A super capacitor backup power protection module for an in-vehicle controller

Abstract

The application discloses a super capacitor backup power supply protection module for a vehicle-mounted controller and relates to the technical field of automobile electronic power supply management. The module comprises a super capacitor, a power supply switch and a processor. When the vehicle-mounted controller is normally powered off and the main power supply of the vehicle can restore power supply, the super capacitor supplies power through a backup power supply path, and the backup power supply current change caused by the change of the normal power-off task is taken as the same time reference, the first time range and the second time range are determined respectively, the backup power supply time is determined according to the common continuous time of the two from the current time, and the backup power supply time is compared with the required power supply time of the vehicle-mounted controller to control the power supply switch, so that the judgment accuracy of the actual backup power supply capacity is improved.

Description

Technical Field

[0001] This invention relates to the field of automotive electronic power management technology, and more specifically, to a supercapacitor backup power protection module for an on-board controller. Background Technology

[0002] When the vehicle is turned off, in sleep mode, or experiencing an abnormal power failure, the vehicle controller usually needs to continue performing tasks such as data saving, fault information writing, communication termination, and shutdown of peripheral devices. Therefore, a supercapacitor can be used as a short-term backup power source to maintain power supply to the vehicle controller after the main power supply to the vehicle is disconnected.

[0003] In the prior art, CN106965761B discloses a power failure protection device for a vehicle-mounted equipment system. This solution uses a supercapacitor to provide backup power to the vehicle-mounted equipment after a power failure. It is equipped with circuits for DC voltage conversion, voltage detection, backflow prevention, supercapacitor charging, voltage equalization, and discharge isolation. The controller detects the power supply status and uses the electrical energy stored in the supercapacitor to continue supplying power to the vehicle-mounted equipment when the vehicle power supply is abnormal, thereby providing power supply time for the vehicle-mounted equipment to complete the power failure process.

[0004] However, in scenarios where the vehicle is powered off normally and the main power supply can still be restored, the supercapacitor remains in standby mode for a long time. Existing solutions mainly activate the supercapacitor after the main power supply fails. It is difficult to confirm in a timely manner whether the supercapacitor and backup power supply path can continuously meet the power supply requirements of the vehicle controller under the actual load conditions of the current normal power-off task. In the event of an actual main power supply failure, the backup power supply duration may still be insufficient.

[0005] Therefore, it is still necessary to provide a supercapacitor backup power protection module for vehicle controllers to improve the ability to verify the actual backup power supply capability. Summary of the Invention

[0006] To overcome the aforementioned deficiencies of the prior art, embodiments of the present invention provide a supercapacitor backup power supply protection module for an on-board controller, which is used to determine the duration for which the supercapacitor and backup power supply path can continuously meet the power supply requirements of the on-board controller when the vehicle is normally powered off and the vehicle's main power supply can be restored, thereby solving the problems mentioned in the background art.

[0007] To achieve the above objectives, the present invention provides the following technical solution: A supercapacitor backup power supply protection module for an on-board controller includes a supercapacitor, a power switch, and a processor. The supercapacitor is connected to the on-board controller via a backup power supply path. The processor acquires supercapacitor voltage, backup power supply current, on-board controller power supply voltage, and operating status data. When the vehicle is powered down normally and the main power supply can be restored, the supercapacitor is powered through the backup power supply path. The processor identifies the normal power-down task state based on the operating status data. When a change in task state causes a change in backup power supply current, the processor uses the time of change as a time reference to acquire the correspondence between the three types of power supply data before and after the change. It determines a first time range in which the supercapacitor voltage is not lower than the minimum allowable input voltage of the backup power supply path and a second time range in which the on-board controller power supply voltage is not lower than the minimum operating voltage of the on-board controller. The backup power supply time is determined based on the common continuous time of both from the current time. When the change in backup power supply current caused by the new normal power-down task state reaches a current change threshold, the backup power supply time is updated. When the updated backup power supply time is less than the power supply time required by the on-board controller, the processor controls the power switch to restore the vehicle's main power supply.

[0008] In a preferred embodiment, the system further includes a charging circuit, a discharge isolation circuit, and a detection circuit; the charging circuit connects the vehicle's main power supply and the supercapacitor; the power supply switch is located between the vehicle's main power supply and the vehicle controller; the backup power supply path includes the discharge isolation circuit; the detection circuit is used to acquire the supercapacitor voltage, the backup power supply current, and the vehicle controller power supply voltage, wherein the backup power supply current is the current flowing from the supercapacitor output terminal into the backup power supply path.

[0009] In a preferred embodiment, the detection circuit is further configured to acquire temperature data; the processor allows backup power supply detection when the vehicle's main power supply is continuously within the normal power supply range, the supercapacitor voltage is not lower than the allowable detection voltage, the temperature data is within the allowable temperature range, and the vehicle controller does not have any vehicle safety-related tasks that need to be continuously executed; before controlling the power supply switch to disconnect the vehicle's main power supply from direct power supply, the discharge isolation circuit is kept in a state that allows the supercapacitor to supply power to the vehicle controller and limits reverse current; when the backup power supply current is not lower than the minimum effective detection current and the vehicle controller supply voltage is not lower than the vehicle controller power supply detection stop voltage, the backup power supply path is determined to supply power to the vehicle controller; when the supercapacitor voltage reaches the supercapacitor detection stop voltage, the vehicle controller supply voltage reaches the vehicle controller power supply detection stop voltage, the backup power supply current exceeds the maximum allowable current, or the data output by the detection circuit is invalid, and the vehicle's main power supply can still be restored, the processor controls the power supply switch to restore the vehicle's main power supply to the vehicle controller.

[0010] In a preferred embodiment, determining the first time range includes: determining the supercapacitor voltage change under the normal power-down task state based on the supercapacitor voltage corresponding to the normal power-down task state; determining the moment when the supercapacitor voltage reaches the minimum allowable input voltage of the backup power supply path based on the temperature data, the supercapacitor voltage change, and the backup power supply current corresponding to the incomplete normal power-down task; and determining the first time range based on the current moment and the first time range.

[0011] In a preferred embodiment, when the incomplete normal power-down tasks include at least two normal power-down tasks executed sequentially, the supercapacitor voltage at the end of the first incomplete normal power-down task is determined based on the backup power supply current, temperature data, supercapacitor starting voltage, and remaining duration corresponding to the first incomplete normal power-down task; the supercapacitor voltage is used as the supercapacitor starting voltage for the next normal power-down task, and the corresponding supercapacitor voltages are determined sequentially according to the execution order of each incomplete normal power-down task; when the supercapacitor voltage reaches the minimum allowable input voltage of the backup power supply path during the execution of one of the incomplete normal power-down tasks, the end time of the first time range is determined.

[0012] In a preferred embodiment, determining the second time range includes: determining the vehicle controller supply voltage corresponding to the incomplete normal power-down task based on the correspondence between the supercapacitor voltage, backup power supply current, and vehicle controller supply voltage before and after the change in the normal power-down task state, as well as the backup power supply current and supercapacitor voltage corresponding to the incomplete normal power-down task; determining the moment when the vehicle controller supply voltage reaches the minimum operating voltage of the vehicle controller, and determining the second time range based on the current moment and that moment.

[0013] In a preferred embodiment, no DC-DC voltage conversion circuit is provided between the supercapacitor and the vehicle controller. The backup power supply path includes the discharge isolation circuit and the connecting line. Based on the voltage difference between the supercapacitor voltage and the vehicle controller power supply voltage before and after the change in the normal power-down task state, and the change in backup power supply current, the voltage change relationship of the backup power supply path within the corresponding backup power supply current range is determined. Based on the supercapacitor voltage, the supercapacitor voltage corresponding to the incomplete normal power-down task is determined. Based on the voltage change relationship, the backup power supply current corresponding to the incomplete normal power-down task, and the corresponding supercapacitor voltage, the vehicle controller power supply voltage corresponding to the incomplete normal power-down task is determined.

[0014] In a preferred embodiment, the backup power supply path includes a DC-DC voltage conversion circuit; determining calibration data corresponding to the current supercapacitor voltage, backup power supply current, and temperature data from pre-stored correspondence data between supercapacitor voltage, backup power supply current, temperature, and vehicle controller power supply voltage; determining the vehicle controller power supply voltage corresponding to the incomplete normal power-down task based on the calibration data and the supercapacitor voltage, backup power supply current, and vehicle controller power supply voltage obtained during normal power-down; and determining the moment when the vehicle controller power supply voltage reaches the minimum operating voltage of the vehicle controller according to the execution relationship of the incomplete normal power-down task.

[0015] In a preferred embodiment, the current change threshold is determined based on the detection error of the backup power supply current and the normal fluctuation range of the backup power supply current under the same normal power-down task state; when the unfinished normal power-down tasks are executed in sequence, the power supply time required by the vehicle controller is determined based on the remaining duration and sequence relationship of each normal power-down task; when at least two unfinished normal power-down tasks are executed in parallel, the time required to complete all remaining normal power-down tasks is determined based on the start conditions, completion conditions and dependencies of each normal power-down task, and this time is determined as the power supply time required by the vehicle controller.

[0016] In a preferred embodiment, the supercapacitor backup power protection module is installed in a vehicle, the vehicle including the on-board controller and a vehicle main power supply for supplying power to the on-board controller.

[0017] The technical effects and advantages of the supercapacitor backup power supply protection module for vehicle controllers of the present invention are as follows: This invention enables a supercapacitor to power the vehicle controller via a backup power supply path when the vehicle controller is normally powered down and the vehicle's main power supply can still be restored. It also uses the changes in backup power supply current generated by the changes in the normal power-down task as the same time reference to obtain the actual power supply data of the supercapacitor and the backup power supply path without waiting for the actual main power failure of the vehicle.

[0018] This invention determines a first time range based on the power supply conditions on the supercapacitor side, a second time range based on the actual power supply conditions on the vehicle controller power supply side, and determines the backup power supply time based on the common continuous time of the two time ranges from the current moment. This ensures that the obtained backup power supply time is simultaneously constrained by the remaining power supply capacity of the supercapacitor and the actual power supply capacity of the backup power supply path, thereby improving the accuracy of the judgment on the current backup power supply capacity.

[0019] The present invention also controls the vehicle's main power supply to restore power based on the comparison result between the backup power supply time and the power supply time required for the vehicle controller to complete the remaining normal power-down task, and can update the backup power supply time as the normal power-down task changes, thereby reducing the risk that the normal power-down task cannot be completed due to insufficient backup power supply duration when the actual main power supply is abnormal. Attached Figure Description

[0020] Figure 1 This is a schematic diagram of the overall structure of a supercapacitor backup power supply protection module for an on-board controller according to the present invention.

[0021] Figure 2 This is a basic processing flowchart for backup power supply protection in this invention.

[0022] Figure 3 This is a timing diagram of the main and backup power supply switching during the normal power-down process of this invention.

[0023] Figure 4 This is a diagram showing the relationship between the changes in the normal power-off task and the first time range, the second time range, and the backup power supply time of the present invention.

[0024] Figure 5 This is a schematic diagram illustrating the segmentation of the first time range in this invention.

[0025] Figure 6 This is a schematic diagram illustrating the determination of the second time range when the DC voltage conversion circuit is not included in this invention.

[0026] Figure 7 A schematic diagram illustrating the determination of the second time range when setting up a DC voltage conversion circuit for this invention.

[0027] Figure 8 This is a graph showing the relationship between the rolling update of backup power supply time and the power supply time required by the vehicle controller in this invention.

[0028] Figure 9 This is a schematic diagram of the backup power supply detection state transition of the present invention.

[0029] 100. Supercapacitor backup power supply protection module; 110. Supercapacitor; 120. Charging circuit; 130. Discharge isolation circuit; 140. Power supply switch; 150. Detection circuit; 151. Supercapacitor voltage detection circuit; 152. Backup power supply current detection circuit; 153. Vehicle controller power supply voltage detection circuit; 154. Temperature detection device; 160. Processor; 170. DC voltage conversion circuit; 180. Backup power supply path; 190. Main power supply path; 200. Vehicle main power supply; 300. Vehicle controller. Detailed Implementation

[0030] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments.

[0031] This application can be applied to vehicle-mounted controllers 300 that need to continue performing tasks such as data saving, fault information writing, communication termination, and peripheral device shutdown after normal power-off or when the vehicle's main power supply 200 fails. The vehicle-mounted controller 300 can be a body controller, domain controller, central computing unit, vehicle communication controller, data recording controller, or other electronic control units with backup power requirements.

[0032] The vehicle's main power supply 200 can be provided by the vehicle's low-voltage battery, low-voltage DC bus, or a low-voltage power supply device in the vehicle. Depending on the vehicle's electrical architecture, the vehicle's main power supply 200 can use 12V, 24V, 48V, or other power supply voltages compatible with the on-board controller 300.

[0033] The supercapacitor 110 can be a single supercapacitor 110, or multiple supercapacitors 110 connected in series, parallel, or in series and parallel to form a supercapacitor bank. The rated voltage, capacitance, and number of supercapacitors 110 connected in series and parallel are determined based on the power and duration of the on-board controller 300 during normal power-off and the vehicle's power supply voltage. When multiple supercapacitors 110 are connected in series, a voltage equalization circuit can be set up.

[0034] Example 1 illustrates the basic structure and complete working process of the supercapacitor backup power supply protection module 100.

[0035] like Figure 1 As shown, the supercapacitor backup power protection module 100 may include a supercapacitor 110, a charging circuit 120, a discharge isolation circuit 130, a power supply switch 140, a detection circuit 150, and a processor 160.

[0036] The charging circuit 120 connects the vehicle main power supply 200 and the supercapacitor 110, and is used to charge the supercapacitor 110 when the vehicle main power supply 200 is normal. The vehicle main power supply 200 is connected to the vehicle controller 300 via the main power supply path 190. The power supply switch 140 is set in the main power supply path 190 and is used to control whether the vehicle main power supply 200 directly supplies power to the vehicle controller 300.

[0037] The supercapacitor 110 is connected to the vehicle controller 300 via a backup power supply path 180. The backup power supply path 180 includes at least a discharge isolation circuit 130, and may also include a DC voltage conversion circuit 170 based on the relationship between the output voltage of the supercapacitor 110 and the supply voltage of the vehicle controller 300. The discharge isolation circuit 130 may employ a diode, an ideal diode control circuit, or a field-effect transistor circuit with reverse isolation, to allow the supercapacitor 110 to supply power to the vehicle controller 300 and to limit reverse current between the vehicle's main power supply 200 and the supercapacitor 110.

[0038] The detection circuit 150 may include a supercapacitor voltage detection circuit 151, a backup power supply current detection circuit 152, and an on-board controller power supply voltage detection circuit 153.

[0039] The supercapacitor voltage detection circuit 151 is used to acquire the voltage data of the supercapacitor 110; the backup power supply current detection circuit 152 is set between the output terminal of the supercapacitor 110 and the backup power supply path 180, and is used to acquire the backup power supply current data flowing from the output terminal of the supercapacitor 110 into the backup power supply path 180; the vehicle controller power supply voltage detection circuit 153 is used to acquire the power supply voltage data of the vehicle controller 300 at the power supply input terminal of the vehicle controller 300.

[0040] Therefore, regardless of whether a DC voltage conversion circuit 170 is provided in the backup power supply path 180, the backup power supply current data referred to in this article refers to the current data flowing into the backup power supply path 180 from the output terminal of the supercapacitor 110.

[0041] The processor 160 can be located within the supercapacitor backup power protection module 100.

[0042] In some embodiments, at least a portion of the detection circuit 150, charging circuit 120, or discharge isolation circuit 130 may be disposed externally to the supercapacitor backup power protection module 100 and connected to the processor 160 or the backup power path 180. The processor 160 can obtain voltage data of the supercapacitor 110, backup power current data, and power supply voltage data of the vehicle controller 300 from the corresponding detection circuit 150. Therefore, whether the detection circuit 150 is integrated with the processor 160 in the same housing does not affect the subsequent data processing.

[0043] During normal vehicle operation, the vehicle's main power supply 200 supplies power to the on-board controller 300 via the power supply switch 140, while the charging circuit 120 simultaneously charges the supercapacitor 110. Once the supercapacitor 110 reaches its predetermined charging state, it remains available for backup power supply.

[0044] like Figure 2 As shown, the processing steps in this embodiment include S101 to S104.

[0045] S101, when the vehicle ignition state changes, the vehicle controller sends a power-down message, the vehicle communication network sends a sleep message, or the vehicle controller 300 itself enters a power-down state, it can be determined that the vehicle controller 300 has entered a normal power-down state.

[0046] The vehicle main power supply 200 can be restored to power supply, which means that the vehicle main power supply 200 can still provide the vehicle controller 300 with the voltage required for normal power-off, and the power supply switch 140 can re-establish the power supply connection between the vehicle main power supply 200 and the vehicle controller 300.

[0047] When the vehicle controller 300 enters normal power-down mode and the vehicle main power supply 200 can restore power, backup power supply detection can be performed. Therefore, if insufficient backup power supply or abnormal detection data is found during the detection process, normal power-down can still be completed through the vehicle main power supply 200.

[0048] S102, the supercapacitor 110 supplies power to the vehicle controller 300 through the backup power supply path 180, and acquires the voltage data of the supercapacitor 110, the backup power supply current data, and the power supply voltage data of the vehicle controller 300.

[0049] During the power supply period of the supercapacitor 110, the vehicle controller 300 continues to perform its original normal power-down tasks. Normal power-down tasks may include one or more of the following: saving operating data, writing fault information, terminating communication, shutting down peripheral devices, and preparing for hibernation.

[0050] When the vehicle controller 300 transitions from one normal power-down task to another, the operating state of different circuits can change, causing the backup power supply current to change accordingly.

[0051] The processor 160 can acquire the operating status data of the vehicle controller 300 to determine the normal power-down tasks and the times of change.

[0052] When a change in the normal power-down task causes a change in the backup power supply current, the time corresponding to the change in the backup power supply current is determined as the same time reference used by both the first and second time ranges.

[0053] The voltage data of the supercapacitor 110, the backup power supply current data, and the power supply voltage data of the vehicle controller 300 are aligned using a unified sampling clock or based on the sampling time, so that the power supply data before and after the same time reference have a corresponding relationship.

[0054] S103, such as Figure 4As shown, the time corresponding to the change in backup power supply current caused by the change in normal power-down task is used as the same time reference, and the first time range and the second time range are determined from the current time. The backup power supply time is determined based on the common continuous time of the two time ranges from the current time.

[0055] The current time is the time after obtaining stable data before and after the change of the normal power-down task based on the same time reference, and after completing the corresponding data validity confirmation.

[0056] The first time range refers to the time range during which the voltage of the supercapacitor 110 can be maintained at or above the minimum allowable input voltage of the backup power supply path 180, starting from the current moment.

[0057] The second time range refers to the time range during which the power supply voltage of the vehicle controller 300 can be maintained at or above the minimum operating voltage, starting from the current moment.

[0058] The first time range and the second time range are determined separately. The result of determining the first time range is not used as input to the process of determining the second time range, and vice versa.

[0059] When both the first and second time ranges are valid, the backup power supply time is determined based on the time during which the two time ranges coexist continuously from the current moment.

[0060] For example, if the first time range lasts for 6.8 seconds and the second time range lasts for 5.9 seconds, then the two time ranges will coexist continuously for 5.9 seconds starting from the current moment, and the backup power supply time is 5.9 seconds.

[0061] The first time range, the second time range, and the backup power supply time can all use the start time, end time, duration, and effective status as output data.

[0062] S104, the power supply time required by the vehicle controller 300 indicates the continuous power supply required from the current moment to complete the normal power-down task that has not yet been completed.

[0063] When the backup power supply time can cover the power supply time required by the vehicle controller 300, the supercapacitor 110 can continue to provide power during normal power-off periods.

[0064] When the backup power supply time is less than the power supply time required by the vehicle controller 300, and the vehicle main power supply 200 can still be restored, the processor 160 controls the power supply switch 140 to restore the power supply of the vehicle main power supply 200.

[0065] When setting the time margin, the time margin is included in the power supply time required by the vehicle controller 300.

[0066] Example 2 further illustrates the backup power supply detection conditions, main / backup power supply switching, and safety boundaries of the detection process.

[0067] The detection circuit 150 may also include a temperature sensing element 154. The temperature sensing element 154 is disposed near the supercapacitor 110 or at a location that can reflect the operating temperature of the supercapacitor 110, and is used to acquire temperature data.

[0068] Before performing backup power supply testing, the processor 160 checks the voltage and temperature of the vehicle main power supply 200 and the supercapacitor 110, as well as the current operating status of the on-board controller 300.

[0069] The vehicle's main power supply 200 being continuously within the normal power supply range means that the voltage of the vehicle's main power supply 200 is within the allowable power supply range of the on-board controller 300 and remains stable for a certain period of time. The normal power supply range is determined based on the vehicle's low-voltage power supply system specifications and the input voltage specifications of the on-board controller 300.

[0070] The settling time is determined based on the transient duration of the vehicle's main power supply 200, the input filtering characteristics of the on-board controller 300, and the response time of the power supply switch 140. In some implementations, a test range of 100ms to 500ms can be used. If the settling time is not reached, the backup power supply test is not initiated.

[0071] If the voltage of supercapacitor 110 is not lower than the allowable test voltage, it is determined that supercapacitor 110 has the basic power supply conditions for this test.

[0072] The allowable detection voltage is calibrated based on the charging target voltage of the supercapacitor 110, the minimum allowable input voltage of the backup power supply path 180, and the backup power required to be retained during the detection process.

[0073] The temperature data must be within the allowable temperature range. The allowable temperature range is determined jointly by the operating temperature range of the supercapacitor 110, the discharge isolation circuit 130, the power supply switch 140, and the actual DC voltage conversion circuit 170.

[0074] In some automotive applications, high and low temperature tests can cover temperatures from -40°C to 85°C, with the actual allowable temperature range determined based on specific device specifications and overall system testing.

[0075] During the testing process, the vehicle controller 300 should not have any vehicle safety-related tasks that need to be continuously executed. This condition can be determined based on one or more of the following: vehicle speed, vehicle gear, parking status, vehicle controller status, and the operating status of the vehicle controller 300.

[0076] If any of the above conditions are not met, the vehicle's main power supply 200 continues to supply power to the vehicle controller 300, and the vehicle controller 300 completes the normal power-off process. The backup power supply test is not performed in this test.

[0077] like Figure 3 As shown, after the detection conditions are met, the main and backup power supplies are switched.

[0078] Before the power supply switch 140 disconnects the vehicle main power supply 200 from direct power supply, the discharge isolation circuit 130 is already in a state that allows the supercapacitor 110 to supply power to the vehicle controller 300 and limits the reverse current.

[0079] The processor 160 then controls the power switch 140 to disconnect the vehicle's main power supply 200 from directly supplying power to the vehicle controller 300.

[0080] When using diodes, ideal diode control circuits, or corresponding field-effect transistor circuits, the supercapacitor 110 can bear the load by relying on the hardware conduction relationship of the backup power supply path 180 itself, without waiting for the processor 160 to issue a backup power access command again.

[0081] After power supply switching, a power supply status confirmation time is set. This time is used to confirm that the backup power supply current and the power supply voltage of the vehicle controller 300 have stabilized, and does not mean that the vehicle controller 300 is allowed to be in a state without power supply during this time.

[0082] The power supply status confirmation time is determined based on the response time of the power supply switch 140, the discharge isolation circuit 130, and the vehicle controller 300 input power. In some implementations, a verification range of 5ms to 50ms can be used.

[0083] The minimum effective detection current is determined based on the backup power supply current detection error, zero-point drift, and the minimum actual load during the normal power-down process of the vehicle controller 300, and should be higher than the detection noise range under no-load conditions.

[0084] The power supply detection stop voltage of the vehicle controller 300 is higher than the minimum operating voltage. The minimum operating voltage can be determined through an undervoltage test of the entire vehicle controller 300. A voltage margin can be set based on sampling error, voltage fluctuation, and the recovery time of the vehicle's main power supply 200 to obtain the power supply detection stop voltage of the vehicle controller 300.

[0085] The detection stop voltage of supercapacitor 110 is higher than the minimum allowable input voltage of backup power supply path 180, which is used to limit the power consumption of supercapacitor 110 during normal detection.

[0086] The detection stop voltage of Supercapacitor 110 can be calibrated under low temperature, late-stage use, and high normal-load conditions. Calibration determines the voltage of Supercapacitor 110 required to complete the predetermined minimum power-down task after detection stops, and sets a margin based on this voltage.

[0087] The maximum allowable current is determined based on the allowable discharge current of the supercapacitor 110, the allowable detection current of the backup power supply current detection circuit 152, the allowable current of the discharge isolation circuit 130, the allowable input current of the DC voltage conversion circuit 170 when it is set, and the allowable current of the backup power supply path 180 connection line, and the minimum allowable value among them is adopted.

[0088] When the voltage of the supercapacitor 110 reaches the detection stop voltage of the supercapacitor 110, the power supply voltage of the vehicle controller 300 reaches the power supply detection stop voltage of the vehicle controller 300, the backup power supply current exceeds the maximum allowable current, or the detection data is invalid, the detection ends, and the vehicle main power supply 200 is restored when it can still restore power supply.

[0089] Starting from the backup power supply path 180 assuming the load of the vehicle controller 300, a maximum detection time is also set. The maximum detection time is calibrated based on the duration of the normal power-down task, the detection stop voltage of the supercapacitor 110, and the backup power consumed during the detection process. In some implementations, 0.5s to 3s can be used as the initial verification range.

[0090] If no backup power supply current change reaches the current change threshold within the longest detection time, the backup power supply time update will not continue to wait for the backup power supply current change to reach the current change threshold. If the vehicle main power supply 200 can still restore power supply, the vehicle main power supply 200 will be restored, and the detection result will be marked as insufficient data.

[0091] When restoring the vehicle's main power supply 200, first turn on the power supply switch 140. After confirming that the power supply voltage of the vehicle controller 300 has returned to the normal power supply range and continues to meet the stable power supply conditions, the backup power supply test is completed.

[0092] Example 3 further illustrates the determination of the first time range.

[0093] The processor 160 determines the normal power-down task status corresponding to the current normal power-down task based on the operating status data of the vehicle controller 300. For example... Figure 5 As shown, the first time range can be segmented and determined by combining the voltage data of the supercapacitor 110 that has been acquired and the normal power-down task that has not yet been completed.

[0094] During a normal power-down task state, the voltage data and backup power supply current data of the supercapacitor 110 are continuously acquired, and the effective time period in which the backup power supply current is within the normal fluctuation range of the task is selected.

[0095] Under stable, normal power-down conditions, the current discharge trend can be determined by observing the voltage change of supercapacitor 110 over time. The voltage drop rate of supercapacitor 110 can be determined using the following formula: ; in, This indicates the rate of voltage drop of supercapacitor 110 corresponding to the current normal power-down task state; This indicates the voltage of supercapacitor 110 at the start of the effective time period; This indicates the voltage of supercapacitor 110 at the end of the effective time period; Indicates the start time of the valid time period; Indicates the end time of the valid time period.

[0096] If the current normal power-down task state continues, and When determining the effective voltage drop rate of supercapacitor 110, the time required for the voltage of supercapacitor 110 to drop to the minimum allowable input voltage of backup power supply path 180 can be determined by the following formula: ; in, This indicates the time required for the voltage of supercapacitor 110 to reach the minimum allowable input voltage of backup power supply path 180 under the current normal power-off task state; This indicates the current voltage of supercapacitor 110; This indicates the minimum allowable input voltage for backup power supply path 180.

[0097] To avoid sampling errors If the value is zero, negative, or too small, resulting in abnormal time results, a minimum effective descent rate can be set.

[0098] The minimum effective descent rate is determined based on the voltage detection error of the supercapacitor 110, the sampling period, and the normal voltage fluctuation range of the supercapacitor 110 under the same normal power-down task conditions.

[0099] when When the voltage drop rate is greater than the minimum effective drop rate, the corresponding time can be determined using the current voltage drop rate of the supercapacitor 110.

[0100] when When the current rate is not greater than the minimum effective descent rate, the current rate is not utilized. Time extrapolation is performed, and a first time range is determined based on pre-established discharge data corresponding to the current temperature, the voltage of supercapacitor 110, and the backup power supply current; if the corresponding valid discharge data cannot be obtained, the first time range outputs an invalid state.

[0101] The minimum allowable input voltage for backup power path 180 is determined based on the actual power supply requirements of the devices in backup power path 180.

[0102] When the backup power supply path 180 includes a DC voltage conversion circuit 170, the minimum input voltage required for the DC voltage conversion circuit 170 to maintain a specified output under the corresponding load is determined; when the DC voltage conversion circuit 170 is not provided, the minimum operating voltage of the vehicle controller 300 and the voltage loss allowed by the backup power supply path 180 are determined.

[0103] The above linear calculations are only used for local voltage changes under stable and normal power-on conditions.

[0104] When the backup power supply current for subsequent normal power-down tasks changes, or when the voltage of supercapacitor 110 is expected to cross a large voltage range, pre-established discharge data is used for segmented processing.

[0105] The discharge data can be established during the prototype stage. The supercapacitor 110 is discharged under different temperatures, different initial voltages of the supercapacitor 110, and different backup power supply currents. The voltage change of the supercapacitor 110 over time is recorded, establishing the correspondence between temperature, voltage of the supercapacitor 110, backup power supply current, and discharge time.

[0106] When the actual parameters are located between adjacent verified data points, interpolation can be used; when the actual temperature, the voltage of the supercapacitor 110, or the backup power supply current exceeds the verified range, no unverified extrapolation is performed.

[0107] When an incomplete normal power-down task includes at least two tasks executed in sequence, the voltage of the supercapacitor 110 at the end of the task is determined based on the backup power supply current, temperature, and remaining duration corresponding to the first incomplete task.

[0108] If the voltage of supercapacitor 110 has reached the minimum allowable input voltage of backup power supply path 180 before the first task has ended, then the time at which it reaches this value shall be taken as the end time of the first time range.

[0109] If the voltage of the supercapacitor 110 is still higher than the minimum allowable input voltage of the backup power supply path 180 when the task ends, then the voltage is used as the starting voltage of the next normal power-down task, and then the voltage is determined according to the backup power supply current, temperature and discharge data corresponding to the next task.

[0110] Three or more normal power-down tasks executed sequentially are processed segment by segment in the same way until all unfinished tasks are completed or the voltage of supercapacitor 110 reaches the minimum allowable input voltage of backup power supply path 180.

[0111] If the supercapacitor voltage is still higher than the minimum allowable input voltage of the backup power supply path when all the incomplete normal power-down tasks have been completed, then the first time range is determined to at least cover the time range corresponding to all the incomplete normal power-down tasks.

[0112] Example 4 further illustrates the determination of the second time range.

[0113] The processor 160 determines the normal power-down task state before and after the change in backup power supply current based on the operating status data of the vehicle controller 300, and obtains the voltage of the supercapacitor 110, the backup power supply current and the power supply voltage of the vehicle controller 300 corresponding to the two normal power-down task states.

[0114] The data used for the two normal power-down task states are based on the same time reference as the time corresponding to the change in backup power supply current, and avoid the short-term electrical transients caused by the switching of normal power-down tasks, and are acquired within the stable time period before and after the change.

[0115] like Figure 6 As shown, in the case where no DC voltage conversion circuit 170 is provided between the supercapacitor 110 and the vehicle controller 300, and the backup power supply path 180 includes the discharge isolation circuit 130 and the connecting line, the voltage change relationship of the backup power supply path 180 can be determined based on the voltage and current changes within the verified local backup power supply current range.

[0116] In one implementation, the equivalent resistance within the corresponding local backup power supply current range can be determined according to the following formula: ; in, This represents the equivalent resistance of backup power supply path 180 within the corresponding backup power supply current range; and These represent the voltages of supercapacitor 110 before and after the change in backup power supply current; and These represent the power supply voltages of the on-board controller 300 before and after the change in backup power supply current; and These represent the backup power supply current before and after the change. When the absolute value of the change in backup power supply current does not reach the current change threshold, this set of data is not used to determine the voltage change relationship of backup power supply path 180.

[0117] After obtaining the local voltage change relationship, the power supply voltage of the vehicle controller 300 corresponding to the normal power-down task to be determined can be determined according to the following formula based on a normally measured power-down task state: ; in, This indicates the power supply voltage of the on-board controller 300 corresponding to the normal power-down task to be determined; This indicates the voltage of supercapacitor 110 corresponding to the normal power-down task; This indicates the backup power supply current corresponding to the normal power-down task.

[0118] Therefore, based on the voltage of the supercapacitor 110 that has not yet completed the normal power-down task and the backup power supply current, the power supply voltage of the corresponding vehicle controller 300 can be determined.

[0119] When the power supply voltage of the determined vehicle controller 300 reaches the minimum operating voltage, the corresponding time is taken as the end time of the second time range.

[0120] The voltage variation relationship described above applies only to the verified range of local backup power supply current. When the actual backup power supply current exceeds this range or the backup power supply path 180 exhibits significant nonlinearity, this relationship should not be used for further extrapolation.

[0121] like Figure 7 As shown, for backup power supply path 180 including boost, buck, or buck-boost DC voltage conversion circuit 170, the above-mentioned local equivalent resistance relationship is not used to describe the entire backup power supply path 180.

[0122] During the prototype calibration phase, the supercapacitor 110 can supply power to the vehicle controller 300 through the backup power supply path 180 containing the DC voltage conversion circuit 170 under different voltages, backup power supply currents and temperatures of the supercapacitor 110, and the power supply voltage of the vehicle controller 300 can be recorded simultaneously.

[0123] The backup power supply current used in each calibration condition is also the current flowing from the output terminal of the supercapacitor 110 into the backup power supply path 180, so that the backup power supply current data in the calibration stage and the actual testing stage have the same detection location and physical meaning.

[0124] This establishes the corresponding data between the voltage, backup power supply current, and temperature of the supercapacitor 110 and the power supply voltage of the on-board controller 300.

[0125] The calibration data can be saved according to the voltage range, backup power supply current range, and temperature range of the supercapacitor 110, and at the same time, the applicable hardware version, the vehicle controller 300 software version, and the data validity status can be saved.

[0126] During the normal power-down test, the corresponding calibration data is determined based on the current voltage data, backup power supply current data, and temperature data of the supercapacitor 110. In conjunction with the currently obtained voltage data of the supercapacitor 110, backup power supply current data, and power supply voltage data of the vehicle controller 300, the power supply voltage of the vehicle controller 300 that has not yet completed the normal power-down task is determined.

[0127] When the power supply voltage of the vehicle controller 300 reaches the minimum operating voltage during a normal power-down task, the corresponding moment is taken as the end time of the second time range.

[0128] When the actual parameters are located between adjacent verified calibration data, interpolation can be used; when they exceed the calibration range, or when the calibration data does not match the current hardware or software version, the second time range output is invalid.

[0129] If the on-board controller's power supply voltage is still higher than the minimum operating voltage when all incomplete normal power-down tasks have been completed, then the second time range is determined to at least cover the time range corresponding to all incomplete normal power-down tasks.

[0130] Example 5 further illustrates the validity of detection data, backup power supply time updates, power supply time required for the vehicle controller 300, and anomaly handling.

[0131] The voltage data of the supercapacitor 110, the backup power supply current data, and the power supply voltage data of the vehicle controller 300 preferably use a unified sampling clock. If a unified sampling clock cannot be used, each detection data carries the sampling time, and the processor 160 aligns them according to the sampling time.

[0132] In some implementations, the voltage and current sampling period can be from 5 ms to 20 ms. The actual sampling period is determined based on the rate of change of the normal power-on task state, the response time of the detection circuit 150, and the processing cycle of the processor 160.

[0133] The same normal power-down task state can include at least 5 to 10 consecutive valid sampling periods to determine whether the corresponding electrical state has reached a stable state.

[0134] When the detection data exceeds the 150 range of the detection circuit, continuous sampling is lost, or the detection channel malfunctions during self-test, the corresponding data output will be invalid.

[0135] The backup power supply current detection circuit 152 can perform a zero-point check when the vehicle's main power supply 200 is normal and the backup power supply path 180 is not under significant load. The allowable zero-point deviation is determined based on the accuracy of the current sensing device, the analog-to-digital conversion accuracy, and the minimum effective detection current.

[0136] The current test ends when the allowed number of consecutive invalid samples is reached. The number of consecutive invalid samples is determined based on the sampling period and the system's allowed data interruption time. In some implementations, three to five consecutive sampling periods can be used as the verification range.

[0137] like Figure 8 As shown, when a new normal power-down task state appears during the normal power-down process, the processor 160 compares the backup power supply current corresponding to the new normal power-down task state with that of the previous normal power-down task state.

[0138] The current change threshold is determined based on the backup power supply current detection error and the normal fluctuation range of the backup power supply current under the same normal power-down task conditions.

[0139] During prototype calibration, the same normal power-down task can be repeatedly executed to statistically analyze the normal fluctuation range of the corresponding backup power supply current, and then the current change threshold can be determined by combining the detection error.

[0140] In some implementations, the difference between the average backup power supply current of two normal power-down task states can be set to 15% to 30% of the average backup power supply current of the lower current state as the initial verification range. The final threshold is determined based on the power consumption change and detection accuracy of the specific vehicle controller 300.

[0141] When the backup power supply current change in the new normal power-down task state reaches the current change threshold, the time corresponding to the change is used as the new same time reference, and the first time range and the second time range are redefined respectively.

[0142] The backup power supply time is updated based on the common continuous time from the current moment across the two newly determined time ranges. When both the first and second time ranges cover all unfinished normal power-down tasks, the backup power supply time is determined to meet the power supply time required by the current vehicle controller.

[0143] If no backup power supply current change reaches the current change threshold during the entire longest detection time, no new backup power supply time will be output, and the data shortage status will be output. The vehicle main power supply 200 will be restored when it becomes available.

[0144] The power supply time required for the vehicle controller 300 is determined based on the normal power-down task that has not yet been completed.

[0145] When the remaining normal power-down tasks are executed in sequence, the time required to complete all tasks is determined based on the remaining execution time of each task and their sequence.

[0146] When multiple normally powered-down tasks are executed in parallel, the maximum time required to complete all remaining tasks is determined based on the start conditions, completion conditions, and dependencies of each task.

[0147] When multiple tasks are executed simultaneously, the load conditions used in the first and second time ranges are the total backup power supply current that is actually measured or pre-calibrated when multiple tasks are running simultaneously.

[0148] The execution time of each normal power-down task can be calibrated by repeatedly testing the vehicle controller 300 under normal power-down conditions. For tasks such as data saving, whose execution time is affected by the amount of data to be processed, corresponding execution times can be established according to different data volumes.

[0149] When setting the time margin, the time margin is used to cover the fluctuation of task execution time, sampling error, response time of power supply switch 140, and recovery time of vehicle main power supply 200, and this time margin is included in the power supply time required by vehicle controller 300.

[0150] When the updated backup power supply time is less than the power supply time required by the vehicle controller 300, the vehicle main power supply 200 is restored.

[0151] like Figure 9 As shown, if the vehicle generates a power-on request again during the detection process, the priority of the power-on request is higher than that of the normal backup power supply detection. The processor 160 first restores the vehicle's main power supply 200, and after confirming that the power supply voltage of the vehicle controller 300 is stable, it exits the detection and then executes the normal power-on process.

[0152] If the vehicle's main power supply 200 actually fails during the testing process, the actual main power supply failure handling takes precedence over normal backup power supply testing. At this time, the vehicle's main power supply 200 recovery control for testing purposes is stopped, and the supercapacitor 110 continues to supply power to the vehicle controller 300 through the backup power supply path 180. The vehicle controller 300 completes the tasks that need to be executed first according to the pre-set abnormal power failure task sequence.

[0153] When the voltage of supercapacitor 110 reaches the detection stop voltage of supercapacitor 110, the power supply voltage of vehicle controller 300 reaches the power supply detection stop voltage of vehicle controller 300, the backup power supply current exceeds the maximum allowable current, or the detection data is continuously invalid, the corresponding protection processing takes priority over normal backup power supply detection.

[0154] The power switch 140 can be configured with status feedback. After the processor 160 issues a control command to the power switch 140, the actual status of the power switch 140 is confirmed through status feedback.

[0155] When no independent status feedback is set, the status of the vehicle main power supply 200 being disconnected or restored can be determined by the vehicle main power supply 200 status, backup power supply current data and vehicle controller 300 power supply voltage data.

[0156] The specified response time is determined based on the device response time of the power supply switch 140, the response time of the drive circuit, and the results of the main / backup power supply switching test. If the power supply switch 140 fails to complete the expected action within the specified response time, the backup power supply test is terminated, and an abnormal status of the power supply switch 140 is output. If the vehicle main power supply 200 is still able to supply power to the vehicle controller 300, the power supply to the vehicle main power supply 200 is maintained or restored.

[0157] Example 6: This example provides a complete vehicle application process.

[0158] The vehicle includes an on-board controller 300 and a supercapacitor backup power protection module 100. When the vehicle is running normally, the vehicle's main power supply 200 supplies power to the on-board controller 300 through the power supply switch 140, and the charging circuit 120 charges the supercapacitor 110 and keeps the supercapacitor 110 in a state that can provide backup power.

[0159] After the vehicle stops, a normal power-down request is generated. The processor 160 obtains the status of the vehicle's main power supply 200, the voltage and temperature data of the supercapacitor 110, and the operating status data of the vehicle controller 300.

[0160] Assuming the vehicle's main power supply 200 is continuously within the normal power supply range, the voltage of the supercapacitor 110 is not lower than the allowable detection voltage, the temperature is within the allowable temperature range, the on-board controller 300 has exited the vehicle safety-related tasks that need to be continuously executed, and the vehicle's main power supply 200 can be restored to power, then backup power supply detection is allowed.

[0161] The discharge isolation circuit 130 is already in a state that allows the supercapacitor 110 to supply power to the vehicle controller 300. The processor 160 controls the power supply switch 140 to disconnect the vehicle main power supply 200 from direct power supply. The supercapacitor 110 takes over the load of the vehicle controller 300 through the backup power supply path 180.

[0162] After confirming that the backup power supply current and the power supply voltage of the vehicle controller 300 meet the testing requirements, the vehicle controller 300 continues to perform the normal power-down task.

[0163] For example, the vehicle controller 300 first performs the operation data saving task. After the operation data is saved, the vehicle controller 300 enters the communication termination task, which changes the backup power supply current flowing from the output terminal of the supercapacitor 110 into the backup power supply path 180 from the first current level to the second current level.

[0164] When the change in the backup power supply current reaches the current change threshold, the time corresponding to the change in the backup power supply current is used as the same time reference for both the first and second time ranges.

[0165] The first time range is determined based on the voltage data of the supercapacitor 110, and the second time range is determined based on the voltage data of the supercapacitor 110, the backup power supply current data, and the power supply voltage data of the vehicle controller 300.

[0166] For example, if the first time range lasts for 6.6 seconds starting from the current moment and the second time range lasts for 5.7 seconds starting from the current moment, then the two time ranges coexist continuously for 5.7 seconds starting from the current moment, and the current backup power supply time is 5.7 seconds.

[0167] The processor 160 determines the required power supply time for the vehicle controller 300 based on the communication termination task and hibernation preparation task that have not yet been completed.

[0168] Assuming that the power supply time required by the vehicle controller 300, including the corresponding time margin, is 3.5 seconds, then the current backup power supply time can cover the remaining normal power-down tasks, and can continue to be powered by the supercapacitor 110.

[0169] Subsequently, the vehicle controller 300 enters a new normal power-down task state, which causes a new change in the backup power supply current.

[0170] The processor 160 determines the moment corresponding to the new backup power supply current change as the new same time reference and redefines the first time range and the second time range.

[0171] Assuming the first time range is updated to 4.8s and the second time range is updated to 3.1s, then the current backup power supply time is updated to 3.1s.

[0172] If the on-board controller 300 requires 3.4 seconds of power supply at this time, the backup power supply time is no longer sufficient to cover the remaining normal power-down tasks, and the processor 160 controls the power switch 140 to restore the vehicle's main power supply 200.

[0173] The above values ​​are only used to illustrate the technical process of this application and are not intended as fixed parameters for vehicle products.

[0174] If the backup power supply current does not reach the current change threshold after the supercapacitor 110 has taken on the load of the vehicle controller 300 for the longest detection time, the detection result will be marked as insufficient data, and the vehicle main power supply 200 will be restored.

[0175] If the voltage of supercapacitor 110 reaches the detection stop voltage of supercapacitor 110, the detection will be terminated in advance to avoid the detection process continuing to consume the supercapacitor 110's power reserved for actual main power supply failure.

[0176] If the power supply voltage of the vehicle controller 300 reaches the power supply detection stop voltage of the vehicle controller 300, the main power supply of the vehicle 200 is restored to prevent the vehicle controller 300 from entering an actual undervoltage state.

[0177] If the vehicle main power supply 200 actually fails during the test, the vehicle main power supply 200 recovery process set for normal testing will no longer be executed. The supercapacitor 110 will continue to supply power to the vehicle controller 300, and the vehicle controller 300 will complete the tasks that need to be prioritized according to the abnormal power failure process.

[0178] The voltage data of the supercapacitor 110, the backup power supply current data, and the power supply voltage data of the vehicle controller 300 in this application can be stored as data values, sampling times, and valid states respectively; the first time range, the second time range, and the backup power supply time can be stored as start times, end times, durations, and valid states respectively; when an anomaly is detected, the anomaly type and the time of anomaly occurrence can also be stored.

[0179] The normal power supply range, stabilization time, allowable detection voltage, allowable temperature range, minimum effective detection current, detection stop voltage of supercapacitor 110, power supply stop voltage of on-board controller 300, maximum allowable current, minimum allowable input voltage, minimum operating voltage, current change threshold, longest detection time, and minimum effective descent rate of backup power supply path 180 are all determined based on the actual vehicle power supply requirements, device specifications, and prototype testing.

[0180] When the corresponding test data or actual operating conditions exceed the verified applicable range, or when the valid data required for calculation cannot be obtained, the data will not be used to output a new first time range, second time range, or backup power supply time. If the vehicle main power supply 200 can still restore power, the vehicle main power supply 200 will ensure that the on-board controller 300 completes normal power-off.

[0181] It should be noted that, for the sake of brevity, the foregoing method embodiments are described as a series of actions, but this does not mean that the application limits the order of the steps. Based on the ideas of this application, some steps can be executed in different orders or in parallel without affecting the functional implementation. Secondly, those skilled in the art should also understand that the specific embodiments described in the specification are preferred embodiments of the technical solutions of this application, and not limitations on the scope of protection of this application. All equivalent improvements or substitutions made within the spirit and principles of this application should be covered within the scope of protection of this application.

[0182] In conclusion, the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A supercapacitor backup power supply protection module for an on-board controller, characterized in that, It includes a supercapacitor, a power switch, and a processor, wherein the supercapacitor is connected to the vehicle controller via a backup power supply path; The processor acquires the supercapacitor voltage, backup power supply current, vehicle controller power supply voltage and operating status data, and when the vehicle is powered off normally and the main power supply can be restored, the supercapacitor is powered through the backup power supply path. Based on the operating status data, the normal power-down task status is identified. When the change in task status causes a change in backup power supply current, the corresponding relationship of the three types of power supply data before and after the change is obtained with the change time as the time reference. The first time range in which the supercapacitor voltage is not lower than the minimum allowable input voltage of the backup power supply path and the second time range in which the vehicle controller power supply voltage is not lower than the minimum operating voltage of the vehicle controller are determined. The backup power supply time is determined based on the common continuous time of the two from the current time. When the backup power supply current change caused by the new normal power-down task state reaches the current change threshold, the backup power supply time is updated. If the updated backup power supply time is less than the power supply time required by the vehicle controller, the power supply switch is controlled to restore the vehicle's main power supply.

2. The supercapacitor backup power supply protection module for an on-board controller according to claim 1, characterized in that, It also includes charging circuits, discharge isolation circuits, and detection circuits; The charging circuit connects the vehicle's main power supply and the supercapacitor; the power supply switch is located between the vehicle's main power supply and the vehicle controller; and the backup power supply path includes the discharge isolation circuit. The detection circuit is used to acquire the voltage of the supercapacitor, the backup power supply current, and the power supply voltage of the vehicle controller, wherein the backup power supply current is the current flowing from the output terminal of the supercapacitor into the backup power supply path.

3. A supercapacitor backup power supply protection module for an on-board controller according to claim 2, characterized in that, The detection circuit is also used to acquire temperature data; The processor is allowed to perform backup power supply detection when the vehicle's main power supply is continuously within the normal power supply range, the supercapacitor voltage is not lower than the allowable detection voltage, the temperature data is within the allowable temperature range, and the vehicle controller does not have any vehicle safety-related tasks that need to be continuously executed. Before controlling the power supply switch to disconnect the vehicle's main power supply from direct power supply, the discharge isolation circuit is kept in a state that allows the supercapacitor to supply power to the vehicle controller and limits the reverse current. When the backup power supply current is not lower than the minimum effective detection current and the vehicle controller power supply voltage is not lower than the vehicle controller power supply detection stop voltage, the backup power supply path is determined to supply power to the vehicle controller. When the voltage of the supercapacitor reaches the supercapacitor detection stop voltage, the power supply voltage of the vehicle controller reaches the vehicle controller power supply detection stop voltage, the backup power supply current exceeds the maximum allowable current, or the data output by the detection circuit is invalid, and the vehicle main power supply can still be restored, the power supply switch is controlled to restore the vehicle main power supply to the vehicle controller.

4. A supercapacitor backup power supply protection module for an on-board controller according to claim 3, characterized in that, Determining the first time range includes: The change in supercapacitor voltage under the normal power-down task state is determined based on the supercapacitor voltage corresponding to the normal power-down task state. Based on the temperature data, the supercapacitor voltage change, and the backup power supply current corresponding to the incomplete normal power-down task, determine the moment when the supercapacitor voltage reaches the minimum allowable input voltage of the backup power supply path. The first time range is determined based on the current time and that time.

5. A supercapacitor backup power supply protection module for an on-board controller according to claim 4, characterized in that, When an incomplete normal power-down task includes at least two normal power-down tasks executed in sequence, Based on the backup power supply current, temperature data, supercapacitor starting voltage, and remaining duration corresponding to the first incomplete normal power-down task, determine the supercapacitor voltage at the end of the execution of the first incomplete normal power-down task. The supercapacitor voltage is used as the supercapacitor starting voltage for the next normal power-down task, and the corresponding supercapacitor voltage is determined sequentially according to the execution order of each unfinished normal power-down task. The end time of the first time range is determined when the voltage of the supercapacitor reaches the minimum allowable input voltage of the backup power supply path during the execution of one of the incomplete normal power-down tasks.

6. A supercapacitor backup power supply protection module for an on-board controller according to claim 3, characterized in that, Determining the second time range includes: Based on the correspondence between the supercapacitor voltage, backup power supply current and vehicle controller power supply voltage before and after the change of the normal power-down task state, and the backup power supply current and supercapacitor voltage corresponding to the incomplete normal power-down task, the vehicle controller power supply voltage corresponding to the incomplete normal power-down task is determined. The moment when the power supply voltage of the vehicle controller reaches the minimum operating voltage of the vehicle controller is determined, and the second time range is determined based on the current moment and that moment.

7. A supercapacitor backup power supply protection module for an on-board controller according to claim 6, characterized in that, No DC voltage conversion circuit is provided between the supercapacitor and the vehicle controller; the backup power supply path includes the discharge isolation circuit and the connection line. Based on the voltage difference between the supercapacitor voltage and the vehicle controller power supply voltage before and after the change in the normal power-down task state, as well as the change in backup power supply current, the voltage change relationship of the backup power supply path within the corresponding backup power supply current range is determined. The supercapacitor voltage corresponding to the incomplete normal power-down task is determined based on the supercapacitor voltage. Based on the voltage change relationship, the backup power supply current corresponding to the incomplete normal power-down task, and the corresponding supercapacitor voltage, the on-board controller power supply voltage corresponding to the incomplete normal power-down task is determined.

8. A supercapacitor backup power supply protection module for an on-board controller according to claim 6, characterized in that, The backup power supply path includes a DC voltage conversion circuit; From the pre-stored data on the correspondence between supercapacitor voltage, backup power supply current, temperature and vehicle controller power supply voltage, determine the calibration data corresponding to the current supercapacitor voltage, backup power supply current and temperature data; Based on the calibration data and the supercapacitor voltage, backup power supply current and vehicle controller power supply voltage obtained during the normal power-down process, determine the vehicle controller power supply voltage corresponding to the normal power-down task that has not yet been completed. Based on the execution relationship of the incomplete normal power-down task, determine the moment when the power supply voltage of the vehicle controller reaches the minimum operating voltage of the vehicle controller.

9. A supercapacitor backup power supply protection module for an on-board controller according to claim 1, characterized in that, The current change threshold is determined based on the detection error of the backup power supply current and the normal fluctuation range of the backup power supply current under the same normal power-down task conditions. When unfinished normal power-down tasks are executed in sequence, the required power supply time for the vehicle controller is determined based on the remaining duration and sequence of each normal power-down task. When at least two incomplete normal power-down tasks are executed in parallel, the time required to complete all remaining normal power-down tasks is determined based on the start conditions, completion conditions, and dependencies of each normal power-down task, and this time is determined as the power supply time required by the vehicle controller.

10. A supercapacitor backup power supply protection module for an on-board controller according to any one of claims 1 to 9, characterized in that, The supercapacitor backup power protection module is installed in the vehicle, which includes the vehicle controller and a vehicle main power supply for supplying power to the vehicle controller.

Images