Charge pump output high voltage space radiation protection apparatus and method

Abstract

The application relates to a charge pump output high-voltage space radiation protection device and method. The device comprises an anti-radiation reference and self-checking module and a dual-mode overvoltage response module. The anti-radiation reference and self-checking module automatically checks and maintains the stability of the generated reference voltage in a radiation environment by comparing the output signals of a buffer circuit and a redundant buffer circuit. The dual-mode overvoltage response module monitors the charge pump output high voltage by using the reference voltage, and automatically triggers two protection modes according to whether the reference voltage exceeds a first threshold or a second threshold higher than the first threshold: when the first threshold is exceeded, the first protection mode is triggered, the clock pulse input to the charge pump is inhibited, and the discharge is started to reduce the high voltage; when the second threshold is exceeded, the second protection mode is triggered, the clock pulse of the charge pump is directly turned off, and the discharge is started. The application guarantees the reliability of the judgment reference from the source, and realizes high-reliability protection of overvoltage caused by space radiation through an adaptive dual-mode response mechanism.

Description

Technical Field

[0001] This application relates to the field of charge pump technology, and in particular to a charge pump output high-voltage space radiation protection device and method for use in space radiation environments. Background Technology

[0002] The charge pump circuit is a key circuit in the chip for generating local high voltage, which is used to provide the high voltage required for circuit operation.

[0003] However, the complex radiation fields created by high-energy particles such as protons and heavy ions in the space environment pose a serious threat to semiconductor devices. Existing charge pump technologies typically employ feedback control loops, such as voltage comparators, to achieve voltage regulation and to shut off the clock or enable protection when overvoltage is detected. However, these designs are mainly designed for overvoltage protection devices in conventional environments, and their reliability is insufficient to meet the requirements of the complex application environment in space, and to provide effective protection against the instantaneous bombardment of single particles.

[0004] The present invention aims to overcome the shortcomings of the prior art and provide a charge pump overvoltage protection device for space radiation environment, which can effectively resist single particle bombardment and maintain high voltage stability. Summary of the Invention

[0005] Therefore, it is necessary to provide a charge pump output high-voltage space radiation protection device and method that can achieve highly reliable, adaptive dual-mode protection to address the above-mentioned technical problems.

[0006] A charge pump output high-voltage space radiation protection device, the device comprising: The radiation-resistant reference and self-calibration module is used to generate a reference voltage and automatically maintain the stability of the reference voltage under radiation interference by comparing the output signals of the buffer circuit and the redundant buffer circuit. The dual-mode overvoltage response module, connecting the radiation-resistant reference and the self-calibration module, is used for: Receive the reference voltage; Monitor the output high voltage of the charge pump, and determine whether the output high voltage exceeds the first threshold or is greater than the second threshold based on the reference voltage; When the output high voltage exceeds the first-level threshold but does not exceed the second-level threshold, the first protection mode is automatically triggered; the first protection mode reduces the output high voltage by suppressing the clock pulse input to the charge pump and opening the bleeder. When the output high voltage exceeds the second-level threshold, the second protection mode is automatically triggered; the second protection mode reduces the output high voltage by shutting off the clock pulse of the charge pump and opening the bleeder.

[0007] In one embodiment, the radiation-resistant reference and self-calibration module includes: Bandgap reference voltage source; A buffer circuit and a redundant buffer circuit are connected in parallel to the output of the bandgap reference voltage source; A comparator is used to compare the output of the buffer circuit with that of the redundant buffer circuit; The signal gating circuit, controlled by the output of the comparator, is used to select a normal output signal from the buffer circuit or the redundant buffer circuit as an effective reference and generate the reference voltage.

[0008] In one embodiment, the dual-mode overvoltage response module includes: a voltage divider detection circuit, a first comparator, a second comparator, and a protection logic circuit.

[0009] In one embodiment, the voltage divider detection circuit is used to divide the output high voltage to generate at least two different voltage divider signals; the voltage divider signals include at least a first voltage divider signal and a second voltage divider signal; the reference voltage includes at least a reference voltage and a reference voltage. A first comparator is used to compare the first voltage divider signal with the reference voltage corresponding to the first threshold. The second comparator is used to compare the second voltage divider signal with the reference voltage corresponding to the second threshold. The protection logic circuit generates a control signal that triggers the first protection mode or the second protection mode in response to the output of the first comparator or the second comparator, respectively.

[0010] In one embodiment, the protection logic circuit includes: a bleed circuit, a pulse control circuit, and an overvoltage protection control circuit; The output of the first comparator is connected to the overvoltage protection control circuit and outputs a first comparison signal to indicate that the output high voltage exceeds the first threshold. The output of the second comparator is connected to the overvoltage protection control circuit, used to compare the event that the output high voltage exceeds the second-level threshold, and output a second trigger signal; The overvoltage protection control circuit outputs a clock enable control signal, a bleed current enable control signal, and a pulse modulation control signal based on the received first comparison signal or second trigger signal.

[0011] In one embodiment, the pulse control circuit receives the pulse modulation control signal, the modulation signal output from the charge pump main loop, and the original clock signal, and outputs a drive pulse to the four-phase clock charge pump; when the pulse modulation control signal is valid, the pulse control circuit locks the drive pulse at a fixed level to skip at least one clock cycle. The bleed circuit is controlled by the bleed enable control signal and is used to discharge the output high voltage; The clock enable control signal is used to control the enable of the charge pump clock module; wherein, when the first comparison signal is valid, the first protection mode is triggered, and the overvoltage protection control circuit outputs a valid pulse modulation control signal and a leakage enable control signal; when the second trigger signal is valid, the second protection mode is triggered, and the overvoltage protection control circuit outputs an invalid clock enable control signal and a valid leakage enable control signal.

[0012] In one embodiment, when no overvoltage event occurs, both the clock enable control signal and the bleed current enable control signal are in a first valid state, and the pulse modulation control signal is in an invalid state, so that the charge pump clock module works normally, the bleed current circuit is closed, and the pulse control circuit has no modulation effect on the drive pulse. When the first comparison signal is valid, the overvoltage protection control circuit switches the pulse modulation control signal to a valid state and switches the current leakage enable control signal to a second valid state; the valid state of the pulse modulation control signal causes the pulse control circuit to intervene in the generation of the drive pulse, and the second valid state of the current leakage enable control signal causes the current leakage circuit to open. When the second trigger signal is valid, the overvoltage protection control circuit switches the clock enable control signal to an invalid state and switches the current leakage enable control signal to the second valid state; the invalid state of the clock enable control signal turns off the charge pump clock module, and the second valid state of the current leakage enable control signal turns on the current leakage circuit.

[0013] In one embodiment, the loop comparator receives a third detection signal output by the voltage divider detection circuit and a reference voltage output by the radiation resistance reference and self-calibration module, compares the third detection signal and the reference voltage, and outputs a modulation signal to the main loop of the charge pump; wherein the third detection signal reflects the high voltage output of the charge pump, and the reference voltage reflects the reference voltage reference output by the radiation resistance reference and self-calibration module for self-calibration.

[0014] The loop comparator is used to compare with a first detection signal that reflects the high voltage output of the charge pump and output a modulation signal to the main loop of the charge pump to maintain the stability of the high voltage output when no overvoltage event occurs; the circuit design of the loop comparator itself adopts a radiation-hardened structure.

[0015] In one embodiment, the calculation formulas for the first-level threshold corresponding to the first protection mode and the second-level threshold corresponding to the second protection mode are as follows: ; ; in, VPP For the aforementioned output high voltage, VDETA This is the first voltage divider signal. VREF For reference voltage, VDETB This is the second voltage divider signal.

[0016] A method for protecting high-voltage space radiation from a charge pump output, the method comprising: A reference voltage is generated by a radiation-resistant reference and a self-calibration module, and the reference voltage is automatically maintained stable under radiation interference by comparing the output signals of the buffer circuit and the redundant buffer circuit. The reference voltage is received by a dual-mode overvoltage response module connected to the radiation-resistant reference and self-calibration module; Monitor the output high voltage of the charge pump, and determine whether the output high voltage exceeds the first threshold or is greater than the second threshold based on the reference voltage; When the output high voltage exceeds the first-level threshold but does not exceed the second-level threshold, the first protection mode is automatically triggered; the first protection mode reduces the output high voltage by suppressing the clock pulse input to the charge pump and opening the bleeder. When the output high voltage exceeds the second-level threshold, the second protection mode is automatically triggered; the second protection mode reduces the output high voltage by shutting off the clock pulse of the charge pump and opening the bleeder.

[0017] The aforementioned charge pump output high-voltage space radiation protection device and method firstly generates a reference voltage from the source through radiation-hardened benchmark and self-calibration steps, and automatically detects and corrects reference voltage deviations caused by single-event effects using redundant circuits and a real-time comparison mechanism. Secondly, through voltage divider detection and a dual-threshold comparison mechanism, it can accurately distinguish between slight and severe overvoltage conditions, achieving refined perception of the severity of overvoltage events. Furthermore, in the protection triggering and execution steps, two protection modes are adaptively activated according to different overvoltage levels: for slight overvoltage, a pulse skip modulation mode is used, which temporarily skips the charge pump's drive pulse and opens the leakage current to achieve rapid and smooth suppression of the output voltage. This mode responds quickly and does not interrupt the normal operation of the chip. For severe overvoltage, a direct shutdown mode is activated, forcibly stopping the charge pump and fully discharging the current, providing the highest level of safety protection for the chip and preventing device damage. Finally, the entire protection process is automatically completed under the radiation-hardened hardware logic control, without external intervention, avoiding accidental reversals of the protection state. Overall, this invention achieves intelligent, graded, and highly reliable protection against overvoltage caused by space single-event effects through the organic combination of source self-verification, precise judgment with dual thresholds, and dual-mode adaptive response, effectively ensuring the long-term stability of the high voltage output of the charge pump. Attached Figure Description

[0018] Figure 1 This is a frame diagram of a charge pump output high-voltage space radiation protection device in one embodiment; Figure 2 This is a circuit diagram of a charge pump output high-voltage space radiation protection device in one embodiment; Figure 3 This is a schematic flowchart of a charge pump output high-voltage space radiation protection method in one embodiment. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0020] The charge pump output high-voltage space radiation protection device provided in this application works in conjunction with the charge pump circuit, clock module, and memory array within the chip. Its core function is to monitor the output high voltage VPP generated by the charge pump in real time, and when space radiation causes an abnormal increase in VPP, automatically and quickly take different protective measures according to the degree of exceedance to ensure chip safety.

[0021] In one embodiment, such as Figure 1 As shown, a charge pump output high-voltage space radiation protection device is provided, the device comprising: The radiation-resistant reference and self-calibration module 100 is used to generate a reference voltage and automatically maintain the stability of the reference voltage under radiation interference by comparing the output signals of the buffer circuit and the redundant buffer circuit.

[0022] A dual-mode overvoltage response module 200 is connected to the radiation-resistant reference and self-calibration module 100. It receives a reference voltage; monitors the output high voltage of the charge pump; and determines whether the output high voltage exceeds a first-level threshold or a second-level threshold based on the reference voltage. When the output high voltage exceeds the first-level threshold but not the second-level threshold, a first protection mode is automatically triggered. The first protection mode reduces the output high voltage by suppressing the clock pulse input to the charge pump and opening the bleeder. When the output high voltage exceeds the second-level threshold, a second protection mode is automatically triggered. The second protection mode reduces the output high voltage by shutting off the clock pulse of the charge pump and opening the bleeder.

[0023] The aforementioned high-voltage space radiation protection device based on a charge pump output firstly generates a stable reference voltage from the source through radiation-hardened benchmarks and self-calibration steps. It then automatically detects and corrects reference voltage deviations caused by single-event effects using redundant circuits and a real-time comparison mechanism. Secondly, through voltage divider detection and a dual-threshold comparison mechanism, it can accurately distinguish between slight and severe overvoltage exceedances, achieving refined perception of the severity of overvoltage events. Furthermore, in the protection triggering and execution steps, it adaptively activates two protection modes based on different overvoltage levels: for slight overvoltage, a pulse skip modulation mode is used, temporarily skipping the charge pump's drive pulse and enabling current leakage to achieve rapid and smooth suppression of the output voltage. This mode responds quickly and does not interrupt the normal operation of the chip. For severe overvoltage, a direct shutdown mode is activated, forcibly stopping the charge pump and fully discharging current, providing the highest level of safety for the chip and preventing device damage. Finally, the entire protection process is automatically completed under radiation-hardened hardware logic control, requiring no external intervention and avoiding accidental reversals of the protection state. Overall, this invention achieves intelligent, graded, and highly reliable protection against overvoltage caused by space single-event effects through the organic combination of source self-verification, precise judgment with dual thresholds, and dual-mode adaptive response, effectively ensuring the long-term stability of the high voltage output of the charge pump.

[0024] In one embodiment, such as Figure 2 As shown, the radiation-resistant reference and self-calibration module includes: a bandgap reference voltage source, a buffer circuit and a redundant buffer circuit, connected in parallel to the output of the bandgap reference voltage source; a comparator, used to compare the outputs of the buffer circuit and the redundant buffer circuit; and a signal gating circuit, controlled by the output of the comparator, used to select the normal output signal from the buffer circuit or the redundant buffer circuit as the effective reference and generate a reference voltage.

[0025] In one embodiment, the dual-mode overvoltage response module includes: a voltage divider detection circuit, a first comparator, a second comparator, and a protection logic circuit; the voltage divider detection circuit is used to divide the output high voltage to generate at least two different voltage divider signals; the voltage divider signals include at least a first voltage divider signal and a second voltage divider signal; the first comparator is used to compare the first voltage divider signal with a reference voltage corresponding to a first-level threshold; the second comparator is used to compare the second voltage divider signal with a reference voltage corresponding to a second-level threshold; the protection logic circuit generates control signals to trigger a first protection mode or a second protection mode respectively in response to the output of the first comparator or the second comparator.

[0026] In one embodiment, the protection logic circuit includes: a bleed circuit, a pulse control circuit, and an overvoltage protection control circuit; the output of a first comparator is connected to the overvoltage protection control circuit and outputs a first comparison signal to indicate that the output high voltage exceeds a first-level threshold; the output of a second comparator is connected to the overvoltage protection control circuit to compare the event that the output high voltage exceeds a second-level threshold and outputs a second trigger signal; the overvoltage protection control circuit outputs a clock enable control signal, a bleed enable control signal, and a pulse modulation control signal according to the received first comparison signal or second trigger signal; the pulse control circuit receives the pulse modulation control signal, the modulation signal output from the charge pump main loop, and the original... A clock signal is generated, and a drive pulse is output to the four-phase clock charge pump. When the pulse modulation control signal is valid, the pulse control circuit locks the drive pulse at a fixed level to skip at least one clock cycle. A bleed circuit, controlled by the bleed enable control signal, is used to discharge the output high voltage. The clock enable control signal is used to control the enable of the charge pump clock module. When the first comparison signal is valid, the first protection mode is triggered, and the overvoltage protection control circuit outputs a valid pulse modulation control signal and a bleed enable control signal. When the second trigger signal is valid, the second protection mode is triggered, and the overvoltage protection control circuit outputs an invalid clock enable control signal and a valid bleed enable control signal.

[0027] In one embodiment, when no overvoltage event occurs, both the clock enable control signal and the bleed current enable control signal are in the first valid state, and the pulse modulation control signal is in the invalid state, so that the charge pump clock module works normally, the bleed current circuit is closed, and the pulse control circuit has no modulation effect on the drive pulse. When the first comparison signal is valid, the overvoltage protection control circuit switches the pulse modulation control signal to the valid state and switches the current leakage enable control signal to the second valid state. The valid state of the pulse modulation control signal causes the pulse control circuit to intervene in the generation of the drive pulse, and the second valid state of the current leakage enable control signal turns on the current leakage circuit. When the second trigger signal is valid, the overvoltage protection control circuit switches the clock enable control signal to the invalid state and switches the current leakage enable control signal to the second valid state. The invalid state of the clock enable control signal turns off the charge pump clock module, and the second valid state of the current leakage enable control signal turns on the current leakage circuit. The overvoltage protection control circuit restores the clock enable control signal to the first valid state and the current leakage enable control signal to the first valid state.

[0028] In one embodiment, the loop comparator receives a third detection signal output from the voltage divider detection circuit and a reference voltage output from the radiation-hardened reference and self-calibration module. It compares the third detection signal and the reference voltage and outputs a modulation signal to the main loop of the charge pump. The third detection signal reflects the high output voltage of the charge pump, and the reference voltage reflects the reference voltage reference output by the radiation-hardened reference and self-calibration module. This signal is compared with a first detection signal reflecting the high output voltage of the charge pump, and a modulation signal is output to the main loop of the charge pump to maintain a stable high output voltage in the absence of an overvoltage event. The loop comparator itself is designed with a radiation-hardened structure.

[0029] In one embodiment, the calculation formulas for the first-level threshold corresponding to the first protection mode and the second-level threshold corresponding to the second protection mode are as follows: ; ; in, VPP To output high voltage, VDETA This is the first voltage divider signal. VREF For reference voltage, VDETB This is the second voltage divider signal.

[0030] Specifically, refer to Figure 2 Under the influence of space radiation, the overvoltage event triggering and response modes of the charge pump can be divided into three types.

[0031] The first scenario involves an overvoltage event at the output high voltage VPP, where the voltage exceeds the first-level overvoltage protection threshold VOVP1 but is less than the second-level threshold VOVP2. In this case, overvoltage protection mode one, pulse skip modulation, is triggered. The output signal VCOMPA of comparator A (the first comparator) jumps to a high level, causing the VCT signal entering the pulse control circuit and the bleeder circuit enable signal CLNEN to jump. This forces the VPULSE signal level to skip one or more pulse cycles and opens the bleeder circuit, resulting in no pulse input to the four-phase clock charge pump. The charge pump stops boosting voltage, and the bleeder circuit opens, rapidly reducing the voltage of VPP. Once VPP falls below the first-level threshold, the charge pump overvoltage protection mode is deactivated, and the charge pump returns to normal operation under the action of the main loop.

[0032] The second scenario involves an overvoltage event at the output high voltage VPP, exceeding the secondary overvoltage protection threshold. In this case, overvoltage protection mode two, the direct shutdown mode, is triggered. The output of comparator B (the second comparator) transitions from low to high, causing the OSCEN and CLNEN signals in the overvoltage protection control circuit to change. This shuts down the clock module and opens the bleeder module, causing the four-phase clock charge pump to stop operating and rapidly reduce the output high voltage VPP. After this mode is triggered, the charge pump cannot continue operating until the current write operation is completed, at which point it can generate high voltage again in the next write operation.

[0033] The third triggering event is comparator reference voltage overvoltage. Under radiation, the voltage at the same output terminal of the buffer circuit and the redundant buffer circuit exceeds the comparator tolerance value, the state of the comparator output terminal flips, and the automatic control signal gating circuit outputs a healthy reference voltage to ensure the stability of the reference voltage.

[0034] In one embodiment, such as Figure 3 As shown, a method for protecting high-voltage space radiation from a charge pump output is provided, comprising: Step 302: A reference voltage is generated by the anti-radiation reference and self-calibration module, and the output signals of the comparison buffer circuit and the redundant buffer circuit are used to automatically maintain the stability of the reference voltage under radiation interference. Step 304: Receive the reference voltage through the dual-mode overvoltage response module connected to the radiation-resistant reference and self-calibration module; Step 306: Monitor the output high voltage of the charge pump and determine whether the output high voltage exceeds the first-level threshold or is greater than the second-level threshold based on the reference voltage; Step 308: When the output high voltage exceeds the first-level threshold but does not exceed the second-level threshold, the first protection mode is automatically triggered; the first protection mode reduces the output high voltage by suppressing the clock pulse input to the charge pump and opening the bleeder. Step 310: When the output high voltage exceeds the second-level threshold, the second protection mode is automatically triggered; the second protection mode reduces the output high voltage by shutting off the clock pulse of the charge pump and opening the bleeder.

[0035] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in a variety of forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0036] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0037] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A charge pump output high-voltage space radiation protection device, characterized in that, The device includes: A radiation-resistant reference and self-calibration module is used to generate a reference voltage and automatically maintain the stability of the reference voltage under radiation interference by comparing the output signals of a buffer circuit and a redundant buffer circuit. The radiation-resistant reference and self-calibration module includes: a bandgap reference voltage source; a buffer circuit and a redundant buffer circuit connected in parallel to the output of the bandgap reference voltage source; a comparator used to compare the outputs of the buffer circuit and the redundant buffer circuit; and a signal gating circuit controlled by the output of the comparator, used to select a normal output signal from the buffer circuit or the redundant buffer circuit as a valid reference and generate the reference voltage. The dual-mode overvoltage response module, connecting the radiation-resistant reference and the self-calibration module, is used for: Receive the reference voltage; Monitor the output high voltage of the charge pump and determine whether the output high voltage exceeds the first threshold or is greater than the second threshold based on the reference voltage; When the output high voltage exceeds the first-level threshold but does not exceed the second-level threshold, the first protection mode is automatically triggered; the first protection mode reduces the output high voltage by suppressing the clock pulse input to the charge pump and opening the bleeder. When the output high voltage exceeds the second-level threshold, the second protection mode is automatically triggered; the second protection mode reduces the output high voltage by shutting off the clock pulse of the charge pump and opening the bleeder.

2. The apparatus according to claim 1, characterized in that, The dual-mode overvoltage response module includes: a voltage divider detection circuit, a first comparator, a second comparator, and a protection logic circuit.

3. The apparatus according to claim 2, characterized in that, The voltage divider detection circuit is used to divide the output high voltage to generate at least two different voltage divider signals; the voltage divider signals include at least a first voltage divider signal and a second voltage divider signal. A first comparator is used to compare the first voltage divider signal with the reference voltage corresponding to the first threshold. The second comparator is used to compare the second voltage divider signal with the reference voltage corresponding to the second threshold. The protection control logic circuit generates a control signal that triggers the first protection mode or the second protection mode in response to the output of the first comparator or the second comparator, respectively.

4. The apparatus according to claim 3, characterized in that, The protection logic circuit includes: a current leakage circuit, a pulse control circuit, and an overvoltage protection control circuit; The output of the first comparator is connected to the overvoltage protection control circuit and outputs a first comparison signal to indicate that the output high voltage exceeds the first threshold. The output of the second comparator is connected to the overvoltage protection control circuit, used to compare the event that the output high voltage exceeds the second threshold, and output a second trigger signal; The overvoltage protection control circuit outputs a clock enable control signal, a bleed current enable control signal, and a pulse modulation control signal based on the received first comparison signal or second trigger signal.

5. The apparatus according to claim 4, characterized in that, The pulse control circuit receives the pulse modulation control signal, the modulation signal output from the main loop of the charge pump, and the original clock signal, and outputs a drive pulse to the four-phase clock charge pump. When the pulse modulation control signal is valid, the pulse control circuit locks the drive pulse at a fixed level to skip at least one clock cycle. The bleed circuit is controlled by the bleed enable control signal and is used to discharge the output high voltage; The clock enable control signal is used to control the enable of the charge pump clock module; wherein, when the first comparison signal is valid, the first protection mode is triggered, and the overvoltage protection control circuit outputs a valid pulse modulation control signal and a leakage enable control signal; when the second trigger signal is valid, the second protection mode is triggered, and the overvoltage protection control circuit outputs an invalid clock enable control signal and a valid leakage enable control signal.

6. The apparatus according to claim 4, characterized in that, When no overvoltage event occurs, both the clock enable control signal and the bleed current enable control signal are in the first valid state, and the pulse modulation control signal is in the invalid state, so that the charge pump clock module works normally, the bleed current circuit is closed, and the pulse control circuit has no modulation effect on the drive pulse. When the first comparison signal is valid, the overvoltage protection control circuit switches the pulse modulation control signal to a valid state and switches the current leakage enable control signal to a second valid state; the valid state of the pulse modulation control signal causes the pulse control circuit to intervene in the generation of the drive pulse, and the second valid state of the current leakage enable control signal causes the current leakage circuit to open. When the second trigger signal is valid, the overvoltage protection control circuit switches the clock enable control signal to an invalid state and switches the current leakage enable control signal to the second valid state; the invalid state of the clock enable control signal turns off the charge pump clock module, and the second valid state of the current leakage enable control signal turns on the current leakage circuit.

7. The apparatus according to claim 5 or 6, characterized in that, The loop comparator receives the third detection signal output by the voltage divider detection circuit and the reference voltage output by the radiation resistance reference and self-calibration module, compares the third detection signal and the reference voltage, and outputs a modulation signal to the main loop of the charge pump; wherein, the third detection signal reflects the high voltage output of the charge pump, and the reference voltage reflects the reference voltage reference output by the radiation resistance reference and self-calibration module for self-calibration; The loop comparator is used to compare with a first detection signal that reflects the high voltage output of the charge pump and output a modulation signal to the main loop of the charge pump to maintain the stability of the high voltage output when no overvoltage event occurs; the circuit design of the loop comparator itself adopts a radiation-hardened structure.

8. The apparatus according to claim 1, characterized in that, The calculation formulas for the first-level threshold corresponding to the first protection mode and the second-level threshold corresponding to the second protection mode are as follows: in, VPP For the aforementioned output high voltage, VDETA This is the first voltage divider signal. VREF For reference voltage, VDETB This is the second voltage divider signal.

9. A method for protecting high-voltage space radiation from a charge pump output, implementing the charge pump output high-voltage space radiation protection device according to any one of claims 1 to 8, characterized in that, The method includes: A reference voltage is generated by a radiation-resistant reference and a self-calibration module, and the reference voltage is automatically maintained stable under radiation interference by comparing the output signals of the buffer circuit and the redundant buffer circuit. The reference voltage is received by a dual-mode overvoltage response module connected to the radiation-resistant reference and self-calibration module; Monitor the output high voltage of the charge pump and determine whether the output high voltage exceeds the first threshold or is greater than the second threshold based on the reference voltage; When the output high voltage exceeds the first-level threshold but does not exceed the second-level threshold, the first protection mode is automatically triggered; the first protection mode reduces the output high voltage by suppressing the clock pulse input to the charge pump and opening the bleeder. When the output high voltage exceeds the second-level threshold, the second protection mode is automatically triggered; the second protection mode reduces the output high voltage by shutting off the clock pulse of the charge pump and opening the bleeder.

Images