Power Redundancy System

Abstract

To provide a power supply redundant system capable of performing an appropriate protection as well as realizing a miniaturization.SOLUTION: A power supply redundant system comprises: a main battery B1 that can supply a power to a first load part LO1 and a second load part LO2; a sub battery B2 that can supply a power to at least the second load part LO2; a first switching part SW1 that switches a power supply path reached from the main battery B1 and the sub battery B2 to the first load part LO1 and the second load part LO2; a control substrate 30 that mounts a switching control part that switches and controls the first switching part SW1; and a housing that houses at least the main battery B1, the sub battery B2, and the first switching part SW1. The control substrate 30 receives the supply of the power from both of the main battery B1 and the sub battery B2 to be operated.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a power supply redundancy system. [Background technology]

[0002] Conventionally, a power supply redundancy system has been proposed that is mounted on a vehicle and supplies power to a load from a sub-battery in the event of an abnormality in the main battery, etc. Such a power supply redundancy system includes a first load unit that includes auxiliary equipment such as an air conditioner and a car navigation system in addition to the functions required for vehicle operation, and a second load unit that performs degenerate functions such as at least evacuating the vehicle to a safe place when power supply to the first load unit becomes impossible, and a system with a redundant configuration for the load has also been proposed (see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-119728 Summary of the Invention [Problem to be solved by the invention]

[0004] However, in the redundant power supply system described in Patent Document 1, the main battery, the sub-battery, and the switching unit that switches the power supply paths from them are installed separately, and moreover, these are connected by a thick wire harness that is difficult to bend. Therefore, these three elements need to be installed at a certain distance from each other due to the bending of the wire harness, and there is a limit to how close they can be placed, making it difficult to miniaturize the redundant power supply system.

[0005] Furthermore, conventional battery packs are equipped with a control circuit for controlling the switching unit, and this control circuit receives power from within the battery pack. As a result, the control circuit does not have a redundant configuration, and if a problem occurs with the power supply to the control circuit, the power redundancy system will not be able to provide appropriate protection.

[0006] The present invention has been made to solve the above-mentioned conventional problems, and its object is to provide a power supply redundancy system that can be made smaller and can provide more appropriate protection. [Means for solving the problem]

[0007] A power supply redundancy system according to the present invention includes a main battery capable of supplying power to a first load unit and a second load unit, a sub-storage capable of supplying power to at least the second load unit, a switching unit that switches a power supply path from the main battery and the sub-storage to the first load unit and the second load unit, a control board having a switching control unit that controls switching of the switching unit mounted thereon, and a housing that houses at least the main battery, the sub-storage, and the switching unit, and the control board is operable by receiving power from both the main battery and the sub-storage. The switching control unit controls the switching unit to connect the sub-storage and the second load unit until it is determined whether the abnormality is in the main battery or in a step-down means that receives a voltage higher than that of the main battery and the sub-storage, steps down the voltage, and supplies it to a load. . [Effects of the Invention]

[0008] According to the present invention, it is possible to provide a power supply redundancy system that can be made smaller and that can provide more appropriate protection. [Brief explanation of the drawings]

[0009] [Figure 1] 1 is a block diagram illustrating a power supply redundancy system according to an embodiment of the present invention. [Figure 2] FIG. 2 is a perspective view showing the twin battery shown in FIG. 1. [Figure 3] FIG. 2 is a block diagram showing details of a control board shown in FIG. 1. [Figure 4]FIG. 2 is a block diagram showing the operation of the power supply redundancy system according to the present embodiment, illustrating an example in a normal state. [Figure 5] FIG. 2 is a block diagram showing the operation of the power supply redundancy system according to the present embodiment, illustrating an example in which the main battery or the DC / DC converter is in an abnormal state. [Figure 6] FIG. 4 is a block diagram showing the operation of the power supply redundancy system according to the present embodiment, illustrating an example in which the sub-battery or the second load section is in an abnormal state. [Figure 7] FIG. 10 is a block diagram showing a power supply redundancy system according to a second embodiment. [Figure 8] FIG. 10 is a block diagram showing a power supply redundancy system according to a third embodiment. [Figure 9] FIG. 10 is a block diagram showing a power supply redundancy system according to a fourth embodiment. [Figure 10] FIG. 10 is a block diagram showing a power supply redundancy system according to a fifth embodiment. [Figure 11] FIG. 10 is a block diagram showing a power supply redundancy system according to a sixth embodiment. [Figure 12] FIG. 13 is a block diagram showing a power supply redundancy system according to a seventh embodiment. [Figure 13] FIG. 13 is a block diagram showing a power supply redundancy system according to an eighth embodiment. [Figure 14] FIG. 13 is a block diagram showing a power supply redundancy system according to a ninth embodiment. [Figure 15] FIG. 22 is a block diagram showing a power supply redundancy system according to a tenth embodiment. [Figure 16] FIG. 22 is a block diagram showing a power supply redundancy system according to an eleventh embodiment. [Figure 17] FIG. 23 is a block diagram showing a power supply redundancy system according to a twelfth embodiment. [Figure 18] FIG. 23 is a block diagram showing a power supply redundancy system according to a thirteenth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] The present invention will be described below in accordance with preferred embodiments. Note that the present invention is not limited to the embodiments shown below and can be modified as appropriate without departing from the spirit of the present invention. In addition, in the embodiments shown below, some components are omitted from illustration and description, but it goes without saying that publicly known or well-known technologies are applied as appropriate to the details of the omitted technologies within the scope of the content described below.

[0011] FIG. 1 is a block diagram showing a power supply redundancy system according to a first embodiment of the present invention. As shown in FIG. 1, the power supply redundancy system 1 is mounted on an autonomously driven electric vehicle or the like and is capable of supplying power to a first load unit LO1 and a second load unit LO2. In this power supply redundancy system 1, the first load unit LO1 includes loads essential for vehicle operation, such as a steering device and a brake device, and loads corresponding to auxiliary devices, such as an air conditioner and audio equipment. The second load unit LO2 is composed of loads essential for vehicle operation, such as a steering device and a brake device. For example, when the power supply redundancy system 1 according to this embodiment is mounted on an autonomously driven vehicle, power is supplied to the first load unit LO1 under normal circumstances, and the vehicle is driven autonomously. On the other hand, in the event of an abnormality in a main battery (see symbol B1) or the like, which will be described later, the power supply redundancy system 1 supplies power to the second load unit LO2 and performs an operation of automatically driving the vehicle, for example, by evacuating the vehicle to a safe place.

[0012] Note that the first load unit LO1 and the second load unit LO2 are not limited to the above examples, as long as the second load unit LO2 exhibits a more degenerate function than the first load unit LO1. In the following explanation, an example will be given in which the power supply redundancy system 1 is mounted on an autonomous driving vehicle, and the first load unit LO1 and the second load unit LO2 are as described above.

[0013] In addition to the first load unit LO1 and second load unit LO2 described above, the power supply redundancy system 1 includes a DC / DC converter (step-down means) 10, a twin battery 20, a control board 30, an operating voltage generation unit 40, and sensors S1 and S2. The twin battery 20 includes a main battery B1, a sub-battery (sub-storage) B2, and a first switching unit SW1.

[0014] The DC / DC converter 10 receives a voltage (several hundred volts, 48 ​​volts, etc.) higher than that of the main battery B1 and the sub-battery B2 and steps it down. The DC / DC converter 10 is connected to a first load unit LO1 and is capable of supplying the stepped-down power to the first load unit LO1.

[0015] Fig. 2 is a perspective view showing the twin battery 20 shown in Fig. 1. As shown in Fig. 2, the twin battery 20 includes the above-mentioned main battery B1, sub-battery B2, and first switching unit SW1, as well as terminals A to C and a housing BO that houses at least the main battery B1, sub-battery B2, and first switching unit SW1.

[0016] In the twin battery 20, terminal A is connected to the DC / DC converter 10, and terminal B is connected to ground. Terminal C is connected to the second load unit LO2. In the twin battery 20, terminal A is connected to the positive electrode side of the main battery B1. Terminal B is connected to the negative electrodes of the main battery B1 and the sub-battery B2, and terminal C is connected to the positive electrode side of the sub-battery B2. In addition, the first switch unit SW1 is provided on the connection line L1 that connects the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2. The main battery B1, the sub-battery B2, and the first switch unit SW1 are switched by, for example, a bus bar that allows a large current.

[0017] The main battery B1 is configured as a rechargeable secondary battery. This main battery B1 is connected to the DC / DC converter 10 via terminal A, and can be charged with power from the DC / DC converter 10, for example, at times other than during autonomous driving. The main battery B1 is connected to the first load unit LO1, and is also connected to the second load unit LO2 via the first switch unit SW1 and terminal C. Therefore, the main battery B1 according to this embodiment can supply power to both the first load unit LO1 and the second load unit LO2.

[0018] The sub-battery B2 is configured as a rechargeable secondary battery like the main battery B1. The sub-battery B2 may be configured of the same type and capacity as the main battery B1, or may be of a different type or capacity. The sub-battery B2 is connected to the second load unit LO2 via terminal C. Therefore, the sub-battery B2 according to this embodiment is capable of supplying power to the second load unit LO2. Note that the sub-battery B2 is also connected to the first load unit LO1 via the first switch unit SW1 and terminal A, and may therefore supply power to the first load unit LO1. In addition, the sub-battery B2 may be configured to store power from the DC / DC converter 10 at times other than during autonomous driving.

[0019] The first switching unit SW1 is configured by, for example, a switch made of a semiconductor, etc. This first switching unit SW1 can be changed between an open state and a closed state in response to an instruction from the control board 30.

[0020] The multiple sensors S1, S2 are installed to detect an abnormality in at least one of the main battery B1 and the sub-battery B2. The first sensor S1 is provided to detect an abnormality in the DC / DC converter 10 or the main battery B1, and is configured, for example, as an external voltage sensor attached near terminal A. The second sensor S2 is provided to detect an abnormality in the sub-battery B2 or the second load unit LO2, and is configured, for example, as an external voltage sensor attached near terminal C. The first sensor S1 and the second sensor S2 transmit sensor signals corresponding to the detected voltage values ​​to the control board 30.

[0021] The first sensor S1 and the second sensor S2 are not limited to voltage sensors, and may further include a current sensor. In particular, when a short circuit or other fault occurs in the second load unit LO2 near the terminal C, a current change occurs faster than a voltage change. Therefore, it is preferable that the second sensor S2 includes a current sensor. Furthermore, although the sensors S1 and S2 are externally attached to the twin battery 20, it is preferable that they are built-in. This is because the built-in sensors S1 and S2 enable the first switch unit SW1 to quickly control its switching using analog operation. Furthermore, the first switch unit SW1 is not limited to being switched by analog operation, and may be switched by a microcomputer.

[0022] The control board 30 controls the power supply redundancy system 1. In this embodiment, the control board 30 is configured to operate by receiving power from both the main battery B1 and the sub-battery B2. Note that in this embodiment, the control board 30 is provided outside the housing BO that constitutes the twin battery 20, but this is not a limitation, and the control board 30 may be provided inside the housing BO as one element of the twin battery 20.

[0023] The operating voltage generating unit 40 generates an operating voltage (e.g., 5 V) for the control board 30 and is configured by a regulator using an OR circuit. This operating voltage generating unit 40 generates an operating voltage for the control board 30 when power is supplied from at least one of the main battery B1 and the sub-battery B2. Note that the operating voltage generating unit 40 is also provided outside the casing BO that constitutes the twin battery 20, but is not limited to this and may be provided inside the casing BO as one element of the twin battery 20.

[0024] Fig. 3 is a block diagram showing details of the control board 30 shown in Fig. 1. As shown in Fig. 3, the control board 30 includes a voltage input unit 31, an AD converter 32, an abnormality determination unit 33, a switching control unit 34, a reference voltage generation unit 35, and an operation assurance unit 36.

[0025] The voltage input unit 31 is configured to receive an operating voltage from the operating voltage generation unit 40. When the voltage input unit 31 receives power supply, each functional unit of the control board 30 operates.

[0026] The AD converter 32 receives analog sensor signals from the multiple sensors S1 and S2 and digitizes them. The abnormality determination unit 33 determines whether an abnormality exists based on the sensor signals digitized by the AD converter 32. In this embodiment, if the sensor signal from the first sensor S1 is an abnormal value, the abnormality determination unit 33 determines that the main battery B1 or the DC / DC converter 10 is in an abnormal state. Furthermore, if the sensor signal from the second sensor S2 is an abnormal value, the abnormality determination unit 33 determines that the sub-battery B2 or the second load unit 10 is in an abnormal state. The abnormality determination unit 33 is not limited to determining an abnormality based on the sensor signals digitized by the AD converter 32. It is preferable to use an analog circuit for abnormality determination, such as inputting an analog sensor signal to a comparator and determining an abnormality when the analog sensor signal exceeds a determination threshold. This is because using an analog circuit makes it easier to respond immediately when an abnormality is detected.

[0027] The switching control unit 34 controls the switching of the first switching unit SW1. By switching the first switching unit SW1 by the switching control unit 34, at least one of the first load unit LO1 and the second load unit LO2 is made operable, thereby ensuring minimum functionality related to, for example, automatic driving.

[0028] The reference voltage generation unit 35 is a functional unit that generates a reference voltage. The operation assurance unit 36 ​​ensures the operation of the sensors S1 and S2. The operation assurance unit 36 ​​has a function of, for example, disconnecting the sensors S1 and S2 from the path shown in FIG. 1 and applying only the reference voltage to the sensors S1 and S2. When only the reference voltage is applied, the sensors S1 and S2 should output a sensor signal corresponding to the reference voltage. The operation assurance unit 36 ​​checks whether a sensor signal corresponding to the reference voltage is being output at this time and determines whether the sensors S1 and S2 are operating properly. If the operation assurance unit 36 ​​determines that the sensors S1 and S2 are not operating properly, it issues a predetermined warning or the like. The reference voltage generated by the reference voltage generation unit 35 is also used as a reference voltage for the AD converter 32, for example.

[0029] Next, the operation of the power supply redundancy system 1 according to this embodiment will be described. Figures 4 to 6 are block diagrams showing the operation of the power supply redundancy system 1 according to this embodiment. Figure 4 shows an example of a normal state, and Figure 5 shows an example of an abnormal state of the main battery B1 or the DC / DC converter 10. Figure 6 shows an example of an abnormal state of the sub-battery B2 or the second load unit LO2. In Figures 4 to 6, the thick lines indicate the flow of current.

[0030] First, as shown in Fig. 4, assume that the DC / DC converter 10, main battery B1, sub-battery B2, etc. are in a normal state with no abnormalities. In this case, the switching control unit 34 closes the first switching unit SW1. In this state, power can be supplied from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Furthermore, power can also be supplied from the sub-battery B2 to the second load unit LO2. Note that power may also be supplied from the sub-battery B2 to the first load unit LO1.

[0031] 5, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10 or the main battery B1. In this case, the switching control unit 34 sets the first switching unit SW1 to the open state. In this state, because an abnormality has occurred in the DC / DC converter 10 or the main battery B1, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the sub-battery B2. This drives the second load unit LO2, making it possible to perform the minimum operations related to autonomous driving.

[0032] 6, suppose that an abnormality such as a short circuit occurs in the sub-battery B2 or the second load unit LO2. In this case, the switching control unit 34 also sets the first switching unit SW1 to the open state. In this state, the process of disconnecting the sub-battery B2 where the abnormality has occurred is performed. As a result, power can be supplied to the first load unit LO1 from the DC / DC converter 10 and the main battery B1 without being affected by the abnormality on the sub-battery B2 side, allowing automatic operation, etc. to be performed.

[0033] Next, the operation of the power supply redundancy system 1 according to this embodiment will be described. First, in the power supply redundancy system 1 according to this embodiment, the main battery B1, the sub-battery B2, and the first switching unit SW1 are connected by bus bars or the like and housed in the same housing BO. This eliminates the need to connect these three elements with a large-diameter wire harness. This eliminates the need to ensure a distance between the three elements due to the influence of a large-diameter wire harness, and the power supply redundancy system 1 can be made smaller.

[0034] Furthermore, as described above, in the example shown in FIG. 5, an abnormality occurs on the main battery B1 side, but the sub-battery B2 is normal. Therefore, the operating voltage generation unit 40 provides the operating voltage to the control board 30 through the sub-battery B2. Similarly, in the example shown in FIG. 6, an abnormality occurs on the sub-battery B2 side, but the main battery B1 is normal. Therefore, the operating voltage generation unit 40 provides the operating voltage to the control board 30 through the main battery B1. Therefore, the control board 30 also has a redundant configuration, which contributes to more appropriate protection.

[0035] In this way, according to the power supply redundancy system 1 of the first embodiment, the main battery B1, the sub-battery B2, and the first switching unit SW1 are housed in the same housing BO, eliminating the need to connect them with a thick-diameter wire harness, thereby enabling a more compact system. Furthermore, because the control board 30 is operable by receiving power from both the main battery B1 and the sub-battery B2, a redundant configuration is also applied to the control circuit. As a result, even if the power supply from one battery is interrupted, the control board 30 can operate the first switching unit SW1 using power supplied from the other battery, providing more appropriate protection. Therefore, both a more compact system and more appropriate protection can be achieved.

[0036] Furthermore, whether the sensors S1 and S2 are operating properly is determined based on the sensor signals obtained when only the reference voltage is applied to the sensors S1 and S2. For this reason, for example, when the vehicle is stopped, the reference voltage is applied to the sensors S1 and S2 and it is confirmed whether a sensor signal equivalent to the reference voltage is obtained, thereby ensuring the operation of the sensors S1 and S2.

[0037] Next, a second embodiment of the present invention will be described. The power supply redundancy system according to the second embodiment is similar to that of the first embodiment, but some configurations and operations are different. The differences from the first embodiment will be described below.

[0038] 7 is a block diagram showing a power supply redundancy system according to the second embodiment. The twin battery 21 according to the second embodiment differs from the twin battery 20 according to the first embodiment in that it has two switching units SW1 and SW2.

[0039] The twin battery 21 according to the second embodiment will be described in detail. The twin battery 21 according to the second embodiment includes a first switching unit SW1 and a second switching unit SW2 on a connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2. Of the two switching units SW1 and SW2, the first switching unit SW1 is on the main battery B1 side, and the second switching unit SW2 is on the sub-battery B2 side. Both switching units SW1 and SW2 are controlled by a switching control unit 34 of a control board 30 to switch between an open state and a closed state. In the second embodiment, a terminal C is connected to a connection point P1 located between the first switching unit SW1 and the second switching unit SW2.

[0040] Furthermore, in the second embodiment, the sub-battery B2 is provided with an abnormality detection unit that detects abnormalities in itself, and when an abnormality is detected, transmits the information to the control board 30. Therefore, the abnormality determination unit 33 of the control board 30 can determine three types of abnormalities: an abnormality in the DC / DC converter 10 or the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0041] Next, the operation of the power supply redundancy system 2 according to the second embodiment will be described with reference to FIG. 7. First, assume that the DC / DC converter 10, main battery B1, sub-battery B2, etc. are in a normal state with no abnormalities. In this case, the switching control unit 34 closes the first switching unit SW1 and opens the second switching unit SW2. This allows power to be supplied from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Meanwhile, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power supply from the sub-battery B2 to the first load unit LO1 and the second load unit LO2 is disabled.

[0042] The switching control unit 34 may close the second switching unit SW2 to allow power to be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2. In this case, if there is a voltage difference between the main battery B1 and the sub-battery B2, current will flow from one of the main battery B1 and the sub-battery B2 to the other. Therefore, when the second switching unit SW2 is closed, the power redundancy system 2 is provided with a backflow prevention circuit to prevent such current flow.

[0043] Also, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10 or the main battery B1. In this case, the switching control unit 34 opens the first switching unit SW1 and closes the second switching unit SW2. In this state, because an abnormality has occurred in the DC / DC converter 10 or the main battery B1, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the sub-battery B2. This drives the second load unit LO2, making it possible to perform the minimum operations related to autonomous driving.

[0044] Assume that an abnormality such as a short circuit occurs in the second load unit LO2. In this case, the switching control unit 34 sets the first switching unit SW1 and the second switching unit SW2 to the open state. In this state, a process is performed to disconnect the second load unit LO2 where the abnormality has occurred. As a result, power can be supplied to the first load unit LO1 from the DC / DC converter 10 and the main battery B1 without being affected by the abnormality in the second load unit LO2, allowing automatic operation, etc. to be performed. Note that if the second load unit LO2 has multiple loads, each of which has a switch or fuse, the functions of the switch or fuse may be used to disconnect only the load where the abnormality has occurred. In this case, the switching control unit 34 does not need to set the first switching unit SW1 and the second switching unit SW2 to the open state. For example, the first switching unit SW1 may be closed and the second switching unit SW2 may be open. Furthermore, similar control may be performed when an abnormality occurs in the first load unit LO1.

[0045] Furthermore, suppose that an abnormality such as a short circuit occurs in sub-battery B2. In this case, the switching control unit 34 closes the first switching unit SW1 and opens the second switching unit SW2, just as in the normal state. As a result, the switching control unit 34 supplies power to the first load unit LO1 and the second load unit LO2 using the normal DC / DC converter 10 and main battery B1, and disconnects the sub-battery B2.

[0046] In this way, according to the power supply redundancy system 2 of the second embodiment, similar to the first embodiment, it is possible to achieve miniaturization and more appropriate protection, thereby ensuring the operation of sensors S1 and S2.

[0047] Next, a third embodiment of the present invention will be described. The power supply redundancy system according to the third embodiment is similar to that of the second embodiment, but some configurations and operations are different. The differences from the second embodiment will be described below.

[0048] 8 is a block diagram showing a power supply redundancy system according to the third embodiment. A twin battery 22 according to the third embodiment includes a charge control unit CC in addition to the twin battery 21 according to the second embodiment.

[0049] The charge control unit CC controls the charging of the sub-battery B2, for example, by monitoring whether the sub-battery B2 has enough charge to drive the second load unit LO2, and charging the necessary amount if the charge is insufficient. This charge control unit CC is provided on the connection line L2 that is connected from the connection point P1 to the sub-battery B2 without passing through the second switch unit SW2.

[0050] Furthermore, when the twin battery 22 is equipped with a charging control unit CC as in the third embodiment, it is preferable to provide a backflow prevention circuit between the input side of the charging control unit CC and the connection point P1, and between the output side of the charging control unit CC and the sub-battery B2. Note that although it is assumed that the charging of the sub-battery B2 is completed by the functions of the charging control unit CC, some functions may be controlled by the control board 30 or a higher-level ECU (Electronic Control Unit).

[0051] Next, the operation of the power supply redundancy system 3 according to the third embodiment will be described with reference to Fig. 8. First, the control of the first switching unit SW1 and the second switching unit SW2 in a normal state and an abnormal state is the same as in the second embodiment.

[0052] Furthermore, in the third embodiment, for example, in a normal state, the charge control unit CC monitors the charge amount of the sub-battery B2. When an abnormality occurs on the main battery B1 side, if the charge control unit CC determines that the sub-battery B2 does not have enough charge to operate the second load unit LO2, the charge control unit CC charges the sub-battery B2.

[0053] In this way, according to the power supply redundancy system 3 of the third embodiment, similar to the second embodiment, it is possible to achieve miniaturization and more appropriate protection, thereby ensuring the operation of sensors S1 and S2.

[0054] Next, a fourth embodiment of the present invention will be described. The power supply redundancy system according to the fourth embodiment is similar to that of the second embodiment, but some configurations and operations are different. The differences from the second embodiment will be described below.

[0055] 9 is a block diagram showing a power supply redundancy system according to the fourth embodiment. The twin battery 23 according to the fourth embodiment includes a third switching unit SW3 in addition to the twin battery 21 according to the second embodiment.

[0056] The third switching unit SW3 is provided on the connection line L3 connecting the DC / DC converter 10 and the main battery B1. More specifically, the third switching unit SW3 is provided closer to the DC / DC converter 10 than a connection point P2 with a connection line L1 that branches off from the connection line L3 toward the sub-battery B2. Similar to the first switching unit SW1 and the second switching unit SW2, the third switching unit SW3 can be switched between an open state and a closed state in response to an instruction from the control board 30.

[0057] Furthermore, in the fourth embodiment, the main battery B1 is equipped with an abnormality detection unit that detects abnormalities in itself, and when an abnormality is detected, transmits the information to the control board 30. The sub-battery B2 is also equipped with a similar function. Therefore, the abnormality determination unit 33 of the control board 30 can determine four types of abnormalities: an abnormality in the DC / DC converter 10, an abnormality in the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0058] The main battery B1 does not need to be equipped with an abnormality detection unit that detects abnormalities in itself. In this case, by first detecting an abnormality based on the sensor signal from the first sensor S1, it can be determined that an abnormality exists in the DC / DC converter 10 or the main battery B1. Thereafter, the switching control unit 34 opens the third switching unit SW3, and if the sensor signal from the first sensor S1 returns to normal, it can be determined that an abnormality exists in the main battery B1. Furthermore, if the switching control unit 34 opens the third switching unit SW3 and the sensor signal from the first sensor S1 does not return to normal, it can be determined that an abnormality exists in the DC / DC converter 10. In this case, the abnormality determination unit 33 of the control board 30 can also determine four types of abnormalities: an abnormality in the DC / DC converter 10, an abnormality in the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0059] Next, the operation of the power supply redundancy system 4 according to the fourth embodiment will be described with reference to FIG. 9. First, assume that the DC / DC converter 10, main battery B1, and sub-battery B2 are in a normal state with no abnormalities. In this case, the switching control unit 34 closes the first switching unit SW1 and the third switching unit SW3 and opens the second switching unit SW2. This allows power to be supplied from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Meanwhile, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power supply from the sub-battery B2 to the first load unit LO1 and the second load unit LO2 is disabled.

[0060] The switching control unit 34 may close the second switching unit SW2 to allow power to be supplied from the sub-battery B2 to the first load unit LO1 and the second load unit LO2. In this case, if there is a voltage difference between the main battery B1 and the sub-battery B2, a backflow prevention circuit is provided, as in the second embodiment.

[0061] Also, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10. In this case, the switching control unit 34 closes the first switching unit SW1 and the second switching unit SW2 and opens the third switching unit SW3. In this state, because the third switching unit SW3 is open, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the main battery B1 and the sub-battery B2. This drives the second load unit LO2, allowing the minimum operations related to automatic driving to be performed.

[0062] Also, suppose that an abnormality such as a short circuit occurs in the main battery B1. In this case, the switching control unit 34 opens the first switching unit SW1 and the third switching unit SW3 and closes the second switching unit SW2. In this state, power is supplied from the DC / DC converter 10 to the first load unit LO1, and power is supplied from the sub-battery B2 to the second load unit LO2. This allows automatic operation by the first load unit LO1 and minimum operation by the second load unit LO2.

[0063] Assume that an abnormality such as a short circuit occurs in the second load unit LO2. In this case, the switching control unit 34 opens the first and second switching units SW1 and SW2 and closes the third switching unit SW3. In this state, a process is performed to disconnect the abnormal second load unit LO2. As a result, power can be supplied to the first load unit LO1 from the DC / DC converter 10 and the main battery B1 without being affected by the abnormality in the second load unit LO2, allowing automatic operation and the like to be performed. Note that if the second load unit LO2 includes multiple loads, each of which has a switch or fuse, the functions of the switch or fuse may be used to disconnect only the load in which the abnormality occurs, as in the second embodiment. In this case, the switching control unit 34 does not need to open the first and second switching units SW1 and SW2. For example, the switching control unit 34 may close the first switching unit SW1 and open the second switching unit SW2.

[0064] Furthermore, suppose that an abnormality such as a short circuit occurs in sub-battery B2. In this case, the switching control unit 34 closes the first switching unit SW1 and the third switching unit SW3 and opens the second switching unit SW2, just as in the normal state. This allows the DC / DC converter 10 and main battery B1, which are normal, to supply power to the first load unit LO1 and the second load unit LO2, and the sub-battery B2 can be isolated.

[0065] If the main battery B1 does not have an abnormality detection unit that detects its own abnormality, the abnormality determination unit 33 must open the third switch unit SW3 and determine whether the sensor signal from the first sensor S1 returns to a normal value. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it determines whether the sensor signal from the first sensor S1 returns to a normal value. In this case, the switching control unit 34 opens the first switch unit SW1 and the third switch unit SW3 and closes the second switch unit SW2. That is, the switching control unit 34 switches the sub-battery B2 to the same switching state as when the main battery B1 is abnormal, connecting the sub-battery B2 to the second load unit LO2. As a result, the power redundancy system 4 first connects the sub-battery B2 to the second load unit LO2 and allows the second load unit LO2 to perform minimum operations, etc., until it is determined whether the abnormality is in the DC / DC converter 10 or the main battery B1. Then, the switching control unit 34 determines whether the abnormality is in the DC / DC converter 10 or the main battery B1 based on whether the sensor signal of the first sensor S1 returns to a normal value, and after determining the abnormality, sets the switching states of the first to third switching units SW1 to SW3 as described above.

[0066] In this way, according to the power supply redundancy system 4 of the fourth embodiment, similar to the second embodiment, it is possible to achieve miniaturization and more appropriate protection, thereby ensuring the operation of sensors S1 and S2.

[0067] Furthermore, according to the fourth embodiment, the sub-battery B2 and the second load unit LO2 are connected until it is determined whether the abnormality is in the DC / DC converter 10 or the main battery B1. Therefore, the second load unit LO2 is first operated using the sub-battery B2, and while performing the minimum vehicle running, etc. using the second load unit LO2, time can be gained until the abnormality is identified, and then appropriate action can be taken.

[0068] Next, a fifth embodiment of the present invention will be described. The power supply redundancy system according to the fifth embodiment is similar to that of the fourth embodiment, but some configurations and operations are different. The differences from the fourth embodiment will be described below.

[0069] 10 is a block diagram showing a power supply redundancy system according to the fifth embodiment. The twin battery 24 according to the fifth embodiment includes a charge control unit CC in addition to the twin battery 23 according to the fourth embodiment. The charge control unit CC is the same as that described in the third embodiment, and is provided on a connection line L2 that connects from the connection point P1 to the sub-battery B2 without passing through the second switch unit SW2.

[0070] Next, the operation of the power supply redundancy system 5 according to the fifth embodiment will be described with reference to Fig. 10. First, the control of the first switching unit SW1, the second switching unit SW2, and the third switching unit SW3 in a normal state and an abnormal state is the same as in the fourth embodiment.

[0071] Furthermore, in the fifth embodiment, for example, in a normal state, the charge control unit CC monitors the charge amount of the sub-battery B2. When an abnormality occurs on the main battery B1 side, if the charge control unit CC determines that the sub-battery B2 does not have enough charge to operate the second load unit LO2, the charge control unit CC charges the sub-battery B2.

[0072] In this way, the power supply redundancy system 5 according to the fifth embodiment can achieve miniaturization and more appropriate protection, as in the fourth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate action after buying time to identify the abnormal part.

[0073] Next, a sixth embodiment of the present invention will be described. The power supply redundancy system according to the sixth embodiment is similar to that of the first embodiment, but some configurations and operations are different. The differences from the first embodiment will be described below.

[0074] 11 is a block diagram showing a power supply redundancy system according to a sixth embodiment. Unlike the twin battery 20 according to the first embodiment, the twin battery 25 according to the sixth embodiment does not have a connection line L1 connecting the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2, and does not have first to third switching units SW1 to SW3. On the other hand, the twin battery 25 according to the sixth embodiment is provided with fourth to sixth switching units SW4 to SW6. Like the first to third switching units SW1 to SW3 described above, the fourth to sixth switching units SW4 to SW6 are switched between an open state and a closed state under the control of the control board 30.

[0075] In this twin battery 25, the fourth switching unit SW4 is installed between terminal A and the positive electrode of the main battery B1. The negative electrode of the main battery B1 is connected to terminal B. One end of the fifth switching unit SW5 is connected to terminal A, and the other end is connected to the sixth switching unit SW6. The other end of the sixth switching unit SW6 is connected to the positive electrode of the sub-battery B2, and the negative electrode of the sub-battery B2 is connected to terminal B. A connection point P3 between the fifth switching unit SW5 and the sixth switching unit SW6 is connected to terminal C. In the sixth embodiment, two terminals are provided at terminal A to provide a redundant configuration, but this is not limited to this. The sixth embodiment may also have a configuration in which one terminal is combined into one, and the twin battery 25 branches into a path leading to the fourth switching unit SW4 and a path leading to the fifth switching unit SW5.

[0076] In the sixth embodiment, the main battery B1 is equipped with an abnormality detection unit that detects abnormalities in itself, and when an abnormality is detected, transmits the information to the control board 30. The sub-battery B2 is also equipped with a similar function. Therefore, the abnormality determination unit 33 of the control board 30 can determine four types of abnormalities: an abnormality in the DC / DC converter 10, an abnormality in the main battery B1, an abnormality in the sub-battery B2, and an abnormality in the second load unit LO2.

[0077] As in the fourth embodiment, the main battery B1 does not need to be equipped with an abnormality detection unit that detects abnormalities in itself. In this case, as described in the fourth embodiment, the abnormality determination unit 33 detects an abnormality in the DC / DC converter 10 or the main battery B1 based on the sensor signal from the first sensor S1. Thereafter, the switching control unit 34 opens the fourth switching unit SW4. Then, if the sensor signal from the first sensor S1 returns to normal, the abnormality determination unit 33 determines that the abnormality is in the main battery B1. If the sensor signal from the first sensor S1 does not return to normal, the abnormality determination unit 33 determines that the abnormality is in the DC / DC converter 10.

[0078] Furthermore, it is preferable to provide a backflow prevention circuit for the connection point P3 for the same reasons as those explained in the second embodiment.

[0079] Next, the operation of the power supply redundancy system 6 according to the sixth embodiment will be described with reference to FIG. 11. First, assume that the DC / DC converter 10, main battery B1, and sub-battery B2 are in a normal state, with no abnormalities. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5 and opens the sixth switching unit SW6. This allows power to be supplied from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Meanwhile, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power supply from the sub-battery B2 to the first load unit LO1 and the second load unit LO2 is disabled.

[0080] Also, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4 and the fifth switching unit SW5 and closes the sixth switching unit SW6. In this state, only the sixth switching unit SW6 is closed, so power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the sub-battery B2. This drives the second load unit LO2, allowing the minimum operations related to automatic driving to be performed.

[0081] Furthermore, suppose that an abnormality such as a short circuit occurs in the main battery B1. In this case, the switching control unit 34 opens the fourth switching unit SW4 and closes the fifth switching unit SW5 and the sixth switching unit SW6. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. This allows the first load unit LO1 to perform automatic operation, and the second load unit LO2 to perform minimum operation.

[0082] Furthermore, suppose that an abnormality such as a short circuit occurs in the second load unit LO2. In this case, the switching control unit 34 opens the fifth switching unit SW5 and the sixth switching unit SW6 and closes the fourth switching unit SW4. In this state, a process is performed to disconnect the second load unit LO2 in which the abnormality has occurred. As a result, power can be supplied to the first load unit LO1 from the DC / DC converter 10 and the main battery B1 without being affected by the abnormality in the second load unit LO2, allowing automatic operation, etc. to be performed. Note that if the second load unit LO2 has multiple loads, each of which has a switch or fuse, the functions of the switch or fuse may be used to disconnect only the load in which the abnormality has occurred. In this case, the switching control unit 34 may set the fourth to sixth switching units SW4 to SW6 to the same states as when they are in a normal state, for example.

[0083] Furthermore, suppose that an abnormality such as a short circuit occurs in sub-battery B2. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5 and opens the sixth switching unit SW6, just as in the normal state. This allows the normal DC / DC converter 10 and main battery B1 to supply power to the first load unit LO1 and the second load unit LO2, and the sub-battery B2 can be isolated.

[0084] Furthermore, if the main battery B1 does not have an abnormality detection unit that detects its own abnormality, as in the fourth embodiment, the abnormality determination unit 33 must open the fourth switch unit SW4 and determine whether the sensor signal from the first sensor S1 returns to a normal value. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it determines whether the sensor signal from the first sensor S1 returns to a normal value. In this case, the switching control unit 34 opens the fourth switch unit SW4 and the fifth switch unit SW5 and closes the sixth switch unit SW6. That is, the switching control unit 34 switches the sub-battery B2 to the same switching state as when the DC / DC converter 10 is abnormal, connecting the sub-battery B2 to the second load unit LO2. As a result, the power redundancy system 6 first connects the sub-battery B2 to the second load unit LO2 and allows the second load unit LO2 to perform minimum operations, etc., until it is determined whether the abnormality is in the DC / DC converter 10 or the main battery B1. Then, the switching control unit 34 determines whether the abnormality is in the DC / DC converter 10 or the main battery B1 based on whether the sensor signal of the first sensor S1 returns to a normal value, and after determining the abnormality, sets the switching states of the fourth to sixth switching units SW4 to SW6 as described above.

[0085] In this way, according to the power supply redundancy system 6 of the sixth embodiment, similar to the first embodiment, it is possible to achieve miniaturization and more appropriate protection, and to ensure the operation of the sensors S1 and S2.

[0086] Furthermore, according to the sixth embodiment, similarly to the fourth embodiment, it is possible to take appropriate measures after gaining time until the abnormal part is identified.

[0087] Next, a seventh embodiment of the present invention will be described. The power supply redundancy system according to the seventh embodiment is similar to that of the sixth embodiment, but some of the configuration and operation are different. The differences from the sixth embodiment will be described below.

[0088] 12 is a block diagram showing a power supply redundancy system according to the seventh embodiment. The twin battery 26 according to the seventh embodiment includes a charging control unit CC in addition to the twin battery 25 according to the sixth embodiment. The charging control unit CC is the same as that described in the third embodiment, and is provided on a connection line L4 that connects from the connection point P3 to the sub-battery B2 without passing through the sixth switch unit SW6.

[0089] Next, the operation of the power supply redundancy system 7 according to the seventh embodiment will be described with reference to Fig. 12. First, the control of the switching units SW4 to SW6 in normal and abnormal states is the same as in the sixth embodiment.

[0090] Furthermore, in the seventh embodiment, for example, in a normal state, the charge control unit CC monitors the charge amount of the sub-battery B2. When an abnormality occurs on the main battery B1 side, if the charge control unit CC determines that the sub-battery B2 does not have enough charge to operate the second load unit LO2, the charge control unit CC charges the sub-battery B2.

[0091] In this way, the power supply redundancy system 7 according to the seventh embodiment can achieve miniaturization and more appropriate protection, as in the sixth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate measures after buying time to identify the abnormal part.

[0092] Next, an eighth embodiment of the present invention will be described. The power supply redundancy system according to the eighth embodiment is similar to that of the sixth embodiment, but some of the configuration and operation are different. The differences from the sixth embodiment will be described below.

[0093] 13 is a block diagram showing a power supply redundancy system according to the eighth embodiment. The twin battery 27 according to the eighth embodiment differs from the twin battery 25 according to the sixth embodiment in that it includes a connection line L1 that connects the positive electrode side of the main battery B1 and the positive electrode side of the sub-battery B2. The twin battery 27 according to the eighth embodiment also includes a seventh switching unit SW7 instead of the fifth switching unit SW5 of the twin battery 25 according to the sixth embodiment. The seventh switching unit SW7 is switched between an open state and a closed state under the control of the control board 30, similar to the first to sixth switching units SW1 to SW6 described above.

[0094] Such a twin battery 27 does not include the fifth switching unit SW5, and terminal A is connected only to the fourth switching unit SW4. The seventh switching unit SW7 is disposed between the fourth switching unit SW4 and the main battery B1. A connection point P5 between the fourth switching unit SW4 and the seventh switching unit SW7 is connected from the sixth switching unit SW6 to terminal B via the sub-battery B2. The connection point P5 is also connected to terminal C.

[0095] Next, the operation of the power supply redundancy system 8 according to the eighth embodiment will be described with reference to FIG. 13. First, assume that the DC / DC converter 10, main battery B1, and sub-battery B2 are in a normal state with no abnormalities. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the seventh switching unit SW7 and opens the sixth switching unit SW6. This allows power to be supplied from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Meanwhile, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, preventing power supply from the sub-battery B2 to the first load unit LO1 and the second load unit LO2.

[0096] Also, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4 and the seventh switching unit SW7 and closes the sixth switching unit SW6. In this state, only the sixth switching unit SW6 is closed, so power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the sub-battery B2. This drives the second load unit LO2, allowing the minimum operations related to automatic driving to be performed.

[0097] Furthermore, suppose that an abnormality such as a short circuit occurs in the main battery B1. In this case, the switching control unit 34 opens the seventh switching unit SW7 and closes the fourth switching unit SW4 and the sixth switching unit SW6. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. This allows the first load unit LO1 to perform automatic operation, and the second load unit LO2 to perform minimum operation.

[0098] Assume also that an abnormality such as a short circuit occurs in the second load unit LO2. In this case, the switching control unit 34 opens the fourth switching unit SW4, the sixth switching unit SW6, and the seventh switching unit SW7. In this state, a process is performed to disconnect the second load unit LO2 where the abnormality has occurred. As a result, power can be supplied from the DC / DC converter 10 to the first load unit LO1 without being affected by the abnormality in the second load unit LO2, enabling automatic operation and the like. Note that if the second load unit LO2 has multiple loads, each of which has a switch or fuse, the functions of the switch or fuse may be used to disconnect only the load where the abnormality has occurred, as in the above embodiment. In this case, the switching control unit 34 may set the fourth switching unit SW4, the sixth switching unit SW6, and the seventh switching unit SW7 to the same state as in a normal state, for example.

[0099] Furthermore, suppose that an abnormality such as a short circuit occurs in sub-battery B2. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the seventh switching unit SW7 and opens the sixth switching unit SW6, just as in the normal state. This allows the DC / DC converter 10 and main battery B1, which are normal, to supply power to the first load unit LO1 and the second load unit LO2, and the sub-battery B2 can be isolated.

[0100] Furthermore, if the main battery B1 does not have an abnormality detection unit that detects its own abnormality, as in the fourth embodiment, the abnormality determination unit 33 must open the fourth switch unit SW4 and determine whether the sensor signal from the first sensor S1 returns to a normal value. Therefore, the abnormality determination unit 33 determines that the DC / DC converter 10 or the main battery B1 is abnormal until it determines whether the sensor signal from the first sensor S1 returns to a normal value. In this case, the switching control unit 34 opens the fourth switch unit SW4 and the seventh switch unit SW7 and closes the sixth switch unit SW6. That is, the switching control unit 34 switches the sub-battery B2 to the same switching state as when the DC / DC converter 10 is abnormal, connecting the sub-battery B2 to the second load unit LO2. As a result, the power redundancy system 8 first connects the sub-battery B2 to the second load unit LO2 and allows the second load unit LO2 to perform minimum operations, etc., until it is determined whether the abnormality is in the DC / DC converter 10 or the main battery B1. Then, the switching control unit 34 identifies the abnormal part based on whether the sensor signal of the first sensor S1 returns to a normal value, and after identifying the abnormal part, sets the switching states of the fourth switching unit SW4, the sixth switching unit SW6, and the seventh switching unit SW7 as described above.

[0101] In this way, the power supply redundancy system 8 according to the eighth embodiment can achieve miniaturization and more appropriate protection, as in the sixth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate action after buying time to identify the abnormal part.

[0102] Next, a ninth embodiment of the present invention will be described. The power supply redundancy system according to the ninth embodiment is similar to that of the eighth embodiment, but some configurations and operations are different. The differences from the eighth embodiment will be described below.

[0103] 14 is a block diagram showing a power supply redundancy system according to the ninth embodiment. A twin battery 28 according to the ninth embodiment includes a charge control unit CC in addition to the twin battery 27 according to the eighth embodiment. The charge control unit CC is the same as that described in the third embodiment, and is provided on a connection line L5 that connects from a connection point P6, which is located between the connection point P5 and the sixth switch unit SW6, to the sub-battery B2 without passing through the sixth switch unit SW6.

[0104] Next, the operation of the power supply redundancy system 9 according to the ninth embodiment will be described with reference to Fig. 14. First, the control of the switching units SW4, SW6, SW7 in normal and abnormal states is the same as in the eighth embodiment.

[0105] Furthermore, in the ninth embodiment, for example, in a normal state, the charge control unit CC monitors the charge amount of the sub-battery B2. When an abnormality occurs on the main battery B1 side, if the charge control unit CC determines that the sub-battery B2 does not have enough charge to operate the second load unit LO2, the charge control unit CC charges the sub-battery B2.

[0106] In this way, the power supply redundancy system 9 according to the ninth embodiment can achieve miniaturization and more appropriate protection, as in the eighth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate action after buying time to identify the abnormal part.

[0107] Next, a tenth embodiment of the present invention will be described. The power supply redundancy system according to the tenth embodiment is similar to that of the sixth embodiment, but some configurations and operations are different. The differences from the sixth embodiment will be described below.

[0108] 15 is a block diagram showing a power supply redundancy system according to a tenth embodiment. Unlike the twin battery 25 according to the sixth embodiment, the twin battery 29 according to the tenth embodiment includes a connection line L1 connecting the positive electrode of the main battery B1 and the positive electrode of the sub-battery B2, and an eighth switching unit SW8 provided on the connection line L1. Like the first to seventh switching units SW1 to SW7 described above, the eighth switching unit SW8 is switched between an open state and a closed state under the control of the control board 30. The eighth switching unit SW8 is provided between a connection point P7 between the fourth switching unit SW4 and the main battery B1 and a connection point P3 between the fifth switching unit SW5 and the sixth switching unit SW6.

[0109] Next, the operation of the power supply redundancy system 1a according to the tenth embodiment will be described with reference to FIG. 15. First, assume that the DC / DC converter 10, main battery B1, and sub-battery B2 are in a normal state with no abnormalities. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5 and opens the sixth switching unit SW6 and the eighth switching unit SW8. This allows power to be supplied from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Meanwhile, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power supply from the sub-battery B2 to the first load unit LO1 and the second load unit LO2 is disabled.

[0110] Also, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4, the fifth switching unit SW5, and the eighth switching unit SW8, and closes the sixth switching unit SW6. In this state, since only the sixth switching unit SW6 is closed, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the sub-battery B2. This drives the second load unit LO2, allowing the minimum operations related to automatic driving to be performed.

[0111] Furthermore, the switching control unit 34 may open the fourth switching unit SW4 and the fifth switching unit SW5 and close the sixth switching unit SW6 and the eighth switching unit SW8 in an abnormal state of the DC / DC converter 10. In this state, since the sixth switching unit SW6 and the eighth switching unit SW8 are closed, power can be supplied to the second load unit LO2 by the main battery B1 and the sub-battery B2.

[0112] Also, suppose that an abnormality such as a short circuit occurs in the main battery B1. In this case, the switching control unit 34 opens the fourth switching unit SW4 and the eighth switching unit SW8 and closes the fifth switching unit SW5 and the sixth switching unit SW6. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. This allows the first load unit LO1 to perform automatic operation, and the second load unit LO2 to perform minimum operation.

[0113] Assume that an abnormality such as a short circuit occurs in the second load unit LO2. In this case, the switching control unit 34 closes the fourth switching unit SW4 and opens the fifth switching unit SW5, sixth switching unit SW6, and eighth switching unit SW8. In this state, a process is performed to disconnect the second load unit LO2 in which the abnormality has occurred. As a result, power can be supplied to the first load unit LO1 from the DC / DC converter 10 and main battery B1 without being affected by the abnormality in the second load unit LO2, allowing automatic operation and the like to be performed. Note that if the second load unit LO2 has multiple loads, each of which has a switch or fuse, the functions of the switch or fuse may be used to disconnect only the load in which the abnormality has occurred, as in the sixth embodiment. In this case, the switching control unit 34 may set the fourth to sixth and eighth switching units SW4 to SW6, SW8 to the same states as in the normal state, for example.

[0114] Furthermore, suppose that an abnormality such as a short circuit occurs in sub-battery B2. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the fifth switching unit SW5 and opens the sixth switching unit SW6 and the eighth switching unit SW8, just as in the normal state. This allows the DC / DC converter 10 and main battery B1, which are normal, to supply power to the first load unit LO1 and the second load unit LO2, and the sub-battery B2 can be isolated.

[0115] Furthermore, when the main battery B1 does not have an abnormality detection unit that detects its own abnormality, as in the sixth embodiment, the switching control unit 34 opens at least the fourth switch unit SW4 to disconnect the DC / DC converter 10 from the main battery B1. The abnormality determination unit 33 then needs to determine whether the sensor signal from the first sensor S1 returns to a normal value after disconnection. Therefore, the abnormality determination unit 33 determines that an abnormality exists in the DC / DC converter 10 or the main battery B1 until it determines whether the sensor signal from the first sensor S1 returns to a normal value. In this case, the switching control unit 34 opens the fourth switch unit SW4, the fifth switch unit SW5, and the eighth switch unit SW8 and closes the sixth switch unit SW6. That is, the switching control unit 34 connects the sub-battery B2 to the second load unit LO2 in one of the two switching states that are in effect when the DC / DC converter 10 is abnormal. As a result, the power supply redundancy system 1a first connects the sub-battery B2 to the second load unit LO2 and causes the second load unit LO2 to perform minimum operations, etc., until it is determined whether the abnormality is in the DC / DC converter 10 or in the main battery B1. Then, the switching control unit 34 identifies the abnormal location based on whether the sensor signal from the first sensor S1 returns to a normal value, and after the abnormal location is identified, sets the switching states of the fourth to sixth and eighth switching units SW4 to SW6, SW8 as described above.

[0116] In this way, the power supply redundancy system 1a according to the tenth embodiment can achieve miniaturization and more appropriate protection, as in the sixth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate measures after buying time to identify the abnormal part.

[0117] Next, an eleventh embodiment of the present invention will be described. The power supply redundancy system according to the eleventh embodiment is similar to that of the tenth embodiment, but some configurations and operations are different. The differences from the tenth embodiment will be described below.

[0118] 16 is a block diagram showing a power supply redundancy system according to the 11th embodiment. The twin battery 20a according to the 11th embodiment includes a charge control unit CC in addition to the twin battery 29 according to the 10th embodiment. The charge control unit CC is the same as that described in the third embodiment, and is provided on a connection line L4 that connects a connection point P4 located between the connection point P3 and the sixth switch unit SW6 to the sub-battery B2 without passing through the sixth switch unit SW6.

[0119] Next, the operation of the power supply redundancy system 1b according to the eleventh embodiment will be described with reference to Fig. 16. First, the control of each of the switching units SW4 to SW6, SW8 in normal and abnormal states is the same as in the tenth embodiment.

[0120] Furthermore, in the eleventh embodiment, for example, in a normal state, the charge control unit CC monitors the charge amount of the sub-battery B2. When an abnormality occurs on the main battery B1 side, if the charge control unit CC determines that the sub-battery B2 does not have enough charge to make the second load unit LO2 function, the charge control unit CC charges the sub-battery B2.

[0121] In this way, the power supply redundancy system 1b according to the eleventh embodiment can achieve miniaturization and more appropriate protection, as in the tenth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate action after buying time to identify the abnormal part.

[0122] Next, a twelfth embodiment of the present invention will be described. The power supply redundancy system according to the twelfth embodiment is similar to that of the sixth embodiment, but some configurations and operations are different. The differences from the sixth embodiment will be described below.

[0123] 17 is a block diagram showing a power supply redundancy system according to the twelfth embodiment. The twin battery 20b according to the twelfth embodiment includes a ninth switch unit SW9 in addition to the twin battery 25 according to the sixth embodiment. The ninth switch unit SW9 is switched between an open state and a closed state under the control of the control board 30, similar to the first to eighth switch units SW1 to SW8 described above. The ninth switch unit SW9 is provided closer to the DC / DC converter 10 than the fourth switch unit SW4 and the fifth switch unit SW5. Therefore, terminal A of the twin battery 20b is connected to one end of the ninth switch unit SW9, and the fourth switch unit SW4 and the fifth switch unit SW5 are connected in parallel to the other end of the ninth switch unit SW9.

[0124] Next, the operation of the power supply redundancy system 1c according to the twelfth embodiment will be described with reference to FIG. 17. First, assume that the DC / DC converter 10, main battery B1, sub-battery B2, etc. are in a normal state with no abnormalities. In this case, the switching control unit 34 closes the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9 and opens the sixth switching unit SW6. This enables power supply from the DC / DC converter 10 and main battery B1 to the first load unit LO1 and the second load unit LO2. Meanwhile, the sub-battery B2 is disconnected from the first load unit LO1 and the second load unit LO2, and power supply from the sub-battery B2 to the first load unit LO1 and the second load unit LO2 is disabled.

[0125] Also, suppose that an abnormality such as a short circuit occurs in the DC / DC converter 10. In this case, the switching control unit 34 opens the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9, and closes the sixth switching unit SW6. In this state, since only the sixth switching unit SW6 is closed, power cannot be supplied to the first load unit LO1, but power is supplied to the second load unit LO2 by the sub-battery B2. This drives the second load unit LO2, allowing the minimum operations related to automatic driving to be performed.

[0126] Furthermore, in an abnormal state of the DC / DC converter 10, the switching control unit 34 may close the fourth switching unit SW4 and the fifth switching unit SW5 and open the sixth switching unit SW6 and the ninth switching unit SW9. In this state, since the fourth switching unit SW4 and the fifth switching unit SW5 are closed, power can be supplied to the first load unit LO1 and the second load unit LO2 by the main battery B1 and the sub-battery B2.

[0127] Furthermore, if an abnormality such as a short circuit occurs in the main battery B1, the switching control unit 34 opens the fourth switching unit SW4 and closes the fifth switching unit SW5, sixth switching unit SW6, and ninth switching unit SW9. In this state, power is supplied from the DC / DC converter 10 and the sub-battery B2 to the first load unit LO1 and the second load unit LO2. This allows automatic operation by the first load unit LO1 and minimum operation by the second load unit LO2.

[0128] Assume that an abnormality such as a short circuit occurs in the second load unit LO2. In this case, the switching control unit 34 closes the fourth switching unit SW4 and the ninth switching unit SW9 and opens the fifth switching unit SW5 and the sixth switching unit SW6. In this state, the second load unit LO2, where the abnormality has occurred, is disconnected. As a result, power can be supplied to the first load unit LO1 from the DC / DC converter 10 and the main battery B1, enabling automatic operation and the like to be performed without being affected by the abnormality in the second load unit LO2. Note that if the second load unit LO2 has multiple loads, each of which has a switch or fuse, the functions of the switch or fuse may be used to disconnect only the load where the abnormality has occurred. In this case, the switching control unit 34 may set the fourth to sixth and ninth switching units SW4 to SW6, SW9 to the same states as when they are in a normal state, for example.

[0129] Furthermore, suppose that an abnormality such as a short circuit occurs in sub-battery B2. In this case, the switching control unit 34 closes the fourth switching unit SW4, the fifth switching unit SW5, and the ninth switching unit SW9, and opens the sixth switching unit SW6, just as in the normal state. This allows the normal DC / DC converter 10 and main battery B1 to supply power to the first load unit LO1 and the second load unit LO2, and the sub-battery B2 can be isolated.

[0130] Furthermore, if the main battery B1 does not have an abnormality detection unit that detects its own abnormality, as in the fourth embodiment, the abnormality determination unit 33 must open the fourth switch SW4 and the ninth switch SW9 and determine whether the sensor signal from the first sensor S1 returns to a normal value. Therefore, the abnormality determination unit 33 determines that there is an abnormality in the DC / DC converter 10 or the main battery B1 until it determines whether the sensor signal from the first sensor S1 returns to a normal value. In this case, the switching control unit 34 opens the fourth switch SW4, the fifth switch SW5, and the ninth switch SW9 and closes the sixth switch SW6. That is, the switching control unit 34 connects the sub-battery B2 to the second load unit LO2 in one of the two switching states that are in effect when the DC / DC converter 10 is abnormal. As a result, the power supply redundancy system 1c first connects the sub-battery B2 to the second load unit LO2 and causes the second load unit LO2 to perform minimum operations, etc., until it is determined whether the abnormality is in the DC / DC converter 10 or in the main battery B1. Then, the switching control unit 34 identifies the abnormal location based on whether the sensor signal from the first sensor S1 returns to a normal value, and after the abnormal location is identified, sets the switching states of the fourth to sixth and ninth switching units SW4 to SW6, SW9 as described above.

[0131] In this way, the power supply redundancy system 1c according to the twelfth embodiment can achieve miniaturization and more appropriate protection, as in the sixth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate measures after buying time to identify the abnormal part.

[0132] Next, a thirteenth embodiment of the present invention will be described. The power supply redundancy system according to the thirteenth embodiment is similar to that of the twelfth embodiment, but some configurations and operations are different. The differences from the twelfth embodiment will be described below.

[0133] 18 is a block diagram showing a power supply redundancy system according to the 13th embodiment. The twin battery 20c according to the 13th embodiment includes a charge control unit CC in addition to the twin battery 20b according to the 12th embodiment. The charge control unit CC is the same as that described in the third embodiment, and is provided on a connection line L4 that connects a connection point P4, which is located between the connection point P3 and the sixth switch unit SW6, to the sub-battery B2 without passing through the sixth switch unit SW6.

[0134] Next, the operation of the power supply redundancy system 1d according to the thirteenth embodiment will be described with reference to Fig. 18. First, the control of each of the switching units SW4 to SW6, SW9 in normal and abnormal states is the same as in the twelfth embodiment.

[0135] Furthermore, in the thirteenth embodiment, for example, in a normal state, the charge control unit CC monitors the charge amount of the sub-battery B2. When an abnormality occurs on the main battery B1 side, and the charge control unit CC determines that the sub-battery B2 does not have enough charge to operate the second load unit LO2, the charge control unit CC charges the sub-battery B2.

[0136] In this way, the power supply redundancy system 1d according to the thirteenth embodiment can achieve miniaturization and more appropriate protection, as in the twelfth embodiment, and can ensure the operation of the sensors S1 and S2. In addition, it is possible to take appropriate action after buying time to identify the abnormal part.

[0137] Although the present invention has been described above based on the embodiments, the present invention is not limited to the above embodiments, and modifications may be made or techniques from the embodiments may be combined within the scope of the present invention. Furthermore, publicly known or well-known techniques may be combined if possible.

[0138] For example, in the above embodiments, the twin batteries 20 to 29, 20a to 20c are provided with the sub-battery B2, but in embodiments where operation is not impaired, the sub-battery B2 may be replaced with a power storage such as a large-capacity capacitor.

[0139] Furthermore, in the above embodiment, the abnormality determination unit 33 is mounted on the control board 30, but this is not a limitation and it may be mounted on a higher-level ECU or the like. [Explanation of symbols]

[0140] 1~9, 1a~1d: Power supply redundancy system 10: DC / DC converter (step-down means) 20~29, 20a~20c: Twin battery 30: Control board 34: Switching control section 35: Reference voltage generation unit 36: Operational Guarantee Section B1: Main battery B2: Sub-battery (sub-storage) BO: Cabinet LO1: 1st load section LO2: 2nd load section S1, S2: Sensors SW1 to SW9: Switching section

Claims

1. a main battery capable of supplying power to a first load unit and a second load unit; a sub-storage capable of supplying power to at least the second load; a switching unit that switches a power supply path from the main battery and the sub-storage to the first load unit and the second load unit; a control board having a switching control unit that controls switching of the switching unit; a housing that houses at least the main battery, the sub-storage, and the switching unit, the control board is operable by receiving power from both the main battery and the sub-storage; The switching control unit controls the switching unit to connect the sub-storage and the second load unit until it is determined whether an abnormality occurs in either the main battery or a step-down means that receives a voltage higher than that of the main battery and the sub-storage, steps down the voltage, and supplies it to a load. A power supply redundancy system comprising:

2. a sensor for detecting an abnormal state of at least one of the main battery and the sub-storage; The control board includes a reference voltage generating unit that generates a reference voltage, and a control circuit that supplies the reference voltage to the sensor. an operation guarantee unit capable of applying only the The operation assurance unit determines whether the sensor signal is a reference voltage or not based on a sensor signal when only the reference voltage is applied to the sensor. and determine whether the sensor is operating properly.

2. The power supply redundancy system according to claim 1.

3. The switching control unit connects the sub-storage and the second load unit until it is determined whether the abnormality is in the step-down means or the main battery, and then, when it is determined that the abnormality is in the step-down means, controls the switching unit to set a path for supplying power from the main battery and the sub-storage to the second load unit, a path for supplying power from the sub-storage to the second load unit, or a path for supplying power from the main battery and the sub-storage to the first load unit and the second load unit; and, when it is determined that the abnormality is in the main battery, controls the switching unit to set a path for supplying power from the step-down means to the first load unit, a path for supplying power from the step-down means and the sub-storage to the first load unit and the second load unit, or a path for supplying power from the step-down means and the sub-storage to the second load unit.

2. The power supply redundancy system according to claim 1.

Images