Control unit, high-voltage system and method for software update of a control unit of a high-voltage component

Abstract

A control unit is provided which is configured to control at least part of the operation of a high-voltage component and to receive and store a software update of software which relates at least part to the control of the high-voltage component, wherein the control unit is configured to detect a signal from an insulation monitoring unit and to block the receipt and / or storage of the software update when the control unit detects the signal from the insulation monitoring unit.

Description

[0001] High-voltage components are installed in electrified vehicles. The operation of a high-voltage component can be controlled by at least one control unit. High-voltage components can be, for example, high-voltage energy storage units, associated assemblies, and / or consumers. The at least one control unit has software that controls the operation of the control unit and thus at least partially the operation of the high-voltage component.

[0002] In order to improve the safety of the operation of a high-voltage component in a vehicle, a solution is presented here that enables the safe handling of the control unit and the high-voltage component when updating the control unit in the event of a fault.

[0003] The invention therefore provides a device, a system, and a method according to the independent claims. Further developments of the invention are subject to the dependent claims.

[0004] In a first aspect, a control unit is provided which is configured to at least partially control the operation of a high-voltage component and to receive and store a software update of software which at least partially relates to a control of the high-voltage component, wherein the control unit is configured to detect a signal from an insulation monitoring unit and to block the receiving and / or storing of the software update if the control unit detects the signal from the insulation monitoring unit.

[0005] In a further aspect, a high-voltage system comprising a high-voltage component, a control unit and an insulation monitoring unit is provided, wherein the control unit is configured to at least partially control operation of the high-voltage component, and wherein the insulation monitoring unit is configured to detect an insulation fault of the high-voltage component and, if the insulation fault is present, to output a signal indicating the insulation fault, wherein the control unit is configured to detect the signal and to block receipt and / or storage of a software update of software for the at least partial operation of the high-voltage component when the control unit detects the signal.

[0006] The control unit can receive the software update from a remote computer system.

[0007] The insulation monitoring unit can monitor an insulation resistance of at least one conductor of the high-voltage component.

[0008] The high-voltage component can be a high-voltage storage unit that provides energy for the electric operation of a vehicle.

[0009] The control unit may have an interface for receiving the software update, in particular for wireless and / or wired reception.

[0010] The at least partial control of the high-voltage component by the control unit can be changed by the software update.

[0011] In another aspect, a method for updating the software of a control unit of a high-voltage component is provided, wherein the control unit at least partially controls operation of the high-voltage component, and wherein an insulation monitoring unit can detect an insulation fault of the high-voltage component and, if the insulation fault is present, outputs a signal indicating the insulation fault, wherein the control unit detects the signal and blocks receipt and / or storage of the software update of software for the at least partial operation of the high-voltage component when the control unit detects the signal.

[0012] The invention will now be described with reference to the figures. They show: Fig. 1 a system with a control unit according to the invention, and Fig. 2 a method according to the invention.

[0013] The high-voltage component is monitored by an insulation monitoring unit connected between the conductors and ground. The insulation monitoring unit applies a measuring voltage to the conductors. If an insulation fault occurs, the measuring circuit between the conductor and ground closes, resulting in a measuring current proportional to the insulation fault. The measuring current causes a corresponding voltage drop across a measuring resistor, which is evaluated by the insulation monitoring unit's electronics. If the voltage drop exceeds a certain value, an insulation monitoring signal is output.

[0014] The insulation monitoring unit can detect symmetrical insulation deterioration when the insulation resistance of all monitored conductors decreases almost evenly. Asymmetrical insulation deterioration can also be detected when, for example, the insulation resistance of one conductor decreases significantly more than that of another or all of the other conductors. A pulsed voltage signal controlled by a microcontroller of the insulation monitoring unit and automatically adapting to the respective network conditions can be used for monitoring purposes. This allows a distinction to be made between the leakage current components, which are received or evaluated as a control variable by the insulation monitoring unit, and the measured variable proportional to the ohmic insulation resistance.

[0015] The control unit is now configured to evaluate the insulation monitoring signal of the insulation monitoring unit in such a way that, if the insulation monitoring signal indicating insulation deterioration is present and is output by the insulation monitoring unit, the control unit blocks or prevents the software version of the control unit from being updated. The insulation monitoring signal indicating insulation deterioration at the high-voltage component and output by the insulation monitoring unit is, in particular, an error signal indicating an insulation fault, also referred to below as a signal. When the error signal is present, the control unit does not perform a software update and / or does not save it.

[0016] The control unit can be connected directly or indirectly to a remote computer system, particularly for updating the control unit's software. For example, the remote computer system can be a laptop, a workshop computer, or another computer system configured to transmit a new software version to the control unit for software updates. The connection between the remote computer system and the control unit can be wireless and / or wired. The control unit can therefore receive the software update via the wireless and / or wired connection. The software update, in particular, changes the way in which the control unit at least partially controls the high-voltage component. To receive the software update, the control unit therefore has a suitable interface for wired and / or wireless reception of the software update.

[0017] If the signal received from the isolation unit is no longer received by the control unit, or if the reason for the signal being output by the insulation monitoring unit is eliminated, updating the control unit's software becomes possible again. In particular, the control unit then allows the software running on the control unit to be received and / or saved, or modified.

[0018] Fig. 1 shows a high-voltage system HS according to the invention. In particular, the high-voltage system HS is arranged in a vehicle. The high-voltage system HS has a high-voltage component HVK, which is monitored by an insulation monitoring unit IUE. A control unit SE is provided to at least partially control the operation of the high-voltage component HVK. The control unit SE is configured to receive a signal S from the insulation monitoring unit IUE. Furthermore, the control unit SE is connected to a remote computer system ER, which is configured to transmit a software update to the control unit SE. If the control unit SE receives a signal S from the insulation monitoring unit IUE that indicates an insulation fault, the control unit SE blocks the software update and, in particular, the storage of a new software version in the control unit.

[0019] Fig.2 schematically shows the method according to the invention. If a software update of the control unit SE is started in a first step S10, the control unit SE checks in a second step S20 whether a signal from the insulation monitoring unit IUE is present. If a signal S, which subsequently indicates an insulation fault, is present (path +), the control unit prevents saving and / or receiving the software update, in particular from the remote computer system ER, in a step S30. If, however, no signal S is present from the insulation monitoring unit IUE (path -), the receipt and / or storage of the software update by the control unit SE is permitted or carried out in a fourth step S40.

Claims

[1] A control unit configured to at least partially control the operation of a high-voltage component and to receive and store a software update of software relating at least partially to control of the high-voltage component, wherein the control unit is configured to detect a signal from an insulation monitoring unit and to block the receiving and / or storing of the software update when the control unit detects the signal from the insulation monitoring unit. [2] Having a high-voltage system - a high-voltage component, - a control unit and - an insulation monitoring unit, wherein the control unit is configured to at least partially control operation of the high-voltage component, and wherein the insulation monitoring unit is configured to detect an insulation fault of the high-voltage component and, if the insulation fault is present, to output a signal indicating the insulation fault, wherein the control unit is configured to detect the signal and to block receipt and / or storage of a software update of a software for the at least partial operation of the high-voltage component when the control unit detects the signal. [3] Control unit according to claim 1 or high-voltage system according to claim 2, wherein the control unit is configured to receive the software update from a computer system remote therefrom. [4] Control unit according to claim 1 or high-voltage system according to claim 2, wherein the insulation monitoring unit monitors an insulation resistance of at least one conductor of the high-voltage component. [5] Control unit or high-voltage system according to one of the preceding claims, wherein the high-voltage component is a high-voltage storage device that provides energy for the electric driving operation of a vehicle. [6] Control unit or high-voltage system according to one of the preceding claims, wherein the control unit has an interface for receiving the software update, in particular for wireless and / or wired reception. [7] Control unit or high-voltage system according to one of the preceding claims, wherein the at least partial control of the high-voltage component by the control unit is changed by the software update. [8] Method for updating the software of a control unit of a high-voltage component, wherein the control unit at least partially controls operation of the high-voltage component, and wherein an insulation monitoring unit can detect an insulation fault of the high-voltage component and, if the insulation fault is present, outputs a signal indicating the insulation fault, wherein the control unit detects the signal and blocks reception and / or storage of the software update of software for the at least partial operation of the high-voltage component when the control unit detects the signal.

Images