Method and Device for Supplying Energy to an Electric Consumer of a Vehicle

Abstract

A device includes a first supply unit, which is connectable via a first switch element to a first consumer, a second supply unit, which is connectable via a second switch element and via one or more electric delimitation elements to the first consumer, and a third switch element, which is configured to bridge the one or more electric delimitation elements. A control unit is configured to cause the first switch element to close, and the second and third switch elements to open, in normal operation. The control unit is further configured to detect that a first supply voltage at the first supply unit has reached or fallen below a voltage threshold value, and in response causes first the second switch element to close, then the first switch element to open, and then the third switch element to close, such that the first consumer is coupled to the second supply unit.

Claims

1.-15. (canceled)

16. An energy supply device for a first electric load, the energy supply device comprising: a first supply unit, which is connectable to the first load via a first switch element; a second supply unit, which is connectable to the first load via a second switch element and via one or more electric delimitation elements; and a third switch element which is configured to bridge the one or more electric delimitation elements; and a control unit which is configured: such that, in normal operation, the first switch element is caused to close, and the second and third switch elements are caused to open; to detect that a first supply voltage on the first supply unit has reached or fallen below a voltage threshold value; and in response to the detection, firstly to cause the second switch element to close, thereafter to cause the first switch element to open, and thereafter to cause the third switch element to close, such that the first load is connected to the second supply unit.

17. The energy supply device according to claim 16, wherein the control unit is further configured: to check whether a second supply voltage on the second supply unit exceeds a second voltage threshold value; and to cause the first load to be connected to the second supply unit, if it has been determined that the second supply voltage exceeds the second voltage threshold value.

18. The energy supply device according to claim 16, wherein: the first supply unit is an element of a first subnetwork, and the second supply unit is an element of a second subnetwork in an overall power supply network; the first subnetwork and the second subnetwork are connectable by way of a coupling circuit element; and the control unit is further configured: to check whether the coupling circuit element is open; and to cause the first load to be connected to the second supply unit, if it has been determined that the coupling circuit element is open.

19. The energy supply device according to claim 16, wherein the one or more electric delimitation elements comprise an electrical resistor, which is configured to limit electric current from the second supply unit to the first supply unit.

20. The energy supply device according to claim 16, wherein the one or more electric delimitation elements comprise an electric filter circuit, which is configured to at least partially damp any transmission of conducted interference from the first supply unit to the second supply unit, and/or from the second supply unit to the first supply unit.

21. The energy supply device according to claim 16, wherein: the second switch element comprises a first node point, which is connected to the second supply unit, and a second node point, which is connected to the one or more electric delimitation elements; the first load is connected to a supply point; the third switch element is configured to connect the second node point of the second switch element to the supply point; or the third switch element is configured to connect the first node point of the second switch element to the supply point.

22. The energy supply device according to claim 16, wherein: the first load is configured to deliver a function; the first load is an element of an overall load; the overall load for the delivery of the function comprises a second load, which is redundant with respect to the first load; and the second load is connected to the second supply unit.

23. The energy supply device according to claim 22, wherein: the overall load has an asymmetrical redundancy; and at least one of a functional performance capability or a power take-up of the first subload is greater than at least one of a functional performance capability or a power take-up of the second subload.

24. The energy supply device according to claim 16, wherein the first load is an element of an overall load, and wherein the overall load comprises a redundant third load which is connected to the first supply unit.

25. The energy supply device according to claim 16, wherein at least one of the first switch element, the second switch element, or the third switch element comprising at least one semiconductor-based switch.

26. The energy supply device according to claim 25, wherein the at least one semiconductor-based switch comprises at least one of a metal-oxide-semiconductor field-effect transistor or a relay.

27. The energy supply device according to claim 16, wherein the first load is configured, prior to an achievement of the voltage threshold value, to execute a power downrating.

28. The energy supply device according to claim 16, wherein at least one of: the control unit is an element of the first subload; or the control unit is an element of a control device of the first subload.

29. The energy supply device according to claim 16, further comprising at least one measuring unit, which is designed to detect sensor data with respect to the first supply voltage, wherein the control unit is further configured based on the sensor data, to detect that the first supply voltage on the first supply unit has reached or fallen below the voltage threshold value.

30. An electric power supply network of a vehicle, wherein the electric power supply network comprises the energy supply device according to claim 16.

31. A method for supplying energy to an overall electric load, which comprises a first load for delivery of a function, the method comprising: in normal operation, causing a first switch element to close such that the first load is connected, via the closed first switch element, to a first supply unit; detecting that a first supply voltage on the first supply unit has reached or fallen below a voltage threshold value; in response to the detecting, causing a second switch element to close such that the first load, via one or more electric delimitation elements, and via the closed second switch element, is connected to a second supply unit; subsequently causing the first switch element to open in order to disconnect the first load from the first supply unit; and subsequently causing a third switch element to close in order to bridge the one or more electric delimitation elements.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0041] FIG. 1 shows an exemplary power supply network of a vehicle.

[0042] FIGS. 2a and 2b respectively show an exemplary device for the supply of energy to subloads of a safety-related overall electric load of a vehicle.

[0043] FIG. 3 shows a flow diagram of an exemplary method for the supply of electric energy to a subload of a safety-related overall electric load.

DETAILED DESCRIPTION OF THE DRAWINGS

[0044] As described above, the present document addresses the efficient supply of energy to the subloads of a safety-related overall load in a vehicle. In this connection, FIG. 1 shows an electric power supply network 100 having two subnetworks 110, 120. In the first subnetwork 110, one or more first electric loads 111 are arranged. The one or more first electric loads 111 can be certified and/or rated to a specific ASIL level and/or can fulfill a specific ASIL level with respect to the availability of the energy supply. The one or more first electric loads 111 can respectively incorporate one or more measuring units 116, which are designed to measure current and/or voltage on the respective load 111. On the basis of the current and/or voltage measurement, a direct monitoring of potential faults on the respective electric load 111 and/or on the associated electric lines and/or contacts can be executed (e.g. by way of a control unit 103). The one or more electric loads 111, for the supply of energy, can be (galvanically) connected to a first supply line 112 and to a reference potential 113 (e.g. ground).

[0045] The second subnetwork 120 comprises one or more second loads 121, which are supplied with electric energy via a second supply line 122 and a terminal connection to the reference potential 123 (e.g. ground). The reference potentials 113, 123 of the two subnetworks 110, 120 can be directly galvanically connected to each other. The one or more second loads 121 on the second subnetwork 120 can be certified and/or rated to a specific ASIL level and/or can fulfill a specific ASIL level with respect to the availability of the energy supply. The one or more second electric loads 121 can respectively incorporate one or more measuring units 116, which are designed to measure current and/or voltage on the respective load 111.

[0046] The two subnetworks 110, 120 can be mutually connected by way of a coupling circuit element 102. The circuit element 102, as required (e.g. in the event of a fault on one of the two subnetworks 110, 120), can be opened, in order to mutually disconnect the second subnetwork 120 and the first subnetwork 110. By the separation of the second subnetwork 120 from the first subnetwork 110, it can be achieved that the first subnetwork 110 is not compromised by a fault on the second subnetwork 120 (and vice versa). The coupling circuit element 102, which comprises e.g. a semiconductor-based switch element, can be certified or rated in accordance with a specific ASIL level.

[0047] The first subnetwork 110 can incorporate a first supply unit 114 (e.g. a battery and/or a DC voltage converter). In a corresponding manner, the second subnetwork 120 can incorporate a second supply unit 124 (e.g. a battery and/or a DC voltage converter).

[0048] As described above, an electrical component (i.e. an overall electric load) for the delivery of a (typically safety-related) function can be divided into a number of subloads. By the employment of asymmetrical redundancy, the subloads can assume different performance capabilities. In particular, an overall electric load can comprise a first subload having a relatively high performance capability (particularly with respect to one or more capabilities of the subload), and a second subload having a relatively low performance capability. For the achievement of a higher functional performance capability, the first subload can be connected to two separate supply units 114, 124 or subnetworks 110, 120.

[0049] FIGS. 2a and 2b respectively show a device 200 for the supply of energy to the subloads 211, 221, 212 of a (fault-tolerant) overall load of a vehicle. The overall load can be constituted of two or three subloads 211, 221, 212, which are operated in parallel with one another. For example, the overall load can comprise a first subload 211 which, for the supply of energy, is connected via the switch element 201 to the first subnetwork 110, and is connectable to the second subnetwork 120 via the electric elements 206, 205 and the switch element 202, or via the switch element 203. The overall load can further comprise a second subload 221 which, for the supply of energy, is connected to the second subnetwork 120. Optionally, the overall load can moreover comprise a further subload 212, which can also be connected to the first subnetwork 110 and/or to the first supply unit 114. The first subload 211 can optionally assume a higher performance capability than the second and/or the further subload 221, 212. In particular, the first subload 211 can be configured such that, by way of the first subload 211, the overall function of the overall load can be delivered, whereas the second and/or the further subload 221, 212, optionally, deliver only a basic function or an emergency function respectively.

[0050] The first subload 211 can be connected via a first switch element 201 to the first supply unit 114. Moreover, the first subload 211 can be connectable via one or more electric filtering and/or delimitation elements 205, 206 and via a second switch element 202 to the second supply unit 124. Moreover, a third switch element 203 can be provided, in order to bridge the one or more filtering and/or delimitation elements 205, 206, and in order to permit the direct connection of the first subload 211 (bypassing the one or more filtering and/or delimitation elements 205, 206) to the second supply unit 124 and/or to the second subnetwork 120.

[0051] In normal operation, the first switch element 201 can be closed, and the second and third switch elements 202, 203 can be open, such that the first subload 211 (optionally, exclusively) is supplied with electric energy from the first supply unit 114 (and not from the second supply unit 124). If a fault is detected in the first subnetwork 110 and/or on the first supply unit 114 (e.g. on the basis of the sensor data from a measuring unit 116), the second switch element 202 can firstly be closed, in order to additionally supply electric energy from the second supply unit 124 to the first subload 211 via the one or more filtering and/or delimitation elements 205, 206. Subsequently, the first switch element 201 can be opened (in order to disconnect the defective first supply unit 114 and/or the defective first subnetwork 110) and, thereafter, the third switch element 203 can be closed (in order to bridge the one or more filtering and/or delimitation elements 205, 206, in the interests of an efficient supply of energy from the second supply unit 124). A redundant energy supply for a subload 211 of an overall load can thus be delivered in an efficient manner.

[0052] An energy supply device 200 for a first subload 211 is thus described, in which energy is supplied by way of two independent supply units 114, 124. In an asymmetrical 1oo2 system, the first subload 211 can be the subsystem of the two subsystems having the higher performance capability. This subsystem is connected to both subnetworks 110, 120, such that the subsystem with the higher performance capability, in the event of the failure of one of the two supply units 114, 124, will continue to be available. In a 2oo3 system, one subsystem can be connected to both energy supply units 114, 124, and the other two subsystems can be connected respectively to the first supply unit 114 or the second supply unit 124. In consequence, in the event of the failure of one energy supply, a 2oo2 system will still be in place.

[0053] In the interests of comprehensive energy system management in a vehicle, a specific allocation of components or loads 212, 211, 221 to supply units 114, 124 should always be in place. In particular, any toggle switching or alternating switching of a subload 211 between two different supply units 114, 124 should be avoided. Moreover, an uninterrupted switchover from one supply unit 114 to another supply unit 124 should be permitted, in order to prevent any resetting of a subload 211 associated with a short-term undervoltage. Moreover, any temporary low-resistance coupling of the subnetworks 110, 120 or of the different supply units 114, 124 should also be excluded, in order to prevent any power spikes in the switch elements 201/202 and/or any transient loading of the supply units 114, 124.

[0054] A switchover from the primary supply unit 114 to the secondary supply unit 124, which fulfills the above-mentioned requirements, is ensured by the circuit 200 which is represented in FIGS. 2a and 2b. A resistor R 205 can be employed, which limits a crossover current Iq between the subnetworks 110, 120 to a permissible value. The resistor 205 can be rated such that at least the energy supply for the logic component of the control device of the first subload 211 which is connected to the overall supply system via the second supply unit 124, with the second switch element 202 closed and the switch elements 201, 203 open, is delivered. Moreover, an impedance X 206 can be provided in the form of a filter circuit. A filter circuit can be employed in order to reduce and/or suppress the transmission of conducted interference from one subnetwork 110 to the other subnetwork 120.

[0055] The energy supply device 200 can be operated as follows.

[0056] In an initial state, the first switch element 201 is closed, and the supply of energy to the subload 211 is executed by way of the first supply unit 114.

[0057] A fault in the first subnetwork 110 can lead to a reduction in the first supply voltage on the first supply unit 114. The subload 211 on the overall supply system can execute a voltage-related power downrating, immediately the first supply voltage falls below a first voltage threshold value. In other words, the power and/or current take-up of the subload 211 can be reduced (in a voltage-dependent manner).

[0058] If the first supply voltage, notwithstanding the downrating, continues to fall, and falls below a second voltage threshold value, a switchover to the second subnetwork 120 can be executed. The second voltage threshold value can be set such that, owing to the power downrating, only the logic component, including the communication function, of the subload 211 continues to be active, and the power component of the subload 211 assumes no further function, or virtually no further function.

[0059] For the execution of a switchover, firstly, the second switch element 202 can be closed, in order to ensure the continuing stable operation of the logic circuit of the subload 211 by way of the second supply unit 124. Typically, the second switch element 202 is only closed if the second supply voltage on the second supply unit 202 is greater than the first supply voltage on the first supply unit 201 and/or if the second supply voltage lies within a permissible operating voltage supply range for the subload 211.

[0060] In a further step, the first switch element 201 is opened, in order to disconnect the subload 211 and the second subnetwork 120 or the second supply unit 124 from the first supply unit 114. Finally, the third switch element 203 can be closed. In consequence, the full second supply voltage of the second supply unit 124 is present on the subload 211, and the power downrating of the power component of the subload 211 can be reversed. The controlled switchover is then complete.

[0061] As represented in FIG. 2a, the third switch element 203 can be designed to bridge the one or more delimitation elements 205, 206, but not the second switch element 202. Alternatively, the third switch element 203 can be designed, as represented in FIG. 2b, to bridge the one or more delimitation elements 205, 206 and the second switch element 202. By way of the second variant, operational security with respect to contingent hardware defects on an individual switch element 202, 203 can be further enhanced. Moreover, the terminal voltage on the subload 211 can be increased, by the omission of an internal switch resistance. The switch elements 202 and 203 can thus be connected in parallel or in series.

[0062] The parallel circuit (as represented in FIG. 2b) is advantageous, in terms of a low-impedance supply. The series circuit (as represented in FIG. 2a) can be advantageous for reasons of operational security, if any defective connection of the supply lines 122 and 112 is to be securely prevented.

[0063] Control of the temporal sequence of settings of the switch elements 201, 202, 203 can be implemented in the hardware of a separate device 103 and/or by way of a logic circuit, which is implemented in the control device 223 of the subload 211.

[0064] Optionally (as described in conjunction with FIG. 1), it is possible for the two supply units 114, 124 not to be mutually independent, wherein the supply units 114, 124 are mutually connected via the power supply network 100 of the vehicle by way of a coupling circuit element 102, which coupling circuit element 102 can be controlled by a superordinate energy management system. In this case, voltages on the two supply units 114, 124 can be evaluated at the time of any switchover, in order to prevent any spurious switch-on or switch-off of a supply unit 114, 124. Where the coupling circuit element 102 is closed, the two supply voltages will collapse simultaneously in the event of a supply network fault. Only once the supply network 100 has opened the coupling circuit element 102 will it be possible to reliably identify the fault-free subnetwork, by reference to the voltage difference between the first and the second supply voltage and/or by the evaluation of the absolute values for the supply voltage which is present on the terminals of one or more subloads 211, 212, 221. It can then be decided whether or not a switchover from the first supply unit 114 to the second supply unit 124 is necessary. This can be executed e.g. in a central control unit 103, or independently thereof in a control device 223 (e.g. within the load 211). In particular, a check can be executed as to whether the minimum required voltage threshold on the present supply path of the first subload 211 has been undershot.

[0065] If this is the case, a switchover can be executed to the second supply unit 124 (also described in the present document as an energy source).

[0066] FIG. 3 shows a flow diagram of an exemplary method 300 for the supply of energy to an overall electric load which, for the delivery of a function (e.g. a braking or steering function), comprises a first subload 211 and at least one redundant second subload 221. The overall load can feature asymmetrical redundancy, wherein the first subload 211 can optionally assume a higher performance capability, with respect to the function to be delivered, than the second subload 221. The method 300 can be executed in a software- and/or hardware-based manner.

[0067] The method 300 comprises initiation 301 to the effect that, in normal operation, a first switch element 201 is closed, such that the first subload 211 is connected, via the closed first switch element 201, to a first supply unit 114. The method 300 further comprises detection 302 to the effect that a first supply voltage on the first supply unit 114 has reached or fallen below a voltage threshold value. The voltage threshold value can be set such that, below the voltage threshold value, the function of the first subload 211 can no longer be delivered (or at least can only be partially delivered).

[0068] The method 300 further comprises, in response to the detection step 302, initiation 303 to the effect that a second switch element 202 is closed, such that the first subload 211, via one or more electric delimitation elements (e.g. one or more passive electric elements) 205, 206, and via the closed second switch element 202, is connected to a second supply unit 124. The second subload 221, under standard conditions, can optionally be connected to the second supply unit 124. The first subload 211 can thus be temporarily connected both to the first supply unit 114 (via the closed first switch element 201) and to the second supply unit 124 (via the closed second switch element 202). By way of the one or more delimitation elements 205, 206, a limitation of the impacts of the second supply unit 124 upon the first supply unit 114 (or vice versa) can be achieved. A reliable energy supply can thus be delivered (without interruption).

[0069] The method 300 further comprises subsequent initiation 304 to the effect that the first switch element 201 is opened, in order to disconnect the first subload 211 from the first supply unit 114. The method 300 moreover comprises subsequent initiation 305 to the effect that a third switch element 203 is closed, in order to bridge the one or more electric delimitation elements 205, 206. In consequence, the first subload 211 is supplied directly with electric energy from the second supply unit 124, in a low-impedance arrangement. Overall, by way of the method 300, a reliable and redundant energy supply for a subload 211 of an overall electric load can be delivered in an efficient manner (e.g. in a 1oo2 or 2oo3 redundancy arrangement).

[0070] The present invention is not limited to the exemplary embodiments represented. In particular, it should be observed that the description and the figures are only intended to illustrate the principle of the methods, devices and systems proposed.