Power supply system of vehicle controller, vehicle controller and vehicle

Abstract

The utility model provides a power supply system of a vehicle controller, the vehicle controller and a vehicle. The power supply system comprises a switching circuit and a master control circuit, and the switching circuit is configured to be selectively connected to a first battery and a second battery and output a first power supply signal; and the main control circuit is connected with the switching circuit and is used for controlling the switching circuit to be switched from being connected to one of the first battery and the second battery to being connected to the other battery based on the abnormal state of the first power supply signal. The power supply system provided by the utility model can improve the safety of the vehicle controller.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to a power supply system for a vehicle controller, a vehicle controller, and a vehicle. Background Technology

[0002] Vehicle controllers are used to control critical functional circuits in vehicles, such as the cockpit instrument system, driver assistance systems, and body control systems. The stability of the vehicle controller's power supply system directly affects the safe operation of these circuits. However, under abnormal conditions, the vehicle controller's power supply system may experience problems such as momentary interruptions, overloads, or undervoltage, leading to controller malfunction and potentially serious safety accidents. Therefore, the reliability of the vehicle controller is of paramount importance. Utility Model Content

[0003] This application provides a power supply system for a vehicle controller, a vehicle controller, and a vehicle to enhance the reliability of the vehicle controller.

[0004] This application provides a power supply system for a vehicle controller. The power supply system includes a switching circuit and a main control circuit. The switching circuit is configured to selectively connect to a first battery and a second battery and output a first power supply signal. The main control circuit is connected to the switching circuit and is used to control the switching circuit to switch from connecting to one of the first battery and the second battery to connecting to the other based on an abnormal state of the first power supply signal.

[0005] In one embodiment, the power supply system further includes a safety monitoring circuit, which is connected to the switching circuit and the main control circuit, for detecting the operating status of the main control circuit and resetting the main control circuit when it is in an abnormal state.

[0006] In one embodiment, the safety monitoring circuit includes a status detection circuit and a power conversion circuit. The status detection circuit is connected to the main control circuit and is used to detect the working status of the main control circuit and reset the main control circuit when it is in an abnormal state. The power conversion circuit is connected to the switching circuit, the status detection circuit and the main control circuit and is used to supply power to the status detection circuit and the main control circuit based on a first power supply signal.

[0007] In one embodiment, the power supply system further includes a power management circuit, which is connected to the switching circuit and the main control circuit and configured to access the functional circuit of the vehicle controller. The power management circuit is used to output a second power supply signal based on the first power supply signal to power the functional circuit.

[0008] In one embodiment, the power supply system further includes a voltage monitoring circuit, which is connected to the switching circuit, the power management circuit, the safety monitoring circuit, and the main control circuit. The voltage monitoring circuit is used to collect the power supply signals output by the switching circuit, the power management circuit, and the safety monitoring circuit, and to output an abnormal signal to the main control circuit when any power supply signal is abnormal.

[0009] In one embodiment, the voltage monitoring circuit is also connected to the first input terminal and the second input terminal of the switching circuit, respectively, to collect the power supply signals output by the first battery and the second battery.

[0010] In one embodiment, the power supply system further includes a connector connected to a switching circuit and configured to access a first battery and a second battery.

[0011] This application provides a vehicle controller that includes the aforementioned power supply system.

[0012] In one embodiment, the power supply system further includes a power management circuit, and the controller further includes a functional circuit, which is connected to the power management circuit and the main control circuit respectively.

[0013] This application provides a vehicle that includes the aforementioned vehicle controller.

[0014] The beneficial effects of this application are as follows: The power supply system of this application includes a switching circuit and a main control circuit. The switching circuit selectively connects to a first battery or a second battery and outputs a first power supply signal. When the first power supply signal is abnormal, the main control circuit can control the switching circuit to switch from connecting to one of the first battery and the second battery to connecting to the other, so as to ensure that the power supply system can provide a stable first power supply signal. This can improve the problems of power supply system interruption, overload, and undervoltage, thereby enhancing the reliability of vehicle controllers using the power supply system of this application and improving the safety of vehicle controllers. Attached Figure Description

[0015] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort, wherein:

[0016] Figure 1 This is a schematic diagram of the structure of an embodiment of the power supply system for the vehicle controller provided in this application;

[0017] Figure 2 This is a circuit diagram of one embodiment of the switching circuit provided in this application;

[0018] Figure 3 This is a circuit diagram of an embodiment of the safety monitoring circuit provided in this application;

[0019] Figure 4 This is a circuit diagram of an embodiment of the power management circuit provided in this application;

[0020] Figure 5 This is a circuit diagram of an embodiment of the voltage monitoring circuit provided in this application;

[0021] Figure 6 This is a schematic diagram of the structure of an embodiment of the vehicle controller provided in this application;

[0022] Figure 7 This is a flowchart illustrating an embodiment of the safety monitoring circuit monitoring the working status of the main control circuit provided in this application;

[0023] Figure 8 This is a flowchart illustrating an embodiment of the main control circuit controlling the switching circuit to switch between the first battery and the second battery provided in this application;

[0024] Figure 9 This is a flowchart illustrating an embodiment of the power management circuit and functional circuit monitoring process provided in this application;

[0025] Figure 10 This is a structural schematic diagram of an embodiment of the vehicle provided in this application. Detailed Implementation

[0026] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0027] It should be noted that if the embodiments of this application involve directional indicators (such as up, down, left, right, front, back, etc.), the directional indicators are only used to explain the relative positional relationship and movement of the components in a certain specific posture (as shown in the figure). If the specific posture changes, the directional indicators will also change accordingly.

[0028] Furthermore, if the embodiments of this application involve descriptions such as "first" or "second," these descriptions are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of technical features indicated. Therefore, features defined with "first" or "second" may explicitly or implicitly include at least one of those features. Additionally, the technical solutions of various embodiments can be combined with each other, but this must be based on the ability of those skilled in the art to implement them. If the combination of technical solutions is contradictory or impossible to implement, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed in this application.

[0029] To address the issue of low reliability in vehicle controllers caused by poor power supply systems, this application provides a power supply system for vehicle controllers. (See also...) Figure 1 , Figure 1 This is a schematic diagram of a power supply system for a vehicle controller provided in this application. The power supply system 100 includes a switching circuit 110 and a main control circuit 120 connected to the switching circuit 110.

[0030] The switching circuit 110 is configured to selectively connect to the first battery 10 and the second battery 20. When connecting to either the first battery 10 or the second battery 20, the switching circuit 110 outputs a first power supply signal to power the electrical components in the power supply system 100. The switching circuit 110 also powers the functional circuits and electrical components of the vehicle controller. The switching circuit 110 can output multiple first power supply signals with different or the same voltage values; this is not limited. The first battery 10 and the second battery 20 can be considered the main battery and backup battery of the power supply system 100 of this application. For example, the switching circuit 110 defaults to connecting to the first battery 10 as the main battery; or the switching circuit 110 defaults to connecting to the second battery 20 as the main battery; this is not limited. When the switching circuit 110 is supplying power to the system via either the first battery 10 or the second battery 20, if it detects that the power of the connected first battery 10 or second battery 20 is insufficient, it switches accordingly to the second battery 20 or the first battery 10. For example, the switching circuit 110 is connected to the first battery 10, and when the voltage of the first battery 10 is detected to be lower than the threshold voltage, the switching circuit 110 is connected to the second battery 20; or the switching circuit 110 is connected to the second battery 20, and when the voltage of the second battery 20 is detected to be lower than the threshold voltage, the switching circuit 110 is connected to the first battery 10, which is not limited here.

[0031] The main control circuit 120 controls the switching circuit 110 to switch from connecting to the first battery 10 and the second battery 20 to connecting to the other based on the abnormal state of the first power supply signal. Understandably, the main control circuit 120 can monitor the first power supply signal and control the switching circuit 110 to connect to the other battery when the first power supply signal is abnormal, to ensure that the power supply system 100 can provide a stable first power supply signal, thereby enhancing the reliability of the vehicle controller using the power supply system 100 of this application.

[0032] The power supply system 100 of this application includes a switching circuit 110 and a main control circuit 120. The switching circuit 110 selectively connects to the first battery 10 or the second battery 20 and outputs a first power supply signal. When the first power supply signal is abnormal, the main control circuit 120 can control the switching circuit 110 to switch from connecting to the first battery 10 or the second battery 20 to connecting to the other, so as to ensure that the power supply system 100 can provide a stable first power supply signal. This can improve the problems of power supply system 100 such as momentary interruption, overload, and undervoltage, thereby enhancing the reliability of the vehicle controller using the power supply system 100 of this application and improving the safety of the vehicle controller.

[0033] In one embodiment, the main control circuit 120 can also be connected to the input terminals of the first battery 10 and the second battery 20 via the switching circuit 110, so as to know the power supply status of the first battery 10 and the second battery 20 before the switching circuit 110 outputs the first power supply signal, thereby timely replacing the power supply battery and enhancing the reliability of the power supply system 100. The connection between the main control circuit 120 and the switching circuit 110 at the input terminals of the first battery 10 and the second battery 20 can be indirect or direct, and is not limited thereto.

[0034] In one embodiment, the main control circuit includes an integrated circuit chip with signal processing capabilities. The integrated circuit chip can be a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, and is not limited thereto. Furthermore, the main control circuit also includes peripheral circuitry for maintaining the normal operation of the integrated circuit chip.

[0035] See Figure 2 , Figure 2This is a circuit diagram of an embodiment of the switching circuit provided in this application. The switching circuit 110 of this embodiment includes a power chip U1, two filter circuits 111, and a current-limiting resistor R11. One filter circuit 111 is connected to the first battery 10, the first input terminal IN1 of the power chip U1, and the first overvoltage detection terminal OV1 of the power chip U1, respectively. The other filter circuit 111 is connected to the second battery 20, the second input terminal IN2 of the power chip U1, and the second overvoltage detection terminal OV2, respectively. The first input terminal IN1 and the second input terminal IN2 of the power chip U1 are used to connect to the first battery 10 and the second battery 20, respectively. The current-limiting terminal ILIM of the power chip U1 is connected to the current-limiting resistor R11, which is used to configure the overcurrent threshold. The communication terminal I2C, the switching terminal SEL, and the interrupt terminal INT of the power chip U1 are all connected to the main control circuit 120.

[0036] Specifically, the power supply signal V1 of the first battery 10 and the power supply signal V2 of the second battery 20 are both input to the first input terminal IN1 and the second input terminal IN2 of the power chip U1. The power chip U1 defaults to selecting the first input terminal IN1. When it detects that the voltage of the first overvoltage detection terminal OV1 is too low, the power chip U1 will automatically switch to the second input terminal IN2 for power supply. This process does not require the participation of the main control circuit 120. The overvoltage threshold can be configured by the main control circuit 120 through the communication terminal I2C. When the power chip U1 triggers any abnormality (including overvoltage, overcurrent, etc.), it can notify the main control circuit 120 through the interrupt signal of the interrupt terminal INT. After judgment, the main control circuit 120 can control the switching terminal SEL to select whether to connect the first battery 10 or the second battery 20.

[0037] In one embodiment, the current-limiting resistor R11 is a digital potentiometer. The control terminal of the digital potentiometer is connected to the main control circuit 120, and the two ends of the digital potentiometer are connected to the current-limiting terminal ILIM and the power ground, respectively. By adjusting the resistance value of the digital potentiometer, the main control circuit 120 can adjust the overcurrent threshold of the power chip, enabling the switching circuit 110 to adapt to more application scenarios. In addition, the digital potentiometer can achieve precise adjustment of the resistance value, thereby improving the accuracy of the overcurrent threshold.

[0038] When the main control circuit 120 is in an abnormal state, if the first power supply signal is abnormal, the main control circuit 120 cannot control the switching circuit 110 to switch from the connected first battery 10 or second battery 20 to the connected second battery 20 or first battery 10 in a timely manner. To avoid the above situation, the power supply system 100 of this embodiment also includes a safety monitoring circuit 130, which is connected to both the switching circuit 110 and the main control circuit 120. The switching circuit 110 provides a first power supply signal to the safety monitoring circuit 130, wherein the voltage value of the first power supply signal provided by the switching circuit 110 to the safety monitoring circuit 130 is different from the voltage value of the first power supply signal to the vehicle controller. The safety monitoring circuit 130 can output a power supply signal to the main control circuit 120 to supply power to the main control circuit 120. The safety monitoring circuit 130 can also detect the operating state of the main control circuit 120 and reset the main control circuit 120 when it is in an abnormal state.

[0039] In this embodiment, the power supply system 100 is equipped with a safety monitoring circuit 130 to monitor the working status of the main control circuit 120. When the main control circuit 120 is in an abnormal state, it is reset so that the main control circuit 120 returns to a normal state. This can enhance the reliability of the power supply system 100, thereby enhancing the reliability of the vehicle controller.

[0040] For example, after the main control circuit 120 starts working, it periodically sends a safety signal to the safety monitoring circuit 130. If the safety signal is lost for more than a preset time, the safety monitoring circuit 130 considers the main control circuit 120 to be in an abnormal state and resets the main control circuit 120 to restore it to normal operation. The safety monitoring circuit 130 can reset the main control circuit 120 by sending a reset signal to the main control circuit 120 or by disconnecting the power supply signal to the main control circuit 120 to force a reset; this is not limited to either method.

[0041] In one embodiment, the safety monitoring circuit 130 can be a highly integrated safety monitoring circuit, for example, it can be implemented using a processor, microcontroller, programmable logic circuit, etc. The high integration of the safety control circuit can reduce the design complexity of the power supply system 100, reduce interference from non-integrated circuits, and enhance the stability of the power supply system 100.

[0042] For example, see Figure 3 , Figure 3This is a circuit diagram of an embodiment of the safety monitoring circuit provided in this application. The safety monitoring circuit 130 includes a monitoring chip U3. The power input terminal IN of the monitoring chip U3 is connected to the power supply signal V3 output by the switching circuit 110. The power output terminal OUT, reset output terminal RESET, communication terminal I2C, interrupt terminal INT, and watchdog input terminal Watchdog of the monitoring chip U3 are all connected to the main control circuit 120. Specifically, the power output terminal OUT of the monitoring chip U3 outputs a power supply signal V5 to the main control circuit 120; the communication terminal I2C of the monitoring chip U3 is used for communication with the main control circuit 120; the reset output terminal RESET of the monitoring chip U3 is connected to the main control circuit 120 and is used to output a reset signal to the main control circuit 120; the interrupt terminal INT of the monitoring chip U3 sends an interrupt signal to the main control circuit 120 to indicate that the monitoring chip U3 has an abnormal state. After the main control circuit 120 starts working, it needs to periodically send a safety signal to the watchdog input terminal of the monitoring chip U3. If the safety signal is lost for more than a certain period of time, the monitoring chip U3 will send a reset signal to reset the main control circuit 120. The main control circuit 120 can configure the corresponding working mode of the monitoring chip U3 through the communication terminal I2C of the monitoring chip U3.

[0043] In other embodiments, the safety monitoring circuit 130 may include a status detection circuit and a power conversion circuit. The status detection circuit is connected to both the main control circuit 120 and the power conversion circuit, and the power conversion circuit is also connected to the switching circuit 110 and the main control circuit 120. The power conversion circuit converts the first power supply signal and outputs a power supply signal suitable for the status detection circuit and the main control circuit 120. The status detection circuit is used to detect the operating status of the main control circuit 120 and reset the main control circuit 120 when it is in an abnormal state. The power conversion circuit may be a linear regulator, a step-down circuit, etc., and is not limited thereto. The safety monitoring circuit 130 of this embodiment includes a status detection circuit and a power conversion circuit, meaning that the safety monitoring circuit 130 is composed of different functional circuits. Compared to a highly integrated safety monitoring circuit 130, the safety monitoring circuit 130 of this embodiment has a lower cost.

[0044] In one embodiment, the power supply system 100 further includes a power management circuit 140, which is connected to the switching circuit 110 and the main control circuit 120 and configured to access functional circuits. The power management circuit 140 outputs a second power supply signal based on a first power supply signal to power the functional circuits. The power management circuit 140 has voltage conversion, voltage regulation, and battery management functions. It rationally allocates and controls the accessed power signals according to the actual needs of the device to achieve efficient, reliable, and energy-saving power supply. The power management circuit 140 can output multiple second power supply signals with different or the same voltage values ​​when the first power supply signal is received. These second power supply signals can power different functional circuits. The power management circuit 140 will activate protection measures in case of abnormal conditions such as overvoltage, undervoltage, or overcurrent to prevent damage to the functional circuits. The power management circuit 140 can be a highly integrated power management chip, or it can be a power management circuit composed of different functional modules; there are no limitations on this.

[0045] In this embodiment, the switching circuit 110 can be understood as the first-level power supply of the power supply system 100, and the power management circuit 140 can be understood as the second-level power supply of the power supply system 100. That is, by setting the power management circuit 140, the power supply system 100 in this embodiment can realize at least two levels of power supply signal output to meet the needs of vehicle functional circuits for different power supply signals. In addition, the main control circuit 120 can monitor whether the first power supply signal and the second power supply signal are abnormal, which can enhance the reliability of the power supply system 100.

[0046] See Figure 4 , Figure 4This is a circuit diagram of an embodiment of the power management circuit provided in this application. The power management circuit 140 includes a power chip U2, which includes an LDO module and multiple BUCK modules. The power chip U2 outputs multiple power supply signals with different voltage values ​​based on the power supply signal V3 from the switching circuit 110 to power the connected functional circuits. For example, power supply signal V6 = 4.8V, power supply signal V7 = 12V, power supply signal V8 = 15V, power supply signal V9 = 3.3V, etc., and is not limited herein. The status of each BUCK module and LDO module of the power chip U2 can be monitored. The main control circuit 120 can obtain the status information of the power chip U2 by reading the value of the corresponding register through the communication terminal I2C of the power chip U2. At the same time, the power chip U2 also has an interrupt terminal INT pin and a feedback terminal PG. Any abnormal state of the power chip U2 (overvoltage, undervoltage, other logic errors, etc.) will send an interrupt signal to inform the main control circuit 120. The feedback signal will only be triggered when a certain power supply signal output is abnormal. The main control circuit 120 determines the different coping strategies based on the status of the interrupt terminal INT and the feedback terminal PG of the power chip U2.

[0047] In one embodiment, the power supply system 100 further includes a voltage monitoring circuit 150, which is connected to the switching circuit 110, the power management circuit 140, the safety monitoring circuit 130, and the main control circuit 120, respectively. The voltage monitoring circuit 150 is used to collect the power supply signals output by the switching circuit 110, the power management circuit 140, and the safety monitoring circuit 130, and outputs an abnormal signal to the main control circuit 120 when any power supply signal is abnormal. Understandably, the voltage monitoring circuit 150 monitors all power supply signals in the power supply system 100 in real time, and outputs an abnormal signal to the main control circuit 120 when any power supply signal is detected to be abnormal, such as overvoltage or undervoltage, thereby enhancing the stability of the power supply system 100.

[0048] For example, the voltage monitoring circuit 150 can be configured with different overvoltage and undervoltage thresholds. When a threshold is triggered, the power supply signal is considered abnormal. The voltage monitoring circuit 150 can output an abnormal signal to the main control circuit 120 through a triggering method such as an interrupt signal, so that the main control circuit 120 can obtain voltage abnormality information in a timely manner. The main control circuit 120 can also read the digital signals collected by the voltage monitoring circuit 150 for different power supply signals, and then convert the digital signals into voltage; this is not limited.

[0049] In one embodiment, the switching circuit 110 includes a first input terminal and a second input terminal. The first input terminal is configured to be connected to a first battery 10, and the second input terminal is configured to be connected to a second battery 20. A voltage monitoring circuit 150 is also connected to both the first and second input terminals to collect the power supply signals output by the first battery 10 and the second battery 20. That is, the voltage monitoring circuit 150 also monitors the power supply signals input to the switching circuit 110 from the first battery 10 and the second battery 20, so that it can promptly output abnormal signals to the main control circuit 120 when abnormalities occur in the first battery 10 or the second battery 20, thereby further enhancing the stability of the power supply system 100.

[0050] See Figure 5 , Figure 5 This is a circuit diagram of an embodiment of the voltage monitoring circuit provided in this application. The voltage monitoring circuit 150 includes a data acquisition chip U4, which includes a multi-channel analog-to-digital converter module. The data acquisition chip U4 acquires the power supply signals V3 / V4 output by the switching circuit 110, the power supply signals V6-V9 output by the power management circuit 140, the power supply signal V5 output by the safety monitoring circuit 130, the power supply signal V1 from the first battery 10 input switching circuit 110, and the power supply signal V2 from the second battery 20 input switching circuit 110. The main control circuit 120 reads the digital signals corresponding to each power supply signal of the data acquisition chip U4 through the communication terminal SPI of the data acquisition chip U4, and then converts the digital signals into voltage. At the same time, each analog-to-digital converter channel of the data acquisition chip U4 can be configured with different overvoltage and undervoltage thresholds. When a threshold is triggered, the interrupt signal of the interrupt terminal INT of the data acquisition chip U4 triggers and notifies the main control circuit 120, so that the main control circuit 120 can obtain the abnormal information of each power supply signal in a timely manner.

[0051] In one embodiment, the power supply system 100 further includes a connector 160, which is connected to the switching circuit 110 and configured to connect to the first battery 10 and the second battery 20. The connector 160 may be equipped with a filtering circuit to reduce interference from the first battery 10 and the second battery 20 to the power supply system 100, thereby enhancing the reliability of the power supply system 100.

[0052] This application provides a vehicle controller, see reference. Figure 6 , Figure 6 This is a schematic diagram of an embodiment of the vehicle controller provided in this application. The vehicle controller 30 includes a power supply system 100. The power supply system 100 can be any of the power supply systems 100 described in the above embodiments, and is not limited herein.

[0053] In one embodiment, the power supply system 100 further includes a power management circuit 140, and the vehicle controller 30 further includes a functional circuit 200, which is connected to both the power management circuit 140 and the main control circuit 120. The power management circuit 140 can output multiple second power supply signals with the same or different voltage values, which are used to power the functional circuit 200.

[0054] In practical applications, refer to Figures 7 to 9 , Figure 7 This is a flowchart illustrating an embodiment of the safety monitoring circuit monitoring the working status of the main control circuit provided in this application; Figure 8 This is a flowchart illustrating an embodiment of the main control circuit controlling the switching circuit to switch between the first battery and the second battery provided in this application; Figure 9 This is a flowchart illustrating an embodiment of the power management circuit and functional circuit monitoring process provided in this application.

[0055] 1. After the power supply system 100 is powered on, the safety monitoring circuit 130 outputs a power supply signal V5 to the main control circuit 120. The safety monitoring circuit 130 determines whether it receives a safety signal from the main control circuit 120. If a safety signal is received, it indicates that the main control circuit 120 is normal, and the main control circuit 120 continues to operate normally. If no safety signal is received, it indicates that the main control circuit 120 is abnormal. The safety monitoring circuit 130 resets the main control circuit 120, and simultaneously, all power supplies are powered off and then on again. After resetting the main control circuit 120 more than three times, if the safety monitoring circuit 130 still does not receive a safety signal, it shuts off the power supply to the power supply system 100.

[0056] 2. When the main control circuit 120 is operating normally, it activates the power management circuit 140 to supply power to the functional circuits, while simultaneously monitoring the status of each power supply signal and the status information of the functional circuits transmitted back by the system-on-a-chip. When the main control circuit 120 detects an abnormality in the first power supply signal output by the switching circuit 110, i.e., the first battery 10 or the second battery 20 (power depletion, battery capacity degradation to the critical point, etc.), it switches to the second battery 20 or the first battery 10 through the switching circuit 110 and reports the abnormality.

[0057] 3. When the main control circuit 120 detects an abnormality in a power supply signal output by the power management circuit 140, it will also reset the power supply module (such as the BUCK module or LDO module) corresponding to the abnormal power supply signal. If the reset fails to recover after more than 3 attempts, the relevant power supply module will be shut down and a fault will be reported.

[0058] 4. When the main control circuit 120 obtains a fault report from the system-on-a-chip of the functional circuit, it resets the power supply module corresponding to the functional circuit. If the fault cannot be recovered after three or more resets, the relevant power supply is turned off and the fault is reported.

[0059] Through the above process, in the event of a power failure or partial functional failure, the power supply system 100 will enter a "safety degradation mode," shutting down or reducing the power supply to non-essential systems while ensuring the normal operation of other critical systems, thereby improving the safety and stability of the vehicle.

[0060] 1. After the power supply system 100 is powered on, the safety monitoring circuit 130 outputs a power supply signal V5 to the main control circuit 120. The safety monitoring circuit 130 determines whether it receives a safety signal from the main control circuit 120. If a safety signal is received, it indicates that the main control circuit 120 is normal, and the main control circuit 120 continues to operate normally. If no safety signal is received, it indicates that the main control circuit 120 is abnormal. The safety monitoring circuit 130 resets the main control circuit 120, and simultaneously, all power supplies are powered off and then on again. After resetting the main control circuit 120 more than 3 times, if the safety monitoring circuit 130 still does not receive a safety signal, it shuts off the power supply to the power supply system 100.

[0061] 2. When the main control circuit 120 is operating normally, it activates the power management circuit 140 to supply power to the functional circuits, while simultaneously monitoring the status of each power supply signal and the status information of the functional circuits transmitted back by the system-on-a-chip. When the main control circuit 120 detects an abnormality in the first power supply signal output by the switching circuit 110, i.e., the first battery 10 or the second battery 20 (power depletion, battery capacity degradation to the critical point, etc.), it switches to the second battery 20 or the first battery 10 through the switching circuit 110 and reports the abnormality.

[0062] 3. When the main control circuit 120 detects an abnormality in a power supply signal output by the power management circuit 140, it will also reset the power supply module (such as the BUCK module or LDO module) corresponding to the abnormal power supply signal. If the reset fails to recover after more than 3 attempts, the relevant power supply module will be shut down and a fault will be reported.

[0063] 4. When the main control circuit 120 obtains a fault report from the system-on-a-chip of the functional circuit, it resets the power supply module corresponding to the functional circuit. If the fault cannot be recovered after three or more resets, the relevant power supply is turned off and the fault is reported.

[0064] Through the above process, in the event of a power failure or partial functional failure, the power supply system 100 will enter a "safety degradation mode," shutting down or reducing the power supply to non-essential systems while ensuring the normal operation of other critical systems, thereby improving the safety and stability of the vehicle.

[0065] This application provides a vehicle, see reference. Figure 10 , Figure 10This is a schematic diagram of a vehicle embodiment provided in this application, wherein the vehicle 40 includes a vehicle controller. The vehicle controller can be any type of vehicle controller described in the above embodiments, and is not limited herein.

[0066] The above are merely embodiments of this application and do not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A power supply system for a vehicle controller, characterized in that, include: The switching circuit is configured to selectively connect the first battery and the second battery, and output a first power supply signal; The main control circuit, connected to the switching circuit, is used to control the switching circuit to switch from connecting to one of the first battery and the second battery to connecting to the other based on the abnormal state of the first power supply signal.

2. The power supply system according to claim 1, characterized in that, The power supply system also includes: A safety monitoring circuit, connected to the switching circuit and the main control circuit, is used to detect the working status of the main control circuit and reset the main control circuit when it is in an abnormal state.

3. The power supply system according to claim 2, characterized in that, The safety monitoring circuit includes: A status detection circuit, connected to the main control circuit, is used to detect the working status of the main control circuit and reset the main control circuit when the main control circuit is in an abnormal state. A power conversion circuit, connected to the switching circuit, the status detection circuit, and the main control circuit, is used to supply power to the status detection circuit and the main control circuit based on the first power supply signal.

4. The power supply system according to claim 2, characterized in that, The power supply system also includes: A power management circuit is connected to the switching circuit and the main control circuit, and is configured to access the functional circuit of the vehicle controller. The power management circuit is used to output a second power supply signal based on the first power supply signal to power the functional circuit.

5. The power supply system according to claim 4, characterized in that, The power supply system also includes: A voltage monitoring circuit is connected to the switching circuit, the power management circuit, the safety monitoring circuit, and the main control circuit, respectively. The voltage monitoring circuit is used to collect the power supply signals output by the switching circuit, the power management circuit, and the safety monitoring circuit, and output an abnormal signal to the main control circuit when any of the power supply signals is abnormal.

6. The power supply system according to claim 5, characterized in that, The voltage monitoring circuit is also connected to the first input terminal and the second input terminal of the switching circuit respectively to collect the power supply signals output by the first battery and the second battery.

7. The power supply system according to any one of claims 1-6, characterized in that, The power supply system also includes: A connector is connected to the switching circuit and configured to access the first battery and the second battery.

8. A vehicle controller, characterized in that, include: The power supply system according to any one of claims 1 to 7.

9. The controller according to claim 8, characterized in that, The power supply system further includes a power management circuit, and the controller further includes a functional circuit, which is connected to the power management circuit and the main control circuit respectively.

10. A vehicle, characterized in that, include: Includes the vehicle controller as described in claim 9.

Images