Power supply control device and power supply control method

Abstract

To provide a power control device and a power control method which can reduce power consumption.SOLUTION: A power control device concerning one aspect of an embodiment comprises: a first system which supplies power of a first power source to a first load; a second system which supplies power of a second power source to a second load; an intersystem connection device which can connect and block the first system and the second system; a first load connection device; a second load connection device; a first control unit; and a second control unit. The first load connection device is provided in the first system and constituted to supply and block power to the first load. The second load connection device is provided in the second system and constituted to supply and block power to the second load. The first control unit and the second control unit are constituted to control the intersystem connection device, the first load connection device and the second load connection device. In the first control unit and the second control unit, connection devices to be controlled are different from each other among the intersystem connection device, the first load connection device and the second load connection device.SELECTED DRAWING: Figure 1

Description

TECHNICAL FIELD

[0001] The present invention relates to a power supply control device and a power supply control method. BACKGROUND ART

[0002] Conventionally, a redundant power supply control device has been proposed that includes a first system that supplies power from a first power supply to a first load, a second system that supplies power from a second power supply to a second load, and an inter-system switch capable of connecting and disconnecting the first system and the second system (for example, see Patent Document 1). Such a power supply control device is configured so that various switches including the inter-system switch are controlled by both a main microcomputer and a sub microcomputer. PRIOR ART DOCUMENTS PATENT DOCUMENTS

[0003] PATENT DOCUMENT 1 Japanese Unexamined Patent Application Publication No. 2021-057982 SUMMARY OF THE INVENTION PROBLEMS TO BE SOLVED BY THE INVENTION

[0004] However, in the conventional technology, since the configuration is such that various switches including the inter-system switch are controlled by both the main microcomputer and the sub microcomputer, there is a risk that power consumption in the main microcomputer and the sub microcomputer will increase. As described above, the conventional technology has room for improvement in terms of reducing power consumption.

[0005] The present invention has been made in view of the above, and an object thereof is to provide a power supply control device and a power supply control method capable of reducing power consumption. MEANS FOR SOLVING THE PROBLEMS

[0006] To solve the above problems and achieve the objective, the present invention provides a power control device comprising a first system, a second system, an inter-system connection device, a first load connection device, a second load connection device, a first control unit, and a second control unit. The first system supplies power from a first power source to a first load. The second system supplies power from a second power source to a second load. The inter-system connection device is configured to connect and disconnect the first system and the second system. The first load connection device is provided in the first system and is configured to supply and disconnect power to the first load. The second load connection device is provided in the second system and is configured to supply and disconnect power to the second load. The first control unit and the second control unit are configured to control the inter-system connection device, the first load connection device, and the second load connection device. Furthermore, the first control unit and the second control unit control different connection devices from the inter-system connection device, the first load connection device, and the second load connection device. [Effects of the Invention]

[0007] According to the present invention, power consumption can be reduced in a power control device. [Brief explanation of the drawing]

[0008] [Figure 1] Figure 1 is an explanatory diagram showing an example configuration of a power supply control device according to the first embodiment. [Figure 2] Figure 2 is a diagram illustrating the operation of the power control device. [Figure 3] Figure 3 is a diagram illustrating the operation of the power control device. [Figure 4] Figure 4 is a diagram illustrating the operation of the power control device. [Figure 5] Figure 5 is a diagram illustrating the operation of the power control device. [Figure 6] Figure 6 is a diagram illustrating the operation of the power control device. [Figure 7] Figure 7 is a diagram illustrating the operation of the power control device. [Figure 8]Figure 8 is a flowchart showing an example of a process performed by the power control device according to the first embodiment. [Figure 9] Figure 9 is an explanatory diagram showing an example configuration of a power supply control device according to the second embodiment. [Figure 10] Figure 10 is an explanatory diagram showing an example configuration of a power supply control device according to the second embodiment. [Figure 11] Figure 11 is a flowchart showing an example of a process performed by the power control device according to the second embodiment. [Modes for carrying out the invention]

[0009] Hereinafter, embodiments of the power control device and power control method disclosed in this application will be described in detail with reference to the attached drawings. However, the present invention is not limited to the embodiments described below.

[0010] In the following description, a power control device that is installed in a vehicle equipped with an autonomous driving function and supplies power to a load will be used as an example. However, the power control device according to this embodiment may also be installed in a vehicle that does not have an autonomous driving function.

[0011] Furthermore, the following description will focus on cases where the vehicle equipped with the power control device is an electric vehicle or a hybrid vehicle, but the vehicle equipped with the power control device may also be an engine-powered vehicle that runs on an internal combustion engine.

[0012] The power control device according to this embodiment may be mounted on any device that includes a first power supply and a second power supply, and backs up the first power supply with the other power supply system in the event of a power failure in either the first or second power supply system.

[0013] (First embodiment) [1. Configuration of the power control device according to the first embodiment] FIG. 1 is an explanatory diagram showing a configuration example of a power supply control device according to a first embodiment. As shown in FIG. 1, a power supply control device 1 according to the first embodiment is connected to a first power supply 10, a first load 101, a second load 102, and an autonomous driving control device 100.

[0014] The power supply control device 1 includes a first system 110 and a second system 120. The first system 110 supplies power from the first power supply 10 to the first load (first system load) 101 via a first load switch 51 that is a first load connection device, and also supplies power from the first power supply 10 to the second load 102 via a first system side second load switch 52 that is a first system side second load connection device. The second system 120 supplies power from a second power supply 20, which will be described later, to the second load (second system load) 102 via a second system side second load switch 53 that is a second system side second load connection device. Note that the second load 102 is also a first system load.

[0015] The above-described first load switch 51 is provided in the first system 110, and is capable of connecting and disconnecting the first system 110 and the first load 101. That is, the first load switch 51 is capable of supplying and cutting off power to the first load 101.

[0016] The first system side second load switch 52 is provided in the first system 110, and is capable of connecting and disconnecting the first system 110 and the second load 102. That is, the first system side second load switch 52 is capable of supplying and cutting off power to the second load 102. The second system side second load switch 53 is provided in the second system 120, and is capable of connecting and disconnecting the second system 120 and the second load 102. That is, the second system side second load switch 53 is capable of supplying and cutting off power to the second load 102. Note that the second system side second load switch 53 is an example of a second load switch, and such a second load switch may include the first system side second load switch 52.

[0017] The first load 101 includes, for example, a display, an air conditioner, an audio device, a video device, various lights, and the like. The second load 102 includes a load for autonomous driving. For example, the second load 102 includes a steering motor, an electric brake device, an accelerator device, various sensors, an on-vehicle camera, and the like that operate during autonomous driving. As such, the second load 102 includes loads related to autonomous driving. In addition, the first load 101 is a general load that includes loads not related to autonomous driving, in other words, includes loads unrelated to autonomous driving.

[0018] The above-described first load 101 and second load 102 operate with electric power supplied from the power supply control device 1. Note that although power is supplied to the second load 102 from both the first system 110 and the second system 120, the second load 102 may be configured as different loads that have equivalent functions. For example, they are an on-vehicle camera for recognition and a radar. In that case, one load is supplied with power from the first system, and the other load is supplied with power from the second system.

[0019] The autonomous driving control device 100 is a device (external device) that executes autonomous driving control of the vehicle. Note that the autonomous driving control device 100 may be an ECU (Electronic Control Unit) that controls the entire vehicle. The autonomous driving control device 100 causes the vehicle to travel through autonomous driving by operating the second load 102. The autonomous driving control device 100 outputs current driving mode information, that is, information indicating whether manual driving is in progress or autonomous driving is in progress, to the power supply control device 1. Instead of the driving mode information, the autonomous driving control device 100 may output information indicating that autonomous driving has started to the power supply control device 1 when the autonomous driving is initiated.

[0020] The first power supply 10 includes a lead battery (hereinafter referred to as "PbB11") and a generator 12. Note that the battery of the first power supply 10 may be any secondary battery other than PbB11.

[0021] The generator 12 is connected to a high-voltage battery with a voltage higher than that of the PbB 11 and includes a DC / DC converter that steps down the voltage of the high-voltage battery and outputs it to the first system 110. The generator 12 also includes an alternator that generates electricity by converting the kinetic energy of a moving vehicle into electricity.

[0022] The high-voltage battery is, for example, a vehicle drive battery installed in an electric vehicle or a hybrid vehicle. The generator 12 charges the PbB 11, supplies power to the first load 101 and the second load 102, and charges the second power source 20, which will be described later.

[0023] The power control device 1 comprises a second power supply 20, an inter-system switch 41 which is an inter-system connection device, a second system switch 42, the first load switch 51 described above, the second load switch 52 on the first system side, the second load switch 53 on the second system side, a control unit 3, a first voltage sensor 61, and a second voltage sensor 62. In the following, turning on various switches such as the inter-system switch 41 when they are in a conductive state is referred to as turning them on, and turning them off when they are in a disconnected state.

[0024] The second power supply 20 is a backup power supply for when the first power supply 10 is unable to supply power. The second power supply 20 is equipped with a lithium-ion battery (hereinafter referred to as "LiB21"). However, the battery of the second power supply 20 may be any secondary battery other than LiB21.

[0025] The inter-system switch 41 is provided on the inter-system line 130 connecting the first system 110 and the second system 120, and is a switch capable of connecting and disconnecting the first system 110 and the second system 120. The inter-system switch 41 may also be a DC / DC converter that, when activated, conducts electricity between the first system 110 and the second system 120, and when deactivated, disconnects the connection between the two systems.

[0026] The second system switch 42 is a switch that connects the second power supply 20 to the second system 120 when the power supply from the first power supply 10 becomes unavailable. The second system side second load switch 53 is a switch installed between the connection point P between the second system 120 and the inter-system line 130 and the second load 102.

[0027] The first voltage sensor 61 is provided in the first system 110, detects the voltage of the first system 110, and outputs the detection result to the control unit 3. The second voltage sensor 62 is provided in the second system 120, detects the voltage of the second system 120, and outputs the detection result to the control unit 3.

[0028] The control unit 3 includes, for example, a main microcontroller 31 and a sub-microcontroller 32. The main microcontroller 31 is an example of a first control unit, and the sub-microcontroller 32 is an example of a second control unit, but it is not limited to this. That is, the first control unit may be the sub-microcontroller 32, and the second control unit may be the main microcontroller 31.

[0029] The main microcontroller 31 and the sub-microcontroller 32 each include a computer and various circuits, such as a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), data flash, HDD (Hard Disk Drive), and input / output ports.

[0030] The computer's CPU, for example, implements the functions of the main microcontroller and sub-microcontroller by reading and executing programs stored in ROM.

[0031] Furthermore, at least one or all of the main microcontroller 31 and the sub-microcontroller 32 can be configured using hardware such as an ASIC (Application Specific Integrated Circuit) or FPGA (Field Programmable Gate Array).

[0032] Furthermore, RAM, data flash, and HDD can store information about various programs. The power control device 1 may also acquire the aforementioned programs and various information via other computers or portable recording media connected by wired or wireless networks.

[0033] The main microcontroller 31 and the sub-microcontroller 32 are configured to control the various switches described above. Specifically, the main microcontroller 31 and the sub-microcontroller 32 are configured to control the inter-system switch 41, the second system switch 42, the first load switch 51, and the second load switches 52 and 53, respectively.

[0034] Incidentally, in the conventional technology, both the main microcontroller and the sub-microcontroller controlled various switches such as the inter-system switch 41. Therefore, in the conventional technology, the main microcontroller and the sub-microcontroller were always operating, which could increase power consumption, and there was room for improvement in terms of reducing power consumption.

[0035] Therefore, the power control device 1 according to this embodiment is configured to reduce power consumption.

[0036] To explain in more detail, the main microcontroller 31 and the sub-microcontroller 32 are configured such that they control different switches from among the inter-system switch 41, second system switch 42, first load switch 51, and second load switches 52 and 53.

[0037] For example, the main microcontroller 31 controls the inter-system switch 41, the second system switch 42, and the second load switches 52 and 53 (see the dashed arrows in Figure 1). More specifically, the main microcontroller 31 controls the load switches (in this case, the second load switches 52 and 53) corresponding to the load related to automatic operation (in this case, the second load 102) among the first load switch 51 and the second load switches 52 and 53, as well as switches including the inter-system switch 41. The inter-system switch 41 and the second system switch 42 are switches that are controlled, for example, during automatic operation, as will be described later. In other words, the main microcontroller 31 controls switches that are controlled, for example, during automatic operation.

[0038] The sub-microcontroller 32 controls the first load switch 51 as its control target (see the dashed arrow in Figure 1). More specifically, the sub-microcontroller 32 controls the load switch (in this case, the first load switch 51) that corresponds to a load unrelated to automatic operation (in this case, the first load 101) among the first load switch 51 and the second load switches 52 and 53. The first load switch 51 is a switch that is controlled, for example, during automatic operation and when not in automatic operation (for example, when stopped or during non-automatic operation). In other words, the sub-microcontroller 32 controls switches that are controlled, for example, during automatic operation and during non-automatic operation.

[0039] Thus, in this embodiment, the main microcontroller 31 and the sub-microcontroller 32 are configured to control different switches, thereby reducing power consumption.

[0040] In other words, in this embodiment, for example, during automatic operation, the main microcontroller 31 and the sub-microcontroller 32 each control the switches that they control. In this embodiment, when not in automatic operation, i.e., when not in automatic operation, it is unnecessary to control the switches that are controlled during automatic operation, so the main microcontroller 31 can be put into sleep mode. As a result, in this embodiment, power consumption can be reduced by putting the main microcontroller 31 into sleep mode.

[0041] Furthermore, the main microcontroller 31 according to this embodiment can effectively reduce power consumption by putting it into sleep mode when it is not in automatic operation mode.

[0042] In the power control device 1 according to this embodiment, if an abnormality occurs in one of the microcontrollers, the main microcontroller 31 or the sub-microcontroller 32, the other functioning microcontroller controls the switch that the other microcontroller controls. This will be described later with reference to Figures 6 and 7.

[0043] Continuing the explanation of Figure 1, when the control unit 3 is started, it turns on the inter-system switch 41, the first load switch 51, and the second load switches 52 and 53, and turns off the second system switch 42. More specifically, the main microcontroller 31 turns on the inter-system switch 41, the second load switch 52 on the first system side, and the second load switch 53 on the second system side, and turns off the second system switch 42. The sub-microcontroller 32 turns on the first load switch 51.

[0044] The main microcontroller 31 of the control unit 3 detects a ground fault in the first system 110 or the second system 120 based on the detection results input from the first voltage sensor 61 and the second voltage sensor 62. While this example shows the main microcontroller 31 detecting the ground fault, it is not limited to this configuration; a sub-microcontroller 32 may also detect the ground fault.

[0045] The main microcontroller 31 turns on the inter-system switch 41 during normal operation, including during automatic operation, and turns off the inter-system switch 41 when it detects a ground fault in the first system 110 or the second system 120. A specific example of how the main microcontroller 31 detects ground faults will be described later.

[0046] When the main microcontroller 31 detects a ground fault in the first system 110 or the second system 120, it notifies the automatic operation control device 100 and the sub-microcontroller 32 of this fact. For example, if the main microcontroller 31 detects a ground fault in the first system 110 or the second system 120, it outputs an automatic operation prohibition signal to the automatic operation control device 100 indicating that automatic operation is not possible. Also, if the main microcontroller 31 has not detected a ground fault in the first system 110 or the second system 120, it outputs an automatic operation permission signal to the automatic operation control device 100 indicating that automatic operation is possible.

[0047] Furthermore, when the voltage of the second power supply 20 falls below a predetermined voltage, the main microcontroller 31 outputs an automatic operation prohibition signal to the automatic operation control device 100, indicating that automatic operation is not possible. The predetermined voltage here is the minimum voltage of the second power supply 20 required to back up the first power supply 10. The voltage of the second power supply 20 and the predetermined voltage here also include the concept of SOC (State of Charge). For example, the predetermined voltage is equivalent to a voltage of 80% SOC, but this is an example and not limiting, and can be set to any value.

[0048] The second power supply 20 includes a measuring device (not shown) that detects the voltage of the LiB 21 and outputs the detection result to the control unit 3. When the main microcontroller 31 of the control unit 3 measures the voltage of the second power supply 20, if the second system switch 42 is off, no current flows to the LiB 21 and the voltage of the second power supply 20 cannot be measured. Therefore, the microcontroller 31 of the control unit 3 turns on at least the second system switch 42 to enable detection of the voltage of the LiB 21.

[0049] Subsequently, the main microcontroller 31 communicates with the measuring device of the second power supply 20 to measure the voltage of LiB21, obtains the voltage information of LiB21 from the measuring device, and detects the State of Control (SOC) of LiB21.

[0050] If a power failure such as a ground fault occurs in the first system 110, the main microcontroller 31 turns off the inter-system switch 41 and the second load switch 52 on the first system side, and turns on the second system switch 42 and the second load switch 53 on the second system side. If a power failure such as a ground fault occurs in the first system 110, the sub-microcontroller 32 turns off the first load switch 51. As a result, power is supplied from the second power supply 20 to the second load 102.

[0051] Furthermore, if a power failure such as a ground fault occurs in the second system 120, the main microcontroller 31 turns off the inter-system switch 41, the second system switch 42, and the second load switch 53 on the second system side, and turns on the second load switch 52 on the first system side. If a power failure such as a ground fault occurs in the second system 120, the sub-microcontroller 32 turns on the first load switch 51. As a result, power is supplied from the first power supply 10 to the first load 101 and the second load 102.

[0052] Thus, even if one of the power systems experiences a ground fault during automatic driving, the power control device 1 can use the other system and have the automatic driving control device 100 perform fail-safe control (hereinafter referred to as FOP (Fail Operation)) to move the vehicle to a safe location and bring it to a stop. Next, the operation of the power control device 1 will be explained with reference to Figures 2 to 7.

[0053] [2. Normal operation of the power control device] First, the normal operation of the power control device 1 will be explained with reference to Figure 2. When there is no ground fault in the first system 110 and the second system 120, the main microcontroller 31 of the control unit 3 turns on the inter-system switch 41, the second load switch 52 on the first system side and the second load switch 53 on the second system side, and turns off the second system switch 42, as shown in Figure 2. The sub-microcontroller 32 turns on the first load switch 51. As a result, power is supplied from the first power supply 10 to the first load 101 and the second load 102. When there is no ground fault in this normal state and the voltage of the second power supply 20 is higher than a predetermined voltage, the main microcontroller 31 outputs an automatic driving permission signal to the automatic driving control device 100. In this case, the vehicle driver can choose either automatic driving by the automatic driving control device 100 or manual non-automatic driving.

[0054] [3. Operation of the power control device in the event of a ground fault] Next, the operation of the power control device 1 during a ground fault will be explained with reference to Figures 3 to 5. As shown in Figure 3, when a ground fault 200 occurs in the first system 110 or the second system 120 of the power control device 1, an overcurrent flows toward the ground fault point, causing the voltages detected by the first voltage sensor 61 and the second voltage sensor 62 to fall below the ground fault threshold.

[0055] Therefore, when the voltages detected by the first voltage sensor 61 and the second voltage sensor 62 fall below the ground fault threshold, the main microcontroller 31 of the control unit 3 provisionally determines that a ground fault 200 has occurred in the first system 110 or the second system 120, and outputs an automatic operation prohibition signal to the automatic operation control device 100.

[0056] Then, when the main microcontroller 31 tentatively determines that a ground fault 200 has occurred, it turns off the inter-system switch 41 and turns on the second system switch 42, as shown in Figure 3. As a result, the connection between the first system 110 and the second system 120 is disconnected, power is supplied from the first power supply 10 to the first system 110, and power is supplied from the second power supply 20 to the second system 120.

[0057] Furthermore, the main microcontroller 31 can also tentatively determine that a ground fault 200 has occurred in the first system 110 or the second system 120 if the voltage detected by at least one of the first voltage sensor 61 or the second voltage sensor 62 falls below the ground fault threshold.

[0058] This preliminary determination may also be performed by a hardware circuit equipped with a comparator. In that case, the comparator compares the voltages detected by the first voltage sensor 61 and the second voltage sensor 62 with the ground fault threshold. When the detected voltage falls below the ground fault threshold, the comparator outputs a ground fault detection signal indicating a preliminary determination, turns off the inter-system switch 41, and turns on the second system switch 42.

[0059] Subsequently, the main microcontroller 31 determines that a ground fault 200 has occurred in the first system 110 if the voltage detected by the first voltage sensor 61 remains below the ground fault threshold for a predetermined period of time, and the voltage detected by the second voltage sensor 62 recovers to exceed the ground fault threshold within a predetermined period of time.

[0060] In this case, as shown in Figure 4, the main microcontroller 31 keeps the inter-system switch 41 off while turning off the second load switch 52 on the first system side, and keeps the second system switch 42 and the second load switch 53 on the second system side. The sub-microcontroller 32 turns off the first load switch 51. As a result, power is supplied from the second power supply 20 to the second load 102. The main microcontroller 31 also notifies the automatic operation control device 100 that power has been supplied from the second power supply 20 to the second load 102. The main microcontroller 31 may also output an automatic operation prohibition signal to the automatic operation control device 100 when it has determined that a ground fault has occurred.

[0061] As a result, the automatic driving control device 100 operates the second load 102 using power supplied from the second power supply 20 to perform FOP (Forward Operation), allowing the vehicle to move to a safe location and come to a stop. The automatic driving control device 100 may also be configured to start moving to a safe location when an automatic driving prohibition signal is input from the power supply control device 1.

[0062] Furthermore, after the main microcontroller 31 has made a provisional determination that a ground fault 200 has occurred in the first system 110 or the second system 120, if the voltage detected by the second voltage sensor 62 remains below the ground fault threshold even after a predetermined time has elapsed, and the voltage detected by the first voltage sensor 61 recovers to exceed the ground fault threshold within a predetermined time, the main microcontroller 31 makes a final determination that a ground fault 200 has occurred in the second system 120.

[0063] In this case, as shown in Figure 5, when the main microcontroller 31 detects a ground fault 200 in the second system 120, it keeps the inter-system switch 41 off, turns off the second system switch 42 and the second load switch 53 on the second system side, and keeps the second load switch 52 on the first system side. The sub-microcontroller 32 keeps the first load switch 51 on. As a result, power is supplied from the first power supply 10 to the first load 101 and the second load 102. The main microcontroller 31 also notifies the automatic operation control device 100 that power has been supplied from the first power supply 10 to the second load 102.

[0064] As a result, the automatic driving control device 100 can operate the second load 102 using the power supplied from the first power source 10 to perform FOP, allowing the vehicle to move to a safe location and come to a stop.

[0065] [4. Operation when the microcontroller malfunctions] Next, referring to Figures 6 and 7, the operation of the power control device 1 when an abnormality occurs in either the main microcontroller 31 or the sub-microcontroller 32 will be explained. Figure 6 shows the case when an abnormality occurs in the main microcontroller 31, and Figure 7 shows the case when an abnormality occurs in the sub-microcontroller 32. In Figures 6 and 7, the microcontroller that has experienced an abnormality is indicated by a dot. Furthermore, an abnormality in a microcontroller means, for example, a state in which the microcontroller is unable to perform normal processing for some reason, but is not limited to this.

[0066] As shown in Figure 6, if an abnormality occurs in the main microcontroller 31, the functioning sub-microcontroller 32 controls the switches that the main microcontroller 31 controls. Specifically, when the sub-microcontroller 32 detects an abnormality in the main microcontroller 31 through communication with the main microcontroller 31, it continues to control the first load switch 51, and then controls the inter-system switch 41, the second system switch 42, and the second load switches 52 and 53 (see the dashed arrow in Figure 6).

[0067] As a result, in this embodiment, even if an abnormality occurs in the main microcontroller 31, the control of various switches can be continued by the functioning sub-microcontroller 32, thereby ensuring redundancy of the power control device 1.

[0068] Furthermore, as an example, if an abnormality occurs in the main microcontroller 31 during autonomous driving, the sub-microcontroller 32 controls the inter-system switch 41, the second system switch 42, and the second load switches 52 and 53, in addition to controlling the first load switch 51. At this time, the sub-microcontroller 32 may also notify the autonomous driving control device 100 that an abnormality has occurred in the main microcontroller 31. As a result, the autonomous driving control device 100 can operate the second load 102 with power supplied from the first power supply 10 to perform FOP (Flight Operation), allowing the vehicle to move to a safe location and come to a stop.

[0069] Next, as shown in Figure 7, if an abnormality occurs in the sub-microcontroller 32, the normal main microcontroller 31 controls the switches that the sub-microcontroller 32 controls. Specifically, when the main microcontroller 31 detects an abnormality in the sub-microcontroller 32 through communication with the sub-microcontroller 32, it continues to control the inter-system switch 41, the second system switch 42, and the second load switches 52 and 53, and further controls the first load switch 51 as the target of control (see dashed arrow in Figure 7).

[0070] Furthermore, as an example, if an abnormality occurs in the sub-microcontroller 32 during non-autonomous operation, such as when the vehicle is stopped or after FOP (Fast Operation), the main microcontroller 31 will control the inter-system switch 41, the second system switch 42, and the second load switches 52 and 53, as well as the first load switch 51. If the main microcontroller 31 was in sleep mode during non-autonomous operation, the main microcontroller 31 will exit sleep mode and execute control of the first load switch 51, etc.

[0071] As a result, in this embodiment, even if a malfunction occurs in the sub-microcontroller 32, the control of various switches can be continued by the normal main microcontroller 31, thereby ensuring redundancy of the power control device 1.

[0072] Thus, in this embodiment, if an abnormality occurs in one of the microcontrollers, the main microcontroller 31 or the sub-microcontroller 32, the other functioning microcontroller controls the switch that the other microcontroller controls. This ensures redundancy of the power control device 1 in this embodiment.

[0073] [5. Processing performed by the power control device according to the first embodiment] Next, with reference to Figure 8, an example of processing performed by the power control device 1 according to the first embodiment will be described. Figure 8 is a flowchart showing an example of processing performed by the power control device 1 according to the first embodiment. Note that the flowchart in Figure 8 shows an example of processing performed under normal conditions when no ground faults occur in the first system 110 and the second system 120, and when power is supplied from the first power supply 10 to the first load 101 and the second load 102 (see Figure 2).

[0074] As shown in Figure 8, the power control device 1 determines whether the vehicle is in automatic driving mode based on the current driving mode information obtained from the automatic driving control device 100, i.e., whether it is in manual driving mode or automatic driving mode (step S10). If the power control device 1 determines that the vehicle is not in automatic driving mode (step S10, No), i.e., when the vehicle is not in automatic driving mode, such as when it is stopped or after FOP, the power control device 1 puts the main microcontroller 31 into sleep mode (step S11).

[0075] If the power control device 1 determines that the vehicle is in automatic driving mode (step S10, Yes), it wakes up the main microcontroller 31 if it is in sleep mode and puts the main microcontroller 31 into operation mode (step S12). This process is performed by the sub-microcontroller 32 waking up the main microcontroller 31.

[0076] After processing in step S12 or step S11, it is determined whether or not an abnormality has occurred in the main microcontroller 31 (step S13). If the power control device 1 determines that an abnormality has occurred in the main microcontroller 31 (step S13, Yes), the normal sub-microcontroller 32 controls the switch that the main microcontroller 31 controls (step S14).

[0077] On the other hand, if the power control device 1 determines that there is no abnormality in the main microcontroller 31 (step S13, No), it determines whether or not there is an abnormality in the sub-microcontroller 32 (step S15). If the power control device 1 determines that there is an abnormality in the sub-microcontroller 32 (step S15, Yes), the normal main microcontroller 31 controls the switch that the sub-microcontroller 32 controls (step S16).

[0078] Furthermore, if the power control device 1 determines that no abnormality has occurred in the sub-microcontroller 32 (step S15, No), it terminates the process because no abnormality has occurred in either the main microcontroller 31 or the sub-microcontroller 32.

[0079] As described above, the power control device 1 according to the first embodiment includes a first system 110, a second system 120, an inter-system switch (an example of an inter-system connection device) 41, a first load switch (an example of a first load connection device) 51, a second load switch (a second load switch on the second system side; an example of a second load connection device) 53, a main microcontroller (an example of a first control unit) 31, and a sub-microcontroller (an example of a second control unit) 32. The first system 110 supplies power from the first power supply 10 to the first load 101. The second system 120 supplies power from the second power supply 20 to the second load 102. The inter-system switch 41 is configured to connect and disconnect the first system 110 and the second system 120. The first load switch 51 is provided in the first system 110 and is configured to supply and disconnect power to the first load 101. The second load switch 53 is provided in the second system 120 and is configured to supply and interrupt power to the second load 102.

[0080] The main microcontroller 31 and the sub-microcontroller 32 are configured to control the inter-system switch 41, the first load switch 51, and the second load switch 53. Furthermore, the main microcontroller 31 and the sub-microcontroller 32 control different switches among the inter-system switch 41, the first load switch 51, and the second load switch 53. This allows the power consumption of the power control device 1 to be reduced.

[0081] (Second embodiment) [6. Configuration of the power control device according to the second embodiment] Next, the configuration of the power control device 1 according to the second embodiment will be described with reference to Figures 9 and 10. Figures 9 and 10 are explanatory diagrams showing an example of the configuration of the power control device 1 according to the second embodiment. In the following description, components common to the first embodiment will be denoted by the same reference numerals and their description will be omitted.

[0082] In the power control device 1 according to the second embodiment, the main microcontroller 31 and the sub-microcontroller 32 control different switches, but switch the switches they control according to the operating state of the vehicle. As a result, power consumption can be reduced in the second embodiment.

[0083] To explain in more detail, the main microcontroller 31 and the sub-microcontroller 32 switch the inter-system switch 41, the second system switch 42, the first load switch 51, and the second load switches 52 and 53 according to the operating status of the vehicle.

[0084] The above-mentioned vehicle driving states include both autonomous driving and non-autonomous driving. Autonomous driving includes, for example, normal autonomous driving performed by the driver's selection, and autonomous driving using FOP (Fast Operation Program). Non-autonomous driving includes, for example, parking with the ignition off, stopping with the ignition on, and driving (for example, manual driving). The above-mentioned driving states included in autonomous driving and non-autonomous driving are merely examples and are not limiting.

[0085] First, when the vehicle is in non-autonomous operation mode, the main microcontroller 31 controls the inter-system switch 41, the second system switch 42, the first load switch 51, and the second load switches 52 and 53, as shown in Figure 9 (see dashed arrows in Figure 9). Also, when the vehicle is in non-autonomous operation mode, the sub-microcontroller 32 does not control the inter-system switch 41, the second system switch 42, the first load switch 51, or the second load switches 52 and 53. In other words, when the vehicle is in non-autonomous operation mode, the main microcontroller 31 controls all of the switches, while the sub-microcontroller 32 does not control any of the switches.

[0086] As a result, when the vehicle is not in autonomous driving mode, i.e., not in autonomous driving mode, the sub-microcontroller 32 does not need to control the switches, and can therefore be put into sleep mode. In the second embodiment, this reduces power consumption by the amount that the sub-microcontroller 32 is put into sleep mode.

[0087] Furthermore, when the vehicle is in automatic operation mode, the main microcontroller 31 controls the inter-system switch 41, the second system switch 42, the first load switch 51, and the second load switches 52 and 53, as shown in Figure 10 (see dashed arrows in Figure 10).

[0088] Furthermore, when the vehicle is in automatic driving mode, the sub-microcontroller 32 controls at least some of the various switches. In the example in Figure 10, the sub-microcontroller 32 controls the inter-system switch 41 and the second system switch 42 among the inter-system switch 41, the second system switch 42, and the second load switches 52, 53 (see the dashed arrow in Figure 10). In other words, when the vehicle is in automatic driving mode, the sub-microcontroller 32 controls some or all of the switches that are controlled during automatic driving. Note that the switches that are controlled during automatic driving include the inter-system switch 41, the second system switch 42, and the second load switches 52, 53.

[0089] Thus, in the second embodiment, when the vehicle is in automatic driving mode, the sub-microcontroller 32 controls the switches that are controlled during automatic driving (in this case, the inter-system switch 41 and the second system switch 42), thereby ensuring redundancy of the power control device 1.

[0090] In other words, for example, if the main microcontroller 31 malfunctions, it may not be able to control the inter-system switch 41 or the second system switch 42. Even in such a case, the sub-microcontroller 32 can control the inter-system switch 41 or the second system switch 42, thereby continuing to control the various switches and thus ensuring the redundancy of the power control device 1.

[0091] [7. Processing performed by the power control device according to the second embodiment] Next, with reference to Figure 11, an example of processing performed by the power control device 1 according to the second embodiment will be described. Figure 11 is a flowchart showing an example of processing performed by the power control device 1 according to the second embodiment. Note that the flowchart in Figure 11 shows an example of processing performed under normal conditions when no ground faults occur in the first system 110 and the second system 120, and when power is supplied from the first power supply 10 to the first load 101 and the second load 102 (see Figure 2).

[0092] As shown in Figure 11, the power control device 1 determines whether the vehicle is in automatic operation mode based on the current operation mode information obtained from the automatic operation control device 100 (step S100). If the power control device 1 determines that the vehicle is not in automatic operation mode (step S100, No), the main microcontroller 31 controls all switches, including the inter-system switch 41, the second system switch 42, and the second load switches 52, 53 (step S101). The power control device 1 also puts the sub-microcontroller 32 into sleep mode (step S102).

[0093] If the power control device 1 determines that the vehicle is in automatic driving mode (step S100, Yes), it wakes up the sub-microcontroller 32 if it is in sleep mode, and puts the sub-microcontroller 32 into operation mode (step S103). This process is performed by the main microcontroller 31 waking up the sub-microcontroller 32.

[0094] Next, the main microcontroller 31 controls all switches, including the inter-system switch 41, the second system switch 42, and the second load switches 52 and 53, while the sub-microcontroller 32 controls some of the various switches (for example, the inter-system switch 41 and the second system switch 42) (step S104).

[0095] Further effects and modifications can be readily derived by those skilled in the art. Therefore, broader aspects of the present invention are not limited to the specific details and representative embodiments expressed and described above. Accordingly, various modifications are possible without departing from the spirit or scope of the overall concept of the invention as defined by the appended claims and their equivalents. [Explanation of symbols]

[0096] 1 Power supply control device 10 1st power supply 20 2nd power supply 31 Main microcontroller 32 Submicrocontrollers 41 Inter-system switches 51. First load switch 53. Second load switch 101 1st load 102 2nd load 110 1st system 120 2nd system

Claims

1. A first power supply system that supplies power from the first power source to a first load unrelated to automatic operation, A second power supply system that provides power from the second power source to the second load related to automatic operation, A system connection device capable of connecting and disconnecting the first system and the second system, A load connection device provided in the second system, capable of supplying and disconnecting power to the second load, The intersystem connection device, the control unit that controls the load connection device, Equipped with, The control unit, During non-autonomous driving, the vehicle will enter sleep mode and pause. Power supply control device.

2. A first power supply system that supplies power from the first power source to a first load unrelated to automatic operation, A second power supply system that supplies power from the second power source to the second load related to automatic operation, A system connection device capable of connecting and disconnecting the first system and the second system, A first load connection device provided in the first system, capable of supplying and disconnecting power to the first load, A second load connection device provided in the second system, capable of supplying and disconnecting power to the second load, The inter-system connection device, the first load connection device, and the second load connection device are controlled by a first control unit and a second control unit. Equipped with, The first control unit is, The system controls either the first load connection device or the second load connection device, and the inter-system connection device, and pauses in sleep mode when in non-automatic operation. The second control unit is, The other of the first load connection device and the second load connection device is controlled as the control target. Power supply control device.

3. If an abnormality occurs in one of the first control unit and the second control unit, the other functioning control unit will also control the connection device that the first control unit controls. The power control device according to claim 2.

4. A first system that supplies power from the first power source to the first load, A second system that supplies power from the second power source to the second load, A system connection device capable of connecting and disconnecting the first system and the second system, A first load connection device provided in the first system, capable of supplying and disconnecting power to the first load, A second load connection device provided in the second system, capable of supplying and disconnecting power to the second load, The inter-system connection device, the first load connection device, and the second load connection device are controlled by a first control unit and a second control unit. Equipped with, The first control unit and the second control unit are, The control target of the inter-system connection device, the first load connection device, and the second load connection device are different from each other, and the control target of the inter-system connection device, the first load connection device, and the second load connection device is switched according to the operating state of the vehicle. Power supply control device.

5. When the vehicle is in non-automatic operation mode, the first control unit controls the inter-system connection device, the first load connection device, and the second load connection device, while the second control unit does not control the inter-system connection device, the first load connection device, and the second load connection device. The power control device according to claim 4.

6. A first power supply system that supplies power from the first power source to a first load unrelated to automatic operation, A second power supply system that supplies power from the second power source to the second load related to automatic operation, A system connection device capable of connecting and disconnecting the first system and the second system, A load connection device provided in the second system, capable of supplying and disconnecting power to the second load, Control unit and A power control device comprising a power control device, and a power control method controlled by the power control device, The control unit that controls the inter-system connection device and the load connection device is put into sleep mode during non-automatic operation. Power control method.

7. A first power supply system that supplies power from the first power source to a first load unrelated to automatic operation, A second power supply system that supplies power from the second power source to the second load related to automatic operation, A system connection device capable of connecting and disconnecting the first system and the second system, A first load connection device provided in the first system, capable of supplying and disconnecting power to the first load, A second load connection device provided in the second system, capable of supplying and disconnecting power to the second load, The inter-system connection device, the first load connection device, and the second load connection device are controlled by a first control unit and a second control unit. The first control unit of the power control device comprising: The system controls either the first load connection device or the second load connection device, and the inter-system connection device, and pauses in sleep mode when in non-automatic operation. The second control unit is, The other of the first load connection device and the second load connection device is controlled as the control target. Power control method.

8. A first system that supplies power from the first power source to the first load, A second system that supplies power from the second power source to the second load, A system connection device capable of connecting and disconnecting the first system and the second system, A first load connection device provided in the first system, capable of supplying and disconnecting power to the first load, A second load connection device provided in the second system, capable of supplying and disconnecting power to the second load, The inter-system connection device, the first load connection device, and the second load connection device are controlled by a first control unit and a second control unit. The first control unit and the second control unit of the power control device comprising the above are: The control target of the inter-system connection device, the first load connection device, and the second load connection device are different from each other, and the control target of the inter-system connection device, the first load connection device, and the second load connection device is switched according to the operating state of the vehicle. Power control method.

Images