Forced power-down protection circuit, high-voltage box and energy storage equipment

Abstract

The utility model discloses a forced power-down protection circuit, a high-voltage box and energy storage equipment. The forced power-down protection circuit comprises a diode, a first control module and a second control module, the anode of the diode is used for being connected with the enabling end of a circuit to be protected, and the enabling end of the circuit to be protected is used for receiving an operation control signal from the operation control module; the first control module comprises an output end and a zero clearing end, and the output end is connected with the cathode end of the diode so as to prevent the output end from outputting a signal to the enable end; the second control module comprises an input detection end and a reset end, the reset end is connected with the reset end, and the input detection end is used for receiving a verification signal from the operation control module; and under the condition that the input detection end does not receive the verification signal within the first preset duration, the reset end outputs a reset signal, so that the output end is in a low-level state. According to the utility model, forced power-off of the power output loop under the condition that the MCU is abnormal can be realized, the implementation cost of a protection scheme is reduced, and the reliability and the stability are improved.

Description

Technical Field

[0001] This utility model relates to the field of electronic circuit technology, and in particular to a forced power-down protection circuit, a high-voltage box, and an energy storage device. Background Technology

[0002] In the field of new energy storage, electronic devices are typically used to control power output circuits for energy storage or release. However, in harsh electromagnetic interference environments, the microprocessors in these devices may experience crashes or program malfunctions. In such cases, the operating state of the power output circuit controlled by the microprocessor becomes unpredictable, potentially causing serious loss of life and property. Therefore, related technologies often incorporate a safety MCU in addition to a main MCU. When the main MCU malfunctions, the safety MCU forcibly disconnects the power output circuit. However, this safety MCU protection scheme is costly to implement and lacks stability. Utility Model Content

[0003] The purpose of this invention is to at least solve one of the technical problems existing in the prior art, and to provide a forced power-down protection circuit, a high-voltage box and an energy storage device, which can realize the forced power-down of the power output circuit in the event of MCU abnormality, while reducing the implementation cost of the protection scheme and improving reliability and stability.

[0004] In a first aspect, this utility model provides a forced power-down protection circuit, including a diode, a first control module, and a second control module. The anode of the diode is connected to the enable terminal of the circuit to be protected, wherein the enable terminal of the circuit to be protected is used to receive an operation control signal from an operation control module. The first control module includes an output terminal and a reset terminal. The output terminal is connected to the cathode of the diode to block the signal output from the output terminal to the enable terminal of the circuit to be protected. The second control module includes an input detection terminal and a reset terminal. The reset terminal is connected to the reset terminal. The input detection terminal is used to receive a verification signal from the operation control module. If the input detection terminal does not receive the verification signal within a first preset time period, the reset terminal outputs a reset signal to keep the output terminal in a low-level state.

[0005] The forced power-down protection circuit provided by this utility model embodiment has at least the following beneficial effects: the enable terminal of the circuit to be protected can receive the operation control signal of the operation control module. The operation control signal can adjust the level state of the enable terminal, so that the circuit to be protected can operate or turn off according to the corresponding operation control signal. The diode is reverse-connected between the enable terminal and the output terminal, which can effectively prevent the circuit to be protected from being affected by the high-level signal output by the first control module. The second control module can determine whether the operation control module has an abnormal situation by monitoring the verification signal through the input detection terminal. If no verification signal is received within the first preset time, it can be considered that the operation control module has an abnormal situation, and will trigger the output clear signal, so that the output terminal of the first control module is in a low-level state, thereby turning off the circuit to be protected. This utility model embodiment realizes the safety protection of the power output circuit, i.e., the circuit to be protected, when the operation control module is abnormal, through a more economical and efficient hardware logic control method, without the need to add an additional complete safety MCU. It can avoid the additional expenses of purchasing, integrating and debugging the safety MCU, and significantly reduce the implementation cost of the overall circuit system. At the same time, by reducing the number of components, the complexity and maintenance difficulty of the circuit system are also simplified. Secondly, through direct control of hardware logic, the response speed and reliability of the circuit system to abnormal situations can be improved.

[0006] In the forced power-down protection circuit provided in this embodiment of the utility model, the first control module further includes a preset terminal, which is used to receive a preset signal from the operation control module.

[0007] The forced power-down protection circuit provided in this embodiment of the utility model also includes a second pull-up resistor connected to the preset terminal.

[0008] The forced power-down protection circuit provided in this embodiment of the present invention further includes a first NOT gate circuit connected to the preset terminal, and a second NOT gate circuit disposed between the output terminal and the cathode terminal of the diode.

[0009] The forced power-down protection circuit provided in this embodiment of the utility model also includes a third NOT gate circuit disposed between the reset terminal and the clear terminal.

[0010] The forced power-down protection circuit provided in this embodiment of the present invention also includes a first pull-up resistor connected to the connection point between the reset terminal and the clear terminal.

[0011] In the forced power-down protection circuit provided in this embodiment of the present invention, the first control module further includes a clock terminal, and the forced power-down protection circuit further includes a third pull-up resistor connected to the clock terminal.

[0012] The forced power-down protection circuit provided in this embodiment of the utility model also includes a first pull-down resistor connected to the input detection terminal.

[0013] In the forced power-down protection circuit provided in this embodiment of the present invention, the second control module further includes an external reset terminal for receiving a reset signal, wherein the reset terminal outputs a signal when the external reset terminal receives the reset signal.

[0014] The forced power-down protection circuit provided in this embodiment of the utility model also includes a fourth pull-up resistor connected to the external reset terminal.

[0015] The forced power-down protection circuit provided in this embodiment of the present invention also includes a protection resistor for connection to the operation control module, wherein the protection resistor is connected to the anode of the diode.

[0016] Secondly, this utility model embodiment provides a high-voltage box, including the forced power-down protection circuit as described in the first aspect embodiment above.

[0017] The high-voltage box provided according to the embodiments of this utility model has at least the following beneficial effects: the enable terminal of the circuit to be protected can receive the operation control signal of the operation control module. The operation control signal can adjust the level state of the enable terminal, so that the circuit to be protected can operate or turn off according to the corresponding operation control signal. The diode is reverse-connected between the enable terminal and the output terminal, which can effectively prevent the circuit to be protected from being affected by the high-level signal output by the first control module. The second control module can determine whether the operation control module has an abnormal situation by monitoring the verification signal through the input detection terminal. If no verification signal is received within the first preset time, it can be considered that the operation control module has an abnormal situation, and the output clear signal will be triggered, so that the output terminal of the first control module is in a low-level state. The embodiments of this utility model realize the safety protection of the power output circuit, i.e., the circuit to be protected, when the operation control module is abnormal, through a more economical and efficient hardware logic control method, without the need to add an additional complete safety MCU. This avoids the additional expenses of purchasing, integrating and debugging the safety MCU, and significantly reduces the implementation cost of the overall circuit system. At the same time, by reducing the number of components, the complexity and maintenance difficulty of the protection device are also simplified. Secondly, through direct control of hardware logic, the response speed and reliability of the protection device to abnormal situations can be improved.

[0018] Thirdly, this utility model provides an energy storage device, including a battery pack, an energy storage converter, and a high-voltage box as described in the second aspect embodiment above, wherein the battery pack is connected to the energy storage converter through the high-voltage box.

[0019] According to the energy storage device provided in this embodiment, the enable terminal of the circuit to be protected can receive the operation control signal from the operation control module. The operation control signal can adjust the level state of the enable terminal, so that the circuit to be protected can operate or turn off according to the corresponding operation control signal. The diode is reverse-connected between the enable terminal and the output terminal, which can effectively prevent the circuit to be protected from being affected by the high-level signal output by the first control module. The second control module can determine whether the operation control module has an abnormal situation by monitoring the verification signal through the input detection terminal. If no verification signal is received within a first preset time, it can be considered that the operation control module has an abnormal situation, and it will trigger the output clear signal, so that the output terminal of the first control module is in a low-level state. This embodiment of the present invention realizes the safety protection of the power output circuit, i.e., the circuit to be protected, when the operation control module is abnormal, through a more economical and efficient hardware logic control method, without the need to add an additional complete safety MCU. This avoids the additional expenses of purchasing, integrating and debugging the safety MCU, and significantly reduces the implementation cost of the overall circuit system. At the same time, by reducing the number of components, the complexity and maintenance difficulty of the protection device are also simplified. Secondly, through direct control of hardware logic, the response speed and reliability of the protection device to abnormal situations can be improved.

[0020] Other features and advantages of this invention will be set forth in the description which follows, and will be apparent in part from the description, or may be learned by practicing the invention. The objects and other advantages of this invention may be realized and obtained by means of the structures particularly pointed out in the description, claims, and drawings. Attached Figure Description

[0021] The accompanying drawings are provided to further understand the technical solution of this utility model and constitute a part of the specification. They are used together with the embodiments of this utility model to explain the technical solution of this utility model, and do not constitute a limitation on the technical solution of this utility model.

[0022] The present invention will be further described below with reference to the accompanying drawings and embodiments;

[0023] Figure 1 This is a schematic diagram of the forced power-down protection circuit provided in this embodiment of the utility model;

[0024] Figure 2 This is a schematic diagram of the specific connection of the forced power-down protection circuit provided in this embodiment of the utility model;

[0025] Figure 3 This is a schematic diagram of the forced power-down protection circuit provided in another embodiment of the present invention. Detailed Implementation

[0026] This section will describe in detail the specific embodiments of the present utility model. The preferred embodiments of the present utility model are shown in the accompanying drawings. The purpose of the drawings is to supplement the textual description with graphics, so that people can intuitively and vividly understand each technical feature and the overall technical solution of the present utility model, but they should not be construed as limiting the scope of protection of the present utility model.

[0027] In the description of this utility model, "several" means one or more, "multiple" means two or more, "greater than," "less than," "exceeding," etc. are understood to exclude the number itself, while "above," "below," "within," etc. are understood to include the number itself. "Any one" refers to one or more, and "at least one of the following" and similar expressions refer to any combination of these items, including any combination of single or multiple items. If the terms "first" and "second" are used in the description, they are only for distinguishing technical features and should not be construed as indicating or implying relative importance, or implicitly indicating the number of indicated technical features, or implicitly indicating the order of the indicated technical features.

[0028] It should be noted that the terms "setting," "installing," and "connecting" in the embodiments of this utility model should be interpreted broadly. Those skilled in the art can reasonably determine the specific meaning of the above terms in the embodiments of this utility model in conjunction with the specific content of the technical solution. For example, the term "connection" can be a mechanical connection, an electrical connection, or a connection that allows for mutual communication; it can be a direct connection or an indirect connection through an intermediate medium.

[0029] It should be noted that the technical features involved in the various embodiments of this utility model described below can be combined with each other as long as they do not conflict with each other.

[0030] In the field of new energy storage, electronic devices are typically used to control related power output circuits for energy storage or release. However, in harsh electromagnetic interference environments, the microprocessors in these devices may experience crashes or program malfunctions. In such cases, the operating state of the power output circuit controlled by the microprocessor becomes unpredictable, potentially causing serious loss of life and property. Therefore, related technologies often incorporate a safety MCU in addition to a main MCU. When the main MCU malfunctions, the safety MCU forcibly disconnects the power output circuit. However, this safety MCU protection scheme has a long development cycle, requiring protocol customization, program development, software debugging, and testing. Furthermore, the reliability and stability of the safety MCU depend on the skill level of the developers. Combined with the high procurement cost of the MCU itself, the implementation cost of adding a safety MCU is high, and its stability is questionable.

[0031] Based on this, this utility model embodiment proposes a forced power-down protection circuit, a high-voltage box, and an energy storage device. The enable terminal of the circuit to be protected can receive the operation control signal from the operation control module. The operation control signal can adjust the level state of the enable terminal, so that the circuit to be protected can operate or shut down according to the corresponding operation control signal. The diode is reverse-connected between the enable terminal and the output terminal, which can effectively prevent the circuit to be protected from being affected by the high-level signal output by the first control module. The second control module can determine whether the operation control module has an abnormality by monitoring the verification signal through the input detection terminal. If no verification signal is received within a first preset time, it can be considered that the operation control module has an abnormality, and it will trigger the output zeroing signal, so that the output terminal of the first control module is in a low-level state. This utility model embodiment realizes the safety protection of the power output circuit, i.e., the circuit to be protected, when the operation control module is abnormal, through a more economical and efficient hardware logic control method, without the need to add an additional complete safety MCU. It can avoid the additional expenses of purchasing, integrating, and debugging the safety MCU, and significantly reduce the implementation cost of the overall circuit system. At the same time, by reducing the number of components, the complexity and maintenance difficulty of the protection device are also simplified. Secondly, through direct control of hardware logic, the response speed and reliability of the protection device to abnormal situations can be improved.

[0032] The embodiments of this utility model will be further described below with reference to the accompanying drawings.

[0033] The first aspect of this utility model provides a forced power-down protection circuit, which includes a diode, a first control module, and a second control module. Specifically, the anode of the diode is connected to the enable terminal of the circuit to be protected, and the enable terminal of the circuit to be protected is connected to the operation control module. Thus, the operation control module can directly send an operation control signal to the enable terminal of the circuit to be protected to control the working state of the circuit to be protected. The first control module is used to connect to the circuit to be protected and can change the level state of the enable terminal of the circuit to be protected by adjusting the level state of the output terminal, thereby controlling the power-off of the circuit to be protected, so as to protect the circuit to be protected, that is, to protect the power output circuit in the new energy storage scenario. The second control module is used to verify whether the operation control module is operating normally by receiving the signal sent by the operation control module, that is, the main MCU. When the operation control module has an abnormal phenomenon, it can trigger the output clear signal in time, so that the first control module forces the circuit to be protected to power down.

[0034] It should be noted that the first control module can use an edge-triggered trigger, for example, a positive edge-triggered trigger or a negative edge-triggered trigger; while the second control module can use a timer circuit, such as a watchdog chip. The second control module includes an input terminal connected to the running control module and a reset terminal output to the first control module. When the running control module is working normally, it will periodically send a verification signal to the second control module to clear the timer circuit. If no verification signal is received after a specified time (generally when the running control module is in a program crash situation), the timer circuit will exceed the timeout. Then, the second control module will output a clear signal through the reset terminal. The clear signal will reach the clear terminal of the first control module, clearing the output terminal of the first control module to zero, that is, outputting a low-level signal. This enables timely forced power-down of the protected circuit in case of abnormal phenomena such as program crashes of the running control module that prevent the control of the protected circuit.

[0035] Specifically, the enable terminal En of the circuit to be protected can control the operation or shutdown of the circuit. Taking the example that the circuit to be protected operates when the enable terminal En is in a high-level state and shuts down when the enable terminal En is in a low-level state, refer to... Figure 1 , Figure 1 This is a schematic diagram of the forced power-down protection circuit provided in an embodiment of this utility model. Figure 1 As shown, if the MCU needs to control the operation of the circuit to be protected, the MCU's enable output Q outputs a high-level operation control signal to ensure that the enable terminal En of the circuit to be protected is at a high level. If the MCU needs to control the circuit to be protected to turn off, the MCU can output a low-level operation control signal to the circuit to be protected through its enable output Q, thus ensuring that the enable terminal En of the circuit to be protected is at a low level.

[0036] The first control module includes a first power supply terminal, a first ground terminal, a reset terminal CLR, and an output terminal Q. The first power supply terminal is used to connect to a power source to provide power to the first control module. The first ground terminal is directly grounded. A first power supply filter capacitor C1 is placed between the first power supply terminal and the first ground terminal. One end of the first power supply filter capacitor C1 is connected to the first power supply terminal, and the other end is connected to the first ground terminal. The first power supply filter capacitor C1 improves the circuit robustness of the first control module and reduces the risk of electromagnetic interference. The output terminal Q is connected to the enable terminal En of the circuit to be protected through a diode D1. The cathode of diode D1 is connected to the output terminal Q, and the anode of diode D1 is connected to the connection point between the enable terminal En of the circuit to be protected and the enable output terminal Q of the MCU (Microcontroller Unit). If the output terminal Q is at a high level, and the enable output terminal Q of the MCU outputs a high-level operation control signal, the voltages on both sides of the cathode and anode of diode D1 are close. Therefore, the enable terminal En of the circuit to be protected can remain at a high level, allowing the circuit to operate normally. Even if the MCU outputs a low-level operation control signal, the voltage at the cathode of diode D1 is higher than the voltage at the anode, causing diode D1 to be cut off. Therefore, the enable terminal En of the circuit to be protected remains at a low level. In other words, diode D1 can block the output terminal Q from outputting a high-level signal to the enable terminal En, preventing the high-level signal output by the output terminal Q from becoming the operation control signal driving the circuit to be protected. The forced power-down protection circuit provided in this application is a new shutdown path added between the MCU and the circuit to be protected. Under normal operation, the circuit to be protected can only be driven by the MCU and is not affected by the output terminal Q of the first control module. However, if the output terminal Q is at a low level, while the MCU of the operation control module outputs a high-level operation control signal, the voltage at the cathode of diode D1 is lower than the voltage at the anode, causing diode D1 to conduct. This pulls down the level of the enable terminal En of the circuit to be protected, thus turning off the circuit to be protected and forcibly powering down the circuit to be protected.

[0037] The second control module includes a second power supply terminal, a second ground terminal, a detection input terminal WDI, and a reset terminal RST. The second power supply terminal is connected to a power source, while the second ground terminal is grounded. A second power supply filter capacitor C2 is placed between the second power supply terminal and the second ground terminal. One end of the second power supply filter capacitor C2 is connected to the second power supply terminal, and the other end is connected to the second ground terminal. The second power supply filter capacitor C2 can improve the circuit robustness of the second control module and reduce the risk of electromagnetic interference. The input detection terminal can be connected to the operating control module MCU, for example, it can be connected to the detection output terminal of the operating control module MCU. The operating control module MCU periodically sends a specific verification signal (such as a periodically inverted output level pulse signal) to the input detection terminal through the detection output terminal to clear the clock circuit inside the second control module and maintain the level state of the reset terminal RST. If the MCU of the operation control module is interfered with or the program runs out of control, it will be unable to send a verification signal to the input detection terminal within the specified time. For example, it may continuously output a high-level signal or a low-level signal to the detection output terminal. Therefore, if the second control module does not receive a specific verification signal within the first preset time, it will trigger the second control module to output a clear signal through the reset terminal RST. The low-level clear signal will cause the clear terminal CLR of the first control module to be in a low-level state. When the clear terminal CLR of the first control module is in a low-level state, the first control module will clear the output signal of the output terminal Q, that is, set the output terminal Q to a low level state, so as to pull down the enable terminal En of the circuit to be protected, so as to turn off the circuit to be protected and prevent the circuit to be protected from being unable to be turned off due to the abnormality of the MCU of the operation control module.

[0038] It is worth noting that if the clear terminal CLR of the first control module is active low, that is, when the clear terminal CLR of the first control module is in a low-level state, the output terminal Q is cleared, the forced power-down protection circuit is also equipped with a first pull-up resistor R1. One end of the first pull-up resistor R1 is connected to the power supply, and the other end is connected to the connection point between the reset terminal RST and the clear terminal CLR. At this time, the first pull-up resistor R1 can ensure that the clear terminal CLR is in a high-level state when the second control module does not output a clear signal through the reset terminal RST, ensuring that the circuit will not be falsely triggered. If the second control module outputs a clear signal through the reset terminal RST, it will pull down the voltage at the connection point between the reset terminal RST and the clear terminal CLR, so that the clear terminal CLR is in a low-level state and the output terminal Q is cleared.

[0039] Therefore, this embodiment of the invention can achieve safety protection for the power output circuit (i.e., the circuit to be protected) when the operating control module MCU malfunctions, without the need for an additional complete safety MCU. This avoids the additional costs of purchasing, integrating, and debugging a safety MCU, significantly reducing the overall implementation cost of the circuit system. Simultaneously, the reduced number of components simplifies the complexity and maintenance difficulty of the protection device. Furthermore, direct control through hardware logic improves the response speed and reliability of the protection device to abnormal situations. In other words, this embodiment of the invention can achieve safety protection for the circuit to be protected in a more economical, efficient, and stable manner when the microprocessor in the electronic device malfunctions under severe electromagnetic interference, thereby effectively preventing potential loss of life and property due to abnormal operation of the power output circuit.

[0040] Reference Figure 2 , Figure 2 This is a schematic diagram of the specific circuit connection of the forced power-down protection circuit provided in this embodiment of the utility model. Figure 2 As shown, the first control module also includes a preset terminal PRE and a clock terminal CLK. The preset terminal PRE is used to preset the output state of the first control module. At the same time, the preset terminal PRE can receive the drive preset signal from the MCU of the running control module. When the drive preset signal received by the preset terminal PRE is valid, the first control module will force the output of a predefined level signal. The triggering of the preset terminal PRE allows the output of the required level signal directly through the output terminal Q without the need for triggering by the clock signal. For example, if the level state of the preset terminal PRE is pulled low by the MCU of the running control module for 1ms, at this time, the preset terminal PRE considers the drive preset signal to be valid and triggers the first control module to output a high-level signal through the output terminal Q, causing the diode D1 to be cut off, ensuring that the enable terminal En of the circuit to be protected can operate normally when it receives a high-level running control signal.

[0041] It should be noted that the forced power-down protection circuit also includes a second pull-up resistor R2. One end of the second pull-up resistor R2 is connected to the power supply, and the other end is connected to the connection point between the preset terminal PRE and the operation control module MCU. It can continuously maintain the preset terminal PRE in a high level state to ensure that the circuit will not be falsely triggered. When the operation control module MCU outputs a low-level signal for 1ms, pulls down the voltage of the preset terminal PRE and then recovers, it is considered that a correct and valid drive preset signal has been received, and the output terminal Q is triggered to output a high-level signal.

[0042] The clock input CLK receives the clock signal, which is fundamental for the operation of the edge-triggered flip-flop. However, in this case, the clock input CLK of the first control module is connected to the power supply through the third pull-up resistor R3, ensuring that CLK remains at a high level. This guarantees that the first control module is not affected by the clock signal and relies solely on the clear input CLR and the preset input PRE to control the output of the output Q, preventing false triggering of the circuit. In other words, the first control module can be either a positive-edge flip-flop or a negative-edge flip-flop.

[0043] It should be noted that the first control module may also include a data input terminal D. The data input terminal D may be grounded or connected to a power supply (such as a 5V power supply). The data input terminal D may also be connected to a pull-up resistor or a pull-down resistor.

[0044] like Figure 2 As shown, the forced power-down protection circuit also includes a first pull-down resistor R5. One end of the first pull-down resistor R5 is grounded, and the other end is connected to the connection point between the detection input terminal WDI and the operation control module MCU. When the operation control module MCU does not send a verification signal to the detection input terminal WDI, it pulls the potential of the detection input terminal WDI low, making the detection input terminal WDI a low-level state, indicating that the operation control state has not yet sent a verification signal, thus maintaining the default state of the detection input terminal WDI. At the same time, when the operation control module MCU enters sleep or low-power mode, the operation control module MCU may not be able to provide sufficient output current or voltage to drive the second control module. Without the pull-down resistor, the detection input terminal may be in a floating state, and its level is uncertain. This uncertainty may cause the second control module to misjudge that the operation control module MCU is abnormal, thereby triggering a reset. Therefore, the addition of the first pull-down resistor R5 can ensure that the detection input terminal is always in a definite low-level state when it does not receive an output signal from the operation control module MCU, avoiding misjudgment and non-zeroing due to the detection input terminal being in a floating state. In the event of external interference or a fault, the MCU of the operation control module will output an abnormal signal. The first pull-down resistor R5 can pull these abnormal signals low, ensuring that the second control module will not malfunction due to receiving incorrect signals. Therefore, by adding the first pull-down resistor R5, it is possible to ensure that the detection input terminal WDI maintains a stable and predictable state in the event of MCU sleep mode, external interference, or a fault, thereby preventing the second control module from triggering a reset due to misjudgment and enhancing circuit stability.

[0045] In addition, the second control module can also be equipped with an external reset terminal MR. The external reset terminal MR can be connected to the signal transmitting terminal of an external device. The external reset terminal MR can receive a reset signal sent by the external device. The reset signal can be a low-level signal. When the second control module receives the reset signal through the external reset terminal MR, the second control module will trigger the reset terminal RST to send a clear signal to make the clear terminal CLR a low-level state, triggering the output terminal Q of the first control module to clear zero, so that the circuit to be protected is turned off, thereby realizing the forced shutdown of the circuit to be protected by the external reset signal.

[0046] It is worth noting that the second control module is equipped with an external reset terminal MR. When the external reset terminal MR is active at a low level, the circuit also includes a fourth pull-up resistor R4. One end of the fourth pull-up resistor R4 is connected to the power supply, and the other end is connected to the connection point between the external reset terminal MR and the external device. Therefore, the fourth pull-up resistor R4 can fix the state of the external reset terminal MR of the second control module and ensure that it will not be triggered falsely.

[0047] like Figure 2 As shown, a protective resistor R6 is also set between the enable output terminal Q of the MCU and the anode of diode D1 in the forced power-down protection circuit. When the output terminal Q of the first control module is in a low-level state, diode D1 is turned on, and the high-level operation control signal output by the enable output terminal Q of the MCU will flow directly to the output terminal Q of the first control module through the turned diode D1. Since the line resistance between the enable output terminal Q of the MCU and the output terminal Q of the first control module is small, it is easy to cause overload of the MCU output and also cause the output terminal Q of the first control module to be impacted. Therefore, the setting of the protective resistor R6 can limit the current flowing from the enable output terminal Q to the output terminal Q when diode D1 is turned on, preventing damage to the circuit due to excessive current. Even if diode D1 is turned on and pulls the enable terminal En of the circuit to be protected low, it will not cause the enable output terminal Q to bear excessive current. At the same time, the enable terminal En of the circuit to be protected can also be successfully pulled low, thus meeting the circuit design requirements.

[0048] Reference Figure 3 , Figure 3This is a schematic diagram of a forced power-down protection circuit provided in another embodiment of the present invention. The forced power-down protection circuit can also be equipped with multiple NOT gate circuits. For example, a NOT gate circuit can be set between the preset terminal PRE and the operation control module MCU, and between the output terminal Q and the cathode of diode D1. Specifically, a first NOT gate circuit NOT1 and a second NOT gate circuit NOT2 are provided. The first NOT gate circuit NOT1 makes the level state of the signal received by the preset terminal PRE opposite to the level state of the driving preset signal, thereby causing the output terminal Q of the first control module to output a level signal opposite to the level state of the driving preset signal under normal conditions. At this time, the second NOT gate circuit NOT2, set between the output terminal Q and the cathode of diode D1, can flip the level state of the signal output by the output terminal Q. Therefore, by setting NOT gate circuits at the preset terminal PRE and / or the output terminal Q to flip the signal level state, different application scenarios can be adapted.

[0049] In addition, when the second control module triggers a reset, a high-level clear signal is output through the reset terminal RST, while the clear terminal CLR of the first control module is a low-level signal. At this time, a third NOT gate circuit NOT3 can be set between the reset terminal RST and the clear terminal CLR. Therefore, the third NOT gate circuit NOT3 can flip the high-level clear signal, so that the clear terminal CLR can receive the low-level clear signal, triggering the output terminal Q of the first control module to clear.

[0050] It should be noted that the forced power-down protection circuit can also be equipped with a buffer circuit connected to the preset terminal PRE, the clear terminal CLR, or the output terminal Q.

[0051] Secondly, this utility model embodiment provides a high-voltage box, including the forced power-down protection circuit as described in the first aspect embodiment above.

[0052] It should be noted that the high-voltage box can refer to either the Battery Disconnect Unit (BDU) or the High Voltage Unit (HVU). The high-voltage box can be connected to the battery and may include a forced power-down protection circuit. This circuit can also be applied to the Battery Cluster Management Unit (BCU) within the high-voltage box. The forced power-down protection circuit prevents battery faults such as overcurrent, short circuit, and overvoltage, ensuring battery safety. The high-voltage box may also include relays, fuses, pre-charge resistors, current sensors, etc. The forced power-down protection circuit within the high-voltage box can be connected to relays corresponding to multiple power output circuits. Essentially, the circuits to be protected are the various power output circuits, and the enable terminals of these circuits are the corresponding relays.

[0053] According to the high-voltage box provided in this embodiment, the enable terminal of the circuit to be protected can receive the operation control signal from the operation control module. The operation control signal can adjust the level state of the enable terminal, so that the circuit to be protected can operate or turn off according to the corresponding operation control signal. The diode is reverse-connected between the enable terminal and the output terminal, which can effectively prevent the circuit to be protected from being affected by the high-level signal output by the first control module. The second control module can determine whether the operation control module has an abnormality by monitoring the verification signal through the input detection terminal. If no verification signal is received within a first preset time, it can be considered that the operation control module has an abnormality, and it will trigger the output zeroing signal, so that the output terminal of the first control module is in a low-level state. This embodiment of the present invention realizes the safety protection of the power output circuit, i.e., the circuit to be protected, when the operation control module is abnormal, through a more economical and efficient hardware logic control method, without the need to add an additional complete safety MCU. This avoids the additional expenses of purchasing, integrating and debugging the safety MCU, and significantly reduces the implementation cost of the overall circuit system. At the same time, by reducing the number of components, the complexity and maintenance difficulty of the protection device are also simplified. Secondly, through direct control of hardware logic, the response speed and reliability of the protection device to abnormal situations can be improved.

[0054] Thirdly, this utility model provides an energy storage device, including a battery pack, an energy storage converter, and a high-voltage box as described in the second aspect embodiment above, wherein the battery pack is connected to the energy storage converter through the high-voltage box.

[0055] Understandably, the high-voltage box's function is to disconnect / close the battery pack when needed. Therefore, the battery pack is connected to the energy storage converter through the high-voltage box to ensure the stable operation of the energy storage system during charging and discharging, preventing faults such as overcurrent, short circuit, and overvoltage. For example, the energy storage converter can be connected to the pre-charge relay, main positive relay, and main negative relay in the high-voltage box via fuses and slow / fast charge relays. These relays are then connected to the battery pack. The battery pack can also be connected to the corresponding power output circuit for output via the pre-charge relay, main positive relay, main negative relay, and various power relays.

[0056] According to the energy storage device provided in this embodiment, the enable terminal of the circuit to be protected can receive the operation control signal from the operation control module. The operation control signal can adjust the level state of the enable terminal, so that the circuit to be protected can operate or turn off according to the corresponding operation control signal. The diode is reverse-connected between the enable terminal and the output terminal, which can effectively prevent the circuit to be protected from being affected by the high-level signal output by the first control module. The second control module can determine whether the operation control module has an abnormal situation by monitoring the verification signal through the input detection terminal. If no verification signal is received within a first preset time, it can be considered that the operation control module has an abnormal situation, and it will trigger the output clear signal, so that the output terminal of the first control module is in a low-level state. This embodiment of the present invention realizes the safety protection of the power output circuit, i.e., the circuit to be protected, when the operation control module is abnormal, through a more economical and efficient hardware logic control method, without the need to add an additional complete safety MCU. This avoids the additional expenses of purchasing, integrating and debugging the safety MCU, and significantly reduces the implementation cost of the overall circuit system. At the same time, by reducing the number of components, the complexity and maintenance difficulty of the protection device are also simplified. Secondly, through direct control of hardware logic, the response speed and reliability of the protection device to abnormal situations can be improved.

[0057] Other features and advantages of this invention will be set forth in the description which follows, and will be apparent in part from the description, or may be learned by practicing the invention. The objects and other advantages of this invention may be realized and obtained by means of the structures particularly pointed out in the description, claims, and drawings.

Claims

1. A forced power-down protection circuit, characterized in that, include: A diode, wherein the anode of the diode is used to connect to the enable terminal of the circuit to be protected, wherein the enable terminal of the circuit to be protected is used to receive an operation control signal from the operation control module; The first control module includes an output terminal and a reset terminal. The output terminal is connected to the cathode of the diode to block the signal output from the output terminal to the enable terminal of the circuit to be protected through the diode. The second control module includes an input detection terminal and a reset terminal. The reset terminal is connected to the clear terminal, and the input detection terminal is used to receive a verification signal from the operation control module. If the input detection terminal does not receive the verification signal within a first preset time period, the reset terminal outputs a clear signal to make the output terminal a low level.

2. The forced power-down protection circuit according to claim 1, characterized in that, The first control module further includes a preset terminal, which is used to receive preset signals from the operation control module.

3. The forced power-down protection circuit according to claim 2, characterized in that, It also includes a second pull-up resistor connected to the preset terminal.

4. The forced power-down protection circuit according to claim 2, characterized in that, It also includes a first NOT gate circuit connected to the preset terminal, and a second NOT gate circuit disposed between the output terminal and the cathode of the diode.

5. The forced power-down protection circuit according to claim 4, characterized in that, It also includes a third NOT gate circuit disposed between the reset terminal and the clear terminal.

6. The forced power-down protection circuit according to claim 1, characterized in that, It also includes a first pull-up resistor connected to the connection point between the reset terminal and the clear terminal.

7. The forced power-down protection circuit according to claim 1, characterized in that, The first control module also includes a clock terminal, and the forced power-down protection circuit also includes a third pull-up resistor connected to the clock terminal.

8. The forced power-down protection circuit according to claim 1, characterized in that, It also includes a first pull-down resistor connected to the input detection terminal.

9. The forced power-down protection circuit according to claim 1, characterized in that, The second control module further includes an external reset terminal for receiving a reset signal, wherein, when the external reset terminal receives the reset signal, the reset terminal outputs a clear signal.

10. The forced power-down protection circuit according to claim 9, characterized in that, It also includes a fourth pull-up resistor connected to the external reset terminal.

11. The forced power-down protection circuit according to claim 1, characterized in that, It also includes a protective resistor for connection to the operation control module, the protective resistor being connected to the anode of the diode.

12. A high-voltage box, characterized in that, Includes the forced power-down protection circuit as described in any one of claims 1 to 11.

13. An energy storage device, characterized in that, It includes a battery pack, an energy storage converter, and a high-voltage box as described in claim 12, wherein the battery pack is connected to the energy storage converter through the high-voltage box.

Images