Dual power supply switching control method and battery management system

By introducing both hard-wired signals and a communication bus into the dual-power switching control system, the problem of easy failure of a single control path is solved, achieving highly reliable and safe dual-power switching and meeting functional safety requirements.

CN121566728APending Publication Date: 2026-02-24SHENZHEN TIG TECHNOLOGY CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202511825468.9
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-12-05
Publication Date
2026-02-24

AI Technical Summary

Technical Problem

Existing dual-power switching schemes based on a single control path are at risk of functional failure due to a single point of failure, making it difficult to meet the requirements of high-level functional safety.

Method used

The system employs a dual control path design, including a first switching path based on hard-wired signals and a second switching path based on status information exchange via a communication bus. The first path serves as a redundant backup, ensuring that the communication path can automatically switch control when the hard-wired path fails.

Benefits of technology

It significantly improves the reliability and safety of the system, avoids the loss of power supply system function due to single point of failure, meets high-level functional safety standards, ensures continuous power supply under extreme failure conditions, and does not require a significant increase in hardware costs.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121566728A_ABST
    Figure CN121566728A_ABST
Patent Text Reader

Abstract

The invention provides a dual power supply switching control method and a battery management system, and relates to the technical field of battery management. The method is applied to a dual power supply switching control system, the system comprises a main power supply pack, an auxiliary power supply pack, a change-over switch and a communication bus, and the method comprises the following steps: controlling the main power supply pack or the auxiliary power supply pack to access a load bus through a first switching path based on a hard wire signal of the change-over switch; controlling the main power supply pack or the auxiliary power supply pack to access the load bus through a second switching path based on the interaction state information of the main power supply pack and the auxiliary power supply pack through the communication bus; wherein the second switching path is used as a redundant backup path of the first switching path. According to the invention, the dual control architecture composed of the first switching path based on the hard wire signal and the second switching path based on the state information is constructed, and the second path is used as the redundant backup of the first path, so that the single-point fault risk existing in the traditional single control path is fundamentally overcome; and the reliability and the safety of the system are obviously improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of battery management technology, and in particular to a dual power supply switching control method and a battery management system. Background Technology

[0002] As the electronic and electrical architecture of vehicles becomes increasingly complex, functional safety has become a key consideration in automotive design. To ensure that vehicles can maintain basic functions even in the event of a single failure, the industry has begun to adopt a dual-battery-pack redundant power supply architecture in low-voltage power systems. This architecture is designed to switch to a backup power pack when one primary power pack fails, thereby preventing the entire vehicle from being paralyzed due to low-voltage power loss.

[0003] Currently, the mainstream solutions for dual-packet switching mainly rely on a single control path. A common approach is to use switching control based on hard-wired signals, such as directly selecting the power packet to be put into operation through a mechanical switch. While this solution is simple and direct, its control link lacks redundancy. Once the switch, wiring harness, or related interface circuits fail, the entire switching function fails, and the design goal of redundant power supply cannot be achieved. Therefore, existing switching schemes based on a single control path are inherently prone to functional failure due to single-point failures, making it difficult to meet the stringent requirements of high-level functional safety for system reliability and availability. How to construct a redundant control mechanism that can tolerate single-point failures and ensure that the switching function is always available has become an urgent technical problem to be solved in this field. Summary of the Invention

[0004] The purpose of this invention is to provide a dual power supply switching control method and a battery management system to solve the technical problem mentioned in the background art: how to construct a redundant control mechanism that can tolerate single point of failure and ensure that the switching function is always available.

[0005] To achieve the above objectives, according to one aspect of the present invention, a dual-power supply switching control method is provided. The method is applied to a dual-power supply switching control system, the system including a main power supply, a secondary power supply, a switching switch, and a communication bus. The method includes:

[0006] The main power supply or the auxiliary power supply is connected to the load bus via the hard-wired signal of the switching switch through the first switching path.

[0007] The second switching path controls the connection of the main power pack or the auxiliary power pack to the load bus based on the status information exchanged between the main power pack and the auxiliary power pack via the communication bus.

[0008] The second switching path serves as a redundant backup path for the first switching path.

[0009] In one possible implementation, the step of controlling the main power supply unit or the auxiliary power supply unit to connect to the load bus based on the hard-wired signal of the switching switch via the first switching path specifically includes:

[0010] Detect the level signal generated by the switching switch;

[0011] When the main power supply detects the first specified level, it controls the switching device of the main power supply to close to connect to the load bus;

[0012] When the auxiliary power supply detects the second specified level, the switching device of the auxiliary power supply is controlled to close to connect to the load bus;

[0013] Wherein, the first specified level and the second specified level do not occur simultaneously.

[0014] In one possible implementation, the step of detecting the level signal generated by the switching switch specifically includes:

[0015] A reference level is generated by pull-up circuits installed inside the main power supply and the auxiliary power supply.

[0016] The reference level is changed by the grounding operation of the switching switch to generate either the first specified level or the second specified level.

[0017] In one possible implementation, the step of controlling the main power pack or the auxiliary power pack to connect to the load bus via the second switching path based on the status information exchanged between the main power pack and the auxiliary power pack through the communication bus specifically includes:

[0018] The status information of the main power pack and the auxiliary power pack is obtained through the communication bus;

[0019] Based on the status information, determine whether the automatic switching conditions are met;

[0020] When the automatic switching conditions are met, the corresponding power supply unit is automatically connected to the load bus.

[0021] In one possible implementation, the state information includes at least one of the following:

[0022] The switching switch status signal is used to indicate whether the switching switch is currently selecting this power pack;

[0023] The power-on status signal is used to indicate whether there is a fault in this power supply and to prohibit connection to the load bus.

[0024] Actual switch status signal, used to indicate the actual closed or open state of the switching devices in this power supply package.

[0025] In one possible implementation, the step of determining whether the automatic switching conditions are met based on the status information specifically includes:

[0026] The current power supply unit's power-on status signal has changed to a disabled state, while the power-on status signal of another power supply unit is enabled.

[0027] In one possible implementation, the step of automatically controlling the corresponding power supply unit to connect to the load bus specifically includes:

[0028] The switching devices of the current power supply unit are disconnected;

[0029] After detecting and confirming the disconnection of the actual switching status signal of the current power supply unit, a preset time is delayed;

[0030] The switching device of another power supply unit is controlled to close to connect to the load bus.

[0031] In one possible implementation, the step of determining whether the automatic switching conditions are met based on the state information further includes:

[0032] The status signal of the switch was detected to indicate that no power pack was selected;

[0033] Based on the power-on status signals of the main power supply and the auxiliary power supply, the power supply unit is determined according to the preset priority logic.

[0034] In one possible implementation, the preset priority logic specifically includes:

[0035] When both the main power supply and the auxiliary power supply have an enabled power-on status signal, the main power supply will be used for power supply.

[0036] When only one power supply unit has an enabled power-on status signal, it is determined that the power supply unit will provide power.

[0037] According to another aspect of the present invention, a battery management system is provided, including a processor and a memory, wherein the memory stores a computer program that, when executed by the processor, implements the steps of the dual power supply switching control method as described in any of the possible implementations above.

[0038] The above-described one or more technical solutions in the embodiments of this application have at least one or more of the following technical effects:

[0039] This invention provides a dual-power supply switching control method that, by constructing a dual control architecture consisting of a first switching path based on hard-wired signals and a second switching path based on status information, and using the second path as a redundant backup for the first path, fundamentally overcomes the single-point-of-failure risk inherent in traditional single-control paths, significantly improving system reliability and safety. Specifically, this solution achieves functional complementarity and backup through two heterogeneous and independent control channels. The hard-wired path provides direct, interference-resistant priority control, ensuring rapid response under normal operating conditions. The communication path, through status information exchange between power supply units, can automatically and intelligently take over control and perform switching operations when faults such as switch failure or line breakage occur in the hard-wired path. This design not only effectively avoids the loss of function of the entire redundant power supply system due to the failure of a single component, greatly reducing the risk of vehicle paralysis, but also meets the stringent requirements of high-level functional safety standards for low-voltage power supply systems through system-level fault tolerance. Meanwhile, this method automates complex scenarios such as operators failing to respond in a timely manner without significantly increasing hardware costs. It ensures timely protection of the power pack itself in extreme failure situations and ensures continuous power supply to the low-voltage load of the entire vehicle, thus achieving a balance between safety, availability and economy.

[0040] The above description is merely an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description

[0041] Figure 1 This is a schematic flowchart of a dual-power supply switching control method according to an exemplary embodiment;

[0042] Figure 2 This is a schematic diagram of the connection relationship modules of an application circuit for a dual power supply switching control method according to an exemplary embodiment.

[0043] Explanation of reference numerals in the attached diagram: 100, main power supply; 200, auxiliary power supply; 300, pull-up circuit. Detailed Implementation

[0044] To make the objectives, technical solutions, and advantages of the present invention clearer, the embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0045] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Rather, they are merely examples of systems and methods consistent with some aspects of the invention as detailed in the appended claims.

[0046] Figure 1 This is a flowchart of a dual-power supply switching control method according to an exemplary embodiment, such as... Figure 1 As shown, the method is applied to a dual-power switching control system, the system including a main power supply, a secondary power supply, a switching switch, and a communication bus, the method including:

[0047] In step S100, the main power supply or auxiliary power supply is connected to the load bus via a first switching path based on the hard-wired signal of the switching switch. Specifically, the first switching path relies on an independent physical line for signal transmission. When the switching switch is operated, a corresponding hard-wired level signal is generated, which is directly transmitted to the control terminals of the main power supply and auxiliary power supply via a dedicated wiring harness.

[0048] The control terminal is configured to continuously monitor the status of the hard-wired signal. Based on the pre-set correspondence between the signal status and the power pack switching action, the system controls the closing and opening of the corresponding charging and discharging switches in the main power pack and the auxiliary power pack, thereby enabling the connection of the specified power pack to the load bus and the disconnection of another power pack.

[0049] In this first switching path, direct, fast, and highly deterministic priority control is provided based on physical level signals. It does not rely on any complex protocols or processors, has extremely high anti-interference capabilities and reliability, and its control logic is set to have a priority response level, serving as the preferred switching control method when the system is operating normally.

[0050] In step S200, the main power pack or the auxiliary power pack is controlled to connect to the load bus based on the status information exchanged between the main power pack and the auxiliary power pack via the communication bus through the second switching path.

[0051] The second switching path serves as a redundant backup path for the first switching path.

[0052] Specifically, the second switching path depends on the data transmission channel established by the communication bus. The main power pack and the auxiliary power pack are configured to periodically or event-triggeredly exchange their respective status information via the communication bus.

[0053] The status information includes at least a status identifier indicating whether the power pack is suitable for connection to the load bus. The control logic of the second switching path is configured to automatically control the closing and opening of the corresponding charge / discharge switches in the main power pack or the auxiliary power pack based on the status information obtained interactively and according to preset decision rules, so as to perform the power pack switching operation.

[0054] The communication bus is a controller area network (CAN) bus. Both the main power supply and the auxiliary power supply are equipped with CAN controllers and transceivers, and a consistent communication baud rate and message identifier are agreed upon. The status information is encapsulated in data frames and broadcast periodically at a period of 100ms, or sent in an event-triggered manner when a sudden change in status occurs.

[0055] The second switching path serves as a redundant backup path for the first switching path. It is configured to be activated and take over the switching control when the first switching path fails or system security cannot be ensured, thus forming a redundant control mechanism that can tolerate single point of failure.

[0056] By constructing a dual control architecture consisting of a first switching path based on hard-wired signals and a second switching path based on status information, with the second path serving as a redundant backup for the first path, the single-point-of-failure risk inherent in traditional single control paths is fundamentally overcome, significantly improving system reliability and safety. Specifically, this solution achieves functional complementarity and backup through two heterogeneous and independent control channels. The hard-wired path provides direct, interference-resistant priority control, ensuring rapid response under normal operating conditions. The communication path, through status information exchange between power supply units, can automatically and intelligently take over control and perform switching operations in the event of faults such as switch failure or line breakage in the hard-wired path. This design not only effectively avoids the loss of functionality of the entire redundant power supply system due to the failure of a single component, greatly reducing the risk of vehicle paralysis, but also meets the stringent requirements of high-level functional safety standards for low-voltage power supply systems through system-level fault tolerance. Meanwhile, this method automates complex scenarios such as operators failing to respond in a timely manner without significantly increasing hardware costs. It ensures timely protection of the power pack itself in extreme failure situations and ensures continuous power supply to the low-voltage load of the entire vehicle, thus achieving a balance between safety, availability and economy.

[0057] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0058] In an exemplary embodiment, the step of controlling the main power supply unit or the auxiliary power supply unit to connect to the load bus based on the hard-wired signal of the switching switch via the first switching path specifically includes:

[0059] Detect the level signal generated by the switching switch;

[0060] When the main power supply detects the first specified level, it controls the switching device of the main power supply to close to connect to the load bus;

[0061] When the auxiliary power supply detects the second specified level, the switching device of the auxiliary power supply is controlled to close to connect to the load bus;

[0062] Wherein, the first specified level and the second specified level do not occur simultaneously.

[0063] In one specific embodiment, please refer to Figure 2 Pull-up circuits 300 are respectively provided in the power management systems of the main power pack 100 and the auxiliary power pack 200, and the pull-up circuits 300 pull up the detection port to a predetermined voltage. A single-pole double-throw switch K3 is provided at the vehicle end, and the moving end of the single-pole double-throw switch K3 is grounded.

[0064] When the single-pole double-throw switch K3 is connected to the stationary terminal K1 of the main power supply 100, the detection port ADC1 of the main power supply 100 is pulled low. At this time, the main power supply 100 detects the first specified level, i.e., low level, and controls its switching device to close to connect to the load bus. At the same time, the detection port ADC2 of the auxiliary power supply 200 remains high, and controls its switching device to remain open.

[0065] When the single-pole double-throw switch K3 is connected to the stationary terminal K2 of the auxiliary power supply 200, the detection port ADC2 of the auxiliary power supply 200 is pulled low. At this time, the auxiliary power supply 200 detects the second specified level, i.e., low level, and controls its switching device to close to connect to the load bus. At the same time, the detection port ADC1 of the main power supply 100 remains high, and controls its switching device to remain open.

[0066] By employing the aforementioned pull-up circuit design, even if the switching devices of the power packs are disconnected, causing a power loss in the vehicle's low-voltage system, each power pack can still maintain its ability to detect the status of the switching switch through its internal pull-up circuit, ensuring the reliable operation of the first switching path. The first switching path transmits signals based on physical hardwired lines, offering advantages such as strong anti-interference capability and timely response, making it the preferred switching control method for the system.

[0067] In an exemplary embodiment, the step of detecting the level signal generated by the switching switch specifically includes:

[0068] A reference level is generated by pull-up circuits installed inside the main power supply and the auxiliary power supply.

[0069] The reference level is changed by the grounding operation of the switching switch to generate either the first specified level or the second specified level.

[0070] Specifically, refer to Figure 2 The circuit connection shown is provided with pull-up circuits 300 in the power management systems of the main power supply pack 100 and the auxiliary power supply pack 200 respectively. The pull-up circuits 300 pull up their respective detection ports to a stable reference level. The moving end of the switching switch is reliably grounded, and its two stationary ends are respectively connected to the detection ports of the main power supply pack 100 and the auxiliary power supply pack 200.

[0071] When the switching switch is turned on to a certain static terminal, the reference level of the corresponding power supply detection port is pulled low through the grounding operation, thereby generating a low-level signal to indicate the switching intention; when the switching switch is turned off, the detection port is maintained at a high level through the pull-up circuit.

[0072] This detection mechanism is designed to ensure that even when each power pack is not connected to the load bus, its detection circuit can still work independently and accurately identify the state changes of the switching switch, providing a stable and reliable level signal detection capability for the first switching path.

[0073] In an exemplary embodiment, the step of controlling the main power pack or the auxiliary power pack to connect to the load bus via the second switching path based on the status information exchanged between the main power pack and the auxiliary power pack through the communication bus specifically includes:

[0074] The status information of the main power pack and the auxiliary power pack is obtained through the communication bus;

[0075] Based on the status information, determine whether the automatic switching conditions are met;

[0076] When the automatic switching conditions are met, the corresponding power supply unit is automatically connected to the load bus.

[0077] Specifically, the status information includes at least the operating status parameters and fault status indications of each power pack. In one embodiment, the determination of the automatic switching condition is based on at least one of the following situations: a serious fault occurs in the current power supply pack, or the first switching path is detected as faulty.

[0078] When the automatic switching condition is triggered, the second switching path automatically controls the corresponding normal power supply to connect to the load bus, while controlling the abnormal power supply to isolate from the load bus, thereby achieving automatic switching protection without manual intervention.

[0079] The second switching path serves as a redundant backup to the first switching path, providing automatic switching protection in case the first switching path fails or cannot ensure the safe operation of the system, thereby enhancing the reliability and security of the system.

[0080] In an exemplary embodiment, the status information includes at least one of the following:

[0081] The switching switch status signal is used to indicate whether the switching switch is currently selecting this power pack;

[0082] The power-on status signal is used to indicate whether there is a fault in this power supply and to prohibit connection to the load bus.

[0083] Actual switch status signal, used to indicate the actual closed or open state of the switching devices in this power supply package.

[0084] Specifically, the main power supply and the auxiliary power supply periodically or event-triggeredly transmit their respective status information to each other via a communication bus to establish a shared understanding of the system's operating status.

[0085] In a preferred embodiment, the switching switch status signal is obtained by detecting the level status of the corresponding power pack control port, and is used to characterize the power supply selection intention expressed by the user through operating the switching switch;

[0086] The power-on status signal is generated based on the fault detection results inside the power pack and is used to indicate whether there is a fault in the power pack that affects safe operation and requires that the load be prohibited from being connected; the actual switch status signal is obtained by monitoring the drive status or output voltage of the switching device and is used to reflect the actual connection status between the power pack and the load bus in real time.

[0087] More specifically, the power-on permission signal is generated by the battery management system within each power pack through a comprehensive fault diagnosis algorithm. This algorithm monitors cell parameters such as voltage, current, and temperature, or system parameters such as insulation resistance, bus voltage, and switching device status in real time. The battery management system compares these monitored values ​​with preset safety thresholds and performs logical judgments through a state machine. For example, if any cell voltage is detected to be lower than the undervoltage protection threshold, or the temperature is detected to be higher than the overtemperature protection threshold, or the system insulation resistance is detected to be lower than the fault threshold, the battery management system will immediately set the power-on permission signal to the disabled state.

[0088] Through the interaction of the above status information, each power pack can know the operating status of other power packs in the system and the selection status of the switching switch in real time, providing the necessary information basis for the automatic decision-making of the second switching path.

[0089] In an exemplary embodiment, the step of determining whether the automatic switching conditions are met based on the status information specifically includes:

[0090] The current power supply unit's power-on status signal has changed to a disabled state, while the power-on status signal of another power supply unit is enabled.

[0091] Specifically, when the system detects through the communication bus that the power supply unit that is supplying power to the load bus has changed from an enabled state to an disabled state, it indicates that the power supply unit needs to shut down due to an internal fault; at the same time, if the system detects that the power supply unit's enabled state signal remains enabled, it indicates that the power supply unit is in a normal working state.

[0092] At this time, the system determines that the automatic switching conditions are met, triggers the second switching path to perform the switching operation, controls the switching device of the current power supply package to open, and after ensuring electrical isolation, controls the switching device of another normal power supply package to close and connect to the load bus.

[0093] This judgment mechanism ensures that when any power supply pack fails, the system can automatically and promptly switch the load power supply to the normal backup power supply pack, realizing true redundancy protection and effectively improving the system's reliability and safety.

[0094] In an exemplary embodiment, the step of automatically controlling the corresponding power supply unit to connect to the load bus specifically includes:

[0095] The switching devices of the current power supply unit are disconnected;

[0096] After detecting and confirming the disconnection of the actual switching status signal of the current power supply unit, a preset time is delayed;

[0097] The switching device of another power supply unit is controlled to close to connect to the load bus.

[0098] Specifically, once the system determines that the automatic switching conditions are met based on the status information, it first sends a disconnect command to the current power supply unit, causing its switching devices to disconnect. The system continuously monitors the actual switching status signal, and when it confirms that the signal indicates an open state, it starts a timer.

[0099] The preset time setting is intended to ensure that the current power supply pack has been completely disconnected and that the transient processes such as the electric arc it generates have decayed, so as to avoid the current surge caused by the simultaneous connection of two power supply packs to the load bus during the switching process. The preset time can be configured according to the specific parameters of the system, and is preferably 1 second.

[0100] After the preset time is reached, the system sends a closing command to another normal power supply to control its switching device to close, thereby smoothly connecting the normal power supply to the load bus and completing the automatic switching process.

[0101] This step-by-step switching control combined with a delay mechanism effectively avoids electrical shocks during power switching, ensuring the safety and reliability of all components of the system.

[0102] In one application scenario, when the first switching path fails due to hardware malfunction, such as a damaged single-pole double-throw switch circuit, the second switching path is activated to perform automatic switching. For example, suppose the switching switch status signal indicates that the main power supply is not selected, i.e., it remains at a high level, but the main power supply is initially connected to the load bus and is supplying power normally. If a serious fault occurs in the main power supply during operation, such as cell undervoltage or overtemperature, its power-on permission signal will change to an inactive state. Subsequently, the main power supply controls its switching devices to disconnect, and after disconnection, broadcasts the power-off completion status through the actual switching status signal.

[0103] The secondary power supply unit continuously monitors the status information of the primary power supply unit via the communication bus. When the secondary power supply unit detects that the actual switching status signal of the primary power supply unit is in the off state and its own power-on permission signal is in the allowed state, the secondary power supply unit automatically controls its switching devices to close to connect to the load bus after a preset time delay, such as 1 second, thereby completing the automatic switching from the primary power supply unit to the secondary power supply unit.

[0104] In an exemplary embodiment, the step of determining whether the automatic switching conditions are met based on the state information further includes:

[0105] The status signal of the switch was detected to indicate that no power pack was selected;

[0106] Based on the power-on status signals of the main power supply and the auxiliary power supply, the power supply unit is determined according to the preset priority logic.

[0107] Specifically, when the system analyzes the interactive status information and finds that the switching status signals of both the main power supply and the auxiliary power supply indicate that they are not selected, it determines that the first switching path is in a failed state. At this time, the system automatically activates preset priority logic for power arbitration. For example, please refer to... Figure 2 When the single-pole double-throw switch K3 is in the middle position or is not connected to either K1 or K2, the detection ports ADC1 and ADC2 of the main power supply pack 100 and the auxiliary power supply pack 200 are both kept at a high level through their respective pull-up circuits. At this time, the first switching path fails because it does not receive a valid selection signal, and the system will automatically enable the arbitration logic of the second switching path to determine the power supply pack.

[0108] In an exemplary embodiment, the preset priority logic specifically includes:

[0109] When both the main power supply and the auxiliary power supply have an enabled power-on status signal, the main power supply will be used for power supply.

[0110] When only one power supply unit has an enabled power-on status signal, it is determined that the power supply unit will provide power.

[0111] Specifically, when the system detects that the switch status signal indicates that no power pack has been selected, it enters an arbitration mode based on status information. In this mode, the system obtains the power-on permission signals exchanged between the main power pack and the auxiliary power pack via the communication bus, and determines the power supply pack according to a preset priority order.

[0112] In a preferred embodiment, the priority logic is configured such that the primary power supply pack has a higher default priority. When both the primary and secondary power supply packs are in normal operation (i.e., both power-on status signals are enabled), the system determines that the primary power supply pack will provide power. When only one power supply pack is in normal operation, the system determines that the normal power supply pack will provide power, regardless of whether it is the primary or secondary power supply pack.

[0113] This priority logic design ensures that the system can still automatically and reasonably select the power supply entity in the event of failure of the first switching path, avoiding system power interruption caused by the failure of the switching switch. At the same time, the clear arbitration rules ensure the determinism and reliability of the control logic, meeting the functional safety requirements for the predictability of system behavior.

[0114] In one application scenario, when the switching status signal indicates that neither the main power supply nor the auxiliary power supply has been selected, that is, when both switching status signals are continuously at a high level, the system enters an arbitration mode based on status information.

[0115] In this mode, the main power supply and the auxiliary power supply exchange their respective power-on status signals via a communication bus. The system determines the power supply unit based on preset priority logic, specifically including the following scenarios:

[0116] When both the main power supply and the auxiliary power supply are in the enabled state, it is determined that the main power supply will provide power.

[0117] When the main power supply unit's power-on status signal is enabled while the auxiliary power supply unit is disabled, it is determined that the main power supply unit will provide power.

[0118] When the power-on permission signal of the auxiliary power supply is in the enabled state while the main power supply is in the disabled state, it is determined that the auxiliary power supply will provide power.

[0119] After determining the power supply package according to the above priority logic, the system controls the corresponding power supply package's switching device to close to connect to the load bus. During power supply, if a power supply package experiencing a serious fault occurs, its power-on permission signal will change to an inaccessible state, and the power supply package will then control its switching device to open. After the system detects and confirms the actual switching status signal of the power supply package to open, it will reselect another normal power supply package to connect to the load bus according to the aforementioned priority logic.

[0120] In an exemplary embodiment, the present invention also provides a battery management system, including a processor and a memory, the memory storing a computer program that, when executed by the processor, implements the dual power supply switching control method as described in any of the above embodiments.

[0121] In another exemplary embodiment, the present invention also provides a non-transitory computer-readable storage medium storing a computer program that, when executed by a processor, implements the dual power supply switching control method as described in any of the above embodiments.

[0122] Through the above system embodiments, the dual power supply switching control method of the present invention is embedded in the hardware system in the form of program code, forming a complete solution. This system can reliably execute the first switching path based on hard-wired signals and the second switching path based on state information, realizing redundant switching control of the dual power supplies and ensuring high availability and functional safety of the system.

[0123] It should be noted that the processor may be a microcontroller unit (MCU), a digital signal processor (DSP), a field-programmable gate array (FPGA), or other integrated circuits with data processing capabilities; the memory includes, but is not limited to, various storage devices such as read-only memory (ROM), random access memory (RAM), and flash memory.

[0124] Any aspects of this invention not described in detail are well-known to those skilled in the art.

[0125] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the invention can be implemented in other specific forms without departing from its spirit or essential characteristics. Therefore, the embodiments should be considered in all respects as exemplary and non-limiting, and the scope of the invention is defined by the appended claims rather than the foregoing description. Thus, all variations falling within the meaning and scope of equivalents of the claims are intended to be included within the present invention. No reference numerals in the claims should be construed as limiting the scope of the claims.

Claims

1. A dual-power supply switching control method, characterized in that, The method is applied to a dual power supply switching control system, the system including a main power supply unit, a secondary power supply unit, a switching switch, and a communication bus, the method comprising: The main power supply or the auxiliary power supply is connected to the load bus via the hard-wired signal of the switching switch through the first switching path. The second switching path controls the connection of the main power pack or the auxiliary power pack to the load bus based on the status information exchanged between the main power pack and the auxiliary power pack via the communication bus. The second switching path serves as a redundant backup path for the first switching path.

2. The dual-power supply switching control method according to claim 1, characterized in that, The step of controlling the main power supply or auxiliary power supply to connect to the load bus via the hard-wired signal of the switching switch through the first switching path specifically includes: Detect the level signal generated by the switching switch; When the main power supply detects the first specified level, it controls the switching device of the main power supply to close to connect to the load bus; When the auxiliary power supply detects the second specified level, the switching device of the auxiliary power supply is controlled to close to connect to the load bus; Wherein, the first specified level and the second specified level do not occur simultaneously.

3. The dual-power supply switching control method according to claim 2, characterized in that, The step of detecting the level signal generated by the switching switch specifically includes: A reference level is generated by pull-up circuits installed inside the main power supply and the auxiliary power supply. The reference level is changed by the grounding operation of the switching switch to generate either the first specified level or the second specified level.

4. The dual-power supply switching control method according to claim 1, characterized in that, The step of controlling the connection of the main power pack or the auxiliary power pack to the load bus through the second switching path based on the status information exchanged between the main power pack and the auxiliary power pack via the communication bus specifically includes: The status information of the main power pack and the auxiliary power pack is obtained through the communication bus; Based on the status information, determine whether the automatic switching conditions are met; When the automatic switching conditions are met, the corresponding power supply unit is automatically connected to the load bus.

5. The dual-power supply switching control method according to claim 4, characterized in that, The status information includes at least one of the following: The switching switch status signal is used to indicate whether the switching switch is currently selecting this power pack; The power-on status signal is used to indicate whether there is a fault in this power supply and to prohibit connection to the load bus. Actual switch status signal, used to indicate the actual closed or open state of the switching devices in this power supply package.

6. The dual-power supply switching control method according to claim 5, characterized in that, The step of determining whether the automatic switching conditions are met based on the status information specifically includes: The current power supply unit's power-on status signal has changed to a disabled state, while the power-on status signal of another power supply unit is enabled.

7. The dual-power supply switching control method according to claim 6, characterized in that, The steps for automatically controlling the corresponding power supply unit to connect to the load bus specifically include: The switching devices of the current power supply unit are disconnected; After detecting and confirming the disconnection of the actual switching status signal of the current power supply unit, a preset time is delayed; The switching device of another power supply unit is controlled to close to connect to the load bus.

8. The dual-power supply switching control method according to claim 5, characterized in that, The step of determining whether the automatic switching conditions are met based on the status information further includes: The status signal of the switch was detected to indicate that no power pack was selected; Based on the power-on status signals of the main power supply and the auxiliary power supply, the power supply unit is determined according to the preset priority logic.

9. The dual-power supply switching control method according to claim 8, characterized in that, The preset priority logic specifically includes: When both the main power supply and the auxiliary power supply have an enabled power-on status signal, the main power supply will be used for power supply. When only one power supply unit has an enabled power-on status signal, it is determined that the power supply unit will provide power.

10. A battery management system, characterized in that, It includes a processor and a memory, the memory storing a computer program that, when executed by the processor, implements the dual power supply switching control method as described in any one of claims 1 to 9.