Remote activiation and configuation of protection devices

Abstract

A power distribution management system (PDMS) comprising a circuit protection unit and a control unit is provided. The circuit protection unit comprises at least one disconnect configured to open / close an electrical path between a source and a load and a set of first sensors configured to detect states of the electrical path, respectively. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The control unit has a processor configured to cause the at least one disconnect to open the electrical path in response to a determination of a non-damaging incorrect operation. The control unit communicates with a system control unit (SCU). In response to a loss of communication with the SCU which meets an application specific criterion or receiving an instruction from the SCU, the processor may cause the at least one disconnect to open.

Description

REMOTE ACTIVIATION AND CONFIGUATION OF PROTECTION DEVICESCROSS-REFERENCE TO RELATED APPLICATION(S)

[0001] The present application claims benefit of United States Provisional Application No. 63 / 662,776, filed June 21, 2024, all of the contents and disclosure of which are hereby incorporated herein by reference.BACKGROUND

[0002] This disclosure is directed to power control systems and devices generally, and more particularly to remote control and remote configuration of a protection system or device between a power source and a load.

[0003] A protection device, such as a disconnect, is typically positioned between a power source and a load. The protection device may open, to isolate the power source from the load or close to electrically connect the power source and load. Typically, a protection device is designed to prevent a damaging fault condition. A damaging fault condition is a fault which may damage either the power source or load. A damaging fault may be an overvoltage or overcurrent condition. A voltage at the protection device may be detected by a voltage sensor. The output of the voltage sensor may be connected to an overvoltage fault detection circuit, which is preset with a fixed trigger threshold. When the sensed voltage is larger than the fixed trigger threshold, the protection device is opened.

[0004] Similarly, a current flowing between the power source and the load may be sensed and feed to an overcurrent fault detection circuit. The over current fault detection circuit may be designed with a preset I2T threshold (e.g., fixed trigger threshold). The protection device is opened based on this preset I2T threshold.

[0005] These preset thresholds are typically set based on the expected operation of the load (or nominal magnitude of the power source), e.g., based on a rating for the protection device. The expected operation may be the maximum power demand for the load. However, the preset thresholds do not account for real time operation of the load or power source and the actual power demand for the load.

[0006] Additionally, the power source, protection device, and load may be incorporated into a system such as, but not limited to, a propulsion system of a vehicle. The local sensors, withinthe protection device, are able to protect the source and load for local conditions, however, the local sensors arc not able to detect system level faults such as a fault within the power source, a fault within the load or a communication path.SUMMARY

[0007] Disclosed is a power distribution management system (PDMS) comprising a circuit protection unit and a control unit. The circuit protection unit comprises a communication interface, at least one disconnect, configured to open or close an electrical path between a source and a load and a set of first sensors configured to detect states of the electrical path, respectively. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The control unit comprises a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit and a processor configured to cause the at least one disconnect to open the electrical path in response to a determination of a non-damaging incorrect operation.

[0008] In an aspect of the disclosure, the control unit may further comprise second control unit-communication interface configured to communicate with a system control unit (SCU). In response to a loss of communication with the SCU which meets an application specific criterion, the processor may determine that a non-damaging incorrect operation exists and cause the at least one disconnect to open the electrical path.

[0009] In an aspect of the disclosure, the processor may receive the determination that a nondamaging incorrect operation exists from the SCU via the second control unit- communication interface and in response to receipt of the determination, the processor causes the at least one disconnect to open.

[0010] In an aspect of the disclosure, the control unit may further comprise at least one local sensor. Each local sensor may be configured to detect a local condition within the control unit. The processor may be configured to determine a non-damaging incorrect operation based on the detection of each local sensor. For example, the processor may determine that a non-damaging incorrect operation exists when a detection result from a local sensor of the at least one local sensor indicates the local condition is out of range and in response, the processor causes the at least one disconnect to open.

[0011] In an aspect of the disclosure, the processor may determine whether there is a non-damaging incorrect operation based on detections from the set of first sensors and a rating of the circuit protection unit determined based on the load.

[0012] In an aspect of the disclosure, when the non-damaging incorrect operation is cleared, the processor waits to receive an instruction to close the at least one disconnect the SCU to close the at least one disconnect.

[0013] In an aspect of the disclosure, the at least one disconnect may be at least one solid state switch and associated gate drive circuitry.

[0014] In an aspect of the disclosure, the circuit protection unit may further comprise a digital to analog converter (DAC) configured to convert a control signal from the control unit to drive the gate drive circuitry. In other aspects, the DAC may be in the control unit.

[0015] In other aspects, the circuit protection unit may further comprise a processor configured to receive a control signal from the control unit to drive the gate drive circuitry.

[0016] In an aspect of the disclosure, the circuit protection unit may have a preset rating based on the load. The circuit protection unit also comprises protection circuitry configured based on the preset rating.

[0017] In an aspect of the disclosure, the processor in the control unit may adjust the preset rating based on the operation of the load and output an adjusted rating. In an aspect of the disclosure, the circuit protection unit may comprise a processor and storage having thresholds for determining whether to open the electrical path. The thresholds may be defined as a fixed percentage above or below a rating for different monitored times. The processor in the circuit protection unit may change the thresholds in response to receiving the adjusted rating output from the processor in the control unit.

[0018] Also disclosed is a power distribution management system (PDMS) comprising a circuit protection unit and a control unit. The circuit protection unit comprises a communication interface, at least one disconnect, configured to open or close an electrical path between a source and a load, a set of first sensors configured to detect states of the electrical path, respectively, and protection circuitry electrically connected to the set of first sensors. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The protection circuitry is configured with analog thresholds to open the electrical path. The analog thresholds are based on a preset rating of the circuit protection unit based on the load. The protection circuitry is configured to open the electrical path when a detect state exceeds one ormore of the thresholds. The control unit comprises a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit and a processor configured to monitor operation of the load relative to an expected operation of the load used to determine updated rating, adjust digital thresholds for opening the at least one disconnect based on the monitored operation; and cause the at least one disconnect to open when a detected state exceeds one or more of the adjusted digital thresholds.

[0019] In an aspect of the disclosure, the control unit may further comprise a storage configured to store the adjusted digital thresholds.

[0020] In an aspect of the disclosure, the circuit protection unit may further comprise a processor and storage having digital thresholds. The processor in the control unit may transmit the adjusted digital thresholds to the processor in the circuit protection unit. The stored digital thresholds are updated in response to receipt of the adjusted digital thresholds.

[0021] In an aspect of the disclosure, the processor in the circuit protection unit may be configured to compare a detected state with the adjusted digital threshold, respectively, to determine whether to open the at least one disconnect.

[0022] In other aspects of the disclosure, the processor in the control unit may be configured to receive detected states from the set of first sensors, respectively, and compare the detected state with a respective adjusted digital threshold to determine whether to open the at least one disconnect.

[0023] Also disclosed is a system comprises a power source, a load, a circuit protection unit, a first control unit and a system control unit (SCU). The circuit protection unit comprises a communication interface, at least one disconnect configured to open or close an electrical path between the power source and the load; and a set of first sensors configured to detect states of the electrical path, respectively. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The first control unit comprises a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit, a second control unit-communication interface configured to communicate with the SCU; and a first processor. The SCU comprises a load-communication interface configured to communicate with the load, a power source-communication interface configured to communicate with the power source, and a system control-communication interface configured to communicate with the first control unit, and a second processor. Thesecond processor is configured to determine a non-damaging incorrect operation of the system based at least in part on information from at least one of the load, the power source or the first control unit, respectively, received via the load-communication interface, the power sourcecommunication interface or the system control-communication interface. In response to a determination of the non-damaging incorrect operation, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path to the first control unit. In response to receiving the instruction, the first processor causes the at least one disconnect to open.

[0024] In an aspect of the disclosure, there may be a plurality of pairs of power sources and loads, respective. There is at least one disconnect in an electrical path between a power source and load in each pair. In response to a determination of a non-damaging incorrect operation in a particular pair of power source and load, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path associated with the particular pair to the first control unit. In response to receiving the instruction, the first processor causes the at least one disconnect to open between the particular pair.

[0025] In an aspect of the disclosure, the SCU may be further configured to determine a nondamaging incorrect operation with itself. In response to a determination of a non-damaging incorrect operation with itself, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path for all of the plurality of pairs to the first control unit. In response to receiving the instruction, the first processor causes the at least one disconnect to open between all of the plurality of pairs.

[0026] In an aspect of the disclosure, the non-damaging incorrection operation is an over or under voltage, over or under current, over di / dt and / or over temperature.

[0027] In an aspect of the disclosure, the second processor may be configured to determine whether the non-damaging incorrect operation has been cleared. In response to a determination that the non-damaging incorrect operation has been cleared, the second processor is configured to transmit, the system control-communication interface, an instruction to close the electrical path between one or more pairs of power source and load based on current conditions to the first control unit.

[0028] In an aspect of the disclosure, the power source or each power source is a high voltage DC power source.BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Fig. 1 illustrates an example of a system in accordance with aspects of the disclosure;

[0030] Fig. 2 illustrates an example of a power distribution management system (PDMS) in accordance with aspects of the disclosure;

[0031] Fig. 3 illustrates an example of a high voltage power source in accordance with aspects of the disclosure;

[0032] Fig. 4 illustrates an example of a load in accordance with aspects of the disclosure;

[0033] Fig. 5 illustrate an example of a method of remoting controlling a protection device using a control unit in the PDMS in accordance with aspects of the disclosure;

[0034] Fig. 6 illustrates a method of remotely controlling a protection device using a system control unit in accordance with aspects of the disclosure;

[0035] Fig. 7 illustrates a method of remoting controlling a protection device based on adjustable configurations in accordance with aspects of the disclosure;

[0036] Fig. 8 illustrates a method of remoting configuring a protection device by a control unit of the PDMS in accordance with aspects of the disclosure;

[0037] Fig. 9 illustrates a method of controlling the protection device using adjustable configurations in accordance with other aspects of the disclosure;

[0038] Fig. 10 illustrates an example of the remote control / configuration path in accordance with aspects of the disclosure; and

[0039] Fig. 11 illustrates another example of the remote control / configuration path in accordance with aspects of the disclosure.DETAILED DESCRIPTION

[0040] In accordance with aspects of the disclosure, a disconnect within a protection device may be remotely controlled to open an electrical path between a source and a load based on a determination of a non-damaging incorrect operation. The non-damaging incorrect operation may be system level, such as in a load or a source, a system control unit (SCU) and / or other subsystems. The non-damaging incorrect operation may also be local to a power distribution management system (PDMS). The determination of a non-damaging incorrect operation may be locally made within the PDMS or external, such as at the SCU.

[0041] In some aspects, the determination may be based on adjustable configurations, such as adjustable thresholds. An adjustable threshold may be based on real-time operating conditions of a source and / or a load.

[0042] In an aspect of the disclosure, the system 1 may be a part of a smart home, smart power grid, or one of the systems of a vehicle. The vehicle may be a personal vehicle, such as a scooter, car, motorcycle and truck or a commercial vehicle such as a truck or bus, a maritime vehicle has as a boat or submarine or a military vehicle such as a tank, self-propelled artillery, or troop transport. The vehicle may also be an airplane including conventional take off and landing aircraft (CTOL) or a vertical take off and landing) or a helicopter, UAV s, or other powered air vehicles. The vehicle may be a hybrid electric vehicle (HEV) or a battery electric vehicle (BEV).

[0043] Fig. 1 illustrates a block diagram of a system 1 in accordance with aspects of the disclosure. In Fig. 1, communication paths between elements are shown in dotted and dashed lines, whereas power paths are shown in thicker solid lines.

[0044] The system 1 comprises a human machine interface (HMI) 50, an SCU 100, a source (e.g., High Voltage Source 1 30A), a load (e.g., Load 1 25 A) and a PDMS 10. The SCU 100, a source, a load, and the PDMS 10 may be line replaceable units (LRUs). The PDMS 10 comprises a control unit 12 and multiple protective devices (each referred to as “circuit protection unit” 15A). The system may have a plurality of source / load pairs. For each set of source / load, there may be two circuit protection units 15 A, one for the source and one for the load. The “....” illustrated in Fig. 1 represent other load / source pairs.

[0045] In an aspect of the disclosure, the PDMS 10 may be a single LRU with the control unit 12 and circuit protection units 15A in the same house (chassis). However, in other aspects, the control unit 12 may be a separate LRU from each circuit protection unit 15A. The source (e.g., High Voltage Power Source 1 30A) may be DC (direct current) or (alternating current) AC. In a case of AC, the source may provide a single phase or multi-phase such as three-phase or six- phase AC. The source is not limited to “high” voltage and the source may supply any voltage. For non-limiting purposes of discussion, “high-voltage” can refer to a DC voltage of greater than 50 VDC, but could be 120 VDC, 200 VDC, 400 V DC, 800 V DC or greater.

[0046] The source (e.g., High Voltage Power Source 1 30A) may comprise any electric source 310, such as but not limited to a battery unit or electric generator (DC or AC).

[0047] The load (e.g., load 1 25a) may be used to provide propulsion for the vehicle such as having a mover 350. The mover may comprise a motor, turbine, etc. For example, the load (e.g., load 1 25 a) may be an electric propulsion unit.

[0048] In some aspects, the load (e.g., load 1 25 A) may also include a “source”. For example, the load may be a parallel turbo propulsion unit. This unit may include a motor receiving power from the source (e.g., High Voltage Power Source 1 30A) as well as a generator supplying additional power to a mixing gear box to rotate a turbine.

[0049] The load may be used for “non-propulsion” aspects in the vehicle such as for air conditioning systems including a pump or coolant systems. The load may also include lighting within the vehicle, such as floor lights, and / or in-flight entertainment units.

[0050] The HMI 50 enables a user to interact with the system 1. The HMI 50 may include a display with screens. The HMI 50 may be used to provide propulsion commands. The display may be used to generate non-propulsion related command.

[0051] The HMI 50 may communicate with the SCU 100 using one or more interfaces such as analog interfaces and COM bus interfaces. In other aspects, the HMI 50 may communicate with the SCU 100 via network interfaces such as an ETHERNET, serial bus such as ARINC 429, 422, 485 interfaces or even a wireless communication.

[0052] The SCU 100 comprises a processor, memory and communication interfaces. The communication interfaces may be one or more of the examples described above.

[0053] The SCU 100 controls the load / source pair (e.g., High Voltage Power Source 1 30A and load 1 25A), such as, based on requests / input from the HMI 50. For example, for propulsion, the processor at the SCU 100 receives the requests / input from the HMI 50, determines a torque / speed command for the load and issues torque / speed commands to the load (e.g., load 1 25A) and required power to the source (e.g., High Voltage Power Source 1 30A).

[0054] The processor may be a microprocessor, a field programmable gate array, a digital signal processor (DSP), application specific integrated circuits (ASIC), multi-chip modules (MCM) or a combination of discrete logic (individually or collectively referred to herein as “a processor”). The processor may comprise a combination of a microprocessor and a FPGA. The microprocessor may comprise software to execute the functionality described herein. The microprocessor may also comprise a memory. Alternatively, the memory may be separate. The memory may comprise random access memory (RAM), read only memory (ROM), flashmemory, etc ....

[0055] Fig. 2 illustrates an example of a PDMS 10 in accordance with aspects of the disclosure. The PDMS 10 comprises a control unit 12 and circuit protection units 15A. Each circuit protection unit 15A comprises a disconnect 255 to interrupt the power flowing to or from the load / source. The disconnect may be contactors, circuit breakers, and / or motorized switches. The circuit breakers may be solid state circuit breakers. In other aspects, the circuit breaker may be magnetic or a mechanical breaker. In some aspects of the disclosure, the disconnect may be positioned on a single link between the load and source, such as a positive link of a DC connection. In other aspects, the disconnect may be positioned on all links between the load and source (e.g., both positive and negative). In other example, the disconnect may be positive on each phase of an AC connection.

[0056] The solid-state circuit breaker may include a metal oxide semiconductor field effect transistor (MOSFET) switching device, junction field-effect transistor (JFET) switching device or any other semiconductor switching device.

[0057] Each circuit protection unit 15A comprises a plurality of sensors 250. The plurality of sensors 250 includes voltage sensor(s), current sensor(s), and temperature sensor(s). The voltage sensor detects a line-to-line voltage such as of the positive and negative DC links.

[0058] The sensors 250 may be connected to control circuitry 260 in the circuit protection unit 15 A. The control circuitry 260 may include an overvoltage (OV) fault detection circuit and overcurrent (OC) fault detection circuit. In some aspects, the control circuitry 260 may also comprise a over-^- fault detection circuit. Each detection circuit outputs a signal based on the detection result. For example, the OC fault detection circuit, which may be implemented in logic, detects an over-current fault condition and asserts a corresponding OC fault condition signal when a fault is detected. The logic has a preset analog threshold. The preset analog threshold is determined based on a rating for the circuit protection unit 15A based on a load / source, respectively.

[0059] Similarly, the OV fault detection circuit, which may be implemented in logic, detect an over-voltage fault condition and asserts a corresponding OV fault condition signal when a fault is detect. The logic has a preset analog threshold. The preset analog threshold is determined based on a rating for the circuit protection unit 15A based on a load / source, respectively.

[0060] The over-— fault detection circuit, which may be implement in logic, detects a — fault condition and asserts a respective corresponding over- fault condition signal when detected.

[0061] The analog threshold value in each of these detection circuits is fixed and set to avoid damaging fault(s). The setting may be based on an I2T curve determined from the rating of the circuit protection unit 15A (Imax or

[0062] The output of each fault detection circuit may be connected to additional logic in the control circuitry 260 to control the state of the disconnect 255, e.g., open. If any fault condition is detected by any fault detection circuit, the logic in the control circuitry controls the disconnect 255 to open. For example, the logic may include an OR gate (or similar logic device).

[0063] The circuit protection unit 15A also comprises communication interface(s) 210. The communication interface(s) 210 may be the same as described above. However, other aspects of the disclosure, when the control unit 12 and the circuit protection unit 15A is in the same LRU (and chassis), a communication interface 210 may be a flexible circuit board connector respectively connected to terminals of the circuit board (PCB), having the control unit 12, and the PCB, having the circuit protection unit 15A.

[0064] In some aspects, the sensor values from each sensor 250 may be sent to the control unit 12 for further processing. In this aspect of the disclosure, either the control unit 12 or the circuit protection unit 15A may have an analog to digital converter (ADC). The sensor values may be sent via the communication interface 210.

[0065] Although not shown in Fig. 2, in an aspect of the disclosure, the circuit protection unit 15 A may also have a processor, which receives the sensor values from each sensor 250 for further processing.

[0066] The control unit 12 comprises a processor 200, a memory 205 and a communication interface(s) 210. The control unit 12 may also have one or more sensors 250A. The processor 200 and memory 205 may be similar to described above with respect to the SCU 100. The control unit 12 may have multiple communication interfaces 210. For example, one communication interface may be used to communicate with the SCU 100, and other communication interfaces may be used to communicate with the circuit protection unit 15 A, respectively. In an aspect of the disclosure, a communication interface for communicating with each circuit protection unit 15 A may be a different type than the communication interface forcommunicating with the SCU 100. For example, as described above, the communication interface between the control unit 12 and each circuit protection unit 15A may be a flexible circuit board connector and the communication interface between the control unit 12 and the SCU 100 may be a serial bus such as ARINC 429, 422, 485 interfaces.

[0067] The memory 205 may store digital thresholds for controlling the disconnect 255 to open. The digital thresholds may be initially determined based on the rating of each circuit protection unit 15A (which is based on the load / source it is connected to). In an aspect of the disclosure, the digital thresholds may be different for different circuit protection units 15 A. Therefore, the memory 205 may have an identifier associated with each circuit protection unit 15A and its associated digital threshold(s). There may be digital thresholds associated with avoltage condition, a current condition and / or a condition. The voltage condition may beover / under voltage. The current condition may be over / under current. For example, the digital thresholds may define a normal range for the voltage and / or current.

[0068] The digital thresholds may also include local environmental thresholds. For example, the digital thresholds may include a temperature and / or humidity threshold (range) defining a normal range for the operation of the control unit 12. The control unit 12 may have one or more sensors 250A, which may include a temperature sensor and / or a humidity sensor. The temperature sensor and / or humidity sensor, each detects a particular condition at the control unit 12.

[0069] Fig. 3 illustrates a block diagram of an example of a power source (e.g., high voltage power source 1 30A) in accordance with aspects of the disclosure. However, the components of a power source will vary based on the type of power source. The power source may comprise a power generating section (e.g., electric source 310), a plurality of sensors 300A and communication interface(s) 210. The plurality of sensors 300A also will depend on the type of power supply. For example, if the power supply includes an electric generator (and a prime mover), the plurality of sensors 300A may include a speed sensor and / or a torque sensor, a fuel sensor for the prime mover, voltage and / or current sensors and environmental sensors such as a temperature sensor and / or humidity sensor. In a case where the power source has a battery, the speed sensor (torque sensor) and the fuel sensor may be omitted. Additionally, depending on the type of battery, other sensors may be included such as water sensors, chemical sensors, odor sensors etc. (to detect leakage).

[0070] The communication interface(s) 210 may be any of the above-mentioned interfaces including serial bus such as ARINC 429, 422, 485 interfaces. Each power source may communicate with the SCU 100. In an aspect of the disclosure, a power source may receive a command from the SCU 100 via the communication interface 210 and transmit the sensor values to the SCU 100 via the communication interface 210.

[0071] In other aspects, each power source may also communicate with the PDMS 10 via the communication interface 210 (not shown in Fig. 3). For example, in some aspects, each power source may transmit the sensor values to the PDMS 10 (control unit 12).

[0072] Fig. 4 illustrates a block diagram of an example of a load (e.g., load 1 25A) in accordance with aspects of the disclosure. However, the components of a load will vary based on the type of load. A load may comprise a power sink (e.g., motors and / or turbines 310), lights, fans, pumps, etc.. a load controller with a plurality of sensors 300B and communication interface(s) 210. The load controller with a plurality of sensors 300B also will depend on the type of power sink. For example, if the power sink includes a motor, the sensors may include a speed sensor and / or a torque sensor, voltage and / or current sensors and environmental sensors such as a temperature sensor and / or humidity sensor. The motor may be an electric machine such as permanent magnet such as surface permanent magnet or interior permanent magnet. However, other types of electric machines may be used such as wound-field, induction, synchronous reluctance (SynR), axial flux machines and switched reluctance. The types of motors used are not limited to the above and other machine suitable to convert electrical energy into mechanical motion may be used. Magnetic sensors may also be used as one of the sensors.

[0073] The communication interface(s) 210 may be any of the above-mentioned interfaces including serial bus such as ARINC 429, 422, 485 interfaces. A load controller 300B within the load may communicate with the SCU 100. In an aspect of the disclosure, a load controller 300B may receive a command from the SCU 100 via the communication interface 210 and transmit the sensor values to the SCU 100 via the communication interface 210. In an aspect of the disclosure, the load controller 300B may be a motor controller and the mover 350 may be a motor.

[0074] In other aspects, each load controller may also communicate with the PDMS 10 via the communication interface 210 (not shown in Fig. 4). For example, in some aspects, each load controller 300B may transmit the sensor values to the PDMS 10 (control unit 12).

[0075] Typically, the control circuitry 260 in a circuit protection unit 15A is isolated from the activities outside of the circuit protection unit 15A and therefore as long as the voltagc / currcnt etc. does not exceed the fixed analog thresholds, respectively, the disconnect 255 is maintained in a controlled state (e.g., closed). However, in accordance with aspects of the disclosure, the SCU 100, via the control unit 12 in the PDMS 10, is able to control the state of the disconnect 255 based on system-level faults such as in the source or load (or in other system or itself). Additionally, the control unit 12 may also control the state of the disconnect 255 based on determined faults. These faults are collectively referred to herein as “non-damaging incorrect operation”. This results in a remote control of the disconnect 255.

[0076] In an aspect of the disclosure, a disconnect 255 is normally in an opened position until the SCU 100 dispatches a load (e.g., load 1 25A). For example, the SCU 100 may transmit an instruction to the control unit 12 via the communication interface 210 to close the disconnect 255 for a specific load. The instruction may include a unique identifier for the load (e.g., load 1 25A). In an aspect of the disclosure, dispatching the load (e.g., load 1 25 A) also dispatches the corresponding source (e.g., High Voltage Power Source 1 30A) (in the load / source pair).Therefore, in an aspect of the disclosure, the SCU 100 may only include the identifier of the load (and not both identifiers of the load and source). In other aspects, the SCU 100 may include both identifiers in the instruction to the control unit 12. In response to receiving the instruction, the processor 200 issues an instruction via the communication interface 210 to the control circuitry 260 to close the disconnect 255 in the circuit protection unit 15 A for the load / source pair (source and load). In an aspect of the disclosure, the memory 205 stores a correspondence between each load and its corresponding source, respectively. Thus, the processor 200 sends two instructions: one to the control circuitry 260 in the source and one to the control circuitry 260 in the load.

[0077] After the load / source are connected, the processor 200 may transmit a confirmation signal to the SCU 100.

[0078] Fig. 5 illustrates a method of remoting controlling the disconnect 255 executed by the processor 200 in accordance with aspects of the disclosure.

[0079] In an aspect of the disclosure, once a load (e.g., load 1 25 A) is dispatched, the SCU 100 may periodically transmit a signal to the PDMS 10, e.g., a heartbeat. This heartbeat may be used as a confirmation that the communication link between the SCU 100 and the PDMS 10 is operational. In some aspects of the disclosure, the heartbeat may include state informationregarding the state of each disconnect 255, e.g., closed. In other aspects of the disclosure, the heartbeat may include information regarding the control of each source and / or load, e.g., commanded power level, speed, torque, etc. While in the control method illustrated in Fig. 5, the processor 200 does not use this control information to remotely control the disconnect 255 because the SCU 100 determines how to control the disconnect 255 using this information, in other aspects, the processor 200 may alternatively and / or additionally remotely control the disconnect 255 using this information. For example, the dual control (SCU 100 and PDMS 10) may provide redundancy (redundant control).

[0080] In other aspects, the heartbeat may also include respective sensor values from sensors 300A in the source and from the load controller with the sensors 300B in the load, e.g., voltage, current, temperature, speed, torque, etc. Once again, while in the control method illustrated in Fig. 5, the processor 200 does not use the sensor values in the load / source to remotely control the disconnect 255 because the SCU 100 determines how to control the disconnect 255 using the sensor values (in the load / source), in other aspects, the processor 200 may alternatively and / or additionally remotely control the disconnect 255 using this information.

[0081] In addition to the heartbeat (or in some aspects, alternatively), the SCU 100 transmits an instruction to the processor 200 to execute a specific task. One of the instructions is the dispatch instruction as described above. Additionally, the instruction could be to open a specific disconnect 255 (pair of disconnects) in response to a fault determination (at the SCU 100), close a specific disconnect that was previously opened due to a fault (fault cleared) or open because the load (load / source pair) is no longer needed. In some aspects, the instruction may be included in the heartbeat.

[0082] At S500, the processor 200 determines whether there is a failure in the communication link between the SCU 100 and the PDMS 10. This determination may be based on missing one or more expected instructions from the SCU 100 (or missing one or more periodic heartbeats). For example, the determination may be based on a time since the receipt of any instruction / information from the SCU 100. However, even if the processor 200 determines that there is a “failure” in the communication link between the SCU 100 and the PDMS 10, the processor 200 may not cause the disconnect 255 open. In some aspects, there is application specific criteria for opening the disconnect 255 in a case of a “failure” in the communication link between the SCU 100 and the PDMS 10. For example, there may be a persistency requirement.This avoids a situation where there may be repeated opening / closing of the disconnect 255 in a case of intermittent communication loss. Application specific criteria may also include the type of load / source dispatched (e.g., having the disconnect 255 closed) such as whether the load is mission critical, the operation point of the load or source, etc.... The application specific criteria may be determined by a user, operator, designer, manufacturer of the system 1 during a calibration phase. In some aspects, the application specific criteria may be updated during operation.

[0083] In a case where the processor 200 determines that there is a failure in the communication link between the SCU 100 and the PDMS 10 which meets the application specific criteria (“Y” at S500), the processor 200 issues a command / signal to the control circuitry 260 to open the disconnect 255 at S504. For example, the processor 200 sends, via the communication interface 210, a signal to the circuit protection unit 15A. The signal may be received by logic in the control circuitry, which upon receipt, causes the disconnect 255 to open. For example, the logic may be an OR gate, which the input from the processor 200 is sent to one terminal of the OR gate while signals from the local detection circuits are sent to the other terminals (overvoltage, overcurrent, over -^). The signal from the processor 200 effectively is an override signal, which causes the disconnect 255 to open even though the local fault detection circuits do not detect fault.

[0084] In an aspect of the disclosure, the command / signal may be sent to any load / source pair having the disconnect 255 closed (e.g., any dispatched load / source pair). However, in other aspects, since the application specific criteria may be load (or source) specific, the command / signal may also be sent to a sub-set of load / source pairs where the application specific criteria were satisfied for the load or source. Therefore, the processor 200 in S500 may make the determination for each load / source pair separately. In an aspect of the disclosure, the memory 205 stores a dispatch status indicating which load / source pairs are dispatched. The processor 200 retrieves the status information to determine which load / source pairs are dispatched to send the command / signal .

[0085] Once a disconnect 255 is opened, the disconnect 255 remains open until the PDMS 10 receives another dispatch instruction from the SCU 100 (see S518). When the communication link is restored, the processor 200 may transmit a signal to the SCU 100 indicating a prior loss of communication event. This signal may include a timestamp when the loss of communication wasdeclared. Additionally, the signal may include all states of each disconnect from load / source pairs. When the processor 200 causes the state of the disconnect 255 to be changed, the processor 200 may update the status information in the memory 205.

[0086] In a case where the processor 200 determines that there is no failure in the communication link between the SCU 100 and the PDMS 10 (or if the failure does not meet the application specific criteria) (“N” at S500), the processor 200 determines whether a fault indication has been received from the SCU 100 at S502. Fig. 6 shows examples of faults (nondamaging incorrect operation) which the SCU 100 determines. The SCU 100 sends an instruction to the processor 200 at S614. In some aspects, the instruction may include a specific notification of the non-damaging incorrect operation. However, in other aspects, the instruction may just include the identifier of the load and / or source associated with the non-damaging incorrect operation. In other aspects of the disclosure, the non-damaging incorrect operation may be system- wide and impact all dispatched load / source pairs.

[0087] In a case where the instruction is received, the processor 200 may examine the instruction to determine if any specific identifier is included. In a case where no identifier is included, the processor 200 issues a command / signal to all load / source pairs which are dispatched to open the disconnect 255 at S504, respectively. The processor 200 interprets the instruction to indicate a system wide non-damaging incorrect operation. The processor 200 may retrieve the identifiers of all of the load / source pairs which are dispatched from the status information in memory 205. In a case where the instruction from the SCU 100 includes one or more identifiers of a dispatched load, the processor 200 determines the corresponding source for the load / source pairs and issues a command / signal to each load / source pair identified in the instruction to open the disconnect 255 at S504, respectively. For example, the processor 200 searches the memory 205 for the identifiers of the corresponding source to the indicated load, respectively. In a case where the instructions include one or more pairs of identifiers of dispatched load / sources, the processor 200 issues a signal to each load / source pair in the instruction to open the disconnect 255 (at S504).

[0088] When no instruction is received from the SCU 100 indicating a non-damaging incorrect operation (“N” at S502), the processor 200 acquires local sensor values from the sensors 250A at S510. The local sensor values may be the local environmental information such as temperature and / or humidity. At S512, the processor 200 determines whether the acquiredlocal sensor values is within an allowable range. Fig. 5 at S512 lists “temperature”, however, at S512, the processor 200 may examine any local environment condition. In some aspects of the disclosure, the allowable range is stored in memory 205. The allowable range may be application specific such as based on the specific components in the control unit 12. For example, different components may operate differently at different temperature / humidity levels. The allowable range may be determines based on part specifications. When the processor 200 determines that the condition is out of range (“N” in S512), the processor 200 issues a command / signal to all dispatched load / source pairs to open the disconnect 255 at S504. The declaration of “out of range” may have application specific criteria including persistence before the processor 200 declares itself out of the allowable range.

[0089] The processor 200 may retrieve the identifiers of all of the load / source pairs which are dispatched from the status information in memory 205. After transmission of the command / signal, the processor 200 updates the status information in memory 205. Additionally, after transmission of the command / signal to the dispatched load / source pairs, the processor 200 also transmits a notification to the SCU 100 indicating all dispatched load / source pairs are disconnected.

[0090] In some aspects, the instead of causes the disconnects 255 to open in response to the local conditions being out of range, the processor 200 issues a notification to the SCU 100. This notification may include the local sensor values. In response to receipt of the notification, the SCU 100 may change one or more operating commands to the dispatched load / source pairs. In other aspects, the SCU 100 may issue a fault indication to the PDMS 10 (received at S502) which cause the processor 200 to open the disconnects 255. In this aspect, the SCU 100 maintains final control authority.

[0091] In some aspects, the system 1 may have redundant control paths, e.g., multiple control units 12 or PDMS 10. Therefore, in a case where the local conditions are out of range in one of the control units 12, another control path takes over.

[0092] When the local conditions (local to the control unit 12) a e within range (“Y” at S512), the processor 200 acquires local sensor values from the circuit protection unit 15A for each dispatched load and source. The sensor values from each circuit protection unit 15A may be separately acquired. In some aspects of the disclosure, the sensor values from a specific circuit protection unit 15A may include a unique identifier such that the processor 200 may know whichcircuit protection unit 15A the sensor values are associated with. The received sensor values may be temporarily stored in the memory 205. This is because there may be a temporal component associated with a specific digital threshold stored in memory 205, e.g., a current over time.

[0093] At S516, for each dispatched source and load, the processor 200 determines, based on the received sensor values and corresponding stored digital thresholds, whether the sensor value, respectively, is out of a reconfigurable range (adjustable digital thresholds). Reconfiguring the range will be described later.

[0094] For example, in S516, the processor 200 may determine over current, under current, di ' over voltage, under voltage, over — . Since the digital current threshold may be a I T curve, the processor 200 may also use stored sensor values to declare over current based on the digital current threshold. The specific digital thresholds and rating of the circuit protection unit 15A is application specific. In an aspect of the disclosure, different circuit protection units 15A have different ratings and different digital thresholds (and reconfiguring).

[0095] In a case where the processor 200 determines that a sensor value from a dispatched load (via the load controller) or source is out of range, the processor 200 issues a command / signal to the control circuitry 260 for that specific dispatched load or source to open the disconnect 255 at S504. In aspect of the disclosure, the processor 200 also issues a command / signal to the control circuitry 260 for the other load or source in the dispatched pair to also open the disconnect 255 at S504 even though the other load or source may not have a sensor value of out of range. The processor 200 determines the other load or source based on the identifier from the memory 205. The processor 200 also updates the status information in the memory 205. Additionally, the processor 200 also issues a notification to the SCU 100. In an aspect of the disclosure, the processor 200 in this notification may include the reason for the disconnection. The reason may include the sensor value and the corresponding digital threshold.

[0096] In response to receipt of this notification, the SCU 100 may determine that the load / source pair should be reconnected (e.g., disconnects 255 closed) and issue an instruction to the processor 200.

[0097] As described above, once the disconnect 215 for any load / source pair is opened, the processor 200 waits for further instructions regarding the load / source pair. At S506, the processor 200 determines whether a notification has been received from the SCU 100 that the determined non-damaging incorrect operation has been cleared. It is the responsibility of the SCU 100 toclear a fault. Tn response to receiving a notification that the determined non-damaging incorrect operation has been cleared, the processor 200 waits to receive another dispatch instruction for the load / source pair at S508. The processor 200 enables the disconnect 255 to be closed without closing the disconnect 255. If the notification is not received (“N” at S506), the processor 200 continued to wait for the notification and maintains the disconnect 255 in an opened state.

[0098] At S518, the processor 200 determines whether an instruction from the SCU 100 has been received to reconnect the load / source pair, e.g., a new dispatch instruction for the same pair. The dispatch instruction may be the same as described above and include the identifier of one or both of the load or source. In response to receiving the dispatch instruction (“Y” at S518), the processor 200 issues a command / signal to the control circuitry 260 in the circuit protection unit 15 A, respectively, associated with the load / source pair identified in the dispatch instruction to close the disconnect 255. After the disconnect 255 is closed, the processor 200 may transmit a confirmation to the SCU 100. If at S518, the processor 200 determines that the dispatch instruction is not received (“N” at S518), the processor 200 waits for the dispatch instruction to close the disconnect 215 at S522 and repeats the determination at S518.

[0099] If at S516 all sensor values are within range (“N” at S516), the process returns to S500.

[0100] In other aspects of the disclosure, each circuit protection unit 15 A further includes a processor and memory and S516 in Fig. 5 is performed within the circuit protection unit 15A.

[0101] Fig. 6 illustrates a method for the SCU 100 to remotely control the disconnect 255 via the control unit 12 in the PDMS 10 in accordance with aspects of the disclosure. In Fig. 6, the processor in the SCU 100 executes the features, however, for brevity of the description, the following description describes that the SCU 100 executes these features. At S600, the SCU 100 begins a control of a load / source pair or to change the control of a dispatched load / source pair (e.g., such as in response to receiving input from the HMI 50). For example, the input may be for a new propulsion or a change in the propulsion. The input may be to turn on the lights, change the cooling temperature from an HVAC system, refrigerator, etc. Additionally, the input may also be to increase the How of fluid in a coolant system. These are non-exclusive examples.

[0102] In response to receipt of this input, the SCU 100 determines the load / source pair or pairs associated with this input and determines if the same is already dispatched. The SCU 100 also contains a memory storing a dispatch status for each load / source pair. When the SCU 100determines that the load / source pair is not dispatched, the SCU 100 issues an instruction to the control unit 12 in the PDMS 10 to dispatch the load / source pair at S602 (e.g., to close the disconnect(s) 255). When the SCU 100 determines that the load / source pair(s) are dispatched, the SCU 100 may transmit an instruction to the control unit 12 in the PDMS 10 to maintain the disconnect(s) 255 closed at S602. The SCU 100 also determines a command to send to the load / source pair to cause the load / source pair to execute the same. At S602, the SCU 100 transmits a command to the load (e.g., load 1 25a) (such as to the load controller 300B and source (e.g., High Voltage Power Source 1 30A) in the load / source pair. After the commands are respective sent via the communication interface(s) to the load / source pair, the SCU 100 waits for operation information from the respective sensors 300A (load controller with the sensors 300B in the load / source pair.

[0103] At S603, the SCU 100 determines whether there is a communication failure in the communication link(s) between the SCU 100 and the load (e.g., load 1 25A) and / or in the source (e.g., high voltage power source 1 30A) for any dispatched load / source pair. In an aspect of the disclosure, once a load / source pair is dispatched, the load (e.g., load 1 25A) and the source (e.g., High Voltage Power Source 1 30A) may periodically transmit a signal to the SCU 100, e.g., a heartbeat (such as via the load controller in the load). This heartbeat may be used as a confirmation that the communication link(s) are operational. The heartbeat may include sensor values.

[0104] The SCU 100 may determine failure in a communication link based on missing one or more expected sensor values from the load (e.g., load 1 25A) and / or the source (e.g., High Voltage Power Source 1 30A) (or missing one or more periodic heartbeats). For example, the determination may be based on a time since the receipt of any sensor values. However, even if the SCU 100 determines that there is a “failure” in the communication link between the SCU 100 and the load (e.g., load 1 25A) (such as to the load controller) or between the SCU 100 and a source (e.g., High Voltage Power Source 1 30A), the SCU 100 may not cause the disconnect 255 open. In some aspects, there is application specific criteria for opening the disconnect 255 in a case of a “failure” in the communication link. For example, there may be a persistency requirement. This avoids a situation where there may be repeated opening / closing of the disconnect 255 in a case of intermittent communications loss. Application specific criteria may also include the type of load / source dispatches (e.g., having the disconnect closed) such aswhether the load is mission critical, the operation point of the load or source. The application specific criteria may be determined by a user, operator, designer, manufacturer of the system during a calibration phase. In some aspects, the application specific criteria may be updated during operation.

[0105] In a case where the SCU 100 determines that there is a failure in the communication link between the SCU 100 and the load (e.g., load 1 25A) (such as to the load controller) or between the SCU 100 and a source (e.g., High Voltage Power Source 1 30A), which meets the application specific criteria (“Y” at 603), the SCU 100 may issue an instruction to the control unit 12 in the PDMS 10 to cause the disconnect(s) 255 to open at S614 for the dispatched load / source pair(s). In some aspects, only the load / source pair with the failure in the communication link(s) may be disconnected. In other aspects, other load / source pairs in a same sub-system may also be disconnected. In other aspects, the SCU 100 may change the commands sent to other load / source pairs in a same sub-system to account for the disconnection of the load / source pair to maintain overall system level performance. For example, if an input is for a specific propulsion, the SCU 100 may increase the power from other load / source pairs to account for the drop from the disconnected load / source pair.

[0106] When there is no failure in the communication link(s), the SCU receives the operational information from the sensors 300A and the load controller with the sensors 300B in each dispatched load / source pair (related to the command) at S604.

[0107] At S606, the SCU 100 determines whether each load / source pair is operating as controlled. The determination may be made on a load / source pair basis and a separate determination for the source (e.g., High Voltage Power Source 1 30A) and the load (e.g., load 1 25A). For example, a motor drive command to a motor controller may instruct a motor in the load (e.g., Load 1 25 A) to operate at a fixed speed or torque; however, the speed or torque sensor may report, via the motor controller, that the motor is operated at another speed or torque. Similarly, a generator in the source (e.g., High Voltage Power Source 1 30A) (via its respective controller) may be instructed to provide a power of “X” W and is providing “C” W, different from “X” W. When there is a difference between the commanded and the measured operation, the SCU 100 may determine that a load or source is not operating as controlled. In some aspects, there is a tolerance between the commanded and measured operation before the SCU 100 declares a non-damaging incorrect operation. For example, the tolerance may be a percentage ofthe commanded valued. By way of non-limiting examples, the tolerance may be 5%, 2%, 1 %, etc. The tolerance may be operation specific. In other aspects, there may not be a tolerance and if there is any difference, the SCU 100 declares a non-damaging incorrect operation.

[0108] When the SCU 100 determines that either or both the load (e.g., Load 1 25 A) and source (e.g., High Voltage Power Source 1 30A) in a dispatched load / source pair are not operating as controlled (as defined above), the SCU 100 may issue an instruction to the control unit 12 in the PDMS 10 to cause the disconnect(s) 255 to open at S614 for the dispatched load / source pair. In some aspects, only the load / source pair not operating as commanded may be disconnected. In other aspects, other load / source pairs in a same sub-system may also be disconnected. In other aspects, the SCU 100 may change the commands sent to other load / source pairs in a same sub-system to account for the disconnection of the load / source pair to maintain overall system level performance.

[0109] When the dispatched load / source pair(s) are operating as controlled, the SCU 100 determines whether the environmental conditions (within a load (e.g., load 1 25 A) or source (e.g., High Voltage Power Source 1 30A)) for each dispatched load / source pair are within an allowable range using sensor values received at S604 (such as via the load controller). The sensor values examined at S608 may be the environmental information such as temperature and / or humidity. In some aspects of the disclosure, the allowable range is stored in memory in the SCU 100. The allowable range may be application specific such as based on the specific components in each load or source. For example, different components may operate differently at different temperature / humidity levels. The allowable range may be determines based on part specifications in each load or source. The declaration of “out of range” may have application specific criteria including persistence before the SCU 100 declares a load and / or source out of the allowable range.

[0110] When the SCU 100 determines that the load (e.g., load 1 25A) and / or source (e.g., High Voltage Power Source 1 30A) in a dispatched load / source pair are out of the allowable range of a specific environment condition (as defined above), the SCU 100 may issue an instruction to the control unit 12 in the PDMS 10 to cause the disconnect(s) 255 to open at S614 for the dispatched load / source pair. In some aspects, only the load / source pair not operating as commanded may be disconnected. In other aspects, other load / source pairs in a same sub-system may also be disconnected. In other aspects, the SCU 100 may change the commands sent toother load / source pairs in a same sub-system to account for the disconnection of the load / source pair to maintain overall system level performance.

[0111] The SCU 100 also determines whether local environmental conditions (local to the SCU 100) are out of range. In an aspect of the disclosure, the SCU 100 also includes environmental sensors. The allowable range may be stored in memory in the SCU 100. The allowable range may be application specific such as based on the specific components in the SCU 100. For example, different components may operate differently at different temperature / humidity levels. The allowable range may be determined based on part specifications. When the SCU 100 determines that the condition is out of range (“Y” in S610), the SCU 100 issues an instruction to the control unit 12 in the PDMS 10 to open all dispatched load / source pairs at S614. Given the importance of the SCU 100, the declaration of “out of range” will likely include a persistence requirement for the SCU 100 declares itself out of the allowable range.

[0112] The system 1 may have redundancy. In an aspect of the disclosure, the SCU 100 in response to a local environmental condition becoming out of range, the SCU 100 may report the condition to a redundant controlled which may takeover control instead of instructing the opening of the disconnects 255.

[0113] At S612, the SCU 100 examines additional sensor values from the sensors 300A and the load controller with the sensors 300B at the load and source in each dispatched load / source pair. This examination includes looking at the current and voltage from the current and voltages sensor. The SCU 100 looks for overvoltage, undervoltage, over current and under current and over conditions. These conditions may be based on the commands to the dispatched load / source pair, e.g., the command to the respective load or source may lead to an expectation for a measured current or voltage. For example, for a specific command to a load (via the load controller), the SCU 100 may expect to have “Y” A of current measured. The measured current by a current sensor may be 0.5 “Y” A (half of the expected value). In this case, the SCU 100 may declare a non-damaging incorrect operation. In some aspects, there may be a tolerance between the expected value and measured value before the SCU 100 declares a non-damaging incorrect operation. For example, the tolerance may be a percentage of the expected valued. By way of non-limiting examples, the tolerance may be 5%, 2%, 1%, etc. The tolerance may be operation specific. In other aspects, there may not be a tolerance and if there is any difference, the SCU100 declares a non-damaging incorrect operation.

[0114] At S613, the SCU 100 determines whether there is an intermittent load pulsation at a load (e.g., Load 1 25A). When the SCU 100 determines that there is an intermittent load pulsation (“Y” at S613), the SCU 100 may declare a non-damaging incorrect operation and issues an instruction to the processor 200 in the control unit 12 at S614. Otherwise, the process is repeated (returns to S600).

[0115] Once the SCU 100 declares a non-damaging incorrect operation and issues an instruction to the control unit 12 in the PDMS 10 (and the disconnect(s) 255) are open, the disconnect(s) 255 are maintained open until the non-damaging incorrect operation is fixed (e.g., fault is cleared). The time to clear the fault may be fault specific. For example, the “failure in communication link” may be cleared once the communication is reestablished via the communication link (such as for another application specific criteria). For other faults, the SCU 100 continues to receive operation information from the sensors 300A and the load controller with the sensors 300B and local environmental sensors even after the non-damaging incorrect operation has been declared and the determinations in S606, S608, S610 and S612 may be periodically repeated to clear the fault.

[0116] When an “out of range” value returns to being “in range”, the SCU 100 may deem the fault to be cleared. In some aspects, there may be application specific criteria including a persistence for the fault to be cleared (remain “in range”).

[0117] The SCU 100 at S616 may declare the fault to be cleared when the above conditions (S606, S6O8, S610, and S612) meet application specific criteria for the non-damaging incorrect operation. The SCU 100 at S618 issues an instruction to the control unit 12 (processor 200) to cause an opened disconnect 255 to be closed if the load / source pair still needed to be dispatched based on an input.

[0118] Figs. 5 and 6 show non-exhaustive examples of non-damaging incorrect operations and determinations thereof, however, there may be other examples, which may be used to remotely control the disconnect 255.

[0119] The digital thresholds described above, for determining a non-damaging incorrect operation, may be changed (adjusted) during operation to reflect the real-time operating conditions of the load (e.g., load 1 25A) and source (e.g., High Voltage Power Source 1 30A) in each dispatched load / source pair.

[0120] Fig. 7 illustrates a method for digital threshold management and control in accordance with aspects of the disclosure. At S700, the initial values for the digital thresholds may be set. As described above, the digital thresholds may be used by the PDMS 10 to determine whether a non-damaging incorrect operation exists. The initial values for the digital thresholds may be defined based on the rating of each circuit protection unit 15A (which is based on the load / source it is connected to). The rating (and thus, digital thresholds) may be different for different circuit protection units 15 A. The rating for each circuit protection unit 15 A is designed and set during a configuration phase by a designer, manufacturer and / or an end user. The ratingmay be based on the expected current, voltage, , etc of the load (e.g., load 1 25A) or source(e.g., High Voltage Power Source 1 30A). This rating impacts both the design of the analog detection circuits as described above and the digital thresholds. In some aspects, the disconnect 255 may be set to open at a preset percentage of the rating. There may be a current rating and a voltage rating. The current rating (or preset percentage derating) may define a I2t curve (or Imax). The initial values for digital thresholds, such as for current may be a shifted I2t curve (or Imax) from the same used to design the analog circuits. For example, the I2t curve may be shifted downward (including Ima ) and leftward. A similar setting may be done for the voltage. The I2tcurve defines both a max current trip function and a trip function. In an aspect of thedisclosure, the memory 205 also stores the properties of the load and / or source used to generate the rating(s) for each circuit protection units 15 A.

[0121] The initial values for the digital thresholds for each circuit protection units 15A may be stored in memory 205. The memory 205 may have an identifier associated with each circuit protection unit 15A and its associated digital thresholds.

[0122] Once these initial values for the digital thresholds are set and stored, they may be periodically updated by the PDMS 10 based on real time information. The periodic update may be included in the control in Fig. 5 or a separate parallel feature.

[0123] At S702, the processor 200 receives sensor values from the sensors 250 in each circuit protection units 15A. In some aspect, S702 is the same as S514 and prior to the determination in S516, the processor 200 executes S706 and S708. At S706, the processor 200 determines a difference between the values received in S702 and the corresponding values used to set the initial rating(s), respectively, for each circuit protection unit 15A. The processor 200retrieves, from memory 205, the stored properties of the load and / or source for each, used to generate the rating(s) for each circuit protection units 15A, and generates a respective difference for each circuit protection unit 15A. In some aspects of the disclosure, the processor 200 may convert this difference into a percentage of the stored values. The percentage may be used as a multiplier to change the rating(s) of the circuit protection unit 15 A.

[0124] At S708, the processor 200 adjusts the stored digital thresholds based on the determination at S706. For example, the processor 200 may translate the I2t downward and to the left based on the percentage.

[0125] In other aspects of the disclosure, at S702, instead of using the sensor values from the sensors 250, the processor 200 may receive the sensor values from sensors 300A and load controller with sensors 300B at the load (e.g., Load 1 25A) and / or the source (e.g., High Voltage Source 1 30A), and determine the difference at S706 using the real-time values for operating conditions in the load / source pair.

[0126] In other aspects of the disclosure, at S706, the processor 200 may only examine the real-tine conditions at each load rather than both the load and the source.

[0127] In other aspects, the SCU 100 determines any adjustments to the digital thresholds using the received sensor values from sensors 300A and the load controller with sensors 300B and transmits the determined adjustments to the control unit 12 (processor 200) via the communication interface.

[0128] Figs. 8 and 9 illustrate another method for digital threshold management and control in accordance with other aspects of the disclosure. The difference between the method illustrated in Fig. 7 and Figs. 8 and 9 is that in Figs. 8 and 9, the processor at each circuit protection unit 15A determines whether to open a respective disconnect 255 using the initial values for the digital thresholds and the adjusted values for the digital thresholds.

[0129] The ratings (current, voltage, ) may be set at the control unit 12 and stored in memory 2045, At S800, the processor 200 may transmit the initial rating(s) to a processor 200A in the circuit protection unit 15 A. The initial rating(s) may be received at the processor 200A in the circuit protection unit 15A via the communication interface 210 at S900. The processor 200A stores the initial rating(s) in memory 1105 and determines the initial values for the digital thresholds at S905 in a similar manner as described above. The determined initial values for the digital values are respectively stored in the memory 1105.

[0130] In this case, the processor 200A, using the initial values of the digital thresholds may determine whether to open the disconnect at S915 using received sensor values from the sensors 250 (received for further processing). The sensor values are received at S910. If the processor 200A determines that the real time sensor values are out of one of the initial values for the digital thresholds, the processor 200A may cause the disconnect 255 to open via issuing a signal to the control circuitry 260, e.g., to the logic.

[0131] The processor 200 (at the control unit 12) receives the sensors values from each set of sensors 250, respectively, from each circuit protection unit 15 A, determines the difference and adjusts the rating of the circuit protection unit 15A based on the difference at S706. At S802, the processor 200 transmits the adjusted rating to processor 200A via the communication interface 210.

[0132] The processor 200A determines whether an update rating(s) has been received at S925. In response to receiving an updated rating (“Y”) at S925, the processor 200A determines the adjusted (updated) values for the digital thresholds at S930 and S910, S915 and S920 are repeated for the adjusted values.

[0133] In other aspects of the disclosure, the initial rating(s) may be set to the processor 200A in each circuit protection unit 15A, the updated of the rating(s) is determined by processor 200A in each circuit protection unit 15A and the determination whether to open the disconnect 255 based on the digital thresholds and sensor values may be determined by the processor 200A.

[0134] Figs. 10 and 11 illustrate examples of the remote control / configuration path in the PDMS 10 in accordance with aspects of the disclosure to control a switch 1020 to open or close. In Fig. 11, there are a processor 200A and memory 1105A in the control circuitry 310A. In the example in Fig. 10, the control circuitry 260 does not have a processor / memory. In Fig. 10, the processor 200 issues a command / signal to the logic 1005 via a digital to analog converter 1000. In Fig. 11, the processor 200 issues a signal with information to the processor 200A of the control circuitry 260A. The processor 200A uses the information in the signal to determine whether to open / close the switch 1020. The processor 200 or processor 200A is used to supplement the local fault detections from the fault detection circuits, e.g., fault detection circuit 1 1010A and fault detection circuit 2 1010B. As described above, the logic may include an OR gate. The output of the OR gate is supplied to a gate driver circuit 1015 to drive the switch 1020. In Fig. 10, an analog to digital converter 1025 would convert the sensor values from sensors 250into digital values for processor 200 and in Fig. 11 , an analog to digital converter 1025 would convert the sensor values from sensors 250 to digital values for the processor 200A.

[0135] As described herein, sensors in the load may be incorporated into a load controller and communicate via the same. However, in other aspects, the sensors may be standalone and communicate without using the load controller. In an aspect of the disclosure, the sensors 300A in the power source communicate without using “a controller” in the power source. However, in other aspects, the sensors may be incorporated into a source controller and communicate via the same.

[0136] In accordance with a first aspect, a power distribution management system (PDMS) comprises a circuit protection unit and a control unit. The circuit protection unit comprises a communication interface, at least one disconnect configured to open or close an electrical path between a source and a load, and a set of first sensors configured to detect states of the electrical path, respectively. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The control unit comprises a first control unitcommunication interface configured to communicate with the communication interface in the circuit protection unit and a processor configured to cause the at least one disconnect to open the electrical path in response to a determination of a non-damaging incorrect operation.

[0137] In accordance with a second aspect, the PDMS according to the first aspect, wherein the control unit further comprises a second control unit-communication interface configured to communicate with a system control unit (SCU). In response to a loss of communication with the SCU which meets an application specific criterion, the processor may determine that a nondamaging incorrect operation exists and cause the at least one disconnect to open the electrical path.

[0138] In accordance with a third aspect, the PDMS according to the first aspect or the second aspect, wherein the processor may receive the determination that a non-damaging incorrect operation exists from the SCU via the second control unit-communication interface. In response to receipt of the determination, the processor causes the at least one disconnect to open.

[0139] In accordance with a fourth aspect, the PDMS according to the first aspect, the second aspect or the third aspect, wherein the control unit may further comprise at least one local sensor. Each local sensor is configured to detect a local condition within the control unit. The processor may be configured to determine a non-damaging incorrect operation based on the detection ofeach local sensor.

[0140] In accordance with a fifth aspect, the PDMS according to the fourth aspect, wherein the processor may determine that a non-damaging incorrect operation exists when a detection result from a local sensor of the at least one local sensor indicates the local condition is out of range. In response to this detection result, the processor may cause the disconnect to open.

[0141] In accordance with a sixth aspect, the PDMS according to any one of the first to fifth aspects, wherein the processor may determine whether there is a non-damaging incorrect operation based on detections from the set of first sensors and a rating of the circuit protection unit determined based on the load.

[0142] In accordance with a seventh aspect, the PDMS according to any one of the first to sixth aspects, wherein when the non-damaging incorrect operation is cleared, the processor waits to receive an instruction to close the at least one disconnect from the SCU to close the at least one disconnect.

[0143] In accordance with an eighth aspect, the PDMS according to any one of the first to seventh aspects, wherein the at least one disconnect is at least one solid state switch and associated gate drive circuitry.

[0144] In accordance with a ninth aspect, the PDMS according to the eighth aspect, wherein the circuit protection unit may further comprise a digital to analog converter (DAC) configured to convert a control signal from the control unit to drive the gate drive circuitry.

[0145] In accordance with a tenth aspect, the PDMS according to the eighth aspect, wherein the circuit protection unit may further comprise a processor configured to receive a control signal from the control unit to drive the gate drive circuitry.

[0146] In accordance with an eleventh aspect, the PDMS according to the eighth aspect, wherein the circuit protection unit has a preset rating based on the load. The circuit protection unit further comprises protection circuitry configured based on the preset rating.

[0147] In accordance with a twelfth aspect, the PDMS according to the eleventh aspect, wherein the processor in the control unit may adjust the preset rating based on an operation of the load and output an adjusted rating.

[0148] In accordance with a thirteenth aspect, the PDMS according to the twelfth aspect, wherein the circuit protection unit may comprise a processor and storage having thresholds for determining whether to open the electrical path. The thresholds may be defined as a fixedpercentage above or below a rating for different monitored times.

[0149] In accordance with a fourteenth aspect, the PDMS according to the thirteenth aspect, wherein the processor in the circuit protection unit may change the thresholds in response to receiving the adjusted rating output from the processor in the control unit.

[0150] In accordance with a fifteenth aspect, a PDMS comprises a circuit protection unit and a control unit. The circuit protection unit comprises a communication interface, at least one disconnect configured to open or close an electrical path between a source and a load; a set of first sensors configured to detect states of the electrical path, respectively, protection circuitry. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The protection circuitry is electrically connected to the set of first sensors. The protection circuitry is configured with analog thresholds to open the electrical path. The analog thresholds are based on a preset rating of the circuit protection unit based on the load. The protection circuitry opens the electrical path when a detect state exceeds one or more of the thresholds. The control unit comprises a first control unit-communication interface and a processor. The first control unit-communication interface is configured to communicate with the communication interface in the circuit protection unit. The processor is configured to monitor operation of the load relative to an expected operation of the load used to determine the preset rating to update a rating and adjust digital thresholds for opening the at least one disconnect based on the monitored operation.

[0151] In accordance with a sixteenth aspect, the PDMS according to the fifteenth aspect, wherein the control unit may further comprise a storage configured to store the adjusted digital thresholds.

[0152] In accordance with a seventeenth aspect, the PDMS according to the fifteenth aspect, wherein the circuit protection unit may comprise a processor and storage having digital thresholds. The processor in the control unit may transmit the adjusted digital thresholds to the processor in the circuit protection unit whereby the stored digital thresholds are updated.

[0153] In accordance with an eighteenth aspect, the PDMS according to the seventeenth aspect, wherein the processor in the circuit protection unit may be configured to compare a detected state with the adjusted digital threshold, respectively, to determine whether to open the at least one disconnect.

[0154] In accordance with a nineteenth aspect, the PDMS according to the sixteenth aspect,wherein the processor in the control unit may be configured to receive detected states from the set of first sensors, respectively, and compare the detected state with a respective adjusted digital threshold to determine whether to open the at least one disconnect.

[0155] In accordance with a twentieth aspect, the PDMS according to any one of the fifteenth to nineteenth aspects, wherein the disconnect is at least one solid state switch and associated gate drive circuitry.

[0156] In accordance with a twenty-first aspect, a system comprises a power source, a load, a circuit protection unit, a first control unit and a system control unit (SCU). The circuit protection unit comprises a communication interface, at least one disconnect configured to open or close an electrical path between the power source and the load; and a set of first sensors configured to detect states of the electrical path, respectively. The electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault. The first control unit comprises a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit, a second control unit-communication interface configured to communicate with the SCU; and a first processor. The SCU comprises a load-communication interface configured to communicate with the load, a power sourcecommunication interface configured to communicate with the power source, and a system control-communication interface configured to communicate with the first control unit, and a second processor. The second processor is configured to determine a non-damaging incorrect operation of the system based at least in part on information from at least one of the load, the power source or the first control unit, respectively, received via the load-communication interface, the power source-communication interface or the system control-communication interface. In response to a determination of the non-damaging incorrect operation, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path to the first control unit. In response to receiving the instruction, the first processor causes the at least one disconnect to open.

[0157] In accordance with a twenty-second aspect, the system according to the twenty-first aspect, wherein there may be a plurality of pairs of power sources and loads, respective. There is at least one disconnect in an electrical path between a power source and load in each pair. In response to a determination of a non-damaging incorrect operation in a particular pair of power source and load, the second processor may be configured to transmit, via the system control-communication interface, an instruction to open the electrical path associated with the particular pair to the first control unit. In response to receiving the instruction, the first processor causes the at least one disconnect to open between the particular pair.

[0158] In accordance with a twenty-third aspect, the system according to the twenty-second aspect, wherein the SCU may be further configured to determine a non-damaging incorrect operation with itself. In response to a determination of a non-damaging incorrect operation with itself, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path for all of the plurality of pairs to the first control unit. In response to receiving the instruction, the first processor causes the at least one disconnect to open between all of the plurality of pairs.

[0159] In accordance with a twenty-fourth aspect, the system according to the twenty-first aspect, twenty-second aspect or twenty-third aspect, wherein the non-damaging incorrection operation is an over or under voltage, over or under current, over di / dt and / or over temperature.

[0160] In accordance with a twenty-fifth aspect, the system according any one of the twenty- first to twenty-fourth aspects, wherein the second processor may be configured to determine whether the non-damaging incorrect operation has been cleared. In response to a determination that the non-damaging incorrect operation has been cleared, the second processor is configured to transmit, the system control-communication interface, an instruction to close the electrical path between one or more pairs of power source and load based on current conditions to the first control unit.

[0161] In accordance with a twenty-sixth aspect, the system according any one of the twenty- first to twenty-fifth aspects, wherein the at least one disconnected is at least one solid state switch and associated gate drive circuitry.

[0162] In accordance with a twenty-seventh aspect, the system according to any one of the twenty-first to twenty-sixth aspects, wherein the power source or each power source is a high voltage DC power source.

[0163] As described herein, aspects of the present disclosure may include one or more electrical, pneumatic, hydraulic, or other similar secondary components and / or systems therein.

[0164] The present disclosure is therefore contemplated and will be understood to include any necessary operational components thereof. For example, electrical components will be understood to include any suitable and necessary wiring, fuses, or the like for normal operationthereof. Similarly, any pneumatic systems provided may include any secondary or peripheral components such as air hoses, compressors, valves, meters, or the like. It will be further understood that any connections between various components not explicitly described herein may be made through any suitable means including mechanical fasteners, or more permanent attachment means, such as welding or the like. Alternatively, where feasible and / or desirable, various components of the present disclosure may be integrally formed as a single unit.

[0165] Various inventive concepts may be embodied as one or more methods, of which an example has been provided. The acts performed as pail of the method may be ordered in any suitable way. Accordingly, embodiments may be constructed in which acts are performed in an order different than illustrated, which may include performing some acts simultaneously, even though shown as sequential acts in illustrative embodiments.

[0166] While various inventive aspects have been described and illustrated herein, those of ordinary skill in the ail will readily envision a variety of other means and / or structures for performing the function and / or obtaining the results and / or one or more of the advantages described herein, and each of such variations and / or modifications is deemed to be within the scope of the inventive aspects described herein. More generally, those skilled in the ail will readily appreciate that all parameters, dimensions, materials, and configurations described herein are meant to be exemplary and that the actual parameters, dimensions, materials, and / or configurations will depend upon the specific application or applications for which the inventive teachings is / are used. Those skilled in the art will recognize or be able to ascertain using no more than routine experimentation, many equivalents to the specific inventive aspects described herein. It is, therefore, to be understood that the foregoing aspects are presented by way of example only and that, within the scope of the appended claims and equivalents thereto, inventive aspects may be practiced otherwise than as specifically described and claimed.Inventive aspects of the present disclosure are directed to each individual feature, system, article, material, kit, and / or method described herein. In addition, any combination of two or more such features, systems, articles, materials, kits, and / or methods, if such features, systems, articles, materials, kits, and / or methods are not mutually inconsistent, is included within the inventive scope of the present disclosure.

[0167] The above-described aspects of the disclosure can be implemented in any of numerous ways. For example, aspects of technology disclosed herein may be implemented usinghardware, software, or a combination thereof. When implemented in software, the software code or instructions can be executed on any suitable processor or collection of processors, whether provided in a single computer or distributed among multiple computers. Furthermore, the instructions or software code can be stored in at least one non-transitory computer readable storage medium.

[0168] As used herein, the term “processor” may include a single core processor, a multicore processor, multiple processors located in a single device, or multiple processors in wired or wireless communication with each other and distributed over a network of devices, the Internet, or the cloud. Accordingly, as used herein, functions, features or instructions performed or configured to be performed by a “processor”, may include the performance of the functions, features or instructions by a single core processor, may include performance of the functions, features or instructions collectively or collaboratively by multiple cores of a multi-core processor, or may include performance of the functions, features or instructions collectively or collaboratively by multiple processors, where each processor or core is not required to perform every function, feature or instruction individually. For example, a single FPGA may be used, or multiple FPGAs may be used to achieve the functions, features or instructions described herein.

[0169] The various methods or processes outlined herein may be coded as software / instructions that is executable on one or more processors that employ any one of a variety of operating systems or platforms. Additionally, such software may be written using any of a number of suitable programming languages and / or programming or scripting tools, and also may be compiled as executable machine language code or intermediate code that is executed on a framework or virtual machine.

[0170] In this respect, various inventive concepts may be embodied as a computer readable storage medium (or multiple computer readable storage media) (e.g., a computer memory, one or more floppy discs, compact discs, optical discs, magnetic tapes, flash memories, USB flash drives, SD cards, circuit configurations in Field Programmable Gate Arrays or other semiconductor devices, or other non-transitory medium or tangible computer storage medium) encoded with one or more programs that, when executed on one or more computers or other processors, perform methods that implement the various embodiments of the disclosure discussed above. The computer readable medium or media can be transportable, such that the program or programs stored thereon can be loaded onto one or more different computers or otherprocessors to implement various aspects of the present disclosure as discussed above.

[0171] The terms “program” or “software” or “instructions” arc used herein in a generic sense to refer to any type of computer code or set of computer-executable instructions that can be employed to program a computer or other processor to implement various aspects of embodiments as discussed above. Additionally, it should be appreciated that according to one aspect, one or more computer programs that when executed perform methods of the present disclosure need not reside on a single computer or processor, but may be distributed in a modular fashion amongst a number of different computers or processors to implement various aspects of the present disclosure.

[0172] Computer-executable instructions may be in many forms, such as program modules, executed by one or more computers or other devices. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. Typically, the functionality of the program modules may be combined or distributed as desired in various embodiments. As such, one aspect or embodiment of the present disclosure may be a computer program product including least one non-transitory computer readable storage medium in operative communication with a processor, the storage medium having instructions stored thereon that, when executed by the processor, implement a method or process described herein, wherein the instructions comprise the steps to perform the method(s) or process(es) detailed herein.

[0173] Also, data structures may be stored in computer-readable media in any suitable form. For simplicity of illustration, data structures may be shown to have fields that are related through location in the data structure. Such relationships may likewise be achieved by assigning storage for the fields with locations in a computer-readable medium that convey relationship between the fields. However, any suitable mechanism may be used to establish a relationship between information in fields of a data structure, including through the use of pointers, tags or other mechanisms that establish relationship between data elements.

[0174] All definitions, as defined and used herein, should be understood to control over dictionary definitions, definitions in documents incorporated by reference, and / or ordinary meanings of the defined terms.

[0175] The articles “a” and “an,” as used herein in the specification and in the claims, unless clearly indicated to the contrary, should be understood to mean “at least one.” The phrase“and / or,” as used herein in the specification and in the claims (if at all), should be understood to mean “cither or both” of the elements so conjoined, i.c., elements that arc conjunctively present in some cases and disjunctively present in other cases. Multiple elements listed with “and / or” should be construed in the same fashion, i.e., “one or more” of the elements so conjoined. Other elements may optionally be present other than the elements specifically identified by the “and / or” clause, whether related or unrelated to those elements specifically identified. Thus, as a non-limiting example, a reference to “A and / or B”, when used in conjunction with open-ended language such as “comprising” can refer, in one embodiment, to A only (optionally including elements other than B); in another embodiment, to B only (optionally including elements other than A); in yet another embodiment, to both A and B (optionally including other elements); etc. As used herein in the specification and in the claims, “or” should be understood to have the same meaning as “and / or” as defined above. For example, when separating items in a list, “or” or “and / or” shall be interpreted as being inclusive, i.e., the inclusion of at least one, but also including more than one, of a number or list of elements, and, optionally, additional unlisted items. Only terms clearly indicated to the contrary, such as “only one of’ or “exactly one of,” or, when used in the claims, “consisting of,” will refer to the inclusion of exactly one element of a number or list of elements. In general, the term “or” as used herein shall only be interpreted as indicating exclusive alternatives (i.e. “one or the other but not both”) when preceded by terms of exclusivity, such as “either,” “one of,” “only one of,” or “exactly one of.” “Consisting essentially of,” when used in the claims, shall have its ordinary meaning as used in the field of patent law.

[0176] As used herein in the specification and in the claims, the phrase “at least one,” in reference to a list of one or more elements, should be understood to mean at least one element selected from any one or more of the elements in the list of elements, but not necessarily including at least one of each and every element specifically listed within the list of elements and not excluding any combinations of elements in the list of elements. This definition also allows that elements may optionally be present other than the elements specifically identified within the list of elements to which the phrase “at least one” refers, whether related or unrelated to those elements specifically identified. Thus, as a non-limiting example, “at least one of A and B” (or, equivalently, “at least one of A or B,” or, equivalently “at least one of A and / or B”) can refer, in one embodiment, to at least one, optionally including more than one, A, with no B present (and optionally including elements other than B); in another embodiment, to at least one, optionallyincluding more than one, B, with no A present (and optionally including elements other than A); in yet another embodiment, to at least one, optionally including more than one, A, and at least one, optionally including more than one, B (and optionally including other elements); etc.

[0177] While components of the present disclosure are described herein in relation to each other, it is possible for one of the components disclosed herein to include inventive subject matter, if claimed alone or used alone. In keeping with the above example, if the disclosed embodiments teach the features of components A and B, then there may be inventive subject matter in the combination of A and B, A alone, or B alone, unless otherwise stated herein.

[0178] When a feature or element is herein referred to as being “on” another feature or element, it can be directly on the other feature or element or intervening features and / or elements may also be present. In contrast, when a feature or element is referred to as being “directly on” another feature or element, there are no intervening features or elements present. It will also be understood that, when a feature or element is referred to as being “connected”, “attached” or “coupled” to another feature or element, it can be directly connected, attached or coupled to the other feature or element or intervening features or elements may be present. In contrast, when a feature or element is referred to as being “directly connected”, “directly attached” or “directly coupled” to another feature or element, there are no intervening features or elements present. Although described or shown with respect to one embodiment, the features and elements so described or shown can apply to other embodiments. It will also be appreciated by those of skill in the ail that references to a structure or feature that is disposed “adjacent” another feature may have portions that overlap or underlie the adjacent feature.

[0179] Although the terms “first” and “second” may be used herein to describe various features / elements, these features / elements should not be limited by these terms, unless the context indicates otherwise. These terms may be used to distinguish one feature / element from another feature / element. Thus, a first feature / element discussed herein could be termed a second feature / element, and similarly, a second feature / element discussed herein could be termed a first feature / element without departing from the teachings of the present invention.

[0180] If this specification states a component, feature, structure, or characteristic “may”, “might”, or “could” be included, that particular component, feature, structure, or characteristic is not required to be included. If the specification or claim refers to “a” or “an” element, that does not mean there is only one of the element. If the specification or claims refer to “an additional”element, that does not preclude there being more than one of the additional element.

[0181] As used herein in the specification and claims, including as used in the examples and unless otherwise expressly specified, all numbers may be read as if prefaced by the word “about” or “approximately,” even if the term does not expressly appear. The phrase “about” or “approximately” may be used when describing magnitude and / or position to indicate that the value and / or position described is within a reasonable expected range of values and / or positions. For example, a numeric value may have a value that is + / -0.1% of the stated value (or range of values), + / -1% of the stated value (or range of values), + / -2% of the stated value (or range of values), + / -5% of the stated value (or range of values), + / -10% of the stated value (or range of values), etc. Any numerical range recited herein is intended to include all sub-ranges subsumed therein.

[0182] Additionally, the method of performing the present disclosure may occur in a sequence different than those described herein. Accordingly, no sequence of the method should be read as a limitation unless explicitly stated. It is recognizable that performing some of the steps of the method in a different order could achieve a similar result. Additionally, the features may be performed at the same time.

[0183] In the claims, as well as in the specification above, all transitional phrases such as “comprising,” “including,” “carrying,” “having,” “containing,” “involving,” “holding,” “composed of,” and the like are to be understood to be open-ended, i.e., to mean including but not limited to. Only the transitional phrases “consisting of’ and “consisting essentially of’ shall be closed or semi-closed transitional phrases, respectively, as set forth in the United States Patent Office Manual of Patent Examining Procedures.

[0184] To the extent that the present disclosure has utilized the term “invention” in various titles or sections of this specification, this term was included as required by the formatting requirements of word document submissions pursuant the guidelines / requirements of the United States Patent and Trademark Office and shall not, in any manner, be considered a disavowal of any subject matter.

[0185] In the foregoing description, certain terms have been used for brevity, clearness, and understanding. No unnecessary limitations are to be implied therefrom beyond the requirement of the prior ail because such terms are used for descriptive purposes and are intended to be broadly construed.

[0186] Moreover, the description and illustration of various aspects of the disclosure are examples and the disclosure is not limited to the exact details shown or described. The terminology used herein is for the purpose of describing particular aspects only and is not intended to be limiting the scope of the disclosure and is not intended to be exhaustive. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the disclosure.

Claims

WHAT IS CLAIMED IS:

1. A power distribution management system (PDMS) comprising: a circuit protection unit comprising: a communication interface; at least one disconnect configured to open or close an electrical path between a source and a load; and a set of first sensors configured to detect states of the electrical path, respectively, wherein the electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault, and a control unit comprising: a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit; and a processor configured to cause the at least one disconnect to open the electrical path in response to a determination of a non-damaging incorrect operation.

2. The PDMS of claim 1, wherein the control unit further comprises a second control unitcommunication interface configured to communicate with a system control unit (SCU) and in response to a loss of communication with the SCU which meets an application specific criterion, the processor determines that a non-damaging incorrect operation exists and causes the at least one disconnect to open the electrical path.

3. The PDMS of claim 1 or claim 2, wherein the processor receives the determination that a non-damaging incorrect operation exists from a system control unit (SCU) via the second control unit- communication interface and in response to receipt of the determination, the processor causes the at least one disconnect to open.

4. The PDMS of any one of claims 1 to 3, wherein the control unit further comprises at least one local sensor, each local sensor configured to detect a local condition within the control unit, wherein the processor is configured to determine a non-damaging incorrect operation based on the detection of each local sensor.

5. The PDMS of claim 4, wherein the processor determines that a non-damaging incorrect operation exists when a detection result from a local sensor of the at least one local sensorindicates the local condition being out of range and in response, the processor causes the disconnect to open.

6. The PDMS of any one of claims 1 to 5, wherein the processor determines whether there is a non-damaging incorrect operation based on detections from the set of first sensors and a rating of the circuit protection unit determined based on the load.

7. The PDMS of any one of claims 1 to 6, wherein when the non-damaging incorrect operation is cleared, the processor waits to receive an instruction to close the at least one disconnect from a system control unit (SCU) to close the at least one disconnect.

8. The PDMS of any one of claims 1 to 7, wherein the at least one disconnect is at least one solid state switch and associated gate drive circuitry.

9. The PDMS of claim 8, wherein the circuit protection unit further comprises a digital to analog converter configured to convert a control signal from the control unit to drive the gate drive circuitry.

10. The PDMS of claim 8, wherein the circuit protection unit further comprises a processor configured to receive a control signal from the control unit to drive the gate drive circuitry.

11. The PDMS of claim 8, wherein the circuit protection unit has a preset rating based on the load, and wherein the circuit protection unit comprises protection circuitry configured based on the preset rating.

12. The PDMS of claim 11, wherein the processor in the control unit adjusts the preset rating based on an operation of the load and output an adjusted rating.

13. The PDMS of claim 12, wherein the circuit protection unit comprises a processor and storage having thresholds for determining whether to open the electrical path, the thresholds being defined as a fixed percentage above or below a rating for different monitored times.

14. The PDMS of claim 13, wherein the processor in the circuit protection unit changes the thresholds in response to receiving the adjusted rating output from the processor in the control unit.

15. A power distribution management system (PDMS) comprising: a circuit protection unit comprising: a communication interface;at least one disconnect configured to open or close an electrical path between a source and a load; a set of first sensors configured to detect states of the electrical path, respectively, wherein the electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault, and protection circuitry electrically connected to the set of first sensors, the protection circuitry configured with analog thresholds to open the electrical path, the analog thresholds being based on a preset rating of the circuit protection unit based on the load, wherein the protection circuitry opens the electrical path when a detect state exceeds one or more of the thresholds, a control unit comprising: a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit; and a processor configured to: monitor operation of the load relative to an expected operation of the load used to determine the preset rating to update a rating; and adjust digital thresholds for opening the at least one disconnect based on the monitored operation.

16. The PDMS of claim 15, wherein the control unit further comprises a storage configured to store the adjusted digital thresholds.

17. The PDMS of claim 15, wherein the circuit protection unit comprises a processor and storage having digital thresholds, and wherein the processor in the control unit transmits the adjusted digital thresholds to the processor in the circuit protection unit whereby the stored digital thresholds are updated.

18. The PDMS of claim 17, wherein the processor in the circuit protection unit is configured to compare a detected state with the adjusted digital threshold, respectively, to determine whether to open the at least one disconnect.

19. The PDMS of claim 16, wherein the processor in the control unit is configured to receive detected states from the set of first sensors, respectively, and compare the detected state with a respective adjusted digital threshold to determine whether to open the at least one disconnect.

20. The PDMS of any one of claims 15 to 19, wherein the disconnect is at least one solid state switch and associated gate drive circuitry.

21. A system comprising a power source; a load; a circuit protection unit comprising: a communication interface; at least one disconnect configured to open or close an electrical path between the power source and the load; and a set of first sensors configured to detect states of the electrical path, respectively, wherein the electrical path is opened in response to at least one detected state of the electrical path indicative of a damaging fault; a first control unit: and a system control unit (SCU), wherein the first control unit comprises: a first control unit-communication interface configured to communicate with the communication interface in the circuit protection unit; a second control unit-communication interface configured to communicate with the SCU; and a first processor, wherein the SCU comprises: a load-communication interface configured to communicate with the load; a power source-communication interface configured to communicate with the power source; a system control-communication interface configured to communicate with the first control unit; and a second processor configured to determine a non-damaging incorrect operation of the system based at least in pail on information from at least one of the load, the power source or the first control unit,respectively, received via the load-communication interface, the power source-communication interface or the system control-communication interface; and in response to a determination of the non-damaging incorrect operation, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path to the first control unit, wherein in response to receiving the instruction, the first processor causes the at least one disconnect to open.

22. The system of claim 21, wherein there are a plurality of pairs of power sources and loads, respective, and wherein there is at least one disconnect in an electrical path between a power source and load in each pair, and in response to a non-damaging incorrect operation in a particular pair of power source and load, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path associated with the particular' pair to the first control unit, wherein in response to receiving the instruction, the first processor causes the at least one disconnect to open between the particular pair.

23. The system of claim 22, wherein the SCU is further configured to determine a nondamaging incorrect operation with itself, and in response to a determination of a nondamaging incorrect operation with itself, the second processor is configured to transmit, via the system control-communication interface, an instruction to open the electrical path for all of the plurality of pairs to the first control unit, wherein in response to receiving the instruction, the first processor causes the at least one disconnect to open between all of the plurality of pairs.

24. The system of claim 21, claim 22 or claim 23, wherein the non-damaging incorrection operation is an over or under voltage, over or under current, over di / dt and / or over temperature.

25. The system of any one of claims 21 to 24, wherein the second processor is configured to determine whether the non-damaging incorrect operation has been cleared and in response to a determination that the non-damaging incorrect operation has been cleared, the second processor is configured to transmit, the system control-communication interface, an instruction to close the electrical path between one or more pairs of power source and load based on current conditions to the first control unit.

26. The system of any one of claims 21 to 25, wherein the at least one disconnected is at least one solid state switch and associated gate drive circuitry.

27. The system of any one of claims 21 to 26, wherein the power source or each power source is a high voltage DC power source.

Images