Redundant power supply system and autonomous driving device

Abstract

Disclosed in the present disclosure are a redundant power supply system and an autonomous driving device. The redundant power supply system comprises: a first power supply module, an output terminal of which is connected in parallel to an input terminal of a first electronic control unit and an input terminal of a second electronic control unit; a power isolation module having a first port and a second port, the first port being electrically connected to an output terminal of the first power supply module; and a second power supply module, an output terminal of the second power supply module being electrically connected to both the second port and the input terminal of the first electronic control unit, wherein when a line between the output terminal of the first power supply module and the output terminal of the second power supply module is normal, the power isolation module is in a closed state; and when there is a short-circuit fault in the line between the output terminal of the first power supply module and the output terminal of the second power supply module, the power isolation module is open.

Description

Redundant power supply system and autonomous driving device Cross-reference to related applications

[0001] This application claims priority to Chinese Patent Application No. 2024108082041, filed on June 21, 2024, the entire contents of which are incorporated herein by reference. TECHNICAL FIELD

[0002] The present disclosure relates to the technical field of autonomous driving, and in particular, to a redundant power supply system and an autonomous driving device. BACKGROUND

[0003] An autonomous driving device (for example, an autonomous driving vehicle) needs to realize an autonomous driving function through an electronic control unit related to the autonomous driving function. During use of the autonomous driving device, the electronic control unit may fail, for example, due to a short circuit fault and the like, resulting in the electronic control unit being unable to be normally powered, so that the electronic control unit cannot normally operate, which will cause the autonomous driving function to be abnormal, and further cause the safety of the autonomous driving device to be not high. SUMMARY

[0004] The present disclosure provides a redundant power supply system and an autonomous driving device, thereby at least partially solving the problem of abnormal autonomous driving function caused by the electronic control unit being unable to be powered in the related art.

[0005] According to a first aspect of the present disclosure, a redundant power supply system is provided, comprising: a first power supply module, an output end of the first power supply module being connected in parallel with an input end of a first electronic control unit and an input end of a second electronic control unit; the first electronic control unit refers to an electronic control unit related to an autonomous driving function in an autonomous driving device; the second electronic control unit refers to at least one electronic control unit in the autonomous driving device other than the first electronic control unit; a power isolation module having a first port and a second port, the first port being electrically connected with the output end of the first power supply module; and a second power supply module, an output end of the second power supply module being respectively electrically connected with the second port and the input end of the first electronic control unit; in the case that a line between the output end of the first power supply module and the output end of the second power supply module is normal, the power isolation module is in a conduction state; in the case that there is a short circuit fault in the line between the output end of the first power supply module and the output end of the second power supply module, the power isolation module is disconnected.

[0006] According to a second aspect of the present disclosure, an autonomous driving device is provided, comprising the redundant power supply system according to the first aspect. BRIEF DESCRIPTION OF DRAWINGS

[0007] The accompanying drawings, which are incorporated herein and form a part of the specification, illustrate embodiments that conform to the present disclosure and, together with the description, further serve to explain the principles of the present disclosure. It is apparent that the drawing in the following description is only some embodiments of the present disclosure, and other drawings can be obtained by those of ordinary skill in the art without creative labor on the basis of these drawings. In the drawings:

[0008] FIG. 1 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure;

[0009] FIG. 2 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure;

[0010] FIG. 3 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure;

[0011] FIG. 4 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure;

[0012] FIG. 5 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure;

[0013] FIG. 6 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure;

[0014] FIG. 7 is a schematic diagram of a power supply line in the redundant power supply system shown in FIG. 6 according to some embodiments of the present disclosure;

[0015] FIG. 8 is a schematic diagram of another power supply line in the redundant power supply system shown in FIG. 6 according to some embodiments of the present disclosure;

[0016] FIG. 9 is a schematic diagram of another power supply line in the redundant power supply system shown in FIG. 6 according to some embodiments of the present disclosure;

[0017] FIG. 10 is a schematic diagram of another power supply line in the redundant power supply system shown in FIG. 6 according to some embodiments of the present disclosure; and

[0018] FIG. 11 is a schematic diagram of an autonomous vehicle according to some embodiments of the present disclosure. DETAILED DESCRIPTION

[0019] The technical solutions in the embodiments of the present disclosure will be described clearly and completely below with reference to the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only some embodiments of the present disclosure, not all embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those of ordinary skill in the art without creative labor are within the scope of protection of the present disclosure.

[0020] The features, structures or characteristics described in the present disclosure can be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of embodiments of the present disclosure. One skilled in the relevant art will recognize, however, that the technology disclosed can be practiced without one or more of the specific details, or with other methods, components, devices, steps, etc. In other instances, well-known methods, devices, implementations, or operations are not shown or described in detail to avoid obscuring aspects of the present disclosure.

[0021] The block diagrams shown in the drawings are merely functional entities, and do not necessarily have to correspond to physically independent entities. That is, these functional entities can be implemented in the form of software, or in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0022] The flowcharts shown in the drawings are merely exemplary illustrations, and do not necessarily include all contents and operations / steps, nor do they have to be executed in the order described. For example, some operations / steps can be further divided, and some operations / steps can be combined or partially combined, so the actual execution order can be changed according to the actual situation.

[0023] In the description of the present disclosure, it should be understood that the terms "first", "second" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include one or more of the features. In the description of the present disclosure, unless otherwise specified, the meaning of "a plurality of" is two or more.

[0024] Before the specific description of the solutions of the present disclosure, the terms related to the present disclosure are explained as follows:

[0025] Electronic Control Unit (ECU): refers to a control device composed of an integrated circuit for realizing a series of functions such as analysis and processing of data, transmission, etc.

[0026] An autonomous driving device (such as an autonomous driving vehicle) needs to realize the autonomous driving function through an electronic control unit related to the autonomous driving function. In the related art, there can be a problem that the electronic control unit cannot be normally powered due to a short circuit or the like, which can cause the autonomous driving function to be abnormal, and thus the safety of the autonomous driving device is not high.

[0027] To solve the technical problem, the scheme of the present disclosure is proposed. Please refer to FIG. 1, which is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure, as shown in FIG. 1, the redundant power supply system comprises: a first power supply module 110, a second power supply module 120 and a power supply isolation module 130.

[0028] The output end of the first power supply module 110 is connected in parallel with the input end of the first electronic control unit 150 and the input end of the second electronic control unit 140; the first electronic control unit 150 refers to an electronic control unit related to the automatic driving function in the automatic driving device; the second electronic control unit 140 refers to at least one electronic control unit in the automatic driving device except the first electronic control unit 150.

[0029] The first electronic control unit 150 can be one or multiple, and generally in the automatic driving device, the electronic control unit related to the automatic driving function is multiple. In the case of multiple first electronic control units 150, multiple first electronic control units 150 are connected in parallel at the output end of the first power supply module 110. The first ECU1, the first ECU2,..., the first ECUn shown in FIG. 1 are all the first electronic control unit 150, and n is a positive integer. The automatic driving device refers to a driving device with automatic driving function, such as a ship, a vehicle (such as a truck, a shuttle, a car, a tractor, a harvester, etc.), which is not specifically limited here.

[0030] The electronic control unit related to the automatic driving function refers to the electronic control unit used in the system for realizing the automatic driving function, or refers to the electronic control unit whose output signal participates in realizing the automatic driving function. The electronic control unit related to the automatic driving function can be an ADCU (Autonomous Driving Control Unit), an electronic control unit in an EPS (Electric Power Steering) system, an electronic control unit in an IPB (Integrated Power Brake) system, an electronic control unit in an EPB (Electrical Park Brake) system, etc., which is not specifically limited here.

[0031] It can be understood that the electronic control units related to the automatic driving function set on different automatic driving devices can be different. In addition, the first electronic control units set on automatic driving devices with different principles for realizing the automatic driving function can also be different. Therefore, the above-mentioned electronic control units related to the automatic driving function are only examples and cannot be considered as a limitation on the use range of the present disclosure.

[0032] The second electronic control unit 140 can be one or multiple. The second ECU1, the second ECU2, the second ECU3, …, the second ECUm shown in FIG. 1 are all the second electronic control unit 140, and m is a positive integer. In the case where the first electronic control unit 150 is multiple, the multiple second electronic control units 140 are connected in parallel at the output end of the first power supply module 110.

[0033] The at least one electronic control unit in the automatic driving device other than the first electronic control unit 150, such as a T-BOX (Telematics BOX), an electronic control unit in an air conditioning (AC) system, a BLE (Bluetooth Low Energy) control unit, an electronic control unit in an ETC (Electronic Toll Collection) system, an electronic control unit in a WCM (Wireless Control Module), and the like, is not specifically limited here.

[0034] The power isolation module 130 has a first port 131 and a second port 132, and the first port 131 is electrically connected with the output end of the first power supply module 110.

[0035] The second power supply module 120, and the output end of the second power supply module 120 is respectively electrically connected with the second port 132 and the input end of the first electronic control unit 140.

[0036] In the case where the line between the output end of the first power supply module 110 and the output end of the second power supply module 120 is normal, the power isolation module 130 is in a conducting state. It can be understood that in the case where the power isolation module 130 is in the conducting state, it is equivalent to connecting the output end of the first power supply module 110 and the output end of the second power supply module 120 through a wire, at this time, the first electronic control unit 140 can be powered by the first power supply module 110 or by the second power supply module 120. Of course, in this case, the second electronic control unit 150 can also be powered by the first power supply module 110 or by the second power supply module 120.

[0037] In some embodiments, the second power supply module 120 can be used to provide a direct current voltage, and the direct current voltage is a voltage that can be used for the normal operation of the first electronic control unit 140 and the second electronic control unit 150.

[0038] In some embodiments, the output end of the first power supply module 110 can also output a direct current voltage, and the output direct current voltage is a voltage that can be used for the normal operation of the first electronic control unit 140 and the second electronic control unit 150.

[0039] In some embodiments, the power supply strategy can be preset, and the power supply of the second power supply module 120 and the first power supply module 110 in the case that the power isolation module 130 is in the on state can be controlled according to the power supply strategy. For example, the power supply strategy can be that the first power supply module 110 supplies power to each second electronic control unit 150 and each first electronic control unit 140 in the case that the power isolation module 130 is in the on state; or the power supply strategy can be that the second power supply module 110 supplies power to each second electronic control unit 150 and each first electronic control unit 140 in the case that the power isolation module 130 is in the on state.

[0040] In the case that a short circuit fault exists in the line between the output end of the first power supply module 110 and the output end of the second power supply module 120, the power isolation module 130 is disconnected. In this case, if the short circuit fault occurs in the line between the first port 131 and the output end of the first power supply module 110, each first electronic control unit 140 can be supplied with power by the second power supply module 120; if the short circuit fault occurs in the line between the output end of the second power supply module 120 and the second port 132, each first electronic control unit 140 is supplied with power by the first power supply module 110.

[0041] As can be seen from the above, whether the power isolation module is in the on state or is disconnected, at least one of the first power supply module and the second power supply module can supply power to the first electronic control unit, so that the first electronic control unit can work normally. Since the first electronic control unit is an electronic control unit related to the automatic driving function in the automatic driving device, whether the first electronic control unit is normally powered is directly related to safety, and therefore, the redundant power supply system according to some embodiments of the present disclosure can ensure that the first electronic control unit can be normally powered in the case that the normal or a short circuit fault exists in the line between the output end of the first power supply module and the output end of the second power supply module, thereby solving the problem of low safety of the automatic driving device caused by the first electronic control unit being unable to be normally powered, and improving the safety of the automatic driving device. Moreover, the circuit of the redundant power supply system according to some embodiments of the present disclosure is simple, low in cost, and strong in applicability.

[0042] The working principle of the power isolation module 130 is similar to that of the fuse, but the time required for the fusing process of the fuse is relatively long, and the time for the power isolation module to be disconnected is relatively short, so that the power isolation module responds more timely and faster in the case of a short circuit fault, thereby protecting each element (such as the first electronic control unit, the second electronic control unit, etc.) in the redundant power supply system.

[0043] In some embodiments, the first power supply module 110 includes a first power supply and a DC transformer connected in series, the DC transformer being configured to transform the output voltage of the first power supply to an output target DC voltage, the output target DC voltage being lower than the output voltage of the first power supply. It can be understood that the output target DC voltage is within the working voltage range of the first electronic control unit and the second electronic control unit.

[0044] In some embodiments, the first power supply is also configured to supply power to the electric motor of the autonomous driving device. In some embodiments, the first power supply is a battery pack. That is, the first power supply is a high-voltage battery pack, and the supply voltage of the high-voltage battery pack can be within the working voltage range of the electric motor of the autonomous driving device, for example, the voltage range of the first power supply is 380V-800V, and the range of the output target DC voltage is 12V-13.5V.

[0045] In some embodiments, the second power supply module 120 is a storage battery, and the first power supply module 110 is also configured to charge the storage battery when the power isolation module 130 is in the on state. The output voltage of the storage battery is within the working voltage range of the first electronic control unit and the second electronic control unit, for example, the output voltage range of the storage battery is 12V-13.5V.

[0046] When the power isolation module 130 is in the on state, the first power supply module 110 is also configured to charge the storage battery, and in this case, the first power supply module 110 can supply power to each first electronic control unit 140.

[0047] FIG. 2 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure. As shown in FIG. 2, a plurality of first electronic control units are connected in parallel at the output end of the first power supply module 110 and at the output end of the second power supply module 120. The redundant power supply system further includes a first overcurrent protection module 160 and a second overcurrent protection module 170, and the input end of each first electronic control unit 140 is connected in series with the output end of the first power supply module 110 through the first overcurrent protection module 160, and the input end of each first electronic control unit 140 is connected in series with the output end of the second power supply module 120 through the second overcurrent protection module 170.

[0048] As shown in FIG. 2, the first overcurrent protection module 160 is connected in series on the power supply branch circuit from the output end of the first power supply module 110 to the input end of each first electronic control unit, that is, one first overcurrent protection module 160 is connected in series on the power supply branch circuit between each first electronic control unit and the first power supply module. The second overcurrent protection module 170 is connected in series on the power supply branch circuit from the output end of the second power supply module to the input end of each first electronic control unit.

[0049] The first over-current protection module 160 in series on the power supply branch line is in the conducting state in normal condition, that is, the first over-current protection module 160 is equivalent to a wire at this time, and the first over-current protection module 160 is disconnected in the case that the current on the power supply branch line where the first over-current protection module 160 is located exceeds the maximum allowable current value of the first over-current protection module 160. The first over-current protection module 160 arranged in series can avoid the first electronic control unit from being burned out due to excessive current in the case that the current on the power supply branch line where the first over-current protection module 160 is located is too large (for example, a short circuit occurs), thereby achieving the purpose of over-current protection for the first electronic control unit.

[0050] The second over-current protection module 170 in series on the power supply branch line is in the conducting state in normal condition, that is, the second over-current protection module 170 is equivalent to a wire at this time, and the second over-current protection module 170 is disconnected in the case that the current on the power supply branch line where the second over-current protection module 170 is located exceeds the maximum allowable current value of the second over-current protection module 170. The second over-current protection module arranged in series can avoid the first electronic control unit from being burned out due to excessive current in the case that the current on the power supply branch line where the first over-current protection module 160 is located is too large, thereby achieving the purpose of over-current protection for the first electronic control unit.

[0051] FIG. 3 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure. As shown in FIG. 3, the redundant power supply system further includes a third over-current protection module 180 and a fourth over-current protection module 190. The first end of the third over-current protection module 180 is electrically connected to the output end of the first power supply module 110, the second end of the third over-current protection module 180 is connected to the first end of the first over-current protection module 160, and the second end of the first over-current protection module 160 is electrically connected to the input end of a first electronic control unit 140. The first end of the fourth over-current protection module 190 is electrically connected to the output end of the second power supply module 120, the second end of the fourth over-current protection module 190 is connected to the first end of the second over-current protection module 170, and the second end of the second over-current protection module 170 is electrically connected to the input end of a first electronic control unit 140.

[0052] The first ends (i.e., the ends close to the output ends of the first power supply modules) of the plurality of first over-current protection modules 160 are electrically connected to the third over-current protection module 180, so that the third over-current protection module 180 performs over-current protection on the power supply branch lines where the first electronic control units drawn from the first power supply modules are located. The first ends (i.e., the ends close to the output ends of the second power supply modules) of the plurality of second over-current protection modules 170 are electrically connected to the fourth over-current protection module 190, so that the fourth over-current protection module 190 performs over-current protection on the power supply branch lines where the first electronic control units drawn from the second power supply modules are located.

[0053] In some embodiments, the maximum allowed passing current value of the third overcurrent protection module is greater than the maximum allowed passing current value of the first overcurrent protection module, and the maximum allowed passing current value of the fourth overcurrent protection module is greater than the maximum allowed passing current value of the second overcurrent protection module.

[0054] Figure 4 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure. As shown in Figure 4, the redundant power supply system further comprises a fifth overcurrent protection module 210. The input end of each second electronic control unit is connected in series with the output end of the first power supply module 110 via the fifth overcurrent protection module 210.

[0055] The fifth overcurrent protection module 210 connected in series on the power supply branch line where the second electronic control unit is located is in an on state under normal circumstances, i.e., the fifth overcurrent protection module 210 is equivalent to a wire at this time. In the case where the current on the power supply branch line where the fifth overcurrent protection module 210 is located exceeds the maximum allowed passing current value of the fifth overcurrent protection module 210, the fifth overcurrent protection module 210 is disconnected. The fifth overcurrent protection module 210 arranged in series can avoid the second electronic control unit from being burned out due to excessive current in the case where the current on the power supply branch line where the second electronic control unit is located is too large (e.g., a short circuit occurs), thereby achieving the purpose of overcurrent protection for the second electronic control unit. The maximum allowed passing current value of the fifth overcurrent protection module 210 can be set according to actual needs.

[0056] Figure 5 is a circuit diagram of a redundant power supply system according to some embodiments of the present disclosure. As shown in Figure 5, the redundant power supply system further comprises a sixth overcurrent protection module 220. The first end of the sixth overcurrent protection module 220 is electrically connected to the output end of the first power supply module 110, the second end of the sixth overcurrent protection module 220 is connected to the first end of the fifth overcurrent protection module 210, and the second end of the fifth overcurrent protection module 210 is electrically connected to the input end of a second electronic control unit 150.

[0057] The first ends (i.e., the ends close to the output end of the first power supply module) of the plurality of fifth overcurrent protection modules 210 are electrically connected to the sixth overcurrent protection module 220. In this way, the sixth overcurrent protection module 220 performs overcurrent protection on the power supply branch lines where the plurality of second electronic control units are located, which are led out from the output end of the first power supply module.

[0058] In some embodiments, an overcurrent protection module can also be deployed on at least one of the power supply branch line where the second electronic control unit is located and the power supply branch line where the first electronic control unit is located.

[0059] In some embodiments, the first overcurrent protection module 160, the second overcurrent protection module 170, the third overcurrent protection module 180, the fourth overcurrent protection module 190, the fifth overcurrent protection module 210 and the sixth overcurrent protection module 220 can all be fuses. Compared with other circuits for implementing overcurrent protection function, fuses are cheaper. Therefore, the overall cost of the redundant power supply system can be reduced.

[0060] In other embodiments, some of the first overcurrent protection module 160, the second overcurrent protection module 170, the third overcurrent protection module 180, the fourth overcurrent protection module 190, the fifth overcurrent protection module 210 and the sixth overcurrent protection module 220 can be fuses, and some can be other circuits for implementing overcurrent protection function. The specific selection can be made according to actual needs.

[0061] The maximum allowable current values of the first overcurrent protection module 160, the second overcurrent protection module 170, the third overcurrent protection module 180, the fourth overcurrent protection module 190, the fifth overcurrent protection module 210 and the sixth overcurrent protection module 220 can be set according to actual needs.

[0062] FIG. 6 is a circuit diagram of a redundant power supply system according to another embodiment of the present disclosure. As shown in FIG. 6, the first power supply module includes a battery pack 111 and a DC transformer 112. The battery pack 111 and the DC transformer 112 are connected in series. The DC transformer 112 is used to transform and convert the DC voltage output by the battery pack 111, and output a target DC voltage. The voltage range of the DC voltage output by the battery pack 111 can be 380V-800V, and the voltage range of the target DC voltage can be 12V-13.5V.

[0063] The output end of the DC transformer 112 is electrically connected with the first port 131 of the power supply isolation module 130. The second port 132 of the power supply isolation module 130 is electrically connected with the output end of the second power supply module 120. In FIG. 6, the second power supply module 120 can be a storage battery. The type of the storage battery is not limited, and can be a lead-acid storage battery, a lithium-ion storage battery or the like.

[0064] In FIG. 6, the first overcurrent protection module 160, the second overcurrent protection module 170, the third overcurrent protection module 180, the fourth overcurrent protection module 190, the fifth overcurrent protection module 210 and the sixth overcurrent protection module 220 are all fuses 230.

[0065] In FIG. 6, between the DC transformer 112 and the power isolation module 130, two power supply lines are branched out through two fuses 230, one of which (i.e. the power supply line of the second ECU shown by the dashed box in FIG. 6) is used to supply power to the second electronic control units 150, and multiple second electronic control units 150 are connected in parallel in this power supply line, and each second electronic control unit 150 is also connected to an independent branch line through a fuse. The other power supply line is used as the main power supply line of the first electronic control units 140, and is used to supply power to the first electronic control units 140, and multiple first electronic control units 140 are connected in parallel in this main power supply line, and each first electronic control unit 140 is also connected to an independent branch line through a fuse, and the corresponding branch line can provide main power supply for the first electronic control unit 140.

[0066] In some embodiments, between the power isolation module 130 and the second power supply module 120, a power supply line is branched out through a fuse 230, which is used as the redundant power supply line of the first electronic control units. In the redundant power supply line, multiple power supply branch lines are also branched out through a fuse 230, and each first electronic control unit 140 that needs redundant power supply is provided with redundant power supply.

[0067] The power isolation module 130 is in an on state during normal operation, at which time the second electronic control units 150 can be powered by the first power supply module 110, and the first electronic control units 140 can be powered by the first power supply module 110 through the main power supply line, and the first power supply module 110 can also charge the battery as the second power supply module 120.

[0068] When a short circuit fault occurs in the line where the power isolation module 130 is located (i.e. the line between the output end of the first power supply module and the output end of the second power supply module), the power isolation module 130 can immediately disconnect, completely isolating the main power supply line from the redundant power supply line. After the power isolation module 130 is disconnected, the battery as the second power supply module 120 can be used as an energy storage device to provide power for the redundant power supply line.

[0069] FIG. 7 is a schematic diagram of a power supply line in the redundant power supply system described in FIG. 6 according to some embodiments of the present disclosure, and the thick line in FIG. 7 is the power supply line of the output end of the DC transformer (i.e. the power supply line of the output end of the first power supply module), the first interface 301 in FIG. 7 is the output end of the first power supply module, and the thick line in FIG. 7 is the line between the first interface 301 and the first port 131 of the power isolation module 130, which is referred to as the first line for ease of description.

[0070] If the line close to the first interface 301 in the first line is open, and the power isolation module 130 is still in the conducting state, the battery as the second power supply module 120 can continue to supply power to the first electronic control unit 140 through the main power supply line or the redundant power supply line. It can be understood that if the line between the first port 131 and the second ECU is in the conducting state, the battery can also supply power to the second electronic control unit 150 through the power supply line of the second ECU.

[0071] If the line close to the first port 131 of the power isolation module 130 in the first line is open, the first power supply module 110 can continue to supply power to the main power supply line, that is, the first power supply module 110 supplies power to the first electronic control unit 140 at this time, and in this case, the first power supply module 110 also supplies power to the second electronic control unit 150.

[0072] If a short circuit fault occurs in the first line, the DC transformer 112 will cut off the voltage output, and the power isolation module 130 is disconnected, and the main power supply line is powered off, at this time, the battery as the second power supply module 120 supplies power to the first electronic control unit 140 through the redundant power supply line.

[0073] From the above analysis, it can be seen that no matter whether an open circuit or a short circuit fault occurs in the first line, the redundant power supply system according to some embodiments of the present disclosure can ensure normal power supply to the first electronic control unit, thereby avoiding the situation that the automatic driving function is abnormal due to the failure to supply power to the electronic control unit related to the automatic driving function, and thus avoiding the unsafe situation.

[0074] FIG. 8 is a schematic diagram of another power supply line in the redundant power supply system shown in FIG. 6 according to some embodiments of the present disclosure. The thick line in FIG. 8 is the power supply line of the output end of the second power supply module. For the convenience of description, the thick line in FIG. 8 is referred to as the second line, and the second interface 302 in FIG. 8 is the output end of the second power supply module. As can be seen, the second line is the line between the second interface 302 and the second port 132 of the power isolation module 130.

[0075] If the line close to the second port 132 of the power isolation module 130 in the second line is open, the first power supply module 110 can continue to supply power to the second electronic control unit 150, and can continue to supply power to the first electronic control unit 140 through the main power supply line. Of course, if the line between the output end of the battery and the redundant power supply line is in the conducting state, the battery can also supply power to the first electronic control unit 140 through the redundant power supply line.

[0076] If an open circuit occurs on the second line near the second power supply module 120, the first power supply module 110 can continue to supply power to the second electronic control unit 150, and can continue to supply power to the second electronic control unit 140 through the main power supply line. Of course, if the output end of the first power supply module 120 to the redundant power supply line is conductive, the first power supply module 110 can also supply power to the first electronic control unit through the redundant power supply line.

[0077] If a short circuit fault occurs on the second line, the power supply isolation module 130 is disconnected, the redundant power supply line is powered off, the first power supply module 110 can continue to supply power to the first electronic control unit 140 through the main power supply line, and the first power supply module 110 continues to supply power to the second electronic control unit 150.

[0078] Figure 9 is a schematic diagram of another power supply line in the redundant power supply system shown in Figure 6 according to some embodiments of the present disclosure. The thick line in Figure 9 is the main power supply line of the first electronic control unit. If an open circuit occurs on any power supply branch line of the main power supply line where the first electronic control unit 140 is located, the first power supply module 110 can continue to supply power to other first electronic control units 140 through the main power supply line. Alternatively, at this time, the second power supply module 120 can still supply power to the first electronic control unit 140 through the redundant power supply line, for example, the second power supply module 120 can supply power to the first electronic control unit 140 on the power supply branch line where an open circuit occurs on the main power supply circuit through the power supply branch line on the redundant power supply line.

[0079] If the main trunk line commonly used by multiple power supply branch lines on the main power supply line has an open circuit, the main power supply line is powered off, and the battery as the second power supply module 120 can supply power to each first electronic control unit 140 through the redundant power supply line.

[0080] If a short circuit fault occurs on the power supply branch line of the main power supply line where any first electronic control unit 140 is located, the fuse 230 on the power supply branch line where the first electronic control unit 140 is located is blown, and the first power supply module 110 can continue to supply power to other first electronic control units 140 through the main power supply line. At this time, the battery as the second power supply module 120 can also supply power to each first electronic control unit 140 through the redundant power supply line, for example, to the first electronic control unit 140 corresponding to the blown fuse 230.

[0081] If a short circuit fault occurs on the main trunk line on the main power supply line, the fuse on the main trunk line on the main power supply line is blown, and the main power supply line is powered off. At this time, the battery as the second power supply module 120 can supply power to each first electronic control unit 140 through the redundant power supply line.

[0082] Figure 10 is a schematic diagram of another power supply line in the redundant power supply system shown in Figure 6, according to some embodiments of the present disclosure. The thick line in Figure 10 is the redundant power supply line for the first electronic control units. If an open circuit occurs in the power supply branch line where any first electronic control unit 140 is located, the first power supply module 110 can supply power to the first electronic control unit 140 whose corresponding power supply branch line in the redundant power supply line has an open circuit through the main power supply line, and the second power supply module 120 can supply power to the other first electronic control units 140 through the redundant power supply line. Alternatively, the first power supply module 110 can supply power to all the first electronic control units 140 through the main power supply line.

[0083] If an open circuit occurs in the main trunk line shared by multiple power supply branch lines in the redundant power supply line, the redundant power supply line loses power. The first power supply module 110 can supply power to all the first electronic control units 140 through the main power supply line, and the first power supply module 110 can also normally supply power to all the second electronic control units 150.

[0084] If a short circuit fault occurs in the power supply branch line where any first electronic control unit is located in the redundant power supply line, the fuse 230 in the power supply branch line is disconnected. The second power supply module 120 can continue to supply power to the first electronic control units 140 in the other normal power supply branch lines through the redundant power supply line, and the first power supply module 110 can supply power to the first electronic control unit 140 whose corresponding power supply branch line has a short circuit fault through the main power supply line. Alternatively, the first power supply module 110 can also supply power to all the first electronic control units 140 through the main power supply line.

[0085] If a short circuit occurs in the main trunk line shared by multiple power supply branch lines in the redundant power supply line, the redundant power supply line loses power. The first power supply module 110 can supply power to all the first electronic control units 140 through the main power supply line, and the first power supply module 110 can also continue to supply power to all the second electronic control units 150.

[0086] In some embodiments, the power supply priorities of the first power supply module 110 and the second power supply module 120 can be preset, for example, the power supply module with higher remaining power can be set to have higher power supply priority, thereby, in the case that the first power supply module 110 and the second power supply module 120 can both supply power to one or more first electronic control units 140, the power supply module with higher remaining power among the first power supply module 110 and the second power supply module 120 can supply power. For another example, the power supply module with higher capacity can be set to have higher power supply priority, for example, if the capacity of the battery pack in the first power supply module 110 is higher than that of the storage battery as the second power supply module, thereby, in the case that the first power supply module 110 and the second power supply module 120 can both supply power to one or more first electronic control units 140, the first power supply module 110 with higher capacity can supply power.

[0087] From the above analysis, it can be seen that the redundant power supply system provided by the present disclosure can ensure that in the case of short-circuit fault or open-circuit fault, the first electronic control unit can be supplied with power through the redundant power supply circuit or the main power supply circuit, thereby avoiding the abnormality of the automatic driving function caused by the failure of the first electronic control unit in the driving device to supply power normally, improving the safety of the automatic driving device, having high reliability, meeting the needs of the automatic driving system for redundant power supply, and improving the driving safety. Moreover, the redundant power supply system has simple circuit and low cost.

[0088] Based on the same inventive concept, the embodiments of the present disclosure also provide an automatic driving device comprising the redundant power supply system provided in any of the above embodiments.

[0089] In some embodiments, the automatic driving device can be an automatic driving vehicle with automatic driving function. Referring to FIG. 11, FIG. 11 is a structural schematic diagram of an automatic driving vehicle according to some embodiments of the present disclosure, the automatic driving vehicle can comprise the redundant power supply system (not shown in the figure) as above, one or more memories 1004, one or more processors 1002, and at least one computer program (computer program instructions) stored in the memory 1004 and executable on the processor 1002, the processor 1002 executes the computer program, for example, the computer program that implements the power supply strategy as above, or the computer program that implements the power supply according to the power supply priority as above, or the computer program that implements the control logic in the automatic driving function.

[0090] In FIG. 11, a bus architecture (represented by bus 1000) can include any number of interconnecting buses and bridges, the bus 1000 linking together various circuits such as one or more processors represented by processor 1002, and memory represented by memory 1004. The bus 1000 can also link together various other circuits which can include, among other things, peripheral devices, voltage stabilizers and power management circuits, all of which are well known in the art, and therefore, will not be further described. A bus interface 1005 provides an interface between the bus 1000 and a receiver 1001 and a transmitter 1003. The receiver 1001 and the transmitter 1003 can be the same component, i.e., a transceiver, providing a unit for communicating with various other apparatus over a transmission medium. The processor 1002 is responsible for managing the bus 1000 and general processing, while the memory 1004 can be used for storing data used by the processor 1002 in executing operational programs.

[0091] The functions described in this disclosure can be implemented in hardware, software executed by a processor, firmware, or any combination thereof. If implemented in software executed by a processor, the functions can be stored on or transferred over as one or more instructions or code on a computer-readable medium. Other examples and implementations are within the scope and spirit of the disclosure and appended claims. For example, due to the nature of software, functions described above can be implemented using software executed by a processor, hardware, firmware, hardwiring, or combinations of any of these. Also, the various functions of the different embodiments can be performed in the same processor or you can be performed by different processors. Furthermore, functions can be implemented in a distributed manner, where different functions performed by different processors are implemented on the same computing device or on different computing devices.

[0092] In several embodiments provided in the present disclosure, it should be understood that the disclosed technology can be implemented in other ways. The above-described device embodiments are only illustrative, for example, the division of units can be a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed units can be indirect coupling or communication connection through some interfaces, units or modules, which can be electrical or other forms.

[0093] The units described as separate components can or can not be physically separated, and the components of the control device can or can not be physical units, i.e., they can be located in one place or distributed on multiple units. Some or all of the units can be selected according to actual needs to achieve the purpose of the present embodiment.

[0094] The integrated unit, if implemented in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present disclosure, essentially or in other words, the part that contributes to the prior art or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium, and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in the various embodiments of the present disclosure. The foregoing storage medium includes: a U disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a mobile hard disk, a magnetic disk or an optical disk, and various media that can store computer program instructions.

[0095] The above are only embodiments of the present disclosure and are not intended to limit the present disclosure. For those skilled in the art, the present disclosure can have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present disclosure shall be included in the scope of the claims of the present disclosure.

Claims

1. A redundant power supply system, comprising: The first power supply module has its output terminal connected in parallel to the input terminals of the first electronic control unit and the second electronic control unit; the first electronic control unit refers to the electronic control unit related to the autonomous driving function in the autonomous driving device; the second electronic control unit refers to at least one electronic control unit in the autonomous driving device other than the first electronic control unit. The power isolation module has a first port and a second port, wherein the first port is electrically connected to the output terminal of the first power supply module; as well as The second power supply module has its output terminal electrically connected to the second port and the input terminal of the first electronic control unit, respectively. When the line between the output terminal of the first power supply module and the output terminal of the second power supply module is normal, the power isolation module is in the conducting state; In the event of a short circuit fault in the line between the output terminal of the first power supply module and the output terminal of the second power supply module, the power isolation module is disconnected.

2. The redundant power supply system according to claim 1, wherein, There are multiple first electronic control units, which are deployed in parallel at the output end of the first power supply module and in parallel at the output end of the second power supply module; A first overcurrent protection module is connected in series between the input terminal of each of the first electronic control units and the output terminal of the first power supply module; A second overcurrent protection module is connected in series between the input terminal of each of the first electronic control units and the output terminal of the second power supply module.

3. The redundant power supply system according to claim 2 further includes a third overcurrent protection module and a fourth overcurrent protection module; The first end of the third overcurrent protection module is electrically connected to the output end of the first power supply module, the second end of the third overcurrent protection module is connected to the first end of the first overcurrent protection module, and the second end of the first overcurrent protection module is electrically connected to the input end of a first electronic control unit. The first end of the fourth overcurrent protection module is electrically connected to the output end of the second power supply module, the second end of the fourth overcurrent protection module is connected to the first end of the second overcurrent protection module, and the second end of the second overcurrent protection module is electrically connected to the input end of a first electronic control unit.

4. The redundant power supply system according to claim 1, wherein, There are multiple second electronic control units, which are deployed in parallel at the output end of the first power supply module; A fifth overcurrent protection module is connected in series between the input terminal of each of the second electronic control units and the output terminal of the first power supply module.

5. The redundant power supply system according to claim 4 further includes a sixth overcurrent protection module; the first end of the sixth overcurrent protection module is electrically connected to the output end of the first power supply module, the second end of the sixth overcurrent protection module is connected to the first end of the fifth overcurrent protection module, and the second end of the fifth overcurrent protection module is electrically connected to the input end of a second electronic control unit.

6. The redundant power supply system according to claim 1, wherein, The first power supply module includes a first power source and a DC transformer connected in series. The DC transformer is used to transform the output voltage of the first power source to output a target DC voltage. The target DC voltage is lower than the output voltage of the first power source. The output terminal of the DC transformer serves as the output terminal of the first power supply module.

7. The redundant power supply system according to claim 6, wherein, The first power source is also used to power the electric motor of the autonomous driving device.

8. The redundant power supply system according to claim 6, wherein, The first power source is a battery pack.

9. The redundant power supply system according to claim 1, wherein, The second power supply module is a storage battery. When the power isolation module is in the conducting state, the first power supply module is also used to replenish the storage battery.

10. The redundant power supply system according to claim 1, wherein, When the power isolation module is in the ON state, the first power supply module supplies power to the second electronic control unit and to the first electronic control unit; or When the power isolation module is in the on state, the second power supply module supplies power to the second electronic control unit and the first electronic control unit.

11. The redundant power supply system according to claim 1, wherein, If the short circuit fault occurs on the line between the first port and the output terminal of the first power supply module, then the second power supply module supplies power to the first electronic control unit.

12. The redundant power supply system according to claim 1, wherein, If the short circuit fault occurs on the line between the output terminal of the second power supply module and the second port, then the first power supply module supplies power to the first electronic control unit.

13. The redundant power supply system according to claim 2, wherein, The first overcurrent protection module is normally in the conducting state. When the current on the power supply branch where the first overcurrent protection module is located exceeds the maximum allowable current value of the first overcurrent protection module, the first overcurrent protection module is disconnected.

14. The redundant power supply system according to claim 2, wherein, The second overcurrent protection module is normally in the conducting state. If the current on the power supply branch where the second overcurrent protection module is located exceeds the maximum allowable current value of the second overcurrent protection module, the second overcurrent protection module will be disconnected.

15. The redundant power supply system according to claim 3, wherein, The maximum allowable current value of the third overcurrent protection module is greater than the maximum allowable current value of the first overcurrent protection module; and the maximum allowable current value of the fourth overcurrent protection module is greater than the maximum allowable current value of the second overcurrent protection module.

16. The redundant power supply system according to claim 5, wherein, The first overcurrent protection module, the second overcurrent protection module, the third overcurrent protection module, the fourth overcurrent protection module, the fifth overcurrent protection module, and the sixth overcurrent protection module are all fuses.

17. The redundant power supply system according to claim 1, wherein, When both the first power supply module and the second power supply module can supply power to one or more of the first electronic control units, the power supply module with the higher remaining power among the first power supply module and the second power supply module shall provide power.

18. The redundant power supply system according to claim 1, wherein, When both the first power supply module and the second power supply module can supply power to one or more of the first electronic control units, the power supply module with the higher capacity among the first and second power supply modules shall provide the power.

19. An autonomous driving device, comprising a redundant power supply system as claimed in any one of claims 1 to 18.

20. The autonomous driving device according to claim 19, wherein, The autonomous driving device is an autonomous vehicle.

Images