A safety state self-detecting module of an electronic safety system of a fuze

Abstract

The application discloses a safety state self-detection module of a fuze electronic safety system, comprising a first static switch state detection circuit, a multiplexing state detection circuit and a state judgment sub-module, the first static switch state detection circuit is used for collecting the state signal of the first safety device and outputting a first feedback signal, the multiplexing state detection circuit is used for carrying out time-sharing state detection on the second and third safety devices within a preset detection window and outputting a multiplexing feedback signal, and the state judgment sub-module generates a state judgment signal according to the first feedback signal and the multiplexing feedback signal and inputs the state judgment signal into a safety logic controller. The safety state self-detection module realizes the state monitoring of multiple safety devices through a time-sharing multiplexing detection mode, constructs a closed-loop safety control mechanism, timely identifies multiple failure modes such as the leakage, short circuit and abnormal driving signal of the safety device, and stops the safety release process when detecting the abnormality, thereby effectively reducing the risk of unintended safety release, and improving the safety and reliability of the fuze electronic safety system.

Description

Technical Field

[0001] This invention relates to the field of fuze technology, and more specifically to a self-detection module for the safety status of an electronic fuze security system. Background Technology

[0002] The fuze is the core component for detonation control in a device equipped with it, and its safety and reliability directly determine the overall reliability of the device throughout its lifespan. With the development of microelectronics and power device technology, fuze safety systems have evolved from traditional mechanical and electromechanical systems to fully electronic safety systems. To meet stringent safety requirements, current electronic fuze safety systems generally follow the design principle of "redundancy isolation and sequential deactivation," forming a mainstream architecture centered on three independent safety components: two static switches located in the main voltage boosting circuit and a dynamic energy switch that works in conjunction with the high-voltage conversion circuit.

[0003] However, existing designs and research typically focus more on optimizing the fuse release logic itself, with insufficient consideration given to the failure modes, failure rates, and their impact on system safety of the fuse hardware itself. Therefore, there is still room for improvement in terms of engineering applicability and safety. During use, fuses are subjected to environmental loads such as high overload, strong vibration, wide temperature range, and complex electromagnetic interference. Under these environmental loads and the effects of electrical, thermal, and mechanical coupling stresses, power switching devices are susceptible to various failure risks, including gate breakdown, source-drain leakage, channel short circuit, and abnormal output of the drive circuit.

[0004] Traditional electronic security systems rely on release excitation signals and preset time logic for their release decisions. The release decision chain is an open-loop control process of "environmental signal perception—logic judgment—drive execution." The system lacks an independent self-detection module for the fuse status, making it impossible to monitor the real-time status of the fuse switch, a core execution component, and to promptly identify device failures. When hardware failure occurs, the system may continue execution based on an incorrect physical state, leading to serious consequences: if the static switch fails due to a short circuit, the main circuit will prematurely connect, effectively reducing the system to single or double protection, drastically decreasing safety; if the dynamic energy switch drive malfunctions, the boost main circuit will immediately conduct after the static switch is released, causing the system to prematurely enter a standby state; if the released upstream switch is unexpectedly turned off due to interference or a fault, subsequent release actions will prevent the boost main circuit from being established, causing device failure. Furthermore, for multi-layered safety devices, if each safety device is equipped with an independent detection circuit, the number of detection channels will increase with the number of safety devices, leading to an increase in circuit size, wiring complexity, power consumption and cost, which is not conducive to the miniaturization and integration design of the fuse system.

[0005] Therefore, there is an urgent need to propose a self-detection module for insurance status that can perform real-time status monitoring of each insurance device independently of the release control link, identify multiple failure modes, optimize the scale of the detection circuit, and have closed-loop safety decision-making capabilities. Summary of the Invention

[0006] This invention provides a self-detection module for the safety status of a fuze electronic safety system, which solves the problems of existing fuze electronic safety systems lacking a self-detection module for safety status, being unable to identify and control the failure of safety devices in a closed-loop safety manner, and having a large detection circuit with high size and power consumption.

[0007] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0008] A self-detection module for the safety status of an electronic fuse security system includes:

[0009] The first static switch state detection circuit is connected to the first safety device of the fuse electronic safety system. It is used to collect the voltage signal of the detection node corresponding to the first safety device and output a first feedback signal that characterizes the working state of the first safety device.

[0010] The multiplexing state detection circuit is connected to the second and third safety devices of the fuse electronic safety system. It is used to perform time-division state detection on the corresponding detection nodes of the second and third safety devices within a preset detection window and output a multiplexing feedback signal. The multiplexing feedback signal is used to characterize the working state of the second safety device or the working state of the third safety device in different detection windows.

[0011] The state decision submodule is connected to the first static switch state detection circuit, the multiplexing state detection circuit, and the safety logic controller, respectively. It is used to generate a corresponding state decision signal based on the first feedback signal and the multiplexing feedback signal, and input the state decision signal to the safety logic controller.

[0012] As a limitation: the multi-layer safety device includes a first static switch and a second static switch connected in series in the boost main circuit, and a dynamic energy switch that works with the high-voltage conversion circuit to achieve energy isolation; the first static switch state detection circuit is connected to the first static switch; the multiplexing state detection circuit is connected to the second static switch and the dynamic energy switch, and is used to perform time-division state detection of the second static switch and the dynamic energy switch in different detection windows.

[0013] As a further limitation: the first static switch state detection circuit includes a sampling unit, a filtering unit, a first decision comparison module, and an isolation output unit connected in sequence; the input terminal of the sampling unit is connected to the detection node corresponding to the first static switch, and is used to acquire the voltage signal of the detection node corresponding to the first static switch; the filtering unit is used to filter the voltage signal; the first decision comparison module outputs a first feedback signal through the isolation output unit, and is used to compare the filtered signal with a preset threshold, so that the first feedback signal characterizes the state of the first static switch.

[0014] As another limitation: the multiplexing state detection circuit includes a detection excitation injection unit, a multiplexing detection node, a sampling filtering unit, a second decision comparison module, a hold and shape unit, and an isolation output unit; the output terminal of the detection excitation injection unit is connected to the multiplexing detection node, and the multiplexing detection node is connected to a detection branch shared by the second static switch and the dynamic energy switch. The shared detection branch is used to generate detection signals corresponding to the states of the second static switch and the dynamic energy switch in different detection windows; the multiplexing detection node is connected sequentially through the sampling filtering unit, the second decision comparison module, the hold and shape unit, and the isolation output unit, and the isolation output unit outputs the multiplexing feedback signal.

[0015] As a further limitation: within the second static switch detection window, the detection excitation injection unit applies a detection excitation to the multiplexed detection node, and the second decision comparison module compares the response voltage of the multiplexed detection node with a preset threshold, and outputs a second feedback signal after processing the comparison result by the hold-and-shape unit and the isolation output unit; within the dynamic energy switch detection window, the detection excitation injection unit does not apply a detection excitation, and the second decision comparison module compares the voltage state of the multiplexed detection node with a preset threshold, and outputs a third feedback signal after processing the comparison result by the hold-and-shape unit and the isolation output unit.

[0016] As another limitation: As another solution, the fuse status self-detection module adopts an analog quantity quantization detection scheme based on voltage divider sampling and analog-to-digital conversion; the fuse status self-detection module includes three sets of RC voltage divider sampling networks, which are respectively connected to the detection nodes of the first static switch, the second static switch, and the dynamic energy switch, and each voltage divider sampling point is respectively connected to the corresponding analog quantity sampling terminal of the status decision submodule; the status decision submodule has an ADC sampling function, which is used to perform analog-to-digital conversion on the voltage signals input from each analog quantity sampling terminal, use the converted voltage value as the first feedback signal, and compare the converted quantized voltage value with a preset threshold to generate a corresponding status decision signal.

[0017] As a further limitation: the state determination submodule is preset with a safety threshold and a conduction threshold; when the first feedback signal is lower than the safety threshold, the first static switch is determined to be in a normal safety state; when the first feedback signal is higher than the safety threshold and lower than or equal to the conduction threshold, the first static switch is determined to have leakage current or performance degradation; when the first feedback signal is higher than the conduction threshold, the first static switch is determined to have abnormal conduction or short circuit failure.

[0018] As a further limitation: the state determination submodule acquires the voltage waveform of the detection node corresponding to the dynamic energy switch within a preset detection window; if the acquired voltage exhibits periodic fluctuations exceeding a preset amplitude threshold or frequency characteristic threshold when no dynamic energy switch drive command is issued, it is determined that the dynamic energy switch or its drive circuit has an unexpected working state.

[0019] This invention also provides a self-detection method for the safety status of an electronic safety system for fuses, comprising:

[0020] First static switch state detection step: Within the first detection window, the state signal of the detection node corresponding to the first safety device is collected by the first static switch state detection circuit, the state signal is filtered, and the filtered state signal is judged by the first comparison and decision module to generate a first feedback signal.

[0021] The second static switch state detection step is as follows: within the second detection window, a detection excitation is applied to the multiplexing detection node, and the response signal of the multiplexing detection node is collected by the multiplexing state detection circuit. The second comparison and decision module compares the response signal with a preset threshold, and its output is formed into a second feedback signal after being held, shaped and isolated.

[0022] Dynamic energy switch status detection steps: Within the third detection window, no detection excitation is applied to the multiplexing detection node. The response signal of the multiplexing detection node is acquired through the multiplexing status detection circuit. The second comparison and decision module compares the response signal with a preset threshold. The output of the second comparison and decision module is used to form a third feedback signal after passing through the holding and shaping unit and the isolation output unit.

[0023] Status decision step: The status decision submodule generates corresponding status decision signals based on the first feedback signal, the second feedback signal and the third feedback signal, and inputs the status decision signals to the safety logic controller.

[0024] As a limitation, the method further includes a security handling step: the security logic controller makes a security decision based on the received state judgment signals and the current protection release process status; when the detection result corresponding to any state judgment signal is inconsistent with the expected status under the current detection window, the security logic controller suspends the subsequent protection release process or enters the fault locking process.

[0025] As a further limitation: In the aforementioned security handling steps, before executing the next level of protection release action, the security logic controller simultaneously performs a downstream shutdown security check and a upstream conduction validity check: checking whether the downstream protection device that has not yet been released is in a reliable shutdown state, and simultaneously checking whether the upstream protection device that has been released is in a reliable conduction state; when either of the above checks fails, the security logic controller prohibits the execution of the current protection release action and terminates all subsequent protection release processes.

[0026] The present invention, by employing the aforementioned structure, achieves the following technological advancements compared to existing technologies: By establishing an independent self-detection module for fuse status—comprising a first static switch state detection circuit, a multiplexed state detection circuit, and a state decision submodule—the present invention enables independent monitoring of the actual operating status of each fuse device. This allows for timely identification of various failure modes, such as short circuits, leakage current, and abnormal drive signals, providing a realistic status basis for the safety control of the fuse release process. Furthermore, the multiplexed state detection circuit, through time-division multiplexing, uses the same detection node and feedback output channel to achieve time-division state detection of the second static switch and the dynamic energy switch fuse devices. This achieves multi-switch state monitoring without increasing the number of detection channels, reducing the need for separate detection channels for different fuse devices, and decreasing the number of components and wiring complexity in the detection circuit. This, in turn, helps reduce system size, power consumption, and manufacturing costs, and also improves the performance of the fuse system. Miniaturized and integrated; the state decision submodule inputs the state decision signal to the safety logic controller, constructing a closed-loop control mechanism of "state detection—state decision—safety decision—defense release execution / process suspension". When any state decision result is abnormal, the subsequent defense release process can be immediately suspended and a fault lockout state can be entered, significantly reducing the risk of unexpected defense release caused by fuse device failure, false activation, or abnormal drive. At the same time, the safety logic controller performs bidirectional closed-loop detection logic of subsequent shutdown safety verification and previous conduction validity verification before executing the next level defense release action. This not only prevents the safety risk of premature defense release caused by abnormal activation of the subsequent fuse device, but also avoids invalid defense release and blind fire faults caused by abnormal shutdown of the previous fuse device, significantly improving the system's anti-interference capability and task reliability in complex environments. In addition, this invention is compatible with both digital logic detection and ADC analog quantity quantization detection schemes, which can be flexibly selected according to different application scenarios, and has good engineering adaptability. Attached Figure Description

[0027] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used together with the embodiments of the invention to explain the invention and do not constitute a limitation thereof.

[0028] In the attached diagram:

[0029] Figure 1 This is a schematic diagram of the overall architecture of the electronic security system for fuses according to an embodiment of the present invention;

[0030] Figure 2 This is a schematic diagram of the workflow of an electronic safety system for fuses that includes a safety device detection according to an embodiment of the present invention;

[0031] Figure 3 This is a schematic diagram of the state detection circuit of the first static switch according to an embodiment of the present invention;

[0032] Figure 4 This is a schematic diagram of the second static switch and dynamic switch multiplexing state detection circuit according to an embodiment of the present invention;

[0033] Figure 5 This is a timing diagram of the working logic of an electronic security system including a safety device detection according to an embodiment of the present invention;

[0034] Figure 6 This is a timing diagram of the first static switch analog quantity detection based on ADC sampling in an embodiment of the present invention;

[0035] Figure 7 This is a timing diagram illustrating the unidirectional detection logic in an embodiment of the present invention when a fault occurs;

[0036] Figure 8 This is a schematic diagram of the ADC detection circuit according to an embodiment of the present invention;

[0037] Figure 9 This is the state detection circuit of the first static switch in this embodiment of the invention;

[0038] Figure 10 This is the second static switch and dynamic switch multiplexing state detection circuit in the embodiment of the present invention. Detailed Implementation

[0039] The preferred embodiments of the present invention will now be described with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are for illustrative and explanatory purposes only and are not intended to limit the scope of the invention.

[0040] This invention discloses a self-detection module for the safety status of an electronic fuse safety system, such as... Figure 1 and Figure 2As shown, the system includes a first static switch state detection circuit, a multiplexed state detection circuit, and a state decision submodule. The first static switch state detection circuit is connected to the first static switch of the fuze electronic safety system. The multiplexed state detection circuit is connected to the second static switch and the dynamic energy switch. The state decision submodule is connected to the first static switch state detection circuit, the multiplexed state detection circuit, and the safety logic controller. This invention acquires the voltage signal of the detection node corresponding to the first static switch through the first static switch state detection circuit and outputs a first feedback signal. The multiplexed state detection circuit performs time-division multiplexing state detection on the second static switch and the dynamic energy switch within different detection windows and outputs multiplexed feedback signals. The state decision submodule generates a corresponding state decision signal based on the first feedback signal and the multiplexed feedback signal and inputs it to the safety logic controller, providing a practical state basis for the safety control of the protection release process. This invention monitors the actual working status of each safety device independently of the protection release control link by setting a self-detection module. The multiplexed status detection circuit uses the same detection node and the same feedback output channel in a time-division multiplexing manner to detect the status of the second static switch and the dynamic energy switch. Within the detection window of the second static switch, a detection excitation signal is released to determine whether the second static switch is in a predetermined off state. Within the detection window of the dynamic energy switch, the release of the detection excitation signal is stopped to determine whether the dynamic energy switch is in an unexpected on state. When either status determination result is abnormal, the system immediately stops the subsequent protection release process and enters a fault lockout state.

[0041] As a preferred embodiment of the present invention, such as Figure 1As shown, the electronic safety system for the fuse includes a safety logic controller, a drive control circuit, a first static switch, a second static switch, a dynamic energy switch, a high-voltage boost and energy storage output module, and a self-detection module for fuse status. The safety logic controller controls the drive control circuit to output corresponding drive signals according to a predetermined timing sequence based on environmental information, the fuse release logic, and the status judgment signal output by the self-detection module. The drive control circuit is connected to the first static switch, the second static switch, and the dynamic energy switch, respectively, and controls each switch to operate according to a predetermined fuse release procedure. The high-voltage boost and energy storage output module performs energy conversion and energy storage output after the system has completed fuse release. The first static switch, the second static switch, and the dynamic energy switch constitute three safety devices to isolate the energy transmission path in the non-fuse release state. The self-testing module includes a first static switch state detection circuit, a multiplexed state detection circuit, and a state decision submodule. The first static switch state detection circuit detects the actual state of the first static switch and outputs a first feedback signal. The multiplexed state detection circuit performs time-division multiplexing state detection on the second static switch and the dynamic energy switch within different detection windows and outputs a multiplexed feedback signal. The state decision submodule generates a first static switch state decision signal, a second static switch state decision signal, and a dynamic switch state decision signal based on the first feedback signal, the multiplexed feedback signal, and the current detection window of the system, and inputs these state decision signals to the safety logic controller. The safety logic controller executes corresponding unlocking, enabling, aborting, or fault locking operations based on the state decision signals and the current unlocking process status. The self-testing module does not participate in the energy isolation and transmission of the boost circuit; it only extracts voltage state information from the key detection nodes of each fuse switch and converts the analog voltage state of the detection nodes into feedback signals that the safety logic controller can recognize, so as to avoid the detection branch from disturbing the energy transmission process of the boost circuit.

[0042] As a preferred embodiment of the present invention, such as Figure 3 and Figure 9As shown, the first static switch state detection circuit is used to detect the actual operating state of the first static switch and output a first feedback signal. The first static switch state detection circuit includes a sampling unit, a filtering unit, a first decision comparison module, and an isolation output unit connected in sequence. The input terminal of the sampling unit is connected to the detection node corresponding to the first static switch to acquire the voltage signal of the detection node corresponding to the first static switch. The filtering unit is used to filter the voltage signal to suppress spikes and glitches in the sampled signal. The first decision comparison module is used to compare the filtered signal with a preset threshold and output the first feedback signal via the isolation output unit. When the first static switch is in a predetermined off state, the first static switch state detection circuit outputs a first feedback signal representing a safe state. When the first static switch experiences a short circuit, false on, or device failure and conduction, the first static switch state detection circuit outputs a first feedback signal representing an abnormal state. The state decision submodule generates a first static switch state decision signal based on the first feedback signal and sends it to the safety logic controller.

[0043] As a preferred embodiment of the present invention, such as Figure 4 and Figure 10As shown, the multiplexing state detection circuit is used to perform time-division multiplexing detection on the second static switch and the dynamic energy switch and output a multiplexing feedback signal. The multiplexing state detection circuit includes a detection excitation injection unit, a sampling filtering unit, a second decision comparison module, a hold and shape unit, and an isolation output unit. The output of the detection excitation injection unit is connected to the multiplexing detection node, which is connected to a detection branch shared by the second static switch and the dynamic energy switch. This shared detection branch is used to generate detection signals corresponding to the states of the second static switch and the dynamic energy switch in different detection windows. The multiplexing detection node is connected sequentially through the sampling filtering unit, the second decision comparison module, the hold and shape unit, and the isolation output unit. The isolation output unit outputs the multiplexing feedback signal. The sampling filtering unit is used to collect and filter the voltage signal of the multiplexing detection node; the second decision comparison module is used to perform threshold judgment on the sampled signal according to the current detection window and output the result; the hold and shape unit is used to hold and shape the previous output signal to improve the sampleability and stability of the feedback signal; the isolation output unit outputs the multiplexing feedback signal based on the held and shaped signal. During operation, within the second static switch detection window, the detection excitation injection unit applies a detection excitation to the multiplexing detection node. The second decision comparison module determines whether the second static switch is in a predetermined off state based on the response voltage of the multiplexing detection node. Within the dynamic energy switch detection window, the detection excitation injection unit does not apply a detection excitation, and the second decision comparison module determines whether the dynamic energy switch is in an unexpected on state based on the voltage state of the multiplexing detection node. Thus, the multiplexing detection circuit realizes the state detection of the second static switch and the dynamic energy switch through the same detection node and the same feedback output channel. The state decision submodule generates the second static switch state decision signal and the dynamic switch state decision signal respectively based on the multiplexing feedback signal in different detection windows and sends them to the safety logic controller.

[0044] As a preferred embodiment of the present invention, such as Figure 5As shown, the system operates according to the sequential logic of "power-on self-test, status determination, signal triggering, and step-by-step deprotection". After the system is powered on, the safety logic controller first enters the self-test process; after the self-test is completed, the system enters the first static switch determination window to detect the status of the first static switch; when the first feedback signal FB_SW1 indicates that the first static switch is in the off state, the first static switch is determined to be in a normal state, and the system waits for the deprotection excitation signal 1; if the first static switch has abnormal conduction, short circuit, or inconsistent status, the system enters the fault lockout state; after the deprotection excitation signal 1 arrives, the system enters the second static switch determination window, and the multiplexed status detection circuit releases a detection excitation signal EN_TEST once in this window, and determines the status of the second static switch through the multiplexed feedback signal FB_SAFE; when FB_SAFE indicates that the second static switch is normally off, the safety logic controller controls the drive control The control circuit releases the first safety barrier; if the second static switch malfunctions, the system enters a fault-locked state; after the first safety barrier is released, the system enters the dynamic energy switch judgment window, in which the detection excitation signal EN_TEST is no longer released, and the multiplexing state detection circuit judges the state of the dynamic energy switch through the multiplexing feedback signal FB_SAFE; when FB_SAFE indicates that the dynamic energy switch is in the predetermined safe state, the system waits for the release excitation signal 2; if the dynamic energy switch malfunctions, the system enters a fault-locked state; after the release excitation signal 2 arrives, the safety logic controller controls the drive control circuit to release the second safety barrier; after the second safety barrier is released, the system waits for the release excitation signal 3; after the release excitation signal 3 arrives, the safety logic controller releases the third safety barrier and puts the system into a standby state.

[0045] As a preferred embodiment of the present invention, for the self-test module, an analog quantity quantization test scheme based on voltage divider sampling and analog-to-digital conversion can be used instead of the above-mentioned digital logic test scheme. For example... Figure 8 As shown, the self-detection module includes three sets of RC voltage divider sampling networks. These networks are respectively connected to the detection nodes of the first static switch, the second static switch, and the dynamic energy switch. Each voltage divider sampling point is connected to the corresponding analog quantity sampling terminal of the state decision submodule. The state decision submodule has an ADC sampling function, used to perform analog-to-digital conversion on the voltage signals input to each analog quantity sampling terminal, and compares the quantized voltage value obtained after conversion with a preset threshold to generate the corresponding state decision signal. Figure 6As shown, taking the first static switch as an example, when the first static switch is in a safe state, the voltage of its corresponding detection node should be in a predetermined low potential range. If the first sampling voltage V1 obtained by the state decision submodule through ADC sampling is lower than the first safety threshold, the first static switch is determined to be in a normal safe state. If the first sampling voltage V1 is higher than the first safety threshold and lower than or equal to the first conduction threshold, the first static switch may have leakage current or device performance degradation. The state decision submodule generates a corresponding fault warning state decision signal and inputs it to the safety logic controller. If the first sampling voltage V1 is higher than the first conduction threshold, the first static switch is determined to have abnormal conduction or short circuit failure. The state decision submodule generates a fault state decision signal and inputs it to the safety logic controller. The safety logic controller stops the unsafe process or performs a fault locking operation according to the fault state decision signal. For dynamic energy switches, the status decision submodule collects the voltage waveform of the corresponding detection node within a preset detection window. If the third sampled voltage exhibits periodic fluctuations exceeding the preset amplitude threshold or frequency characteristic threshold when no dynamic energy switch release or drive command is issued, it is determined that the dynamic energy switch or its drive circuit has an unexpected working state. The status decision submodule generates a dynamic energy switch fault status decision signal and inputs it to the safety logic controller.

[0046] As a preferred embodiment of the present invention, such as Figure 7As shown, the safety logic controller performs bidirectional closed-loop status detection before executing the next level of protection release action. At time a, the system normally controls the first static switch to turn on to complete the protection release action. Between time a and time b, the first static switch may unexpectedly return to the off state due to electromagnetic interference, abnormal drive power supply, or loss of control signal. When time b is reached, the conventional detection logic only performs the subsequent level status detection, that is, only checks whether the subsequent dynamic energy switch is in the safe off state, without verifying the status of the first static switch that has already completed the protection release action. The system mistakenly judges that the current protection release condition is met, controls the second static switch to turn on at time g, and then drives the dynamic energy switch to act at time c. At this time, the control logic has completed the three-level protection release control in sequence, but physically the first static switch is in the off state, the main energy path is not connected, the high-voltage energy storage capacitor cannot be effectively charged, and ultimately the fuse misfires. Before executing any subsequent protection release action, the bidirectional closed-loop detection logic must simultaneously meet two conditions: first, the downstream switching device that has not yet been released from protection should be in a reliable off-safe state; second, the upstream switching device that has been released from protection should be in a reliable on-safe state to ensure that the physical state of the main energy path is consistent with the logical state recorded by the control unit. Specifically, before controlling the second static switch to turn on, the safety logic controller not only detects whether the dynamic energy switch is in a safe off-safe state, but also detects whether the first static switch is still in an on-safe state. The on-safe state of the first static switch is determined by detecting its drive terminal level, gate level, source-drain voltage, downstream node voltage, or the first feedback signal output by the first static switch state detection circuit. If the first static switch is detected to be off or in an abnormal state, the safety logic controller prohibits the second static switch from turning on and terminates the subsequent protection release process. Before controlling the dynamic energy switch to operate, the safety logic controller checks again whether both the first and second static switches are in the ON state. If either the first or second static switch is not in the ON state, it indicates that the main energy path is not reliably connected. The safety logic controller sends a prohibition command to the relevant control unit or directly keeps the dynamic energy switch in the OFF state and aborts the protection release process. The bidirectional closed-loop status detection logic is compatible with the aforementioned digital logic detection scheme and ADC analog quantity detection scheme.

[0047] Finally, it should be noted that the above descriptions are merely preferred embodiments of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the claims of the present invention.

Claims

1. A self-detection module for the safety status of an electronic safety system for a fuze, the electronic safety system for a fuze comprising three safety devices connected in series in a boost main circuit, characterized in that, The insurance status self-detection module includes: The first static switch state detection circuit is connected to the first safety device and is used to collect the voltage signal of the detection node corresponding to the first safety device and output a first feedback signal characterizing the working state of the first safety device. The multiplexing status detection circuit is connected to the second and third safety devices respectively. It is used to perform time-division status detection on the corresponding detection nodes of the second and third safety devices within a preset detection window, and output a multiplexing feedback signal. The multiplexing feedback signal is used to characterize the working status of the second safety device or the working status of the third safety device in different detection windows. The state decision submodule is connected to the first static switch state detection circuit, the multiplexing state detection circuit, and the safety logic controller, respectively. It is used to generate a corresponding state decision signal based on the first feedback signal and the multiplexing feedback signal, and input the state decision signal to the safety logic controller.

2. The insurance status self-detection module according to claim 1, characterized in that, The three safety devices in the electronic safety system of the fuse include a first static switch and a second static switch connected in series in the main boost circuit, as well as a dynamic energy switch that works with the high voltage conversion circuit to achieve energy isolation. The first static switch state detection circuit is connected to the first static switch. The multiplexing status detection circuit is connected to the second static switch and the dynamic energy switch respectively, and is used to perform time-division state detection on the second static switch and the dynamic energy switch in different detection windows.

3. The insurance status self-detection module according to claim 2, characterized in that, The first static switch state detection circuit includes a sampling unit, a filtering unit, a first decision comparison module, and an isolation output unit connected in sequence; The input terminal of the sampling unit is connected to the detection node corresponding to the first static switch, and is used to acquire the voltage signal of the detection node corresponding to the first static switch. The filtering unit is used to filter the voltage signal; The first decision comparison module is used to compare the filtered signal with a preset threshold and output a first feedback signal via the isolation output unit.

4. The insurance status self-detection module according to claim 2, characterized in that, The multiplexing state detection circuit includes a detection excitation injection unit, a sampling filtering unit, a second decision comparison module, a hold and shape unit, and an isolation output unit; The output of the detection excitation injection unit is connected to the multiplexing detection node, which is connected to the detection branch shared by the second static switch and the dynamic energy switch. The shared detection branch is used to generate detection signals corresponding to the states of the second static switch and the dynamic energy switch in different detection windows. The multiplexing detection node is connected in sequence through the sampling filtering unit, the second decision comparison module, the hold and shape unit, and the isolation output unit, and the isolation output unit outputs the multiplexing feedback signal.

5. The insurance status self-detection module according to claim 4, characterized in that, Within the second static switch detection window, the detection excitation injection unit applies a detection excitation to the multiplexing detection node, and the second decision comparison module compares the response voltage of the multiplexing detection node with a preset threshold, and outputs a second feedback signal after the comparison result is processed by the holding and shaping unit and the isolation output unit. Within the dynamic energy switch detection window, the detection excitation injection unit does not apply detection excitation. The second decision comparison module is used to compare the voltage state of the multiplexed detection node with a preset threshold, and outputs a third feedback signal after the comparison result is processed by the holding and shaping unit and the isolation output unit.

6. The insurance status self-detection module according to claim 2, characterized in that, As an alternative, the insurance status self-detection module adopts an analog quantity quantization detection scheme based on voltage divider sampling and analog-to-digital conversion; The self-detection module for the safety status includes three sets of resistive-capacitive voltage divider sampling networks. The three sets of resistive-capacitive voltage divider sampling networks are respectively connected to the detection nodes of the first static switch, the second static switch and the dynamic energy switch. Each voltage divider sampling point is respectively connected to the corresponding analog quantity sampling terminal of the status decision submodule. The state decision submodule has an ADC sampling function, which is used to perform analog-to-digital conversion on the voltage signals input from each analog sampling terminal, use the converted voltage value as the first feedback signal, and compare the converted quantized voltage value with a preset threshold to generate a corresponding state decision signal.

7. The insurance status self-detection module according to claim 6, characterized in that, The status decision submodule is preset with a safety threshold and a conduction threshold; When the first feedback signal is lower than the safety threshold, it is determined that the first static switch is in a normal safety state; When the first feedback signal is higher than the safety threshold and lower than or equal to the conduction threshold, it is determined that the first static switch has leakage current or performance degradation. When the first feedback signal is higher than the conduction threshold, it is determined that the first static switch is in an abnormal conduction or short-circuit failure state.

8. The insurance status self-detection module according to claim 6, characterized in that, The state decision submodule acquires the voltage waveform of the detection node corresponding to the dynamic energy switch within a preset detection window; If the collected voltage exhibits periodic fluctuations exceeding a preset amplitude threshold or frequency characteristic threshold when no dynamic energy switch drive command is issued, it is determined that the dynamic energy switch or its drive circuit is in an unexpected working state.

9. A method for self-detecting the safety status of an electronic fuse safety system, wherein the electronic fuse safety system includes multiple safety devices, characterized in that, The method includes: First static switch state detection step: Within the first detection window, the state signal of the detection node corresponding to the first safety device is collected by the first static switch state detection circuit, the state signal is filtered, and the filtered state signal is judged by the first comparison and decision module to generate a first feedback signal. The second static switch state detection step is as follows: within the second detection window, a detection excitation is applied to the multiplexing detection node, and the response signal of the multiplexing detection node is collected by the multiplexing state detection circuit. The second comparison and decision module compares the response signal with a preset threshold, and its output is formed into a second feedback signal after being held, shaped and isolated. Dynamic energy switch status detection steps: Within the third detection window, no detection excitation is applied to the multiplexing detection node. The response signal of the multiplexing detection node is acquired through the multiplexing status detection circuit. The second comparison and decision module compares the response signal with a preset threshold. The output of the second comparison and decision module is used to form a third feedback signal after passing through the holding and shaping unit and the isolation output unit. Status decision step: The status decision submodule generates corresponding status decision signals based on the first feedback signal, the second feedback signal and the third feedback signal, and inputs the status decision signals to the safety logic controller.

10. The self-detection method for insurance status according to claim 9, characterized in that, The method also includes safety handling steps: The security logic controller makes security decisions based on the received status judgment signals and the current status of the protection release process; When the detection result corresponding to any state decision signal is inconsistent with the expected state under the current detection window, the security logic controller suspends the subsequent protection release process or enters the fault locking process.

Images