Multi-domain power protection system and vehicle

By integrating surge protection modules, power protection control modules, and reverse connection protection modules, the complexity and cost issues of power protection systems for MCU and SOC control domains are resolved, achieving protection and isolation of power supplies in multiple domains and improving the reliability and safety of the system.

CN224385063UActive Publication Date: 2026-06-19Z-ONE TECH CO LTD

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Utility models(China)
Current Assignee / Owner
Z-ONE TECH CO LTD
Filing Date
2025-03-11
Publication Date
2026-06-19

AI Technical Summary

Technical Problem

In the existing technology, the power protection system design for the two control domains of MCU and SOC is complex and costly, which increases the system complexity and makes it impossible to effectively isolate and protect control domains with different safety levels.

Method used

It adopts an integrated surge protection module, power protection control module and reverse connection protection module, which are used to prevent surge current, monitor power status and prevent reverse connection, respectively. The protection and isolation of multi-domain power is achieved through components such as TVS diodes, power protection controllers and MOSFETs.

Benefits of technology

It simplifies circuit design, reduces the number of components and costs, ensures that the high-safety-level MCU domain is unaffected by SOC domain failures, and improves system reliability and security.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN224385063U_ABST
    Figure CN224385063U_ABST
Patent Text Reader

Abstract

This utility model discloses a multi-domain power protection system and vehicle. The system includes: a surge protection module electrically connected to an external power input to prevent surge current caused by a sudden increase in power supply voltage; a power protection control module electrically connected to the external power input to monitor the power supply status and implement overcurrent protection, overvoltage protection, and undervoltage protection; and a reverse connection protection module electrically connected to the power protection control module and an external load. The reverse connection protection module includes a first reverse connection protection unit and a second reverse connection protection unit. The load includes a safety domain load and an entertainment domain load. The first reverse connection protection unit is electrically connected to the safety domain load, and the second reverse connection protection unit is electrically connected to the entertainment domain load. This utility model can achieve protection and isolation of multi-domain controlled input power supplies.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This utility model relates to the field of automotive electronics technology, and in particular to a multi-domain power protection system and vehicle. Background Technology

[0002] In the design of the central control computer, an MCU (Microcontroller Unit) and a SoC (System-on-a-Chip) are used to manage two control domains respectively. The MCU is responsible for the security domain's computation and gateway functions, requiring a high level of security, while the SoC handles entertainment information and has lower security requirements. Because these two domains have different security needs and functional positioning, the design needs to address how to control costs and improve performance while ensuring system reliability and security.

[0003] Existing technologies typically employ two independent power input protection systems: one for the MCU and one for the SOC. This aims to achieve effective isolation and ensure reliability between the two control domains. The MCU, as the safety domain controller, needs to protect against various power failures and therefore has dedicated power protection measures to ensure stable operation under abnormal conditions. The SOC, as the entertainment / information domain, has relatively lower safety requirements, thus its protection measures can be simplified. While this design approach guarantees safety and reliability, it also increases system complexity and cost due to the need for additional power protection devices and circuit designs, making the overall architecture more complex and expensive. Utility Model Content

[0004] To address the aforementioned technical problems, this utility model provides a multi-domain power protection system and vehicle, which can realize the protection and isolation of multi-domain controlled input power.

[0005] A first aspect of this utility model provides a multi-domain power protection system, comprising:

[0006] The surge protection module is electrically connected to the external power input to prevent surge current caused by a sudden increase in power supply voltage.

[0007] The power protection control module is electrically connected to the external power input and is used to monitor the power status and implement overcurrent protection, overvoltage protection and undervoltage protection.

[0008] A reverse connection protection module is electrically connected to the power protection control module and an external load. The reverse connection protection module includes a first reverse connection protection unit and a second reverse connection protection unit. The load includes a safety domain load and an entertainment domain load. The first reverse connection protection unit is electrically connected to the safety domain load, and the second reverse connection protection unit is electrically connected to the entertainment domain load.

[0009] In one possible implementation, the surge protection module is configured as a TVS diode.

[0010] In one possible implementation, a first EMC capacitor is provided between the power input and the power protection control module.

[0011] In one possible implementation, the power protection control module includes a power protection controller, which includes:

[0012] The first pin is electrically connected to an external power supply and is used to detect the input voltage of the external power supply in order to control the opening or closing of the reverse connection protection module.

[0013] The second pin is electrically connected to the first reverse connection protection unit and is used to drive the first reverse connection protection unit.

[0014] The third pin is used for current detection via a resistor.

[0015] The fourth pin is electrically connected to the second reverse connection protection unit and is used to drive the first reverse connection protection unit.

[0016] In one possible implementation, the first reverse connection protection unit includes a reverse-connection protection NMOS;

[0017] The drain of the anti-reverse NMOS is electrically connected to an external power supply;

[0018] The source of the anti-reverse NMOS is electrically connected to the second anti-reverse connection unit and the safe domain load;

[0019] The gate of the anti-reverse NMOS is electrically connected to the second pin.

[0020] In one possible implementation, the source of the anti-reverse NMOS is electrically connected to the safe domain load via a Schottky diode.

[0021] In one possible implementation, the second reverse connection protection unit includes a shut-off NMOS;

[0022] The source of the NMOS that is turned off is electrically connected to the first reverse connection protection unit;

[0023] The drain of the NMOS transistor is connected to the entertainment domain load.

[0024] The gate of the NMOS that is turned off is electrically connected to the fourth pin.

[0025] In one possible implementation, the drain of the turn-off NMOS is electrically connected to the entertainment domain load via a power filter.

[0026] In one possible implementation, a second EMC capacitor is provided between the power filter and the turn-off NMOS, and a third EMC capacitor is provided between the power filter and the entertainment domain load.

[0027] A second aspect of this utility model is to provide a vehicle that includes a multi-domain power protection system as described in any one of the first aspects above.

[0028] This invention integrates a surge protection module, a power protection control module, and a reverse connection protection module, enabling power protection for multiple domains (such as a security domain and an entertainment domain) within a single system. This simplifies circuit design and reduces the number of components and costs. Simultaneously, the first and second reverse connection protection units in the reverse connection protection module protect the security domain and the entertainment domain respectively, ensuring that even if the entertainment domain fails, the normal operation of the high-security-level security domain will not be affected, thus improving the system's reliability and safety. Attached Figure Description

[0029] Figure 1 This is a structural schematic diagram of an embodiment of the present utility model.

[0030] Figure 2 This is a circuit diagram of one embodiment of the present invention.

[0031] Figure descriptions: 1. Surge protection module; 2. Power protection control module; 3. Reverse connection protection module; 31. First reverse connection protection unit; 32. Second reverse connection protection unit. Detailed Implementation

[0032] The technical solutions of the present utility model will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of the present utility model, and not all embodiments. Based on the embodiments of the present utility model, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of the present utility model.

[0033] It should be understood that the terms "first," "second," and "third," etc., in the claims, specification, and drawings of this disclosure are used to distinguish different objects, not to describe a specific order. The terms "comprising" and "including" as used in the specification and claims of this disclosure indicate the presence of a described feature, integral, step, operation, element, and / or component, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or collections thereof. It should also be understood that the terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to limit this disclosure.

[0034] Reference Figure 1The present invention provides a multi-domain power protection system, which includes a surge protection module 1, a power protection control module 2, and a reverse connection protection module.

[0035] Surge protection module 1 is electrically connected to the external power input to prevent surge current caused by a sudden increase in power supply voltage. Specifically, surge protection module 1 can use clamping diodes to absorb high-voltage transient currents and prevent surge current from damaging the circuit; it can also use varistors (MOVs) to reduce impedance when the voltage rises instantaneously, thereby dispersing excess electrical energy; or it can use gas discharge tubes (GDTs) to quickly conduct and release current when a surge occurs. In addition, surge protection module 1 can be combined with multiple of the above-mentioned protection devices, through parallel or series connection, to achieve a wider voltage range and higher protection effect.

[0036] The power protection control module 2 is electrically connected to the external power input and is used to monitor the power supply status and implement overcurrent, overvoltage, and undervoltage protection. Specifically, the power protection control module 2 can use a power protection IC (such as LM74910-Q1) to monitor the power supply status and provide overcurrent, overvoltage, and undervoltage protection functions; it can also use a microcontroller (MCU) or PMIC (power management IC) with intelligent power management functions to dynamically monitor voltage and current and shut down the power supply in case of abnormalities; in addition, it can also use an external MOSFET in conjunction with the monitoring circuit, combined with current sensing resistors, voltage monitoring circuits, etc., to achieve multi-level protection. The power protection control module 2 can also integrate a self-resetting fuse or circuit breaker to automatically restore power supply in the event of a fault, further improving the safety and stability of the system.

[0037] The reverse connection protection module 3 is electrically connected to the power protection control module and the external load. The reverse connection protection module 3 includes a first reverse connection protection unit 31 and a second reverse connection protection unit 32. The load includes a safety domain load and an entertainment domain load. The first reverse connection protection unit 31 is electrically connected to the safety domain load, and the second reverse connection protection unit 32 is electrically connected to the entertainment domain load.

[0038] Specifically, the reverse connection protection module can use MOSFETs (such as N-channel MOSFETs) as active reverse connection protection components, which are controlled to turn on or off by the power protection control module 2. When a reverse connection is detected, the MOSFET quickly disconnects the circuit to prevent current backflow. Passive components such as Schottky diodes can also be used to prevent current from flowing when a reverse connection occurs, while reducing voltage loss. The reverse connection protection module can be configured with multiple reverse connection protection units (such as the first reverse connection protection unit 31 and the second reverse connection protection unit 32) to protect the safety domain, entertainment domain, or other domains respectively, ensuring the normal operation of each load under different power conditions and avoiding damage caused by reverse connection.

[0039] The multi-domain power protection system described in this embodiment achieves protection and isolation of multiple domain-controlled input power supplies through the coordinated operation of surge protection module 1, power protection control module 2, and reverse connection protection module 3. Surge protection module 1 first protects the circuit from transient high voltage surges, ensuring the stability of the power input; power protection control module 2 monitors voltage and current in real time, providing overcurrent, overvoltage, and undervoltage protection to ensure the safety of power supply to each domain; reverse connection protection module 3, through independent reverse connection protection units allocated to the safety domain and entertainment domain, avoids damage caused by reverse power connection, while ensuring that the safety domain continues to operate normally even if the entertainment domain fails. In this way, the system can effectively protect loads of different safety levels and guarantee power isolation and independence between domains.

[0040] Furthermore, refer to Figure 2 As an embodiment of this utility model, the surge protection module 1 is configured as a TVS diode.

[0041] Specifically, surge protection module 1 implements surge protection through a TVS diode (transient voltage suppressor diode, such as D1). It is connected in parallel to the power input line. When the power supply voltage is within the normal range, the TVS diode exhibits high resistance and does not affect circuit operation. However, when a transient high voltage or surge current occurs, the TVS diode quickly conducts, guiding the excessive current to ground, thereby protecting other components in the circuit from high voltage damage. This design effectively absorbs voltage transients, preventing damage to subsequent circuits due to voltage rise at the power input terminal, and improving system reliability and safety.

[0042] Furthermore, as one embodiment of this utility model, the power protection control module includes a power protection controller, and the power protection controller has a first pin, a second pin, a third pin, and a fourth pin.

[0043] The first pin is electrically connected to an external power supply and is used to detect the input voltage of the external power supply to control the opening or closing of the reverse connection protection module 3. Specifically, the first pin is pin A, which is directly connected to the external power supply input terminal to detect the voltage status of the input power supply. By monitoring the input voltage of the power supply, pin A can determine whether the power supply is in a normal working state. When the input voltage is too low, too high, or reversed, pin A will send a signal to the power protection controller to trigger the protection mechanism. Based on the detected voltage status, pin A can control the opening or closing of the reverse connection protection module 3 (including the first reverse connection protection unit 31 and the second reverse connection protection unit 32), ensuring that the system can cut off the power supply in time in the event of abnormal voltage or reverse connection, avoiding damage to the circuit. The function of this pin is to ensure the stability of the power supply by monitoring the power input, and to drive the reverse connection protection unit in cooperation with other pins to ensure the safe operation of the circuit.

[0044] The second pin is electrically connected to the first reverse connection protection unit 31 and is used to drive the first reverse connection protection unit 31. Specifically, the second pin is the DGATE pin, which is connected to the gate of the first reverse connection protection unit 31 (such as M1) in the power protection controller. Its main function is to control the conduction and shutdown of the first reverse connection protection unit 31. Specifically, the DGATE pin controls the switching state of the MOSFET by driving its gate. When the power input is normal, the DGATE pin outputs a signal to turn on the MOSFET, allowing current to flow normally. When a reverse connection or other abnormal power condition is detected, the DGATE pin sends a signal to turn off the MOSFET, preventing current flow and thus protecting subsequent circuits from damage. Therefore, the function of the DGATE pin is to control the state of the reverse connection protection unit to ensure that the circuit cuts off the current in time when the power supply is abnormal, avoiding the impact of reverse connection on the circuit.

[0045] The third pin uses a resistor for current sensing; specifically, the third pin is a circuit detection pin consisting of the CS+ and CS- pins. The CS+ and CS- pins are connected to the two ends of a current-sensing resistor (overcurrent resistor) to detect the voltage difference flowing through it. According to Ohm's law, the voltage difference across the current-sensing resistor is proportional to the current; therefore, these two pins can detect the actual current magnitude by measuring this voltage difference. The current signal is transmitted to the power protection controller through these two pins. The power protection controller determines whether an overcurrent or short circuit exists based on the detected current value. Once the current exceeds a set threshold, the power protection controller will take appropriate protective measures (such as turning off the MOSFET) to protect the circuit from overcurrent damage. Therefore, the main function of the current sensing pin is to achieve real-time monitoring of the current so as to trigger the circuit protection mechanism in abnormal situations.

[0046] The overcurrent resistor is used to limit the current flowing through the SOC power supply system, thus achieving overcurrent protection. When the SOC fails (such as a short circuit), the overcurrent resistor detects the abnormal current and quickly triggers the protection mechanism, causing the NMOS (M2) to shut down rapidly to prevent excessive current from damaging circuit components. It is worth noting that due to the presence of D2 in the design, even though M2 is off, the voltage and current flowing through D2 remain stable, ensuring that the power supply to the MCU system is unaffected. This design allows the MCU system to continue operating normally even in the event of a SOC system failure, improving the overall system reliability and fault tolerance, ensuring power isolation and independence between different control domains, and thus enhancing the stability of the circuit in complex operating environments.

[0047] The fourth pin is electrically connected to the second reverse connection protection unit 32 and is used to drive the first reverse connection protection unit 31. Specifically, the fourth pin can be set as the HGATE pin and connected to the gate of the second reverse connection protection unit 32 (such as M2) to control the switching state of the unit. The HGATE pin controls the conduction and shutdown of M2 by driving the gate of M2. When the power input is normal, the HGATE pin outputs a signal to turn on M2, allowing current to flow to the connected entertainment domain load, ensuring normal power supply to the entertainment domain; when an abnormal power supply or overcurrent is detected, the HGATE pin will turn off M2, cutting off the current and preventing the fault from affecting subsequent circuits. The function of the HGATE pin is to control the switch of the second reverse connection protection unit 32 to achieve power management and protection of the entertainment domain load, ensuring that the current path of the entertainment domain can be disconnected in time when the power supply is abnormal, thereby preventing the fault from spreading to other areas.

[0048] Furthermore, the power protection controller also includes an OV pin, a UVLO pin, a SW pin, a CAP pin, a VS pin, a C pin, an ISCP pin, and an OUT pin.

[0049] The OV pin (Over Voltage detection pin) senses the input power supply voltage level through a voltage divider network (including resistor R3). When the input voltage rises above a set threshold, the voltage divider network generates a corresponding high-voltage signal on the OV pin. The power protection controller detects this signal, determines that the power supply is overvoltage, and takes protective measures, such as shutting down the MOSFET to prevent overvoltage damage to the circuit. Therefore, the OV pin is connected to the power input through a voltage divider resistor network and grounded to detect overvoltage and trigger the protection mechanism.

[0050] The UVLO (Under-Voltage Lockout) pin is connected to the power input via a voltage divider network to detect whether the input voltage is below a set threshold. Typically, a resistor divider is used to adjust the input voltage, allowing the UVLO pin to monitor the actual voltage level. When the power supply voltage drops below the set undervoltage threshold, the UVLO pin senses this and sends a signal to the power protection controller, indicating that the power supply voltage is too low. Upon receiving this signal, the controller locks the power supply, shuts down the MOSFET, or takes other protective measures to prevent system instability or damage due to undervoltage. The UVLO pin's function is to monitor the power supply voltage to ensure that the protection circuit is not damaged when the voltage is too low and to prevent unstable operation of the system under low voltage conditions.

[0051] The SW pin is connected to the power input-related nodes (OV pin, UVLO pin) via resistor R1 to monitor the voltage status of the power switching nodes or during switching. Through R1, the SW pin senses voltage changes and feeds them back to the power protection controller. The main function of the SW pin is to detect the voltage status of the power input or switching nodes through this connection, especially during switching operations. If an abnormal voltage or fluctuation is detected, the power protection controller can adjust or trigger protection mechanisms based on the feedback information to prevent voltage overshoot or overload during power switching from damaging the circuit. Therefore, the SW pin, connected via R1, plays a crucial role in monitoring and controlling voltage changes, ensuring the stability and safety of the system.

[0052] The CAP pin is connected to an external capacitor. The function of the CAP pin is to stabilize and filter the power supply, protecting the internal voltage of the controller and preventing voltage fluctuations or noise at the power input from interfering with the normal operation of the controller. By connecting the capacitor, the CAP pin can smooth transient voltage changes in the power supply, ensuring that the internal circuitry of the controller operates under stable voltage conditions. Therefore, the CAP pin is connected to a capacitor to filter and stabilize the voltage, improving system reliability.

[0053] The VC pin provides a stable operating voltage to the power protection controller, ensuring the proper functioning of its internal circuitry. This pin is typically connected to a regulated power supply or a filter network to guarantee a stable power supply. The C pin is associated with current sensing or feedback, helping the controller monitor current changes or dynamically adjust the power supply.

[0054] The primary function of the ISCP pin is to implement overcurrent protection. When the current exceeds the maximum allowable value, the controller sends a signal through this pin to trigger the protection mechanism, shutting down the corresponding switching element (such as a MOSFET), thereby preventing damage to the circuit from excessive current. This ensures that the circuit can respond quickly to faults such as overcurrent or short circuits, improving the reliability and safety of the system.

[0055] Furthermore, as one embodiment of this utility model, the first reverse connection protection unit 31 includes a reverse connection protection NMOS; the drain of the reverse connection protection NMOS is electrically connected to an external power supply; the source of the reverse connection protection NMOS is electrically connected to the second reverse connection protection unit and the safety domain load; and the gate of the reverse connection protection NMOS is electrically connected to the DGATE pin.

[0056] Specifically, the first reverse connection protection unit 31 consists of a reverse-biased NMOS (M1). The drain of M1 is connected to the external power input line, and the source of M1 is connected to the next stage's second reverse connection protection unit (such as M2) and the safety zone load. Thus, when M1 is turned on, current can flow from the drain to the source, thereby providing power to the safety zone load. If M1 is not turned on, current cannot flow to the safety zone, protecting the circuit.

[0057] The gate of M1 is connected to the power protection controller via the DGATE pin. The DGATE pin controls the switching state of M1. When the power input is normal (no reverse connection), the DGATE pin outputs a drive signal to turn on M1, allowing current to flow through M1 to power the load in the safety zone. When a reverse power connection is detected, the DGATE pin turns off M1, preventing current from flowing back to the load and other parts of the circuit, thus avoiding damage.

[0058] Furthermore, as one embodiment of this utility model, the source of the anti-reverse NMOS is electrically connected to the safe domain load through a Schottky diode.

[0059] Specifically, the source of the reverse-biased NMOS is connected to the anode of a Schottky diode, while the cathode of the Schottky diode is connected to the safe-field load. This connection method aims to increase protection against reverse power connection. Schottky diodes are characterized by low forward voltage drop and fast response, allowing current to flow in the forward direction while preventing current backflow when the power supply is reversed, thus further protecting the safe-field load.

[0060] When the power supply is normal, the reverse-biased NMOS is turned on, and current flows through the source of the reverse-biased NMOS and then through the Schottky diode to supply power to the load in the safety domain. When the power supply is reversed, the reverse-biased NMOS is turned off, and the Schottky diode prevents current from flowing back to the load, avoiding damage to the safety domain devices. This design ensures that the system's safety domain load is not affected by reverse current flow even when the power supply is reversed, thereby further improving the circuit's reliability and protection capabilities.

[0061] Furthermore, as one embodiment of this utility model, the second reverse connection protection unit 32 includes a shutdown NMOS; the source of the shutdown NMOS is electrically connected to the first reverse connection protection unit 31; the drain of the shutdown NMOS is electrically connected to the entertainment domain load; and the gate of the shutdown NMOS is electrically connected to the HGATE pin.

[0062] Specifically, the second reverse connection protection unit 32 consists of a shutdown NMOS (M2), with the source of M2 connected to the source of the first reverse connection protection unit 31 (i.e., reverse-connection protection NMOS M1). Thus, when M1 is on, the source of M2 can receive current from an external power supply. The drain of M2 is connected to the entertainment domain load; when M2 is on, current can flow from the source to the drain, thus providing power to the entertainment domain. The gate of M2 is connected to the HGATE pin of the power protection controller. The HGATE pin controls the switching state of M2. When the power input is normal, the HGATE pin sends a signal to drive M2 to turn on, allowing current to flow to the entertainment domain load; when the power supply is abnormal (such as reverse connection or overcurrent), the HGATE pin turns off M2, cutting off the current supply to the entertainment domain, thereby protecting the entertainment domain equipment from damage.

[0063] M1, as a reverse-biased NMOS, contains an internal body diode oriented from the source (S) to the drain (D). Even when M1 and M2 are off, the body diode of M1 can still conduct, allowing current to flow from the external power supply to D2. When the power supply is normal, current can be supplied to subsequent circuits through D2 without interruption of power supply due to the shutdown of M1 and M2.

[0064] This design ensures that a certain current flows to D2 even when M1 and M2 are not conducting, thus maintaining power supply continuity. This characteristic is crucial for maintaining system stability because it prevents a complete power interruption due to NMOS turn-off, ensuring that the load can still receive power even if the power supply is reversed or a fault occurs, thereby improving the circuit's reliability and fault tolerance. Therefore, even if M1 and M2 are off, D2 can still receive a stable power supply, ensuring the normal operation of the entire circuit.

[0065] Furthermore, as one embodiment of this utility model, the drain of the NMOS is electrically connected to the entertainment domain load through a power filter.

[0066] Specifically, current flows from the drain to the entertainment load. A power filter is added along this path primarily to filter out noise and instability in the power supply, ensuring power quality. The power filter consists of two 330uF filter capacitors C1 and C2, and a 22uH inductor L1. It can filter out high-frequency noise, reduce voltage fluctuations, smooth current, and ensure that the entertainment load operates under stable voltage and current.

[0067] Furthermore, as one embodiment of this utility model, a first EMC capacitor is provided between the power input and M1, a second EMC capacitor is provided between the power filter and the turn-off NMOS, and a third EMC capacitor is provided between the power filter and the entertainment domain load.

[0068] Specifically, the first EMC capacitor is connected between the power input and M1 to filter high-frequency noise and voltage fluctuations from the power supply, protecting subsequent circuits from external power interference and ensuring that M1 operates in a stable voltage environment. The second EMC capacitor is located between the power filter and the NMOS transistor; its function is to further smooth the current, reduce signal interference from the power filter to the NMOS transistor, and ensure that the NMOS transistor can accurately receive stable control signals. The third EMC capacitor is placed between the power filter and the entertainment load, primarily used to filter high-frequency noise in the power output, ensuring that the entertainment load receives a stable and clean current supply, and improving the operational stability and reliability of the equipment.

[0069] This utility model embodiment achieves effective protection and isolation of the input power supplies of two different control domains through a multi-domain power protection system, allowing the integration of two domain controllers with different safety levels within the same system. Specifically, the system ensures that the power supplies of a high-safety-level controller (such as an MCU) and a low-safety-level controller (such as a System-on-a-Chip) do not interfere with each other. Even if a serious fault occurs in the SOC (such as a short circuit or overcurrent), its impact on the power supply will not spread to the high-safety-level MCU system, thereby protecting the normal operation of critical safety functions. This design greatly enhances the system's reliability and fault tolerance, enabling the vehicle to continuously provide a stable power supply during operation, ensuring the independence and safety of each control domain, thus meeting the high standards of power management and system security requirements of modern automobiles. This utility model embodiment also discloses a vehicle. The vehicle includes the multi-domain power protection system described in any of the above embodiments.

[0070] This vehicle ensures effective protection and isolation between different control domains. Specifically, it integrates high-security controllers (such as MCUs) and low-security controllers (such as SOCs), using independent power protection mechanisms to ensure that these two control domains do not interfere with each other during power supply. This design not only improves system reliability and fault tolerance, enabling the vehicle to maintain normal MCU operation even in the event of an SOC failure, but also optimizes power efficiency, meeting the increasingly stringent power management and safety requirements of modern automobiles. Therefore, the vehicle can continuously provide a stable and secure power supply in complex operating environments, ensuring the normal operation of critical functions.

[0071] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0072] The above embodiments are only used to illustrate the technical solutions of this utility model, and are not intended to limit it. Although this utility model has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this utility model.

Claims

1. A multi-domain power protection system, characterized by, include: The surge protection module is electrically connected to the external power input to prevent surge current caused by a sudden increase in power supply voltage. The power protection control module is electrically connected to the external power input and is used to monitor the power status and implement overcurrent protection, overvoltage protection and undervoltage protection. A reverse connection protection module is electrically connected to the power protection control module and an external load. The reverse connection protection module includes a first reverse connection protection unit and a second reverse connection protection unit. The load includes a safety domain load and an entertainment domain load. The first reverse connection protection unit is electrically connected to the safety domain load, and the second reverse connection protection unit is electrically connected to the entertainment domain load.

2. The multi-domain power protection system of claim 1, wherein, The surge protection module is configured with a TVS diode.

3. The multi-domain power protection system of claim 1 or 2, wherein, A first EMC capacitor is provided between the power input and the power protection control module.

4. The multi-domain power protection system of claim 1 or 2, wherein, The power protection control module includes a power protection controller, and the power protection controller includes: The first pin is electrically connected to an external power supply and is used to detect the input voltage of the external power supply in order to control the opening or closing of the reverse connection protection module. The second pin is electrically connected to the first reverse connection protection unit and is used to drive the first reverse connection protection unit. The third pin is used for current detection via a resistor. The fourth pin is electrically connected to the second reverse connection protection unit and is used to drive the first reverse connection protection unit.

5. The multi-domain power protection system of claim 4, wherein, The first reverse connection protection unit includes a reverse-connection protection NMOS; The drain of the anti-reverse NMOS is electrically connected to an external power supply; The source of the anti-reverse NMOS is electrically connected to the second anti-reverse connection unit and the safe domain load; The gate of the anti-reverse NMOS is electrically connected to the second pin.

6. The multi-domain power protection system according to claim 5, characterized in that, The source of the anti-reverse NMOS is electrically connected to the safe domain load via a Schottky diode.

7. The multi-domain power protection system of claim 4, wherein, The second reverse connection protection unit includes a shut-off NMOS; The source of the NMOS that is turned off is electrically connected to the first reverse connection protection unit; The drain of the NMOS transistor is connected to the entertainment domain load. The gate of the NMOS that is turned off is electrically connected to the fourth pin.

8. The multi-domain power protection system of claim 7, wherein, The drain of the NMOS transistor is electrically connected to the entertainment load via a power filter.

9. The multi-domain power protection system of claim 8, wherein, A second EMC capacitor is provided between the power filter and the turn-off NMOS, and a third EMC capacitor is provided between the power filter and the entertainment domain load.

10. A vehicle characterized by comprising: The vehicle includes a multi-domain power protection system as described in any one of claims 1-9.