Power source control system

Abstract

To suppress an increase in cost or enlargement in size.SOLUTION: A power source control system comprises a power source device and a cutout device. The power source device includes a power source supply function for supplying power of a first power source and a second power source to a load and performs backup control, in a case where one power source of the first power source and the second power source falls into a failure, for supplying power from the other power source to the load. The cutout device is provided between the power source device and the load and capable of supplying and cutting off power from the power source device to the load. The cutout device includes a first cutout device and a second cutout device. The first cutout device comprises a switch capable of supplying and cutting out power from a first system including the first power source and a second system including the second power source. The second cutout device includes a switch capable of supplying and cutting out power from one system of the first system and the second system.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a power supply control system. [Background technology]

[0002] A known power supply system includes a first system having a first power supply and a second system having a second power supply, and performs backup control in which, if the first power supply fails, the connection between the first system and the second system is cut off and power is supplied to the load from the second power supply. Also known is a technology in which a load switch is provided for each load in the power supply line connecting the first and second power supplies to the load, and in the event of a failure, the load is isolated from the failed point by disconnecting the load switch.

[0003] The above-mentioned load switches must be provided according to the number of loads, so when a new load is added, a new power supply control device (ECU (Electronic Control Unit)) must be designed to control the load switches, which increases costs.

[0004] Therefore, a power supply system has been proposed in which the load is divided into multiple areas and a changeover box switch is provided for each area (see, for example, Patent Document 1). In such a power supply system, even when a new load is added, the area is increased and a changeover box switch is added, eliminating the need to redesign the entire power supply control device and suppressing increases in costs. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Publication No. 2022-171072 Summary of the Invention [Problem to be solved by the invention]

[0006] However, all of the conventional changeover box switches have the same configuration. Furthermore, the functionality required for backup control of each load varies depending on the load. Therefore, if a changeover box switch with the same configuration is used for each of these loads, the changeover box switch and the ECU that controls the changeover box switch must be designed to handle the load with the highest functionality. Therefore, in the conventional technology, the changeover box switch and the ECU are over-specified, which can result in increased costs or larger size.

[0007] The present invention has been made in view of the above, and has an object to provide a power supply control system that can suppress increases in cost or size. [Means for solving the problem]

[0008] In order to solve the above problems and achieve the object, in the present invention, a power supply control system includes a power supply device and a circuit breaker device. The power supply device has a power supply function of supplying power from a first power supply and a second power supply to a load, and performs backup control of supplying power to the load from the other power supply when one of the first power supply and the second power supply fails. The circuit breaker device is provided between the power supply device and the load and is configured to be able to supply and cut off power from the power supply device to the load. The circuit breaker device includes a first circuit breaker device and a second circuit breaker device. The first circuit breaker device has a switch that can supply and cut off power from a first system having the first power supply and a second system having the second power supply, respectively. The second circuit breaker device has a switch that can supply and cut off power from one of the first system and the second system. [Effects of the Invention]

[0009] The power supply control system of the present invention includes a circuit breaker capable of supplying and interrupting power from a power supply to a load. The circuit breaker includes a first circuit breaker having a switch capable of supplying and interrupting power from a first system and a second system, respectively, and a second circuit breaker having a switch capable of supplying and interrupting power from one of the first and second systems. This makes it possible to use circuit breakers with different numbers of switches depending on the functionality and importance required, for example, during backup control of a load. In other words, because it is possible to use circuit breakers suited to the functionality of the corresponding load, the circuit breakers do not have over-specified specifications, and as a result, it is possible to suppress increases in cost or size of the power supply control system. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is an explanatory diagram showing an example of the configuration of a power supply control system according to the first embodiment. [Figure 2] FIG. 2 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 3] FIG. 3 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 4] FIG. 4 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 5] FIG. 5 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 6] FIG. 6 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 7] FIG. 7 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 8] FIG. 8 is an explanatory diagram showing an example of the operation of the power supply device and the circuit breaker device according to the first embodiment. [Figure 9] FIG. 9 is a flowchart illustrating an example of processing executed by the controller. [Figure 10]FIG. 10 is a flowchart illustrating an example of a process executed by the first controller. [Figure 11] FIG. 11 is a flowchart illustrating an example of processing executed by the third controller. [Figure 12] FIG. 12 is an explanatory diagram illustrating an example of the configuration of a power supply control system according to the second embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, embodiments of a power supply control system will be described in detail with reference to the accompanying drawings. Note that the present invention is not limited to the embodiments described below. The power supply control system according to the embodiment is mounted on a vehicle such as an electric vehicle, a hybrid vehicle, or an internal combustion engine vehicle, but is not limited thereto. Furthermore, the power supply control system according to the embodiment is a device mounted on a vehicle with an automatic driving function to supply power to a load, but is not limited thereto.

[0012] [First embodiment] [1-1. Control system configuration] Fig. 1 is an explanatory diagram showing an example of the configuration of a power supply control system 100 according to the first embodiment. As shown in Fig. 1, the power supply control system 100 according to this embodiment includes a power supply device 1, a first power source 10, loads 1-1 to 1-4 111-1 to 111-4, a second load 121, a third load 131, a fourth load 141, a fifth load 151, circuit breakers 71 to 75, and an automatic operation control device 200. Note that hereinafter, loads 1-1 to 111-4 may be collectively referred to as "first load 111."

[0013] When the power supply device 1 is installed in an engine vehicle, the first power source 10 includes a lead battery (hereinafter referred to as "PbB11") and a generator 12. The first power source 10 is the main power source. Note that the battery of the first power source 10 may be any secondary battery other than PbB11.

[0014] The generator 12 is, for example, an alternator that converts the kinetic energy of a running vehicle into electricity to generate power. The generator 12 charges the PbB 11 and a second power source 20 (described later) with the generated power. The first power source 10 also supplies power to a plurality of electrical loads mounted on the vehicle.

[0015] When the power supply device 1 is mounted on an electric vehicle or a hybrid vehicle, the first power source 10 includes a DC / DC converter (not shown, hereinafter referred to as "DCDC") and a PbB 11. In this case, the DCDC is connected to a generator 12 and a high-voltage battery (not shown) whose voltage is higher than that of the PbB 11, and steps down the voltage of the generator 12 and the high-voltage battery to supply power to a plurality of electrical loads. The high-voltage battery is, for example, a battery for driving the vehicle mounted on an electric vehicle or a hybrid vehicle.

[0016] The first load 111 and the second load 121 include loads used for vehicle travel. The first load 111 and the second load 121 also include loads for automatic driving, as well as devices minimally required for FOP (Fail-in-Operation, evacuation travel control). For example, the 1-1 load 111-1 is an electric steering device, the 1-2 load 111-2 is an electric brake device, the 1-3 load 111-3 is an electric accelerator device, the 1-4 load 111-4 is an in-vehicle camera, and the second load 121 is a radar. These first load 111 and second load 121 are backup loads because they are supplied with power during backup control, which will be described later. The first load 111 may also include general loads that are not involved in vehicle travel, automatic driving, etc. Examples of general loads include displays, air conditioners, audio, video, and various lights.

[0017] The first load 111 is a load corresponding to a function commonly installed in a plurality of types of vehicles. In other words, the first load 111 is a load commonly installed in all vehicle types. For example, if the functions commonly installed in a plurality of types of vehicles are a power steering function and an automatic braking function, the 1-1 load 111-1 is an electric steering device, and the 1-2 load 111-2 is an electric braking device.

[0018] The second load 121 is a load corresponding to a function selectively installed in the vehicle. In other words, the second load 121 is a load for realizing an optional function of the vehicle, and is installed in the vehicle when the optional function is selected by the user. For example, if the function selectively installed in the vehicle is a vehicle periphery monitoring function, the second load 121 is a radar. Note that, although FIG. 1 shows an example in which there is one load (second load 121) for realizing the optional function, there may be two or more (plural) loads.

[0019] The third to fifth loads 131 to 151 are not supplied with power during backup control, which will be described later, and therefore can be considered non-backup loads. The third load 131 is a load that operates while the vehicle is running using power from the first power source 10. For example, the third load 131 includes general loads such as an air conditioner and audio equipment.

[0020] The fourth load 141 is a load that operates when an ignition switch (hereinafter referred to as "IG") of the vehicle is off by power from the second power source 20 (described later). For example, the fourth load 141 includes a general load such as an immobilizer.

[0021] The fifth load 151 is a load that operates using power from the first power source 10 while the vehicle is running, and is also a load that operates using power from the second power source 20 when the IG of the vehicle is off. For example, the fifth load 151 includes a general load such as a drive recorder. Note that, although specific examples of the first to fifth loads 111 to 151 have been given above, these are merely examples and are not intended to be limiting.

[0022] The first to fifth loads 111 to 151 are connected to the corresponding circuit breakers 71 to 75, respectively, and operate with power supplied from the power supply device 1 via the circuit breakers 71 to 75.

[0023] The automatic driving control device 200 is an external device that controls automatic driving of a vehicle by operating a first load 111 and a second load 121. If a failure (abnormality) occurs in the first power source 10 during automatic driving of the vehicle, the automatic driving control device 200 can implement FOP using the first load 111 and the second load 121 with the power of the second power source 20. Furthermore, if a failure occurs in the second power source 20, the automatic driving control device 200 can implement FOP using the first load 111 and the second load 121 with the power of the first power source 10. Note that a failure of the first power source 10 includes a failure in the power supply system of the first power source 10 (a first system 110 described later). Furthermore, a failure of the second power source 20 includes a failure in the power supply system of the second power source 20 (a second system 120 described later). In addition, when the second load 121, which is a load for realizing an optional function of the vehicle, is not provided, the automatic driving control device 200 can perform automatic driving control of the vehicle by operating the first load 111.

[0024] The power supply device 1 is connected to a first power source 10, circuit breakers 71 to 75, and an automatic driving control device 200. The power supply device 1 includes a first system 110 and a second system 120. The first system 110 is a power feed line that supplies power from the first power source 10 to first to third loads 111 to 131 and a fifth load 151. The second system 120 is a power feed line that supplies power from a second power source 20 (described later) to first and second loads 111 and 121 and fourth and fifth loads 141 and 151.

[0025] The power supply device 1 includes a second power supply 20, an inter-system switch 41, a battery switch 42, a controller 3, a first voltage sensor 51, and a second voltage sensor 52. The second power supply 20 includes a lithium ion battery (hereinafter referred to as "LiB21"). The second power supply 20 is a backup power supply in case the first power supply 10 is unable to supply power. The second power supply 20 is also a power supply that supplies power to a fourth load 141 and a fifth load 151 when the IG is off. The battery of the second power supply 20 may be any secondary battery other than the LiB21.

[0026] The inter-system switch 41 is provided on the inter-system line 130 that connects the first system 110 and the second system 120. The inter-system switch 41 is a switch that can connect and disconnect the first system 110 and the second system 120.

[0027] In this embodiment, electrically connecting the first system 110 and the second system 120 by the inter-system switch 41 is referred to as bringing the inter-system switch 41 into a conductive state. Also, in this embodiment, cutting off (disconnecting) the electrical connection between the first system 110 and the second system 120 by the inter-system switch 41 is referred to as bringing the inter-system switch 41 into a cut-off state.

[0028] The battery switch 42 is provided between the second power source 20 and the second system 120. The battery switch 42 is a switch that can connect and disconnect the second power source 20 to the second system 120. In this embodiment, electrically connecting the second power source 20 and the second system 120 by the battery switch 42 is referred to as putting the battery switch 42 into a conductive state. Also, in this embodiment, cutting off (disconnecting) the electrical connection between the second power source 20 and the second system 120 by the battery switch 42 is referred to as putting the battery switch 42 into a cut-off state.

[0029] The first voltage sensor 51 is provided in the first system 110. The first voltage sensor 51 detects the voltage of the first system 110 and outputs the detection result to the controller 3. The second voltage sensor 52 is provided in the second system 120. The second voltage sensor 52 detects the voltage of the second system 120 and outputs the detection result to the controller 3.

[0030] The controller 3 includes a microcomputer having a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), etc., and various other circuits. The controller 3 also includes a storage unit (not shown) such as a semiconductor memory element such as RAM or flash memory, or a hard disk or optical disk. The controller 3 is realized, for example, by the CPU or the like executing various programs stored in the storage unit using the RAM as a working area. The controller 3 may also be configured with hardware such as an ASIC (Application Specific Integrated Circuit) or FPGA (Field Programmable Gate Array).

[0031] The controller 3 detects a power failure in the first system 110 or the second system 120 based on the detection results input from the first voltage sensor 51 and the second voltage sensor 52. The power failure is, for example, a ground fault.

[0032] When the controller 3 detects a ground fault in the first system 110 or the second system 120, it notifies the automatic driving control device 200 of that fact. Specifically, when the controller 3 detects a ground fault in the first system 110 or the second system 120, it outputs an automatic driving prohibition signal indicating that automatic driving is not possible to the automatic driving control device 200. Furthermore, when the controller 3 does not detect a ground fault in the first system 110 or the second system 120, it outputs an automatic driving permission signal indicating that automatic driving is possible to the automatic driving control device 200. The controller 3 detects the location of the ground fault (fault location) based on the determination results output from the first controller 61g1, etc., which will be described later.

[0033] The interrupting device 71 is provided between the power supply device 1 and the first load 111. The interrupting device 71 is configured to be able to supply and interrupt power from the power supply device 1 to the first load 111. Specifically, the interrupting device 71 includes load switches 61a1-61a4, 61b1-61b4, diodes 61c1-61c4, 61d1-61d4, voltage sensors 61e1-61e4, 61f1-61f4, and a first controller 61g1.

[0034] In the following, the load switches 61a1 to 61a4 may be collectively referred to as "load switch 61a." Similarly, the load switches 61b1 to 61b4, the diodes 61c1 to 61c4, 61d1 to 61d4, and the voltage sensors 61e1 to 61e4, 61f1 to 61f4 may be referred to as "load switch 61b," "diode 61c," "diode 61d," "voltage sensor 61e," and "voltage sensor 61f," respectively.

[0035] The load switch 61a1, diode 61c1, and voltage sensor 61e1 are provided in the first system 110. The load switch 61a1 is configured to be able to supply and cut off power to the 1-1 load 111-1 from the first system 110 having the first power supply 10. The diode 61c1 has an anode connected to the load switch 61a1 and a cathode connected to the 1-1 load 111-1. The voltage sensor 61e1 detects the voltage of the first system 110 and outputs the detection result to the first controller 61g1.

[0036] The load switch 61b1, diode 61d1, and voltage sensor 61f1 are provided in the second system 120. The load switch 61b1 is configured to be able to supply and cut off power to the 1-1 load 111-1 from the second system 120 having the second power supply 20. The diode 61d1 has an anode connected to the load switch 61b1 and a cathode connected to the 1-1 load 111-1. The voltage sensor 61f1 detects the voltage of the second system 120 and outputs the detection result to the first controller 61g1.

[0037] The load switch 61a2, diode 61c2, and voltage sensor 61e2 are provided in the first system 110. The load switch 61a2 is configured to be able to supply and cut off power from the first system 110 to the 1-2 load 111-2. The anode side of the diode 61c2 is connected to the load switch 61a2, and the cathode side is connected to the 1-2 load 111-2. The voltage sensor 61e2 detects the voltage of the first system 110 and outputs the detection result to the first controller 61g1.

[0038] The load switch 61b2, the diode 61d2, and the voltage sensor 62b3 are provided in the second system 120. The load switch 61b2 is configured to be able to supply and cut off power from the second system 120 to the 1-2 load 111-2. The anode side of the diode 61d2 is connected to the load switch 61b2, and the cathode side is connected to the 1-2 load 111-2. The voltage sensor 61f2 detects the voltage of the second system 120 and outputs the detection result to the first controller 61g1.

[0039] The load switch 61a3, diode 61c3, and voltage sensor 61e3 are provided in the first system 110. The load switch 61a3 is configured to be able to supply and cut off power from the first system 110 to the 1-3 load 111-3. The anode side of the diode 61c3 is connected to the load switch 61a3, and the cathode side is connected to the 1-3 load 111-3. The voltage sensor 61e3 detects the voltage of the first system 110 and outputs the detection result to the first controller 61g1.

[0040] The load switch 61b3, diode 61d3, and voltage sensor 61f3 are provided in the second system 120. The load switch 61b3 is configured to be able to supply and cut off power from the second system 120 to the 1-3 load 111-3. The anode side of the diode 61d3 is connected to the load switch 61b3, and the cathode side is connected to the 1-3 load 111-3. The voltage sensor 61f3 detects the voltage of the second system 120 and outputs the detection result to the first controller 61g1.

[0041] The load switch 61a4, the diode 61c4, and the voltage sensor 61e4 are provided in the first system 110. The load switch 61a4 is configured to be able to supply and cut off power from the first system 110 to the 1-4th load 111-4. The anode side of the diode 61c4 is connected to the load switch 61a4, and the cathode side is connected to the 1-4th load 111-4. The voltage sensor 61e4 detects the voltage of the first system 110 and outputs the detection result to the first controller 61g1.

[0042] The load switch 61b4, the diode 61d4, and the voltage sensor 61f4 are provided in the second system 120. The load switch 61b4 is configured to be able to supply and cut off power from the second system 120 to the 1-4th load 111-4. The anode side of the diode 61d4 is connected to the load switch 61b4, and the cathode side is connected to the 1-4th load 111-4. The voltage sensor 61f4 detects the voltage of the second system 120 and outputs the detection result to the first controller 61g1.

[0043] The first controller 61g1 and the second to fifth controllers 61g2 to 61g5 described below include a microcomputer having a CPU, ROM, RAM, etc., and various circuits. The first to fifth controllers 61g1 to 61g5 also include a storage unit (not shown) such as a RAM, a semiconductor memory device such as a flash memory, etc. The first to fifth controllers 61g1 to 61g5 are realized, for example, by the CPU or the like executing various programs stored in the storage unit using the RAM as a work area. The first to fifth controllers 61g1 to 61g5 may be configured with hardware such as an ASIC or FPGA. The first to fifth controllers 61g1 to 61g5 and the controller 3 are connected to each other so that they can communicate with each other.

[0044] The first controller 61g1 controls the load switches 61a and 61b.

[0045] The interrupting device 72 is provided between the power supply device 1 and the second load 121. The interrupting device 72 is configured to be able to supply and interrupt power from the power supply device 1 to the second load 121. Specifically, the interrupting device 72 includes load switches 61a5 and 61b5, diodes 61c5 and 61d5, voltage sensors 61e5 and 61f5, and a second controller 61g2.

[0046] The load switch 61a5, the diode 61c5, and the voltage sensor 61e5 are provided in the first system 110. The load switch 61a5 is configured to be able to supply and cut off power to the second load 121 from the first system 110 having the first power supply 10. The diode 61c5 has an anode connected to the load switch 61a5 and a cathode connected to the second load 121. The voltage sensor 61e5 detects the voltage of the first system 110 and outputs the detection result to the second controller 61g2.

[0047] The load switch 61b5, the diode 61d5, and the voltage sensor 61f5 are provided in the second system 120. The load switch 61b5 is configured to be able to supply and cut off power to the second load 121 from the second system 120 having the second power supply 20. The diode 61d5 has an anode connected to the load switch 61b5 and a cathode connected to the second load 121. The voltage sensor 61f5 detects the voltage of the second system 120 and outputs the detection result to the second controller 61g2. The second controller 61g2 controls the load switches 61a5 and 61b5.

[0048] The load switches 61a5 and 61b5 in the breaker device 72 are provided according to the number of loads (second loads 121) for realizing the optional function. That is, although not shown, when there are two loads for the optional function, second loads 121-1 and 121-2, the breaker device 72 is configured to include a set of load switches 61a5-1 and 61b5-1 corresponding to the second load 121-1 and a set of load switches 61a5-2 and 61b5-2 corresponding to the second load 121-2.

[0049] The interrupting device 73 is provided between the power supply device 1 and the third load 131. The interrupting device 73 is configured to be able to supply and interrupt power from the power supply device 1 to the third load 131. Specifically, the interrupting device 73 includes a load switch 61a6, a diode 61c6, a voltage sensor 61e6, and a third controller 61g3.

[0050] The load switch 61a6, the diode 61c6, and the voltage sensor 61e6 are provided in the first system 110. The load switch 61a6 is configured to be able to supply and cut off power from the first system 110 to the third load 131. The diode 61c6 has an anode connected to the load switch 61a6 and a cathode connected to the third load 131. The voltage sensor 61e6 detects the voltage of the first system 110 and outputs the detection result to the third controller 61g3. The third controller 61g3 controls the load switch 61a6.

[0051] The interrupting device 74 is provided between the power supply device 1 and the fourth load 141. The interrupting device 74 is configured to be able to supply and interrupt power from the power supply device 1 to the fourth load 141. Specifically, the interrupting device 74 includes a load switch 61b6, a diode 61d6, a voltage sensor 61f6, and a fourth controller 61g4.

[0052] The load switch 61b6, the diode 61d6, and the voltage sensor 61f6 are provided in the second system 120. The load switch 61b6 is configured to be able to supply and cut off power from the second system 120 to the fourth load 141. The anode side of the diode 61d6 is connected to the load switch 61b6, and the cathode side is connected to the fourth load 141. The voltage sensor 61f6 detects the voltage of the second system 120 and outputs the detection result to the fourth controller 61g4. The fourth controller 61g4 controls the load switch 61b6.

[0053] The interrupting device 75 is provided between the power supply device 1 and the fifth load 151. The interrupting device 75 is configured to be able to supply and interrupt power from the power supply device 1 to the fifth load 151. Specifically, the interrupting device 75 includes a load switch 61a7, diodes 61c7 and 61d7, a voltage sensor 68a3, and a fifth controller 61g5.

[0054] The load switch 61a7 is provided on the fifth load 151 side of a connection point P where the first system 110 and the second system 120 are connected. The load switch 61a7 is configured to be able to supply and cut off power to the fifth load 151 from the first system 110 or the second system 120. The diode 61c7 is provided in the first system 110. The anode side of the diode 61c7 is connected to the power supply device 1, and the cathode side is connected to the fifth load 151. The diode 61d7 is provided in the second system 120. The anode side of the diode 61d7 is connected to the power supply device 1, and the cathode side is connected to the fifth load 151.

[0055] The voltage sensor 61e7 is provided on the fifth load 151 side of a connection point P where the first system 110 and the second system 120 are connected. The voltage sensor 61e7 detects the voltage of the first system 110 or the second system 120 and outputs the detection result to the fifth controller 61g5. The fifth controller 61g5 controls the load switch 61a7.

[0056] Here, the first to fifth loads 111 to 151 described above differ from one another in function, importance, vehicle in which they are installed, operating conditions, etc. In this embodiment, a breaker device 71 to 75 is provided for each of the first to fifth loads 111 to 151. This makes it possible to use devices as the breaker devices 71 to 75 that are suited to the functions, etc., of the corresponding first to fifth loads 111 to 151.

[0057] More specifically, the first load 111 and the second load 121 are backup loads. Therefore, when one of the first power source 10 and the second power source 20 fails and backup control is performed, the first load 111 and the second load 121 are supplied with power from the other power source and function as loads that perform FOP. Therefore, the first load 111 and the second load 121 are connected to circuit breakers 71 and 72 that can supply power from both the first system 110 having the first power source 10 and the second system 120 having the second power source 20. Specifically, the circuit breakers 71 and 72 include load switches 61a1-4, 61b1-4, 61a5, and 61b5 that can supply and cut off power from the two systems, the first system 110 and the second system 120, respectively. The circuit breakers 71 and 72 are an example of a first circuit breaker.

[0058] In contrast, the third to fifth loads 131 to 151 are non-backup loads. Therefore, when backup control is performed, the third to fifth loads 131 to 151 are not supplied with power from either the first power source 10 or the second power source 20 (more precisely, from the other power source), and do not function (operate). Therefore, the third to fifth loads 131 to 151 are connected to circuit breakers 73 to 75 that can supply power from one of the first system 110 and the second system 120. Specifically, the circuit breakers 73 to 75 include load switches 61a6, 61b6, and 61a7 that can supply and cut off power from one of the first system 110 and the second system 120. The circuit breakers 73 to 75 are an example of a second circuit breaker.

[0059] In this way, in this embodiment, it is possible to use devices as the circuit breakers 71 to 75 that are suited to the functions required during backup control of the corresponding first to fifth loads 111 to 151. Therefore, the circuit breakers 71 to 75 do not have excessive specifications, and as a result, it is possible to suppress an increase in cost or size of the power supply control system 100.

[0060] Furthermore, the importance of the loads during backup control is higher for the first load 111 and the second load 121, which are backup loads, than for the third to fifth loads 131 to 151, which are non-backup loads. Therefore, the load switches 61a1 to 61b1 to 61b4 of the circuit breaker 71 and the load switches 61a5 and 61b5 of the circuit breaker 72 can be configured to have higher performance, such as durability and responsiveness, than the load switches 61a6, 61b6, and 61a7 of the circuit breakers 73 to 75. In this way, in this embodiment, it is possible to use devices as the circuit breakers 71 to 75 that are appropriate for the importance of the corresponding first to fifth loads 111 to 151 during backup control, and the circuit breakers 71 to 75 are not over-specified.

[0061] The first load 111 is a load corresponding to a function commonly installed in multiple types of vehicles. Therefore, the first load 111 is installed in all vehicles. The circuit breaker 71 is a device that supplies and cuts off power to the first load 111 installed in all vehicles. Since the number of first loads 111 installed in all vehicles is somewhat fixed, a circuit breaker 71 with a single configuration can be used for all vehicles. In other words, it is sufficient to manufacture only one circuit breaker 71 that is common to all vehicles (all vehicle types). Furthermore, highly versatile switches that can be applied to all vehicles can be used as the load switches 61a1-4 and 61b1-4 of the circuit breaker 71. As such, in this embodiment, a device that can be applied to the configuration of all vehicles in which the corresponding first load 111 is installed can be used as the circuit breaker 71, and the circuit breaker 71 does not have to be over-specified.

[0062] The second load 121 is a load corresponding to a function (optional function) selectively installed in the vehicle. The circuit breaker 72 is a device that supplies and cuts off power to such second load 121. Therefore, for the optional second load 121, a circuit breaker 72 can be prepared in advance as an option. Therefore, in this embodiment, even if an optional function using the second load 121 is selected, the second load 121 can be easily attached to the vehicle by using the circuit breaker 72 corresponding to the second load 121. Therefore, in this embodiment, a plurality of circuit breakers 72 corresponding to the number of optional loads (second loads 121) are prepared, and one of the prepared circuit breakers 72 can be used depending on the number of loads.

[0063] The third load 131 is a load that operates from the first power source 10 while the vehicle is traveling. The circuit breaker 73 is a device that supplies and cuts off power to such a third load 131. Specifically, the circuit breaker 73 includes one load switch 61a6 that can supply and cut off power from one of the first systems 110. Because power is supplied to the third load 131 from one of the first systems 110 in this manner, the circuit breaker 73 also includes one load switch 61a6. Note that if there are multiple third loads 131 that are non-backup loads that operate from the first power source 10 while the vehicle is traveling, the circuit breaker 73 is provided with as many load switches 61a6 as there are third loads.

[0064] Furthermore, the fourth load 141 is a load that operates when the IG of the vehicle is off from the second power source 20. The circuit breaker 74 is a device that supplies and cuts off power to such a fourth load 141. Specifically, the circuit breaker 74 includes one load switch 61b6 that can supply and cut off power from one system of the second system 120. As such, because power is supplied to the fourth load 141 from one system of the second system 120, the circuit breaker 74 also includes one load switch 61b6. Note that if there are multiple fourth loads 141, the circuit breaker 74 is provided with load switches 61b6 equal to the number of the fourth loads.

[0065] Therefore, for the third and fourth loads 131 and 141 to which power is supplied in one system, the circuit breakers 73 and 74 can be prepared in advance for the single system. Therefore, in this embodiment, even when the third and fourth loads 131 and 141 to which power is supplied in one system are mounted on a vehicle, the prepared circuit breakers 73 and 74 can be used to easily attach the third and fourth loads 131 and 141 to the vehicle.

[0066] [1-2. Examples of power supply and circuit breaker operation] Next, the operation of the power supply device 1 and the circuit breakers 71 to 75 according to the first embodiment will be described with reference to Figures 2 to 8. Figures 2 to 8 are explanatory diagrams showing an example of the operation of the power supply device 1 and the circuit breakers 71 to 75 according to the first embodiment.

[0067] [1-2-1. Normal operation] In normal operation when the vehicle's IG is on and no ground fault is detected in the first system 110 or the second system 120, the controller 3 sets the battery switch 42 to an OFF state and the inter-system switch 41 to a COND state, as shown in FIG. 2. The first controller 61g1 of the circuit breaker 71 sets the load switches 61a1-4 and 61b1-4 to a COND state. The second controller 61g2 of the circuit breaker 72 sets the load switches 61a5 and 61b5 to a COND state. The third controller 61g3 of the circuit breaker 73 sets the load switch 61a6 to a COND state. The fourth controller 61g4 of the circuit breaker 74 sets the load switch 61b6 to an OFF state. The fifth controller 61g5 of the circuit breaker 75 sets the load switch 61a7 to a COND state.

[0068] As a result, the power supply device 1 and the circuit breakers 71-73, 75 supply power from the first power source 10 to the first to third loads 111-131 and the fifth load 151. Note that the controller 3 outputs an automatic operation permission signal to the automatic operation control device 200 during normal times when no ground fault has occurred in the first system 110 or the second system 120.

[0069] Furthermore, in normal operation when the vehicle's IG is turned off and no ground fault is detected in the first system 110 or the second system 120, the controller 3 places the battery switch 42 in a conductive state and the inter-system switch 41 in a cut-off state, as shown in FIG. 3. The first controller 61g1 of the circuit breaker 71 places the load switches 61a1-4 and 61b1-4 in a cut-off state. The second controller 61g2 of the circuit breaker 72 places the load switches 61a5 and 61b5 in a cut-off state. The third controller 61g3 of the circuit breaker 73 places the load switch 61a6 in a cut-off state. The fourth controller 61g4 of the circuit breaker 74 places the load switch 61b6 in a conductive state. The fifth controller 61g5 of the circuit breaker 75 places the load switch 61a7 in a conductive state.

[0070] As a result, the power supply device 1 and the circuit breakers 71-75 supply power from the second power source 20 to the fourth and fifth loads 141, 151. In this way, the power supply device 1 has a power supply function of supplying power from the first power source 10 and the second power source 20 to the first to fifth loads 111-151.

[0071] [1-2-2. Actions to be taken in case of failure] (Tentative judgment process) 4, in the power supply device 1, when a ground fault 300 occurs in the first system 110 or a ground fault 301 occurs in the second system 120 while the IG of the vehicle is on, an overcurrent flows toward the ground fault point, causing the voltages of the first system 110 and the second system 120 to become lower than the normal voltage.

[0072] For this reason, when the voltage of the second system 120 detected by the second voltage sensor 52 (hereinafter referred to as "second system voltage V2") becomes equal to or lower than the ground fault threshold, the controller 3 provisionally determines that a failure has occurred in the power supply system. Then, the controller 3 turns off the inter-system switch 41 to bring it into a disconnected state, and turns on the battery switch 42 to bring it into a conductive state. Note that the controller 3 may provisionally determine that a failure has occurred in the power supply system, for example, when the voltage of the first system 110 detected by the first voltage sensor 51 (hereinafter referred to as "first system voltage V1") becomes equal to or lower than the ground fault threshold.

[0073] This provisional determination may be made by a hardware circuit including a comparator. In this case, the comparator compares the second system voltage V2 with a ground fault threshold. When the detected voltage falls below the ground fault threshold, the comparator outputs a failure detection signal indicating a provisional determination, thereby turning off the inter-system switch 41 and turning on the battery switch 42.

[0074] This disconnects the first system 110 from the second system 120. Then, unless the second system 120 has a ground fault, the power supply device 1 becomes able to supply power from the second power supply 20, which is a backup power supply. In other words, backup control (fail-safe control) is performed in which power is supplied from the second power supply 20 to the first load 111 and the second load 121, which are backup loads, via the second system 120. Furthermore, unless the first system 110 has a ground fault, the power supply device 1 becomes able to supply power from the first power supply 10, which is a main power supply. In other words, backup control (fail-safe control) is performed in which power is supplied from the first power supply 10 to the first load 111 and the second load 121, which are backup loads, via the first system 110. In this way, the power supply device 1 performs backup control in which, when one of the first power supply 10 and the second power supply 20 fails, power is supplied to the first load 111 and the second load 121 from the other power supply.

[0075] Specifically, when the controller 3 detects and provisionally determines that a failure has occurred in a power supply system, it turns off the inter-system switch 41 to bring it into a cutoff state, and turns on the battery switch 42 to bring it into a conductive state, and then makes a final determination as to which system the failure has occurred in, the first system 110 or the second system 120. After making the final determination, the controller 3 also notifies the first to fifth controllers 61g1 to 61g5 of failure detection information that includes information indicating the system in which the failure was detected and an instruction to identify the location of the failure.

[0076] (Main determination process) In this determination process, if the first system voltage V1 is equal to or lower than the ground fault threshold for a predetermined time or more and the second system voltage V2 recovers to exceed the ground fault threshold within the predetermined time, the controller 3 determines that a ground fault 300 has occurred in the first system 110 including the first power source 10. Note that the predetermined period is set to, for example, 100 ms, but is not limited to this and can be set to any value.

[0077] Furthermore, the controller 3 determines that a ground fault 301 has occurred in the second system 120 if the first system voltage V1 recovers to exceed the ground fault threshold within a predetermined time and the second system voltage V2 remains below the ground fault threshold for a predetermined time or longer.

[0078] Furthermore, if both the first system voltage V1 and the second system voltage V2 recover to exceed the ground fault threshold within a predetermined time, the controller 3 determines that the result of the provisional determination is incorrect. In other words, the controller 3 officially determines that the voltage drop is a temporary one caused by an overvoltage or the like, and that the power supply system is not at fault.

[0079] If the controller 3 determines that the power supply system is not faulty, it turns off the battery switch 42 to put it in a cutoff state, and turns on the inter-system switch 41 to put it in a conductive state, thereby causing the power supply device 1 to return to normal operation as shown in FIG.

[0080] When the controller 3 finally determines that either the first system 110 or the second system 120 has failed, it notifies the first to fifth controllers 61g1 to 61g5 of the failed system and instructs them to identify the failed part.

[0081] (Identifying the defective part) When the first controller 61g1 receives a notification from the controller 3 that the first system 110 has failed, the first controller 61g1 sequentially shuts off the load switches 61a1-61a4 one by one while maintaining the conductive state of the load switches 61b1-61b4 of the second system 120. When the first controller 61g1 shuts off one of the load switches 61a1-61a4, the remaining three load switches are turned on.

[0082] For example, when the load switch 61a1 is turned off (the load switches 61a2 to 61a4 are turned on), if the voltage of the first system 110 detected by the voltage sensor 61e1 (hereinafter, the voltage detected by the voltage sensor 61e will be referred to as the "first system voltage Va") recovers to exceed the ground fault threshold within a predetermined time, it can be determined that the fault in the first system 110 is on the 1-1 load 111-1 side rather than the load switch 61a1.

[0083] Furthermore, when the load switch 61a2 is turned off (the load switches 61a1, 61a3, and 61a4 are turned on), if the first system voltage Va recovers to exceed the ground fault threshold within a predetermined time, it is determined that the fault in the first system 110 is on the first-2 load 111-2 side rather than the load switch 61a2. The same applies when the other load switches 61a3 and 61a4 are turned off.

[0084] On the other hand, when the load switches 61a1 to 61a4 are sequentially turned off, if the first system voltage Va remains below the ground fault threshold for a predetermined period of time or more, it is determined that the fault in the first system 110 is on the first power source 10 side rather than the load switches 61a1 to 61a4.

[0085] In this way, the first controller 61g1 sequentially turns off the load switches 61a1-4, and determines whether the fault is located between the load switches 61a1-4 and the first load 111, or on the first power source 10 side of the load switches 61a1-4, depending on the first system voltage Va at that time. The first controller 61g1 notifies the controller 3 of information about the determined fault location.

[0086] When the second controller 61g2 receives a notification from the controller 3 that the first system 110 has a failure, it turns off the load switch 61a5 while keeping the load switch 61b5 of the second system 120 in a conductive state. Similar to the first controller 61g1, the second controller 61g2 determines whether the location of the failure is between the load switch 61a5 and the second load 121, or on the first power source 10 side of the load switch 61a5, according to the first system voltage Va. The second controller 61g2 notifies the controller 3 of information on the determined location of the failure.

[0087] Similarly, the third to fifth controllers 61g3 to 61g5 also turn off the load switches 61a6 to 61a7 that they control, and identify whether the fault location is between the load switches 61a6 to 61a7 and the third load 131 to the fifth load 151, or whether the fault location is on the first power source 10 side of the load switches 61a6 to 61a7, depending on the first system voltage Va at that time. The third to fifth controllers 61g3 to 61g5 notify the controller 3 of information on the identified fault location.

[0088] When the first to fifth controllers 61g1 to 61g5 are notified by the controller 3 that the second system 120 has failed, they similarly identify the location of the failure and notify the controller 3 of information on the identified location of the failure.

[0089] If a ground fault occurs in the first system 110, the circuit breaker 74 that is not connected to the first system 110 does not need to identify the location of the ground fault. If a ground fault occurs in the second system 120, the circuit breaker 73 that is not connected to the second system 120 does not need to identify the location of the ground fault. Therefore, the controller 3 only notifies the controller of the circuit breaker that is not connected to the determined ground fault system of the ground fault system, and does not need to instruct it to identify the location of the ground fault.

[0090] When the first to fifth controllers 61g1 to 61g5 identify the location of the ground fault, the controller 3 issues an instruction to identify the location of the ground fault so that two or more of the load switches 61a1 to 61a7 and 61b1 to 61b6 are not turned off simultaneously. For example, if a ground fault 300a occurs between the load switch 61a1 and the 1-1 load 111-1 as shown in Fig. 6, the first controller 61g1 determines that the location of the ground fault is on the 1-1 load 111-1 side of the load switch 61a1 because turning off the load switch 61a1 causes the first system voltage Va to return to or exceed the ground fault threshold.

[0091] On the other hand, when the first controller 61g1 is turning off the load switch 61a1, if the second controller 61g2 also turns off the load switch 61a5, for example, the ground fault 300a is disconnected from the power supply path, and the first system voltage Va returns to above the ground fault threshold, so the second controller 61g2 erroneously determines that the ground fault is located on the second load 121 side of the load switch 61a5.

[0092] Therefore, the controller 3 issues instructions to the first to fifth controllers 61g1 to 61g5 to identify the ground fault location in order so that the load switches are not tripped simultaneously.

[0093] The controller 3 obtains information about the fault location from the first to fifth controllers 61g1 to 61g5 and finally identifies the fault location. Specifically, when the controller 3 receives information that the fault location is between any of the load switches 61a1 to 61a7 and the corresponding first load 111 to fifth load 151, the controller 3 identifies that location as the fault location. Furthermore, when the controller 3 receives information from all of the first to fifth controllers 61g1 to 61g5 that the fault location is on the first power source 10 side of the load switches 61a1 to 61a7, the controller 3 identifies the fault location as being on the first power source 10 side of the load switches 61a1 to 61a7.

[0094] Of the first to fifth controllers 61g1 to 61g5, the third to fifth controllers 61g3 to 61g5 are connected to third to fifth loads 131 to 151, respectively, which are non-backup loads to which power is not supplied during backup control. Therefore, once the controller 3 has completed identifying the fault location, it notifies the third to fifth controllers 61g3 to 61g5 of fault location information. The third to fifth controllers 61g3 to 61g5 that have been notified of the fault location information turn off the load switches 61a6, 61b6, and 61a7, respectively, as shown in FIG.

[0095] When the controller 3 determines that the ground fault location is in the first system 110 and closer to the first power source 10 than the load switches 61a1-61a7, the controller 3 instructs the first and second controllers 61g1, 61g2 to shut off the load switches of the first system 110. Specifically, the first and second controllers 61g1, 61g2 shut off the load switches 61a1-61a7 provided in the first system 110, as shown in Fig. 5. Then, the controller 3 and the first and second controllers 61g1, 61g2 perform backup control to supply power from the second power source 20 to the first load 111 via the second system 120.

[0096] Furthermore, the controller 3 notifies the automatic driving control device 200 that backup control has been executed to supply power from the second power source 20 to the first load 111. As a result, the automatic driving control device 200 can operate the first load 111 and the second load 121 using power supplied from the second power source 20, and perform FOP such as evacuating the vehicle to a safe place and stopping the vehicle.

[0097] When the controller 3 determines that the fault is in the first system 110 and is between the load switches 61a1-61a5, 61b1-61b5 and the first and second loads 111, 121, it instructs the first and second controllers 61g1, 61g2 to shut off the load switch corresponding to the fault and to turn on the other load switches. For example, as shown in FIG. 6, if the fault is a ground fault 300a on the 1-1 load 111-1 side, the first controller 61g1 turns off the load switch 61a1 and turns on the other load switches 61a2-61a4 to separate the ground fault 300a on the 1-1 load 111-1 side, which is the fault location, from the first system 110. In addition, the second controller 61g2 turns on the load switch 61a5. The controller 3 and the first and second controllers 61g1, 61g2 perform backup control to supply power from the second power source 20 to the first load 111 via the second system 120. The controller 3 and the first and second controllers 61g1, 61g2 also perform backup control to supply power from the first power source 10 to the 1-2 to 4 loads 111-2 to 111-4 via the first system 110.

[0098] In this embodiment, a diode 61c1 is provided between the load switch 61a1 and the 1-1 load 111-1. Therefore, even if a ground fault 300a occurs on the 1-1 load 111-1 side of the load switch 61a1, an overcurrent can be prevented from flowing from the second system 120 to the ground fault point via the 1-1 load 111-1.

[0099] Furthermore, the controller 3 notifies the automatic driving control device 200 that backup control has been executed, in which power is supplied from the second power source 20 to the first load 111 and power is supplied from the first power source 10 to the 1-2 to 1-4 loads 111-2 to 111-4. As a result, the automatic driving control device 200 can operate the first load 111 using power supplied from the second power source 20 and the 1-2 to 1-4 loads 111-2 to 111-4 using power supplied from the first power source 10, thereby implementing FOP.

[0100] When the controller 3 determines that the ground fault location is in the second system 120 and closer to the first power source 10 than the load switches 61b1-68b1, the controller 3 turns off the battery switch 42 to put it in a cutoff state, as shown in Fig. 7. The controller 3 also instructs the first and second controllers 61g1, 61g2 to cut off the load switches of the second system 120. Specifically, the first and second controllers 61g1, 61g2 cut off the load switches 61b1-61b5 provided in the second system 120. The controller 3 and the first and second controllers 61g1, 61g2 then perform backup control to supply power from the first power source 10 to the first load 111.

[0101] Furthermore, the controller 3 notifies the automatic driving control device 200 that backup control has been executed to supply power from the first power source 10 to the first load 111. As a result, the automatic driving control device 200 can operate the first load 111 using power supplied from the first power source 10 and implement FOP.

[0102] When the controller 3 determines that the ground fault is located in the second system 120 between the load switches 61b1-61b5 and the first and second loads 111, 121, it instructs the first and second controllers 61g1, 61g2 to shut off the load switch corresponding to the faulty location and to turn on the other load switches. For example, as shown in FIG. 8, if the faulty location is the ground fault 301b on the 1-1 load 111-1 side, the first controller 61g1 turns off the load switch 61b1 and turns on the other load switches 61b2-61b4 to separate the ground fault 301b on the 1-1 load 111-1 side, which is the faulty location, from the second system 120. In addition, the second controller 61g2 turns on the load switch 61b5. The controller 3 and the first and second controllers 61g1, 61g2 perform backup control to supply power from the first power source 10 to the first load 111 via the first system 110. The controller 3 and the first and second controllers 61g1, 61g2 also perform backup control to supply power from the second power source 20 to the first-2 to fourth loads 111-2 to 111-4 via the second system 120.

[0103] In this embodiment, a diode 61d1 is provided between the load switch 61b1 and the 1-1 load 111-1. Therefore, even if a ground fault 301b occurs on the 1-1 load 111-1 side of the load switch 61b1, an overcurrent can be prevented from flowing from the first system 110 to the ground fault point via the 1-1 load 111-1.

[0104] Furthermore, the controller 3 notifies the automatic driving control device 200 that backup control has been executed, in which power is supplied from the first power source 10 to the first load 111 and power is supplied from the second power source 20 to the 1-2 to 1-4 loads 111-2 to 111-4. As a result, the automatic driving control device 200 can operate the first load 111 using power supplied from the first power source 10 and the 1-2 to 1-4 loads 111-2 to 111-4 using power supplied from the second power source 20, thereby implementing FOP.

[0105] [1-3. Processing performed by each controller when power is lost] Next, the above-mentioned processing in the event of a power failure will be described with reference to FIGS. 9 to 11. FIG. 9 is a flowchart showing an example of processing executed by the controller 3. FIG. 10 is a flowchart showing an example of processing executed by the first controller 61g1 to which a backup load is connected. Note that the second controller 61g2 also executes processing similar to the processing shown in FIG. 10, but here, the processing of the first controller 61g1 will be described as a representative example. FIG. 11 is a flowchart showing an example of processing executed by the third controller 61g3 to which a non-backup load is connected. Note that the fourth and fifth controllers 61g4 and 61g5 also execute processing similar to the processing shown in FIG. 11, but here, the processing of the third controller 61g3 will be described as a representative example. Note that the processing shown in FIGS. 9 to 11 is repeatedly executed every time a predetermined time has elapsed, but this is not limited to this.

[0106] First, the processing of the controller 3 will be described. When the vehicle is started, the controller 3 turns on the inter-system switch 41 to bring it into a conductive state, turns off the battery switch 42 to bring it into a cut-off state, and then executes the processing shown in Fig. 9. As shown in Fig. 9, the controller 3 determines whether or not a provisional determination has been made that a power supply failure has been detected (step S101). In other words, the controller 3 determines whether or not a provisional determination has been made that a failure has occurred in the power supply system.

[0107] The controller 3 provisionally determines that a failure has occurred in the power supply system when the second system voltage V2 is equal to or lower than the ground fault threshold, and determines that no failure has occurred in the power supply system when the second system voltage V2 is higher than the ground fault threshold.

[0108] If the controller 3 determines that a provisional determination to detect a power supply failure has not been made (step S101, No), that is, if it determines that a power supply failure has not occurred, it ends the processing and restarts the processing from step S101. If the controller 3 determines that a provisional determination to detect a power supply failure has been made (step S101, Yes), it turns off the inter-system switch 41 to a cutoff state and turns on the battery switch 42 to a conductive state (step S102).

[0109] Next, the controller 3 makes a final determination of the faulty system based on the first system voltage V1 and the second system voltage V2 (step S103). Specifically, if the first system voltage V1 is equal to or less than the ground fault threshold for a predetermined time or more and the second system voltage V2 recovers to exceed the ground fault threshold within the predetermined time, the controller 3 makes a final determination of a ground fault 300 in the first system 110 including the first power source 10. Furthermore, if the first system voltage V1 recovers to exceed the ground fault threshold within the predetermined time and the second system voltage V2 is equal to or less than the ground fault threshold for a predetermined time or more, the controller 3 makes a final determination of a ground fault 301 in the second system 120. Furthermore, if both the first system voltage V1 and the second system voltage V2 recover to exceed the ground fault threshold within the predetermined time, the controller 3 determines that the result of the provisional determination is incorrect and that the power supply system is normal.

[0110] Next, the controller 3 determines whether or not the first system 110 has failed as a result of this determination (step S104). If the controller 3 determines that the first system 110 has failed (step S104, Yes), the process proceeds to step S108. If the controller 3 determines that the first system 110 has not failed (step S104, No), the controller 3 determines whether or not the second system 120 has failed (step S105). If the controller 3 determines that the second system 120 has failed (step S105, Yes), the controller 3 turns off the battery switch 42 (step S106) and proceeds to step S108.

[0111] If the controller 3 determines that the second system 120 is not faulty (step S105, No), that is, if the first and second systems 110, 120 are normal and the provisional determination was an erroneous detection, it turns off the battery switch 42 to establish a cutoff state and turns on the inter-system switch 41 to establish a conduction state (step S107), thereby restoring the power supply device 1 to normal operation (see FIG. 2).

[0112] In step S108, the controller 3 notifies the first to fifth controllers 61g1 to 61g5 of malfunction detection information including information indicating the malfunctioning system and an instruction to identify the malfunctioning location (step S108). The processing performed by the first controller 61g1 upon being notified of the malfunction detection information (e.g., processing to identify the malfunctioning location) will be described later with reference to Fig. 10. The processing performed by the fourth controller 61g4 upon being notified of the malfunction detection information will be described later with reference to Fig. 11.

[0113] Next, the controller 3 determines whether or not the determination results including the identified fault location have been received from the first to fifth controllers 61g1 to 61g5 (step S109). If the controller 3 determines that the determination results have not been received (step S109, No), the controller 3 repeats the process of step S109.

[0114] When the controller 3 determines that the determination result has been received (step S109, Yes), it performs backup control (step S110). Specifically, when the first to fifth controllers 61g1 to 61g5 all determine that the fault location is on the power supply side of the circuit breakers 71 to 75 of the first system 110, the controller 3 identifies the ground fault 300 as the ground fault location. The controller 3 instructs the first to third controllers 61g1 to 61g3 and the fifth controller 61g5 to turn off the load switches 61a1 to 61a7 of the first system 110, and instructs the fourth controller 61g4 to turn off the load switch 61b6 of the second system 120. In this way, the controller 3 performs backup control to supply power from the second power source 20 to the first load 111 and the second load 121 (see FIG. 5).

[0115] Furthermore, if the determination result indicates that the fault location in the first system 110 is closer to the first to fifth loads 111-151 than the load switches 61a11-61a7 (for example, ground fault 300a), the controller 3 outputs commands to the first and second controllers 61g1 and 61g2 to turn off the switch corresponding to the fault location (for example, load switch 61a1) and turn on the switches not corresponding to the fault location (for example, load switches 61a2-61a5). In this way, the controller 3 performs backup control to supply power from the second power source 20 to the first load 111 and the second load 121 (see FIG. 6). Furthermore, the controller 3 performs backup control to supply power from the first power source 10 to the first-2 to fourth loads 111-2 to 111-4 and the second load 121.

[0116] Furthermore, when all of the first to fifth controllers 61g1 to 61g5 determine that the fault location is on the power supply side of the circuit breakers 71 to 75 of the second system 120, the controller 3 identifies the ground fault 301 as the ground fault location. Then, the controller 3 instructs the first and second controllers 61g1 and 61g2 and the fourth and fifth controllers 61g4 and 61g5 to turn off the load switches 61b1 to 68b1 of the second system 120, and instructs the third controller 61g3 to turn off the load switch 61a6 of the first system 110. In this way, the controller 3 performs backup control to supply power from the first power source 10 to the first load 111 and the second load 121 (see FIG. 7).

[0117] Furthermore, if the determination result indicates that the fault location in the second system 120 is closer to the first to fifth loads 111-151 than the load switches 61b1-68b1 (for example, ground fault 301b), the controller 3 outputs commands to the first and second controllers 61g1, 61g2 to turn off the load switch corresponding to the fault location (for example, load switch 61b1) and turn on the load switches not corresponding to the fault location (for example, load switches 61b2-61b5). In this way, the controller 3 performs backup control to supply power from the first power source 10 to the first load 111 and the second load 121 (see FIG. 8). Furthermore, the controller 3 performs backup control to supply power from the second power source 20 to the first-2 to fourth loads 111-2-111-4 and the second load 121.

[0118] Next, the controller 3 executes a failure process (step S111). The failure process includes a process of outputting an automatic driving prohibition signal to the automatic driving control device 200, a process of storing the detection of a power supply failure as diagnosing information in a storage unit (not shown), a process of notifying the user of the detection of a power supply failure, etc., but these are merely examples and are not limited to these.

[0119] Next, the processing of the first controller 61g1 will be described. As shown in Fig. 10, the first controller 61g1 determines whether or not it has received malfunction detection information, including an instruction to identify the malfunction location and information about the malfunctioning system, from the controller 3 (step S201). If it determines that it has not received the malfunction detection information (step S201, No), the first controller 61g1 skips the subsequent processing.

[0120] When the first controller 61g1 determines that the malfunction detection information has been notified (Yes at step S201), it determines whether the notified malfunctioning system is the first system 110 or the second system 120 (step S202).

[0121] If the faulty system is the first system 110, the first controller 61g1 sequentially turns off the load switches 61a1-4 of the first system 110 (turning on the remaining three load switches), and determines the location of the ground fault based on the first system voltage Va at that time (step S203). Specifically, if the first controller 61g1 determines that all of the first system voltages Va remain equal to or lower than the ground fault threshold for a predetermined time or longer when the load switches 61a1-4 are turned off, the first controller 61g1 determines that the faulty location in the first system 110 is on the first power source 10 side of the load switches 61a1-4, i.e., on the first power source 10 side of the circuit breaker 71.

[0122] On the other hand, when the first controller 61g1 turns off any of the load switches 61a1 to 61a4, if it determines that the first system voltage Va has recovered to exceed the ground fault threshold within a predetermined time, it determines that the fault in the first system 110 is on the first load 111 side of the load switch that was turned off.

[0123] The first controller 61g1 outputs the determination result including the fault location identified by the above-described process to the controller 3 (step S204).

[0124] On the other hand, if the faulty system is the second system 120 in step S202, the first controller 61g1 sequentially turns off the load switches 61b1-4 of the second system (turning on the remaining three load switches), and determines the location of the ground fault based on the second system voltage Vb at that time (step S205). Specifically, if the first controller 61g1 determines that the second system voltage Vb remains equal to or lower than the ground fault threshold for a predetermined time or longer when the load switches 61b1-4 are turned off, the first controller 61g1 determines that the faulty location in the second system 120 is on the second power source 20 side of the load switches 61b1-4, i.e., on the first power source 10 side of the circuit breaker 71.

[0125] On the other hand, if the first controller 61g1 determines that the second system voltage Vb has recovered to exceed the ground fault threshold within the predetermined time when any of the load switches 61b1-4 is turned off, the first controller 61g1 determines that the fault location in the second system 120 is on the first load 111 side of the turned-off load switch. Next, the first controller 61g1 proceeds to step S204, and outputs the determination result including the fault location identified by the processing of step S205 to the controller 3.

[0126] After outputting the determination result in step S204, the first controller 61g1 determines whether an instruction to shut off any of the load switches 61a1-4, 61b1-4 has been sent from the controller 3 (step S206). If the first controller 61g1 has not received a shut-off instruction (step S206, No), the first controller 61g1 ends the process. If the first controller 61g1 has received a shut-off instruction (step S206, Yes), the first controller 61g1 shuts off the instructed load switch (step S207) and ends the process.

[0127] In this way, when a power supply fails, the first controller 61g1 of the circuit breaker 71 identifies the location of the failure by sequentially turning off the load switches 61a1-4, 61b1-4 provided in the system where the power supply has failed. This makes it possible to execute backup control according to the identified location of the failure, such as electrically isolating the identified location of the failure.

[0128] Next, the processing of the third controller 61g3 will be described with reference to Fig. 11. In Fig. 11, the processing of steps S301 to S305 is the same as steps S201 to S205 in Fig. 10, and therefore the description here will be omitted.

[0129] After outputting the determination result in step S304, the third controller 61g3 turns off the load switch 61a6 to bring it into a cutoff state (step S306), thereby preventing power from being supplied to the third load 131, which is a non-backup load.

[0130] As described above, the power supply control system 100 according to the first embodiment includes a power supply device 1 and circuit breakers 71 to 75. The power supply device 1 has a power supply function for supplying power from the first power source 10 and the second power source 20 to a load, and performs backup control for supplying power to the load from the other power source when one of the first power source 10 and the second power source 20 fails. The circuit breakers 71 to 75 are provided between the power supply device 1 and the load and are configured to be able to supply and interrupt power from the power supply device 1 to the load. The circuit breakers 71 to 75 include a first circuit breaker and a second circuit breaker. The first circuit breaker includes load switches 61a and 61b that can supply and interrupt power from the first system 110 having the first power source 10 and the second system 120 having the second power source 20, respectively. The second circuit breaker includes load switches 61a6, 61b6, and 61a7 that can supply and interrupt power from one of the first system 110 and the second system 120. This makes it possible to use devices with different numbers of switches depending on the functions, importance, etc. required during backup control of the load as the circuit breakers 71 to 75. In other words, since it is possible to use circuit breakers 71 to 75 suited to the functions, etc. of the corresponding loads, the circuit breakers 71 to 75 do not have over-specified specifications, and as a result, it is possible to suppress an increase in cost or an increase in size in the power supply control system 100.

[0131] The power supply device 1 also includes an inter-system switch 41 and a controller 3. The inter-system switch 41 is provided on an inter-system line 130 that connects a first system 110 having a first power source 10 and a second system 120 having a second power source 20. The controller 3 switches the inter-system switch 41 to an OFF state when either the first power source 10 or the second power source 20 fails. In this way, by switching the inter-system switch 41 to an OFF state when either the first power source 10 or the second power source 20 fails, the electrical connection between the first system 110 and the second system 120 can be quickly and reliably cut off.

[0132] [Second embodiment] Next, a configuration example of a power supply control system 100a according to the second embodiment will be described with reference to Fig. 12. Fig. 12 is an explanatory diagram showing a configuration example of a power supply control system 100a according to the second embodiment. Note that, in the following, components common to the first embodiment will be assigned the same reference numerals and descriptions thereof will be omitted.

[0133] The power supply control system 100a according to the second embodiment includes 1-1 to 3 loads 111-1 to 111-3, 2-1 load 121-1, 2-2 load 121-2, a third load 131, a fourth load 141, and a fifth load 151 as loads.

[0134] In the second embodiment, the 1-1 to 3 loads 111-1 to 3 and the 2-1,2 loads 121-1,2 are distinguished according to the magnitude of their power consumption, in other words, they are grouped according to the magnitude of their power consumption. Specifically, the 1-1 to 3 loads 111-1 to 3 are loads that consume relatively large amounts of power and operate at a first power consumption. The 2-1,2 loads 121-1,2 are loads that consume relatively small amounts of power and operate at a second power consumption that is smaller than the first power consumption. In other words, the power consumption of the 1-1 to 3 loads 111-1 to 3 is greater than the power consumption of the 2-1,2 loads 121-1,2. Conversely, the power consumption of the 2-1,2 loads 121-1,2 is smaller than the power consumption of the 1-1 to 3 loads 111-1 to 3.

[0135] For example, the 1-1 load 111-1 is an electric steering device, the 1-2 load 111-2 is an electric brake device, the 1-3 load 111-3 is an electric accelerator device, the 2-1 load 121-1 is a radar, and the 2-2 load 121-2 is an in-vehicle camera. These 1-1 to 3 loads 111-1 to 111-3 and the 2-1, 2 loads 121-1, 121-2 are backup loads.

[0136] In the second embodiment, the 1-1 to 1-3 loads 111-1 to 111-3 are provided with a breaker device 71a, and the 2-1, 2-2 loads 121-1, 121-2 are provided with a breaker device 72a.

[0137] Specifically, the breaker 71a includes load switches 61a1-61b1-61b3, diodes 61c1-61c3, 61d1-61d3, voltage sensors 61e1-61e3, 61f1-61f3, and a first controller 61g1. The configuration of the load switch 61a1 and the like in the breaker 71a is similar to that of the breaker 71 of the first embodiment, and therefore description thereof will be omitted here.

[0138] The interrupting device 72a is provided between the power supply device 1 and the 2-1,2 loads 121-1,2. The interrupting device 72a is configured to be able to supply and interrupt power to the 2-1,2 loads 121-1,2 from the power supply device 1. Specifically, the interrupting device 72a includes load switches 61a4,5, 61b4,5, diodes 61c4,5, 61d4,5, voltage sensors 61e4,5, 61f4,5, and a second controller 61g2.

[0139] The load switch 61a4 is configured to be able to supply and cut off power to the 2-1 load 121-1 from the first system 110 having the first power supply 10. The anode side of the diode 61c4 is connected to the load switch 61a4, and the cathode side is connected to the 2-1 load 121-1. The voltage sensor 61e4 detects the voltage of the first system 110 and outputs the detection result to the second controller 64a4.

[0140] The load switch 61b4 is configured to be able to supply and cut off power to the 2-1 load 121-1 from the second system 120 having the second power supply 20. The anode side of the diode 61d4 is connected to the load switch 61b4, and the cathode side is connected to the 2-1 load 121-1. The voltage sensor 61f4 detects the voltage of the second system 120 and outputs the detection result to the second controller 64a4.

[0141] The load switch 61a5 is configured to be able to supply and cut off power to the 2-2 load 121-2 from the first system 110 having the first power supply 10. The anode side of the diode 61c5 is connected to the load switch 61a5, and the cathode side is connected to the 2-2 load 121-2. The voltage sensor 61e5 detects the voltage of the first system 110 and outputs the detection result to the second controller 61g2.

[0142] The load switch 61b5 is configured to be able to supply and cut off power to the 2-2 load 121-2 from the second system 120 having the second power supply 20. The anode side of the diode 61d5 is connected to the load switch 61b5, and the cathode side is connected to the 2-2 load 121-2. The voltage sensor 61f5 detects the voltage of the second system 120 and outputs the detection result to the second controller 61g2. The second controller 61g2 controls the load switches 61a4, 61b4, 61a5, and 61b5.

[0143] The above-mentioned shutoff devices 71a, 72a are configured to be connectable to a load common to all vehicles (all vehicle types) and an optional load. Specifically, the shutoff devices 71a, 72a are provided with switches corresponding to the number of loads common to all vehicles to be connected and the maximum number of optional loads that may be connected. If there is an optional load that is not connected to the shutoff devices 71a, 72a (i.e., an optional load that is not installed in the vehicle), the switch corresponding to that load is set to the shutoff state (disconnected).

[0144] In this way, in the second embodiment, the circuit breakers 71a and 72a are connected to the 1-1 to 3 loads 111-1 to 3 and the 2-1,2 loads 121-1,2, which are distinguished according to the magnitude of their power consumption. Specifically, the circuit breaker 71a is a device that supplies and cuts off power to the 1-1 to 3 loads 111-1 to 3, which have relatively high power consumption and operate at a first power consumption. The circuit breaker 72a is a device that supplies and cuts off power to the 2-1,2 loads 121-1,2, which have relatively low power consumption and operate at a second power consumption that is smaller than the first power consumption.

[0145] Therefore, the load switches 61a1 to 61b3 of the circuit breaker 71a, which correspond to the 1-1 to 1-3 loads 111-1 to 111-3 with high power consumption, are designed to have higher performance, such as higher pressure resistance and heat resistance, than the load switches 61a4 to 61b5 of the circuit breaker 72a. The housing housing the circuit breaker 71a also requires a heat dissipation design. In contrast, such a design is not required for the circuit breaker 72a. Thus, in the second embodiment, circuit breakers 71a and 72a can be configured to accommodate the power consumption of the corresponding 1-1 to 1-3 loads 111-1 to 111-3 and 2-1 and 2-2 loads 121-1 and 121-2, preventing over-specifying the circuit breakers 71a and 72a. Alternatively, one type of circuit breaker for loads with high power consumption may be prepared and used as the circuit breaker 71a and 72a.

[0146] [Modification of the second embodiment] In the second embodiment described above, the backup loads, 1-1 to 3 loads 111-1 to 3 and 2-1,2 loads 121-1,2, are distinguished according to the magnitude of their power consumption, but this is not limiting. That is, as a modification of the second embodiment, the backup loads, 1-1 to 3 loads 111-1 to 3 and 2-1,2 loads 121-1,2, and general loads (e.g., 3rd to 5th loads 131 to 151), may be distinguished according to the magnitude of their power consumption. In such a case, a breaker device is connected to each of the loads distinguished according to the magnitude of their power consumption.

[0147] [Third embodiment] Next, a power supply control system 100 according to a third embodiment will be described. The third embodiment is an embodiment in which the first embodiment and the second embodiment are appropriately combined.

[0148] For example, although not shown in the drawings, in the third embodiment, four circuit breakers 1 to 4 are manufactured (prepared). Circuit breaker 1 is common to all vehicles (all types of vehicles) and is a device for loads with relatively high power consumption. Circuit breaker 2 is common to all vehicles and is a device for loads with relatively low power consumption. Circuit breaker 3 is an optional device and is a device for loads with relatively high power consumption. Circuit breaker 4 is an optional device and is a device for loads with relatively low power consumption.

[0149] In this way, in the third embodiment, four circuit breakers 1 to 4 are manufactured (prepared) depending on whether the load is common to all vehicles or optional, and whether the power consumption is relatively large or small. Then, the four circuit breakers 1 to 4 are selected and used depending on the load of the vehicle on which they are installed. As a result, the third embodiment can obtain the same effects as the previous embodiments.

[0150] Further advantages and modifications will readily occur to those skilled in the art. Therefore, the invention in its broader aspects is not limited to the specific details and representative embodiments shown and described above. Accordingly, various modifications may be made without departing from the spirit or scope of the general inventive concept as defined by the appended claims and their equivalents. [Explanation of symbols]

[0151] 1 Power supply 10 1st power supply 20 2nd power supply 41 Intersystem switch 71~75, 71a, 72a Circuit Breaker 100 Power Control System

Claims

1. a power supply device having a power supply function of supplying power from a first power supply and a second power supply to a load, and performing backup control of supplying power to the load from the other power supply when one of the first power supply and the second power supply fails; a power supply control system including a cutoff device that is provided between the power supply device and the load and is capable of supplying and cutting off power from the power supply device to the load, The shutoff device is a first shutoff device including a switch capable of supplying and shutting off power from a first system having the first power supply and a second system having the second power supply; a second shutoff device including a switch capable of supplying and shutting off power from one of the first system and the second system; A power control system including:

2. The first shutoff device is A device that supplies and cuts off power to a load according to functions commonly installed in multiple types of vehicles The power supply control system according to claim 1 , comprising:

3. The first shutoff device is A device for supplying and cutting off power to a load according to a function selectively installed in a vehicle The power supply control system according to claim 1 , comprising:

4. The first shutoff device is a device that supplies and cuts off power to a load that operates at a first power consumption; a device that supplies and cuts off power to a load that operates with a second power consumption that is smaller than the first power consumption; The power supply control system according to claim 1 , comprising:

5. The second shutoff device is a device that supplies and cuts off power from the first power source to a load that operates while the vehicle is running; a device for supplying and cutting off power from the second power source to a load that operates when an ignition switch of the vehicle is off; The power supply control system according to claim 1 , comprising:

6. The shutoff device is In the event of a power failure, the controller turns off the switch provided in the system where the power supply has failed, thereby identifying the location of the failure. The power supply control system according to claim 1 , comprising:

7. The power supply device an inter-system switch provided on an inter-system line connecting a first system having the first power supply and a second system having the second power supply; a controller that switches the inter-system switch to an interrupted state when the first power source or the second power source fails; Including, The controller When the inter-system switch is set to an interrupted state, a failed system is detected based on the voltage of the first system and the voltage of the second system, and an instruction to identify the location of the failure is output to the interrupter. The power supply control system according to claim 1 .

Images