A refrigerated vehicle hierarchical fault-tolerant and multi-mode power supply control system and method

Abstract

The application provides a refrigeration truck hierarchical fault-tolerant and multi-mode power supply control system and method, comprising a cloud control platform, a multi-mode power supply unit, a remote-CAN collaborative control unit, a fault hierarchical fault-tolerant unit and a safety linkage unit, the cloud control platform is connected with the remote-CAN collaborative control unit through 4G / 5G or Beidou dual-mode communication, the remote-CAN collaborative control unit is interconnected with the multi-mode power supply unit, the fault hierarchical fault-tolerant unit and the safety linkage unit through a CAN bus; the application realizes the innovative design of power supply mode full coverage+control authority transfer+serious fault processing grading+safety protection linkage, and improves the continuity, controllability and safety of refrigeration power supply of the refrigeration truck.

Description

Technical Field

[0001] This invention relates to a graded fault-tolerant and multi-mode power supply control system and method for refrigerated trucks, and pertains to the field of refrigerated truck technology. Background Technology

[0002] As the core equipment of cold chain transportation, the stable operation of refrigeration units in refrigerated trucks directly determines the quality of goods. Existing refrigeration units in refrigerated trucks rely on a single power supply mode, primarily using batteries. This makes flexible switching between charging and external power sources impossible, and the remote control logic is flawed, easily leading to control conflicts and subsequent spoilage. Furthermore, the remote control logic of existing refrigeration units is inadequate, exhibiting problems such as conflicts between remote and vehicle-side control, and loss of control over the unit's operation after signal loss. In addition, when connecting to external backup power, the lack of a safety linkage mechanism with the chassis increases the risk of accidental vehicle start-up and operation.

[0003] Furthermore, existing technologies mostly adopt a crude "single fault shutdown" approach, failing to consider the core requirement of "refrigeration priority" for refrigerated trucks and lacking the refined control of "preserving refrigeration power supply during non-critical faults." Safety linkage mechanisms are lacking; most power supply systems do not consider safety hazards during multi-mode switching. For example, there is no vehicle locking function when using mains power while parked, and power switching during charging lacks automatic coordination, posing operational risks and potential equipment damage. Summary of the Invention

[0004] To address the aforementioned problems arising from actual power generation, this invention provides a graded fault-tolerant and multi-mode power supply control system and method for refrigerated trucks. The specific technical solution is as follows:

[0005] A graded fault-tolerant and multi-mode power supply control system for refrigerated trucks includes: a cloud control platform, a multi-mode power supply unit, a remote-CAN collaborative control unit, a fault graded fault-tolerant unit, and a safety linkage unit. The cloud control platform and the remote-CAN collaborative control unit are connected via 4G / 5G or Beidou dual-mode communication. The remote-CAN collaborative control unit is interconnected with the multi-mode power supply unit, the fault graded fault-tolerant unit, and the safety linkage unit via a CAN bus.

[0006] The multi-mode power supply unit automatically switches the power supply according to the preset power supply priority to achieve uninterrupted power supply switching in driving, charging and parking scenarios.

[0007] The remote-CAN collaborative control unit includes a remote communication module, a CAN bus interface module, and an access control module. The remote-CAN collaborative control unit receives remote commands through the remote communication module, parses CAN signals and interacts with the vehicle control system through the CAN bus interface module, and realizes automatic transfer and synchronization of control between the remote end and the vehicle end based on the access control module.

[0008] The fault classification and fault tolerance unit performs differentiated fault tolerance control based on the fault source and risk level;

[0009] The safety linkage unit executes the linkage safety protection logic based on the current power supply mode and fault status.

[0010] Preferably, the multi-mode power supply unit includes a power battery, a charging pile interface module, a mains power interface module, and a switching control module, wherein the power battery, the charging pile interface module, and the mains power interface module respectively provide power to the refrigeration unit through their respective power supply modes;

[0011] The power supply priority is: mains power first, charging pile second, and power battery by default.

[0012] The switching control module is based on an IGBT solid-state switch to construct a switching circuit. It uses a voltage detection unit to collect data on the power battery, charging pile interface module, and mains power interface module in real time to switch the power supply mode.

[0013] Preferably, the remote communication module communicates with the cloud control platform via 4G / 5G or BeiDou dual-mode;

[0014] The CAN bus interface module is communicatively connected to the multi-mode power supply unit, fault classification and fault tolerance unit, and safety linkage unit via the CAN bus; the CAN bus interface module is also communicatively connected to the vehicle control system via the CAN bus to obtain vehicle status information and fault information.

[0015] The vehicle control system includes a vehicle control unit (VCU) and an integrated controller.

[0016] The permission management module presets multiple control permission modes, including:

[0017] Remote priority mode, which prioritizes responding to remote control commands from the cloud control platform;

[0018] Vehicle-first mode, which prioritizes responding to control commands from the vehicle control system;

[0019] Automatic handover mode dynamically switches control ownership based on remote communication status;

[0020] When in remote priority mode, if the remote signal is lost, it is determined that the communication is interrupted. At this time, the current operating parameters are automatically locked and control is transferred to the vehicle control system.

[0021] When the remote signal is restored, the permission status will be automatically resynchronized, and a decision will be made on whether to return control to the cloud control platform based on the current control permission mode.

[0022] The operating parameters include remote control commands and the execution status of the vehicle control system.

[0023] Preferably, the cloud control platform has remote control permissions to perform at least one of the following operations: setting cooling parameters, switching power supply modes, and starting and stopping the refrigeration unit;

[0024] The permission management module has a permission hierarchy, in which the permission hierarchy of the cloud control platform is higher than that of the vehicle control system.

[0025] When there is a conflict between the control commands of the cloud control platform and the vehicle control system, the permission management module shall give priority to executing the control commands of the cloud control platform.

[0026] Preferably, the fault classification and fault tolerance unit includes a fault detection module, a classification processing module, and a fault tolerance execution module;

[0027] The fault detection module is configured to monitor the operating status parameters of the multi-mode power supply unit, as well as the operating status parameters and communication status of the vehicle control system in real time.

[0028] The graded processing module performs graded fault-tolerant control according to the severity of the fault, so as to prioritize ensuring the power supply continuity of the chiller unit.

[0029] The hierarchical fault-tolerant control includes:

[0030] For a Level 1 fault, disconnect the high-voltage output of the power battery to cut off the high-voltage circuit of the entire vehicle;

[0031] For a level 2 fault, only disconnect the high-voltage circuit of the motor and keep the high-voltage auxiliary circuit powered.

[0032] For a Level 3 fault, maintain power supply and log the information.

[0033] Preferably, the operating status parameters include the voltage, state of charge, and temperature of the power battery, as well as the IGBT temperature and drive signal of the integrated controller; the communication status includes the communication status of the vehicle controller (VCU).

[0034] The first level of fault includes faults that the battery management system determines pose a serious risk to and is unable to continue outputting high voltage;

[0035] The second-level fault includes a serious fault in the vehicle system, and the serious fault in the vehicle system does not affect the power battery from continuing to output high voltage;

[0036] The serious faults in the vehicle system include serious faults in the integrated controller, serious faults in the motor controller, or serious faults related to non-high voltage power distribution units.

[0037] Preferably, the safety linkage unit includes a vehicle locking module, a charging coordination module, and a delayed power-off module:

[0038] The vehicle locking module is used to generate a vehicle locking signal to prohibit the vehicle from driving when the vehicle is powered by the charging pile interface module or the mains interface module; when the fault classification fault tolerance unit executes the first-level fault or the second-level fault cutoff strategy, it generates a corresponding driving restriction signal according to the fault level.

[0039] The charging coordination module is used to prohibit vehicle charging when the vehicle is in driving mode; when the fault classification fault tolerance unit executes the first-level fault cutoff strategy, it generates a stop charging signal; when the fault classification fault tolerance unit executes the second-level fault cutoff strategy, it generates a limit charging power signal or a stop charging signal.

[0040] The delayed power-off module is used to delay cutting off the power supply to the refrigeration unit when it receives a power supply mode switching signal or a vehicle shutdown signal.

[0041] A graded fault-tolerant and multi-mode power supply control method for refrigerated trucks, applied to any of the systems described above, includes the following steps:

[0042] System initialization: Detect power supply status, communication link status, and sensor status, and set the default operating mode;

[0043] Power supply mode switching: Perform uninterrupted power supply switching according to vehicle status and control commands;

[0044] Fault classification and handling: Real-time monitoring of operating parameters, and execution of corresponding fault-tolerant control according to the fault level;

[0045] Safety linkage control: Executes linkage safety protection logic based on power supply mode and fault status.

[0046] Preferably, the default operating mode is automatic handover mode and power battery powered mode;

[0047] In the power supply mode switching step, the power supply priority is given to mains power, followed by charging pile, and then the power battery is switched without interruption through IGBT solid-state switches.

[0048] The beneficial effects of this invention compared to the prior art are as follows:

[0049] To address issues such as incomplete mode coverage, ambiguous remote control permissions, one-size-fits-all fault handling, and lack of safety linkage in existing refrigerated truck power supply systems;

[0050] The multi-mode power supply unit integrates three power supply modes: power battery, charging pile, and external AC power, adapting to continuous operation in all scenarios of driving, charging, and parking. The remote-CAN collaborative control unit enables seamless transfer of control between the remote cloud and the vehicle's CAN bus, automatically locking the operating status and restoring vehicle control when the signal is lost. The fault-level fault-tolerant unit implements differentiated handling based on the source of severe faults and the risk level of system assessment, retaining the auxiliary drive high voltage to maintain refrigeration for non-critical faults. The safety linkage unit implements protective logic such as locking the vehicle during backup power supply and automatically switching power upon completion of charging. Through innovative designs that cover all power supply modes, allow for transfer of control authority, provide tiered handling of severe faults, and link safety protection, the continuity, controllability, and safety of refrigeration power supply for refrigerated trucks are improved. Attached Figure Description

[0051] Figure 1 This is a schematic diagram of the framework structure of the present invention;

[0052] Figure 2 This is a flowchart of the present invention.

[0053] Figure 3 This is a flowchart of the fault classification and fault-tolerant control of the present invention. Detailed Implementation

[0054] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0055] Example 1

[0056] like Figures 1-2 As shown, a graded fault-tolerant and multi-mode power supply control system for refrigerated trucks includes: a cloud control platform, a multi-mode power supply unit, a remote-CAN collaborative control unit, a fault graded fault-tolerant unit, and a safety linkage unit. The cloud control platform and the remote-CAN collaborative control unit are connected via 4G / 5G or Beidou dual-mode communication. The remote-CAN collaborative control unit is interconnected with the multi-mode power supply unit, the fault graded fault-tolerant unit, and the safety linkage unit via a CAN bus.

[0057] The multi-mode power supply unit automatically switches power supplies according to preset power supply priorities to achieve uninterrupted power supply switching in driving, charging, and parking scenarios.

[0058] The remote-CAN cooperative control unit includes a remote communication module, a CAN bus interface module, and an access control module. The remote-CAN cooperative control unit receives remote commands through the remote communication module, parses CAN signals and interacts with the vehicle control system through the CAN bus interface module, and realizes automatic transfer and synchronization of control between the remote end and the vehicle end based on the access control module.

[0059] The fault-level fault-tolerant unit performs differentiated fault-tolerant control based on the source of the fault and the level of risk.

[0060] The safety linkage unit executes the linkage safety protection logic based on the current power supply mode and fault status.

[0061] The multi-mode power supply unit includes a power battery, a charging pile interface module, a mains power interface module, and a switching control module. The power battery, the charging pile interface module, and the mains power interface module each provide power to the refrigeration unit through their respective power supply modes.

[0062] Power supply priority is: mains power first, charging pile second, and power battery by default;

[0063] The switching control module uses an IGBT solid-state switch to build a switching circuit. It uses a voltage detection unit to collect data in real time from the power battery, charging pile interface module, and mains interface module to switch the power supply mode.

[0064] The remote communication module connects to the cloud control platform via 4G / 5G or BeiDou dual-mode.

[0065] The CAN bus interface module communicates with the multi-mode power supply unit, fault classification and fault tolerance unit and safety linkage unit via the CAN bus; the CAN bus interface module also communicates with the vehicle control system via the CAN bus to obtain vehicle status information and fault information.

[0066] The vehicle control system includes the vehicle control unit (VCU) and the integrated controller.

[0067] The access control module has multiple preset access control modes, including:

[0068] Remote priority mode, which prioritizes responding to remote control commands from the cloud control platform;

[0069] Vehicle-first mode, which prioritizes responding to control commands from the vehicle control system;

[0070] Automatic handover mode dynamically switches control ownership based on remote communication status;

[0071] When in remote priority mode, if the remote signal is lost, it is determined that the communication is interrupted. At this time, the current operating parameters are automatically locked and control is transferred to the vehicle control system.

[0072] When the remote signal is restored, the permission status will be automatically resynchronized, and a decision will be made on whether to return control to the cloud control platform based on the current control permission mode.

[0073] Operating parameters include remote control commands and the execution status of the vehicle control system.

[0074] The cloud control platform has remote control permissions and can be used to perform at least one of the following operations: setting cooling parameters, switching power supply modes, and starting and stopping the refrigeration unit;

[0075] The access control module has access levels, with the cloud control platform having a higher access level than the vehicle control system.

[0076] When control commands from the cloud control platform conflict with those from the vehicle control system, the access control module takes priority in executing the control commands from the cloud control platform.

[0077] The fault classification and fault tolerance unit includes a fault detection module, a classification processing module, and a fault tolerance execution module.

[0078] The fault detection module is configured to monitor the operating status parameters of the multi-mode power supply unit, as well as the operating status parameters and communication status of the vehicle control system in real time.

[0079] The graded processing module performs graded fault-tolerant control based on the severity of the fault, prioritizing the protection of the power supply continuity of the chiller unit;

[0080] Hierarchical fault-tolerant control includes:

[0081] For a Level 1 fault, disconnect the high-voltage output of the power battery to cut off the high-voltage circuit of the entire vehicle;

[0082] For a level 2 fault, only disconnect the high-voltage circuit of the motor and keep the high-voltage auxiliary circuit powered.

[0083] For a Level 3 fault, maintain power supply and log the information.

[0084] Operating status parameters include the voltage, state of charge, and temperature of the power battery, as well as the IGBT temperature and drive signal of the integrated controller; communication status includes the communication status of the vehicle controller (VCU).

[0085] Level 1 faults include those determined by the battery management system to be at serious risk to the battery and unable to continue outputting high voltage.

[0086] Level 2 faults include serious faults in the vehicle system, and serious faults in the vehicle system do not affect the power battery's ability to continue outputting high voltage.

[0087] Serious vehicle system failures include serious failures of the integrated controller, motor controller, or non-high-voltage power distribution unit.

[0088] The safety linkage unit includes a vehicle locking module, a charging coordination module, and a delayed power-off module:

[0089] The driving lock module is used to generate a driving lock signal to prohibit the vehicle from driving when the vehicle is powered by the charging pile interface module or the mains interface module; when the fault classification fault tolerance unit executes the first-level fault or the second-level fault cutoff strategy, it generates a corresponding driving restriction signal according to the fault level.

[0090] The charging coordination module is used to prevent the vehicle from charging when the vehicle is in motion; when the fault classification fault tolerance unit executes the disconnection strategy for the first level fault, it generates a stop charging signal; when the fault classification fault tolerance unit executes the disconnection strategy for the second level fault, it generates a limit charging power signal or a stop charging signal.

[0091] The delayed power-off module is used to delay cutting off the power supply to the refrigeration unit when a power supply mode switching signal or a vehicle shutdown signal is received.

[0092] A graded fault-tolerant and multi-mode power supply control method for refrigerated trucks, applied to any of the above systems, includes the following steps:

[0093] System initialization: Detect power supply status, communication link status, and sensor status, and set the default operating mode;

[0094] Power supply mode switching: Perform uninterrupted power supply switching according to vehicle status and control commands;

[0095] Fault classification and handling: Real-time monitoring of operating parameters, and execution of corresponding fault-tolerant control according to the fault level;

[0096] Safety linkage control: Executes linkage safety protection logic based on power supply mode and fault status.

[0097] The default operating modes are automatic handover mode and power battery powered mode;

[0098] During the power supply mode switching process, the power supply priority is given to mains power, followed by charging piles, and then the power battery (default priority). The uninterrupted power supply switching is performed through IGBT solid-state switches.

[0099] Example 2

[0100] Scenario Description: A refrigerated truck belonging to a cold chain logistics company needs to make a brief stop at a delivery point to unload goods during a transport mission. The vehicle is parked at this time, and to conserve battery power, the driver connects to the 220V AC mains power provided by the depot to continue powering the refrigeration unit. After unloading, the truck continues on the highway, recharges at a service area, and continues its journey.

[0101] S1, Cool start-up in power battery powered mode:

[0102] When the vehicle is in motion, the refrigeration unit is initially in standby mode. Upon receiving a start-up command from the cloud control platform, the vehicle control unit (VCU) prioritizes closing the upper-level interface relay of the power distribution unit (PDU), allowing the high-voltage output from the power battery to the refrigeration unit. The refrigeration unit then starts operating, with the compressor frequency stabilizing at 45Hz, maintaining the cabin temperature at 5°C.

[0103] S2, Switch from power battery power supply mode to AC power supply mode:

[0104] With the vehicle parked, the driver uses a dedicated cable to connect the AC 220V power outlet to the vehicle's power supply interface. Upon detecting the AC power connection, the AC power interface module uses an IGBT solid-state switch to seamlessly switch from the power battery to AC power within milliseconds. The AC / DC converter then converts the 220V AC power to DC power, ensuring uninterrupted power supply to the refrigeration unit.

[0105] Meanwhile, after the vehicle controller (VCU) detects the mains power connection, it executes the safety linkage logic: shuts off the motor IGBT (cuts off motor power), controls the electronic parking brake system (EPB) to automatically pull up the handbrake, prohibits the vehicle from shifting gears, and the driver has no driving operation authority to prevent the vehicle from starting accidentally.

[0106] S3, Switching back from AC power supply mode to battery power supply mode:

[0107] After unloading is completed, the driver disconnects the mains power cable. Once the vehicle control unit (VCU) detects the power disconnection, it restores the driver's operating privileges, controls the motor's IGBTs to conduct, and the vehicle resumes normal driving capability.

[0108] Since the cooling request command from the cloud control platform is still valid, the upper interface relay of the vehicle controller (VCU) controlling the power distribution unit (PDU) remains closed, the power battery continues to supply power to the refrigeration unit, the refrigeration unit continues to operate, the compressor frequency remains stable at 45Hz, and the cabin temperature is maintained at 5℃.

[0109] S4. Switch from power battery power supply mode to charging pile power supply mode:

[0110] The driver pulls the vehicle into the service area and plugs in the charging gun. At this point, the refrigeration unit is already running (set temperature 5℃).

[0111] The vehicle control unit (VCU) executes safety linkage logic: shutting off the motor IGBT, controlling the electronic parking brake (EPB) to engage the handbrake, and prohibiting gear shifting, thus depriving the driver of driving operation authority. Simultaneously, the BMS contactor remains connected to ensure uninterrupted power supply to the battery.

[0112] The driver scans the code to start charging. After entering the charging handshake process, the charging station charges the power battery. The vehicle control logic keeps the high-voltage circuit open, and the refrigeration unit continuously draws power from the high-voltage circuit to ensure uninterrupted cooling.

[0113] The driver left the vehicle to rest, removed the key, and locked the car. At this time, the vehicle's DC-DC converter was still working, the low-voltage power supply to the refrigeration unit was normal, and the refrigeration unit continued to operate normally.

[0114] Once the BMS is fully charged, if the cooling request command from the cloud control platform remains valid, the vehicle control unit (VCU) will keep the contactors of the BMS and power distribution unit (PDU) closed, allowing the charging pile to continue supplying power to the cooling unit and ensuring uninterrupted cooling.

[0115] When the driver needs to continue driving, disconnect the charging gun, and the vehicle control unit (VCU) will restore the driver's operating privileges. The driver inserts the key and powers on the vehicle normally, which enters the "READY" state. The vehicle can then be started and driven normally to the next destination.

[0116] Example 3

[0117] Scenario: A refrigerated truck is transporting fresh produce, and the temperature inside the truck compartment needs to be maintained at a stable -18°C. While the vehicle is in motion, the refrigeration unit is powered by a battery. Figure 3 As shown, the fault classification and fault-tolerant control process of the present invention is as follows:

[0118] S1, Second-level fault occurrence – Integrated controller IGBT over-temperature fault:

[0119] When the IGBT temperature sensor inside the integrated controller detects a temperature exceeding a preset threshold (e.g., 85°C), the Battery Management System (BMS) determines this to be a serious system-wide fault, but the battery is allowed to continue discharging without issuing a high-voltage cutoff request. The graded processing module classifies this fault as a Level 2 fault.

[0120] S2. Fault Diagnosis and Instructions:

[0121] The vehicle control unit (VCU) received a level 2 fault signal via the CAN bus and detected that the BMS_BMSCutoReq signal (battery management system high-voltage cut-off request signal) was invalid (no high-voltage cut-off request). The instrument panel displayed "Serious vehicle malfunction, please pull over" and the emergency stop indicator light illuminated.

[0122] S3, Tiered fault-tolerant control – only disconnects the motor, maintaining power supply to the cooling system:

[0123] The hierarchical processing module executes the second-level fault tolerance control strategy:

[0124] Clear the motor's output torque to zero, thus limiting the vehicle's power output;

[0125] When the vehicle speed drops below a safe threshold (e.g., 5 km / h), the motor IGBT is shut off to cut off the high-voltage circuit of the motor.

[0126] Keep the high-voltage contactor of the power distribution unit (PDU) closed normally, and keep the high-voltage power supply circuit of the refrigeration unit open.

[0127] The refrigeration unit continued to operate normally, and the temperature inside the carriage remained stable at -18℃.

[0128] S4. Fault-tolerant control results:

[0129] The vehicle was unable to continue driving and needed to pull over to await assistance. However, the refrigeration unit continued to operate, maintaining a stable temperature inside the truck and ensuring the safety of the goods. The driver received the malfunction warning and contacted maintenance; there was no need to worry about the goods spoiling.

[0130] S5, Level 1 fault occurrence – Battery thermal runaway fault:

[0131] If a Level 2 fault is not resolved, the Battery Management System (BMS) detects a battery thermal runaway fault, determines that the battery is at serious risk and cannot continue to output high voltage, and issues a high voltage cut-off request (BMS_BMSCutoReq signal is valid). The classification processing module classifies this fault as a Level 1 fault.

[0132] S6, Level 1 Fault Tolerance Control:

[0133] The tiered processing module immediately executes the first-level fault-tolerant control strategy: cutting off the high-voltage output of the power battery and cutting off all high-voltage circuits in the vehicle (including the power supply to the refrigeration unit). Simultaneously, an audible and visual alarm is activated to remind the driver to evacuate immediately.

[0134] S7, remote collaboration via cloud control platform:

[0135] Upon receiving a Level 1 fault alarm, the cloud control platform immediately contacted the driver remotely via 4G / 5G network to confirm the situation. Since the refrigeration unit had lost power, the cloud control platform remotely set a temperature monitoring alarm threshold for the cargo compartment, reminding the driver to handle the goods or contact roadside assistance as soon as possible. The cargo compartment maintained its temperature using insulation.

Claims

1. A graded fault-tolerant and multi-mode power supply control system for refrigerated trucks, characterized in that, include: The cloud control platform, multi-mode power supply unit, remote-CAN collaborative control unit, fault classification and fault tolerance unit, and safety linkage unit are included. The cloud control platform and the remote-CAN collaborative control unit are connected via 4G / 5G or Beidou dual-mode communication. The remote-CAN collaborative control unit is interconnected with the multi-mode power supply unit, fault classification and fault tolerance unit, and safety linkage unit via CAN bus. The multi-mode power supply unit automatically switches the power supply according to the preset power supply priority to achieve uninterrupted power supply switching in driving, charging and parking scenarios. The remote-CAN collaborative control unit includes a remote communication module, a CAN bus interface module, and an access control module. The remote-CAN collaborative control unit receives remote commands through the remote communication module, parses CAN signals and interacts with the vehicle control system through the CAN bus interface module, and realizes automatic transfer and synchronization of control between the remote end and the vehicle end based on the access control module. The fault classification and fault tolerance unit performs differentiated fault tolerance control based on the fault source and risk level; The safety linkage unit executes the linkage safety protection logic based on the current power supply mode and fault status.

2. The graded fault-tolerant and multi-mode power supply control system for refrigerated trucks according to claim 1, characterized in that, The multi-mode power supply unit includes a power battery, a charging pile interface module, a mains power interface module, and a switching control module. The power battery, the charging pile interface module, and the mains power interface module each provide power to the refrigeration unit through their respective power supply modes. The power supply priority is: mains power first, charging pile second, and power battery by default. The switching control module is based on an IGBT solid-state switch to construct a switching circuit. It uses a voltage detection unit to collect data on the power battery, charging pile interface module, and mains power interface module in real time to switch the power supply mode.

3. The graded fault-tolerant and multi-mode power supply control system for refrigerated trucks according to claim 1, characterized in that, The remote communication module communicates with the cloud control platform via 4G / 5G or Beidou dual-mode. The CAN bus interface module is communicatively connected to the multi-mode power supply unit, fault classification and fault tolerance unit, and safety linkage unit via the CAN bus; the CAN bus interface module is also communicatively connected to the vehicle control system via the CAN bus to obtain vehicle status information and fault information. The vehicle control system includes a vehicle control unit (VCU) and an integrated controller. The permission management module presets multiple control permission modes, including: Remote priority mode, which prioritizes responding to remote control commands from the cloud control platform; Vehicle-first mode, which prioritizes responding to control commands from the vehicle control system; Automatic handover mode dynamically switches control ownership based on remote communication status; When in remote priority mode, if the remote signal is lost, it is determined that the communication is interrupted. At this time, the current operating parameters are automatically locked and control is transferred to the vehicle control system. When the remote signal is restored, the permission status will be automatically resynchronized, and a decision will be made on whether to return control to the cloud control platform based on the current control permission mode. The operating parameters include remote control commands and the execution status of the vehicle control system.

4. The graded fault-tolerant and multi-mode power supply control system for refrigerated trucks according to claim 1, characterized in that, The cloud control platform has remote control permissions and is used to perform at least one of the following operations: setting cooling parameters, switching power supply modes, and starting and stopping the cooling unit. The permission management module has a permission hierarchy, in which the permission hierarchy of the cloud control platform is higher than that of the vehicle control system. When there is a conflict between the control commands of the cloud control platform and the vehicle control system, the permission management module shall give priority to executing the control commands of the cloud control platform.

5. The graded fault-tolerant and multi-mode power supply control system for refrigerated trucks according to claim 1, characterized in that, The fault classification and fault tolerance unit includes a fault detection module, a classification processing module, and a fault tolerance execution module. The fault detection module is configured to monitor the operating status parameters of the multi-mode power supply unit, as well as the operating status parameters and communication status of the vehicle control system in real time. The graded processing module performs graded fault-tolerant control according to the severity of the fault, so as to prioritize ensuring the power supply continuity of the chiller unit. The hierarchical fault-tolerant control includes: For a Level 1 fault, disconnect the high-voltage output of the power battery to cut off the high-voltage circuit of the entire vehicle; For a level 2 fault, only disconnect the high-voltage circuit of the motor and keep the high-voltage auxiliary circuit powered. For a Level 3 fault, maintain power supply and log the information.

6. The graded fault-tolerant and multi-mode power supply control system for refrigerated trucks according to claim 5, characterized in that, The operating status parameters include the voltage, state of charge, and temperature of the power battery, as well as the IGBT temperature and drive signal of the integrated controller; the communication status includes the communication status of the vehicle controller (VCU). The first level of fault includes faults that the battery management system determines pose a serious risk to and is unable to continue outputting high voltage; The second-level fault includes a serious fault in the vehicle system, and the serious fault in the vehicle system does not affect the power battery from continuing to output high voltage; The serious faults in the vehicle system include serious faults in the integrated controller, serious faults in the motor controller, or serious faults related to non-high voltage power distribution units.

7. The graded fault-tolerant and multi-mode power supply control system for refrigerated trucks according to claim 1, characterized in that, The safety linkage unit includes a vehicle locking module, a charging coordination module, and a delayed power-off module: The vehicle locking module is used to generate a vehicle locking signal to prohibit the vehicle from driving when the vehicle is powered by the charging pile interface module or the mains interface module; when the fault classification fault tolerance unit executes the first-level fault or the second-level fault cutoff strategy, it generates a corresponding driving restriction signal according to the fault level. The charging coordination module is used to prohibit vehicle charging when the vehicle is in driving mode; when the fault classification fault tolerance unit executes the first-level fault cutoff strategy, it generates a stop charging signal; when the fault classification fault tolerance unit executes the second-level fault cutoff strategy, it generates a limit charging power signal or a stop charging signal. The delayed power-off module is used to delay cutting off the power supply to the refrigeration unit when it receives a power supply mode switching signal or a vehicle shutdown signal.

8. A graded fault-tolerant and multi-mode power supply control method for refrigerated trucks, applied to the system described in any one of claims 1 to 7, characterized in that, Includes the following steps: System initialization: Detect power supply status, communication link status, and sensor status, and set the default operating mode; Power supply mode switching: Perform uninterrupted power supply switching according to vehicle status and control commands; Fault classification and handling: Real-time monitoring of operating parameters, and execution of corresponding fault-tolerant control according to the fault level; Safety linkage control: Executes linkage safety protection logic based on power supply mode and fault status.

9. The graded fault-tolerant and multi-mode power supply control method for refrigerated trucks according to claim 8, characterized in that, The default operating modes are automatic handover mode and power battery powered mode; In the power supply mode switching step, the power supply priority is given to mains power, followed by charging pile, and then the power battery is switched without interruption through IGBT solid-state switches.

Images