Fault switching circuit for redundant power distribution of autonomous vehicle

Abstract

The utility model discloses a fault switching circuit for redundant power distribution of an automatic driving vehicle. The fault switching circuit comprises a storage battery, a DCDC / generator, a load circuit and a microcontroller, the storage battery is electrically connected with the load circuit through the first output circuit; a first semiconductor element and a first current detection element are connected in series to the first output circuit; the DCDC / generator is electrically connected with the load circuit through the second output circuit; a second semiconductor element and a second current detection element are connected in series to the second output circuit; and the microcontroller is used for respectively controlling the on-off of the first semiconductor element and the second semiconductor element according to the current data of the first current detection element and the second current detection element. According to the utility model, redundant electricity is realized at a power supply end, when a single point fault occurs, the fault can be found in time, a fault loop is cut off, the connection between a fault point and a whole vehicle power distribution system is isolated, the safety and reliability of a power supply system are ensured, and the vehicle can be safely stopped without being out of control.

Description

TECHNICAL FIELD

[0001] The utility model relates to an automatic driving vehicle redundant power distribution fault switching circuit. BACKGROUND

[0002] As the product of the deep integration of traditional automobile industry and artificial intelligence information technology, the automatic driving technology has become the frontier technology of the priority development of various countries under the rapid development of computer technology and internet technology. The traditional vehicle enterprises and the emerging technology giants represented by Google and Tesla have all developed their own automatic driving technology. For the automatic driving technology, a safe and reliable power distribution network is essential. When the power distribution scheme of the traditional vehicle is used for the automatic driving vehicle, the vehicle may lose control and cause irreparable harm when the system has a power failure.

[0003] As shown in Figure 1 The mainstream scheme of the traditional vehicle is that the DCDC / generator is connected to the power distribution circuit through the fuse 1, and the DCDC / generator and the storage battery are protected by the fuse 1. When overcurrent / short circuit fault occurs in the circuit 1 or the circuit 2, the fuse 1 is blown to protect the wiring harness.

[0004] When the storage battery or the circuit one fails, the current through the fuse 1 will instantaneously increase, and then the fuse 1 is blown, which immediately leads to the power failure of the whole vehicle. The single-point failure leads to the overall failure of the system, and the reliability is relatively low. Using the fuse as the circuit protection element has the disadvantages of uncontrollable fuse time and slow response speed. UTILITY MODEL CONTENTS

[0005] In order to solve the above technical problems, the utility model provides an automatic driving vehicle redundant power distribution fault switching circuit.

[0006] In order to achieve the above purpose, the technical scheme of the utility model is as follows:

[0007] The utility model discloses an automatic driving vehicle redundant power distribution fault switching circuit, which comprises a storage battery, a DCDC / generator, a load circuit and a microcontroller.

[0008] The storage battery is electrically connected with the load circuit through a first output circuit, and is electrically connected with the DCDC / generator through the first output circuit and a second output circuit.

[0009] A first semiconductor element and a first current detection element are connected in series on the first output circuit, and the first current detection element is used for detecting the current size and the current direction flowing through the first output circuit.

[0010] The DCDC / generator is electrically connected with the load circuit through the second output circuit, and is electrically connected with the storage battery through the second output circuit and the first output circuit.

[0011] The second output circuit is connected in series with a second semiconductor element and a second current detection element for detecting the current size and direction of the current flowing through the second output circuit;

[0012] The first and second current detection elements are respectively connected in communication with a microcontroller, and the microcontroller is configured to control the on-off of the first and second semiconductor elements according to the current data of the first and second current detection elements.

[0013] Based on the above technical solution, the following improvements can be made:

[0014] As a preferred solution, the first and second semiconductor elements are MOSFET tubes.

[0015] As a preferred solution, the microcontroller comprises a current data receiver, a current data determinator and an output controller connected in sequence;

[0016] The current data receiver is configured to receive the current data of the first and second current detection elements;

[0017] The current data determinator is configured to determine the received current data with a current threshold and send the current determination result to the output controller;

[0018] The output controller is configured to control the on-off of the first and second semiconductor elements according to the current determination result.

[0019] As a preferred solution, the microcontroller further comprises a timer electrically connected with the current data determinator for timing.

[0020] As a preferred solution, the fault switching circuit further comprises a first voltage detection element and a second voltage detection element;

[0021] The first voltage detection element is configured to detect the real-time voltage of the battery;

[0022] The second voltage detection element is configured to detect the real-time voltage of the DCDC / generator;

[0023] The first and second voltage detection elements are respectively connected in communication with the microcontroller, and the microcontroller is configured to control the on-off of the first and second semiconductor elements according to the voltage data of the first and second voltage detection elements.

[0024] As a preferred solution, the microcontroller further comprises a voltage data receiver and a voltage data determinator connected in sequence;

[0025] The voltage data receiver is configured to receive voltage data of the first voltage detection element and the second voltage detection element.

[0026] The voltage data determiner is configured to determine the received voltage data with respect to a voltage threshold, and send a voltage determination result to the output controller.

[0027] The output controller is configured to control the first semiconductor element and the second semiconductor element according to the voltage determination result.

[0028] As a preferred solution, the microcontroller is in communication connection with the vehicle-end controller through a CAN line.

[0029] As a preferred solution, the vehicle-end controller is in communication connection with a vehicle-mounted T-BOX.

[0030] As a preferred solution, the first current detection element and the second current detection element each include a current detection resistor and a current sensor.

[0031] As a preferred solution, the load circuit includes a plurality of load branches arranged in parallel, and a fuse and a load are arranged in series on each load branch.

[0032] The utility model discloses an automatic driving vehicle redundancy power distribution's fault switching circuit, and it realizes power end redundancy power distribution through adjusting vehicle power line harness connection mode, has the following beneficial effects:

[0033] First, the redundancy power is realized at the power end, when the single point fault of the battery or DCDC / generator and its output loop appears, the fault can be found in time, and the fault loop is cut off, the connection of the fault point and the whole vehicle power distribution system is isolated, the safe and reliable of the power supply system is ensured, and the vehicle can be parked safely and not in the out-of-control state.

[0034] Second, compared with the traditional power distribution scheme, the utility model can monitor the power supply system state information in real time, so as to carry out power statistics and vehicle running state analysis.

[0035] Third, the utility model can carry out fault analysis, positioning and rapid processing to the power supply system and store and alarm the fault information in the cloud. DRAWINGS

[0036] In order to more clearly illustrate the technical scheme of the embodiment of the utility model, the following will be simply introduced to the drawing needed to be used in the embodiment, and it should be understood that the following drawings only show some embodiments of the utility model, and should not be regarded as the limitation to the scope, and for the ordinary skilled person in the art, other related drawings can be obtained according to these drawings without the creative labor.

[0037] Figure 1A vehicle power supply circuit is provided for the prior art.

[0038] Figure 2 The circuit diagram of the fault switching circuit is provided for the embodiment of the utility model.

[0039] Figure 3 The circuit diagram of the fault switching circuit is provided for the embodiment of the utility model.

[0040] Figure 4 The circuit diagram of the microcontroller is provided for the embodiment of the utility model.

[0041] Wherein: 1-battery, 2-DCDC / generator, 3-load circuit, 4-microcontroller, 41-current data receiver, 42-current data judge, 43-output controller, 44-voltage data receiver, 45-voltage data judge, 46-timer, 51-first output circuit, 52-second output circuit, 61-first semiconductor element, 62-second semiconductor element, 71-first current detection element, 72-second current detection element, 81-first voltage detection element, 82-second voltage detection element, 9-vehicle end controller, 10-vehicle-mounted T-BOX. DETAILED DESCRIPTION

[0042] The preferred embodiments of the utility model will be described in detail below with reference to the drawings.

[0043] The technical solutions in the embodiments of the utility model will be described clearly and completely below with reference to the drawings in the embodiments of the utility model. Obviously, the described embodiments are only part of the embodiments of the utility model, not all the embodiments. Based on the embodiments in the utility model, all other embodiments obtained by those skilled in the art without creative labor fall within the protection scope of the utility model.

[0044] Meanwhile, the expressions such as "first", "second" are only used for distinguishing multiple configurations, not limiting the order between configurations or other features.

[0045] In addition, the expression of "including" element is "open" expression, and the "open" expression only means that the corresponding component exists, and should not be interpreted as excluding additional components.

[0046] In order to achieve the purpose of the utility model, some embodiments of the fault switching circuit of the automatic driving vehicle redundancy power distribution, as shown in Figure 2 The fault switching circuit comprises: a battery 1, a DCDC / generator 2, a load circuit 3 and a microcontroller 4.

[0047] The storage battery 1 is electrically connected with the load circuit 3 through the first output circuit 51, and is electrically connected with the DCDC / generator 2 through the first output circuit 51 and the second output circuit 52;

[0048] The first semiconductor element 61 and the first current detection element 71 are connected in series on the first output circuit 51 in sequence, and the first current detection element 71 is used for detecting the current size and the current direction of the current flowing through the first output circuit 51;

[0049] The DCDC / generator 2 is electrically connected with the load circuit 3 through the second output circuit 52, and is electrically connected with the storage battery 1 through the second output circuit 52 and the first output circuit 51;

[0050] The second semiconductor element 62 and the second current detection element 72 are connected in series on the second output circuit 52 in sequence, and the second current detection element 72 is used for detecting the current size and the current direction of the current flowing through the second output circuit 52;

[0051] The first current detection element 71 and the second current detection element 72 are respectively connected with the microcontroller 4 in communication, and the microcontroller 4 is used for controlling the on-off of the first semiconductor element 61 and the second semiconductor element 62 respectively according to the current data of the first current detection element 71 and the second current detection element 72.

[0052] The working process of the utility model is as follows:

[0053] The first semiconductor element 61 and the first current detection element 71 are connected in series on the first output circuit 51 of the storage battery 1, and the second semiconductor element 62 and the second current detection element 72 are connected in series on the second output circuit 52 of the DCDC / generator 2, and the first output circuit 51 and the second output circuit 52 are connected in parallel.

[0054] When the vehicle does not start the engine and does not charge high voltage, the storage battery 1 is used as the power supply for the load, the first current detection element 71 detects the current I1, and the current direction of the current I1 is from the first semiconductor element 61 to the first current detection element 71, and the second current detection element 72 detects that the current I2 is zero;

[0055] After the vehicle starts and charges high voltage, the DCDC / generator 2 is used as the power supply for the load and charges the storage battery 1, the first current detection element 71 detects the current I1, and the current direction of the current I1 is from the first current detection element 71 to the first semiconductor element 61, and the second current detection element 72 detects the current I2, and the current direction of the current I2 is from the second semiconductor element 62 to the second current detection element 72.

[0056] The current data of the first current detecting element 71 and the second current detecting element 72 are provided to the microcontroller 4, and the current data includes current size, current direction and other information, and the microcontroller 4 controls the on-off of the first semiconductor element 61 and the second semiconductor element 62 according to the current data.

[0057] The utility model discloses a kind of fault switching circuits, it is specifically redundant power distribution scheme of whole vehicle primary distribution, when battery 1 or DCDC / generator 2 and its related circuit occur single point failure, necessary power supply of vehicle load equipment can be guaranteed, so that vehicle can be operated emergency operation safe parking.

[0058] In order to further optimize the implementation effect of the utility model, in some other embodiments, the remaining features are technically the same, except that, as shown in Figure 3 As shown in the figure, the first semiconductor element 61 and the second semiconductor element 62 are MOSFET tubes.

[0059] The utility model uses MOSFET, current detecting element, microcontroller 4 to replace traditional fuse to realize circuit protection, with quick response, high sensitivity, real-time monitoring and other advantages.

[0060] In order to further optimize the implementation effect of the utility model, in some other embodiments, the remaining features are technically the same, except that, as shown in Figure 4 As shown in the figure, the microcontroller 4 includes current data receiver 41, current data determinator 42 and output controller 43 connected in sequence.

[0061] The current data receiver 41 is used for receiving the current data of the first current detecting element 71 and the second current detecting element 72.

[0062] The current data determinator 42 is used for determining the received current data with current threshold value, and sending current determination result to the output controller 43.

[0063] The output controller 43 is used for controlling the on-off of the first semiconductor element 61 and the second semiconductor element 62 according to the current determination result.

[0064] Further, the microcontroller 4 further includes: timer 46, the timer 46 is electrically connected with the current data determinator 42, and is used for timing.

[0065] The first current detecting element 71 detects current I1, and the second current detecting element 72 detects current I2. The current data determinator 42 includes: first determinator, second determinator and third determinator.

[0066] Each of the first determinator, the second determinator and the third determinator is built-in corresponding current threshold value for current I1 and current I2.

[0067] For example, the first judging device is provided with a current threshold I 11 , a current threshold I 21 .

[0068] When the current I1≤I 11 , it is considered that the first output circuit 51 is in a normal state;

[0069] When the current I2≤I 21 , it is considered that the second output circuit 52 is in a normal state.

[0070] The second judging device is provided with a current threshold I 12 , a current threshold I 22 .

[0071] In some embodiments, I 12 =I 11 *2; I 22 =I 21 *2;

[0072] When I 11 <I 12 , it is considered that the first output circuit 51 is in an overcurrent state, and when the circuit continuously stays in the overcurrent state for more than 30s, the output controller 43 disconnects the first semiconductor element 61;

[0073] When I 21 <I 22 , it is considered that the second output circuit 52 is in an overcurrent state, and when the circuit continuously stays in the overcurrent state for more than 30s, the output controller 43 disconnects the second semiconductor element 62.

[0074] The third judging device is provided with a current threshold I 12 , a current threshold I 22 .

[0075] When the current I1>I 12 , it is considered that the first output circuit 51 is in a short-circuit state, and the output controller 43 immediately disconnects the first semiconductor element 61;

[0076] When the current I2>I 22 , it is considered that the second output circuit 52 is in a short-circuit state, and the output controller 43 immediately disconnects the second semiconductor element 62.

[0077] In order to further optimize the implementation effect of the utility model, in some other embodiments, the remaining features are the same, and the difference lies in that the fault switching circuit further comprises: a first voltage detection element 81 and a second voltage detection element 82;

[0078] The first voltage detection element 81 is used for detecting the real-time voltage of the storage battery 1;

[0079] The second voltage detection element 82 is used for detecting the real-time voltage of the DCDC / generator 2;

[0080] The first voltage detection element 81 and the second voltage detection element 82 are respectively in communication connection with the microcontroller 4, and the microcontroller 4 is used for controlling the on-off of the first semiconductor element 61 and the second semiconductor element 62 respectively according to the voltage data of the first voltage detection element 81 and the second voltage detection element 82.

[0081] Further, the microcontroller 4 further comprises a voltage data receiver 44 and a voltage data determinator 45 which are electrically connected in sequence;

[0082] The voltage data receiver 44 is used for receiving the voltage data of the first voltage detection element 81 and the second voltage detection element 82;

[0083] The voltage data determinator 45 is used for determining the received voltage data with a voltage threshold value, and sending the voltage determination result to the output controller 43;

[0084] The output controller 43 is used for controlling the on-off of the first semiconductor element 61 and the second semiconductor element 62 according to the voltage determination result.

[0085] The first voltage detection element 81 detects the real-time voltage U1 of the storage battery 1, and the second voltage detection element 82 detects the real-time voltage U2 of the DCDC / generator 2.

[0086] The first voltage detection element 81 and the second voltage detection element 82 send the detected voltage data U1 and U2 to the microcontroller 4, and only when the voltage is in the normal range, the microcontroller 4 controls the first semiconductor element 61 and the second semiconductor element 62 to be closed.

[0087] For a 12V voltage platform vehicle, it is considered that 9V≤U1(or U2)≤16V is the normal range, lower than 9V is under-voltage, and higher than 16V is over-voltage; for a 24V voltage platform vehicle, it is considered that 18V≤U1(or U2)≤32V is the normal range, lower than 18V is under-voltage, and higher than 32V is over-voltage.

[0088] Before the first semiconductor element 61 is closed, if the voltage data U1 is in the normal range, the output controller 43 controls the first semiconductor element 61 to be closed, and if the voltage data U1 is out of the normal range, the microcontroller 4 does not control the first semiconductor element 61 to be closed, and reports the fault.

[0089] Before the second semiconductor element 62 is closed, if the voltage data U2 is in the normal range, the output controller 43 controls the second semiconductor element 62 to be closed, and if the voltage data U2 is out of the normal range, the microcontroller 4 does not control the second semiconductor element 62 to be closed, and reports the fault.

[0090] After the first semiconductor element 61 is closed, if the voltage data U1 is within the normal range, the output controller 43 controls the first semiconductor element 61 to remain in the closed state, and if the voltage data U1 is out of the normal range and the duration exceeds 10s, the output controller 43 controls the first semiconductor element 61 to be disconnected, and reports the fault.

[0091] After the second semiconductor element 62 is closed, if the voltage data U2 is within the normal range, the output controller 43 controls the second semiconductor element 62 to remain in the closed state, and if the voltage data U2 is out of the normal range and the duration exceeds 10s, the output controller 43 controls the second semiconductor element 62 to be disconnected, and reports the fault.

[0092] In order to further optimize the implementation effect of the utility model, in some other embodiments, the remaining features are the same, and the difference is that the microcontroller 4 is in communication connection with the vehicle end controller 9 through the CAN line.

[0093] Further, the vehicle end controller 9 is in communication connection with the vehicle-mounted T-BOX.

[0094] The microcontroller 4 sends the current data detected by the first current detection element 71 and the second current detection element 72, the voltage data detected by the first voltage detection element 81 and the second voltage detection element 82, and the on-off information of the first semiconductor element 61 and the second semiconductor element 62 to the vehicle end controller 9 through the CAN line, and then sends them to the cloud for storage or alarm through the vehicle-mounted T-BOX.

[0095] Specifically, the vehicle end controller 9 will perform corresponding actions according to the information sent by the microcontroller 4. When the current data, voltage data and semiconductor element state are normal, the vehicle end controller 9 sends the state information to the cloud through the vehicle-mounted T-BOX for storage; when the current data, voltage data and semiconductor element state are abnormal, the vehicle end controller 9 sends the state information to the cloud through the vehicle-mounted T-BOX for storage and sends an alarm signal, and controls the vehicle to perform emergency safety operation to ensure that the vehicle is not in an out-of-control state.

[0096] When the battery 1 or the first output circuit 51 has a current fault, the first current detection element 71 detects that the current I1 is in an overcurrent or short-circuit state and the current direction is from the first semiconductor element 61 to the first current detection element 71, and the second current detection element 72 detects that the current I2 is in an overcurrent or short-circuit state and the current direction is from the second semiconductor element 62 to the second current detection element 72. The microcontroller 4 determines, according to the received current data (current size, current direction), that the battery 1 or the first output circuit 51 has a fault and determines the fault type (overcurrent or short circuit). If it is an overcurrent fault, the microcontroller 4 turns off the first semiconductor element 61 after 30 seconds of fault, and if it is a short-circuit fault, the microcontroller 4 immediately turns off the first semiconductor element 61, thereby disconnecting the battery 1 or the first output circuit 51 from other circuits and isolating the DCDC / generator 2 and the second output circuit 52, and the DCDC / generator 2 and the second output circuit 52 remain normal, ensuring normal power supply and allowing the load to continue to work.

[0097] When the DCDC / generator 2 or the second output circuit 52 has a current fault, the first current detection element 71 detects that the current I1 is in an overcurrent or short-circuit state and the current direction is from the first semiconductor element 61 to the first current detection element 71, and the second current detection element 72 detects that the current I2 is in an overcurrent or short-circuit state and the current direction is from the second semiconductor element 62 to the second current detection element 72. The microcontroller 4 determines, according to the received current data (current size, current direction), that the DCDC / generator 2 or the second output circuit 52 has a fault and determines the fault type (overcurrent or short circuit). If it is an overcurrent fault, the microcontroller 4 turns off the second semiconductor element 62 after 30 seconds of fault, and if it is a short-circuit fault, the microcontroller 4 immediately turns off the second semiconductor element 62, thereby disconnecting the DCDC / generator 2 or the second output circuit 52 from other circuits and isolating the battery 1 and the first output circuit 51, and the battery 1 and the first output circuit 51 remain normal, ensuring normal power supply and allowing the load to continue to work.

[0098] When the battery 1 has a voltage fault, the first voltage detection element 81 detects that the voltage U1 is out of the normal range and is in an under-voltage or over-voltage state, and the second voltage detection element 82 detects that the voltage U2 is in the normal range. The microcontroller 4 determines, according to the received voltage data, that the battery 1 is in an over-voltage or under-voltage state. If it is in this state for more than 10 seconds, the microcontroller 4 turns off the first semiconductor element 61, isolates the battery 1 from the DCDC / generator 2, and the DCDC / generator 2 remains normal, ensuring normal power supply.

[0099] After the first semiconductor element 61 is disconnected, the first voltage detection element 81 continuously detects the battery 1 voltage, and if it continuously remains in an abnormal state, the first semiconductor element 61 is kept disconnected, if the battery 1 voltage returns to a normal state and continuously remains for more than 10s, it is considered that the fault has been eliminated, and the microcontroller 4 controls the first semiconductor element 61 to be closed.

[0100] When the DCDC / generator 2 has a voltage fault, the second voltage detection element 82 detects that the voltage U2 exceeds the normal range, and is in an under-voltage or over-voltage state, and the first voltage detection element 81 detects that the voltage U1 is in a normal range, and the microcontroller 4 judges that the DCDC / generator 2 is in an over-voltage or under-voltage state according to the received voltage data, if it is in this state for more than 10s, the microcontroller 4 disconnects the second semiconductor element 62, so that the battery 1 is isolated from the DCDC / generator 2, and the battery 1 remains normal operation, ensuring normal power supply.

[0101] After the second semiconductor element 62 is disconnected, the second voltage detection element 82 continuously detects the DCDC / generator 2 voltage, and if it continuously remains in an abnormal state, the second semiconductor element 62 is kept disconnected, if the DCDC / generator 2 voltage returns to a normal state and continuously remains for more than 10s, it is considered that the fault has been eliminated, and the microcontroller 4 controls the second semiconductor element 62 to be closed.

[0102] In order to further optimize the implementation effect of the utility model, in some other embodiments, the remaining features are the same in technology, and the difference lies in that the first current detection element 71 and the second current detection element 72 respectively comprise: a current detection resistor and a current sensor.

[0103] In order to further optimize the implementation effect of the utility model, in some other embodiments, the remaining features are the same in technology, and the difference lies in that the load circuit 3 comprises: a plurality of load branches arranged in parallel, and a fuse and a load are connected in series on each load branch.

[0104] The utility model discloses a kind of fault switching circuit of redundancy power distribution of automatic driving vehicle, which realizes power end redundancy power distribution by adjusting vehicle power wiring harness connection mode, with following beneficial effects:

[0105] First, redundancy power is realized at power end, when single-point fault occurs in battery 1 or DCDC / generator 2 and its output loop, fault can be found in time, and fault loop is cut off, the connection of fault point and whole vehicle power distribution system is isolated, the safety and reliability of power supply system are guaranteed, and vehicle can be parked safely not in out-of-control state.

[0106] Second, compared with traditional power distribution scheme, the utility model can monitor power supply system state information in real time, so as to carry out power statistics and vehicle running state analysis.

[0107] Third, the utility model can carry out fault analysis, positioning and fast processing to power supply system and store and cloud alarm to fault information.

[0108] The basic principle and main features of the utility model and the advantages of the utility model are shown and described above, and the skilled in the art should understand that the utility model is not limited by the above examples, and the above examples and the description in the specification are only to illustrate the principle of the utility model, and various changes and improvements of the utility model can be made without departing from the spirit and scope of the utility model, and these changes and improvements all fall within the scope of the claimed utility model, and the scope of protection of the utility model is defined by the appended claims and their equivalents.

[0109] The utility model actually protects the combination of various hardware parts and the improvement of the connection relationship, and does not involve the improvement of the software program itself.

Claims

1. A failover circuit for redundant power distribution in an autonomous vehicle, the failover circuit comprising: The application relates to a fault switching circuit of a vehicle. The fault switching circuit comprises a storage battery, a DCDC / generator, a load circuit and a microcontroller. The storage battery is electrically connected with the load circuit through a first output circuit and is electrically connected with the DCDC / generator through the first output circuit and a second output circuit. A first semiconductor element and a first current detection element are connected in series on the first output circuit, and the first current detection element is used for detecting the current size and current direction flowing through the first output circuit. The DCDC / generator is electrically connected with the load circuit through the second output circuit and is electrically connected with the storage battery through the second output circuit and the first output circuit. A second semiconductor element and a second current detection element are connected in series on the second output circuit, and the second current detection element is used for detecting the current size and current direction flowing through the second output circuit. The first current detection element and the second current detection element are respectively connected with the microcontroller in communication, and the microcontroller is used for controlling the on-off of the first semiconductor element and the second semiconductor element respectively according to the current data of the first current detection element and the second current detection element.

2. The fail-safe circuit of claim 1, wherein, The first semiconductor element and the second semiconductor element are respectively MOSFET tubes.

3. The fail-safe circuit of claim 2, wherein, The microcontroller comprises a current data receiver, a current data determinator and an output controller which are electrically connected in sequence. The current data receiver is used for receiving the current data of the first current detection element and the second current detection element. The current data determinator is used for judging the received current data with a current threshold value and sending the current judgment result to the output controller. The output controller is used for controlling the on-off of the first semiconductor element and the second semiconductor element according to the current judgment result.

4. The fail-safe circuit of claim 3, wherein, The microcontroller further comprises a timer which is electrically connected with the current data determinator and is used for timing.

5. The fail-safe circuit of claim 4, wherein, The fault switching circuit further comprises a first voltage detection element and a second voltage detection element. The first voltage detection element is used for detecting the real-time voltage of the storage battery. The second voltage detection element is used for detecting the real-time voltage of the DCDC / generator. The first voltage detection element and the second voltage detection element are respectively connected with the microcontroller in communication, and the microcontroller is used for controlling the on-off of the first semiconductor element and the second semiconductor element respectively according to the voltage data of the first voltage detection element and the second voltage detection element.

6. The fail-safe circuit of claim 5, wherein, The microcontroller further comprises a voltage data receiver and a voltage data determinator which are electrically connected in sequence. The voltage data receiver is used for receiving the voltage data of the first voltage detection element and the second voltage detection element. The voltage data determinator is used for judging the received voltage data with a voltage threshold value and sending the voltage judgment result to the output controller. The output controller is used for controlling the on-off of the first semiconductor element and the second semiconductor element according to the voltage judgment result.

7. The fail-safe circuit according to any one of claims 1 to 6, characterized in that The microcontroller is connected with a vehicle end controller in communication through a CAN line.

8. The fail-safe circuit of claim 7, wherein, The vehicle end controller is connected with a vehicle-mounted T-BOX in communication.

9. The fail-safe circuit according to any one of claims 1 to 6, characterized in that The first current detection element and the second current detection element respectively comprise a current detection resistor and a current sensor.

10. The fail-safe circuit according to any one of claims 1 to 6, characterized in that The load circuit comprises a plurality of load branches arranged in parallel, and a fuse and a load are connected in series on each load branch.

Images