligent power distribution system for L3 autonomous driving provided by the embodiments of the present invention achieves safe and redundant power distribution under normal operation of the first battery through the main battery PDC module, and achieves load power supply when the main battery PDC module fails through the redundant battery BMS module, thereby ensuring the safe operation of the vehicle when the main battery PDC module fails. The present invention effectively improves the redundancy of the vehicle's low-voltage power distribution system and meets the requirements of L3 autonomous driving.

[0030] In some embodiments of the present invention, the load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set, including: Based on the load demand control command sent by the DCU, the loads that need power supply are determined, and the eFuses in the first eFuse set corresponding to the loads that need power supply are turned on.

[0031] It should be noted that when the first MCU controls the on / off state of each eFuse in the first eFuse set according to the load demand command sent by the DCU, it can first determine the load that needs power supply according to the load demand control command sent by the DCU, and then control the eFuse in the first eFuse set corresponding to the load that needs power supply to be turned on.

[0032] In some embodiments of the present invention, controlling the on / off states of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set based on the operating status information of each load sent from the first eFuse set includes: Based on the running status information of each load sent by the first eFuse set, the fault information of each load is determined; If it is determined that there is no faulty load, the first PNG disconnect switch is turned on, the second PNG disconnect switch is turned off, each eFuse in the first eFuse set is turned on, and each eFuse in the second eFuse set is turned off. If a faulty load is detected, the first PNG isolating switch is turned on, the eFuse corresponding to the faulty load in the first eFuse set is turned off, and the other eFuses are turned on.

[0033] It should be noted that when the first MCU controls the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, and each eFuse in the first and second eFuse sets based on the operating status information of each load sent by the first eFuse set, it can first determine the fault information of each load based on the operating status information of each load sent by the first eFuse set. When it is determined that there is no faulty load, it can control the first PNG disconnect switch to be turned on, the second PNG disconnect switch to be turned off, each eFuse in the first eFuse set to be turned on, and each eFuse in the second eFuse set to be turned off. When it is determined that there is a faulty load, it can control the first PNG disconnect switch to be turned on, the eFuse in the first eFuse set corresponding to the faulty load to be turned off, and other eFuses to be turned on, so as to avoid the impact of the faulty load from spreading.

[0034] In some embodiments of the present invention, the control of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU includes: If the first battery is not faulty, the control latch circuit is disconnected; In the event of a fault in the first battery, the control latch circuit is activated, and the second PNG isolation switch is activated.

[0035] It should be noted that when the second MCU controls the opening and closing of the latch circuit and the second PNG disconnect switch based on the fault information of the first battery sent by the first MCU, if the first battery is not faulty, the latch circuit can be opened; if the first battery is faulty, the latch circuit can be opened and the second PNG disconnect switch can be opened, and the second battery can replace the first battery to supply power to the load, ensuring that the load power supply is not interrupted due to the fault of the first battery.

[0036] In some embodiments of the present invention, the second MCU is further configured to control the eFuse corresponding to the preset load in the second eFuse set to be turned on after controlling the Latch latch circuit to be turned on and controlling the second PNG isolation switch to be turned on.

[0037] It should be noted that when the first battery fails, after the second MCU controls the Latch latch circuit to turn on and the second PNG isolation switch to turn on, it can also control the eFuse in the second eFuse set corresponding to the preset load (such as steering or braking-related loads) to turn on, ensuring that the vehicle can safely drive to a stop.

[0038] Figure 2 This is a flowchart illustrating an embodiment of the low-voltage intelligent power distribution method for L3 autonomous driving provided by the present invention. The method is applied to a first MCU, such as... Figure 2 As shown, the low-voltage intelligent power distribution method of L3 intelligent driving includes: S201: Receive load demand command control sent by DCU, first battery operation status information sent by first AFE, and operation status information of each load sent by first eFuse set.

[0039] It should be noted that during the low-voltage power distribution process, the first MCU can first receive the load demand command control sent by the DCU, the first battery operation status information sent by the first AFE, and the operation status information of each load sent by the first eFuse set, providing a basis for the subsequent power distribution process.

[0040] S202. The load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set.

[0041] It should be noted that, based on the load demand command sent by the DCU, the first MCU can control the on / off state of each eFuse in the first eFuse set.

[0042] S203. Based on the operating status information of the first battery sent by the first AFE, determine the fault information of the first battery and send it to the second MCU.

[0043] It should be noted that: based on the operating status information of the first battery sent by the first AFE, the first MCU can determine the fault information of the first battery and send it to the second MCU.

[0044] S204. Based on the operating status information of each load sent by the first eFuse set, control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set.

[0045] It should be noted that: based on the operating status information of each load sent by the first eFuse set, the first MCU can determine the fault status of each load, and then control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set and each eFuse in the second eFuse set.

[0046] In summary, the low-voltage intelligent power distribution method for L3 intelligent driving provided by the embodiments of the present invention achieves safe and redundant power distribution under normal operation of the first battery through the main battery PDC module, effectively improving the redundancy of the vehicle's low-voltage power distribution system and meeting the needs of L3 intelligent driving.

[0047] In some embodiments of the present invention, the load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set, including: Based on the load demand control command sent by the DCU, the loads that need power supply are determined, and the eFuses in the first eFuse set corresponding to the loads that need power supply are turned on.

[0048] It should be noted that when the first MCU controls the on / off state of each eFuse in the first eFuse set according to the load demand command sent by the DCU, it can first determine the load that needs power supply according to the load demand control command sent by the DCU, and then control the eFuse in the first eFuse set corresponding to the load that needs power supply to be turned on.

[0049] In some embodiments of the present invention, controlling the on / off states of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set based on the operating status information of each load sent from the first eFuse set includes: Based on the running status information of each load sent by the first eFuse set, the fault information of each load is determined; If it is determined that there is no faulty load, the first PNG disconnect switch is turned on, the second PNG disconnect switch is turned off, each eFuse in the first eFuse set is turned on, and each eFuse in the second eFuse set is turned off. If a faulty load is detected, the first PNG isolating switch is turned on, the eFuse corresponding to the faulty load in the first eFuse set is turned off, and the other eFuses are turned on.

[0050] It should be noted that when the first MCU controls the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, and each eFuse in the first and second eFuse sets based on the operating status information of each load sent by the first eFuse set, it can first determine the fault information of each load based on the operating status information of each load sent by the first eFuse set. When it is determined that there is no faulty load, it can control the first PNG disconnect switch to be turned on, the second PNG disconnect switch to be turned off, each eFuse in the first eFuse set to be turned on, and each eFuse in the second eFuse set to be turned off. When it is determined that there is a faulty load, it can control the first PNG disconnect switch to be turned on, the eFuse in the first eFuse set corresponding to the faulty load to be turned off, and other eFuses to be turned on, so as to avoid the impact of the faulty load from spreading.

[0051] Figure 3 This is a flowchart illustrating another embodiment of the low-voltage intelligent power distribution method for L3 intelligent driving provided by the present invention. This method is applied to a second MCU, such as... Figure 3 As shown, the low-voltage intelligent power distribution method of L3 intelligent driving includes: S301: Receive fault information of the first battery sent by the first MCU and operating status information of the second battery sent by the second AFE.

[0052] It should be noted that during the intelligent power distribution process, the second MCU can first receive the fault information of the first battery sent by the first MCU, and the operating status information of the second battery sent by the second AFE, providing a basis for subsequent power distribution.

[0053] S302, based on the fault information of the first battery sent by the first MCU, control the on / off state of the latch circuit and the second PNG isolation switch.

[0054] It should be noted that the second MCU can control the on / off state of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU, thereby ensuring that the load is powered when the first battery fails.

[0055] S303. Determine the fault information of the second battery based on the operating status information of the second battery sent by the second AFE.

[0056] It should be noted that the second MCU can also determine the fault information of the second battery based on the operating status information of the second battery sent by the second AFE, so as to detect the fault of the second battery in a timely manner.

[0057] In summary, the low-voltage intelligent power distribution method for L3 intelligent driving provided by the embodiments of the present invention realizes load power supply when the main battery PDC module fails through the redundant battery BMS module, thereby ensuring the safe operation of the vehicle when the main battery PDC module fails. The present invention effectively improves the redundancy of the vehicle's low-voltage power distribution system and meets the requirements of L3 intelligent driving.

[0058] In some embodiments of the present invention, the control of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU includes: If the first battery is not faulty, the control latch circuit is disconnected; In the event of a fault in the first battery, the control latch circuit is turned on, the second PNG isolation switch is turned on, and the eFuse corresponding to the preset load in the second eFuse set is turned on.

[0059] It should be noted that when the second MCU controls the on / off state of the latch circuit and the second PNG disconnect switch based on the fault information of the first battery sent by the first MCU, if the first battery is not faulty, it can control the latch circuit to be disconnected; if the first battery is faulty, it can control the latch circuit to be turned on and the second PNG disconnect switch to be turned on, so that the second battery replaces the first battery to provide load power, ensuring that the load power supply is not interrupted due to the fault of the first battery. The second MCU can also control the eFuse in the second eFuse set corresponding to the preset load (such as steering and braking related loads) to be turned on, ensuring that the vehicle can be safely driven to a stop.

[0060] Combination Figure 4 As can be seen, this invention adopts a dual-loop architecture of "main battery PDC system + redundant battery BMS system". The two systems operate independently and work together. The specific composition, functional positioning and connection relationship are as follows: The main battery PDC system consists of an ASILD-grade MCU, an ASILD-grade AFE, multiple PNG disconnect switches, multiple eFuse circuits, and the main battery. As the main power supply circuit, it provides daily power for more than 90% of the vehicle's load, while also enabling battery status monitoring, load power supply control, and active fault protection.

[0061] The MCU communicates bidirectionally with the vehicle domain controller and the redundant battery management system (BMS) MCU via the CAN bus to synchronize load demand commands and system status data. The AFE is directly connected to the main battery cells via sampling lines to collect battery cell voltage and temperature signals, which are then fed back to the MCU via the SPI bus.

[0062] The PNG disconnect switch is connected in series between the positive terminal of the main battery and the input terminal of the eFuse. It is controlled by the MCU through an optocoupler isolation circuit to achieve fault isolation of the main circuit. The eFuse corresponds one-to-one with each load (such as the steering ECU, braking ECU, and lidar), and is controlled by the MCU to switch on and off. At the same time, the load current and voltage data are fed back to the MCU.

[0063] The redundant battery BMS system consists of an ASILB-level MCU, an ASILB-level AFE, a redundant battery, and a latch circuit. It serves as a redundant power supply loop, quickly activating in the event of a main circuit failure to provide stable power to critical loads. Simultaneously, the redundant battery can also continuously power the main battery, effectively expanding its capacity.

[0064] The MCU communicates with the main battery PDC system MCU via the CAN bus to receive real-time main circuit status data (such as main battery voltage, PNG switch status, and fault codes). The AFE connects to the redundant battery cells via sampling lines to collect battery status signals and feeds them back to the MCU to calculate the redundant battery SOC / SOH. The latch circuit is linked to the main circuit PNG isolating switch; when a main circuit fault occurs, it receives a trigger signal from the MCU and quickly connects the power supply channels for the redundant batteries and critical loads.

[0065] Main battery PDC system design: 1. Co-design of MCU and AFE.

[0066] Functionality: The MCU receives the main battery cell voltage and temperature data transmitted by the AFE, calculates the SOC (accuracy ±3%) using the "ampere-hour integration method + open circuit voltage correction" algorithm, and calculates the SOH (accuracy ±5%) based on the "cycle count - capacity decay" model; at the same time, the MCU receives the load demand command from the vehicle domain controller and controls the PNG disconnect switch and eFuse to achieve precise power supply to the load.

[0067] Functional safety design: The MCU adopts a dual-core lockstep architecture, with both cores executing the same instructions simultaneously and comparing the results in real time. If a deviation occurs, the fault handling mechanism is triggered immediately. The AFE has hardware-level overvoltage / undervoltage protection. When the voltage of a single battery cell exceeds a preset threshold, a fault signal is directly output to the MCU to ensure battery safety.

[0068] 2. PNG disconnect switch design.

[0069] Circuit topology: Two sets of N-channel MOSFETs are connected back to back in series, with the sources of the MOSFETs connected together, supporting overvoltage / undervoltage / overcurrent / short circuit protection disconnection functions.

[0070] Protection functions: It has overvoltage protection, undervoltage protection, overcurrent protection, and short circuit protection; in case of a fault, the MCU triggers the MOSFET to turn off within 50μs and outputs a fault signal to the vehicle domain controller; after the fault is cleared, the MCU restarts the MOSFET after a 100ms delay, realizing hardware-level fault self-recovery.

[0071] 3. eFuse design.

[0072] have The fuse feature can be configured according to the load type. The parameters automatically disconnect the load channel when the product of the square of the load current and time exceeds a threshold; it also supports real-time current sampling and voltage sampling, and the data is fed back to the MCU via the I2C bus.

[0073] Constant power channel design: The eFuse's constant power channel is independent of the main circuit control. Even if the main circuit is powered off, it can still supply power to critical diagnostic units such as the fault memory and wake-up module, meeting the functional safety requirements for fault storage. Current detection: High-precision unidirectional current detection is achieved through the SPI interface and an external high-side shunt; undervoltage shutdown is supported; short-circuit unlocking is configured via SPI. Linear protection, overheat shutdown, etc.

[0074] Design of a redundant battery BMS system.

[0075] Basic Function Design: Adopting the classic "MCU+AFE" architecture, it is fully compatible with traditional ASILB-level BMS. The AFE collects the voltage, current, and temperature of the redundant battery cells. Based on this data, the MCU implements undervoltage protection (UVP), overvoltage protection (OVP), short-circuit protection, and SOC / SOH calculations to ensure that the redundant batteries are in normal standby condition.

[0076] Redundant linkage logic design: The redundant battery BMS system MCU receives status messages from the main battery PDC system in real time via the CAN bus (sending cycle 10ms). When no message is received for 3 consecutive cycles, or when a "main circuit fault" message is received, the latch circuit is immediately triggered to turn on the redundant PNG switch, and the redundant battery supplies power to the critical load. At the same time, the MCU sends a "redundant circuit engaged" message to the vehicle domain controller to trigger the vehicle degraded driving strategy or safe parking process.

[0077] Combination Figure 5 Here, the specific workflow of the system includes: 1. Normal working mode.

[0078] After the system is powered on, the main battery PDC system MCU completes initialization, controls the PNG isolation switch to turn on, and closes the corresponding eFuse according to the load demand command of the vehicle domain controller, so that the main battery supplies power to all loads; after the redundant battery BMS system MCU completes initialization, it controls the redundant PNG switch to turn off and enters a low-power standby state, with only the AFE and CAN modules remaining operational.

[0079] The main circuit MCU collects the voltage, current, and temperature data of each eFuse in real time. If the data is normal, it sends a "main circuit normal" message to the vehicle domain controller via the CAN bus. If a minor fault such as overcurrent or overtemperature is detected, the corresponding eFuse is immediately shut down, a fault code is reported, and the backup load channel is started to ensure that the load power supply is not interrupted.

[0080] 2. Fault operation mode.

[0081] When a serious fault occurs in the main circuit, the main circuit MCU immediately triggers the fault handling mechanism: shuts down all eFuses; sends a "main circuit fault" message via the CAN bus; and outputs a hardware trigger signal to the latch circuit of the redundant battery BMS system.

[0082] After receiving a fault signal, the redundant battery BMS system MCU controls the redundant PNG switch to turn on within 100ms, and the redundant battery supplies power to the critical load. At the same time, the MCU sends a "redundant loop activation" message to the vehicle domain controller. The vehicle then follows a preset strategy: if it is in high-speed operation, it triggers degraded driving and guides the vehicle to the emergency lane; if it is in low-speed operation, it directly triggers the safe stopping procedure.

[0083] 3. Fault recovery mode.

[0084] After the main circuit fault is cleared, the main circuit MCU sends a "main circuit restored" message to the redundant battery BMS system via the CAN bus. The redundant circuit MCU controls the redundant PNG switch to open and the latch circuit to reset. The main circuit MCU closes the eFuse again, the main battery resumes power supply to all loads, and the system returns to normal operating mode.

[0085] The main circuit MCU automatically stores fault records, including fault type, occurrence time, recovery time, and voltage / current data at the time of the fault, in non-volatile memory for easy later diagnosis and maintenance.

[0086] This system is powered by a dual-battery system, with a highly integrated main battery and flexible load configuration. The PNG, acting as an isolation element, is a multi-group bidirectional MOS design with overvoltage / undervoltage / overcurrent / short-circuit protection. The eFuse section provides a constant-current path. The system features multiple redundant power supplies for safe loads, meeting ASILD functional safety standards. All load channels have diagnostic capabilities, monitoring voltage, current, and temperature information in real time to prevent risks. Furthermore, current-limiting circuits are designed at both ends of the back-to-back MOSFETs to achieve active balancing and prevent large circulating currents. PACK1+ and PACK2+ are directly connected, and PACK1- and PACK2- are directly connected, essentially enabling two battery packs to be mutually charged, allowing the main battery and redundant batteries to charge each other.

[0087] The low-voltage intelligent power distribution system and method suitable for L3 autonomous driving provided by the present invention have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A low-voltage intelligent power distribution system suitable for L3 autonomous driving, characterized in that, include: DCU, main battery PDC module and redundant battery BMS module; The main battery PDC module includes: First MCU, first AFE, first PNG disconnect switch, second PNG disconnect switch, first eFuse set, second eFuse set, and first battery; The redundant battery BMS module includes: Second MCU, second AFE, latch circuit and second battery; The first AFE is communicatively connected to the first battery and the first MCU; The first PNG disconnect switch is electrically connected to the first battery and the first eFuse assembly, and is communicatively connected to the first MCU. The second PNG disconnect switch is electrically connected to the first battery and the second eFuse assembly, and is communicatively connected to the first MCU and the second MCU. The first eFuse assembly is electrically connected to multiple loads and communicatively connected to the first MCU. The second eFuse assembly is electrically connected to multiple loads and communicatively connected to the first MCU. The first MCU is communicatively connected to the first AFE, the first PNG disconnect switch, the second PNG disconnect switch, the first eFuse set, the second eFuse set, the second MCU, and the DCU; The second AFE is communicatively connected to the second battery and the second MCU; The second battery is connected in parallel with the first battery via a latch circuit; The second MCU is communicatively connected to the first MCU, the second AFE, the latch circuit, and the second PNG isolating switch; The first MCU is used to control the on / off state of each eFuse in the first eFuse set based on the load demand command sent by the DCU, determine the fault information of the first battery based on the operating status information of the first battery sent by the first AFE and send it to the second MCU, and control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set and each eFuse in the second eFuse set based on the operating status information of each load sent by the first eFuse set. The second MCU is used to control the on / off state of the latch circuit and the second PNG disconnect switch based on the fault information of the first battery sent by the first MCU, and to determine the fault information of the second battery based on the operating status information of the second battery sent by the second AFE.

2. The low-voltage intelligent power distribution system suitable for L3 autonomous driving according to claim 1, characterized in that, The load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set, including: Based on the load demand control command sent by the DCU, the loads that need power supply are determined, and the eFuses in the first eFuse set corresponding to the loads that need power supply are turned on.

3. The low-voltage intelligent power distribution system suitable for L3 autonomous driving according to claim 1, characterized in that, The control of the on / off states of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set based on the operating status information of each load sent from the first eFuse set includes: Based on the running status information of each load sent by the first eFuse set, the fault information of each load is determined; If it is determined that there is no faulty load, the first PNG disconnect switch is turned on, the second PNG disconnect switch is turned off, each eFuse in the first eFuse set is turned on, and each eFuse in the second eFuse set is turned off. If a faulty load is detected, the first PNG isolating switch is turned on, the eFuse corresponding to the faulty load in the first eFuse set is turned off, and the other eFuses are turned on.

4. The low-voltage intelligent power distribution system suitable for L3 autonomous driving according to claim 1, characterized in that, The control of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU includes: If the first battery is not faulty, the control latch circuit is disconnected; In the event of a fault in the first battery, the control latch circuit is activated, and the second PNG isolation switch is activated.

5. The low-voltage intelligent power distribution system suitable for L3 autonomous driving according to claim 4, characterized in that, The second MCU is also used to control the eFuse corresponding to the preset load in the second eFuse set after controlling the Latch latch circuit to turn on and controlling the second PNG isolation switch to turn on.

6. A low-voltage intelligent power distribution method for L3 autonomous driving, executed based on the L3 autonomous driving low-voltage intelligent power distribution system according to any one of claims 1 to 5, characterized in that, Applied to the first MCU, including: Receive load demand command control sent by DCU, first battery operation status information sent by first AFE, and operation status information of each load sent by first eFuse set; The load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set; Based on the operating status information of the first battery sent by the first AFE, the fault information of the first battery is determined and sent to the second MCU; Based on the operating status information of each load sent by the first eFuse set, control the on / off state of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set.

7. The low-voltage intelligent power distribution method for L3 autonomous driving according to claim 6, characterized in that, The load demand command sent by the DCU controls the on / off state of each eFuse in the first eFuse set, including: Based on the load demand control command sent by the DCU, the loads that need power supply are determined, and the eFuses in the first eFuse set corresponding to the loads that need power supply are turned on.

8. The low-voltage intelligent power distribution method for L3 autonomous driving according to claim 6, characterized in that, The control of the on / off states of the first PNG disconnect switch, the second PNG disconnect switch, each eFuse in the first eFuse set, and each eFuse in the second eFuse set based on the operating status information of each load sent from the first eFuse set includes: Based on the running status information of each load sent by the first eFuse set, the fault information of each load is determined; If it is determined that there is no faulty load, the first PNG disconnect switch is turned on, the second PNG disconnect switch is turned off, each eFuse in the first eFuse set is turned on, and each eFuse in the second eFuse set is turned off. If a faulty load is detected, the first PNG isolating switch is turned on, the eFuse corresponding to the faulty load in the first eFuse set is turned off, and the other eFuses are turned on.

9. A low-voltage intelligent power distribution method for L3 autonomous driving, executed based on the L3 autonomous driving low-voltage intelligent power distribution system according to any one of claims 1 to 5, characterized in that, Applied to the second MCU, including: Receive fault information of the first battery sent by the first MCU and operating status information of the second battery sent by the second AFE; The first MCU controls the on / off state of the latch circuit and the second PNG isolation switch based on the fault information of the first battery. The fault information of the second battery is determined based on the operating status information of the second battery sent by the second AFE.

10. The low-voltage intelligent power distribution method for L3 autonomous driving according to claim 9, characterized in that, The control of the latch circuit and the second PNG isolation switch based on the fault information of the first battery sent by the first MCU includes: If the first battery is not faulty, the control latch circuit is disconnected; In the event of a fault in the first battery, the control latch circuit is turned on, the second PNG isolation switch is turned on, and the eFuse corresponding to the preset load in the second eFuse set is turned on.

Images