Vehicle Power System

Abstract

To provide a power supply system capable of protecting an information processing device even if the information processing device is inappropriately removed.SOLUTION: A power supply system 2 includes an MPU 20 attachable to and detachable from a vehicle 1. A power supply control part 13 includes an auxiliary power supply control part 27 for performing power interruption accompanied with data storage to the MPU 20 by executing an emergency shutdown on the basis of an emergency SD signal to be inputted in both a travel possible state and a travel impossible state of the vehicle 1. The power supply system includes an electrical connection monitoring part 22a for outputting the emergency SD signal in the case of monitoring an electrical connection state of the MPU 20 and detecting abnormality, and an attachment and detachment operation detection part 22b for outputting the emergency SD signal to the auxiliary power supply control part 27 in the case of detecting a removal operation of the MPU 20.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The disclosed technology is a vehicle power supply system Mu Regarding. [Background technology]

[0002] In recent years, with advances in computer technology, communication technology, and the like, there has been a remarkable increase in the electrification of automobiles (for example, Patent Document 1).

[0003] The number of automobiles that run on electricity, such as hybrid vehicles and electric vehicles, is increasing. Furthermore, the number of high-performance electrical components installed in automobiles, such as cameras and sensors, is also increasing. Accordingly, automobiles are also being equipped with high-performance information processing devices that can process the vast amounts of data obtained from these components in a short period of time, as well as large batteries that serve as the power sources for these components.

[0004] Furthermore, by enabling in-vehicle information processing devices to send and receive data with external systems via networks, it is becoming possible to provide a wide variety of services and support by using the information processing devices not only when the car is being driven, but also when the car is not being driven.

[0005] In the future, it is expected that the amount of data handled by in-vehicle information processing devices will become even larger, and that the content of that data will increase, including video, audio, etc. Accordingly, in-vehicle information processing devices will become more computerized, and their computing devices will become more sophisticated in accordance with the amount of data and specialized in accordance with the content of that data. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Patent Publication No. 2021-11231 Summary of the Invention [Problem to be solved by the invention]

[0007] As the computerization of in-vehicle information processing devices progresses, it is expected that there will be cases where the hardware implemented in the information processing devices will need to be changed or the software updated in response to changes in the content of services, etc. It is also expected that information processing devices will become optional equipment so that users can choose whether or not to install an information processing device in their automobile depending on their needs.

[0008] In such a case, the information processing device must be able to be easily attached to and detached from the automobile.

[0009] However, if the information processing device is designed to be easily detachable, a user may accidentally detach the device while it is in operation, which could result in semiconductor failure or data corruption.

[0010] Therefore, the disclosed technology provides a power supply system that can protect an information processing device even if the information processing device is improperly removed. [Means for solving the problem]

[0011] The disclosed technology relates to a vehicle power supply system that includes a plurality of information processing devices that operate using power supplied from an on-board power supply, and a power supply control unit that is arranged between the on-board power supply and the plurality of information processing devices and controls the supply of power.

[0012] The plurality of information processing devices include at least one detachable information processing device that can be attached to and detached from the vehicle, and the power supply control unit includes an auxiliary power supply control unit that performs an emergency shutdown based on a specific control signal input when the vehicle is both in a state where it can run and a state where it cannot run, thereby cutting off power to the detachable information processing device while preserving data.

[0013] The device further includes an electrical connection monitoring unit that monitors the electrical connection state of the detachable information processing device, and if an abnormality in the electrical connection state caused by the detachment operation of the detachable information processing device is detected, outputs the control signal to the auxiliary power supply control unit before the detachment of the detachable information processing device is completed, and an detachment operation detection unit that, if the detachment operation of the detachable information processing device is detected, outputs the control signal to the auxiliary power supply control unit before the detachment of the detachable information processing device is completed.

[0014] That is, the power supply system for the vehicle includes at least one detachable information processing device that can be attached to and detached from the vehicle. The detachable information processing device can be removed from and attached to the vehicle by the user.

[0015] Regardless of whether the vehicle is in a state where it can or cannot be driven, a specific control signal is input to the auxiliary power supply control unit, which executes an emergency shutdown and cuts off power to the detachable information processing device while preserving data.

[0016] The control signal is output before the removal of the detachable information processing device is completed when the electrical connection monitoring unit detects an electrical abnormality caused by the removal operation of the detachable information processing device, and also when the removal operation detection unit detects the removal operation of the detachable information processing device, before the removal of the detachable information processing device is completed.

[0017] In short, with this vehicle's power supply system, regardless of the state of the vehicle, when a detachable information processing device is removed, it can detect any electrical abnormalities caused by the removal operation or the removal operation itself, and perform an emergency shutdown to properly cut off power to the detachable information processing device before the removal is complete.

[0018] Therefore, even if the information processing device is removed inappropriately, the information processing device can be protected.

[0019] The vehicle power supply system may also be configured such that, when one of the control signals is input from the electrical connection monitoring unit and the attachment / detachment operation detection unit, the auxiliary power supply control unit executes the emergency shutdown.

[0020] In this way, when the removal of the detachable information processing device is detected, an emergency shutdown can be performed immediately, and the detachable information processing device can be protected at an early stage.

[0021] The vehicle power supply system may also be configured such that, when a plurality of the control signals are input from the electrical connection monitoring unit and the attachment / detachment operation detection unit, the auxiliary power supply control unit executes the emergency shutdown.

[0022] If only one type of removal is detected, there is a possibility of false detection. In contrast, if detection is performed using multiple different methods for detecting the target and an emergency shutdown is performed when removal is detected by any of these methods, false detection can be effectively suppressed. Therefore, the emergency shutdown can be performed with high reliability. The detachable information processing device can be protected with high reliability.

[0023] The vehicle power supply system may also be configured such that at least one of the electrical connection monitoring unit and the attachment / detachment operation detection unit does not operate when the vehicle is in a state where it is capable of being driven, but operates when the vehicle is in a state where it is not capable of being driven.

[0024] When the vehicle is in a running state, the on-board power supply is used as the power source, and therefore, if at least one of the electrical connection monitoring unit and the attachment / detachment operation detection unit is operated in this state, that power will be consumed.

[0025] On the other hand, when the vehicle is unable to drive, it can be charged from an external device. Typically, when the vehicle is unable to drive, the detachable information processing device operates during charging. During charging, the power from the on-board power supply is not used. Therefore, by operating at least one of the electrical connection monitoring unit and the detachment operation detection unit while the vehicle is unable to drive, power consumption can be reduced.

[0026] The disclosed technology may also be a method for cutting off power to a vehicle equipped with a detachable information processing device.

[0027] In other words, when the power cut-off method detects at least one of the removal operation of the detachable information processing device and an abnormality in the electrical connection state of the detachable information processing device caused by the removal operation, it performs an emergency shutdown before the removal of the detachable information processing device is complete, and cuts off power while preserving data.

[0028] This power cutoff method can provide the same effects as the above-described vehicle power supply system. [Effects of the Invention]

[0029] A power supply system to which the disclosed technology is applied can protect an information processing device even if the information processing device is improperly removed, thereby improving the reliability of the hardware and software of the information processing device. [Brief explanation of the drawings]

[0030] [Figure 1] 1 is a simplified diagram of an automobile (vehicle) to which the disclosed technology is applied. [Figure 2] FIG. 1 is a block diagram associated with an emergency shutdown of a power system. [Figure 3] 1 is a schematic diagram specifically showing the MPU and the connector, with the top, middle, and bottom figures showing the operation of removing the MPU from the connector. [Figure 4] 1 is a flowchart of an emergency shutdown. [Figure 5] 1 is a flowchart of an emergency shutdown. [Figure 6] 1 is a flowchart of an emergency shutdown. DETAILED DESCRIPTION OF THE INVENTION

[0031] An embodiment of the disclosed technology will be described below, but the following description is merely exemplary in nature.

[0032] <Vehicles, power supply systems> FIG. 1 shows a simplified diagram of an automobile 1 (vehicle) to which the disclosed technology is applied. FIG. 1 shows the main electrically operated devices (electronic devices, electrical equipment, etc., so-called electrical components) and a power supply system 2 that supplies power to these. FIG. 1 also shows the automobile 1 parked in a parking lot or the like and being charged. The automobile 1 is completely stopped, with the ignition turned off (IG off) (a state in which the automobile 1 cannot be electrically driven).

[0033] This automobile 1 is an electric vehicle or hybrid vehicle that can run on electric power. As its power source, automobile 1 is equipped with a motor 10. A large high-voltage battery 12 (on-board power supply) that serves as the power source for motor 10 is also equipped with automobile 1. Motor 10 is connected to high-voltage battery 12 via inverter 11.

[0034] An MCU 17 (described later) controls the inverter 11, converting the DC current output from the high-voltage battery 12 into three-phase AC current and outputting it to the motor 10. This causes the motor 10 to rotate and the automobile 1 to run. Note that while a hybrid vehicle is also equipped with an engine that uses fuel to generate power, the engine is not important in relation to the disclosed technology. Therefore, illustrations and descriptions of the engine will be omitted in this embodiment.

[0035] In addition to a motor 10 and a high-voltage battery 12, the automobile 1 is equipped with an OBC 13 (on-board charger, constituting a power supply control unit), a DC / DC 14 (step-down converter), a low-voltage battery 15 (on-board power supply), a CCU 16 (central control unit), an MCU 17 (motor control unit), a BCU 18 (battery control unit), an MPU 20 (multimedia processor unit, detachable information processing device), a wireless communication device 21, a power cut-off unit 22, etc. The CCU 16, MCU 17, BCU 18, MPU 20, etc. correspond to "information processing devices."

[0036] When the ignition is on (IG on) (when the automobile 1 is electrically capable of running), each of these electrical components operates on power supplied from the high-voltage battery 12 or the low-voltage battery 15. Each of these electrical components is connected to the high-voltage battery 12 or the low-voltage battery 15 via power system electrical wiring PL, thereby forming the power supply system 2. In addition, certain electrical components are connected to each other by communication system electrical wiring CL (e.g., CAN) that transmits and receives data signals, control signals, etc.

[0037] This automobile 1 is configured to be able to be charged using a single-phase 100V or 200V commercial power source 100 (normal charging) or using dedicated equipment 101 such as a charging stand (rapid charging). Figure 1 shows the state during normal charging.

[0038] Charging ports 24 for normal charging and rapid charging are installed at the rear of the automobile 1. The rapid charging port 24 is connected to the high-voltage battery 12. In the case of rapid charging, the high-voltage battery 12 can be directly charged using a high-voltage direct current, thereby enabling charging in a short time.

[0039] In contrast, for normal charging, AC current needs to be converted to DC current. This power also needs to be boosted. Therefore, the charging port 24 for normal charging is connected to the input side of the OBC 13. Although not shown, the OBC 13 is equipped with an AC / DC (alternating current / direct current) converter, a DC / DC (boost converter), a power distribution unit that controls these, and other components.

[0040] During normal charging, the OBC 13 converts AC supplied from the commercial power supply 100 into DC using an AC / DC converter and boosts the voltage using a DC / DC converter. The resulting high-voltage DC current is transmitted to the high-voltage battery 12 or the DC / DC converter 14 by the power distribution unit.

[0041] The DC / DC 14 reduces the high voltage direct current to approximately 12 V, which is a general power supply voltage for the automobile 1, and supplies the power to the low voltage battery 15. In addition to the low voltage battery 15, the DC / DC 14 of this power supply system 2 also supplies power to the BCU 18, MPU 20, wireless communication device 21, power cut-off unit 22, etc.

[0042] The low-voltage battery 15 is the power source for the power supply system (12V power supply system) to which most of the electrical equipment is connected. The low-voltage battery 15 is a lead-acid battery with a rated voltage of 12V. When the IG is on, each electrical equipment operates using power supplied from the low-voltage battery 15.

[0043] In this power supply system 2, in order to reduce dark current (standby current), when the IG is off, power supply is stopped from most of the 12V power supply system (the part indicated by the two-dot chain line in FIG. 1). This makes it possible to reduce power consumption. When the IG is off and the automobile 1 is not running, no power is supplied from the high-voltage battery 12 to the inverter 11 and the motor 10.

[0044] The wireless communication device 21 is a device that enables wireless data transmission and reception with a predetermined external system via a network (WAN). The wireless communication device 21 is connected to both the 12V power supply system and the DC / DC 14. During charging (IG off state), even if power supply from the 12V power supply system is stopped, the wireless communication device 21 can operate by power supply from the DC / DC 14. Power can be supplied to the wireless communication device 21 whether the IG is on or off.

[0045] (Information processing device) As described above, the CCU 16, MCU 17, BCU 18, and MPU 20 correspond to information processing devices capable of performing advanced information processing at high speed. These devices are composed of hardware such as a processor (arithmetic unit), memory, and interface, and software such as control programs and control data stored in the memory (a so-called computer). These hardware and software work together to control various in-vehicle devices and process information obtained from various sensors.

[0046] For example, the CCU 16 performs overall control of the automobile 1. The MCU 17 cooperates with the CCU 16 to control the inverter 11. As a result, the MCU 17 operates the motor 10 in accordance with the driver's operation.

[0047] The BCU 18 is connected to the high-voltage battery 12 by electrical wiring CL of a communication system, and controls the high-voltage battery 12 in cooperation with the CCU 16 or independently of the CCU 16. The BCU 18 controls, for example, the charge / discharge state of the high-voltage battery 12, and controls the high-voltage battery 12 to prevent abnormalities such as overcharging.

[0048] The CCU 16, MCU 17, and BCU 18 are control devices essential to the automobile 1. They are built into the automobile 1 from the beginning and are configured as an integral part of the automobile 1. In general, other information processing devices for such control systems are also installed in the automobile 1. For example, in the case of a hybrid vehicle, an ECU (engine control unit) that controls the engine is installed.

[0049] As described above, the CCU 16 and MCU 17 that control the running of the automobile 1 are not supplied with power when the IG is off. In contrast, the BCU 18 is connected to both the 12V power supply system and the DC / DC 14. This allows the BCU 18 to be powered whether the IG is on or off. During charging (IG off state), the BCU 18 operates using power supplied from the DC / DC 14 and controls the charging state of the high-voltage battery 12.

[0050] (MPU) The MPU 20 is an information processing device that is installed as an optional feature in the automobile 1. The MPU 20 is a unit that has a high-performance processor that is suitable for processing video data including moving images, audio, etc. Unlike the MCU 17 and the like, the MPU 20 does not perform information processing related to the control of the automobile 1.

[0051] The MPU 20 processes information related to the service. For example, by installing the MPU 20, it becomes possible to record images of the inside and outside of the vehicle captured by an onboard camera while driving, linking them to information such as the date and time of capture and the driving location.

[0052] The MPU 20 is configured to be detachable from the automobile 1. That is, the automobile 1 is provided with a connector 25 for the MPU. The MPU 20 can be attached to and detached from the connector 25 with a relatively simple operation. Specific examples of the MPU 20 and the operation of attaching and detaching the MPU 20 to the connector 25 will be described separately later.

[0053] Connector 25 is connected to the wireless communication device 21 by the electrical wiring CL of the communication system. Thereby, the MPU 20 can transmit and receive data to and from an external system via the wireless communication device 21. It becomes possible to share the data acquired by the vehicle 1 with an external system.

[0054] Similar to the BCU 18 and the like, the connector 25 is also connected to both the 12V power supply system and the DC / DC 14, and can supply power to the MPU 20 in either the ON or OFF state of the IG. Specifically, in addition to being connected to the 12V power supply system, the connector 25 is connected to the DC / DC 14 via the auxiliary power supply line 26. An emergency cutoff module 27 (constituting an auxiliary power supply control unit) capable of cutting off power supply is provided in this auxiliary power supply line 26. The function of the emergency cutoff module 27 will be described later.

[0055] As shown in FIG. 1, the MPU 20 can also transmit and receive data to and from an external system via the wireless communication device 21 during charging (when the IG is OFF), and the MPU 20 can also process the data. The MPU 20 can cooperate with an external system for information processing via the network and the wireless communication device 21.

[0056] (Power Cutoff Unit) The power cutoff unit 22 is a device for performing an emergency shutdown by controlling the emergency cutoff module 27 when the MPU 20 cannot be normally removed. The power cutoff unit 22 is composed of, for example, a simple microcomputer. Similar to the connector 25 and the like, the power cutoff unit 22 is connected to both the 12V power supply system and the DC / DC 14, and can supply power in either the ON or OFF state of the IG.

[0057] <Emergency Shutdown of MPU> As described above, the MPU 20 can be removed relatively easily from the automobile 1. As long as the power to the MPU 20 is cut off, there is no problem in removing the MPU 20 from the connector 25. Furthermore, even if the IG is on and power is supplied to the MPU 20, the power to the MPU 20 can be properly cut off by removing the MPU 20 according to a preset procedure.

[0058] However, the MPU 20 operates even when the IG is off. The MPU 20 may operate independently of user operation. While the MPU 20 is operating, a user may mistakenly believe that the power to the MPU 20 has been cut off and remove the MPU 20. In such a case, the semiconductors in the MPU 20 may fail or the data stored in the MPU 20 may be corrupted.

[0059] Therefore, the power supply system 2 is designed to be able to properly cut off the power to the MPU 20 even when such an unexpected removal operation of the MPU 20 is performed. Specifically, the power supply system 2 is configured to predict the removal operation of the MPU 20 from the initial operation of the removal of the MPU 20, and to perform a normal power cutoff (emergency shutdown) that involves saving data before the removal of the MPU 20 is completed.

[0060] 2 shows a block diagram related to emergency shutdown of power supply system 2. When power is supplied from external power supply devices 100 and 101 (IG off state), OBC 13 (power supply control unit) operates to charge high-voltage battery 12 and low-voltage battery 15. At this time, power from the 12V power supply system is cut off to reduce power consumption, as shown in FIG.

[0061] On the other hand, the MPU 20 and the power cutoff unit 22 can be powered whether the IG is on or off. When the IG is on, the MPU 20 and the power cutoff unit 22 are powered by discharging from the low-voltage battery 15. Even when the IG is off, the MPU 20 and the power cutoff unit 22 are also powered when the in-vehicle batteries 12 and 15 are being charged. At this time, as shown in FIG. 1, the MPU 20 may be executing information processing.

[0062] Regardless of whether the IG is on or off, the power cutoff unit 22 operates in synchronization with the power supply to the MPU 20. The power cutoff unit 22 is provided with, as functional components, an electrical connection monitoring unit 22a and an attachment / detachment operation detection unit 22b.

[0063] The electrical connection monitoring unit 22a predicts an improper removal operation of the MPU 20 from changes in electrical elements (current, voltage, impedance) related to the power supply of the MPU 20, and causes the emergency shutdown module 27 to execute an emergency shutdown.

[0064] Specifically, the electrical connection monitoring unit 22a monitors the electrical connection status of the MPU 20, and if it detects an abnormality in the electrical connection status due to the removal operation of the MPU 20, it outputs a control signal (emergency SD signal) to the emergency shutdown module 27 before the removal of the MPU 20 is complete, instructing it to perform a power cut (emergency shutdown) accompanied by the preservation of data.

[0065] The attachment / detachment operation detection unit 22b predicts an improper detachment operation of the MPU 20 from a change in the attachment state of the MPU 20 to the connector 25, and causes the emergency shutdown module 27 to execute an emergency shutdown.

[0066] Specifically, when the attachment / detachment operation detection unit 22b detects the start of the removal operation of the MPU 20, it outputs an emergency SD signal to the emergency shutdown module 27 before the removal of the MPU 20 is completed. Note that the electrical connection monitoring unit 22a and the attachment / detachment operation detection unit 22b of this power supply system 2 are provided in one power shutdown unit 22, but the electrical connection monitoring unit 22a and the attachment / detachment operation detection unit 22b may be provided in separate power shutdown units.

[0067] When the emergency SD signal is input, the emergency shutdown module 27 executes an emergency shutdown of the MPU 20. This causes the emergency shutdown to be performed before the removal of the MPU 20 is complete. Because the power is shut down with data preservation, that is, the power is shut down normally, before the removal of the MPU 20 is complete, the hardware and software of the MPU 20 can be protected even if the MPU 20 is removed while it is operating.

[0068] <Connector, MPU, and how to insert / remove the MPU into / from the connector> 3 specifically shows the MPU 20 and the connector 25. FIG. 3 illustrates the operation of removing the MPU 20 from the connector 25.

[0069] The MPU 20 has a rectangular printed circuit board 20a. Although not shown, a number of electronic components, such as a processor, are attached to the surface of the printed circuit board 20a. Connection terminals 20b are provided on one short side of the printed circuit board 20a.

[0070] The printed circuit board 20a is attached to the connector 25 by inserting the connection terminals 20b into the connector 25 to a predetermined position. A pair of stoppers 30, 30 are provided at predetermined positions relative to the insertion port of the connector 25. These stoppers 30, 30 are arranged at portions where both corners of the short sides of the printed circuit board 20a that are exposed from the connector 25 are located when the printed circuit board 20a is attached to the connector 25.

[0071] The stopper 30 is provided with an attachment / detachment sensor 28 that detects the rotation of the stopper 30 and outputs a signal to the power cutoff unit 22 (attachment / detachment operation detection section 22b). The attachment / detachment sensor 28 may be any sensor that can detect the removal operation of the MPU 20. The attachment / detachment sensor 28 may be changed according to the specifications.

[0072] Each stopper 30 has a base 31 and a pair of restricting portions 32, 32 arranged at a predetermined position relative to the connector 25, and a rotating member 33 rotatably attached to the base 31 and the pair of restricting portions 32, 32. The rotating member 33 is composed of a shaft portion 33a, a pressure contact portion 33b, a locking portion 33c, a lever portion 33d, etc.

[0073] The base 31 and the pair of restricting portions 32, 32 are disposed so as to overlap with each other at a distance from each other. A corner edge of the printed circuit board 20a is sandwiched between the pair of restricting portions 32, 32.

[0074] The shaft portion 33a is inserted into shaft holes formed at the center of the base portion 31 and the pair of restriction portions 32, 32, and is rotatable and slidable in the axial direction. A restriction piece 34 protruding in the radial direction is provided at the middle portion of the shaft portion 33a. The restriction piece 34 is configured to be inserted into and removed from the restriction hole 31a formed in the base portion 31.

[0075] The pressure contact portion 33b is a cylindrical member, and its surface is formed from an elastic material with a high coefficient of friction, such as rubber. A part of the pressure contact portion 33b is provided with a notched portion 35 having a chord-shaped cross section. The pressure contact portion 33b is disposed between the pair of restricting portions 32, 32, with the shaft portion 33a inserted therein so as to rotate together with the pressure contact portion 33b.

[0076] The lever portion 33d is provided integrally with the shaft portion 33a so as to extend radially from the tip of the shaft portion 33a that protrudes upward from the pair of restricting portions 32, 32. The locking portion 33c is provided integrally with the shaft portion 33a and the lever portion 33d so as to extend laterally from the pair of restricting portions 32, 32.

[0077] 3 shows the state in which the MPU 20 is attached to the connector 25. The corner edge of the printed circuit board 20a is clamped between the pair of restricting portions 32, 32, and the restricting piece 34 is inserted into the restricting hole 31a with the locking portion 33c extending along the short side of the printed circuit board 20a. Therefore, the rotation of the rotating member 33 is restricted, and the pair of stoppers 30, 30 prevents the MPU 20 from being removed from the connector 25.

[0078] 3 shows the operation of releasing the stopper 30. As shown in the enlarged view, the lever portion 33d is lifted and the restricting piece 34 is removed from the restricting hole 31a, thereby enabling each rotating member 33 to rotate. Then, each rotating member 33 is rotated to a position where the locking portion 33c extends along the long side of the printed circuit board 20a.

[0079] By doing so, the printed circuit board 20a is pushed out toward the pressure contact portion 33b, and a part of the connection terminal 20b is pulled out from the connector 25. The pressure contact portions 33b of each rotating member 33 face each other at their cutout portions 35, and are no longer in pressure contact with the printed circuit board 20a.

[0080] At this time, some of the connection terminals 20b are connected to the connector 25, and the MPU 20 remains powered. However, this operation changes the electrical connection state through which power is supplied to the MPU 20. That is, the current, voltage, and impedance change. The change in the electrical connection state is monitored by the power cutoff unit 22 (electrical connection monitoring section 22a).

[0081] The bottom diagram in Figure 3 shows the state after removal of the MPU 20. By setting both stoppers 30 to the position shown in the middle diagram, it becomes possible to pull the printed circuit board 20a and remove the connection terminals 20b from the connector 25. When the connection terminals 20b are completely removed from the connector 25, power supply to the MPU 20 stops, and the power to the MPU 20 is cut off.

[0082] As described above, the power supply system 2 is provided with a stopper 30 (removal operation delay mechanism) having a predetermined structure. The power supply system 2 is configured so that the stopper 30 ensures a predetermined time (removal operation delay time) for the removal operation. This makes it easy to detect changes in the electrical connection state of the MPU 20 between the start of the MPU 20 removal operation and its completion, and also makes it easy to properly shut down the power to the MPU 20.

[0083] The delay in the removal operation by the stopper 30 allows for stable prediction of the removal of the MPU 20 before the MPU 20 is completely removed. This also allows for stable emergency shutdown. The shape of the stopper 30 can be modified as appropriate depending on the specifications. It is sufficient if it can delay the complete removal of the connection terminal 20b from the connector 25 for a predetermined time.

[0084] <Specific example of emergency shutdown control> The power cutoff unit 22 and the emergency cutoff module 27 execute a predetermined power cutoff method. Specifically, when at least one of the following is detected: an attempt to remove the MPU 20; or an abnormality in the electrical connection of the MPU 20 resulting from the removal operation; an emergency shutdown is executed before the removal of the MPU 20 is complete, and power is cut off while data is preserved.

[0085] 4, 5, and 6 show specific examples (flowcharts) of control of emergency shutdown executed by the power cutoff unit 22 and the emergency shutdown module 27. FIG.

[0086] This power supply system 2 is set with a plurality of modes (removal detection modes) for detecting the removal of the MPU 20. The system is configured so that one or more removal detection modes can be selected in advance from among these removal detection modes.

[0087] Specifically, the electrical detachment detection modes include a voltage detection mode, a current detection mode, and an impedance detection mode, and the mechanical detachment detection mode includes a detachment detection mode.

[0088] In each of the electrical removal detection modes, the electrical connection monitoring unit 22a monitors the electrical connection state of the MPU 20 and detects a change in the state to detect removal of the MPU 20. In the attachment / detachment detection mode, the attachment / detachment operation detection unit detects the removal operation of the MPU 20 based on a detection signal input from the attachment / detachment sensor 28.

[0089] By selecting one of the removal detection modes, the emergency shutdown module 27 executes an emergency shutdown in response to the input of a single emergency SD signal. Therefore, an emergency shutdown can be executed immediately upon detecting the removal of the MPU 20. Even if the MPU 20 is removed while power is being supplied, the hardware and software of the MPU 20 can be protected promptly. Alternatively, multiple removal detection modes may be selected, and an emergency shutdown can be executed in response to the input of any one of the emergency SD signals, i.e., the fastest emergency SD signal.

[0090] By selecting multiple removal detection modes, the emergency shutdown module 27 may execute an emergency shutdown upon input of all of the multiple emergency SD signals.

[0091] If only one removal detection mode is used, false detections may occur. However, if multiple removal detection modes with different detection targets are used and an emergency shutdown is performed when removal is detected in all of them, false detections can be effectively suppressed. Therefore, emergency shutdowns can be performed with high reliability. The hardware and software of the MPU 20 can be protected with high reliability.

[0092] At least one of the electrical connection monitoring unit 22a and the attachment / detachment operation detection unit 22b may be configured not to operate when the IG is on, but to operate when the IG is off.

[0093] As mentioned above, power can be supplied to the power cutoff unit 22 whether the IG is on or off, but supplying power increases power consumption. Moreover, when the IG is on, power is consumed from the low-voltage battery 15. In contrast, when the MPU 20 is operating with the IG off, power is supplied from external equipment, so there is no risk of consuming power from the vehicle battery.

[0094] Therefore, if at least one of the electrical connection monitoring unit 22a and the attachment / detachment operation detection unit 22b is configured not to operate when the IG is on but to operate when the IG is off, power consumption can be further reduced.

[0095] 4, when emergency shutdown control is executed (Yes in step S0), the power cutoff unit 22 selects the removal detection mode based on a user instruction (step S1). For example, only the voltage detection mode may be selected, or the voltage detection mode and the current detection mode may be selected, or both the removal detection mode and the voltage detection mode may be selected.

[0096] When the removal detection mode is selected, the power cutoff unit 22 resets the removal flag (step S2), and then sets a determination value that enables determination of an abnormality due to removal of the MPU 20 in accordance with the selected removal detection mode (step S3).

[0097] The power cutoff unit 22 stores judgment values for all removal detection modes. For example, in the current detection mode, when the connection terminal 20b is removed from the connector 25, the contact state changes, causing a change in the current. By measuring the change in current in advance through an experiment or the like, an abnormal current value caused by the removal operation of the MPU 20 is stored in the power cutoff unit 22 as a judgment value.

[0098] The power cutoff unit 22 sets a judgment value for a selected removal detection mode from among all of these judgment values for the removal detection modes.

[0099] Next, the power cutoff unit 22 detects the removal of the MPU 20 according to the selected removal detection mode.

[0100] When the voltage detection mode is selected (Yes in step S4), the voltage supplied to the MPU 20 through the auxiliary power supply line 26 is monitored (step S5). Then, by comparing the voltage with a judgment value, if there is an abnormality in the voltage (Yes in step S6), a removal flag is generated (step S7). If there is no abnormality in the voltage (No in step S6), a removal flag is not generated.

[0101] When the current detection mode is selected (Yes in step S8), the current supplied to the MPU 20 through the auxiliary power supply line 26 is monitored (step S9). Then, by comparing the current with a judgment value, if there is an abnormality in the current (Yes in step S10), a removal flag is generated (step S11). If there is no abnormality in the current (No in step S10), a removal flag is not generated.

[0102] When the impedance detection mode is selected (Yes in step S12), the impedance of the auxiliary power supply line 26 is monitored (step S13). Then, by comparing the impedance with a determination value, if an abnormality is found in the impedance (Yes in step S14), a removal flag is generated (step S15). If there is no abnormality in the impedance (No in step S14), a removal flag is not generated.

[0103] 5, when the attachment / detachment detection mode is selected (Yes in step S16), the attachment / detachment sensor 28 is monitored (step S17). Then, by comparing with the determination value, if there is a removal operation (Yes in step S18), a removal flag is generated (step S19). If there is no removal operation (No in step S18), a removal flag is not generated.

[0104] Then, when the power cutoff unit 22 detects the removal flag in the selected removal detection mode (Yes in step S20), it executes an emergency shutdown of the MPU 20 (step S21). Specifically, the power cutoff unit 22 outputs an emergency SD signal to the emergency shutdown module 27. As a result, the MPU 20 is normally powered off and removed in an appropriate state.

[0105] On the other hand, if the removal flag is not detected in the selected removal detection mode (No in step S20), the process returns to step S3 in FIG.

[0106] When the power cutoff unit 22 executes an emergency shutdown of the MPU 20, it suspends monitoring of the removal detection mode (step S22) and resets the removal flag (step S23). That is, the power cutoff unit 22 returns control to the initial state.

[0107] The power cutoff unit 22 then detects the attachment of the MPU 20 .

[0108] 6, the power cut-off unit 22 determines whether or not the detachment detection mode is selected (step S24). If the detachment detection mode is selected, the power cut-off unit 22 monitors the detachment sensor 28 (step S25). On the other hand, if the detachment detection mode is not selected, the power cut-off unit 22 selects the detachment detection mode (step S26) and monitors the detachment sensor 28 (step S25).

[0109] Then, the presence or absence of an attachment operation of MPU 20 is determined from the detection value of attachment / detachment sensor 28, and if an attachment operation of MPU 20 is detected (Yes in step S27), power cut-off unit 22 resumes power supply to MPU 20 (step S28). As a result, power supply system 2 returns to its original state, and power cut-off unit 22 stops monitoring the removal detection mode (step S29). Then, as shown in Fig. 4, the emergency shutdown control returns to before step S1 and is repeated from step S1 until execution of the emergency shutdown control is completed (No in step S0).

[0110] (Handling of MPU20 when IG is on) In the above-described embodiment, the state in which the automobile 1 is stopped and power is being supplied from external equipment (IG off state) has been exemplified.

[0111] On the other hand, when the ignition is on (IG on), that is, when the automobile 1 is electrically capable of running, power is supplied to each of the electrical components from the low-voltage battery 15 via the 12V power supply system. Therefore, the MPU 20 and the power cutoff unit 22 also operate on power supplied from the low-voltage battery 15 via the 12V power supply system. Control devices such as the CCU 16 also operate on power supplied from the low-voltage battery 15 via the 12V power supply system.

[0112] The MPU 20 is connected to the CCU 16 via electrical wiring CL (not shown) for communication, and when the IG is on, it executes various information processes based on signals input from the CCU 16. For example, under the control of the CCU 16, the MPU 20 executes the process of recording the above-mentioned images of the inside and outside of the vehicle captured by an on-board camera while the vehicle is traveling, by linking the images to information such as the date and time of capture and the location where the vehicle was traveling.

[0113] If the MPU 20 is removed according to a preset procedure, the CCU 16 outputs a predetermined signal to the MPU 20 to perform a normal power shutdown of the MPU 20. If the MPU 20 is improperly removed, the CCU 16 cooperates with the power shutdown unit 22 to output an emergency SD signal to the emergency shutdown module 27 to perform an emergency shutdown of the MPU 20.

[0114] Furthermore, if the CCU 16 determines that the operating MPU 20 meets the conditions for stopping the MPU 20 (conditions requiring power shutdown), it may output a predetermined signal to the MPU 20 to perform a normal power shutdown of the MPU 20, or it may work in cooperation with the power shutdown unit 22 to output an emergency SD signal to the emergency shutdown module 27 to perform an emergency shutdown of the MPU 20.

[0115] Conditions that require a power cutoff include, for example, when an abnormal operation of MPU20 (such as thermal runaway or excessive current) is detected, when the user requests that MPU20 be removed, when there is a request to make MPU20 unusable while driving in order to reduce power consumption, or when there is a request to initialize, reinstall, or upgrade MPU20. [Explanation of symbols]

[0116] 1. Automobiles (vehicles) 2 Power System 12 High voltage battery 13 OBC (Power Supply Control Unit) 14 DC / DC 15 Low voltage battery 16 CCU (Information Processing Unit) 17 MCU (information processing unit) 18 BCU (information processing unit) 20 MPU (Detachable Information Processing Unit) 21 Wireless communication equipment 22 Power Cut-Off Unit 22a Electrical connection monitoring unit 22b Attachment / detachment operation detection unit 27 Emergency shutdown module (auxiliary power supply control unit) 100 Commercial power 101 Dedicated Facilities PL Electrical wiring for power systems CL Communication system electrical wiring

Claims

1. A power supply system for a vehicle including a plurality of information processing devices that operate by power supplied from an on-board power supply, and a power supply control unit that is disposed between the on-board power supply and the plurality of information processing devices and controls the supply of power, the plurality of information processing devices include at least one detachable information processing device that is detachable from the vehicle, the power supply control unit includes an auxiliary power supply control unit that performs an emergency shutdown based on a specific control signal input when the vehicle is in both a state where the vehicle can run and a state where the vehicle cannot run, thereby cutting off power to the detachable information processing device while preserving data; an electrical connection monitoring unit that monitors an electrical connection state of the detachable information processing device, and when detecting an abnormality in the electrical connection state due to a detachment operation of the detachable information processing device, outputs the control signal to the auxiliary power supply control unit before detachment of the detachable information processing device is completed; a detachment operation detection unit that detects a detachment operation of the detachable information processing device and outputs the control signal to the auxiliary power supply control unit before the detachment of the detachable information processing device is completed; The vehicle power supply system further comprises:

2. 2. The vehicle power supply system according to claim 1, When one of the control signals is input from the electrical connection monitoring unit and the attachment / detachment operation detection unit, the auxiliary power supply control unit executes the emergency shutdown.

3. 2. The vehicle power supply system according to claim 1, When the control signals are input from the electrical connection monitoring unit and the attachment / detachment operation detection unit, an auxiliary power supply control unit executes the emergency shutdown.

4. The vehicle power supply system according to any one of claims 1 to 3, At least one of the electrical connection monitoring unit and the attachment / detachment operation detection unit does not operate when the vehicle is in a drivable state, but operates when the vehicle is in a non-drivable state.

Images