A dual-redundancy power distribution system architecture for hydrogen-electric unmanned aerial vehicles

Abstract

This application discloses a dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles (UAVs), relating to the field of UAV power distribution technology. It includes a first high-voltage power distribution redundancy, a second high-voltage power distribution redundancy, a first low-voltage power distribution redundancy, a second low-voltage power distribution redundancy, and a power distribution controller. The first high-voltage power distribution redundancy is supplied from the fuel cell stack via a first DC / DC converter and output to the first high-voltage busbar. The second high-voltage power distribution redundancy is supplied from the power battery to the second high-voltage busbar. The first low-voltage power distribution redundancy is supplied from the low-voltage battery to the first low-voltage busbar, and the second high-voltage busbar is stepped down by a second DC / DC converter for backup power. The second low-voltage power distribution redundancy is supplied from the second high-voltage busbar via a second DC / DC converter and output to the second low-voltage busbar. The power distribution controller communicates with each DC / DC converter and the battery management system bus, monitoring and performing fault reconfiguration in real time. This invention employs an asymmetric redundancy architecture, effectively controlling weight and cost while achieving dual-redundant power distribution.

Description

Technical Field

[0001] This application relates to the field of power distribution technology for unmanned aerial vehicles (UAVs), and in particular to a dual-redundant power distribution system architecture for hydrogen-powered UAVs. Background Technology

[0002] In recent years, hydrogen fuel cell drones have been widely used in long-endurance reconnaissance, inspection, and logistics transportation due to their advantages such as high energy density, long endurance, and zero emissions. Hydrogen-electric drones typically adopt a hybrid power supply architecture of "hydrogen fuel cell + auxiliary power battery", in which the hydrogen fuel cell serves as the main energy source and the lithium battery serves as a power buffer and emergency backup power source.

[0003] Currently, the power distribution systems of hydrogen-powered drones generally adopt the following two solutions:

[0004] Option 1: Single-channel centralized power distribution architecture. This option uses a single power distribution bus. Fuel cells and power batteries are connected to a common DC bus via a DC / DC converter, and then the bus supplies power to various electrical loads (power motors, flight controllers, loads, etc.).

[0005] Option 2: Dual-channel independent fully redundant power distribution architecture. This option sets up two completely independent power supply channels, each consisting of an independent fuel cell stack, an independent DC / DC converter, and an independent power battery. The two power supply channels are completely independent and serve as backups for each other.

[0006] The main drawbacks of the existing technology are as follows:

[0007] (1) Insufficient power supply reliability and prominent single-point fault problems.

[0008] In existing single-channel centralized power distribution architectures, key components such as DC / DC converters, power distribution buses, and controllers are all set up at single points, with fuel cells and power batteries merging at a single busbar for unified power distribution. If the power distribution bus or DC / DC converter fails, the entire power supply chain will fail, failing to meet the stringent power reliability requirements of drones.

[0009] (2) The weight and cost of the full redundancy scheme are too high.

[0010] While existing fully redundant dual-channel solutions improve power supply reliability through two completely independent power supply channels, core components such as fuel cell stacks, power batteries, DC / DC converters, and power distribution buses all require dual configurations, resulting in a system weight and cost increase of over 50% compared to single-redundant solutions. For UAV platforms, this significant increase in weight directly weakens payload capacity and endurance, greatly diminishing the advantage of long endurance and making it difficult to promote and apply in practical engineering.

[0011] (3) Each power supply path is independent and isolated, lacking the ability to exchange energy.

[0012] In existing solutions, whether it's a single-channel architecture or a dual-channel independent architecture, there's a lack of effective energy scheduling and mutual assistance mechanisms between the power supply paths. For example, when the power battery's capacity decreases, hydrogen-powered energy cannot be transferred across paths to supplement the second power supply channel; when the load on the low-voltage side suddenly increases, the surplus energy on the high-voltage side is also difficult to transfer to the low-voltage side in a timely manner. The fragmentation between power supply paths leads to low overall system energy utilization efficiency and makes it difficult to cope with power fluctuations under complex operating conditions.

[0013] (4) Lack of real-time monitoring and rapid reconstruction capabilities.

[0014] Most existing power distribution systems are open-loop designs, lacking real-time monitoring of the status of each power supply channel and load channel. When a local fault occurs, it is impossible to quickly locate the fault, isolate the fault, and reconstruct the power supply topology. The system does not have the ability to degrade after a fault, which often leads to the expansion of the fault range or even the loss of power to the entire unit.

[0015] In summary, existing power distribution systems for hydrogen-powered drones present a significant contradiction between reliability and lightweight / cost considerations, necessitating a new power distribution system architecture that can achieve a reasonable balance between the two. Summary of the Invention

[0016] The purpose of this application is to provide a dual-redundant power distribution system architecture for hydrogen-powered drones. While achieving dual redundancy in both high-voltage and low-voltage power distribution, it avoids the weight and cost burdens associated with dual fuel cell stacks and dual power batteries in a fully redundant dual-channel scheme. The increase in system weight and cost is controlled within 20%. At the same time, the power distribution controller communicates with each DC / DC converter and each battery management system in a closed-loop monitoring manner via bus communication, enabling real-time fault location and isolation and topology reconfiguration, which significantly improves power supply reliability and system intelligence.

[0017] To achieve the above objectives, this application provides the following solution:

[0018] This application provides a dual-redundant power distribution system architecture for hydrogen-powered drones, including:

[0019] The first high-voltage power distribution margin is generated by the fuel cell stack and output to the first high-voltage busbar after being boosted by the first unidirectional DC / DC converter; at the same time, when the fuel cell voltage is lower than a preset threshold, the power battery supplies power to the first high-voltage busbar through the first battery management system.

[0020] The second high-voltage power distribution redundancy is provided by the power battery through the first battery management system to the second high-voltage busbar; at the same time, the first high-voltage busbar can supply power to the second high-voltage busbar through the first battery management system.

[0021] The first low-voltage power distribution redundancy is provided by the low-voltage battery through the second battery management system to the first low-voltage busbar; at the same time, when the low-voltage battery is insufficient, the second high-voltage busbar is stepped down by the second unidirectional DC / DC converter and output to the first low-voltage busbar.

[0022] The second low-voltage power distribution redundancy is output from the second high-voltage busbar to the second low-voltage busbar after being stepped down by the second unidirectional DC / DC converter;

[0023] The power distribution controller is connected to the first unidirectional DC / DC converter, the second unidirectional DC / DC converter, the first battery management system, and the second battery management system via a bus communication connection. It is used to monitor the status and faults of each power supply channel and load channel in real time, and to perform power distribution and fault reconstruction.

[0024] Optionally, the power distribution controller adopts a dual-core redundant MCU or FPGA, and integrates voltage sampling circuit, current sampling circuit, insulation monitoring circuit, fault protection logic and communication interface.

[0025] Optionally, high-voltage critical loads are powered by the first high-voltage busbar and the second high-voltage busbar through the power distribution controller with dual redundancy; high-voltage general loads are powered by the first high-voltage busbar or the second high-voltage busbar through the power distribution controller with single redundancy; low-voltage critical loads are powered by the first low-voltage busbar and the second low-voltage busbar through the power distribution controller with dual redundancy; and low-voltage general loads are powered by the first low-voltage busbar or the second low-voltage busbar through the power distribution controller with single redundancy.

[0026] Optionally, the power distribution controller implements the following hierarchical fault reconfiguration strategy:

[0027] First level: When any of the fuel cell stack, the power battery, or the low-voltage battery fails, the first unidirectional DC / DC converter or the corresponding battery management system is disconnected, ensuring normal power supply to the high-voltage and low-voltage busbars, and maintaining dual-redundancy power supply for critical downstream loads without degradation; when any of the first unidirectional DC / DC converter or the second battery management system fails, the corresponding hydrogen fuel cell or low-voltage battery cannot supply power, but the high-voltage and low-voltage busbars still supply power normally, and maintaining dual-redundancy power supply for critical downstream loads without degradation; when any of the first battery management system or the second unidirectional DC / DC converter fails, the second high-voltage busbar or the second low-voltage busbar loses its power supply function, the corresponding general load is de-energized, and the corresponding critical load is degraded from dual-redundancy power supply to single-redundancy power supply;

[0028] Second level: When any one of the first high-voltage busbar, the second high-voltage busbar, the first low-voltage busbar, or the second low-voltage busbar fails, the faulty busbar or all loads connected to that busbar are isolated, and the corresponding important loads are downgraded from dual-redundant power supply to single-redundant power supply.

[0029] The third level: When a short circuit fault occurs on the back-end load branch, the load branch is isolated. If it is a general load, the power is cut off. If it is an important load, the power supply is downgraded from dual-redundant power supply to single-redundant power supply.

[0030] Optionally, the power distribution controller calculates the power distribution ratio between the fuel cell and the power battery in real time according to the flight mission profile: during the steady-state cruise phase, the fuel cell undertakes all continuous power demand while charging the power battery and the low-voltage battery; during the maneuvering flight phase, the fuel cell and the power battery work together to supply power, with the power battery responding to transient power demand and the fuel cell tracking the average power.

[0031] Optionally, the first unidirectional DC / DC converter adopts an isolated full-bridge DC / DC converter topology to boost the output voltage of the fuel cell into a stable high-voltage DC bus voltage; the second unidirectional DC / DC converter adopts an isolated full-bridge DC / DC converter topology to step down the output voltage of the second high-voltage bus into a stable low-voltage DC bus voltage.

[0032] Optionally, the first battery management system is used for power battery status monitoring, high-voltage pre-charge management, intelligent management of battery cells, prevention of battery overcharging and over-discharging, and management of the power battery's absorption of braking energy and excess hydrogen energy from the load motor; the second battery management system is used for low-voltage battery status monitoring, intelligent management of battery cells, and prevention of battery overcharging and over-discharging.

[0033] Optionally, the branch where the first high-voltage busbar is located is equipped with a fuse and an anti-reverse diode. The high-voltage DC power of the fuel cell stack after being boosted by the first unidirectional DC / DC converter is fed into the first high-voltage busbar through the fuse and the anti-reverse diode. The power battery is connected to the first high-voltage busbar through the first battery management system and the fuse.

[0034] Optionally, the branch where the first low-voltage busbar is located is equipped with a fuse and a reverse protection diode. The low-voltage DC power after being stepped down by the second unidirectional DC / DC converter is fed into the first low-voltage busbar through the fuse and the reverse protection diode. The low-voltage battery is connected to the first low-voltage busbar through the second battery management system and the fuse.

[0035] Optionally, the power distribution controller is connected to the first unidirectional DC / DC converter, the second unidirectional DC / DC converter, the first battery management system, and the second battery management system via a CAN bus or an RS422 bus.

[0036] According to the specific embodiments provided in this application, the following technical effects are disclosed:

[0037] (1) Power supply reliability has been significantly improved

[0038] In this application, the first high-voltage power distribution redundancy is powered jointly by the fuel cell stack and the power battery, while the second high-voltage power distribution redundancy is primarily powered by the power battery and can be supplemented by the first high-voltage busbar via the first battery management system. The two high-voltage power distribution redundancies form a cross-connected redundancy relationship. Simultaneously, the first low-voltage power distribution redundancy is jointly powered by the low-voltage battery and the second high-voltage busbar, while the second low-voltage power distribution redundancy is independently powered by the second high-voltage busbar, forming dual-channel redundancy on the low-voltage side. This architecture ensures that if any power source or converter fails, each busbar can still obtain power through other paths, avoiding system collapse due to a single point of failure and significantly improving the overall power supply reliability.

[0039] (2) Weight and cost are effectively controlled

[0040] This application achieves dual redundancy in both high-voltage and low-voltage power distribution. It uses only one fuel cell stack, one power battery, and one low-voltage battery. Through the energy scheduling between the two high-voltage busbars and between high and low voltage via the battery management system, an "asymmetric redundancy" architecture is achieved. The increase in system weight and cost can be controlled within 20%, avoiding a significant decrease in payload capacity and range performance.

[0041] (3) Each power supply channel has bidirectional mutual assistance and backup capabilities.

[0042] In this application, the first high-voltage busbar can supply power to the second high-voltage busbar via the first battery management system, so that hydrogen can be replenished in time when the power battery is insufficient, ensuring the power supply stability of the second high-voltage busbar; the second high-voltage busbar supplies power to the first low-voltage busbar and the second low-voltage busbar simultaneously via the second unidirectional DC / DC converter, so that the low-voltage side can still obtain a continuous energy supply from the high-voltage side when the low-voltage battery is insufficient. Flexible energy exchange is achieved between the power supply paths, effectively coping with power fluctuations under complex operating conditions.

[0043] (4) Possesses intelligent fault monitoring and rapid response capabilities.

[0044] This application includes a power distribution controller, which is connected via bus communication to the first unidirectional DC / DC converter, the second unidirectional DC / DC converter, the first battery management system, and the second battery management system, forming a closed-loop information system for the power supply and load status. This power distribution controller can collect real-time voltage, current, and fault information from each channel, and quickly perform fault isolation and power distribution reconfiguration when an anomaly is detected. This enables the system to possess intelligent management capabilities with fast response, accurate fault location, and reliable isolation actions, ensuring the UAV can still fly safely even in the event of a power supply anomaly. Attached Figure Description

[0045] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0046] Figure 1 This is a schematic diagram of a dual-redundant power distribution system architecture for a hydrogen-powered drone, provided as an embodiment of this application.

[0047] Figure 1 The meanings of the various symbols in the text are as follows:

[0048] 1—Fuel cell stack; 2—First unidirectional DC / DC converter; 3—First high-voltage distribution box; 31—First high-voltage busbar; 4—Second high-voltage distribution box; 41—Second high-voltage busbar; 5—First battery management system; 6—Power battery; 7—Second unidirectional DC / DC converter; 8—First low-voltage distribution box; 81—First low-voltage busbar; 9—Second low-voltage distribution box; 91—Second low-voltage busbar; 10—Second battery management system; 11—Low-voltage battery; 12—Power distribution controller; 13—High-voltage critical load; 14—High-voltage general load; 15—Low-voltage critical load; 16—Low-voltage general load. Detailed Implementation

[0049] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0050] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0051] like Figure 1As shown in the embodiment of this application, the dual-redundant power distribution system architecture for hydrogen-powered drones includes: a fuel cell stack 1, a first unidirectional DC / DC converter 2, a second unidirectional DC / DC converter 7, a first high-voltage power distribution box 3, a second high-voltage power distribution box 4, a first low-voltage power distribution box 8, a second low-voltage power distribution box 9, a power battery 6, a low-voltage battery 11, a first battery management system 5, a second battery management system 10, and a power distribution controller 12. The first high-voltage power distribution box 3 contains a first high-voltage busbar 31, the second high-voltage power distribution box 4 contains a second high-voltage busbar 41, the first low-voltage power distribution box 8 contains a first low-voltage busbar 81, and the second low-voltage power distribution box 9 contains a second low-voltage busbar 91. The entire system architecture is functionally divided into first high-voltage power distribution redundancy, second high-voltage power distribution redundancy, first low-voltage power distribution redundancy, and second low-voltage power distribution redundancy, with each redundancy forming a cross-interconnected redundancy relationship through energy scheduling.

[0052] The fuel cell stack 1 is the core power generation device composed of multiple individual fuel cells connected in series. It is a key component in the hydrogen fuel cell system that performs electrochemical reactions and outputs electrical energy. In this embodiment, a proton exchange membrane fuel cell is used, and the rated output power is configured according to the mission requirements of the UAV. The power battery 6 uses a high-power-density lithium battery pack, and its rated voltage is matched with the high-voltage DC bus voltage. The power battery 6 is paired with the first battery management system 5 to achieve charging and discharging functions. The low-voltage battery 11 also uses a high-power-density lithium battery pack, and its rated voltage is matched with the low-voltage bus voltage. The low-voltage battery 11 is paired with the second battery management system 10 to achieve charging and discharging functions.

[0053] In the first high-voltage power distribution redundancy, the output terminal of the fuel cell stack 1 is connected to the input terminal of the first unidirectional DC / DC converter 2. The output terminal of the first unidirectional DC / DC converter 2 is connected to the first high-voltage busbar 31 inside the first high-voltage distribution box 3 via a fuse and a reverse protection diode. The DC voltage output by the fuel cell stack 1 is boosted by the first unidirectional DC / DC converter 2 and converted into a stable high-voltage DC bus voltage, which is then fed into the first high-voltage busbar 31. Simultaneously, the output terminal of the power battery 6 is connected to the corresponding interface of the first battery management system 5. The power supply output terminal of the first battery management system 5 is connected to the first high-voltage busbar 31 via a fuse. When the output voltage of fuel cell stack 1 is higher than a preset threshold, fuel cell stack 1 supplies power to the first high-voltage busbar 31 solely through the first unidirectional DC / DC converter 2. When the output voltage of fuel cell stack 1 is lower than the preset threshold, the first battery management system 5 controls the power battery 6 to intervene, jointly supplying power to the first high-voltage busbar 31 with the fuel cell stack 1, or the power battery 6 supplies power to the first high-voltage busbar 31 solely, to ensure the power supply stability of the first high-voltage busbar 31. The preset threshold is pre-calibrated according to the state of charge of the power battery 6 and the load power requirements, and is usually set to 85%~90% of the rated output voltage of the fuel cell.

[0054] In the second high-voltage power distribution redundancy, the output terminal of the power battery 6 is connected to the second high-voltage busbar 41 inside the second high-voltage distribution box 4 via the corresponding interface of the first battery management system 5 and a fuse. The power battery 6 serves as the main power supply for the second high-voltage busbar 41. Simultaneously, the first high-voltage busbar 31 can supply power to the second high-voltage busbar 41 via the internal switching circuit of the first battery management system 5. Specifically, when the state of charge of the power battery 6 is sufficient, the power battery 6 alone supplies power to the second high-voltage busbar 41; when the power supply from the power battery 6 is insufficient, the first battery management system 5 controls the switching circuit to conduct, allowing the hydrogen energy from the first high-voltage busbar 31 to be supplemented to the second high-voltage busbar 41 via the first battery management system 5, ensuring the reliability of the power supply to the second high-voltage busbar 41. Insufficient power supply refers to the state of charge of the power battery 6 being lower than a preset lower limit or its output voltage being lower than the rated operating range of the second high-voltage busbar 41.

[0055] In the first low-voltage power distribution redundancy, the output terminal of the low-voltage battery 11 is connected to the corresponding interface of the second battery management system 10. The power output terminal of the second battery management system 10 is connected to the first low-voltage busbar 81 inside the first low-voltage distribution box 8 via a fuse. The low-voltage battery 11 serves as the main power supply for the first low-voltage busbar 81. Simultaneously, the second high-voltage busbar 41 is connected to the input terminal of the second unidirectional DC / DC converter 7 via a fuse. The first output terminal of the second unidirectional DC / DC converter 7 is connected to the first low-voltage busbar 81 via a fuse and a reverse protection diode. When the low-voltage battery 11 is sufficiently charged, it supplies power to the first low-voltage busbar 81 independently. When the low-voltage battery 11 is insufficient, the second unidirectional DC / DC converter 7 steps down the high-voltage DC power from the second high-voltage busbar 41 to a stable low-voltage DC bus voltage, which is then output to the first low-voltage busbar 81, ensuring the reliability of the power supply to the first low-voltage busbar 81. The insufficient power supply from the low-voltage battery refers to the state of charge of the low-voltage battery 11 being lower than a preset lower limit or its output voltage being lower than the rated operating range of the first low-voltage busbar 81.

[0056] In the second low-voltage power distribution redundancy, the second high-voltage busbar 41 is connected to the input terminal of the second unidirectional DC / DC converter 7 via a fuse. The second output terminal of the second unidirectional DC / DC converter 7 is connected to the second low-voltage busbar 91 inside the second low-voltage distribution box 9 via a fuse and a reverse protection diode. The second unidirectional DC / DC converter 7 steps down the high-voltage DC power from the second high-voltage busbar 41 to a stable low-voltage DC bus voltage, which is then output to the second low-voltage busbar 91, providing independent power to the second low-voltage busbar 91. Even if either the fuel cell stack 1 or the power battery 6 is under-powered, as long as the second high-voltage busbar 41 still has power, the second low-voltage busbar 91 can maintain a stable power supply.

[0057] The first unidirectional DC / DC converter 2 adopts an isolated full-bridge DC / DC converter topology, including an input filter capacitor, a full-bridge inverter circuit, a high-frequency isolation transformer, a rectifier circuit, and an output filter circuit. The DC power output from the fuel cell stack 1 is filtered by the input filter capacitor, then converted into high-frequency AC power by the full-bridge inverter circuit. This AC power is coupled to the secondary side via the high-frequency isolation transformer, rectified by the rectifier circuit, and then filtered again by the output filter circuit to obtain a stable high-voltage DC bus voltage. The voltage output terminal of the first unidirectional DC / DC converter 2 is connected to the first high-voltage busbar 31. The first unidirectional DC / DC converter 2 only allows electrical energy to flow unidirectionally from the fuel cell stack 1 side to the first high-voltage busbar 31 side, preventing reverse current from damaging the fuel cell stack 1. The second unidirectional DC / DC converter 7 also adopts an isolated full-bridge DC / DC converter topology, including an input filter capacitor, a full-bridge inverter circuit, a high-frequency isolation transformer, a rectifier circuit, and an output filter circuit. The high-voltage DC power from the second high-voltage busbar 41 is filtered by the input filter capacitor and then converted into high-frequency AC power by the full-bridge inverter circuit. This AC power is coupled to the secondary side via a high-frequency isolation transformer, rectified by the rectifier circuit, and then filtered again by the output filter circuit to obtain a stable low-voltage DC bus voltage. The second unidirectional DC / DC converter 7 has two independent output terminals: one connected to the first low-voltage busbar 81 and the other connected to the second low-voltage busbar 91. The second unidirectional DC / DC converter 7 only allows electrical energy to flow unidirectionally from the second high-voltage busbar 41 side to the low-voltage busbar side.

[0058] The first battery management system 5 is used for the comprehensive management of the power battery 6, including but not limited to the following functions: real-time acquisition of parameters such as voltage, current, temperature, and state of charge of the power battery 6 and reporting them to the power distribution controller 12 via the bus; limiting inrush current through a pre-charge relay and a pre-charge resistor when the power battery 6 is connected to the high-voltage busbar, and closing the main relay after pre-charging to prevent damage to the device from the impact of a large current at the moment of power-on; controlling the charging and discharging process of the power battery 6, storing the surplus electrical energy in the power battery 6 through the first battery management system 5 when there is a surplus of hydrogen energy supply, and controlling the power battery 6 to discharge and supply power to the first high-voltage busbar 31 and the second high-voltage busbar 41 through the first battery management system 5 when there is a shortage of hydrogen energy supply; controlling the power battery 6 to absorb regenerative energy through the first battery management system 5 when there is a shortage of hydrogen energy supply; and preventing the power battery 6 from experiencing abnormal operating conditions such as overcharging, over-discharging, over-temperature, and short circuit. The second battery management system 10 is used for the comprehensive management of the low-voltage battery 11, including but not limited to the following functions: real-time acquisition of parameters such as voltage, current, temperature, and state of charge of the low-voltage battery 11 and reporting them to the power distribution controller 12 via the bus; control of the charging and discharging process of the low-voltage battery 11, charging the low-voltage battery 11 by the second high-voltage busbar 41 after stepping down the voltage through the second unidirectional DC / DC converter 7 and then through the second battery management system 10 when the state of charge of the low-voltage battery 11 is low; and preventing the low-voltage battery 11 from experiencing abnormal operating conditions such as overcharging, over-discharging, over-temperature, and short circuit.

[0059] The first high-voltage distribution box 3 contains a first high-voltage busbar 31, a fuse, a reverse protection diode, and a high-voltage connector. The high-voltage DC power from the fuel cell stack 1, boosted by the first unidirectional DC / DC converter 2, flows through the fuse (for overcurrent protection) and the reverse protection diode (to prevent reverse current flow into the first unidirectional DC / DC converter 2) inside the first high-voltage distribution box 3 and into the first high-voltage busbar 31. Simultaneously, the power battery 6 connects to the first high-voltage busbar 31 via the high-voltage output terminal of the first battery management system 5 and the fuse inside the first high-voltage distribution box 3. When hydrogen power supply is insufficient, the power battery 6 replenishes the first high-voltage busbar 31 through this path; when hydrogen power supply is abundant, the excess power in the first high-voltage busbar 31 is reversed through this path and used to charge the power battery 6 via the first battery management system 5. Furthermore, the first high-voltage busbar 31 supplies power to various high-voltage loads via a load switching switch within the power distribution controller 12. When the high-voltage load is in a braking state or is driven by the blade to rotate in the opposite direction to generate electricity, the regenerated electrical energy is charged into the power battery 6 through the first high-voltage busbar 31, the corresponding fuse of the first high-voltage distribution box 3, and the first battery management system 5, thereby realizing energy recovery.

[0060] The second high-voltage distribution box 4 contains a second high-voltage busbar 41, a fuse, and a high-voltage connector. The power battery 6 is powered by the power battery 6 via the high-voltage output terminal of the first battery management system 5, and then via the fuse inside the second high-voltage distribution box 4 to the second high-voltage busbar 41 during normal operation. Simultaneously, the second high-voltage busbar 41 is connected to the input terminal of the second unidirectional DC / DC converter 7 via the fuse inside the second high-voltage distribution box 4, reducing the high-voltage power before supplying it to the low-voltage distribution box. The second high-voltage busbar 41 supplies power to each high-voltage load via a load switching switch within the distribution controller 12. When the high-voltage load brakes or the propeller drives reverse power generation, regenerated energy is charged into the power battery 6 via the second high-voltage busbar 41, the corresponding fuse in the second high-voltage distribution box 4, and the first battery management system 5, achieving energy recovery. The first high-voltage busbar 31 can supply power to the second high-voltage busbar 41 inside the second high-voltage distribution box 4 via a switching circuit inside the first battery management system 5. The switching circuit is controlled by the power distribution controller 12 according to the state of charge of the power battery 6 and the power supply requirements. When the state of charge of the power battery 6 is sufficient, the switching circuit is disconnected, and the power battery 6 supplies power to the second high-voltage busbar 41 alone; when the state of charge of the power battery 6 is lower than the preset lower limit, the power distribution controller 12 controls the switching circuit to turn on, and the hydrogen energy of the first high-voltage busbar 31 is replenished to the second high-voltage busbar 41 through the first battery management system 5.

[0061] The first low-voltage distribution box 8 contains a first low-voltage busbar 81, a fuse, a reverse protection diode, and a low-voltage connector. The low-voltage battery 11 is connected to the first low-voltage busbar 81 via the power output terminal of the second battery management system 10 and then via the fuse inside the first low-voltage distribution box 8, providing power during normal operation. Simultaneously, the first output terminal of the second unidirectional DC / DC converter 7 is connected to the first low-voltage busbar 81 via the fuse and reverse protection diode (used to prevent reverse current flow into the second unidirectional DC / DC converter 7) inside the first low-voltage distribution box 8. When the low-voltage battery 11 is fully charged, it supplies power to the first low-voltage busbar 81 independently; when the low-voltage battery 11 is insufficient, the first low-voltage busbar 81 is powered by the low-voltage DC power stepped down by the second unidirectional DC / DC converter 7, and the low-voltage battery 11 can be charged via the second battery management system 10. The first low-voltage busbar 81 supplies power to each low-voltage load via a load switching switch within the power distribution controller 12. The second low-voltage distribution box 9 contains a second low-voltage busbar 91, a fuse, a reverse protection diode, and a low-voltage connector. The second output terminal of the second unidirectional DC / DC converter 7 connects to the second low-voltage busbar 91 via the fuse and reverse protection diode inside the second low-voltage distribution box 9, providing independent power to the second low-voltage busbar 91. The second low-voltage busbar 91 supplies power to each low-voltage load via a load switching switch within the power distribution controller 12.

[0062] The power distribution controller 12 is the core control unit of the system of this invention. The power distribution controller 12 adopts a dual-core redundant MCU architecture, with the two MCU cores serving as hot backups for each other. If either core fails, it can seamlessly switch to the other core to continue operation, ensuring no single point of failure at the controller level. Alternatively, the power distribution controller 12 can also be implemented using a high-performance FPGA, utilizing the parallel processing capabilities of the FPGA to achieve rapid fault detection and response. The power distribution controller 12 integrates a voltage sampling circuit (for acquiring voltage signals from each high-voltage busbar, low-voltage busbar, and each power supply channel), a current sampling circuit (for acquiring current signals from each power supply channel and load channel), an insulation monitoring circuit (for real-time monitoring of the insulation resistance to ground on the high-voltage and low-voltage sides and detecting insulation degradation), fault protection logic (based on sampled data to implement overvoltage, undervoltage, overcurrent, short circuit, and insulation fault protection functions), and communication interfaces (including a CAN bus interface and an RS422 bus interface for communication with each DC / DC converter and each battery management system). The power distribution controller 12 communicates with the first unidirectional DC / DC converter 2, the second unidirectional DC / DC converter 7, the first battery management system 5, and the second battery management system 10 via CAN bus or RS422 bus, respectively. Uplink data includes output voltage, output current, temperature, fault codes, and operating status reported by each device to the power distribution controller 12; downlink commands include enable / disable commands, voltage and current setpoints, and operating mode switching commands issued by the power distribution controller 12 to each device. Based on the collected voltage, current, insulation status of each channel and the status information reported by each device, the power distribution controller 12 determines in real time whether the system is operating normally. When any abnormality is detected, it automatically performs fault diagnosis, fault isolation, and power distribution topology reconfiguration.

[0063] The power distribution controller 12 classifies loads into two levels—important loads (including critical loads) and general loads—based on their importance, implementing differentiated power supply strategies. High-voltage important loads 13 (such as motors and other smallest safety units implementing emergency safety strategies) are simultaneously connected to both the first high-voltage busbar 31 and the second high-voltage busbar 41, achieving dual-redundancy power supply via a dual-path switching switch within the power distribution controller 12. Under normal conditions, power is supplied by either the first high-voltage busbar 31 or the second high-voltage busbar 41, or both simultaneously, sharing the load current. When one busbar loses power, the power distribution controller 12 automatically switches to the other busbar within less than 10ms to ensure uninterrupted power supply to the high-voltage important load 13. High-voltage general loads 14 are connected to either the first high-voltage busbar 31 or the second high-voltage busbar 41, achieving single-redundancy power supply via a single-path switch within the power distribution controller 12. When the connected busbar loses power, the load is de-energized. Low-voltage critical loads 15 (such as flight controllers, critical avionics, etc.) are simultaneously connected to the first low-voltage busbar 81 and the second low-voltage busbar 91, achieving dual-redundancy power supply via a dual-path switching switch inside the power distribution controller 12. Under normal conditions, power is supplied by one of the first low-voltage busbar 81 and the second low-voltage busbar 91, or both simultaneously; when one busbar loses power, the power distribution controller 12 automatically switches to the other busbar within less than 10ms to ensure uninterrupted power supply to the low-voltage critical loads 15. Low-voltage general loads 16 are connected to either the first low-voltage busbar 81 or the second low-voltage busbar 91, achieving single-redundancy power supply via a single-path switch inside the power distribution controller 12; when the connected busbar loses power, the load is de-energized.

[0064] The power distribution controller 12 monitors the voltage, current and insulation status of each power supply channel (fuel cell stack 1, first unidirectional DC / DC converter 2, second unidirectional DC / DC converter 7, power battery 6, low-voltage battery 11, and each busbar) and each load channel in real time. When any fault is detected, the following three-level reconfiguration strategy is automatically executed. The first level is power system fault reconfiguration: When the power distribution controller 12 detects a fault in any of the following power sources: fuel cell stack 1, first unidirectional DC / DC converter 2, power battery 6 (judged by the first battery management system 5), or low-voltage battery 11 (judged by the second battery management system 10), if fuel cell stack 1 fails, the power distribution controller 12 sends a shutdown command via the bus to disconnect the output of the first unidirectional DC / DC converter 2, and the power battery 6 supplies power to the first high-voltage busbar 31 and the second high-voltage busbar 41 simultaneously via the first battery management system 5; if the first unidirectional DC / DC converter 2 fails, its output is automatically disconnected, and the power battery 6 supplies power to the first high-voltage busbar 31 and the second high-voltage busbar 41 simultaneously via the first battery management system 5; if the power battery 6 fails, the power distribution controller 12... The first battery management system 5 shuts off the output channel of the power battery 6, and the fuel cell stack 1 supplies power to the first high-voltage busbar 31 via the first unidirectional DC / DC converter 2. The first high-voltage busbar 31 then supplies power to the second high-voltage busbar 41 via the internal switching circuit of the first battery management system 5. If the low-voltage battery 11 fails, the power distribution controller 12 controls the second battery management system 10 to shut off the output channel of the low-voltage battery 11. The second high-voltage busbar 41, after being stepped down by the second unidirectional DC / DC converter 7, simultaneously supplies power to the first low-voltage busbar 81 and the second low-voltage busbar 91. If the second battery management system 10 fails, this output is automatically disconnected, and the second high-voltage busbar 41, after being stepped down by the second unidirectional DC / DC converter 7, simultaneously supplies power to the first low-voltage busbar 81 and the second low-voltage busbar 91. In any of the above power failure scenarios, critical downstream loads maintain dual-redundancy power supply without degradation, while general loads are powered off by the power distribution controller 12 as needed based on energy reserves. When either the first battery management system 5 or the second unidirectional DC / DC converter 7 fails, if the first battery management system 5 fails to supply power, the second high-voltage busbar 41 loses its power supply function, and the fuel cell stack 1 supplies power to the first high-voltage busbar 31 via the first unidirectional DC / DC converter 2. If the second unidirectional DC / DC converter 7 fails, the second low-voltage busbar 91 loses its power supply function, and the low-voltage battery 11 supplies power to the first low-voltage busbar 81 via the second battery management system 10. In either of the above failure scenarios, the corresponding general load loses power, and the corresponding critical load is degraded from dual-redundant power supply to single-redundant power supply.The second level is busbar fault reconfiguration: When the power distribution controller 12 detects a fault in any of the first high-voltage busbar 31, the second high-voltage busbar 41, the first low-voltage busbar 81, or the second low-voltage busbar 91, the fuse in the corresponding distribution box of the busbar blows, or the power distribution controller 12 controls the corresponding DC / DC converter or battery management system to shut off the power supply input of the busbar through the bus, thereby achieving electrical isolation of the faulty busbar; for all loads connected to the faulty busbar, the power distribution controller 12 disconnects its corresponding load switch, isolating all load branches connected to the busbar; the corresponding critical loads are downgraded from dual-redundant power supply to single-redundant power supply (switched to another normal busbar); the corresponding general loads are de-energized, and the general loads on the remaining non-faulty busbars are de-energized by the power distribution controller 12 as needed based on energy margin. The third level is load branch fault reconfiguration: When the power distribution controller 12 detects a short circuit fault in a load branch at the back end, the power distribution controller 12 immediately disconnects the switch corresponding to the load branch to isolate the faulty load branch; if it is a general load branch, the load is directly de-energized; if it is an important load branch, the important load is downgraded from dual-redundant power supply to single-redundant power supply (isolating one faulty branch and switching to the other busbar for power supply) to ensure that the important load can continue to work; the remaining non-faulty loads remain in normal working condition and are not affected.

[0065] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0066] This document uses specific examples to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. Furthermore, those skilled in the art will recognize that, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A dual-redundant power distribution system architecture for a hydrogen-powered unmanned aerial vehicle, characterized in that, The dual-redundant power distribution system architecture for the hydrogen-powered drone includes: The first high-voltage power distribution margin is generated by the fuel cell stack and output to the first high-voltage busbar after being boosted by the first unidirectional DC / DC converter; at the same time, when the fuel cell voltage is lower than a preset threshold, the power battery supplies power to the first high-voltage busbar through the first battery management system. The second high-voltage power distribution redundancy is provided by the power battery through the first battery management system to the second high-voltage busbar; at the same time, the first high-voltage busbar can supply power to the second high-voltage busbar through the first battery management system. The first low-voltage power distribution redundancy is provided by the low-voltage battery through the second battery management system to the first low-voltage busbar; at the same time, when the low-voltage battery is insufficient, the second high-voltage busbar is stepped down by the second unidirectional DC / DC converter and output to the first low-voltage busbar. The second low-voltage power distribution redundancy is output from the second high-voltage busbar to the second low-voltage busbar after being stepped down by the second unidirectional DC / DC converter; The power distribution controller is connected to the first unidirectional DC / DC converter, the second unidirectional DC / DC converter, the first battery management system, and the second battery management system via a bus communication connection. It is used to monitor the status and faults of each power supply channel and load channel in real time, and to perform power distribution and fault reconstruction.

2. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The power distribution controller uses a dual-core redundant MCU or FPGA and integrates voltage sampling circuit, current sampling circuit, insulation monitoring circuit, fault protection logic and communication interface.

3. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, High-voltage critical loads are powered by the first high-voltage busbar and the second high-voltage busbar through the power distribution controller with dual redundancy; high-voltage general loads are powered by the first high-voltage busbar or the second high-voltage busbar through the power distribution controller with single redundancy; low-voltage critical loads are powered by the first low-voltage busbar and the second low-voltage busbar through the power distribution controller with dual redundancy; low-voltage general loads are powered by the first low-voltage busbar or the second low-voltage busbar through the power distribution controller with single redundancy.

4. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The power distribution controller executes the following hierarchical fault reconfiguration strategy: First level: When any of the fuel cell stack, the power battery or the low-voltage battery fails, disconnect the first unidirectional DC / DC converter or the corresponding battery management system to ensure normal power supply to the high-voltage busbar and the low-voltage busbar, and maintain dual-redundancy power supply to important downstream loads without degradation. Second level: When any one of the first high-voltage busbar, the second high-voltage busbar, the first low-voltage busbar, or the second low-voltage busbar fails, the faulty busbar or all loads connected to that busbar are isolated, and the corresponding important loads are downgraded from dual-redundant power supply to single-redundant power supply. The third level: When a short circuit fault occurs in the back-end load, the load branch is isolated. If it is a general load, the power is cut off. If it is an important load, the power supply is downgraded from dual-redundant power supply to single-redundant power supply.

5. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The power distribution controller calculates the power distribution ratio between the fuel cell and the power battery in real time according to the flight mission profile: during the steady-state cruise phase, the fuel cell undertakes all continuous power demand and charges the power battery and low-voltage battery at the same time; during the maneuvering flight phase, the fuel cell and the power battery work together to supply power, with the power battery responding to transient power demand and the fuel cell tracking the average power.

6. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The first unidirectional DC / DC converter adopts an isolated full-bridge DC / DC converter topology to boost the output voltage of the fuel cell into a stable high-voltage DC bus voltage; the second unidirectional DC / DC converter adopts an isolated full-bridge DC / DC converter topology to step down the output voltage of the second high-voltage bus into a stable low-voltage DC bus voltage.

7. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The first battery management system is used for power battery status monitoring, high-voltage pre-charge management, intelligent management of battery cells, prevention of battery overcharging and over-discharging, and management of the power battery's absorption of braking energy and excess hydrogen energy from the load motor; the second battery management system is used for low-voltage battery status monitoring, intelligent management of battery cells, and prevention of battery overcharging and over-discharging.

8. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The branch where the first high-voltage busbar is located is equipped with a fuse and an anti-reverse diode. The high-voltage DC power of the fuel cell stack after being boosted by the first unidirectional DC / DC converter is fed into the first high-voltage busbar through the fuse and the anti-reverse diode. The power battery is connected to the first high-voltage busbar through the first battery management system and the fuse.

9. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The branch where the first low-voltage busbar is located is equipped with a fuse and a reverse protection diode. The low-voltage DC power after being stepped down by the second unidirectional DC / DC converter is fed into the first low-voltage busbar through the fuse and the reverse protection diode. The low-voltage battery is connected to the first low-voltage busbar through the second battery management system and the fuse.

10. The dual-redundant power distribution system architecture for hydrogen-powered unmanned aerial vehicles according to claim 1, characterized in that, The power distribution controller is connected to the first unidirectional DC / DC converter, the second unidirectional DC / DC converter, the first battery management system, and the second battery management system via a CAN bus or an RS422 bus.

Images