Motor Gate Drive Control Handover for Single-Point Failure Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing driving motor systems in electric vehicles are prone to single-point failure due to the crash or damage of the main controller, leading to overall system failure without a standby node to take over, compromising safety and reliability.
Innovation Solution
A dual-control system is implemented with a main controller and an auxiliary controller, such as a DSP and a CPLD, to share gate driving control rights, ensuring seamless transition and operation in safe modes like Shut Pulse Off or Active Short Circuit when the main controller fails, utilizing a gate driving logic control module with circuits like control right processing, PWM driving signal buffer, and gate protection control to manage control signals and fault monitoring.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single main controller is used to simplify the system structure, then the device complexity is reduced, but the reliability deteriorates due to single-point failure risk
Solution Approach 1:
The control system is segmented into two independent controllers: a main controller and an auxiliary controller. Each controller has its own control right processing circuit and can independently manage the gate driving circuit module. This segmentation eliminates the single-point failure risk while maintaining manageable system complexity through modular architecture.
Solution Approach 2:
The system changes the control parameter from a single controller to dual controllers with different functional roles. The main controller handles normal operation while the auxiliary controller is prepared for takeover. This parameter change (from 1 to 2 controllers) directly improves reliability without significantly increasing overall system complexity.
2Reliability
If an auxiliary controller is added to take over in case of main controller failure, then the reliability is improved, but the device complexity increases
Solution Approach 1:
The auxiliary controller is designed with multi-functionality: it can operate as a standby controller for takeover, assist in fault detection, and potentially handle control functions if needed. This universal design justifies the added complexity by providing multiple benefits beyond simple failover.
Solution Approach 2:
A gate driving logic control module is introduced as an intermediary between the controllers and the gate driving circuit module. This intermediary manages the complexity of controller coordination, arbitration, and signal routing, allowing the auxiliary controller to be added without proportionally increasing overall system complexity.
3Reliability
If control rights are shared between main and auxiliary controllers, then the reliability is improved through redundancy, but the ease of operation deteriorates due to complex control right management
Solution Approach 1:
The control right processing circuits in both controllers automatically manage their own control rights through arbitration logic. The system self-regulates which controller has active control based on fault detection and status signals, eliminating the need for manual intervention or complex external arbitration mechanisms.
Solution Approach 2:
The controllers continuously exchange status signals and fault information through the gate driving logic control module. This feedback mechanism automatically determines control right allocation based on real-time system state, simplifying the operation of control right management while ensuring reliable redundancy.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
A driving motor control system and a method for ensuring a safety thereof belong to the field of electronic circuits. The system comprises: a DSP, which is electrically connected to a gate driving logic control module (23) and is used for acquiring a gate driving control right by interacting with the gate driving logic control module (23); a CPLD, which is electrically connected to the DSP and the gate driving logic control module (23) and is used for taking over the gate driving control right by interacting with the gate driving logic control module (23) when the DSP is in a fault state; the gate driving logic control module (23), which is electrically connected to a gate driving circuit module (24) and is used for realizing control, by the DSP and the CPLD, over the gate driving control right and for transmitting, to the gate driving circuit module (24), a control signal output by the DSP or the CPLD in response to the gate driving control right; and the gate driving circuit module (24), which is electrically connected to a motor and is used for driving the motor in response to the control signal. Double-point control over the gate driving control right can be realized by the method.