A power supply device, power supply system and vehicle

Abstract

This utility model provides a power supply device, a power supply system, and a vehicle, relating to the field of vehicle safety power supply technology. The power supply device includes a domain controller, a switch controller, a first power supply circuit, and a second power supply circuit. The domain controller is signal-connected to a first electronic fuse; the switch controller is signal-connected to a second electronic fuse; the first terminal of the first power supply circuit is configured to be connected to a first power source, and the output terminal of the first power supply circuit is connected to the first terminal of a load via the first electronic fuse; the first terminal of the second power supply circuit is configured to be connected to a second power source, and the second terminal of the second power supply circuit is connected to the second terminal of the first power supply circuit; the output terminal of the second power supply circuit is configured to be connected to the second terminal of the load via the second electronic fuse. The load can be powered by the first power supply circuit and the second power supply circuit respectively, thereby improving the safety of power supply and enhancing the vehicle's safety integrity level.

Description

Technical Field

[0001] This utility model relates to the field of vehicle safety power supply technology, specifically to a power supply device, a power supply system, and a vehicle. Background Technology

[0002] With the development of new energy technologies, the application of electric vehicles and hybrid vehicles is becoming increasingly common. Electric vehicles and hybrid vehicles typically use high-voltage power batteries and low-voltage batteries to power low-voltage loads such as the vehicle's electronic stability control system, electronic parking brake system, autonomous driving control system, and audio-visual entertainment system. With the development of intelligentization and electrification, the number of low-voltage loads has increased significantly, leading to a higher probability of power supply system failures.

[0003] As the level of autonomous driving in vehicles increases, the functional safety requirements for vehicle power supply systems also gradually increase, and the requirements for Automotive Safety Integrity Level (ASIL) also differ. Therefore, a solution is needed to improve the functional safety of vehicle power supply. Utility Model Content

[0004] In view of the problems existing in the prior art, the present invention provides a power supply device, a power supply system and a vehicle to improve the situation where the existing power supply system has a high probability of failure and affects the functional safety performance of the power supply system.

[0005] To achieve the above and other related objectives, the first aspect of this utility model provides a power supply device, including a domain controller, a switch controller, a first power supply circuit, and a second power supply circuit. The domain controller is signal-connected to a first electronic fuse; the switch controller is signal-connected to a second electronic fuse; a first terminal of the first power supply circuit is configured to be connected to a first power source, and the output terminal of the first power supply circuit is connected to a first terminal of a load via the first electronic fuse; a first terminal of the second power supply circuit is configured to be connected to a second power source, and a second terminal of the second power supply circuit is connected to a second terminal of the first power supply circuit; the output terminal of the second power supply circuit is configured to be connected to a second terminal of the load via the second electronic fuse.

[0006] The power supply device includes a first power supply circuit and a second power supply circuit. The first and second power supply circuits are respectively connected to a first power source and a second power source, and their output terminals are respectively connected to the first and second terminals of the load. This allows for switching to the other power supply circuit in case of a failure in either the first or second power supply circuit, improving the safety of the power supply function. The second terminal of the first power supply circuit is connected to the second terminal of the second power supply circuit. When either the first or second power source fails, the load can still be powered through the first and second power supply circuits respectively, thereby improving the safety of power supply and enhancing the vehicle's safety integrity level. The output terminal of the first power supply circuit is connected to the first terminal of the load via a first electronic fuse, and the output terminal of the second power supply circuit is connected to the second terminal of the load via a second electronic fuse. The first and second electronic fuses are controlled by a domain controller and a switch controller, respectively, which can promptly disconnect the power supply circuit from the load, effectively ensuring that the first or second electronic fuse can be disconnected in time when a load-side failure occurs, further improving the safety of the power supply function.

[0007] In an exemplary embodiment of this utility model, the second power source is a low-voltage power source.

[0008] The low-voltage power supply can be directly connected to the second power supply circuit. The functional safety integrity level of the low-voltage power supply is Class B, which allows the functional integrity level of the power supply device to be Class D.

[0009] In an exemplary embodiment of the present invention, the first power supply includes a voltage conversion unit, and the input terminal of the voltage conversion unit is configured to be connected to a high-voltage battery;

[0010] The high-voltage battery is a high-voltage power battery that provides power output to the entire vehicle. A voltage conversion unit converts the high voltage of the high-voltage battery to a low voltage suitable for the load, working together with the low-voltage power supply to power the vehicle's low-voltage loads, thus improving the reliability of the low-voltage load power supply. The high-voltage conversion unit can be a DC-DC converter circuit, enabling the high-voltage DC power from the high-voltage battery to be converted into the low-voltage DC power required by the low-voltage load.

[0011] In an exemplary embodiment of this utility model, a disconnect switch is included, the two ends of which are respectively connected to the second end of the first power supply circuit and the second end of the second power supply circuit.

[0012] When the first or second electronic fuse fails to disconnect or the fault cannot be resolved, the first and second power supply circuits can be disconnected by using an isolating switch. This allows the first or second power supply circuit to independently supply power to the load, meeting the needs of redundancy backup and improving the safety and reliability of the power supply function.

[0013] In an exemplary embodiment of this utility model, the disconnecting switch is signal-connected to the switch controller.

[0014] By controlling the isolating switch through the switch controller, the on / off state of the first and second power supply circuits can be controlled, effectively improving the safety and reliability of the power supply function.

[0015] In an exemplary embodiment of this utility model, the functional safety integrity level of the voltage conversion unit is Class B; the functional safety integrity level of the low-voltage power supply is Class B.

[0016] The functional safety integrity level of the voltage conversion unit and the low-voltage power supply are both Class B, which can ensure the functional safety integrity of the power supply device to meet the needs of autonomous driving.

[0017] In an exemplary embodiment of this utility model, the load includes a vehicle electronic stability system, a first terminal of which is connected to the output terminal of a first power supply circuit, and a second terminal of which is connected to the output terminal of a second power supply circuit.

[0018] The Electronic Stability Program (ESP) is a part of active safety in automobiles and an indispensable part of autonomous driving. The output terminals of the first power supply circuit and the second power supply circuit are connected to the first and second terminals of the ESP, respectively, effectively ensuring the reliability of the power supply to the ESP and ensuring driving safety.

[0019] In an exemplary embodiment of this utility model, the load includes an electronic parking brake system, which includes a first end and a second end. The first end of the electronic parking brake system is connected to the output end of a first power supply circuit, and the second end of the electronic parking brake system is connected to the output end of a second power supply circuit.

[0020] The electronic parking brake system, which uses electronic control to achieve parking braking, is a crucial component of autonomous driving. By connecting the outputs of the first and second power supply circuits to the first and second terminals of the electronic parking brake system, respectively, the reliability of the power supply to the electronic parking brake system is effectively ensured, thereby guaranteeing driving safety.

[0021] In an exemplary embodiment of this utility model, the load includes an autonomous driving domain controller, which includes a first terminal and a second terminal. The first terminal of the autonomous driving controller is connected to the output terminal of a first power supply circuit, and the second terminal of the autonomous driving controller is connected to the output terminal of a second power supply circuit.

[0022] The autonomous driving domain controller is a crucial component of autonomous driving. It enables vehicle perception and control. The power supply device provides dual power supply circuits to the autonomous driving domain controller, effectively ensuring the power supply safety and reliability of the autonomous driving domain controller and thus ensuring driving safety.

[0023] In an exemplary embodiment of this utility model, the load includes a first load and a second load that are redundant with each other. The first end and the second end of the first load are respectively connected to the output terminal of the first power supply circuit and the output terminal of the second power supply circuit. The first end and the second end of the second load are respectively connected to the output terminal of the first power supply circuit and the output terminal of the second power supply circuit.

[0024] The load includes a redundant first load and a second load. By supplying power to the first load and the second load separately, it can be effectively ensured that when a certain load fails or its power supply circuit fails, the redundant load can effectively take over the work, thereby ensuring that the load can perform its function and improving driving safety.

[0025] A second aspect of this utility model provides a power supply system, comprising the power supply device, low-voltage power supply, voltage conversion unit, and high-voltage battery as described above; the output terminal of the low-voltage power supply is connected to the first terminal of the first power supply circuit; the output terminal of the voltage conversion unit is connected to the first terminal of the second power supply circuit; and the output terminal of the high-voltage battery is connected to the input terminal of the voltage conversion unit.

[0026] The power supply system of this invention can effectively ensure a stable and reliable power supply to the load, improve the vehicle's complete integrity level, and enable the vehicle to meet the needs of autonomous driving.

[0027] A third aspect of this invention provides a vehicle comprising the power supply device described in any one of the preceding descriptions.

[0028] By supplying power to the vehicle's low-voltage loads through the power supply device, the reliability and stability of the power supply are effectively guaranteed, ensuring that the low-voltage loads can perform their functional functions.

[0029] In combination with existing technologies, the beneficial effects of this utility model are as follows:

[0030] With the significant increase in the number of low-voltage loads, the probability of power supply system failure in existing power supply devices has increased, thereby affecting the safety of vehicle power supply functions. The power supply device of this utility model includes a first power supply circuit and a second power supply circuit. The first and second power supply circuits are respectively connected to a first power source and a second power source, and the output terminals of the first and second power supply circuits are respectively connected to a first terminal and a second terminal of the load. This allows for switching to the other power supply circuit in the event of a failure in either the first or second power supply circuit, improving the safety of the power supply function.

[0031] The second terminal of the first power supply circuit is connected to the second terminal of the second power supply circuit. When the first power supply or the second power supply fails, the load can still be powered by the first power supply circuit and the second power supply circuit respectively, thereby improving the safety of power supply and enhancing the vehicle's safety integrity level.

[0032] The output of the first power supply circuit is connected to the first end of the load through the first electronic fuse, and the output of the second power supply circuit is connected to the second end of the load through the second electronic fuse. The first electronic fuse and the second electronic fuse are controlled by the domain controller and the switch controller, respectively, which can disconnect the power supply circuit from the load in a timely manner. This effectively ensures that the first electronic fuse or the second electronic fuse can be disconnected in time when a fault occurs at the load end, thus improving the safety of the power supply function. Attached Figure Description

[0033] To more clearly illustrate the technical solutions in the embodiments of this utility model or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this utility model. For those skilled in the art, other embodiments can be obtained based on these drawings without creative effort.

[0034] Figure 1 This is a schematic diagram of a power supply device;

[0035] Figure 2 A block diagram of a power supply device provided in an embodiment of this application;

[0036] Figure 3 This is a schematic diagram of a power supply device provided in an embodiment of this application.

[0037] Component designation explanation:

[0038] 1. Power supply unit; 10. Domain controller; 11. First electronic fuse; 20. Switch controller; 21. Second electronic fuse; 30. First power supply circuit; 40. Second power supply circuit; 50. Voltage conversion unit; 51. High-voltage battery; 60. Low-voltage power supply; 70. Disconnecting switch. Detailed Implementation

[0039] The following specific examples illustrate the implementation of this utility model. Those skilled in the art can easily understand other advantages and effects of this utility model from the content disclosed in this specification. This utility model can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this utility model. It should be noted that, in the absence of conflict, the following embodiments and features in the embodiments can be combined with each other. It should also be understood that the terminology used in the embodiments of this utility model is for describing specific implementation schemes and not for limiting the scope of protection of this utility model. Test methods in the following embodiments that do not specify specific conditions are generally performed under conventional conditions or according to the conditions recommended by the respective manufacturers.

[0040] When numerical ranges are given in the embodiments, it should be understood that, unless otherwise specified in this invention, both endpoints of each numerical range and any value between the two endpoints may be selected. Unless otherwise defined, all technical and scientific terms used in this invention, as well as the prior art known to those skilled in the art and the description of this invention, may be implemented using any prior art methods, equipment, and materials similar to or equivalent to those in the embodiments of this invention.

[0041] It should be noted that the terms such as "upper," "lower," "left," "right," "middle," and "one" used in this specification are merely for clarity of description and are not intended to limit the scope of implementation of this utility model. Any changes or adjustments to their relative relationships, without substantially altering the technical content, shall also be considered within the scope of implementation of this utility model.

[0042] With the development of intelligent driving technology, vehicles are evolving from purely manual driving to autonomous driving. Current and future vehicles may include one or more levels of autonomous driving, L0 and L5. These levels (L0 and L5) are based on the classification standards of the Society of Automotive Engineers (SAE). L0 is no automation; L1 is driver assistance; L2 is partial automation; L3 is conditional automation; L4 is high automation; and L5 is full automation. Levels L1 to L3 involve monitoring road conditions and reacting to them jointly, requiring the driver to take over dynamic driving tasks. Levels L4 and L5 allow the driver to completely transition into a passenger role.

[0043] To meet the demands of autonomous driving, vehicle system complexity is constantly increasing, leading to a rise in risks from system failures and random hardware malfunctions. Addressing these risks requires monitoring the behavior of each vehicle system and hardware component after a failure, avoiding unacceptable risks due to functional safety malfunctions—that is, functional safety. Current and future functional safety levels for vehicle systems or hardware may include Quality Management (QM) and one or more of ASILA to ASILA D, based on the Society of Automotive Engineers (SAE) grading standards. Notably, QM can be understood as unrelated to functional safety.

[0044] Traditional automotive electronic and electrical systems are simple and do not prioritize functional safety. Most employ non-redundant designs and rely on a single power supply, requiring manual intervention in case of a power circuit failure. For example, if any component in the electric power steering system malfunctions, the system can be shut down, and steering force can be applied manually.

[0045] Figure 1 A power supply system is shown. In a conventional design, the load of this system is directly connected to a DC / DC converter circuit and a low-voltage power supply 60. The DC / DC converter circuit converts the high-voltage DC of the high-voltage battery 51 into a low-voltage DC for the load to use or to charge the low-voltage power supply 60. A fuse is provided between the load and the power supply (the low-voltage power supply and the DC / DC circuit), which will blow in the event of a short circuit in either branch.

[0046] Traditional power supply systems suffer from the following problems: 1) Traditional fuses require a large current, leading to overheating and eventual melting. Melting takes a considerable amount of time, typically on the order of seconds. At high speeds, a vehicle can travel a significant distance during this time; for example, at 100 km / h, a vehicle travels 27.78 meters per second. Therefore, a blown fuse poses a serious safety hazard. 2) If the fuse fails to melt in time, the DC-DC converter circuit and low-voltage power supply cannot supply power to the load, causing it to malfunction. Due to these issues, current power supply systems struggle to meet the functional safety requirements of L3 and higher-level autonomous driving systems for low-voltage power supply. To meet functional safety requirements, power supply systems for L3 and higher-level autonomous driving systems need to have redundant designs to avoid unexpected risks caused by single-point failures.

[0047] In view of this, the present invention provides a power supply device 1, a power supply system and a vehicle to provide redundant design for low-voltage loads and avoid unexpected risks caused by single-point failure.

[0048] Please see Figure 2 and Figure 3 The first aspect of this utility model provides a power supply device 1, including a domain controller 10, a switch controller 20, a first power supply circuit 30, and a second power supply circuit 40. The domain controller 10 is signal-connected to a first electronic fuse 11. The switch controller 20 is signal-connected to a second electronic fuse 21. A first terminal of the first power supply circuit 30 is configured to be connected to a first power source, and the output terminal of the first power supply circuit 30 is connected to a first terminal of a load via the first electronic fuse 11. A first terminal of the second power supply circuit 40 is configured to be connected to a second power source, and a second terminal of the second power supply circuit 40 is connected to a second terminal of the first power supply circuit 30. The output terminal of the second power supply circuit 40 is configured to be connected to a second terminal of the load via the second electronic fuse 21.

[0049] Please see Figure 2 and Figure 3 Multiple first electronic fuses 11 and second electronic fuses 21 are provided to connect loads. Electronic fuses offer advantages such as fast response, high control precision, and long service life. They can quickly disconnect the circuit in case of overload or short circuit, preventing damage to the load or power supply. By using electronic fuses, the first power supply circuit 30 and the second power supply circuit 40 respectively meet the requirements of ASIL B.

[0050] Please see Figure 2 and Figure 3 The output of the first power supply circuit 30 is connected to the first end of the load through the first electronic fuse 11, and the output of the second power supply circuit 40 is connected to the second end of the load through the second electronic fuse 21. The first electronic fuse 11 and the second electronic fuse 21 are controlled by the domain controller 10 and the switch controller 20 respectively, which can disconnect the power supply circuit from the load in a timely manner. This effectively ensures that when a fault occurs at the load end, the first electronic fuse 11 or the second electronic fuse 21 can be disconnected in a timely manner, thus improving the safety of the power supply function.

[0051] The first power supply circuit 30 and the second power supply circuit 40 are respectively connected to the first power source and the second power source, and the output terminals of the first power supply circuit 30 and the second power supply circuit 40 are respectively connected to the first terminal and the second terminal of the load. This allows for switching to the other power supply circuit in case of a failure in either the first power supply circuit 30 or the second power supply circuit 40, improving the safety of the power supply function. The second terminal of the first power supply circuit 30 is connected to the second terminal of the second power supply circuit 40. Even if the first power source or the second power source fails, the load can still be powered through the first power supply circuit 30 and the second power supply circuit 40 respectively, thereby improving the safety of power supply and enhancing the vehicle's safety integrity level.

[0052] In one embodiment, the load may include conventional loads and safety loads. Conventional loads can be understood as loads without functional safety requirements, while safety loads can be understood as loads with functional safety requirements. Conventional loads may include QM-level loads such as horns and audio systems of the vehicle, while safety loads may include electrical equipment with functional safety requirements, such as Electronic Stability Program (ESP), Electronic Park Brake (EPB), and Electronic Power Steering (EPS).

[0053] Please see Figure 2 and Figure 3 In one embodiment, loads 8n-1 and 8n-2 can be understood as two power supply interfaces for the safety load 8n. The power supply device can connect one or more safety loads, such as safety loads 81 to 8n. The two power supplies for the safety loads are provided by the first power supply circuit 30 and the second power supply circuit 40, respectively. The safety load has at least two power supply interfaces, a first end and a second end. The outputs of the first power supply circuit 30 and the second power supply circuit 40 of the power supply device 1 are connected to the first and second power supply interfaces, respectively, to supply power to the safety load. In other words, the safety load supports at least two power supplies, with the interfaces being the first and second ends, respectively, giving the safety load power redundancy and effectively ensuring the power supply safety and reliability of the safety load, thereby improving the vehicle's complete integrity level. The conventional load has at least one power supply interface. The output of the first power supply circuit 30 or the output of the second power supply circuit 40 of the power supply device 1 is connected to the power supply interface of the conventional load. In other words, the conventional load supports at least one power supply.

[0054] Please see Figure 2 Of course, as some optional methods, loads 9n-1 and 9n-2 can be understood as conventional loads 9n having two safety interfaces, and the power supply device can connect one or more safety loads, such as 9n. The two interfaces of the conventional load are respectively connected to the output terminals of the first power supply circuit 30 and the second power supply circuit 40 of the power supply device 1 to improve the reliability of power supply to the conventional load.

[0055] In one embodiment, the output terminals of the first power supply circuit 30 and the second power supply circuit 40 both include power supply interfaces. The power supply interfaces can be the same or similar, or they can be configured according to the load used in the actual situation so that they can match the corresponding load.

[0056] In one embodiment, the first power supply is a low-voltage power supply 60. The low-voltage power supply 60 can be directly connected to the second power supply circuit 40, and the functional safety integrity level of the low-voltage power supply 60 is Class B.

[0057] Please see Figure 2 and Figure 3 In one embodiment, the second power supply includes a voltage conversion unit 50, the input of which is configured to be connected to a high-voltage battery 51. The high-voltage battery 51 is a high-voltage power battery that provides power output to the vehicle. The voltage conversion unit 50 converts the high voltage of the high-voltage battery 51 into a low voltage suitable for the load, which, together with the low-voltage power supply 60, supplies power to the low-voltage load of the vehicle, improving the reliability of the low-voltage load power supply. The high-voltage conversion unit can be a DC-DC converter circuit, so that the high-voltage DC power from the high-voltage battery 51 is converted into the low-voltage DC power required by the low-voltage load.

[0058] When the first or second power supply fails, the load can still be powered by the first power supply circuit 30 and / or the second power supply circuit 40, thereby improving the safety of power supply and enhancing the vehicle's safety integrity level.

[0059] Please see Figure 2 and Figure 3 In one embodiment, the second end of the first power supply circuit 30 is connected to the second end of the second power supply circuit 40, so that the first power supply is connected to the second power supply, that is, the voltage conversion unit 50 is connected to the low-voltage power supply 60. Through the voltage conversion unit 50, the first power supply circuit 30 and the second power supply circuit 40, the high-voltage battery 51 can charge and replenish the low-voltage power supply 60, ensuring the stability of the power of the low-voltage power supply 60 and fulfilling the function of the low-voltage power supply 60.

[0060] Please see Figure 2 and Figure 3 In one embodiment, the power supply device 1 includes a disconnect switch 70, the two ends of which are respectively connected to the second terminals of the first power supply circuit 30 and the second power supply circuit 40. When the first electronic fuse 11 or the second electronic fuse 21 fails to disconnect or the fault cannot be resolved, the disconnect switch 70 disconnects the first power supply circuit 30 and the second power supply circuit 40. This allows the first power supply circuit 30 or the second power supply circuit 40 to independently supply power to the load, meeting the need for redundancy backup and improving the safety and reliability of the power supply function.

[0061] Please see Figure 3In this embodiment, when a short-circuit fault occurs in the load, redundancy is provided using a disconnecting switch 70 and either a first electronic fuse 11 or a second electronic fuse 21. For example, if a short circuit occurs in the circuit of load 8n-1 connected to the first electronic fuse 11, the first electronic fuse 11 is first disconnected, and the low-voltage power supply 60 and / or voltage conversion unit 50 supply power to load 8n through the 8n-2 circuit. If the first electronic fuse 11 fails or fails to disconnect in time, the disconnecting switch 70 is disconnected, and the low-voltage power supply 60 supplies power to load 82-2 in a single circuit to meet the power supply needs of load 8n. The disconnecting switch 70 and the first electronic fuse 11, as well as the disconnecting switch 70 and the second electronic fuse 21, all meet the independence requirements. The functional safety integrity level of the first electronic fuse 11 and the second electronic fuse 21 is Class B, and the disconnecting switch 70 meets the full functional integrity level of Class B, so the overall functional safety integrity level is Class D.

[0062] When a short circuit occurs inside the first or second power supply, i.e., when a short circuit occurs inside the voltage conversion unit 50 or the low-voltage power supply 60, the internal switch of the faulty power supply is disconnected, and the isolating switch 70 is used as a backup. That is, if the internal switch of the faulty power supply cannot be disconnected in time, the isolating switch 70 is disconnected, and the load is powered through another non-faulty power supply. The isolating switch 70, the first power supply, the isolating switch 70 and the second power supply all meet the independence requirements. The functional safety integrity level of the first power supply and the second power supply is Class B, and the isolating switch 70 meets the functional complete integrity level of Class B. Therefore, the overall functional safety integrity level is Class D.

[0063] When a grid overvoltage fault occurs, i.e., when the output voltage of voltage conversion unit 50 is too high, the internal switch of the high-voltage conversion unit is cut off, and the load is powered by low-voltage power supply 60 through the first power supply circuit 30 and the second power supply circuit 40. If the internal switch of the high-voltage conversion unit cannot be disconnected in time, the isolating switch 70 is disconnected as a backup, and the low-voltage power supply 60 supplies power to the load separately through the second power supply circuit 40. The isolating switch 70 and the first power supply meet the independence requirements. The functional safety integrity level of the high-voltage conversion unit is B, the functional safety integrity level of the isolating switch 70 is B, and the overall functional safety integrity level is D.

[0064] When the voltage conversion unit 50 or the low-voltage power supply 60 is open-circuited, the single power supply open-circuit functional safety integrity level is B, and another power supply is used as a backup to meet the overall functional safety integrity level of D.

[0065] The failure analysis above shows that the entire power supply device 1 improves the reliability of the power distribution network, supports the realization of the vehicle's ASILD function, effectively ensures the stable power supply to the load, and lays a good power distribution network foundation for autonomous driving.

[0066] In one embodiment, the disconnect switch 70 is signal-connected to the switch controller 20. The switch controller 20 controls the disconnect switch 70, thereby controlling the connection and disconnection between the first power supply circuit 30 and the second power supply circuit 40, effectively improving the safety and reliability of the power supply function.

[0067] In one embodiment, the functional safety integrity level of the voltage conversion unit 50 is Class B. The voltage conversion unit 50 is a DC-DC conversion circuit. The DC-DC conversion circuit follows strict automotive safety standards during its design, development and verification process. It has undergone rigorous verification in terms of hardware, software and system integration to ensure that the functional safety integrity level of the DC-DC conversion circuit is Class B. Thus, under the premise of meeting other redundancy design requirements, the power supply device 1 can be an ASILD.

[0068] In one embodiment, the functional safety integrity level of the low-voltage power supply 60 is Class B to ensure that parameters such as voltage stability, capacity retention, and internal resistance of the low-voltage power supply 60 meet the standards. The Class B functional safety integrity levels of both the voltage conversion unit 50 and the low-voltage power supply 60 ensure the functional safety integrity of the power supply device 1, thereby meeting the overall safety requirements of the vehicle, improving the security of the power distribution network, and satisfying the power distribution needs of autonomous driving.

[0069] In one embodiment, the load includes a load 81, which is a vehicle electronic stability program (ESP). The first terminal of the ESP is connected to the output terminal of the first power supply circuit 30, and the second terminal of the ESP is connected to the output terminal of the second power supply circuit 40. The ESP is a part of active vehicle safety and an indispensable component of autonomous driving. The output terminals of the first power supply circuit 30 and the second power supply circuit 40 are respectively connected to the first and second terminals of the ESP, effectively ensuring the reliability of the ESP power supply and guaranteeing driving safety.

[0070] In one embodiment, the load includes a load 82, which is an electronic parking brake system. The electronic parking brake system includes a first terminal and a second terminal. The first terminal of the electronic parking brake system is connected to the output terminal of a first power supply circuit 30, and the second terminal of the electronic parking brake system is connected to the output terminal of a second power supply circuit 40. The electronic parking brake system achieves parking braking through electronic control and is a crucial part of autonomous driving. By connecting the output terminals of the first power supply circuit 30 and the second power supply circuit 40 to the first and second terminals of the electronic parking brake system respectively, the reliability of the power supply to the electronic parking brake system is effectively ensured, thereby guaranteeing driving safety.

[0071] In one embodiment, the load includes an autonomous driving domain controller 10. The autonomous driving domain controller 10 includes a first terminal and a second terminal. The first terminal of the autonomous driving controller is connected to the output terminal of a first power supply circuit 30, and the second terminal of the autonomous driving controller is connected to the output terminal of a second power supply circuit 40. The autonomous driving domain controller 10 is a crucial component in autonomous driving, enabling vehicle perception and control. The power supply device 1 provides a dual power supply circuit to the autonomous driving domain controller 10, effectively ensuring the power supply safety and reliability of the autonomous driving domain controller 10, and thus guaranteeing driving safety.

[0072] In one embodiment, the load includes a redundant first load and a second load. The first and second ends of the first load are respectively connected to the output terminals of the first power supply circuit 30 and the second power supply circuit 40. Similarly, the first and second ends of the second load are also connected to the output terminals of the first power supply circuit 30 and the second power supply circuit 40. By providing separate power to the first and second loads, it is possible to effectively ensure that if a load fails in its own operation or its power supply circuit fails, the redundant load can effectively take over its function, thereby ensuring the load can perform its function and improving driving safety.

[0073] The second aspect of this utility model provides a power supply system, including the power supply device 1, low-voltage power supply 60, voltage conversion unit 50, and high-voltage battery 51 as described above; the output terminal of the low-voltage power supply 60 is connected to the first terminal of the first power supply circuit 30; the output terminal of the voltage conversion unit 50 is connected to the first terminal of the second power supply circuit 40; and the output terminal of the high-voltage battery 51 is connected to the input terminal of the voltage conversion unit 50.

[0074] The power supply system provided in this application is applicable to vehicles requiring electric drive, which may include road vehicles, water vehicles, air vehicles, industrial equipment, agricultural equipment, or recreational equipment. For example, a vehicle may be a car, in a broad sense, including transportation vehicles (such as commercial vehicles, passenger cars, motorcycles, flying cars, trains, etc.), industrial vehicles (such as forklifts, trailers, tractors, etc.), engineering vehicles (such as excavators, bulldozers, cranes, etc.), agricultural equipment (such as lawnmowers, harvesters, etc.), amusement equipment, toy vehicles, etc. This application does not specifically limit the type of vehicle. Furthermore, the vehicle may be an airplane or a ship. For example, the vehicles in this application may include pure electric vehicles (PEV / BEV), hybrid electric vehicles (HEV), range-extended electric vehicles (REEV), plug-in hybrid electric vehicles (PHEV), or new energy vehicles (NEV), etc.

[0075] A third aspect of this utility model provides a vehicle including the power supply device 1 described in any of the above descriptions. The power supply device 1 supplies power to the low-voltage loads of the vehicle, effectively ensuring the reliability and stability of the power supply and guaranteeing that the low-voltage loads can perform their functional roles. The vehicle also includes structures and systems such as a drive mechanism and a control system; please refer to existing vehicles for details, which will not be elaborated upon in this application.

[0076] Vehicles can include pure electric vehicles (PEV / BEV), hybrid electric vehicles (HEV), range-extended electric vehicles (REEV), plug-in hybrid electric vehicles (PHEV), or new energy vehicles (NEV), etc.

[0077] The power supply device 1 of this application has a first power supply circuit 30 and a second power supply circuit 40 connected to a first power source and a second power source, respectively. The output terminals of the first power supply circuit 30 and the second power supply circuit 40 are connected to the first and second terminals of the load, respectively. This allows the other power supply circuit to be switched when either the first power supply circuit 30 or the second power supply circuit 40 fails, improving the safety of the power supply function. The second terminal of the first power supply circuit 30 is connected to the second terminal of the second power supply circuit 40. When either the first or second power source fails, the load can still be powered through the first power supply circuit 30 and the second power supply circuit 40, respectively, thereby improving the safety of power supply and enhancing the vehicle's safety integrity level. The output terminal of the first power supply circuit 30 is connected to the first terminal of the load through a first electronic fuse 11, and the output terminal of the second power supply circuit 40 is connected to the second terminal of the load through a second electronic fuse 21. The first electronic fuse 11 and the second electronic fuse 21 are controlled by the domain controller 10 and the switch controller 20, respectively, which can promptly disconnect the power supply circuit from the load. This effectively ensures that the first electronic fuse 11 or the second electronic fuse 21 can be disconnected in time when the load fails, improving the safety of the power supply function. The power supply device 1 of this application provides redundant backup for the load power supply network. Failure analysis shows that it meets ASILD functional safety standards and can support the power distribution needs of L3 and above intelligent driving. Therefore, this utility model effectively overcomes some practical problems in the prior art, thus having high utilization value and significance.

[0078] The above embodiments are merely illustrative of the principles and effects of this utility model and are not intended to limit the scope of this utility model. Any person skilled in the art can modify or alter the above embodiments without departing from the spirit and scope of this utility model. Therefore, all equivalent modifications or alterations made by those skilled in the art without departing from the spirit and technical concept disclosed in this utility model should still be covered by the claims of this utility model.

Claims

1. A power supply device characterized by comprising: include: The domain controller (10) is connected to a first electronic fuse (11); The switch controller (20) is connected to a second electronic fuse (21) for signal connection; A first power supply circuit (30) is configured to be connected to a first power source, and the output of the first power supply circuit (30) is connected to the first end of the load through the first electronic fuse (11). The second power supply circuit (40) has a first end configured to be connected to a second power source, and a second end configured to be connected to the second end of the first power supply circuit (30); the output end of the second power supply circuit (40) is configured to be connected to the second end of the load via the second electronic fuse (21).

2. The power supply device according to claim 1, characterized in that, The second power supply is a low-voltage power supply (60).

3. The power supply device according to claim 2, characterized in that, The first power supply includes a voltage conversion unit (50), the input of which is configured to be connected to a high-voltage battery (51).

4. The power supply device according to claim 1, 2 or 3, characterized in that, include: A disconnecting switch (70) is provided, the two ends of which are respectively connected to the second end of the first power supply circuit (30) and the second end of the second power supply circuit (40).

5. The power supply device according to claim 4, characterized in that, The isolating switch (70) is signal-connected to the switch controller (20).

6. The power supply device according to claim 3, characterized in that, The functional safety integrity level of the voltage conversion unit (50) is Class B; the functional safety integrity level of the low-voltage power supply (60) is Class B.

7. The power supply device according to claim 4, characterized in that, The load includes a vehicle electronic stability system, the first end of which is connected to the output of the first power supply circuit (30), and the second end of which is connected to the output of the second power supply circuit (40).

8. The power supply device according to claim 4, characterized in that, The load includes an electronic parking brake system, which includes a first end and a second end. The first end of the electronic parking brake system is connected to the output end of a first power supply circuit (30), and the second end of the electronic parking brake system is connected to the output end of a second power supply circuit (40).

9. The power supply device according to claim 4, characterized in that, The load includes an autonomous driving domain controller (10), which includes a first terminal and a second terminal. The first terminal of the autonomous driving domain controller is connected to the output terminal of a first power supply circuit (30), and the second terminal of the autonomous driving domain controller is connected to the output terminal of a second power supply circuit (40).

10. The power supply device according to claim 4, characterized in that, The load includes a first load and a second load that are redundant with each other. The first end and the second end of the first load are respectively connected to the output end of the first power supply circuit (30) and the output end of the second power supply circuit (40). The first end and the second end of the second load are respectively connected to the output end of the first power supply circuit (30) and the output end of the second power supply circuit (40).

11. A power supply system, characterized in that, include: The power supply device according to any one of claims 1 to 10; A low-voltage power supply (60) is provided, the output terminal of which is connected to the first terminal of the first power supply circuit (30). A voltage conversion unit (50) is provided, the output terminal of which is connected to the first terminal of the second power supply circuit (40). A high-voltage battery (51) is provided, the output terminal of which is connected to the input terminal of the voltage conversion unit (50).

12. A vehicle, characterized in that, It includes the power supply device (1) according to any one of claims 1 to 10.

Images