Electric power supply system and electronic control device

Abstract

To solve the problem that an electric power supply / communication network of redundant constitution increases in weight and cost as electric power supply harness increases.SOLUTION: A first switch circuit 401 cuts off supply of a first voltage to a first control circuit 301 when a drop in first voltage is equal to or larger than a threshold, a second switch circuit 402 cuts off supply of the first voltage to a communication line 216 when the drop in first voltage is equal to or larger than the threshold, and an electric power supply switch circuit 403 switches the supply source of a power supply voltage to the first control circuit 301 from a first power supply 201 to a second power supply 202.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a power supply system and an electronic control device that utilizes a technology for superimposing a power supply on a communication signal. [Background technology]

[0002] In order to accommodate the electrification of automobiles and autonomous driving, the number of in-vehicle electronic control components such as sensors is on the rise, and in-vehicle communication networks are becoming more complex. As the complexity of in-vehicle communication networks increases, there are concerns about increased costs due to an increase in the number of communication cables and increased difficulty in assembly. For this reason, it has been proposed to transition in-vehicle ECU (Electronic Control Unit) architecture from a domain type to a zone type. The zone architecture simplifies in-vehicle communication networks by introducing high-speed communication and routing.

[0003] Furthermore, autonomous driving requires "fail operational" (continued operation in the event of a failure), so power supplies and communications are basically made redundant. Power supply redundancy involves having a main power supply and a secondary power supply, and switching to the secondary power supply if the main power supply fails. One of the power supplies is not used all the time, and double the number of power harnesses is required for redundancy (see Patent Document 1).

[0004] An increase in the number of power harnesses leads to increased parts costs, increased vehicle weight, and increased assembly costs. It is possible to use a power supply that is used for a different purpose as a redundant power supply, but since the power supply voltages of each power supply are different, it is not possible to guarantee that both will work together. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2019-142486 A Summary of the Invention [Problem to be solved by the invention]

[0006] In the technology described in Patent Document 1, power supply redundancy is expected to result in an increase in the number of power supplies and power supply harnesses, which will pose issues such as increased vehicle weight, increased parts costs, and increased assembly costs.

[0007] The present invention has been made in view of the above circumstances, and has an object to reduce the number of power harnesses that increase with the provision of power redundancy in a system that provides power redundancy. [Means for solving the problem]

[0008] In order to solve the above problem, a power supply system according to one embodiment of the present invention includes a first control circuit, a first power supply that outputs a first voltage to be supplied to the first control circuit as a power supply voltage, a first switch circuit connected to the first power supply and the first control circuit and cuts off the power supply of the first voltage to the first control circuit, a second switch circuit connected to a communication line used for communication between the first power supply and the second control circuit and cuts off the supply of the first voltage to the communication line, a second power supply that outputs a second voltage to be supplied to the second control circuit as a power supply voltage, and a power switch circuit connected to the first control circuit and the communication line and supplies the second voltage to the first control circuit via the communication line when the supply of the first voltage to the first control circuit is cut off by the first switch circuit. The power supply of the first voltage to the second control circuit and the power supply of the second voltage to the first control circuit are bidirectional power transmissions using the communication line. The first switch circuit cuts off the supply of the first voltage to the first control circuit when a voltage drop of the first voltage is equal to or greater than a threshold, the second switch circuit cuts off the supply of the first voltage to the communication line when a voltage drop of the first voltage is equal to or greater than a threshold, and the power switch circuit switches the source of the power supply voltage to the first control circuit from the first power supply to the second power supply. Effect of the Invention

[0009] According to at least one aspect of the present invention, power supply redundancy can be achieved without increasing the number of power supply harnesses. Problems, configurations and effects other than those described above will become apparent from the following description of the embodiments. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a system configuration diagram showing an example of power supply redundancy in a conventional power supply system. [Diagram 2] 1 is a system configuration diagram showing an example of power supply redundancy in a power supply system according to a first embodiment of the present invention. [Diagram 3] 1 is a block diagram showing an example of the configuration of an electronic control device provided in a power supply system according to a first embodiment of the present invention. [Figure 4] 2 is a block diagram showing an example of the configuration of a power supply switch included in the electronic control device according to the first embodiment of the present invention. FIG. [Diagram 5] 2 is a circuit diagram showing a first example of an own power supply switch, an other load switch, and an other power supply switch constituting a power supply switching device in the first embodiment of the present invention. FIG. [Figure 6] 4 is a circuit diagram showing a second example of the local power supply switch, the other load switch, and the other power supply switch constituting the power supply switching device in the first embodiment of the present invention. FIG. [Figure 7] FIG. 4 is a circuit diagram showing a third example of the local power supply switch, the other load switch, and the other power supply switch constituting the power supply switching device in the first embodiment of the present invention. [Figure 8] FIG. 11 is a circuit diagram showing a fourth example of the local power supply switch, the other load switch, and the other power supply switch constituting the power supply switching device in the first embodiment of the present invention. [Figure 9] FIG. 11 is a block diagram showing an example of the configuration of a power supply switch included in an electronic control device according to a second embodiment of the present invention. [Figure 10] FIG. 11 is a circuit diagram showing a first example of a controller constituting a power supply switch according to a second embodiment of the present invention. [Figure 11]FIG. 11 is a circuit diagram showing a second example of a controller constituting a power supply switch according to the second embodiment of the present invention. [Figure 12] FIG. 11 is a circuit diagram showing a third example of a controller constituting a power supply switch according to the second embodiment of the present invention. [Figure 13] FIG. 11 is a system configuration diagram showing an example of power supply redundancy in a power supply system according to a third embodiment of the present invention. [Figure 14] FIG. 11 is a block diagram showing an example of the configuration of an electronic control device provided in a power supply system according to a third embodiment of the present invention. [Figure 15] FIG. 13 is a system configuration diagram showing an example of power supply redundancy in a power supply system according to a fourth embodiment of the present invention. [Figure 16] FIG. 13 is a block diagram showing an example of the configuration of an electronic control device provided in a power supply system according to a fourth embodiment of the present invention. [Figure 17] FIG. 13 is a block diagram showing an example of the configuration of another electronic control device provided in a power supply system according to a fourth embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, examples of modes for carrying out the present invention (hereinafter referred to as "embodiments") will be described with reference to the accompanying drawings. In this specification and the accompanying drawings, identical components or components having substantially the same functions are designated by the same reference numerals, and duplicated descriptions will be omitted.

[0012] <Conventional power supply system> Before describing a power supply system according to an embodiment of the present invention, an example of power supply redundancy in a conventional power supply system will be described with reference to FIG.

[0013] Fig. 1 is a system configuration diagram showing an example of power supply redundancy in a conventional power supply system. The power supply system 100 shown in Fig. 1 has a configuration in which ECUs 103 to 106 are connected in a ring shape in a zone architecture, and is an example of redundancy in power supply and communication without using power supply superposition technology. Power supplies 101 and 102 are redundant power supplies, and power (electricity) is supplied from power supply 102 to ECUs 103 to 106 only when power supply 101 fails.

[0014] The power supply 101 supplies power to the ECU 103 via a power harness 107 and to the ECU 105 via a power harness 108. Furthermore, the power supply 101 supplies power from the ECU 103 to the ECU 104 via a power harness 109 and from the ECU 105 to the ECU 106 via a power harness 110.

[0015] In the event of a failure of power supply 101, power supply 102 supplies power to ECU 104 via power harness 111 and to ECU 106 via power harness 112. Furthermore, power supply 102 supplies power from ECU 104 to ECU 103 via power harness 113, and from ECU 106 to ECU 105 via power harness 114.

[0016] The ECUs 103 to 106 are connected to each other via redundant communication lines, and communication is also redundant. The ECUs 103 and 104 communicate with each other via communication lines 116 and 120. The ECUs 103 and 105 communicate with each other via communication lines 115 and 119. The ECUs 104 and 106 communicate with each other via communication lines 118 and 122. The ECUs 105 and 106 communicate with each other via communication lines 117 and 121.

[0017] The ECU 103 supplies power to the sensor 131 via a power line 141, and controls and transmits / receives data to / from the sensor 131 via a communication line 142. The ECU 103 also supplies power to the actuator 132 via a power line 143, and controls and transmits / receives data to / from the actuator 132 via a communication line 144.

[0018] The ECU 104 supplies power to the sensor 133 via a power line 145, and controls and transmits / receives data to / from the sensor 133 via a communication line 146. The ECU 104 also supplies power to the actuator 134 via a power line 147, and controls and transmits / receives data to / from the actuator 134 via a communication line 148.

[0019] The ECU 105 supplies power to the sensor 135 via a power line 149, and controls and transmits and receives data to and from the sensor 135 via a communication line 150. The ECU 105 also supplies power to the actuator 136 via a power line 151, and controls and transmits and receives data to and from the actuator 136 via a communication line 152.

[0020] The ECU 106 supplies power to the sensor 137 via a power line 153, and controls and transmits / receives data to / from the sensor 137 via a communication line 154. The ECU 106 also supplies power to the actuator 138 via a power line 155, and controls and transmits / receives data to / from the actuator 138 via a communication line 156.

[0021] <First embodiment> Next, the configuration of a power supply system according to a first embodiment of the present invention will be described with reference to FIG. 2. The present invention makes it possible to achieve power supply redundancy without increasing the number of power harnesses by using a power supply superimposition technique to achieve power supply redundancy for an ECU used in a zone architecture using a communication line. Since the communication line connects all ECUs, each power supply governs some ECUs and connects the power supply harness, and in the event of a failure, power supply from a power supply that is not directly connected to the ECU by a power supply harness is performed using the communication line. When each power supply fails, power supply is switched to be supplied from the communication line, but the source of power supply changes depending on the failed power supply, so a power supply switch capable of supplying power in both directions is used to achieve power supply redundancy using the communication line.

[0022] [Power supply system configuration] FIG. 2 is a system configuration diagram showing an example of power supply redundancy in the power supply system according to the first embodiment. The power supply system 200 shown in FIG. 2 is an example in which power supply redundancy is achieved by a communication line using a power supply superimposition technique, and the number of power harnesses is reduced. In this embodiment, a ring-type network architecture is used for the power supply system 200. In the power supply system 200, the power supply harnesses 109 and 113 corresponding to between the ECU 203 and the ECU 204, and the power supply harnesses 110 and 114 corresponding to between the ECU 105 and the ECU 106 are eliminated from the power supply system 100 in FIG. 1. Instead, power supply superimposition for transmitting power and communication is performed in a communication line 216 connecting the ECU 203 and the ECU 204, and a communication line 217 connecting the ECU 205 and the ECU 206, thereby realizing power supply redundancy.

[0023] The power supply system 200 is composed of a power supply 201, a power supply 202, an ECU 203, an ECU 204, an ECU 205, an ECU 206, power harnesses 207-208, power harnesses 211-212, communication lines 215-218 shown by solid lines, and communication lines 219-222 shown by dashed lines. The communication lines 215-218 shown by solid lines are communication lines for power superimposition. The communication lines 219-222 shown by dashed lines are communication lines for communication. However, the communication lines 219-222 may be the same communication lines for power superimposition as the communication lines 215-218.

[0024] The power supply 201 supplies power to the ECU 203 via a power harness 207 and to the ECU 205 via a power harness 208. The power supply 202 supplies power to the ECU 204 via a power harness 211 and to the ECU 206 via a power harness 212.

[0025] The ECU 203 and the ECU 204 are capable of supplying power to each other by power supply superposition via a communication line 216. If the power supply 201 fails, the power of the power supply 202 is supplied from the ECU 204 to the ECU 203 via the communication line 216. Conversely, if the power supply 202 fails, the power of the power supply 201 is supplied from the ECU 203 to the ECU 204 via the communication line 216.

[0026] The same applies to power transmission between ECU 205 and ECU 206, and ECU 205 and ECU 206 are able to supply power to each other by power supply superposition via communication line 217. If power supply 201 fails, power from power supply 202 is supplied from ECU 206 to ECU 205 via communication line 217. Conversely, if power supply 202 fails, power from power supply 201 is supplied from ECU 205 to ECU 206 via communication line 217.

[0027] The ECU 203 performs redundant communication with the ECU 204 via communication lines 216 and 220, and performs redundant communication with the ECU 205 via communication lines 215 and 219 to send and receive data. The ECU 203 also supplies power to the sensor 231 via a power line 241, and performs control and data transmission via a communication line 242. The ECU 203 also supplies power to the actuator 232 via a power line 243, and performs control and data transmission via a communication line 244.

[0028] The ECU 204 performs redundant communication with the ECU 203 via communication lines 216 and 220, and performs redundant communication with the ECU 206 via communication lines 218 and 222 to send and receive data. The ECU 204 also supplies power to the sensor 233 via a power line 245, and performs control and data transmission via a communication line 246. The ECU 204 also supplies power to the actuator 234 via a power line 247, and performs control and data transmission via a communication line 248.

[0029] The ECU 205 performs redundant communication with the ECU 203 via communication lines 215 and 219, and performs redundant communication with the ECU 206 via communication lines 217 and 221 to send and receive data. The ECU 205 also supplies power to the sensor 235 via a power line 249, and performs control and data transmission via a communication line 250. The ECU 205 also supplies power to the actuator 236 via a power line 251, and performs control and data transmission via a communication line 252.

[0030] The ECU 206 performs redundant communication with the ECU 204 via communication lines 218 and 222, and performs redundant communication with the ECU 205 via communication lines 217 and 221 to send and receive data. The ECU 206 also supplies power to the sensor 237 via a power line 253, and performs control and sends and receives data via a communication line 254. The ECU 206 also supplies power to the actuator 238 via a power line 255, and performs control and sends and receives data via a communication line 256.

[0031] Here, an example has been shown in which one sensor and one actuator are connected to each of the ECUs 203 to 206, but the number of sensors and actuators is not limited to 1. Even if the number of sensors and actuators increases or decreases, the power supply system 200 has the same power redundancy configuration.

[0032] [Electronic control device configuration] Next, the configuration of an electronic control unit (ECU) included in the power supply system 200 will be described with reference to FIG.

[0033] 3 is a block diagram showing an example of the configuration of an electronic control unit (ECU 203) included in the power supply system 200. ECU 204, ECU 205, and ECU 206 have the same configuration as ECU 203. ECU 203 is made up of an ECU core unit 301 that performs control and information processing, a power supply switch 302, a transceiver 303, and a power supply superposition filter 304.

[0034] The power superposition filter 304 is connected to the ECU 204 via the communication line 216, and exchanges a communication signal or a communication signal on which power is superimposed. The power superposition filter 304 is also connected to the power switch 302 via a power line 305, and is connected to the transceiver 303 via a communication line 308. In the power superposition filter 304, only DC (Direct Current) power and power having a frequency close to DC pass between the communication line 216 and the power line 305, and only high-frequency communication signals pass between the communication line 216 and the communication line 308. The power superposition filter 304 is configured using, for example, PoDL (Power over Data Lines), and performs separation and superposition of communication signals and power. In PoDL, a pair of twisted cables is used to transmit a signal (differential) by superimposing DC (Direct Current) power.

[0035] Power from power source 201 supplied via power harness 207 and power from power source 202 supplied via power line 305 are input to power source switch 302. Power source switch 302 internally monitors the voltage passing through power harness 207 and the voltage passing through power line 305, and determines which voltage to connect to the output and switches between them. As a result, power source switch 302 supplies power to ECU core unit 301 via power line 307, to transceiver 303 via power line 306, to sensor 231 via power line 241, and to actuator 232 via power line 243.

[0036] When the power supply 201 is normal, the power supply switch 302 supplies power from the power supply harness 207 to the ECU core unit 301, the transceiver 303, the sensor 231, and the actuator 232. On the other hand, when the power supply 201 has failed and the power supply 202 is normal, the power supply switch 302 supplies power transmitted through the power line 305 to the ECU core unit 301, the transceiver 303, the sensor 231, and the actuator 232. In addition, since the power supply switch 302 can obtain information indicating that the power supply 201 has failed (power supply failure information), it can also send the power supply failure information to the ECU core unit 301 via the communication line 309 and share the power supply failure information with other ECUs.

[0037] In this way, when the power supply of the first voltage from the first power supply (power supply 201) to the first control circuit (ECU core unit 301) is cut off, the first control circuit notifies an external device (e.g., another ECU) that the first power supply is abnormal. As a result, for example, the other ECU mounted on the vehicle can perform appropriate control such as control to continue operation in response to the fact that the first power supply is abnormal.

[0038] The transceiver 303 communicates with the ECU 204 via a communication line 216 that passes through a communication line 308 and a power supply superposition filter 304, and a communication line 220. The transceiver 303 also communicates with the ECU 205 via a communication line 215 and a communication line 219. The transceiver 303 also exchanges transmission signals and reception signals for other ECUs with the ECU core unit 301 via a communication line 310.

[0039] The ECU core unit 301 controls the transceiver 303 through the communication line 310, and transmits and receives data to and from the ECU 204, ECU 205, and ECU 206 (FIG. 2) through the transceiver 303. The ECU 203 and ECU 206 can communicate with each other via the other ECU 204 or ECU 204 by designating each other as a source and a destination through routing. The ECU core unit 301 also controls the sensor 231 and the actuator 232 and transmits and receives data to and processes the data.

[0040] For example, the ECU core unit 301 may have a memory (ROM, RAM) and non-volatile storage in addition to a processor (not shown). For example, a processor such as a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit) can be used as the processor of the ECU core unit 301. The processor executes a computer program stored in the ROM or non-volatile storage, thereby realizing the functions of the ECU core unit in the embodiment of the present invention.

[0041] [Power switch configuration] Next, the configuration of a power supply switch provided in the electronic control unit (ECU) according to this embodiment will be described with reference to FIG.

[0042] 4 is a block diagram showing a configuration example of the power supply switch 302 provided in the ECU 203. The power supply switch 302 includes an own power supply switch 401, an other load switch 402, an other power supply switch 403, and a power supply circuit 404. Solid lines without arrows connecting the own power supply switch 401, the other load switch 402, and the other power supply switch 403 indicate power supply use, and solid lines with arrows indicate power control use.

[0043] Own power supply switch 401 is a circuit that monitors the voltage of power supply harness 207, and if the voltage is equal to or higher than a preset threshold voltage, turns on an internal switch to connect power supply harness 207 and power line 405, and supplies power to power supply circuit 404 through power line 405. If the voltage of power supply harness 207 falls below the threshold voltage, own power supply switch 401 turns off an internal switch to disconnect power supply harness 207 and power line 405. In addition, own power supply switch 401 outputs a signal based on the result of comparing the voltage from power supply harness 207 with the threshold voltage to ECU core unit 301 via communication line 309. This signal corresponds to the power supply failure information described in FIG. 3.

[0044] Other load switch 402 is a circuit that monitors the voltages of power harness 207 and power line 305, and if both voltages are equal to or higher than a preset threshold voltage, turns on an internal switch to establish continuity between power harness 207 and power line 305. If either the voltage of power harness 207 or the voltage of power line 305 falls below the threshold voltage, other load switch 402 turns off the internal switch to disconnect power harness 207 and power line 305.

[0045] The other power switch 403 is a circuit that monitors the voltage of the power harness 207, and when the voltage is equal to or higher than a preset threshold voltage, turns off the internal switch, cuts off the connection between the power line 305 and the power line 405, and does not supply power to the power circuit 404. When the voltage of the power harness 207 falls below the threshold voltage, the other power switch 403 connects the power line 305 and the power line 405, and supplies power to the power circuit 404 through the power line 405.

[0046] The power supply circuit 404 converts the voltage of the power transmitted from the power supply line 405 according to the supply destination, and supplies the power via the power supply line 306 , the power supply line 307 , the power supply line 241 , and the power supply line 243 .

[0047] [First example of each switch] Here, a first example of the own power supply switch, the other load switch, and the other power supply switch constituting the power supply switch 302 in this embodiment will be described with reference to FIG.

[0048] 5 is a circuit diagram showing a first example of an own power supply switch 401, an other load switch 402, and an other power supply switch 403 which configure the power supply switch 302. The own power supply switch 401 is composed of a MOSFET (Metal Oxide Semiconductor Field-Effect Transistor) 501, a comparator 502, and a threshold voltage source 503.

[0049] The MOSFET 501 is an example of a P-type MOSFET, and in the case of a high-voltage type, a diode is connected between the drain and source. The same applies to the MOSFETs used in the subsequent switches.

[0050] Comparator 502 compares the voltage from power harness 207 with the threshold voltage of threshold voltage source 503, and if the voltage from power harness 207 is equal to or higher than the threshold voltage, sets its output to a low level, turns MOSFET 501 ON, and establishes continuity between power harness 207 and power line 405. On the other hand, if the voltage from power harness 207 is lower than the threshold voltage, comparator 502 sets its output to a high level, turns MOSFET 501 OFF, and disconnects power harness 207 from power line 405. The output of comparator 502 is transmitted to ECU core unit 301 via communication line 309.

[0051] The other load switch 402 is composed of a MOSFET 504, an OR circuit 505, a comparator 506, a threshold voltage source 507, a comparator 508, and a threshold voltage source 509. The comparator 506 compares the voltage of the power supply 201 from the power harness 207 with the threshold voltage of the threshold voltage source 507, and outputs a low level if the voltage from the power harness 207 is equal to or higher than the threshold voltage, and conversely, outputs a high level if the voltage from the power harness 207 is lower than the threshold voltage.

[0052] The comparator 508 compares the voltage of the power supply 202 from the power supply line 305 with the threshold voltage of the threshold voltage source 509, and if the voltage from the power supply line 305 is equal to or greater than the threshold voltage, the output is set to a low level, and conversely, if the voltage from the power supply line 305 is lower than the threshold voltage, the output is set to a high level.

[0053] OR circuit 505 is a logical sum circuit that sets its output to a high level if either the output voltage of comparator 506 or the output voltage of comparator 508 is at a high level, and sets its output to a low level if both output voltages are at a low level.

[0054] When the output of the OR circuit 505 is at a low level, the MOSFET 504 is turned ON, thereby providing electrical continuity between the power harness 207 and the power line 305. On the other hand, when the output of the OR circuit 505 is at a high level, the MOSFET 504 is turned OFF, thereby disconnecting the power harness 207 and the power line 305.

[0055] The other power switch 403 is composed only of a MOSFET 510. Of course, a comparator may be used for the other power switch 403, similar to the own power switch 401. Only when the voltage of the power harness 207 is lower than the voltage of the power line 405 by an amount necessary to switch the MOSFET 510 (the source-gate voltage is lower than the threshold voltage), the MOSFET 510 turns ON and conducts between the power line 405 and the power line 305.

[0056] In the initial state, the voltage of the power line 405 starts in a low state, so that the MOSFET 501 and the MOSFET 510 are OFF. For example, the initial state is when the power supply is turned on, when the ECU 203 is started, when the vehicle is started, etc. Here, since a diode is connected between the drain and source of the MOSFET 501, when the voltage of the power harness 207 becomes higher than the threshold voltage of the diode, the power line 405 and the power harness 207 become conductive, and the voltage value of the power line 405 rises, so that the MOSFET 501 also turns ON. Similarly, when the voltage of the power line 305 starts in a low state, the MOSFET 504 is initially OFF, but then the power harness 207 and the power line 305 become conductive via the diode connected between the drain and source of the MOSFET 504, so that the voltage value of the power line 305 rises, and the MOSFET 504 also turns ON.

[0057] According to the power supply switch having the above configuration, in the event of a power supply failure, it is possible to switch quickly and with low loss between the power supply passing through the power harness and the power supply passing through the communication line.

[0058] [Second example for each switch] Next, a second example of the local power supply switch, the other load switch, and the other power supply switch constituting the power supply switch 302 in this embodiment will be described with reference to FIG.

[0059] Fig. 6 is a circuit diagram showing a second example of the own power switch 401A, the other load switch 402A, and the other power switch 403 that configure the power supply switch 302. The configuration of the power supply switch 302 shown in Fig. 6 differs from the power supply switch 302 of the first example shown in Fig. 5 in that a level shifter (denoted as "LV" in the figure) is used instead of a threshold voltage source, and the operation is almost the same as that of the first example.

[0060] The self-power switch 401A is composed of a MOSFET 501, a comparator 502, and a level shifter 601. The level shifter 601 shifts the voltage from the power harness 207 by a preset voltage and outputs the shifted voltage to the comparator 502. The comparator 502 outputs a low level if the output voltage of the level shifter 601 is positive, and outputs a high level if the output voltage of the level shifter 601 is negative, thereby controlling the ON / OFF of the MOSFET 501. At that time, the output of the comparator 502 is transmitted to the ECU core unit 301 via the communication line 309.

[0061] The other load switch 402A is composed of a MOSFET 504, an OR circuit 505, a comparator 506, a level shifter 602, a comparator 508, and a level shifter 603. The level shifter 602 shifts the voltage from the power harness 207 by a preset voltage and outputs it to the comparator 506. The comparator 506 outputs a low level if the output voltage of the level shifter 602 is positive, and outputs a high level if the output voltage is negative. The level shifter 603 shifts the voltage from the power line 305 by a preset voltage and outputs it to the comparator 508. The comparator 508 outputs a low level if the output voltage of the level shifter 603 is positive, and outputs a high level if the output voltage is negative.

[0062] The OR circuit 505 controls the ON / OFF of the MOSFET 504 by setting its output to a High level if either the output voltage of the comparator 506 or the comparator 508 is at a High level, and setting its output to a Low level if both output voltages are at a Low level.

[0063] [Third example for each switch] Next, a third example of the own power supply switch, the other load switch, and the other power supply switch constituting the power supply switch 302 in this embodiment will be described with reference to FIG.

[0064] Fig. 7 is a circuit diagram showing a third example of the own power switch 401B, the other load switch 402B, and the other power switch 403B which configure the power supply switch 302. The configuration of the power supply switch 302 shown in Fig. 7 differs from the power supply switch 302 of the first example shown in Fig. 5 in that each switch is provided with a measure to prevent current leakage due to a ground fault between the power supply line 405, the power supply line 305, and their connections.

[0065] A P-type MOSFET 701, whose drain-source direction is opposite to that of the MOSFET 501, is added to the self-power supply switch 401B. In the example of FIG. 7, the drain of the MOSFET 501 and the drain of the MOSFET 701 are connected to each other, and the gate of the MOSFET 701 is connected to the output terminal of the comparator 502.

[0066] 7, the drain of the MOSFET 504 is connected to the drain of the MOSFET 702, and the gate of the MOSFET 702 is connected to the output terminal of the OR circuit 505. The source of the MOSFET 701 of the own power supply switch 401B is connected to the source of the MOSFET 702 of the other load switch 402B. The sources of the MOSFET 701 and 702 are connected to the power supply harness 207.

[0067] Furthermore, a MOSFET 703 whose drain-source direction is reversed to that of the MOSFET 510 is added to the other power switch 403B. In the example of FIG. 7, the drain of the MOSFET 510 and the drain of the MOSFET 703 are connected to each other, the source of the MOSFET 703 is connected to the power line 305, and the gate of the MOSFET 703 is connected to the power harness 207.

[0068] The MOSFET 701, MOSFET 702, and MOSFET 703 have diode orientations opposite to those of the original MOSFET 501, MOSFET 504, and MOSFET 510. The diodes of these MOSFETs 701 to 703 can prevent the occurrence of current leakage.

[0069] Thus, in the power supply switch (power supply switch 302) according to this embodiment, the first switch circuit (own power supply switch 401B) includes a first switching element (MOSFET 501) that passes current between the first power supply (power supply 201) and the first control circuit (ECU core unit 301) when the voltage drop of the first voltage (voltage of the power supply 201) is smaller than the threshold value, and a switching element (MOSFET 701) that is connected in series with the first switching element and with the opposite polarity between the first power supply and the first control circuit. Also, the second switch circuit (other load switch 402B) includes a second switching element (MOSFET 504) that passes current between the first power supply and the communication line (communication line 216 (power supply line 305)) when the voltage drop of both the first voltage and the second voltage (voltage of the power supply 202) is smaller than the threshold value, and a switching element (MOSFET 702) that is connected in series with the second switching element and with the opposite polarity between the first power supply and the communication line. The power switch circuit (other power switch 403B) also includes a third switching element (MOSFET 510) that passes current between the first control circuit and the communication line (communication line 216 (power line 305)) when the voltage drop of the first voltage is smaller than the threshold value, and a switching element (MOSFET 703) connected in series with the third switching element and with opposite polarity between the first control circuit and the communication line.

[0070] [Fourth example for each switch] Next, a fourth example of the own power supply switch, the other load switch, and the other power supply switch constituting the power supply switch 302 in this embodiment will be described with reference to FIG.

[0071] Fig. 8 is a circuit diagram showing a fourth example of the own power switch 401C, the other load switch 402C, and the other power switch 403B that configure the power supply switch 302. The configuration of the power supply switch 302 shown in Fig. 8 differs from the power supply switch 302 of the second example shown in Fig. 6 in that each switch is provided with measures to prevent current leakage due to a ground fault between the power supply line 405, the power supply line 305, and their connections. That is, the fourth example of the power supply switch 302 has the same measures as the third example.

[0072] In the self-power switch 401C, a MOSFET 701 having a drain-source orientation opposite to that of the MOSFET 501 is added between the drain of the MOSFET 501 and the power harness 207, and the gate of the MOSFET 701 is connected to the output terminal of the comparator 502.

[0073] In the other load switch 402C, a MOSFET 702 whose drain-source direction is opposite to that of the MOSFET 504 is added between the drain of the MOSFET 504 and the power harness 207, and the gate of the MOSFET 702 is connected to the output terminal of the OR circuit 505.

[0074] 7, the MOSFET 701, MOSFET 702, and MOSFET 703 have diode orientations opposite to those of the original MOSFET 501, MOSFET 504, and MOSFET 510. The diodes of these MOSFETs 701 to 703 can prevent current leakage.

[0075] Note that the circuit of each switch of the power supply switch 302 may be configured using an N-type MOSFET as the MOSFET of each switch described above. Also, other switching elements may be used instead of the MOSFET. Hereinafter, in this specification, when the own power supply switches 401 to 401C are not differentiated or are collectively referred to, they may be simply referred to as "own power supply switch 401". Similarly, the other load switches 402 to 402C may be referred to as "other load switch 402", and the other power supply switches 403, 403B may be referred to as "other power supply switch 403".

[0076] As described above, the power supply system (power supply system 200 (ECU 203)) according to the first embodiment includes a first control circuit (ECU core unit 301), a first power supply (power supply 201) that outputs a first voltage that is supplied to the first control circuit as a power supply voltage, a first switch circuit (self-power supply switches 401 to 401C) that is connected to the first power supply (power harness 207) and the first control circuit and that cuts off the power supply of the first voltage to the first control circuit, and a communication switch used for communication between the first power supply and the second control circuit. The power supply circuit includes a second switch circuit (other load switches 402-402C) connected to a communication line (e.g., communication line 216) and cutting off the supply of a first voltage to the communication line, a second power supply (power supply 202) outputting a second voltage to be supplied as a power supply voltage to the second control circuit, and a power supply switch circuit (other power supply switches 403, 403B) connected to the first control circuit and the communication line and supplying the second voltage to the first control circuit via the communication line when the supply of the first voltage to the first control circuit is cut off by the first switch circuit. Here, the power supply of the first voltage to the second control circuit and the power supply of the second voltage to the first control circuit are bidirectional power transmissions using the communication line. The first switch circuit cuts off the supply of the first voltage to the first control circuit when a voltage drop of the first voltage is equal to or greater than a threshold, the second switch circuit cuts off the supply of the first voltage to the communication line when a voltage drop of the first voltage is equal to or greater than a threshold, and the power switch circuit switches the source of the power supply voltage to the first control circuit from the first power supply to the second power supply.

[0077] According to this embodiment having the above configuration, the power supply source can be switched from a first power source to a second power source by bidirectional power transmission using power redundancy technology, so that power supply redundancy can be achieved without increasing the number of power harnesses as in the conventional case.

[0078] Furthermore, in the power supply system (power supply system 200 (ECU 203)) of this embodiment, the first switch circuit (own power supply switches 401-401C) supplies a first voltage to the first control circuit when the voltage drop of the first voltage is smaller than a threshold value, and the second switch circuit (other load switches 402-402C) supplies the first voltage to the communication line when the voltage drop of the first voltage is smaller than the threshold value and the voltage drop of the second voltage is equal to or greater than the threshold value, and the power switch circuit (other power supply switches 403, 403B) disconnects the first control circuit and the communication line.

[0079] According to the present embodiment having the above configuration, when an abnormality occurs in the second voltage of the second power supply, the first voltage can be supplied to the second control circuit by bidirectional power transmission using a power supply redundancy technique, and therefore, power supply redundancy can be realized without increasing the number of power harnesses.

[0080] <Second embodiment> Next, the configuration of a power supply switch provided in an electronic control unit (ECU) according to a second embodiment of the present invention will be described with reference to FIG.

[0081] [Power switch configuration] Fig. 9 is a block diagram showing an example of the configuration of the power supply switch 302A included in the ECU 203. The configuration of the power supply switch 302A shown in Fig. 9 differs from the power supply switch 302 shown in Fig. 4 in that the determination control circuits (the comparators, OR circuits, etc. in Figs. 5 to 8) provided in each of the own power supply switch 401, the other load switch 402, and the other power supply switch 403 are integrated into one controller 907.

[0082] The power supply switch 302A includes an own power supply switch 901, an other load switch 902, an other power supply switch 903, a controller 907, and a power supply circuit 404.

[0083] The own power supply switch 901, the other load switch 902, and the other power supply switch 903 are all configured using one MOSFET or two MOSFETs as shown in Figures 5 to 8. The own power supply switch 901, the other load switch 902, and the other power supply switch 903 have the same switching function as the own power supply switch 401, the other load switch 402, and the other power supply switch 403 shown in Figure 4.

[0084] The controller 907 receives the voltage from the power harness 207 and the voltage from the power line 305. The controller 907 controls the own power switch 901 via the communication line 309, controls the other load switch 902 via the control line 905, and controls the other power switch 903 via the control line 906, depending on the voltage of the power harness 207 and the voltage of the power line 305.

[0085] In an own power supply switch 901 consisting of one or two MOSFETs, a control signal from a controller 907 is input to the gate of each MOSFET via a communication line 309. In an other load switch 902 consisting of one or two MOSFETs, a control signal from a controller 907 is input to the gate of each MOSFET via a control line 905. In an other power supply switch 903 consisting of one or two MOSFETs, a control signal from a controller 907 is input to the gate of each MOSFET via a control line 906.

[0086] [First example of controller] Here, a first example of the controller 907 constituting the power supply switch 302A in this embodiment will be described with reference to FIG.

[0087] FIG. 10 is a circuit diagram showing a first example of the controller 907 constituting the power supply switch 302A. The controller 907 is composed of a comparator 1001 , a threshold voltage source 1002 , a comparator 1003 , a threshold voltage source 1004 , an OR circuit 1005 , and a NOT circuit 1006 .

[0088] Comparator 1001 compares the voltage from power harness 207 with the threshold voltage of threshold voltage source 1002, and outputs a low level if the voltage from power harness 207 is equal to or higher than the threshold voltage, and outputs a high level if the voltage from power harness 207 is lower than the threshold voltage. Comparator 1001 outputs a signal according to the comparison result to communication line 309.

[0089] The comparator 1003 compares the voltage from the power supply line 305 with the threshold voltage of the threshold voltage source 1004, and if the voltage from the power supply line 305 is equal to or greater than the threshold voltage, the output is set to a low level, and conversely, if the voltage from the power supply line 305 is lower than the threshold voltage, the output is set to a high level.

[0090] The OR circuit 1005 outputs a high level signal if either the output voltage of the comparator 1001 or the output voltage of the comparator 1003 is at a high level, and outputs a low level signal if both output voltages are at a low level. The OR circuit 1005 outputs a signal according to the logical operation result to a control line 905 connected to the other load switch 902.

[0091] The NOT circuit 1006 inverts the output value of the comparator 1001 and outputs it to a control line 906 connected to the other power switch 903. The NOT circuit 1006 outputs a high level when the output voltage of the comparator 1001 is a low level, and outputs a low level when the output voltage of the comparator 1001 is a high level.

[0092] [Second example of controller] Next, a second example of the controller 907A constituting the power supply switch 302A in this embodiment will be described with reference to FIG.

[0093] Fig. 11 is a circuit diagram showing a second example of the controller 907A constituting the power supply switch 302A. The configuration of the controller 907A shown in Fig. 11 differs from the controller 907 of the first example shown in Fig. 10 in that a level shifter (denoted as "LV" in the figure) is used instead of a threshold voltage source, and the operation is almost the same as that of the first example.

[0094] The controller 907A is composed of a comparator 1001, a level shifter 1101, a comparator 1003, a level shifter 1102, an OR circuit 1005, and a NOT circuit 1006.

[0095] The level shifter 1101 shifts the voltage from the power harness 207 by a preset voltage amount and outputs the shifted voltage to the comparator 1001. The comparator 1001 outputs a low level when the output voltage of the level shifter 1101 is positive, and outputs a high level when the output voltage is negative.

[0096] The level shifter 1102 shifts the voltage from the power supply line 305 by a preset voltage amount and outputs the shifted voltage to the comparator 1003. The comparator 1003 outputs a low level when the output voltage of the level shifter 1102 is positive, and outputs a high level when the output voltage is negative.

[0097] OR circuit 1005 outputs at a high level if either the output voltage of comparator 1001 or comparator 1003 is at a high level, and outputs at a low level if both output voltages are at a low level. NOT circuit 1006 inverts the output value of comparator 1001. NOT circuit 1006 outputs at a high level when a low level input is received, and outputs at a low level when a high level input is received.

[0098] [Third example of controller] Next, a third example of the controller 907B constituting the power supply switch 302A in this embodiment will be described with reference to FIG.

[0099] 12 is a circuit diagram showing a third example of the controller 907B constituting the power supply switch 302A. The controller 907B is composed of an ADC (analog-digital converter) 1201, an ADC 1202, and a microprocessor (indicated as "MCU" in the figure) 1203. For example, an MCU (Micro Controller Unit) can be used as the microprocessor 1203. In general, an MCU includes a processor, memories such as ROM and RAM, and an I / O. The controller 907B in this embodiment can convert the voltages (analog signals) from the power harness 207 and the power line 305 into digital data, so that the control contents can be modified by programming.

[0100] The ADC 1201 converts the value of the voltage from the power harness 207 into a digital value and outputs the digital value to the microprocessor 1203. In addition, the ADC 1202 converts the value of the voltage from the power line 305 into a digital value and outputs the digital value to the microprocessor 1203.

[0101] The microprocessor 1203 receives the outputs of the ADC 1201 and the ADC 1202. If the output code (digital value of voltage) of the ADC 1201 is greater than the set code, the microprocessor 1203 sets the output to the communication line 309 to a low level and sets the output to the control line 906 connected to the other power switch 903 to a high level. Under other conditions, the microprocessor 1203 sets the output to the communication line 309 to a high level and sets the output to the control line 906 to a low level. If either the output code of the ADC 1201 or the output code of the ADC 1202 is greater than the respective set code, the microprocessor 1203 sets the output to the control line 905 connected to the other load switch 902 to a high level, and sets the output to the control line 905 to a low level under other conditions.

[0102] As described above, in the power supply switch (power supply switch 302A) of the power supply system (power supply system 200) according to the second embodiment, the decision control circuits (comparators, OR circuits, etc. in FIGS. 5 to 8) provided in the three switch circuits in the first embodiment are integrated into one controller (controllers 907 to 907B). Therefore, in the power supply system according to this embodiment, the configuration of each switch circuit constituting the power supply switch can be simplified.

[0103] <Third embodiment> Next, the configuration of a power supply system according to a third embodiment of the present invention will be described with reference to FIG.

[0104] [Power supply system configuration] FIG. 13 is a system configuration diagram showing an example of power supply redundancy in a power supply system according to a third embodiment. The power supply system 200 (FIG. 2) according to the first and second embodiments is a ring architecture using four ECUs 203-206, but the power supply system 1300 according to this embodiment is a star architecture using four ECUs 1303-1306. Here, an example with four ECUs is shown, but the basic connection method does not change even if the number of ECUs increases. In this architecture, a central ECU (ECU 1303) and other ECUs (ECUs 1304-1306) are connected by communication lines. The star architecture has the advantage of being able to reduce the number of communication lines.

[0105] The power supply system 1300 is composed of a power supply 201, a power supply 202, an ECU 1303, an ECU 1304, an ECU 1305, an ECU 1306, power harnesses 207-208, power harnesses 211-212, communication lines 1311-1313 shown by solid lines, and communication lines 1314-1316 shown by dashed lines. The communication lines 1311-1313 shown by solid lines are communication lines for power superimposition. The communication lines 1314-1316 shown by dashed lines are communication lines for communication. However, the communication lines 1314-1316 may be the same communication lines for power superimposition as the communication lines 1311-1313.

[0106] The power supply 201 supplies power to the ECU 1303 via a power harness 207 and to the ECU 1305 via a power harness 208. The power supply 202 supplies power to the ECU 1304 via a power harness 211 and to the ECU 1306 via a power harness 212.

[0107] The ECU 1303 and the ECU 1304 can supply power to each other by power supply superposition via a communication line 1311. If the power supply 201 fails, the power of the power supply 202 is supplied from the ECU 1304 to the ECU 1303 via the communication line 1311. Conversely, if the power supply 202 fails, the power of the power supply 201 is supplied from the ECU 1303 to the ECU 1304 via the communication line 1311.

[0108] The same applies to power transmission between the ECU 1303 and the ECU 1306, and the ECU 1303 and the ECU 1306 can supply power to each other by power supply superposition via a communication line 1313. If the power supply 201 fails, power from the power supply 202 is supplied from the ECU 1306 to the ECU 1303 via the communication line 1313. Conversely, if the power supply 202 fails, power from the power supply 201 is supplied from the ECU 1303 to the ECU 1306 via the communication line 1313. Regarding power transmission between the ECU 1303 and the ECU 1305, the ECU 1303 and the ECU 1305 can supply power to each other by power supply superposition via a communication line 1312. If the power supply 201 fails, the power of the power supply 202 is supplied from the ECU 1303 to the ECU 1305 via the communication line 1312.

[0109] The ECU 1303 performs redundant communication with the ECU 1304 via communication lines 1311 and 1314, performs redundant communication with the ECU 1305 via communication lines 1312 and 1315, and performs redundant communication with the ECU 1306 via communication lines 1313 and 1316 to transmit and receive data. The ECU 1303 also supplies power to the sensor 231 via a power line 241, and performs control and data transmission and reception via a communication line 242. The ECU 1303 also supplies power to the actuator 232 via a power line 243, and performs control and data transmission and reception via a communication line 244.

[0110] The ECU 1304 performs redundant communication with the ECU 1303 via communication lines 1311 and 1314 to transmit and receive data. The ECU 1304 also supplies power to the sensor 233 via a power line 245, and performs control and transmits and receives data via a communication line 246. The ECU 1304 also supplies power to the actuator 234 via a power line 247, and performs control and transmits and receives data via a communication line 248.

[0111] The ECU 1305 performs redundant communication with the ECU 1303 via communication lines 1312 and 1315 to transmit and receive data. The ECU 1305 also supplies power to the sensor 235 via a power line 249, and performs control and transmits and receives data via a communication line 250. The ECU 1305 also supplies power to the actuator 236 via a power line 251, and performs control and transmits and receives data via a communication line 252.

[0112] The ECU 1306 performs redundant communication with the ECU 1303 via communication lines 1313 and 1316 to transmit and receive data. The ECU 1306 also supplies power to the sensor 237 via a power line 253, and performs control and transmits and receives data via a communication line 254. The ECU 1306 also supplies power to the actuator 238 via a power line 255, and performs control and transmits and receives data via a communication line 256.

[0113] [Electronic control device configuration] Next, the configuration of an electronic control unit (ECU) included in power supply system 1300 will be described with reference to FIG.

[0114] 14 is a block diagram showing a configuration example of an electronic control unit (ECU 1303) included in the power supply system 1300. The configurations of ECU 1304, ECU 1305, and ECU 1306 are almost the same as ECU 1303, except that the number of communication lines is reduced. Note that the number of power supply superposition filters of the ECU of interest may be reduced according to the number of other ECUs connected to the ECU of interest via communication lines. For example, each of ECU 1304, ECU 1305, and ECU 1306 may have one power supply superposition filter.

[0115] The ECU 1303 is composed of an ECU core unit 1401, a power supply switch 1402, a transceiver 1403, a power supply superposition filter 1404, a power supply superposition filter 1405, and a power supply superposition filter 1406. The basic functions of each processing block are similar to those of the ECU core unit 301, the power supply switch 302, the transceiver 303, and the power supply superposition filter 304 shown in FIG.

[0116] The power supply superimposition filter 1404 is connected to the ECU 1304 via a communication line 1311, and exchanges a communication signal or a communication signal on which power is superimposed. The power supply superimposition filter 1404 is also connected to the power supply switch 1402 via a power line 1411, and is connected to the transceiver 1403 via a communication line 1421. The power supply superimposition filter 1404 is also connected to a power supply superimposition filter 1405 and a power supply superimposition filter 1406 via the power line 1411. In the power supply superimposition filter 1404, only DC power and power having a frequency near DC pass between the communication line 1311 and the power line 1411, and only high-frequency communication signals pass between the communication line 1311 and the communication line 1421.

[0117] The power supply superposition filter 1405 is connected to the ECU 1305 via a communication line 1312, and exchanges a communication signal or a communication signal on which power is superposed. The power supply superposition filter 1405 is also connected to the power supply switch 1402 via a power line 1411, and is connected to the transceiver 1403 via a communication line 1422. The power supply superposition filter 1405 is also connected to the power supply superposition filter 1404 and the power supply superposition filter 1406 via the power line 1411. In the power supply superposition filter 1405, only DC power and power having a frequency near DC pass between the communication line 1312 and the power line 1411, and only high-frequency communication signals pass between the communication line 1312 and the communication line 1422.

[0118] The power supply superposition filter 1406 is connected to the ECU 1306 via a communication line 1313, and exchanges a communication signal or a communication signal on which power is superposed. The power supply superposition filter 1406 is also connected to the power supply switch 1402 via a power line 1411, and is also connected to the transceiver 1403 via a communication line 1423. The power supply superposition filter 1406 is also connected to the power supply superposition filter 1404 and the power supply superposition filter 1405 via the power line 1411. In the power supply superposition filter 1406, only DC power and power having a frequency near DC pass between the communication line 1313 and the power line 1411, and only high-frequency communication signals pass between the communication line 1313 and the communication line 1423.

[0119] The power of the power source 201 supplied via the power harness 207 and the power of the power source 202 supplied via the power line 1411 are input to the power source switch 1402. The power source switch 1402 internally monitors the voltage passed through the power harness 207 and the voltage passed through the power line 1411, and determines and switches which voltage to connect to the output. As a result, the power source switch 1402 supplies power to the ECU core unit 1401 via the power line 1413, to the transceiver 1403 via the power line 1412, to the sensor 231 via the power line 241, and to the actuator 232 via the power line 243.

[0120] When the power supply 201 is normal, the power supply switch 1402 supplies power from the power supply harness 207 to the ECU core unit 1401, the transceiver 1403, the sensor 231, and the actuator 232. On the other hand, when the power supply 201 fails and the power supply 202 is normal, the power supply switch 1402 supplies power transmitted through the power line 1411 to the ECU core unit 1401, the transceiver 1403, the sensor 231, and the actuator 232. Since the power supply switch 1402 can obtain power supply failure information about the power supply 201, it can also send the power supply failure information to the ECU core unit 1401 via a communication line 1424 to share the power supply failure information with other ECUs.

[0121] The transceiver 1403 communicates with the ECU 1304 via the communication line 1311 via the communication line 1421 and the power supply superposition filter 1404, and the communication line 1314. The transceiver 1403 also communicates with the ECU 1305 via the communication line 1312 via the communication line 1422 and the power supply superposition filter 1405, and the communication line 1315. The transceiver 1403 also communicates with the ECU 1306 via the communication line 1313 via the communication line 1423 and the power supply superposition filter 1406, and the communication line 1316. The transceiver 1403 then exchanges transmission signals and reception signals for other ECUs with the ECU core unit 1401 via the communication line 1425.

[0122] The ECU core unit 1401 controls the transceiver 1403 through a communication line 1425, and transmits and receives data to and from the ECU 1304, ECU 1305, and ECU 1306 (FIG. 13) via the transceiver 1403. The ECU core unit 1401 also controls the sensor 231 and the actuator 232 and transmits and receives data to and from the sensor 231 and the actuator 232, and processes the data.

[0123] As described above, according to the power supply system (power supply system 1300) of the third embodiment, in addition to the same advantageous effects as those of the first embodiment, the number of communication lines can be reduced compared to the first embodiment because of the star network.

[0124] <Fourth embodiment> Next, the configuration of a power supply system according to a fourth embodiment of the present invention will be described with reference to FIG.

[0125] [Power supply system configuration] Fig. 15 is a system configuration diagram showing an example of power supply redundancy in a power supply system according to the fourth embodiment. A power supply system 1500 shown in Fig. 15 uses a ring-type network architecture similar to the power supply system 200 (Fig. 2) according to the first embodiment, reduces the number of power harnesses compared to the first embodiment, and supplies power to a target ECU by power superposition even when the power supply is normal.

[0126] The power supply 201 supplies power to the ECU 1503 via a power supply harness 207. The power supply 202 supplies power to the ECU 1504 via a power supply harness 211. In other words, there are no power supply harnesses between the power supply 201 and the ECU 1505, and between the power supply 202 and the ECU 1506.

[0127] The ECU 1503 and the ECU 1504 can supply power to each other by power supply superposition via the communication line 216. If the power supply 201 fails, the power of the power supply 202 is supplied from the ECU 1504 to the ECU 1503 via the communication line 216. Conversely, if the power supply 202 fails, the power of the power supply 201 is supplied from the ECU 1503 to the ECU 1504 via the communication line 216.

[0128] The power of the ECU 1505 is supplied from the power source 201 via the ECU 1503 through the communication line 215 by power supply superposition. Similarly, the power of the ECU 1506 is supplied from the power source 202 via the ECU 1504 through the communication line 218 by power supply superposition.

[0129] ECU 1505 and ECU 1506 can supply power to each other by power supply superposition via communication line 217. If power supply 201 fails, power from power supply 202 is supplied to ECU 1505 via ECU 1504 and ECU 1506, and via communication line 217. Conversely, if power supply 202 fails, power from power supply 201 is supplied to ECU 1506 via ECU 1503 and ECU 1505, and via communication line 217.

[0130] The ECU 1503 performs redundant communication with the ECU 1504 via the communication lines 216 and 220, and performs redundant communication with the ECU 1505 via the communication lines 215 and 219 to transmit and receive data. The ECU 1503 also supplies power to the sensor 231 via a power line 241, and performs control and transmits and receives data via a communication line 242. The ECU 1503 also supplies power to the actuator 232 via a power line 243, and performs control and transmits and receives data via a communication line 244.

[0131] The ECU 1504 performs redundant communication with the ECU 1503 via the communication lines 216 and 220, and performs redundant communication with the ECU 1506 via the communication lines 218 and 222 to transmit and receive data. The ECU 1504 also supplies power to the sensor 233 via a power line 245, and performs control and transmits and receives data via a communication line 246. The ECU 1504 also supplies power to the actuator 234 via a power line 247, and performs control and transmits and receives data via a communication line 248.

[0132] The ECU 1505 performs redundant communication with the ECU 1503 via the communication lines 215 and 219, and performs redundant communication with the ECU 1506 via the communication lines 217 and 221 to send and receive data. The ECU 1505 also supplies power to the sensor 235 via a power line 249, and performs control and data transmission via a communication line 250. The ECU 1505 also supplies power to the actuator 236 via a power line 251, and performs control and data transmission via a communication line 252.

[0133] The ECU 1506 performs redundant communication with the ECU 1504 via the communication lines 218 and 222, and performs redundant communication with the ECU 1505 via the communication lines 217 and 221 to send and receive data. The ECU 1506 also supplies power to the sensor 237 via a power line 253, and performs control and data transmission via a communication line 254. The ECU 1506 also supplies power to the actuator 238 via a power line 255, and performs control and data transmission via a communication line 256.

[0134] [Electronic control device configuration] Next, the configuration of an electronic control unit (ECU) included in power supply system 1500 will be described with reference to FIG.

[0135] 16 is a block diagram showing an example of the configuration of an electronic control unit (ECU 1503) included in the power supply system 1500. The ECU 1504 has a similar configuration to the ECU 1503.

[0136] The ECU 1503 is composed of an ECU core unit 1601, a power supply switch 1602, a transceiver 1603, a power supply superposition filter 1604, and a power supply superposition filter 1605. The basic functions of each processing block are similar to those of the ECU core unit 301, the power supply switch 302, the transceiver 303, and the power supply superposition filter 304 shown in FIG.

[0137] The power supply superposition filter 1604 is connected to the ECU 1504 via the communication line 216, and exchanges a communication signal or a communication signal on which power is superposed. The power supply superposition filter 1604 is also connected to the power supply switch 1602 via a power line 1611, and is connected to the transceiver 1603 via a communication line 1621. The power supply superposition filter 1604 is also connected to the power supply superposition filter 1605 via the power line 1611. In the power supply superposition filter 1604, only DC power and power having a frequency near DC pass between the communication line 216 and the power line 1611, and only high-frequency communication signals pass between the communication line 216 and the communication line 1621.

[0138] The power supply superposition filter 1605 is connected to the ECU 1505 via the communication line 215, and exchanges a communication signal or a communication signal on which power is superposed. The power supply superposition filter 1605 is also connected to the power supply switch 1602 via a power line 1611, and is connected to the transceiver 1603 via a communication line 1622. The power supply superposition filter 1605 is also connected to the power supply superposition filter 1604 via the power line 1611. In the power supply superposition filter 1605, only DC power and power having a frequency near DC pass between the communication line 215 and the power line 1611, and only high-frequency communication signals pass between the communication line 215 and the communication line 1622.

[0139] The power supply switch 1602 receives the power of the power supply 201 supplied via the power harness 207 and the power of the power supply 202 supplied via the power line 1611. The power supply switch 1602 internally monitors the voltage passed through the power harness 207 and the voltage passed through the power line 1611, and determines which voltage to connect to the output and switches between them. As a result, the power supply switch 1602 supplies power to the ECU core unit 1601 via the power line 1613, to the transceiver 1603 via the power line 1612, to the sensor 231 via the power line 241, and to the actuator 232 via the power line 243.

[0140] When the power supply 201 is normal, the power supply switch 1602 supplies power from the power supply harness 207 to the ECU core unit 1601, the transceiver 1603, the sensor 231, and the actuator 232. On the other hand, when the power supply 201 fails and the power supply 202 is normal, the power supply switch 1602 supplies power transmitted through the power line 1611 to the ECU core unit 1601, the transceiver 1603, the sensor 231, and the actuator 232. Since the power supply switch 1602 can obtain power supply failure information about the power supply 201, it can also send the power supply failure information to the ECU core unit 1601 via a communication line 1624 to share the power supply failure information with other ECUs.

[0141] The transceiver 1603 communicates with the ECU 1504 via the communication line 216 via the communication line 1621 and the power supply superposition filter 1604, and the communication line 220. The transceiver 1603 also communicates with the ECU 1505 via the communication line 215 via the communication line 1622 and the power supply superposition filter 1605, and the communication line 219. The transceiver 1603 then exchanges transmission signals and reception signals for other ECUs with the ECU core unit 1601 via the communication line 1625.

[0142] The ECU core unit 1601 controls the transceiver 1603 through a communication line 1625, and transmits and receives data to and from the ECU 1504, ECU 1505, and ECU 1506 (FIG. 15) via the transceiver 1603. The ECU core unit 1601 also controls the sensor 231 and the actuator 232 and transmits and receives data to and from the sensor 231 and the actuator 232, and processes the data.

[0143] [Configuration of other electronic control devices] Next, the configuration of another electronic control unit (ECU) included in the power supply system 1500 will be described with reference to FIG.

[0144] 17 is a block diagram showing an example of the configuration of another electronic control unit (ECU 1505) included in power supply system 1500. ECU 1506 has the same configuration as ECU 1505.

[0145] The ECU 1505 is composed of an ECU core unit 1701, a power supply switch 1702, a transceiver 1703, a power supply superposition filter 1704, and a power supply superposition filter 1705. The basic functions of each processing block are similar to those of the ECU core unit 301, the power supply switch 302, the transceiver 303, and the power supply superposition filter 304 shown in Fig. 3. The ECU 1505 is slightly different from the ECU 1503 in terms of the wiring in that a power supply harness is not connected.

[0146] The power supply superposition filter 1704 is connected to the ECU 1506 via the communication line 217, and exchanges a communication signal or a communication signal on which power is superposed. The power supply superposition filter 1704 is also connected to the power supply switch 1702 via a power line 1711, and is connected to the transceiver 1703 via a communication line 1721. In the power supply superposition filter 1704, only DC power and power having a frequency near DC pass between the communication line 217 and the power line 1711, and only high-frequency communication signals pass between the communication line 217 and the communication line 1721.

[0147] The power supply superposition filter 1705 is connected to the ECU 1503 via the communication line 215, and exchanges communication signals or communication signals on which power is superposed. The power supply superposition filter 1705 is also connected to the power supply switch 1702 via a power line 1712, and is connected to the transceiver 1703 via a communication line 1722. In the power supply superposition filter 1705, only DC power and power having a frequency near DC pass between the communication line 215 and the power line 1712, and only high-frequency communication signals pass between the communication line 215 and the communication line 1722.

[0148] Power from power source 201 supplied via power line 1712 and power from power source 202 supplied via power line 1711 are input to power source switch 1702. Power source switch 1702 internally monitors the voltage passed through power line 1712 and the voltage passed through power line 1711, and determines and switches which voltage to connect to the output. As a result, power source switch 1702 supplies power to ECU core unit 1701 via power line 1714, to transceiver 1703 via power line 1713, to sensor 235 via power line 249, and to actuator 236 via power line 251.

[0149] When the power supply 201 is normal, the power supply switch 1702 supplies power from the power supply line 1712 to the ECU core unit 1701, the transceiver 1703, the sensor 235, and the actuator 236. On the other hand, when the power supply 201 fails and the power supply 202 is normal, the power supply switch 1702 supplies power transmitted through the power supply line 1711 to the ECU core unit 1701, the transceiver 1703, the sensor 235, and the actuator 236. In addition, since the power supply switch 1702 can obtain power supply failure information about the power supply 201, it can also send the power supply failure information to the ECU core unit 1701 via a communication line 1724 to share the power supply failure information with other ECUs.

[0150] The transceiver 1703 communicates with the ECU 1506 via a communication line 217 that passes through a communication line 1721 and a power supply superposition filter 1604, and a communication line 221. The transceiver 1703 also communicates with the ECU 1503 via a communication line 1722 and a communication line 215 that passes through a power supply superposition filter 1705, and a communication line 219. The transceiver 1703 then exchanges transmission signals and reception signals for other ECUs with the ECU core unit 1701 via a communication line 1725.

[0151] The ECU core unit 1701 controls the transceiver 1703 through a communication line 1725, and transmits and receives data to and from the ECU 1503, ECU 1504, and ECU 1506 (FIG. 16) via the transceiver 1703. The ECU core unit 1701 also controls the sensor 235 and the actuator 236 and transmits and receives data to and from them, and processes the data.

[0152] The present invention can also be applied to an architecture that is capable of receiving power supply from power source 201 and power source 202 and has an integrated ECU that controls a plurality of ECUs in an integrated manner.

[0153] Furthermore, the present invention is not limited to the above-described embodiment, and various other applications and modifications are possible without departing from the gist of the present invention described in the claims. For example, the above-described embodiment has been described in detail and specifically in order to explain the present invention in an easy-to-understand manner, and is not necessarily limited to having all of the components described. It is also possible to replace a part of the configuration of one embodiment with a component of another embodiment. It is also possible to add a component of another embodiment to the configuration of one embodiment. It is also possible to add, replace, or delete other components to or from a part of the configuration of each embodiment.

[0154] In addition, the above-mentioned configurations, functions, processing units, etc. may be realized in part or in whole by hardware, for example, by designing them as integrated circuits. As the hardware, a broad processor device such as an FPGA (Field Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit) may be used.

[0155] In the above-described embodiment, the control lines and information lines are those that are considered necessary for the explanation, and not all control lines and information lines in the product are necessarily shown. In reality, it may be considered that almost all components are connected to each other. [Explanation of symbols]

[0156] 200... power supply system; 201, 202... power supply; 203 to 206... ECU; 207, 208, 211, 212... power harness; 301... ECU core; 302... power supply switching unit; 303... transmitter / receiver; 304... power supply superposition filter; 401... own power supply switch; 402... other load switch; 403... other power supply switch

Claims

1. A first control circuit; a first power supply that outputs a first voltage to be supplied as a power supply voltage to the first control circuit; a first switch circuit connected to the first power supply and the first control circuit and configured to cut off power supply of the first voltage to the first control circuit; a second switch circuit connected to a communication line used for communication between the first power supply and a second control circuit, the second switch circuit cutting off the supply of the first voltage to the communication line; a second power supply that outputs a second voltage that is supplied as a power supply voltage to the second control circuit; a power switch circuit connected to the first control circuit and the communication line, and configured to supply the second voltage to the first control circuit via the communication line when the supply of the first voltage to the first control circuit is interrupted by the first switch circuit; The power supply of the first voltage to the second control circuit and the power supply of the second voltage to the first control circuit are bidirectional power transmissions using the communication line, the first switch circuit cuts off the supply of the first voltage to the first control circuit when a voltage drop of the first voltage is equal to or greater than a threshold; the second switch circuit cuts off the supply of the first voltage to the communication line when a voltage drop of the first voltage is equal to or greater than a threshold; The power supply switch circuit switches a supply source of a power supply voltage to the first control circuit from the first power supply to the second power supply. Power supply system.

2. the first switch circuit supplies the first voltage to the first control circuit when a voltage drop of the first voltage is smaller than a threshold; the second switch circuit supplies the first voltage to the communication line when a voltage drop of the first voltage is smaller than a threshold value and a voltage drop of the second voltage is equal to or larger than a threshold value; The power switch circuit disconnects the first control circuit from the communication line. The power supply system according to claim 1 .

3. the first switch circuit includes a first switching element that energizes between the first power supply and the first control circuit when a voltage drop of the first voltage is smaller than a threshold value, and a switching element that is connected in series with the first switching element and of opposite polarity between the first power supply and the first control circuit, the second switch circuit includes a second switching element that passes current between the first power supply and the communication line when a voltage drop of both the first voltage and the second voltage is smaller than a threshold value, and a switching element that is connected in series with the second switching element and has an opposite polarity between the first power supply and the communication line, The power supply switch circuit includes a third switching element that energizes between the first control circuit and the communication line when a voltage drop of the first voltage is smaller than a threshold value, and a switching element that is connected in series with the third switching element and has an opposite polarity between the first control circuit and the communication line. The power supply system according to claim 1 .

4. When the power supply of the first voltage to the first control circuit is cut off, the first control circuit notifies an external device that the first power supply is abnormal. The power supply system according to claim 1 .

5. a first control circuit to which a first voltage is supplied as a power supply voltage from a first power supply; a first switch circuit connected to the first power supply and the first control circuit and configured to cut off power supply of the first voltage to the first control circuit; a second switch circuit connected to the first power supply and a communication line used for communication with a second control circuit to which a second voltage is supplied as a power supply voltage from a second power supply, the second switch circuit cutting off the supply of the first voltage to the communication line; a power switch circuit connected to the first control circuit and the communication line, and configured to supply the second voltage to the first control circuit via the communication line when the supply of the first voltage to the first control circuit is interrupted by the first switch circuit; The power supply of the first voltage to the second control circuit and the power supply of the second voltage to the first control circuit are bidirectional power transmissions using the communication line, the first switch circuit cuts off the supply of the first voltage to the first control circuit when a voltage drop of the first voltage is equal to or greater than a threshold; the second switch circuit cuts off the supply of the first voltage to the communication line when a voltage drop of the first voltage is equal to or greater than a threshold; The power supply switch circuit switches a supply source of a power supply voltage to the first control circuit from the first power supply to the second power supply. Electronic control unit.

Images