An emergency safety evacuation system and method for new energy operation vehicles

Abstract

This invention relates to the field of new energy vehicle technology, and discloses an emergency safety evacuation system and method for new energy vehicles. The system includes a monitoring module for acquiring fault status signals of the power battery pack; a stabilization support module, mounted on the vehicle chassis, with extended and retracted states supporting the ground; a safety interlock module connected to the vehicle's emergency stop circuit, for outputting an emergency stop feedback signal characterizing the current state of the emergency stop circuit; and a control module connected to the monitoring module, stabilization support module, and safety interlock module. The control module outputs a forced evacuation signal when the fault status signal indicates a preset severe fault level and the emergency stop feedback signal indicates a non-emergency stop triggered state. In the face of severe faults such as battery thermal runaway, the system can completely bypass the stringent preconditions required for conventional manual retraction and directly issue a forced evacuation signal.

Description

Technical Field

[0001] This invention relates to the technical field of new energy operation vehicles, and in particular to an emergency safety evacuation system and method for new energy operation vehicles. Background Technology

[0002] During operation, new energy work vehicles typically utilize a stabilizing support mechanism mounted on the chassis to achieve overall vehicle support and posture stability, meeting the needs of lifting, loading, unloading, transporting, maintenance, or other fixed-point operations. When these vehicles are in operation, the stabilizing support mechanism is usually in an extended support position, partially or completely unloading the wheels to improve stability and safety during operation.

[0003] However, the power battery packs of new energy vehicles may experience serious malfunctions such as thermal runaway, insulation abnormalities, over-temperature alarms, or high-voltage circuit failures under extreme operating conditions. If such malfunctions occur while the vehicle is in the extended working state with the support mechanism extended, and the support mechanism cannot be retracted in time to restore the vehicle to a movable or towable state, the malfunctioning vehicle may remain in the work area for an extended period, increasing the difficulty of on-site handling and safety risks.

[0004] The retraction of the support mechanism typically relies on manual operation and often requires multiple interlocking conditions to be met before it can be activated, such as resetting the working device, confirming the parking status, or manually inputting a retraction command. In the event of a sudden malfunction, operators may find it difficult to complete the corresponding operations in a timely manner due to the urgency of the situation. Furthermore, when a severe failure of the power battery causes the high-voltage power supply circuit to disconnect or fail, the conventional actuator may also be unable to complete the retraction of the support mechanism due to power interruption, thus affecting the rapid evacuation of the vehicle. Summary of the Invention

[0005] In view of the problem that existing new energy operation vehicles rely heavily on manual operation and high-voltage power supply for the retraction of the support structure when the power battery fails, making it difficult for the vehicle to be evacuated in a timely manner, this invention is proposed.

[0006] Therefore, the purpose of this invention is to provide an emergency safety evacuation system and method for new energy operation vehicles, which automatically controls the retraction of the support structure when the power battery malfunctions and the safety interlock conditions are met, and completes emergency drive through auxiliary power supply when high-voltage power supply is unavailable, so that the vehicle can be restored to a mobile or towable state.

[0007] To solve the above-mentioned technical problems, the present invention provides the following technical solution: an emergency safety evacuation system for new energy operation vehicles, comprising a monitoring module for acquiring fault status signals of the power battery pack; a stabilizing support module, installed on the vehicle chassis, having an extended state supporting the ground and a retracted state detached from the ground; a safety interlock module, connected to the vehicle's emergency stop circuit, for outputting an emergency stop feedback signal characterizing the current state of the emergency stop circuit; and a control module, respectively connected to the monitoring module, the stabilizing support module, and the safety interlock module; wherein, when the fault status signal indicates a preset severe fault level and the emergency stop feedback signal indicates a non-emergency stop triggered state, the control module outputs a forced evacuation signal to drive the stabilizing support module to switch from the extended state to the retracted state.

[0008] As a preferred embodiment of the emergency safety evacuation system for new energy operation vehicles described in this invention, the control module is further connected to an operation mode switching switch for switching between driving mode and operation mode; the forced evacuation logic is activated only when the operation mode switching switch is in operation mode.

[0009] As a preferred embodiment of the emergency safety evacuation system for new energy vehicles described in this invention, the severe fault level includes a level three fault code output by the monitoring module and / or a battery temperature value detected by the monitoring module that is higher than a preset temperature threshold.

[0010] As a preferred embodiment of the emergency safety evacuation system for new energy vehicles described in this invention, the stabilization support module includes a hydraulic actuator and an emergency drive unit. The hydraulic actuator includes a hydraulic pump and a hydraulic cylinder connected to the support leg. The emergency drive unit includes an emergency motor and an emergency relay. The emergency motor is driven by the hydraulic pump, and the control terminal of the emergency relay is connected to the control module. The control module outputs the forced evacuation signal to close the emergency relay and connect the power supply circuit of the emergency motor.

[0011] As a preferred embodiment of the emergency safety evacuation system for new energy vehicles described in this invention, the hydraulic actuator further includes an electromagnetic directional valve; while the control module outputs the forced evacuation signal, it drives the electromagnetic directional valve to switch to the oil circuit position that allows oil to enter the rod chamber of the hydraulic cylinder.

[0012] As a preferred embodiment of the emergency safety evacuation system for new energy vehicles described in this invention, the control module includes: a communication interface circuit for connecting to the monitoring module via a CAN bus to parse fault codes and temperature data in the fault status signal; a digital input interface for acquiring the level status of the emergency stop feedback signal; and a logic processing circuit configured to perform a logical AND operation on the severe fault level and the emergency stop feedback signal.

[0013] As a preferred embodiment of the emergency safety evacuation system for new energy operation vehicles described in this invention, it further includes: an audible and visual alarm module connected to the control module; when the control module detects that the fault status signal indicates a warning level, it only drives the audible and visual alarm module to work; when the forced evacuation logic is met, it simultaneously drives the audible and visual alarm module and the stability support module to work.

[0014] Another object of the present invention is to provide an emergency safe evacuation method, wherein: it includes, Acquire fault status signals of the power battery pack; Determine whether the fault status signal meets the criteria for a severe fault; If satisfied, then check whether the emergency stop feedback signal is in a non-emergency stop state; When a severe fault condition is met and emergency stop is not triggered, a forced evacuation signal is output. Activate the emergency drive unit to retract the stabilizing support module from the extended state to the retracted state.

[0015] As a preferred embodiment of the emergency safety evacuation method described in this invention, verifying whether the emergency stop feedback signal is in a non-emergency stop state includes, The digital input interface level of the detection control module; If the emergency stop feedback input port is determined to be at a high level, it is determined that the emergency stop circuit is closed and has not been triggered, and the forced evacuation signal can be output. If the signal is determined to be low, the emergency stop circuit is determined to be in a triggered or failed state, and the output of the forced evacuation signal is prohibited.

[0016] In a preferred embodiment of the emergency safe evacuation method described in this invention, the judgment logic for the severe fault condition is as follows: Analyze the fault level field and temperature field in the fault status signal; If the fault level field indicates a level three fault, or the value of the temperature field is greater than a preset temperature threshold, then the condition for a serious fault is determined to be met.

[0017] As a preferred embodiment of the emergency safety evacuation method described in this invention, after outputting the forced evacuation signal, it further includes: Check whether the high-voltage power supply circuit is disconnected or in a faulty state; When the high-voltage power supply circuit is detected to be disconnected or in a failure state, a relay drive signal is output to the control terminal of the emergency relay to make the emergency relay close and connect the main power supply circuit between the vehicle's own low-voltage auxiliary battery and the emergency motor. The emergency motor drives the hydraulic pump.

[0018] The beneficial effects of this invention are as follows: In the event of severe faults such as thermal runaway, overheating, or high-voltage circuit abnormalities in the power battery, the system can bypass multiple interlocking prerequisites required for the conventional manual retraction of the support structure, directly output a forced evacuation signal, and automatically control the retraction of the support legs. This allows the vehicle to quickly release its ground support and return to a mobile or towable state, facilitating timely transfer to a safe area. The stable support module is equipped with an emergency drive unit powered by a low-voltage auxiliary battery, ensuring its operation is independent of continuous power supply from the high-voltage side of the power battery. Even if the high-voltage power supply circuit is disconnected or fails, the control module can still drive the emergency motor to build up pressure and, in conjunction with the electromagnetic reversing valve, control the hydraulic cylinder to complete the retraction of the support structure. The audible and visual alarm module is used to prompt manual investigation in the early warning state. When the forced evacuation logic is met, a high-level alarm is simultaneously issued to alert nearby personnel to take timely evacuation, thereby improving the efficiency and safety of on-site handling in severe fault conditions. Attached Figure Description

[0019] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0020] Figure 1 This is a structural block diagram of the emergency safety evacuation system for new energy operation vehicles of the present invention.

[0021] Figure 2 This is the electrical wiring diagram of the control module and peripheral interfaces of the emergency safety evacuation system for new energy vehicles of the present invention.

[0022] Figure 3 This is the electrical wiring diagram of the emergency drive unit of the emergency safety evacuation system for new energy vehicles of the present invention.

[0023] Figure 4 This is a block diagram illustrating the forced evacuation logic principle of the emergency safety evacuation system for new energy vehicles of the present invention.

[0024] Figure 5 This is a complete logic control diagram of the emergency safety evacuation system for new energy vehicles of the present invention, which executes the outrigger retraction action.

[0025] Figure 6 This is a flowchart of the emergency safe evacuation method of the present invention.

[0026] In the diagram: 100, Monitoring module; 200, Stabilization support module; 201, Hydraulic actuator; 202, Emergency drive unit; 300, Safety interlock module; 400, Control module; 401, Operation mode switching switch; 402, Communication interface circuit; 403, Digital input interface; 404, Logic processing circuit; 500, Audible and visual alarm module. Detailed Implementation

[0027] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0028] Many specific details are set forth in the following description in order to provide a full understanding of the invention. However, the invention may also be practiced in other ways different from those described herein, and those skilled in the art can make similar extensions without departing from the spirit of the invention. Therefore, the invention is not limited to the specific embodiments disclosed below.

[0029] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The phrase "in one embodiment" appearing in different places in this specification does not necessarily refer to the same embodiment, nor is it a single or selective embodiment that is mutually exclusive with other embodiments.

[0030] Secondly, the present invention is described in detail with reference to the schematic diagrams. When detailing the embodiments of the present invention, for ease of explanation, the cross-sectional views illustrating the device structure may be partially enlarged, not according to the usual scale. Furthermore, the schematic diagrams are merely examples and should not limit the scope of protection of the present invention. In addition, actual fabrication should include three-dimensional spatial dimensions of length, width, and depth.

[0031] Example 1

[0032] Reference Figure 1 This is the first embodiment of the present invention, which provides an emergency safety evacuation system for new energy operation vehicles. The device includes a monitoring module 100 for acquiring fault status signals of the power battery pack; a stabilization support module 200, which is installed on the vehicle chassis and has an extended state supporting the ground and a retracted state detached from the ground; a safety interlock module 300, which is connected to the vehicle's emergency stop circuit and is used to output an emergency stop feedback signal characterizing the current state of the emergency stop circuit; and a control module 400, which is connected to the monitoring module 100, the stabilization support module 200, and the safety interlock module 300 respectively.

[0033] When the fault status signal indicates a preset severe fault level and the emergency stop feedback signal indicates a non-emergency stop triggered state, the control module 400 outputs a forced evacuation signal to drive the stabilization support module 200 to switch from the extended state to the retracted state.

[0034] The monitoring module 100 monitors the safety status of the power battery pack in real time. When a safety hazard occurs, the power battery pack generates a fault status signal, which the monitoring module 100 then monitors and outputs. The stabilization support module 200 extends to anchor the vehicle to the ground during operation; in its retracted state, it allows the vehicle to be towed away from the site by external power. The safety interlock module 300 acts as a safety barrier to prevent malfunctions. Its feedback of a "non-emergency stop triggered state" means that the on-site operator has not activated the vehicle's emergency stop switch, and the system allows for automatic evacuation protection actions.

[0035] refer to Figure 4 and Figure 5 This demonstrates the dual triggering paths for the system to execute the outrigger retraction action. Small circles represent NOT gates, AND gates, and OR gates. TON_1 represents an on-delay timer; the signal is emitted only after a 1-second delay upon receiving it. Specifically, it includes a regular manual operation path and an emergency forced evacuation path. Figure 5 As shown in the upper middle section, in non-emergency situations, if the operator wants to manually retract the outriggers, the control module 400 first verifies the action request through a logical AND gate. The signal is only allowed to pass if a retraction request is received, but no extension request is received, no multi-action alarm occurs, and no emergency stop feedback is triggered. Then, it enters the anti-accidental touch delay judgment, requiring the driver to press and hold for one second to allow the outrigger retraction action signal to be issued.

[0036] Meanwhile, the control module 400 verifies the vehicle's posture via another AND gate. This AND gate only outputs a vehicle safety release signal when no lifting alarm occurs, the working device is not activated, and the handbrake is engaged. Furthermore, the system includes an OR gate, allowing the input of a protection release signal to replace the aforementioned vehicle posture verification under specific operating conditions.

[0037] The request signal after the above delay judgment is passed, together with the signal for verifying the vehicle attitude, enters a comprehensive logic AND gate. Only after all of them are satisfied can the normal leg retraction command be output.

[0038] like Figure 5 As shown below, the control module 400 is configured with forced evacuation logic to deal with sudden dangers. This logic consists of an AND gate with two inputs. The first input receives a severe fault level signal from the monitoring module 100; the second input receives an emergency stop feedback signal from the safety interlock module 300, and this input has a NOT property.

[0039] When a serious fault level signal is triggered due to a dangerous situation such as thermal runaway of the power battery, and the operator has not pressed the emergency stop switch, the AND gate outputs a valid signal, which directly triggers the outrigger retraction action through the rightmost OR gate. This path, as the highest priority underlying protection, bypasses the restrictions of all normal operating states.

[0040] In this embodiment, the monitoring module 100 can be implemented using a battery management system or a monitoring unit communicatively connected to the battery management system. It is used to collect fault codes, temperature data, and / or high-voltage status data of the power battery pack, and output a fault status signal characterizing the current safety status of the power battery pack to the control module 400. The safety interlock module 300 can be implemented using a feedback detection unit connected to the vehicle's emergency stop circuit. Its output is electrically connected to the input of the control module 400, and it is used to convert the conduction state of the emergency stop circuit into an emergency stop feedback signal and send it to the control module 400. The control module 400 can be implemented using a controller, PLC, or other control unit with logic processing capabilities. Its inputs are connected to the monitoring module 100 and the safety interlock module 300, respectively, and its output is connected to the execution control terminal of the stability support module 200. It is used to generate a forced evacuation signal based on the fault status signal and the emergency stop feedback signal.

[0041] In one specific embodiment, the stabilizing support module 200 includes a support leg, a hydraulic cylinder connected to the support leg, a hydraulic pump for driving the hydraulic cylinder, and an electromagnetic directional valve for controlling the flow of hydraulic oil. The stabilizing support module 200 may also include an emergency motor and an emergency relay. The control terminal of the emergency relay is electrically connected to the output terminal of the control module 400, the emergency motor is driven by the hydraulic pump, and the control terminal of the electromagnetic directional valve is electrically connected to the output terminal of the control module 400. After outputting a forced evacuation signal, the control module 400 controls the emergency relay to close, connecting the power supply circuit of the emergency motor to drive the hydraulic pump; and controls the electromagnetic directional valve to switch to the oil circuit position corresponding to the retracted support leg, allowing the pressurized oil output from the hydraulic pump to enter the corresponding working chamber of the hydraulic cylinder, thereby driving the hydraulic cylinder and causing the support leg to switch from the extended state to the retracted state. Therefore, the forced evacuation signal is not merely a logical control signal, but rather, through the electrical connection between the control module 400 and the emergency relay and electromagnetic directional valve, ultimately acts on the hydraulic cylinder and support leg to complete the physical retraction of the stabilizing support module 200.

[0042] During operation, when the stabilization support module 200 of the new energy vehicle is in the extended state, the monitoring module 100 and the safety interlock module 300 transmit real-time signals to the control module 400. If a sudden hazard occurs to the power battery pack, causing the fault status signal output by the monitoring module 100 to reach a preset severe fault level, the forced evacuation logic within the control module 400 will immediately verify the emergency stop feedback signal. If the verification result indicates a non-emergency stop triggered state, the control module 400 will issue a forced evacuation signal to the stabilization support module 200. In response to this signal, the stabilization support module 200 automatically switches from the extended state to the retracted state. At this time, the new energy vehicle experiencing a severe malfunction is released from its ground support constraints, and the towing equipment can quickly transfer it to a safe area, thus achieving emergency safe evacuation in dangerous situations.

[0043] Example 2

[0044] Reference Figures 1-5 This is the second embodiment of the present invention. The difference between this embodiment and the first embodiment is that the control module 400 is also connected to a work mode switching switch 401 for switching between driving mode and work mode; the forced evacuation logic is only activated when the work mode switching switch 401 is in work mode.

[0045] Severe fault levels include Level 3 fault codes output by the monitoring module 100 and / or battery temperature values ​​detected by the monitoring module 100 that are higher than preset temperature thresholds.

[0046] The stabilizing support module 200 includes a hydraulic actuator 201 and an emergency drive unit 202. The hydraulic actuator 201 includes a hydraulic pump and a hydraulic cylinder connected to the support leg. The emergency drive unit 202 includes an emergency motor and an emergency relay. The emergency motor is driven by the hydraulic pump, and the control terminal of the emergency relay is connected to the control module 400. The control module 400 outputs a forced evacuation signal to close the emergency relay and connect the power supply circuit of the emergency motor.

[0047] The hydraulic actuator 201 also includes a solenoid directional valve; while the control module 400 outputs a forced withdrawal signal, it drives the solenoid directional valve to switch to the oil circuit position that allows oil to enter the rod chamber of the hydraulic cylinder.

[0048] The emergency drive unit 202 includes an independent emergency motor and an emergency relay controlled by an electromagnetic coil. During normal operation power outages or when the high-voltage power battery is disconnected, this unit relies on the vehicle's low-voltage auxiliary battery for power. When the forced evacuation signal output by the control module 400 arrives, the coil of the emergency relay is energized and engages, causing its main contacts to close. The main contacts then connect the main power supply circuit between the low-voltage auxiliary battery and the emergency motor, driving the emergency motor to rotate at high speed.

[0049] The mechanical and fluid circuit of the hydraulic actuator 201 includes a hydraulic pump, a solenoid directional valve, an oil tank, and hydraulic cylinders built into the support legs. The output shaft of the emergency motor is mechanically connected to the hydraulic pump. When the emergency motor rotates, it drives the hydraulic pump to draw hydraulic oil from the oil tank and pressurize it to output high-pressure oil to the main oil circuit.

[0050] Simultaneously, the forced withdrawal signal output by the control module 400 synchronously excites the electromagnet of the solenoid directional valve, driving its internal valve core to move to the retracted position. In this position, the high-pressure oil output by the hydraulic pump is guided through the internal flow channel of the solenoid directional valve and injected into the rod chamber of the hydraulic cylinder; at the same time, the hydraulic oil in the rodless chamber of the hydraulic cylinder is squeezed by the piston and flows smoothly back to the oil tank through the return port of the solenoid directional valve. Under the continuous hydraulic pressure of the rising rod chamber, the piston rod is forced to retract into the cylinder, thereby pulling the support leg to complete the mechanical action from the extended state to the retracted state.

[0051] The control module 400 includes a communication interface circuit 402 for connecting to the monitoring module 100 via a CAN bus to parse fault codes and temperature data in the fault status signal; a digital input interface 403 for acquiring the level status of the emergency stop feedback signal; and a logic processing circuit 404 configured to perform a logical AND operation on the severity fault level and the emergency stop feedback signal.

[0052] The communication interface circuit 402 is equipped with a CAN transceiver, such as built-in CANH and CANL differential signal pins and an isolation chip. Its main function is to convert the underlying physical differential voltage signal from the monitoring module 100 into digital messages that the control module 400 can recognize. After receiving the message, the control module 400 extracts specific fault level code fields and temperature fields, thereby achieving real-time, delay-free monitoring of the power battery's status.

[0053] In this embodiment, the fault status signal can be divided into a warning level and a severe fault level according to the severity of the fault. The warning level is used to characterize the state in which the power battery pack has shown an abnormal trend but has not yet reached the condition for triggering a forced evacuation, such as an abnormal rise in battery temperature but not reaching a preset temperature threshold, and / or a level one or two fault code output by the battery management system; the severe fault level is used to characterize the state in which the power battery pack has reached a high-risk state requiring immediate emergency evacuation, such as a level three fault code output by the battery management system, and / or a battery temperature reaching or exceeding a preset temperature threshold. The control module 400 executes different control strategies according to the level to which the fault status signal belongs: when the fault status signal is a warning level, only an alarm control signal is output; when the fault status signal is a severe fault level and the emergency stop feedback signal indicates a non-emergency stop triggering state, a forced evacuation signal is output to drive the stability support module 200 to switch from the extended state to the retracted state.

[0054] To ensure signal stability in complex electromagnetic interference environments, the digital input interface 403 employs an opto-isolation design. Its input is directly connected to the vehicle's emergency stop circuit, typically via a 24V or 12V physical hardwire in series. When the emergency stop button is not pressed, the circuit is active, and the interface acquires a high-level signal, indicating a non-emergency stop triggered state. Once the emergency stop button is pressed or the circuit is accidentally disconnected, the interface immediately acquires a low-level signal, thus providing the lowest-level hardware support for subsequent anti-maloperation logic.

[0055] The logic processing circuit 404 can be implemented by hardware logic gates or software function blocks within the microprocessor, such as the FBD logic block of a PLC. Its core configuration is a multiplexed AND gate, which, through the execution of its internal program, synchronously reads the fault flag bit parsed by the communication interface circuit 402 and the level state of the digital input interface 403. The logic processing circuit 404 outputs a high-level drive signal, i.e., a forced evacuation signal, through its output pin only when the fault signal meets the severity level and the digital input is simultaneously high.

[0056] During operation, when the operator drives the new energy vehicle to the work area, they first switch the vehicle from driving mode to working mode using the work mode switch 401. At this time, the forced evacuation logic inside the control module 400 is officially activated. This precondition is set to prevent the chassis from being accidentally triggered by occasional malfunctions during normal driving.

[0057] During operation, the control module 400 uses the CAN bus of the communication interface circuit 402 to analyze the fault level and temperature fields in the messages from the monitoring module 100 in real time. When a Level 3 fault code, representing the highest danger level, is detected, or when the battery temperature exceeds a preset temperature threshold, a severe fault level is determined. Simultaneously, the digital input interface 403 of the control module 400 continuously acquires the physical level status of the safety interlock module 300.

[0058] Once a serious fault occurs, the logic processing circuit 404 intervenes, performing a logical AND operation on the serious fault and non-emergency stop trigger states. When both conditions are met simultaneously, the control module 400 issues a forced evacuation signal.

[0059] At the hardware execution level, the forced evacuation signal is divided into two paths. One path directly drives the emergency relay of the emergency drive unit 202 to close, connecting the independent power supply circuit of the emergency motor. The emergency motor then runs at high speed and drives the hydraulic pump to establish system oil pressure. The other path simultaneously drives the solenoid directional valve in the hydraulic actuator 201 to switch directions. Under the guidance of the solenoid directional valve, the high-pressure oil output by the hydraulic pump enters the rod chamber of the hydraulic cylinder of the support leg, forcing the piston rod to retract rapidly. Through the linkage between electrical logic and hydraulic mechanics, the support leg completes the forced retraction action in a very short time, allowing the tires of the new energy vehicle to touch the ground again, thus gaining valuable rescue time for subsequent rapid towing.

[0060] The remaining structure is the same as that in Example 1.

[0061] Example 3

[0062] Reference Figure 2 This is the third embodiment of the present invention. This embodiment differs from the second embodiment in that it further includes an audible and visual alarm module 500, which is connected to the control module 400. When the control module 400 detects a fault status signal indicating a warning level, it only drives the audible and visual alarm module 500 to work. When the forced evacuation logic is met, it drives both the audible and visual alarm module 500 and the stability support module 200 to work.

[0063] The audible and visual alarm module 500 typically includes multi-color warning lights, such as a three-color indicator light containing red, yellow, and green, installed on the exterior of the vehicle's cargo compartment or on the control panel, as well as a high-decibel buzzer. The control input of the audible and visual alarm module 500 is either via a relay circuit or directly controlled by the output interface of the control module 400.

[0064] During operation, if the monitoring module 100 detects minor abnormal parameters in the power battery pack while the new energy vehicle is operating normally, such as an abnormally rising battery temperature that has not yet reached the preset temperature threshold for triggering a serious fault, or if the BMS system reports a level one or two fault code for a non-core component, the control module 400 will analyze the signal and determine it to be a warning level. In this case, the control module 400 will only output an alarm signal to the audible and visual alarm module 500, such as illuminating a yellow warning light and controlling a buzzer to sound intermittently, to alert on-site operators and allow for manual intervention. Under the warning level, the control module 400 will not trigger the retraction of the stabilization support module 200, thus preventing accidental retraction due to minor faults and ensuring normal operation.

[0065] However, if the danger persists and escalates, or in extreme situations such as sudden thermal runaway of the power battery pack, causing a sudden spike in the fault status signal, once the aforementioned forced evacuation logic is met, the control module 400 will simultaneously send a forced evacuation signal to drive the stabilization support module 200 to urgently retract its outriggers, and at the same time, drive the audible and visual alarm module 500 to enter the highest level of alarm state, such as illuminating the red warning light and controlling the buzzer to sound continuously. Through this linkage of sound, light, and mechanical actions, not only is automatic physical avoidance of the vehicle itself achieved, but it can also alert nearby workers to quickly move away from the dangerous vehicle that is about to move, thereby improving the safety of on-site personnel and equipment around the vehicle.

[0066] The remaining structure is the same as that in Example 2.

[0067] Example 4

[0068] Reference Figure 6 This is a fourth embodiment of the present invention, which differs from the previous embodiments in that it also provides an emergency safe evacuation method, wherein: it includes, Acquire fault status signals of the power battery pack; Determine whether the fault status signal meets the conditions for a severe fault. If satisfied, then check whether the emergency stop feedback signal is in a non-emergency stop state; When a severe fault condition is met and emergency stop is not triggered, a forced evacuation signal is output. The emergency drive unit 202 is activated to retract the stabilizing support module 200 from the extended state to the retracted state.

[0069] The above steps constitute a real-time cyclical monitoring mechanism. The system first captures the status and assesses the severity of the power battery pack. Upon confirming a significant safety threat, it does not immediately execute actions but instead forcibly inserts a cross-verification of the personnel's operational status. This sequence of first assessing equipment hazard and then verifying manual intervention ensures that the automatic evacuation action will never conflict with the emergency avoidance operations of on-site personnel, minimizing secondary injuries caused by equipment malfunction.

[0070] Verifying whether the emergency stop feedback signal is in a non-emergency stop state includes, The digital input interface 403 of the detection control module 400 is at a certain level. If the emergency stop feedback input port is determined to be high, it is determined that the emergency stop circuit is closed and has not been triggered, and the forced evacuation signal can be output. If the signal is determined to be low, the emergency stop circuit is determined to be in a triggered or failed state, and the output of the forced evacuation signal is prohibited.

[0071] When the system is functioning normally and no one presses the emergency stop button, the input port of the control module 400 continuously detects a high-level signal. However, if a person presses the emergency stop button and cuts off the circuit, or if an unexpected fault occurs inside the vehicle such as a broken wiring harness or a loose connection, the input port will immediately lose voltage and go low. The system uniformly interprets this low level as an emergency stop trigger or failure, and thus decisively blocks the output of the forced evacuation signal, ensuring that the vehicle remains stationary and in an absolutely safe state under any abnormal circuit conditions.

[0072] The logic for determining severe fault conditions is as follows: Analyze the fault level and temperature fields in the fault status signal; If the fault level field indicates a level 3 fault, or the temperature field value is greater than the preset temperature threshold, then the condition for a serious fault is met.

[0073] In this system, the judgment logic manifests as a parallel logical OR condition at the software algorithm level. The system parses message data transmitted via communication links such as the CAN bus, reading the three-level fault codes issued by the battery management system after comprehensive evaluation. These codes typically represent the highest level of alarm, such as thermal runaway or severe insulation damage. Simultaneously, the system directly monitors the physical temperature values ​​of the cells or modules. If either of these conditions is met, a severe fault condition is triggered. This redundant judgment mechanism, combining integrated code alarms and underlying physical parameter alarms, effectively avoids missed detections caused by single sensor failure or BMS communication delays, significantly improving the sensitivity and reliability of the emergency evacuation system.

[0074] After outputting the forced evacuation signal, it also includes, Check whether the high-voltage power supply circuit is disconnected or in a faulty state; When the high-voltage power supply circuit is detected to be disconnected or in a failure state, a relay drive signal is output to the control terminal of the emergency relay to make the emergency relay close and connect the main power supply circuit between the vehicle's own low-voltage auxiliary battery and the emergency motor. The emergency motor drives the hydraulic pump.

[0075] After outputting the forced evacuation signal, the control module 400 also detects the on / off status of the high-voltage power supply circuit. Specifically, the control module 400 can determine whether the high-voltage power supply circuit is in a disconnected or failed state through the high-voltage circuit feedback signal, the main contactor status signal, and / or the high-voltage bus voltage sampling signal. When it is determined that the high-voltage power supply circuit is in a disconnected or failed state, the control module 400 outputs a relay drive signal at its output terminal. The relay drive signal is input to the relay drive circuit set between the control module 400 and the emergency relay. The relay drive circuit can be implemented using a transistor drive stage, a MOS drive stage, a relay driver chip, and / or an opto-isolated drive stage. It amplifies and / or isolates the drive signal output from the control module 400, and applies the amplified drive current to the coil of the emergency relay, energizing and engaging the coil. Once engaged, the emergency relay coil physically closes or switches its main contacts, disconnecting the power supply input to the emergency motor from its original power supply branch and connecting it to the vehicle's low-voltage auxiliary battery branch, or switching it from an initially disconnected state to a conducting state with the low-voltage auxiliary battery, thus forming the main power supply circuit from the low-voltage auxiliary battery to the emergency motor. After being energized, the emergency motor drives the hydraulic pump to operate and build up hydraulic pressure, driving the hydraulic actuator 201 to retract the stabilizing support module 200. Therefore, the power supply circuit switching is triggered by the drive signal output from the control module 400 and achieved through the physical action of the emergency relay's main contacts, rather than solely through software logic definition, thus ensuring the determinism of the emergency drive execution process.

[0076] In this embodiment, the power supply circuit switching is preferably achieved through the physical contact action of the emergency relay, rather than solely through software logic definition. Specifically, after the control module 400 determines that the high-voltage power supply circuit is in a disconnected or failed state based on the high-voltage circuit feedback signal, the main contactor status signal, and / or the high-voltage bus voltage sampling signal, it outputs a relay drive signal to the control terminal of the emergency relay. The relay drive signal can be applied to both ends of the coil of the emergency relay via a transistor drive stage, a relay driver, or other level amplification interface, energizing the emergency relay coil. After the emergency relay coil is energized, it drives its main contacts to perform a mechanical action, causing the power supply input terminal of the emergency motor to be disconnected from the original power supply branch and connected to the low-voltage auxiliary battery branch of the vehicle, or to switch from an initial disconnected state to a conducting state with the low-voltage auxiliary battery, thereby forming a main power supply circuit from the low-voltage auxiliary battery to the emergency motor. After the emergency motor is energized, it drives the hydraulic pump to operate and establish hydraulic pressure, thereby driving the hydraulic actuator 201 to complete the retraction action of the stabilization support module 200. Therefore, the switching is a deterministic power supply switching process triggered by the drive signal output by the control module 400 and completed by the physical closing or switching action of the main contacts of the emergency relay.

[0077] It is important to note that the constructions and arrangements of this application shown in several different exemplary embodiments are merely illustrative. Although only a few embodiments are described in detail in this disclosure, those who consult this disclosure will readily understand that many modifications are possible (e.g., changes in the size, dimensions, structure, shape and proportion of various elements, as well as parameter values ​​(e.g., temperature, pressure, etc.), mounting arrangements, use of materials, color, orientation, etc.) without substantially departing from the novel teachings and advantages of the subject matter described in this application). For example, an element shown as integrally formed may be composed of multiple parts or elements, the position of elements may be inverted or otherwise changed, and the nature or number or position of discrete elements may be altered or changed. Therefore, all such modifications are intended to be included within the scope of the invention. The order or sequence of any process or method steps may be changed or rearranged according to alternative embodiments. Therefore, the invention is not limited to the particular embodiments but extends to a variety of modifications that still fall within the scope of the appended claims.

[0078] Furthermore, in order to provide a concise description of exemplary embodiments, not all features of actual embodiments (i.e., those features that are not relevant to the currently considered best mode for carrying out the invention, or those features that are not relevant to implementing the invention) may be omitted.

[0079] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention, and all such modifications or substitutions should be covered within the scope of the claims of the present invention.

Claims

1. An emergency safety evacuation system for new energy operation vehicles, characterized in that: include, The monitoring module (100) is used to acquire fault status signals of the power battery pack; The stabilizing support module (200) is installed on the vehicle chassis and has an extended state supporting the ground and a retracted state detached from the ground. The safety interlock module (300) is connected to the vehicle's emergency stop circuit and is used to output an emergency stop feedback signal that characterizes the current state of the emergency stop circuit. The control module (400) is connected to the monitoring module (100), the stabilization support module (200), and the safety interlock module (300) by signals respectively; When the fault status signal indicates a preset severe fault level and the emergency stop feedback signal indicates a non-emergency stop triggering state, the control module (400) outputs a forced evacuation signal to drive the stabilizing support module (200) to switch from the extended state to the retracted state. The severe fault level includes a level 3 fault code output by the monitoring module (100) and / or a battery temperature value detected by the monitoring module (100) that is higher than a preset temperature threshold. The stabilizing support module (200) includes a hydraulic actuator (201) and an emergency drive unit (202). The hydraulic actuator (201) includes a hydraulic pump and a hydraulic cylinder connected to the support leg. The emergency drive unit (202) includes an emergency motor and an emergency relay. The emergency motor is driven and connected to the hydraulic pump, and the control terminal of the emergency relay is connected to the control module (400). The control module (400) outputs the forced evacuation signal to close the emergency relay and connect the power supply circuit of the emergency motor; The control module (400) includes, The communication interface circuit (402) is used to connect to the monitoring module (100) via the CAN bus to parse the fault code and temperature data in the fault status signal; Digital input interface (403) is used to acquire the level status of emergency stop feedback signal; The logic processing circuit (404) is configured to perform a logical AND operation on the severity fault level and the emergency stop feedback signal.

2. The emergency safety evacuation system for new energy operation vehicles according to claim 1, characterized in that: The control module (400) is also connected to a work mode switching switch (401) for switching between driving mode and work mode; The forced evacuation logic is activated only when the operation mode switch (401) is in operation mode.

3. The emergency safety evacuation system for new energy operation vehicles according to claim 1 or 2, characterized in that: The hydraulic actuator (201) also includes a solenoid directional valve; While outputting the forced withdrawal signal, the control module (400) drives the electromagnetic directional valve to switch to the oil circuit position that allows oil to enter the rod chamber of the hydraulic cylinder.

4. The emergency safety evacuation system for new energy operation vehicles according to claim 1, characterized in that: It also includes, An audible and visual alarm module (500) is connected to the control module (400). When the control module (400) detects that the fault status signal indicates a warning level, it only drives the audible and visual alarm module (500) to work; when the forced evacuation logic is met, it drives both the audible and visual alarm module (500) and the stability support module (200) to work.

5. An emergency safety evacuation method, applicable to the emergency safety evacuation system according to any one of claims 1 to 4, characterized in that: include, Acquire fault status signals of the power battery pack; Determine whether the fault status signal meets the criteria for a severe fault; If satisfied, then check whether the emergency stop feedback signal is in a non-emergency stop state; When a severe fault condition is met and emergency stop is not triggered, a forced evacuation signal is output. The emergency drive unit (202) is activated to retract the stabilizing support module (200) from the extended state to the retracted state.

6. The emergency safe evacuation method according to claim 5, characterized in that: Verifying whether the emergency stop feedback signal is in a non-emergency stop state includes, The level of the digital input interface (403) of the detection control module (400) is monitored; If the emergency stop feedback input port is determined to be high, it is determined that the emergency stop circuit is closed and has not been triggered, and the forced evacuation signal can be output. If the signal is determined to be low, the emergency stop circuit is determined to be in a triggered or failed state, and the forced evacuation signal is prohibited from being output.

7. The emergency safe evacuation method according to claim 5 or 6, characterized in that: The logic for determining the severe fault condition is as follows: Analyze the fault level field and temperature field in the fault status signal; If the fault level field indicates a level three fault, or the value of the temperature field is greater than a preset temperature threshold, then the condition for a serious fault is determined to be met.

8. The emergency safe evacuation method according to claim 7, characterized in that: After outputting the forced evacuation signal, it also includes, Check whether the high-voltage power supply circuit is disconnected or in a faulty state; When the high-voltage power supply circuit is detected to be disconnected or in a failure state, a relay drive signal is output to the control terminal of the emergency relay to make the emergency relay close and connect the main power supply circuit between the vehicle's own low-voltage auxiliary battery and the emergency motor. The emergency motor drives the hydraulic pump.

Images