Safety control system of vehicle and vehicle

Abstract

The application provides a safety control system of a vehicle and the vehicle. The safety control system comprises a power supply circuit, a power management circuit, a driving circuit, a main control circuit and a conversion circuit. The power supply circuit is configured to obtain electric energy from a motor of the vehicle and output a first power supply signal. The power management circuit is configured to be connected to a second power supply signal of the vehicle and connected to the power supply circuit. The driving circuit is connected to the power management circuit and configured to drive the motor. The main control circuit is connected to the driving circuit and the power management circuit. The conversion circuit is connected to the power supply circuit and the driving circuit respectively, and is further configured to be connected to the second power supply signal. The safety control system provided by the application can improve the safety level and enhance the safety performance of the vehicle.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to a vehicle safety control system and a vehicle. Background Technology

[0002] With the development of new energy vehicles, the complexity of motor controllers has increased, their functions have become more sophisticated, and the number of hardware components within them has also increased. To prevent unexpected safety accidents caused by systemic failures, random hardware malfunctions, and other factors, functional safety requirements for vehicles have emerged. Existing functional safety control systems have simple power supply methods and low safety levels, necessitating a safety control system that can improve safety levels. Utility Model Content

[0003] This application provides a vehicle safety control system and a vehicle, which can improve the safety level of the safety control system and enhance the safety performance of the vehicle.

[0004] To solve the above-mentioned technical problems, one technical solution adopted in this application is: to provide a vehicle safety control system, which includes a power supply circuit, a power management circuit, a drive circuit, a main control circuit, and a conversion circuit. The power supply circuit is configured to obtain electrical energy from the vehicle's motor and output a first power supply signal; the power management circuit is configured to receive a second power supply signal from the vehicle and is connected to the power supply circuit; the drive circuit is connected to the power management circuit and is configured to drive the motor; the main control circuit is connected to the drive circuit and the power management circuit; and the conversion circuit is connected to both the power supply circuit and the drive circuit, and is also configured to receive the second power supply signal.

[0005] In one embodiment, the conversion circuit includes: a first DC-DC conversion circuit connected to the power supply circuit and configured to receive a second power supply signal; and a second DC-DC conversion circuit connected to the first DC-DC conversion circuit and the drive circuit.

[0006] In one embodiment, the safety control system further includes: a logic circuit connected to the power management circuit, the main control circuit, and the drive circuit, respectively. The logic circuit is configured to control the drive circuit based on the control signal of the power management circuit or the main control circuit, so that the motor enters a safe state.

[0007] In one embodiment, the logic circuit is also connected to the conversion circuit.

[0008] In one embodiment, the safety control system further includes a buffer circuit, which is connected to the power management circuit, the main control circuit, the logic circuit, and the drive circuit respectively. The buffer circuit is configured to control the drive circuit based on the control signal of the main control circuit or the output state of the logic circuit, so that the motor enters different safety states.

[0009] In one embodiment, the buffer circuit is also connected to the conversion circuit.

[0010] In one embodiment, the safety control system further includes a speed detection circuit, which is connected to the main control circuit, the power management circuit, and the conversion circuit, and is connected to the motor. The speed detection circuit is used to detect the speed of the motor and feed back the speed signal to the main control circuit.

[0011] In one embodiment, the safety control system further includes a fault detection circuit, which is connected to the main control circuit power management circuit and conversion circuit, and connected to the motor. The fault detection circuit is used to detect the status of the motor and feed back a fault signal to the main control circuit.

[0012] In one embodiment, the safety control system further includes a redundant main control circuit connected to the drive circuit and the power management circuit. The redundant main control circuit is configured to replace the main control circuit in performing control operations when the main control circuit fails.

[0013] To solve the above-mentioned technical problems, another technical solution adopted in this application is to provide a vehicle that includes the above-mentioned safety control system.

[0014] The beneficial effects of this application are as follows: The safety control system of this application includes a power supply circuit, a power management circuit, a drive circuit, a main control circuit, and a conversion circuit. The power supply circuit is configured to obtain electrical energy from the vehicle's motor and output a first power supply signal; the power management circuit is configured to receive the vehicle's second power supply signal and is connected to the power supply circuit; the drive circuit is connected to the power management circuit and configured to drive the motor; the main control circuit is connected to both the drive circuit and the power management circuit; the conversion circuit is connected to both the power supply circuit and the drive circuit, and is also configured to receive the second power supply signal. The power supply for the conversion circuit of this application can be the vehicle's power supply system or the power supply circuit, i.e., the vehicle's motor. The power supply for the power management circuit can be the vehicle's power supply system or the vehicle's motor. In other words, the safety control system of this application uses a two-stage power supply backup of the vehicle's power supply system and the vehicle's motor for highly safety-related functional modules such as the drive circuit, which can improve the safety of the safety control system. Attached Figure Description

[0015] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort, wherein:

[0016] Figure 1 This is a schematic diagram of the structure of an embodiment of the vehicle safety control system provided in this application;

[0017] Figure 2 This is a structural schematic diagram of an embodiment of the vehicle provided in this application.

[0018] Explanation of icon numbers:

[0019] 10 Safety control system; 110 Power supply circuit; 120 Power management circuit; 130 Drive circuit; 140 Main control circuit; 151 First DC-DC conversion circuit; 152 Second DC-DC conversion circuit; 160 Logic circuit; 170 Buffer circuit; 180 Fault detection circuit; 190 Speed ​​detection circuit; 200 Redundant main control circuit; 20 Vehicle. Detailed Implementation

[0020] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0021] It should be noted that if the embodiments of this application involve directional indicators (such as up, down, left, right, front, back, etc.), the directional indicators are only used to explain the relative positional relationship and movement of the components in a certain specific posture (as shown in the figure). If the specific posture changes, the directional indicators will also change accordingly.

[0022] Furthermore, if the embodiments of this application involve descriptions such as "first" or "second," these descriptions are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of technical features indicated. Therefore, features defined with "first" or "second" may explicitly or implicitly include at least one of those features. Additionally, the technical solutions of various embodiments can be combined with each other, but this must be based on the ability of those skilled in the art to implement them. If the combination of technical solutions is contradictory or impossible to implement, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed in this application.

[0023] See Figure 1 , Figure 1This is a schematic diagram of an embodiment of the vehicle safety control system provided in this application. The safety control system 10 includes a power supply circuit 110, a power management circuit 120, a drive circuit 130, a main control circuit 140, and a conversion circuit (not shown). The power supply circuit 110 is configured to connect to the vehicle's motor; the power management circuit 120 is configured to connect to the vehicle's power supply system and is connected to the power supply circuit 110, the main control circuit 140, and the drive circuit 130, respectively; the conversion circuit is connected to the power supply circuit 110 and the drive circuit 130, and is also configured to connect to the vehicle's power supply system. The power management circuit 120 can communicate with the main control circuit 140 via wired, wireless, or wired and wireless communication.

[0024] The power supply circuit 110 is configured to obtain electrical energy from the vehicle's motor and output a first power supply signal. Understandably, when the power supply circuit 110 is connected to the vehicle's motor, the motor's power module can provide electrical energy to the power supply circuit 110 during operation. Based on this electrical energy, the power supply circuit 110 can output a first power supply signal, thereby providing a backup first power supply signal for the safety control system 10. The power supply circuit 110 is a conventional power supply circuit, which will not be described in detail here. Specifically, the power supply circuit 110 can isolate and convert the high-voltage side voltage into a low-voltage first power supply signal.

[0025] The power management circuit 120 is configured to receive the vehicle's second power supply signal and is connected to the power supply circuit 110. Understandably, the vehicle's power supply system can output the second power supply signal to power the power management circuit 120. The values ​​of the first and second power supply signals can be equal. Therefore, the power supply for the power management circuit 120 can be the power supply circuit 110 or the vehicle's power supply system. Based on the first or second power supply signal, the power management circuit 120 can output DC power supply signals of different values, which can supply power to the main control circuit 140 and other electrical components. The power management circuit 120 can be a conventional power management circuit 120, such as a power integrated chip, which will not be elaborated here. Furthermore, the power management circuit 120 is also used to output a first safety signal. The first safety signal can be issued by the power management circuit 120 after receiving a command from the main control circuit 140, or it can be issued by the power management circuit 120 when abnormalities occur in the received first power supply signal, second power supply signal, or its output power supply signal; this is not limited here. The first safety signal can be used to control the drive circuit 130, so that the vehicle's motor enters a safe state, thereby improving the vehicle's safety.

[0026] The drive circuit 130 is connected to the power management circuit 120 and is configured to drive the motor. The drive circuit 130 can receive a first safety signal from the power management circuit 120. Based on this first safety signal, the drive circuit 130 can reduce its output or stop operating to bring the vehicle motor into a safe state. The drive circuit 130 is a conventional drive circuit and will not be described in detail here. In this application, "drive circuit 130 driving motor" refers to the drive circuit 130 generating a drive signal to control the power module to drive the motor to operate or to bring the motor into a safe state.

[0027] The main control circuit 140 is connected to the drive circuit 130 and the power management circuit 120. The main control circuit 140 can send control signals to control the drive circuit 130 to operate normally; for example, the control signal can be a pulse width modulation signal. The main control circuit 140 can also send a control signal to the drive circuit 130 to enter a safe state based on fault feedback from the vehicle's fault detection circuit 180, or send a second safety signal, or instruct the power management circuit 120 to send a first safety signal. The main control circuit 140 can change, for example, the level state of the control signal, so that the drive circuit 130 drives the motor to operate normally or enters a safe state based on different level states of the control signal. Furthermore, the main control circuit 140 can also instruct the power management circuit 120 to output a first safety signal to the drive circuit 130, thereby putting the vehicle motor into a safe state.

[0028] The conversion circuit is connected to both the power supply circuit 110 and the drive circuit 130, and is also configured to receive a second power supply signal. Understandably, the conversion circuit converts either the first or second power supply signal into a stable power supply signal suitable for the drive circuit 130 and other electrical equipment.

[0029] In this application, when the safety control system 10 predicts or detects its own fault or abnormality, it can control the motor to enter a safe state. Therefore, the drive circuit 130 driving the motor to enter a safe state can be considered as the safety control system 10 entering a safe state. The motor can be a motor used to drive the vehicle. A safe state can include, for example, limiting vehicle speed, activating the emergency braking system, switching to manual driving mode, or disabling certain non-critical functions.

[0030] The power supply for the conversion circuit in this application can be the vehicle's power supply system or the vehicle's motor (power supply circuit 110). Similarly, the power supply for the power management circuit 120 can be either the vehicle's power supply system or the vehicle's motor. This means that the safety control system 10 of this application uses a two-stage power supply backup system (vehicle power supply system and vehicle motor) for highly safety-related functional modules such as the drive circuit 130, thereby improving the safety of the safety control system 10. Furthermore, the drive circuit 130 of this application drives the motor into a safe state based on a control signal, a first safety signal, or a second safety signal. Both the main control circuit 140 and the power management circuit 120 are connected to the low-voltage side of the drive circuit 130. This means that the safety control system 10 of this application can achieve a three-channel shutdown function for the low-voltage side vehicle motor, avoiding the two-point failure problem proposed in the ISO 26262 standard, improving the safety level of the safety control system 10, and enhancing the vehicle's safety performance. Moreover, based on the three-channel shutdown path, when the power management circuit 120, main control circuit 140, and drive circuit 130 use integrated functional chips, specifications and models meeting ordinary safety level requirements can be selected, reducing the cost of the safety control system 10.

[0031] In one embodiment, the conversion circuit includes a first DC-DC converter 151 and a second DC-DC converter 152. The first DC-DC converter 151 is connected to the power supply circuit 110 and is also configured to receive a second power supply signal. The second DC-DC converter 152 is connected to the first DC-DC converter 151 and the drive circuit 130. Understandably, this embodiment's conversion circuit uses two stages of DC-DC converters. The power supply for the first DC-DC converter 151 can be the vehicle's power supply system or the vehicle's motor. The first DC-DC converter 151 converts the first power supply signal or the second power supply signal into a stable DC power supply signal. The second DC-DC converter 152 converts the power supply signal output by the first DC-DC converter 151 into a power supply signal suitable for the drive circuit 130. The topology of the first DC-DC converter 151 can be a Sepic topology, Buck topology, or other conventional DC-to-DC topology, and is not limited here. The second DC-DC converter 152 can be a flyback converter.

[0032] In one embodiment, the conversion circuit may further include a linear voltage regulator circuit connected to the first DC-DC conversion circuit. The linear voltage regulator circuit is also connected to other electrical components on the safety control system to provide a stable and suitable power supply signal. For example, the linear voltage regulator circuit is also connected to the main control circuit 140, or the fault detection circuit, speed detection circuit, etc. of the safety control system 10.

[0033] In one embodiment, the safety control system 10 further includes a logic circuit 160, which is connected to the power management circuit 120, the main control circuit 140, and the drive circuit 130. The logic circuit 160 is configured to control the drive circuit 130 based on a first safety signal from the power management circuit 120 or a second safety signal from the main control circuit 140, so that the motor enters a safe state. Understandably, the logic circuit 160 can process the first safety signal output by the power management circuit 120 and the second safety signal output by the main control circuit 140, and convert them into corresponding state control signals for the drive circuit 130, so that the motor enters the corresponding safe state, or in other words, so that the safety control system 10 enters a safe state corresponding to the state, such as an active short circuit or passive deceleration.

[0034] In one embodiment, the logic circuit 160 is also connected to a conversion circuit. Understandably, the power supply for the logic circuit 160 in this embodiment can be either the power management circuit 120 or the conversion circuit. Therefore, when the power supply to the power management circuit 120 fails, the logic circuit 160 can continue to operate based on the conversion circuit. Furthermore, the power supply for the conversion circuit can be the vehicle's power supply system or the power supply circuit 110. Therefore, when the vehicle's power supply system fails, the logic circuit 160 can still continue to operate based on the conversion circuit, thereby improving the safety of the safety control system 10.

[0035] In one embodiment, the safety control system 10 further includes a buffer circuit 170, which is connected to the power management circuit 120, the main control circuit 140, the logic circuit 160, and the drive circuit 130. The buffer circuit 170 is configured to control the drive circuit 130 based on the control signals of the main control circuit 140 or the output state of the logic circuit 160. For example, the buffer circuit 170 provides the driving capability for the PWM signal output by the main control circuit 140, or it provides a PWM output shutdown function to allow the motor to enter a safe state or to operate normally. In this embodiment, the safety control system 10 improves the driving performance of the drive circuit 130 by setting the buffer circuit 170.

[0036] In one embodiment, the buffer circuit 170 is also connected to the conversion circuit. Understandably, the power supply for the buffer circuit 170 can be either the power management circuit 120 or the conversion circuit. Therefore, when the power management circuit 120 fails and cannot provide a power supply signal to the buffer circuit 170, the buffer circuit 170 can still continue to operate based on the power supply signal from the conversion circuit. Furthermore, the power supply for the conversion circuit can be either the vehicle's power supply system or the power supply circuit 110. Therefore, when the vehicle's power supply system fails, the buffer circuit 170 can still continue to operate based on the conversion circuit, thereby improving the safety of the safety control system 10.

[0037] In one embodiment, the buffer circuit 170 may be an integrated chip with buffering function, or the buffer circuit 170 may be composed of independent switching devices. For details, please refer to the existing structure of the buffer circuit 170, which will not be described in detail here.

[0038] In one embodiment, the safety control system 10 further includes a fault detection circuit 180. The fault detection circuit 180 is connected to the main control circuit 140, the power management circuit 120, and the conversion circuit, and is connected to the motor. The fault detection circuit 180 is used to detect the state of the motor and feed back a fault signal to the main control circuit 140. Understandably, the power supply for the fault detection circuit 180 in this embodiment can be the power management circuit 120 or the conversion circuit. Therefore, when the power management circuit 120 fails, the fault detection circuit 180 can continue to operate based on the conversion circuit. Furthermore, the power supply for the conversion circuit can be the vehicle's power supply system or the power supply circuit 110. Therefore, when the vehicle's power supply system fails, the fault detection circuit 180 can still continue to operate based on the conversion circuit, thereby improving the safety of the safety control system 10. In addition, this embodiment sets up a fault detection circuit 180, which can detect the state of the motor and feed back a fault signal to the main control circuit 140 when a fault is detected in the motor. The main control circuit 140 can issue a control signal or a second safety signal based on the fault signal, or issue an instruction to the power management circuit 120 to make the power management circuit 120 issue a first safety signal, so that the drive circuit 130 drives the motor to enter a safe state.

[0039] In one embodiment, the safety control system 10 further includes a speed detection circuit 190. The speed detection circuit 190 is connected to the main control circuit 140, the power management circuit 120, and the conversion circuit, and is connected to the motor. The speed detection circuit 190 is used to detect the motor speed and feed back the speed signal to the main control circuit 140. Understandably, the power supply for the speed detection circuit 190 in this embodiment can be the power management circuit 120 or the conversion circuit. Therefore, when the power management circuit 120 fails, the speed detection circuit 190 can continue to operate based on the conversion circuit. Furthermore, the power supply for the conversion circuit can be the vehicle's power supply system or the power supply circuit 110. Therefore, when the vehicle's power supply system fails, the speed detection circuit 190 can still continue to operate based on the conversion circuit, thereby improving the safety of the safety control system 10.

[0040] In one embodiment, the safety control system 10 further includes a redundant main control circuit 200. The redundant main control circuit 200 is connected to the drive circuit 130 and the power management circuit 120. The redundant main control circuit 200 is configured to replace the main control circuit 140 in performing control operations when the main control circuit 140 fails. The redundant main control circuit 200 has the same structure and function as the main control circuit 140. This embodiment adds a redundant main control circuit 200 to the existing disconnection path scheme. Even when the main control circuit 140 fails, the system status can still be monitored through the redundant main control circuit 200, thereby improving the system's safety and availability.

[0041] Optionally, the safety control system 10 further includes a first diode (not shown), a second diode (not shown), a third diode (not shown), a fourth diode (not shown), a fifth diode (not shown), and a sixth diode (not shown). The cathodes of the first and second diodes are connected in parallel to the power management circuit 120. The anode of the first diode is connected to the vehicle's power supply system to receive the second power supply signal. The anode of the second diode is connected to the power supply circuit 110. The arrangement of the first and second diodes ensures that the vehicle's power supply system and the power supply circuit 110 do not interfere with each other, thus enhancing the stability of the safety control system 10. The cathodes of the third and fourth diodes are connected in parallel to the conversion circuit. The anode of the third diode is connected to the vehicle's power supply system to receive the second power supply signal. The anode of the fourth diode is connected to the power supply circuit 110. The anode of the fifth diode is connected to the power output terminal of the power management circuit 120. The cathode of the fifth diode is connected to the cathode of the sixth diode, the logic circuit 160, the buffer circuit 170, the fault detection circuit 180, and the speed detection circuit 190. The anode of the sixth diode is connected to the conversion circuit. This embodiment, by setting a first diode, a second diode, a third diode, and a fourth diode, ensures that the vehicle's power supply system and the power supply circuit 110 do not interfere with each other, thereby enhancing the stability of the safety control system 10. By setting a fifth diode and a sixth diode, the power management circuit 120 and the conversion circuit do not interfere with each other, further enhancing the stability of the safety control system 10.

[0042] In one embodiment, the power management circuit 120 can also supply power to the main control circuit 140, and the power supply to the main control circuit 140 can also come from the conversion circuit.

[0043] In one embodiment, the safety control system 10 includes a power supply circuit 110, a power management circuit 120, a drive circuit 130, a main control circuit 140, a conversion circuit, a logic circuit 160, a buffer circuit 170, a fault detection circuit 180, and a speed detection circuit 190. The power supply circuit 110 is connected to the vehicle's motor and is also connected to the power management circuit 120 and the conversion circuit. The power management circuit 120 is connected to the vehicle's power supply system and is also connected to the main control circuit 140, a redundant main control circuit 200, and the logic circuit 190. Circuit 160, buffer circuit 170, fault detection circuit 180, and speed detection circuit 190 are connected; buffer circuit 170 is connected to logic circuit 160, buffer circuit 170, fault detection circuit 180, and speed detection circuit 190; main control circuit 140 and redundant main control circuit 200 are also connected to logic circuit 160, buffer circuit 170, fault detection circuit 180, and speed detection circuit 190; buffer circuit 170 is also connected to drive circuit 130; logic circuit 160 is also connected to buffer circuit 170 and drive circuit 130.

[0044] An embodiment of the functional logic control of the safety control system 10 provided in this application is as follows:

[0045] 1. When the safety control system 10 is operating normally without other faults:

[0046] a) When the vehicle motor is detected to be running at low speed, the main control circuit 140 can shut off its own control signal output or the logic circuit 160 can shut off the output of the buffer circuit 170 to control the drive circuit 130 so that the vehicle motor enters a safe state of passive deceleration.

[0047] b) When the vehicle motor is detected to be running at high speed, the main control circuit 140 can output a control signal to control the drive circuit 130 so that the vehicle motor enters a safe state of active short circuit.

[0048] 2. When the second power supply signal output by the vehicle's power supply system is lost:

[0049] a) When the vehicle motor is detected to be running at low speed, the main control circuit 140 can shut off its own control signal output or the logic circuit 160 can shut off the output of the buffer circuit 170 to control the drive circuit 130 so that the vehicle motor enters a safe state of passive deceleration.

[0050] b) When the vehicle motor is detected to be running at high speed, the main control circuit 140 can output a control signal to control the drive circuit 130 so that the vehicle motor enters a safe state of active short circuit.

[0051] 3. When the main control circuit 140 of the safety control system 10 malfunctions:

[0052] a) When the vehicle motor is detected to be running at low speed, the redundant main control circuit 200 can control the drive circuit 130 by turning off the output of the buffer circuit 170 through the logic circuit 160, so that the vehicle motor enters a safe state of passive deceleration.

[0053] b) When the vehicle motor is detected to be running at high speed, the redundant main control circuit 200 can control the drive circuit 130 by outputting a control signal to enable the vehicle motor to enter a safe state of active short circuit.

[0054] 4. When the power management circuit 120 of the safety control system 10 malfunctions:

[0055] a) The detection state control drive circuit 130, which can be detected by the first safety signal output by the power management circuit 120 and the redundant main control circuit 200, can enable the vehicle motor to enter a safe state of active short circuit or passive deceleration.

[0056] This application also provides a vehicle, see reference. Figure 2 , Figure 2 This is a structural schematic diagram of an embodiment of the vehicle provided in this application, as shown below. Figure 2 As shown, the vehicle 20 includes a safety control system, which is any one of the safety control systems described in the above embodiments, and will not be elaborated further. It is worth noting that the technical effects achievable by the safety control system can also be achieved in the vehicle.

[0057] The above are merely embodiments of this application and do not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A vehicle safety control system, characterized in that, include: The power supply circuit is configured to obtain electrical energy from the motor of the vehicle and output a first power supply signal; A power management circuit is configured to receive the vehicle's second power supply signal and is connected to the power supply circuit; A drive circuit, connected to the power management circuit, is configured to drive the motor; The main control circuit is connected to the drive circuit and the power management circuit. A conversion circuit is connected to the power supply circuit and the drive circuit respectively, and the conversion circuit is also configured to receive the second power supply signal; The safety control system further includes at least one of a logic circuit, a speed detection circuit, a fault detection circuit, and a redundant main control circuit, or includes the logic circuit and a buffer circuit. The logic circuit is connected to the power management circuit, the main control circuit, and the drive circuit respectively. The logic circuit is configured to control the drive circuit based on the control signal of the power management circuit or the main control circuit, so that the motor enters a safe state. The buffer circuit is connected to the power management circuit, the main control circuit, the logic circuit and the drive circuit respectively. The buffer circuit is configured to control the drive circuit based on the control signal of the main control circuit or the output state of the logic circuit, so that the motor enters different safety states. The speed detection circuit is connected to the main control circuit, the power management circuit, and the conversion circuit, and is connected to the motor. The speed detection circuit is used to detect the rotational speed of the motor and feed back the rotational speed signal to the main control circuit. The fault detection circuit is connected to the main control circuit, the power management circuit, and the conversion circuit, and is connected to the motor. The fault detection circuit is used to detect the status of the motor and feed back a fault signal to the main control circuit. The redundant main control circuit is connected to the drive circuit and the power management circuit. The redundant main control circuit is configured to replace the main control circuit in performing control work when the main control circuit fails.

2. The safety control system according to claim 1, characterized in that, The conversion circuit includes: A first DC-DC converter circuit is connected to the power supply circuit and is also configured to receive the second power supply signal; The second DC-DC converter circuit is connected to the first DC-DC converter circuit and the drive circuit.

3. The safety control system according to claim 1, characterized in that, The logic circuit is also connected to the conversion circuit.

4. The safety control system according to claim 3, characterized in that, The buffer circuit is also connected to the conversion circuit.

5. A vehicle, characterized in that, include: The safety control system according to any one of claims 1-4.

Images