A mine explosion-proof and intrinsic safety type direct-current stabilized power supply control system and method

Abstract

This invention provides a control system and method for an explosion-proof and intrinsically safe DC regulated power supply for mining applications. The method includes: after the main control chip is powered on, disconnecting the backup battery access channel and charging switch; collecting data from the main power DC bus, backup battery, and each intrinsically safe output branch to generate an effective power supply sampling set and an initial power supply state; based on the initial power supply state and subsequent effective power supply sampling sets, calculating the main power DC bus voltage drop rate, bus ripple increase, and synchronous fluctuation of multiple intrinsically safe output currents; using a wolf pack algorithm to generate main power instability judgment parameters and outputting the main power stability judgment result; when the main power supply is in an instability warning state but not yet undervoltage, generating a false normal power supply state record by combining the backup battery access flag, parallel voltage difference, and current-limiting soft switch self-test status; and controlling the backup battery to be connected to the main power DC bus with a controlled small current according to the record, completing the shadow takeover.

Description

Technical Field

[0001] This invention relates to the field of mining electrical equipment and DC power supply control technology, and in particular to a mining explosion-proof and intrinsically safe DC regulated power supply control system and method. Background Technology

[0002] Mining explosion-proof and intrinsically safe DC regulated power supplies are mainly used in the explosive hazardous environments of underground coal mines to provide intrinsically safe DC power of 24V, 18V, and 12V for sensors, communication modules, display control units, and safety interlocking equipment. Existing power supplies typically form the main DC bus through a switching power supply and are equipped with backup batteries to maintain the short-term operation of downstream equipment when the main power supply fails or is undervoltage.

[0003] Existing control methods mostly use a fixed undervoltage protection value as the basis for backup battery switching. That is, the backup battery is only triggered or the protection action is taken when the main power DC bus voltage falls below the preset undervoltage value. In actual operation in coal mines, the start-up of large electromechanical equipment, voltage drop of long-distance cables, loose wiring terminals, frequency converter disturbances, and sudden load changes can all cause the main power DC bus voltage to slowly drop, ripple to increase, and synchronous fluctuations in the current of multiple intrinsically safe output branches.

[0004] At this point, the bus voltage may still be higher than the undervoltage protection value. The existing system will continue to judge that the main power supply is normal, and the backup battery will not be connected prematurely. However, downstream sensors, communication modules, and safety interlocking devices may have already reset, gone offline, or experienced false alarms. Therefore, this invention proposes a mine-use explosion-proof and intrinsically safe DC regulated power supply control system and method. Summary of the Invention

[0005] The purpose of this invention is to address the shortcomings of existing technologies by providing a mine-use explosion-proof and intrinsically safe DC regulated power supply control system and method, thereby solving the technical problems mentioned in the background section.

[0006] To achieve the above objectives, the present invention provides the following technical solution: A control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply includes the following steps: S1. After the main control chip is powered on, disconnect the backup battery access channel and charging switch, collect data from the main power DC bus, backup battery and each intrinsically safe output branch according to the sampling channel configuration table, verify and delete abnormal sampling fields, and generate a valid power supply sampling set and power supply initial state. S2. Based on the initial power supply state and subsequent effective power supply sampling set, calculate the main power supply DC bus voltage drop rate, bus ripple increase magnitude and multi-channel intrinsically safe output current synchronous fluctuation amount, use the wolf pack algorithm to generate main power supply instability judgment parameters, and output the main power supply stability judgment result. S3. When the main power supply stability judgment result is an instability warning and the main power supply DC bus voltage is still higher than the undervoltage protection value, a false normal candidate state is generated. Combined with the backup battery access flag, parallel connection voltage difference and current limiting soft switch self-test status, a false normal power supply status record is generated. S4. Generate a backup battery shadow takeover instruction based on the false normal power supply status record, control the backup battery to be connected to the main power DC bus via a current-limiting soft switch with a controlled small current, while maintaining the power supply of the critical intrinsically safe output branch and reducing the allowable current of the non-critical intrinsically safe output branch, and generate takeover evaluation data. S5. Generate the power supply status after takeover based on the takeover assessment data, determine whether to perform full takeover, exit shadow takeover, maintain shadow takeover, or takeover protection, output the power supply switching result, and generate a power supply closed-loop record to feed back to the correction process of the main power supply instability judgment parameters.

[0007] S1 specifically includes: after the main control chip is powered on, it disconnects the backup battery access channel and charging switch, clears the shadow takeover flag, full takeover flag and fault temporary storage flag, reads the sampling channel configuration and generates a sampling channel configuration table; the main control chip synchronously collects data from the main power DC bus, backup battery and each intrinsically safe output branch according to the sampling channel configuration table, performs field integrity, range and refresh verification, deletes abnormal sampling fields or abnormal sampling periods, and generates a valid power supply sampling set; the main control chip calculates the main power DC bus reference voltage, bus ripple reference value and each intrinsically safe output branch reference current according to the valid power supply sampling set, and generates a backup battery access flag and initial power supply status.

[0008] S2 specifically includes: the main control chip reads the initial power supply state and subsequent effective power supply sampling set, calculates the main power supply DC bus voltage drop rate, bus ripple increase magnitude, and multi-channel intrinsically safe output current synchronous fluctuation amount within the current sampling window, and generates a bus instability feature set; the main control chip calls the wolf pack algorithm, using historical effective power supply sampling set and power supply closed-loop record as samples, to optimize the voltage drop rate threshold, bus ripple increase magnitude threshold, multi-channel intrinsically safe output current synchronous fluctuation amount threshold and corresponding weights, and generates main power supply instability judgment parameters; the main control chip performs threshold comparison and continuous period verification based on the bus instability feature set and main power supply instability judgment parameters, and outputs the main power supply stability judgment result of stable, instability warning or invalid sampling.

[0009] S3 specifically includes: the main control chip reads the main power supply stability judgment result and the current main power supply DC bus voltage. When the judgment state is instability warning and the undervoltage margin is greater than zero, a false normal candidate state is generated. Based on the false normal candidate state, the main control chip verifies the backup battery access flag, backup battery voltage, temperature, remaining power ratio, discharge protection status, charging switch status, current limiting soft switch self-test status, and parallel voltage difference, and generates a backup battery pre-takeover permission or backup battery pre-takeover prohibition result. When the main control chip generates a false normal candidate state and obtains backup battery pre-takeover permission within a continuous preset window, a false normal power supply state record is generated, and a shadow takeover trigger flag, recommended pre-support current level, and intrinsically safe output branch identifier are written.

[0010] S4 specifically includes: the main control chip reads the false normal power supply status record, and when the shadow takeover trigger flag is valid, it generates a backup battery shadow takeover command based on the recommended pre-support current level, the backup battery's allowable discharge current, and the current-limiting soft switch's allowable current; the main control chip controls the current-limiting soft switch to ramp-on according to the backup battery shadow takeover command, so that the backup battery is connected to the main power supply DC bus with a controlled small current, while maintaining power supply to the critical intrinsically safe output branch and reducing the allowable current of the non-critical intrinsically safe output branch, generating a shadow takeover execution status; the main control chip verifies the backup battery's pre-support current, the main power supply DC bus's voltage after support, the bus ripple, and the status of each intrinsically safe output branch based on the shadow takeover execution status, generating takeover evaluation data.

[0011] S5 specifically includes: the main control chip reads the takeover assessment data, continues to collect the main power supply DC bus voltage, bus ripple, intrinsically safe output branch current, backup battery status, and current-limiting soft switch duty cycle control quantity, generates the power supply status after takeover, and forms the conditions for complete takeover, exit from shadow takeover, or takeover protection; the main control chip executes the power supply status switching according to the conditions, keeping the charging switch open and increasing the current-limiting soft switch duty cycle control quantity during complete takeover, reducing the backup battery pre-support current and restoring the non-critical intrinsically safe output branch current during exit from shadow takeover, and generating the power supply switching result; the main control chip updates the initial power supply status according to the power supply switching result, generates a power supply closed-loop record and marks the sample type, and feeds it back to the wolf pack algorithm to correct the main power supply instability judgment parameters.

[0012] A mine-use explosion-proof and intrinsically safe DC regulated power supply control system includes: The power supply initial state generation module is used to disconnect the backup battery access channel and charging switch after the main control chip is powered on; The main power supply stability determination module is used to calculate the rate of decrease of the DC bus voltage, the increase of the bus ripple, and the synchronous fluctuation of the multi-channel intrinsically safe output current based on the initial power supply state and the subsequent effective power supply sampling set. The false normal power supply status confirmation module is used to generate a false normal candidate status when the main power supply stability judgment result is an instability warning and the main power supply DC bus voltage is still higher than the undervoltage protection value. The backup battery shadow takeover module is used to generate backup battery shadow takeover instructions based on the false normal power supply status record, and control the backup battery to be connected to the main power DC bus via a current-limiting soft switch with a controlled small current. The power supply status switching closed-loop module is used to generate the power supply status after takeover based on the takeover assessment data, and to perform full takeover, exit shadow takeover, maintain shadow takeover, or takeover protection.

[0013] The beneficial effects of this invention are as follows: This invention generates a main power supply stability determination result by measuring the rate of voltage drop of the main power supply DC bus, the magnitude of the increase in bus ripple, and the synchronous fluctuation of multiple intrinsically safe output currents. It can identify a false normal power supply state where the main power supply DC bus is not undervoltage but has become unstable, thus avoiding the delay in backup battery takeover caused by relying solely on a fixed undervoltage threshold.

[0014] This invention improves the power supply continuity for downhole sensors, communication modules, and safety interlocking devices by controlling the backup battery to connect to the main power DC bus via a controlled small current through a current-limiting soft switch after confirming a false normal power supply state. This allows the backup battery to complete the shadow connection before the bus collapses significantly. Verifying the backup battery's accessibility flag, parallel voltage difference, charging switch status, and current-limiting soft switch self-test status before pre-connection reduces the inrush current during backup battery connection and minimizes disturbance to the main power DC bus and intrinsically safe output branches.

[0015] This invention maintains power supply to critical intrinsically safe output branches during shadow takeover and reduces the allowable current of non-critical intrinsically safe output branches, thus prioritizing the continued operation of critical loads such as gas monitoring, communication maintenance, and safety interlocks during gradual mains power instability. By executing full takeover, exiting shadow takeover, maintaining shadow takeover, or takeover protection based on takeover assessment data, and feeding back the power supply closed-loop record to the correction process of mains power instability judgment parameters, the accuracy of subsequent instability identification and backup battery takeover control can be improved. Attached Figure Description

[0016] Figure 1 This is a schematic diagram of a DC regulated power supply control method according to an embodiment of the present invention; Figure 2 This is a hardware topology block diagram of the DC regulated power supply control system according to an embodiment of the present invention. Detailed Implementation

[0017] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] Example 1: As Figure 1 As shown, this embodiment provides a control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply, including the following steps: S1. After the main control chip is powered on, disconnect the backup battery access channel and charging switch, collect data from the main power DC bus, backup battery and each intrinsically safe output branch according to the sampling channel configuration table, verify and delete abnormal sampling fields, and generate a valid power supply sampling set and power supply initial state. S2. Based on the initial power supply state and subsequent effective power supply sampling set, calculate the main power supply DC bus voltage drop rate, bus ripple increase magnitude and multi-channel intrinsically safe output current synchronous fluctuation amount, use the wolf pack algorithm to generate main power supply instability judgment parameters, and output the main power supply stability judgment result. S3. When the main power supply stability judgment result is an instability warning and the main power supply DC bus voltage is still higher than the undervoltage protection value, a false normal candidate state is generated. Combined with the backup battery access flag, parallel connection voltage difference and current limiting soft switch self-test status, a false normal power supply status record is generated. S4. Generate a backup battery shadow takeover instruction based on the false normal power supply status record, control the backup battery to be connected to the main power DC bus via a current-limiting soft switch with a controlled small current, while maintaining the power supply of the critical intrinsically safe output branch and reducing the allowable current of the non-critical intrinsically safe output branch, and generate takeover evaluation data. S5. Generate the power supply status after takeover based on the takeover assessment data, determine whether to perform full takeover, exit shadow takeover, maintain shadow takeover, or takeover protection, output the power supply switching result, and generate a power supply closed-loop record to feed back to the correction process of the main power supply instability judgment parameters.

[0019] S1 specifically includes the following sub-steps: S110. After the main control chip is powered on, it first performs a safety setting, setting both the backup battery access channel and the charging switch to the off state, and clearing the shadow takeover flag, full takeover flag and fault temporary storage flag left over from the previous operation. The backup battery access channel refers to the controlled channel through which the backup battery is connected to the DC bus of the main power supply via a current-limiting soft switch, and the charging switch refers to the controlled switch through which the main power supply charges the backup battery via the voltage-regulated charging branch.

[0020] The main control chip then reads the preset sampling channel configuration and generates a sampling channel configuration table. This table defines the source, range, and conversion rules for each subsequent sampling field, preventing data from different branches from being mixed. Each channel record in the sampling channel configuration table must include at least the channel number, sampling object name, sampling period, original sampling value, engineering quantity conversion factor, effective upper limit, effective lower limit, and channel anomaly flag. The sampling objects include the main power supply DC bus voltage, the main power supply DC bus voltage continuous sampling channel and bus ripple calculation field, 24V intrinsically safe output branch voltage, 24V intrinsically safe output branch current, 18V intrinsically safe output branch voltage, 18V intrinsically safe output branch current, 12V intrinsically safe output branch voltage, 12V intrinsically safe output branch current, backup battery voltage, backup battery current, backup battery temperature and internal temperature.

[0021] The 24V intrinsically safe output branch, 18V intrinsically safe output branch, and 12V intrinsically safe output branch represent intrinsically safe DC power supply branches with rated output voltages of 24V, 18V, and 12V, respectively. Bus ripple refers to the difference between the maximum and minimum values ​​of the main power supply DC bus voltage within an effective sampling window. For the main power supply DC bus voltage channel, its effective range can be set from 0V to 40V; for the backup battery temperature channel, its effective range can be set from -20℃ to 80℃.

[0022] After the main control chip completes the sampling channel configuration table, it sends the sampling channel configuration table to S120 as the channel basis for generating the effective power supply sampling set.

[0023] S120: The main control chip performs synchronous sampling according to the sampling channel configuration table and writes the data of each channel obtained at the same sampling time into the current sampling cycle record; the current sampling cycle record includes the sampling time, the original sampling value of each channel, the converted engineering quantity value and the channel abnormality flag.

[0024] The main control chip converts the original sampled values ​​into the main power DC bus voltage, the intrinsically safe output branch voltage, the intrinsically safe output branch current, the backup battery voltage, the backup battery current, the backup battery temperature, and the internal temperature of the casing according to the engineering quantity conversion factor in the sampling channel configuration table, and performs field integrity verification on the converted engineering quantity values.

[0025] Field integrity verification includes three types of rules: First, verify whether each channel has a corresponding sampling field; channels lacking sampling fields are marked as field missing. Second, verify whether the converted engineering quantity value is between the valid upper limit and the valid lower limit; channels exceeding the valid range are marked as range abnormal. Third, verify whether the same channel has not been updated for two consecutive sampling periods; channels that have not been updated are marked as refresh abnormal.

[0026] If no more than 3 channels are abnormal in the current sampling period and the main power supply DC bus voltage channel is valid, the main control chip deletes the current sampling field of the abnormal channel, writes the valid field of the corresponding channel of the previous valid sampling period into the valid power supply sampling set, and writes a replacement flag at the same time. The replacement flag is used to indicate in subsequent steps that the field is a reused field rather than a real-time field. If more than 3 channels are abnormal in the current sampling period, or if the main power supply DC bus voltage channel is abnormal, the main control chip deletes the entire data of the sampling period, does not generate a new valid power supply sampling set, and continues to wait for the next sampling period.

[0027] The main control chip also performs effective sampling window extraction on the DC bus voltage of the main power supply. The effective sampling window consists of continuous effective sampling points, and the number of sampling points is not less than 10. The reference voltage of the main power supply DC bus is N, and N is the number of valid sampling points within the effective sampling window. Let k be the DC bus voltage of the main power supply corresponding to the kth valid sampling point, where k is the sampling point number. Then, the reference voltage of the DC bus of the main power supply is calculated by the following formula: This calculation is used to obtain a comparative basis for subsequent judgments on whether the main power supply DC bus has sunk.

[0028] set up The reference value for busbar ripple. To effectively sample the maximum DC bus voltage of the main power supply within the sampling window, To obtain the minimum DC bus voltage of the main power supply within the effective sampling window, the bus ripple reference value is calculated using the following formula: The main control chip writes the verified data, replacement flag, main power DC bus reference voltage and bus ripple reference value into the valid power supply sampling set, and sends the valid power supply sampling set to S130 as input for generating the initial power supply state.

[0029] S130: The main control chip reads the valid power supply sampling set and generates the initial power supply state. The initial power supply state refers to the reference power supply record formed before the main power supply enters the subsequent stability determination, which is used to provide the S210 with the initial comparison objects for the bus, battery, and intrinsically safe output branch. The initial power supply state includes at least the main power supply DC bus reference voltage, bus ripple reference value, 24V intrinsically safe output branch reference current, 18V intrinsically safe output branch reference current, 12V intrinsically safe output branch reference current, backup battery accessibility flag, internal temperature reference value, and initial state generation time.

[0030] For each intrinsically safe output branch, the main control chip calculates the branch reference current separately; assuming... Let be the reference current for the j-th intrinsically safe output branch, where j is the branch number, corresponding to the 24V intrinsically safe output branch, the 18V intrinsically safe output branch, and the 12V intrinsically safe output branch, respectively. Let the output current of the intrinsically safe output branch j be the output current at the k-th valid sampling point. Then, the reference current of the intrinsically safe output branch j is calculated using the following formula: Where N is the number of valid sampling points within the effective sampling window, and k is the sampling point number. This calculation provides a clear comparison benchmark for the subsequent synchronous fluctuation of the intrinsically safe output current across multiple channels. The main control chip then generates a backup battery access flag, which indicates whether the backup battery is allowed to participate in subsequent shadow takeover.

[0031] When the backup battery voltage is lower than the lower limit of the takeover, the backup battery temperature exceeds the allowable temperature range, the backup battery management information is not updated within the preset communication cycle, the charging switch is not in the off state, the backup battery is in the prohibited discharge protection state, the backup battery current sensing direction calibration is abnormal, or there is a risk of reverse injection at the backup battery port, the main control chip will set the backup battery access flag to prohibited access; when the backup battery voltage, backup battery temperature, communication status, protection status, charging switch status, and current sensing direction all meet the access conditions, the main control chip will set the backup battery access flag to allowed access.

[0032] The main control chip writes the initial power supply status into the local operation record and sends it to the display unit for status display through the communication interface. At the same time, it sends the initial power supply status to S210 to calculate the rate of voltage drop of the main power supply DC bus, the increase of bus ripple, and the synchronous fluctuation of multi-channel intrinsically safe output current. The initial power supply status also serves as a sample source for the parameter optimization process in S220, ensuring that the subsequent identification of false normal power supply status has a preliminary data basis.

[0033] S2 specifically includes the following sub-steps: S210: The main control chip reads the initial power supply state generated by S130 and continues to receive subsequent valid power supply sampling sets, generating a bus instability feature set within the current sampling window; the current sampling window refers to a continuous valid sampling data segment used to calculate the changes in the main power supply DC bus and the intrinsically safe output branch, with no less than 10 valid sampling points within the window.

[0034] The bus instability feature set is used to characterize whether the main power DC bus is in a state where it is not undervoltage but its power supply capacity has been weakened. Its fields include at least the start and end time of the current sampling window, the current average voltage of the main power DC bus, the rate of voltage drop of the main power DC bus, the current value of the bus ripple, the increase of the bus ripple, the current offset of each intrinsically safe output branch, the synchronous fluctuation of multiple intrinsically safe output currents, and the feature generation time.

[0035] set up The rate of voltage drop at the main power supply DC bus. The main power supply DC bus reference voltage generated by S130. This represents the average voltage of the main power supply DC bus within the current sampling window. The time difference between the initial power supply state generation time and the end time of the current sampling window is used to calculate the rate of voltage drop of the main power supply DC bus as follows: When the calculation result is less than 0, the main control chip records the rate of voltage drop of the main power DC bus as 0 to avoid the voltage recovery phase being misjudged as unstable.

[0036] set up To increase the amplitude of busbar ripple, This represents the difference between the maximum and minimum values ​​of the main power supply DC bus voltage within the current sampling window. The bus ripple reference value generated by S130 is then calculated using the following formula: When the increase in bus ripple is not greater than 0, the main control chip records this field as 0.

[0037] The main control chip also calculates the current average current of the 24V intrinsically safe output branch, the 18V intrinsically safe output branch, and the 12V intrinsically safe output branch, and compares it with the corresponding branch reference current generated by S130; assuming To synchronize the fluctuation of the intrinsically safe output current of multiple channels. Let j be the average current of the intrinsically safe output branch within the current sampling window. Let S130 generate the reference current for the j-th intrinsically safe output branch, where j is the intrinsically safe output branch number and M is the number of intrinsically safe output branches. Then: When the reference current of a certain intrinsically safe output branch is 0, the main control chip uses the preset minimum reference current to participate in the calculation, so as to avoid the division by 0.

[0038] The main control chip writes the above calculation results into the bus instability feature set and sends the bus instability feature set to S220 and S230, which serve as inputs for main power supply instability judgment parameter optimization and stability judgment, respectively.

[0039] S220: The main control chip reads the bus instability feature set and calls the wolf pack algorithm to generate main power supply instability judgment parameters. The wolf pack algorithm is a swarm intelligence optimization algorithm that simulates the reconnaissance, recruitment, and siege behavior of a wolf pack. In this embodiment, it is only used to search for main power supply instability judgment parameters and does not change the power supply control attributes of the DC regulated power supply. The main power supply instability judgment parameters include at least the voltage drop rate threshold, the bus ripple increase threshold, the multi-channel intrinsically safe output current synchronous fluctuation threshold, the voltage drop rate weight, the bus ripple increase weight, the multi-channel intrinsically safe output current synchronous fluctuation weight, the instability warning duration cycle number, and the backup battery misconnection suppression coefficient.

[0040] Each search wolf corresponds to a set of candidate judgment parameters. The main control chip extracts training samples from the historical effective power supply sampling set and the power supply closed-loop record fed back by S530. Records that have not triggered the false normal power supply state, have not triggered the undervoltage protection and have continuous and stable intrinsically safe output are marked as normal power supply segments. Records that have triggered shadow takeover, full takeover, undervoltage protection or intrinsically safe output abnormal current limiting are marked as abnormal power supply segments.

[0041] Specifically, the main control chip encodes the position of each search wolf into a multi-dimensional parameter vector. ,in In the formula, The voltage drop rate threshold. To increase the amplitude threshold of bus ripple, The threshold for synchronous fluctuation of multi-channel intrinsically safe output current. , , For the corresponding three weights, The duration of the instability warning period. This is the backup battery misconnection suppression coefficient.

[0042] The main control chip constructs the fitness function for the wolf pack algorithm. The fitness function is calculated using the following formula, based on the optimization direction of the evaluation parameters: In the formula, This represents the number of missed detections when replaying using the current parameter vector; Number of misjudgments; This refers to the number of times the backup battery was mistakenly connected. The average advance identification time is earlier than the undervoltage protection time for the instability warning time; and All are preset penalty factors and This is to ensure that the optimization criteria of "low number of missed detections, second lowest number of false detections, low number of backup battery misconnections and high advance identification time" are met.

[0043] During the optimization and iteration process, the main control chip updates the position vectors of each search wolf according to the preset wandering, summoning, and besieging behaviors. This continues until the maximum number of iterations or the fitness function is reached. After continuous convergence, the position vector of the alpha wolf at this point is decoded and output to determine the main power supply instability judgment parameters.

[0044] The main control chip uses each set of candidate judgment parameters to replay and judge the training samples, and counts the number of missed judgments, the number of false judgments, the early identification time, and the number of times the backup battery is mistakenly connected. Among them, the number of missed judgments refers to the number of times the abnormal power supply segment is not identified as an instability warning, the number of false judgments refers to the number of times the normal power supply segment is identified as an instability warning, and the early identification time refers to the time before the instability warning time is earlier than the undervoltage protection time.

[0045] The main control chip selects the optimal candidate judgment parameter in the following order: the smaller the number of missed judgments, the smaller the number of false judgments, the larger the advance identification time, and the smaller the number of backup battery misconnections. The optimal candidate judgment parameter is then determined as the main power supply instability judgment parameter.

[0046] The main control chip writes the main power supply instability judgment parameters into the parameter record. The parameter record includes the parameter update time, sample quantity, each threshold, each weight, and backup battery misconnection suppression coefficient. The chip then sends the parameter record to S230 to generate the main power supply stability judgment result.

[0047] S230 and the main control chip read the bus instability feature set and the main power supply instability judgment parameters, and generate the main power supply stability judgment result; the main power supply stability judgment result is used to explain to S310 whether the main power supply DC bus has entered the instability warning stage.

[0048] The main control chip first verifies the validity of the bus instability feature set data. When the DC bus voltage field of the main power supply is missing, the number of valid sampling points in the current sampling window is insufficient, or the number of replacement flags exceeds the preset number, the main power supply stability judgment result is set to invalid sampling, and entering the false normal power supply state judgment is prohibited.

[0049] After data validity is verified, the main control chip compares the rate of decrease of the main power supply DC bus voltage with the voltage decrease rate threshold, the increase in bus ripple with the bus ripple increase threshold, and the synchronous fluctuation of multi-channel intrinsically safe output current with the multi-channel intrinsically safe output current synchronous fluctuation threshold. When at least two of the three characteristics reach the corresponding threshold, and this state continues for a certain number of instability warning cycles, the main power supply stability judgment result is set to instability warning; when the above conditions are not met, the main power supply stability judgment result is set to stable. The main power supply stability judgment result includes at least the judgment time, the rate of decrease of the main power supply DC bus voltage, the increase in bus ripple, the synchronous fluctuation of multi-channel intrinsically safe output current, the main power supply instability judgment parameters used, the judgment state, and the number of cycles.

[0050] The main control chip sends the main power supply stability determination result and the current main power supply DC bus voltage to S310 as input to determine whether a false normal candidate state has been formed; at the same time, the determination result is written into the operation record, which is then fed back to S220 after S530 generates the power supply closed loop record to continue to correct the subsequent main power supply instability determination parameters.

[0051] S3 specifically includes the following sub-steps: S310 reads the main power supply stability judgment result output by S230, the current main power supply DC bus voltage, and the initial power supply state output by S130, and makes a candidate judgment on whether the main power supply is in a state of instability without undervoltage. The false normal candidate state refers to the intermediate state in which the main power supply DC bus voltage is still higher than the undervoltage protection value, but the main power supply stability judgment result has shown that the main power supply DC bus has an instability warning. This intermediate state is only used as a pre-entry for the backup battery access qualification verification and does not directly trigger the backup battery shadow takeover.

[0052] The main control chip first verifies the determination status of the main power supply stability judgment result. When the determination status is invalid sampling, the main control chip does not generate a false normal candidate status and marks the current sampling window as an invalid judgment window. When the determination status is stable, the main control chip maintains the main power supply control and does not enter the backup battery pre-takeover process. When the determination status is an instability warning, the main control chip continues to calculate the undervoltage margin.

[0053] set up The undervoltage margin represents the voltage difference between the current main power supply DC bus voltage and the undervoltage protection value. This represents the average voltage of the main power supply DC bus within the current sampling window. If the value is for undervoltage protection, the undervoltage margin is calculated using the following formula: When the undervoltage margin is greater than 0 and the main power supply stability judgment result is an instability warning, the main control chip generates a false normal candidate state; when the undervoltage margin is not greater than 0, it means that the main power supply DC bus has reached or fallen below the traditional undervoltage protection boundary, and the main control chip no longer generates a false normal candidate state, but switches to undervoltage protection or complete takeover judgment.

[0054] The false normal candidate state includes at least the candidate generation time, the current main power supply DC bus voltage, the undervoltage protection value, the undervoltage margin, the main power supply stability judgment result, the number of cycles of instability warning, the increase in bus ripple, and the synchronous fluctuation of multi-channel intrinsically safe output current.

[0055] The main control chip sends the false normal candidate state to the S320 as input for backup battery pre-takeover permission verification.

[0056] S320 and the main control chip read the false normal candidate state and simultaneously read the backup battery access flag, backup battery voltage, backup battery temperature, backup battery current, backup battery management information update time, backup battery remaining power ratio, backup battery discharge protection status, charging switch status, and current limiting soft switch self-test status generated by S130 to verify whether the backup battery is allowed to enter the pre-connection process. The backup battery pre-connection permission refers to the prerequisite that the backup battery has the ability to be connected to the main power supply DC bus with a controlled small current. The backup battery disconnection prohibition result refers to the result that at least one prerequisite is not met and the backup battery is prohibited from being connected in parallel.

[0057] The main control chip first verifies the backup battery accessibility flag. When the flag indicates access is prohibited, it directly outputs a "backup battery access prohibited" result and writes the reason for prohibition into the accessibility field. When the flag indicates access is permitted, it further verifies whether the backup battery voltage is within the allowable access range, whether the backup battery temperature is within the allowable temperature range, whether the remaining battery charge percentage is higher than the preset access limit, whether the backup battery discharge protection status is not triggered, whether the backup battery management information is updated within the preset communication cycle, whether the charging switch is in the off state, and whether the current limiting soft switch self-test status is passed. The main control chip also calculates the parallel voltage difference to limit the inrush current during the instantaneous connection of the backup battery.

[0058] set up The parallel voltage difference represents the absolute difference between the backup battery terminal voltage and the current main power supply DC bus voltage. This is the voltage at the backup battery port. Given the average voltage of the main power supply DC bus within the current sampling window, the parallel voltage difference is calculated using the following formula: When the parallel connection voltage difference is not greater than the preset upper limit of the parallel connection voltage difference, the parallel connection condition is deemed to be passed; when the parallel connection voltage difference is greater than the preset upper limit of the parallel connection voltage difference, the main control chip outputs the result that the backup battery is prohibited from being connected, and the reason field for prohibition is recorded as parallel connection voltage difference exceeding the limit.

[0059] The backup battery pre-takeover permit should include at least the permit generation time, backup battery voltage, backup battery temperature, backup battery remaining charge percentage, backup battery discharge protection status, charging switch status, current limiting soft switch self-test status, parallel voltage difference, and permit conclusion. The backup battery takeover prohibition result should include at least the prohibition generation time, prohibition reason field, and continued protection method field. The prohibition reason field includes insufficient battery voltage, temperature exceeding limit, charging switch not disconnected, discharge protection triggered, communication update timeout, parallel voltage difference exceeding limit, or current limiting soft switch self-test failure.

[0060] The main control chip sends the backup battery pre-takeover permission or backup battery takeover prohibition result to S330 as input to confirm the false normal power supply status.

[0061] S330 and the main control chip determine whether a false normal power supply state has been formed based on the candidate state of the false normal state, the permission for backup battery to take over, or the result of the backup battery being prohibited from taking over. A false normal power supply state refers to a power supply state in which the DC bus voltage of the main power supply has not fallen below the undervoltage protection value, but the main power supply can no longer stably support intrinsically safe output, and the backup battery has the conditions for pre-takeover.

[0062] The main control chip uses a continuous confirmation rule to suppress transient disturbances and false triggering. That is, a false normal power supply state is only allowed to be confirmed when a false normal candidate state is formed in at least two consecutive current sampling windows and the backup battery pre-takeover permission is obtained in each current sampling window. If the main power supply stability judgment result of any current sampling window is invalid sampling, the current main power supply DC bus voltage is lower than the undervoltage protection value, there is a backup battery takeover prohibition result, or the critical intrinsically safe output branch has triggered overcurrent protection, then the main control chip will not confirm the false normal power supply state and will maintain the original protection process.

[0063] set up This is a false normal confirmation value, used to indicate whether the false normal power supply status confirmation conditions are met; The number of windows required to continuously generate false normal candidate states and obtain pre-takeover permission for the backup battery. To preset the number of confirmation windows, The current undervoltage margin of the main power supply DC bus (as described in S310). The false normal confirmation value is then determined by the following formula: When the false normal confirmation value is 1, the main control chip generates a false normal power supply status record; when the false normal confirmation value is 0, the main control chip only retains the candidate judgment record and does not send the shadow takeover trigger basis to S4.

[0064] The main control chip reads the recommended pre-support current level from the preset pre-support current level table based on the undervoltage margin, the increase in bus ripple, and the synchronous fluctuation of multi-channel intrinsically safe output current. The main control chip also reads the preset intrinsically safe output priority configuration table, marking branches used for gas monitoring, communication maintenance, or safety interlocking as critical intrinsically safe output branches, and marking branches used for display, auxiliary acquisition, or non-safety interlocking loads as non-critical intrinsically safe output branches.

[0065] As one specific embodiment, a preset pre-support current rating table is used based on undervoltage margin. The sizes are divided into multiple levels: For example, when When this is the case, it is recommended to set the pre-support current rating to a low level (e.g., 50mA); when Furthermore, when the synchronous fluctuation of the multi-channel intrinsically safe output current exceeds 10%, it is recommended to set the pre-support current level to medium (e.g., 150mA); when Furthermore, when the bus ripple increases dramatically, it is recommended to set the pre-support current rating to a high level (e.g., 300mA).

[0066] This tiered strategy ensures that the backup battery current matches the degree of mains power degradation during the gradual collapse of the mains power supply.

[0067] The false normal power supply status record includes confirmation time, current main power DC bus voltage, undervoltage protection value, undervoltage margin, bus ripple increase, multi-channel intrinsically safe output current synchronization fluctuation, backup battery pre-takeover permission, shadow takeover trigger flag, recommended pre-support current level, critical intrinsically safe output branch identifier and non-critical intrinsically safe output branch identifier. Among them, the shadow takeover trigger flag is used to instruct S410 to generate a backup battery shadow takeover command, the recommended pre-support current level is used to limit the initial parallel current of the backup battery, and the critical intrinsically safe output branch identifier and non-critical intrinsically safe output branch identifier are used by S420 to maintain power supply to the critical branch and reduce the allowable current of the non-critical branch during the pre-support process.

[0068] The main control chip sends the false normal power supply status record to the S410 as the direct trigger basis for the backup battery shadow takeover control.

[0069] S4 specifically includes the following sub-steps: S410: The main control chip reads the false normal power supply status record generated by S330 and generates a backup battery shadow takeover instruction when the shadow takeover trigger flag is valid. The backup battery shadow takeover instruction is an execution instruction that controls the backup battery to be connected to the main power DC bus via a current-limiting soft switch with a controlled small current. The current-limiting soft switch includes a power MOSFET connected in series in the backup battery discharge circuit and a corresponding drive circuit. The main control chip adjusts the conduction degree of the power MOSFET in the equivalent switching cycle by outputting PWM (pulse width modulation) signals with different duty cycles to the drive circuit, thereby limiting the average inrush current in the initial stage of backup battery connection.

[0070] The main control chip first reads the recommended pre-support current level, the current main power DC bus voltage, the backup battery pre-takeover permission, the critical intrinsically safe output branch identifier and the non-critical intrinsically safe output branch identifier from the pseudo-normal power supply status record, and simultaneously reads the backup battery allowable discharge current, the current-limiting soft switch allowable current and the internal temperature; the current-limiting soft switch allowable current is determined by the current-limiting soft switch parameter table and the current internal temperature derating rules.

[0071] set up The upper limit of the backup battery's pre-support current represents the maximum controlled current that the backup battery is allowed to output to the main power supply DC bus during shadow takeover; let... Let be the allowable discharge current of the backup battery under the current voltage, temperature, and remaining charge percentage; assuming Let be the current that the current-limiting soft switch is allowed to pass through at the current case temperature; assuming To determine the target current corresponding to the recommended pre-support current level, the upper limit of the backup battery pre-support current is determined by the following formula: This calculation ensures that the upper limit of the backup battery's pre-support current is simultaneously constrained by the backup battery's status, the power switch's carrying capacity, and the severity of the false normal power supply state, thus preventing the backup battery from releasing excessive current to the main power supply DC bus during the initial parallel connection phase.

[0072] The main control chip then determines the initial value of the duty cycle control quantity for the current-limiting soft switch based on the parallel voltage difference generated by S320. The closer the parallel voltage difference is to the preset upper limit of the parallel voltage difference, the lower the initial value of the duty cycle control quantity, and it must not exceed the upper limit value corresponding to the preset minimum safe conduction range. The duty cycle control quantity refers to the proportion of the current-limiting soft switch that the main control chip allows to conduct within one control cycle, which is used to adjust the actual pre-support current of the backup battery.

[0073] The backup battery shadow takeover instruction includes at least the instruction generation time, the upper limit of the backup battery pre-support current, the initial value of the current limiting soft switch duty cycle control quantity, the upper limit of the current limiting soft switch duty cycle control quantity, the shadow takeover duration, the non-critical intrinsically safe output current reduction coefficient, the critical intrinsically safe output branch identifier, and the non-critical intrinsically safe output branch identifier.

[0074] The main control chip sends the backup battery shadow takeover command to the S420 as the basis for executing the backup battery current limiting and connection and intrinsically safe output branch adjustment.

[0075] The S420 main control chip controls the current limiting soft switch to conduct in a ramp manner according to the backup battery shadow takeover instruction, so that the backup battery is connected to the main power DC bus with a controlled small current and provides pre-support for the main power DC bus; the ramp manner means that the duty control quantity of the current limiting soft switch does not reach the upper limit at once, but gradually increases in steps over multiple control cycles.

[0076] Specifically, the main control chip maps the calculated current-limiting soft-switching duty cycle control quantity to the set value of the digital PWM duty cycle register. Ramp-on means that the main control chip increases the digital PWM duty cycle at fixed time intervals (e.g., every 5ms), which smoothly reduces the equivalent on-state voltage drop across the power MOSFET, thereby causing the backup battery discharge current flowing into the main power DC bus to rise linearly or in a stepwise manner until it reaches the upper limit of the backup battery's pre-support current.

[0077] set up This is the duty cycle control quantity for the current-limiting soft switch in the next control cycle. This is the current-limiting soft-switch duty cycle control quantity. The allowable increment of duty cycle control steps per single control cycle. To determine the upper limit of the duty cycle control quantity of the current-limiting soft switch, the duty cycle control quantity of the current-limiting soft switch in the next control cycle is determined by the following formula: After each update of the duty cycle control value, the main control chip collects the actual pre-support current of the backup battery, the voltage after the main power DC bus is supported, the current value of the bus ripple, and the current of each intrinsically safe output branch. When the actual pre-support current of the backup battery reaches the upper limit of the backup battery pre-support current, the chip stops increasing the duty cycle control value of the current limiting soft switch and maintains the current duty cycle control value to enter the next control cycle.

[0078] The main control chip simultaneously adjusts the power supply of the branch based on the critical intrinsically safe output branch identifier and the non-critical intrinsically safe output branch identifier in the false normal power supply status record. For critical intrinsically safe output branches, the original voltage regulation control and the original allowable current remain unchanged. For non-critical intrinsically safe output branches, the allowable current is updated according to the non-critical intrinsically safe output current reduction coefficient, but the branch is not directly disconnected unless the branch itself triggers overcurrent protection or short circuit protection.

[0079] set up This refers to the adjusted allowable current for non-critical intrinsically safe output branches. This serves as the reference current for the non-critical intrinsically safe output branch during the initial power supply state. Let be the non-critical intrinsically safe output current reduction factor, and its value range be 0 to 1. Then, the allowable current of the non-critical intrinsically safe output branch after adjustment is determined by the following formula: The main control chip writes the shadow takeover start time, the current current limiting soft switch duty control quantity, the actual pre-support current of the backup battery, the voltage before the main power DC bus support, the voltage after the main power DC bus support, the current value of the bus ripple, the voltage of the critical intrinsically safe output branch, the allowable current of the non-critical intrinsically safe output branch, and the execution status flag into the shadow takeover execution status, and sends the shadow takeover execution status to S430 as input for takeover effect verification.

[0080] The S430 main control chip reads the shadow takeover execution status and continuously verifies the backup battery pre-support current, the main power DC bus support voltage, the current value of the bus ripple, and the status of each intrinsically safe output branch during the shadow takeover duration, generating takeover assessment data. The takeover assessment data is used to provide the S510 with the basis for determining whether to fully take over, maintain shadow takeover, or exit shadow takeover.

[0081] The main control chip first verifies whether the actual pre-support current of the backup battery exceeds the upper limit of the backup battery's pre-support current. When the actual pre-support current of the backup battery exceeds the upper limit of the backup battery's pre-support current, the main control chip reduces the duty cycle control of the current limiting soft switch and maintains the shadow takeover state. If the limit is still exceeded for two consecutive control cycles after reducing the duty cycle control, the backup battery access channel is disconnected, and the takeover failure flag and the reason for the failure are output.

[0082] The main control chip re-verifies the status of the intrinsically safe output branch; when an overcurrent occurs in a critical intrinsically safe output branch, the protection action of the critical intrinsically safe output branch is executed first, and the backup battery pre-support current is prohibited from being increased further; when an overcurrent occurs in a non-critical intrinsically safe output branch, the allowable current of the non-critical intrinsically safe output branch is reduced first, and then the branch is isolated based on the duration of the overcurrent.

[0083] The main control chip judges the pre-support effect based on the voltage change and bus ripple change of the main power DC bus after support for no less than two consecutive control cycles. When the voltage drop after the main power DC bus support does not exceed the preset voltage change threshold and the current value of the bus ripple does not continue to increase, the takeover assessment conclusion is recorded as stable support. When the voltage drop after the main power DC bus support continuously decreases and the decrease exceeds the preset voltage change threshold, the takeover assessment conclusion is recorded as insufficient support. When the backup battery access channel is disconnected, the current limiting soft switch self-test is abnormal, or the protection action of the key intrinsically safe output branch is not released, the takeover assessment conclusion is recorded as takeover failure.

[0084] The takeover assessment data should include at least the duration of shadow takeover, the actual pre-support current of the backup battery, the upper limit of the pre-support current of the backup battery, the duty cycle control of the current-limiting soft switch, the voltage change trend after the main power DC bus is supported, the bus ripple change trend, the power supply status of critical intrinsically safe output branches, the current-limiting status of non-critical intrinsically safe output branches, the takeover assessment conclusion, and the reasons for the takeover failure.

[0085] The main control chip sends the takeover assessment data to the S510; among them, the stable support conclusion is used by the S510 to determine whether to continue to maintain shadow takeover or exit shadow takeover, the insufficient support conclusion is used by the S510 to determine whether to switch to full takeover, and the takeover failure conclusion is used by the S510 to trigger protection processing.

[0086] S5 specifically includes the following sub-steps: The S510 main control chip reads the takeover assessment data generated by the S430 and continues to collect the main power supply DC bus voltage, bus ripple current, intrinsically safe output branch current, actual pre-support current of the backup battery, remaining battery charge ratio, backup battery temperature, and current limiting soft switch duty cycle control quantity to generate the power supply status after takeover. The power supply status after takeover refers to the power supply record used to determine whether the backup battery has been fully taken over, maintained under shadow takeover, or exited shadow takeover after entering shadow takeover.

[0087] During the shadow takeover period, the main control chip continues to generate the latest main power supply stability judgment result according to the rules from S210 to S230, and writes the result into the power supply status after takeover. The power supply status after takeover includes at least the status generation time, the current average voltage of the main power supply DC bus, the change in the main power supply DC bus voltage, the current value of the bus ripple, the bus ripple recovery, the actual pre-support current of the backup battery, the remaining capacity ratio of the backup battery, the duty cycle control of the current-limiting soft switch, the power supply status of the critical intrinsically safe output branch, the current-limiting status of the non-critical intrinsically safe output branch, and the takeover evaluation conclusion.

[0088] set up Let be the busbar dip, representing the decrease in DC bus voltage between adjacent control cycles; let be... This is the average voltage of the main power supply DC bus in the previous control cycle. Given the average voltage of the main power supply DC bus during the current control cycle, the bus subsidence is calculated using the following formula: When the busbar subsidence exceeds the preset voltage drop threshold for at least two consecutive control cycles, and the takeover assessment concludes that the support is insufficient, the main control chip generates a complete takeover condition. If the remaining battery charge ratio is lower than the complete takeover lower limit, the backup battery temperature exceeds the limit, the backup battery discharge protection state is triggered, the overcurrent of the critical intrinsically safe output branch is not released, or the current limiting soft switch is abnormal, a complete takeover condition is not generated, but a takeover protection condition is generated instead.

[0089] set up The bus ripple recovery amount represents the improvement in current bus ripple compared to the ripple before shadow takeover; let... This refers to the bus ripple value recorded in the S330 sham normal power supply status log. To determine the current busbar ripple value after takeover, the busbar ripple recovery amount is calculated using the following formula: When the current average voltage of the main power supply DC bus is higher than the undervoltage protection value and reaches the preset safety margin, the current value of the bus ripple is not greater than the sum of the bus ripple reference value generated by S130 and the allowable deviation, and this state is maintained for no less than the preset recovery period, the main control chip generates the exit shadow takeover condition; if the latest main power supply stability judgment result is still an instability warning, the current value of the bus ripple continues to increase, or there is a continuous overcurrent in the non-critical intrinsically safe output branch, the exit shadow takeover condition is not generated, and the shadow takeover is maintained or the takeover protection process is entered.

[0090] The main control chip sends the power supply status after takeover, the conditions for full takeover, the conditions for exiting shadow takeover, or the takeover protection conditions to the S520 as the basis for power supply status switching.

[0091] S520 and the main control chip perform power supply state switching based on the full takeover conditions, shadow takeover exit conditions, or takeover protection conditions output by S510, and generate power supply switching results. The power supply switching results refer to the execution results of recording whether the backup battery has changed from shadow takeover to full takeover, whether it has exited shadow takeover, or whether it has entered protection processing.

[0092] When the conditions for full takeover are met, the main control chip keeps the charging switch off to prevent the main power supply from forming a reverse energy conflict with the backup battery discharge branch through the charging branch. It also increases the duty cycle control of the current limiting soft switch according to the preset steps, so that the output current of the backup battery gradually increases from the actual pre-supported current of the backup battery to the target current for full takeover.

[0093] set up To fully take over the target current, this represents the target output current that the backup battery needs to handle in a fully takeover state; let... The sum of the current load currents of the critical intrinsically safe output branches. This is the sum of the non-critical intrinsically safe output branch currents that are allowed to remain during the shadow takeover period. Given the allowable discharge current of the backup battery under the current voltage, temperature, and remaining charge ratio, the target current for full takeover is determined by the following formula: In each step cycle, the main control chip verifies the backup battery output current, backup battery temperature, critical intrinsically safe output branch voltage, and current value of bus ripple. If any verification field exceeds the limit, the main control chip suspends increasing the duty cycle control of the current limiting soft switch and records the power supply switching result as takeover protection.

[0094] When the conditions for exiting shadow takeover are met, the main control chip first maintains the main power supply stability for at least the preset recovery period, and then reduces the current limiting soft switch duty control quantity in preset steps to gradually reduce the actual pre-support current of the backup battery. When the actual pre-support current of the backup battery drops below the preset exit current, the backup battery access channel is disconnected, and the allowable current of the non-critical intrinsically safe output branch is restored step by step to prevent the main power supply DC bus from sinking again after the backup battery suddenly exits.

[0095] When the S510 output takeover protection condition is triggered, the main control chip prioritizes power supply to critical intrinsically safe output branches, limits the allowable current of non-critical intrinsically safe output branches, and selects to maintain shadow takeover, reduce the current-limiting soft switch duty cycle, or disconnect the backup battery access channel based on the source of the anomaly.

[0096] The power supply switching results should include at least the switching result generation time, switching type, target current for complete takeover, bus voltage before exiting shadow takeover, bus voltage after exiting shadow takeover, final state of backup battery, final state of current limiting soft switch, final state of charging switch, power supply status of critical intrinsically safe output branches, recovery status of non-critical intrinsically safe output branches, and reason for switching anomaly. Switching types include complete takeover, exiting shadow takeover, maintaining shadow takeover, takeover protection, and takeover failure.

[0097] The main control chip sends the power supply switching result to the S530 as the basis for updating the initial power supply state and generating the power supply closed-loop record.

[0098] The S530 main control chip reads the power supply switching results and generates a power supply closed-loop record based on the switching type. The power supply closed-loop record is a complete operation record from the identification of the false normal power supply state, the shadow takeover of the backup battery, the takeover assessment to the power supply state switching, which is used to correct the main power supply instability judgment parameters in the future.

[0099] The main control chip only updates the main power supply DC bus reference voltage, bus ripple reference value, reference current of each intrinsically safe output branch, and backup battery access flag in the initial power supply state after the power supply switching result is exiting shadow takeover, the main power supply stability judgment result is stable, and the main power supply has been continuously and stably maintained for a preset update time. When the power supply switching result is complete takeover, maintaining shadow takeover, takeover protection, or takeover failure, the main control chip prohibits the use of abnormal stage data to update the initial power supply state to prevent abnormal data from polluting the subsequent bus instability characteristic calculation of S210.

[0100] The power supply closed-loop record includes at least the initial power supply state, the main power supply stability judgment result, the false normal power supply state record, the backup battery shadow takeover command, the shadow takeover execution status, the takeover evaluation data, the power supply status after takeover, the power supply switching result, the shadow takeover flag, the complete takeover flag, and the final status of the fault temporary storage flag.

[0101] The main control chip marks samples in the power supply closed-loop record based on the power supply switching results. When the switching type is exiting shadow takeover and undervoltage protection is not triggered, it is marked as a false normal recovery sample. When the switching type is full takeover, it is marked as a main power supply instability takeover sample. When the switching type is takeover protection or takeover failure, it is marked as a takeover anomaly sample. During a normal inspection cycle without triggering a false normal power supply state, if the main power supply stability judgment result is stable and the intrinsically safe output is continuously stable, the main control chip generates a normal power supply record and marks it as a normal power supply sample.

[0102] The main control chip feeds back the power supply closed-loop record or normal power supply record with sample tags to S220 as a sample for the wolf pack algorithm to subsequently correct the main power supply instability judgment parameters, so that the next main power supply stability judgment, false normal power supply status confirmation and backup battery shadow takeover control form a closed loop based on the updated operation results.

[0103] Example 2: Figure 2 As shown, this embodiment provides a mine-use explosion-proof and intrinsically safe DC regulated power supply control system. In terms of physical hardware architecture, the system includes at least a main control chip, a main power DC bus, a backup battery, a charging switch, a current-limiting soft switch, and multiple intrinsically safe output branches. The backup battery is connected to the main power DC bus via a current-limiting soft switch, the PWM output terminal of the main control chip is connected to the control terminal of the current-limiting soft switch, and the sampling terminal of the main control chip is connected to the main power DC bus, the backup battery, and each intrinsically safe output branch.

[0104] Based on the above hardware architecture, the system logically includes: The power supply initial state generation module is used to disconnect the backup battery access channel and charging switch after the main control chip is powered on, collect data from the main power DC bus, backup battery and each intrinsically safe output branch according to the sampling channel configuration table, and generate a valid power supply sampling set and power supply initial state after field verification and deletion of abnormal data. The main power supply stability determination module is used to calculate the rate of decrease of DC bus voltage, the increase of bus ripple and the synchronous fluctuation of multi-channel intrinsically safe output current based on the initial power supply state and subsequent effective power supply sampling set. It also uses the wolf pack algorithm to generate main power supply instability determination parameters and outputs the main power supply stability determination result. The false normal power supply status confirmation module is used to generate a false normal candidate status when the main power supply stability judgment result is an instability warning and the main power supply DC bus voltage is still higher than the undervoltage protection value. It also combines the backup battery access flag, the parallel connection voltage difference and the current limiting soft switch self-test status to generate a false normal power supply status record. The backup battery shadow takeover module is used to generate backup battery shadow takeover instructions based on the false normal power supply status record, control the backup battery to be connected to the main power DC bus via a current-limiting soft switch with a controlled small current, maintain the power supply of critical intrinsically safe output branches, reduce the allowable current of non-critical intrinsically safe output branches, and generate takeover evaluation data. The power supply status switching closed-loop module is used to generate the power supply status after takeover based on the takeover assessment data, perform full takeover, exit shadow takeover, maintain shadow takeover or takeover protection, output the power supply switching result, and generate a power supply closed-loop record to feed back to the correction process of the main power supply instability judgment parameters.

[0105] All the above formulas are performed using dimensionless numerical calculations; the relevant formulas are based on empirical models that approximate the real situation, obtained through extensive data collection and software simulation fitting. The preset parameters and thresholds involved in the formulas can be conventionally set and adjusted by those skilled in the art according to the physical constraints of the actual application scenario.

[0106] Those skilled in the art will recognize that the modules and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0107] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0108] In conclusion, the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply, characterized in that, Includes the following steps: S1. After the main control chip is powered on, disconnect the backup battery access channel and charging switch, collect data from the main power DC bus, backup battery and each intrinsically safe output branch according to the sampling channel configuration table, verify and delete abnormal sampling fields, and generate a valid power supply sampling set and power supply initial state. S2. Based on the initial power supply state and subsequent effective power supply sampling set, calculate the main power supply DC bus voltage drop rate, bus ripple increase magnitude and multi-channel intrinsically safe output current synchronous fluctuation amount, use the wolf pack algorithm to generate main power supply instability judgment parameters, and output the main power supply stability judgment result. S3. When the main power supply stability judgment result is an instability warning and the main power supply DC bus voltage is still higher than the undervoltage protection value, a false normal candidate state is generated. Combined with the backup battery access flag, parallel connection voltage difference and current limiting soft switch self-test status, a false normal power supply status record is generated. S4. Generate a backup battery shadow takeover instruction based on the false normal power supply status record, control the backup battery to be connected to the main power supply DC bus with a controlled small current through the current limiting soft switch, while maintaining the power supply of the critical intrinsically safe output branch and reducing the allowable current of the non-critical intrinsically safe output branch, and generate takeover evaluation data.

2. The control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 1, characterized in that, Also includes: S5. Generate the power supply status after takeover based on the takeover assessment data, determine whether to perform full takeover, exit shadow takeover, maintain shadow takeover, or takeover protection, output the power supply switching result, and generate a power supply closed-loop record to feed back to the correction process of the main power supply instability judgment parameters.

3. The control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 1, characterized in that, S1 specifically includes: After the main control chip is powered on, it disconnects the backup battery access channel and the charging switch, clears the shadow takeover flag, the full takeover flag and the fault temporary storage flag, reads the sampling channel configuration and generates the sampling channel configuration table. The main control chip synchronously collects data from the main power DC bus, backup battery and each intrinsically safe output branch according to the sampling channel configuration table, performs field integrity, range and refresh verification, deletes abnormal sampling fields or abnormal sampling periods, and generates a valid power supply sampling set. The main control chip calculates the reference voltage of the main power DC bus, the reference value of the bus ripple, and the reference current of each intrinsically safe output branch based on the effective power supply sampling set, and generates a backup battery access flag and the initial power supply state.

4. The control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 1, characterized in that, S2 specifically includes: The main control chip reads the initial power supply state and subsequent effective power supply sampling set, calculates the main power supply DC bus voltage drop rate, bus ripple increase magnitude and multi-channel intrinsically safe output current synchronous fluctuation amount within the current sampling window, and generates a bus instability feature set; The main control chip calls the wolf pack algorithm, using historical effective power supply sampling sets and power supply closed-loop records as samples, to optimize the voltage drop rate threshold, bus ripple increase threshold, multi-channel intrinsically safe output current synchronous fluctuation threshold and corresponding weights, and generate main power supply instability judgment parameters.

5. A control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 4, characterized in that, Also includes: The main control chip performs threshold comparison and continuous period verification based on the bus instability feature set and main power supply instability judgment parameters, and outputs the main power supply stability judgment result of stable, instability warning or invalid sampling.

6. The control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 1, characterized in that, S3 specifically includes: The main control chip reads the main power supply stability judgment result and the current main power supply DC bus voltage. When the judgment state is instability warning and the undervoltage margin is greater than zero, a false normal candidate state is generated. Based on the false normal candidate state, the main control chip verifies the backup battery access flag, backup battery voltage, temperature, remaining power ratio, discharge protection status, charging switch status, current limiting soft switch self-test status, and parallel voltage difference, and generates a backup battery pre-access permission or backup battery access prohibition result.

7. A control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 6, characterized in that, Also includes: When the main control chip forms a false normal candidate state and obtains permission for backup battery pre-takeover within a consecutive preset window, it generates a false normal power supply state record and writes the shadow takeover trigger flag, recommended pre-support current level and intrinsically safe output branch identifier.

8. The control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 1, characterized in that, S4 specifically includes: The main control chip reads the false normal power supply status record. When the shadow takeover trigger flag is valid, it generates a backup battery shadow takeover command based on the recommended pre-support current level, the backup battery allowable discharge current, and the current-limiting soft switch allowable current. The main control chip controls the current-limiting soft switch to be ramped on according to the backup battery shadow takeover instruction, so that the backup battery is connected to the main power DC bus with a controlled small current, and maintains the power supply of the critical intrinsically safe output branch, reduces the allowable current of the non-critical intrinsically safe output branch, and generates the shadow takeover execution state. The main control chip verifies the backup battery pre-support current, the main power DC bus support voltage, the bus ripple, and the status of each intrinsically safe output branch based on the shadow takeover execution status, and generates takeover assessment data.

9. A control method for a mine-use explosion-proof and intrinsically safe DC regulated power supply according to claim 1, characterized in that, S5 specifically includes: The main control chip reads the takeover assessment data and continues to collect the main power supply DC bus voltage, bus ripple, intrinsically safe output branch current, backup battery status and current limiting soft switch duty control quantity to generate the power supply status after takeover and form the conditions for complete takeover, exit shadow takeover, or takeover protection. The main control chip performs power supply state switching according to conditions. When fully taking over, it keeps the charging switch off and increases the current limiting soft switch duty control. When exiting shadow takeover, it reduces the backup battery pre-support current and restores the non-critical intrinsically safe output branch current, generating power supply switching results. The main control chip updates the initial power supply state based on the power supply switching result, generates a power supply closed-loop record and marks the sample type, and feeds it back to the wolf pack algorithm to correct the main power supply instability judgment parameters.

10. A mine-use explosion-proof and intrinsically safe DC regulated power supply control system, employing the mine-use explosion-proof and intrinsically safe DC regulated power supply control method according to any one of claims 1 to 9, characterized in that, include: The power supply initial state generation module is used to disconnect the backup battery access channel and charging switch after the main control chip is powered on; The main power supply stability determination module is used to calculate the rate of decrease of the DC bus voltage, the increase of the bus ripple, and the synchronous fluctuation of the multi-channel intrinsically safe output current based on the initial power supply state and the subsequent effective power supply sampling set. The false normal power supply status confirmation module is used to generate a false normal candidate status when the main power supply stability judgment result is an instability warning and the main power supply DC bus voltage is still higher than the undervoltage protection value. The backup battery shadow takeover module is used to generate backup battery shadow takeover instructions based on the false normal power supply status record, and control the backup battery to be connected to the main power DC bus via a current-limiting soft switch with a controlled small current. The power supply status switching closed-loop module is used to generate the power supply status after takeover based on the takeover assessment data, and to perform full takeover, exit shadow takeover, maintain shadow takeover, or takeover protection.

Images