The security monitoring circuit and its control method of a kind of vehicle motor controller
Technical field
The present invention relates to the security monitoring circuit and its control method of a kind of vehicle motor controller.
Background technology
Auto industry is mainstay of the national economy industry, and it is closely bound up with the life of people, it has also become modern society is not
The part that can lack.But traditional auto industry using oil as fuel, providing quick, comfortable hand over for people
While logical instrument, dependence of the national economy to fossil energy is also increased, has deepened the contradiction between energy production and consumption.
With the lasting increase of resource and environment dual-pressure, development new-energy automobile has turned into the direction of future automobile industrial development.
In the recent period, China issues《Energy-conservation and new-energy automobile estate planning (2011-2020)》, its guiding theory is:With pure electronic vapour
Car is main strategic decisions, is attached most importance in the recent period with hybrid vehicle, widelys popularize popularization energy-saving automobile and strengthens autonomous innovation, the palm
Hold energy-conservation and new-energy automobile key core technology.As the electric machine controller of the key core parts in new-energy automobile,
It is internal largely to have used the parts such as electronic component, high-power switch device and programmable chip, these and electric related zero
The use of part, considerably increase the possibility of its failure so that the safety problem of electric automobile is especially prominent.
Electric machine controller and motor have collectively constituted the power source of new-energy automobile, and it is typically located at new energy
In the front deck of automobile, therefore the test of the adverse circumstances such as outside muddy water, strong motion, high/low temperature need to be subjected to.In addition, electric machine controller
Also often it is operated under the extreme conditions such as high current, high voltage, strong-electromagnetic field, so improving the reliability of electric machine controller to solution
Certainly new-energy automobile safety issue is most important, meanwhile, the grasp of this key core technology will also be greatly enhanced me
The core competitiveness of state's new-energy automobile product.
At present, it is general inside motor controller of new energy automobile all to there is excessively stream, under-voltage, over-pressed, excess temperature and hypervelocity etc. to protect
Shield, it is general in electric machine controller in addition that also there is watchdog circuit to prevent software is run from flying, but all can not be to the piece of main control chip
Built-in storage, CPU, the running situation of peripheral hardware monitors in piece.When run-time error in the piece of main control chip, motor main controller
Will operation irregularity, this will bring threat to the life security of driver.
The content of the invention
It is an object of the invention to provide the security monitoring circuit and its control method of a kind of vehicle motor controller, pass through
The chip-scale monitoring between two chips is realized in SPI communications, existing to critical analog sum by ADC the and I/O causes for gossip of chip itself
The monitoring of word amount;Once it was found that electric machine controller operation irregularity can at once switch-off power switch, avoid device damage or
The generation of accident, the circuit invented in addition can also avoid the power switch straight-through generation of bridge up and down.In original motor control system
Propose a kind of security monitoring circuit of vehicle motor controller on the basis of system, conventional vehicle motor controller is filled up with this
The white space of security monitoring, improve the safety by bus of new-energy automobile.Concrete technical scheme is as follows:
A kind of security monitoring circuit of vehicle motor controller, further, including chip power supply circuit, chip monitoring electricity
Road, fault diagnosis circuit, wherein,
The chip power supply circuit includes main control chip power circuit and monitoring chip power circuit, main control chip power supply electricity
Road is used to for supply voltage to be converted into the voltage required for main control chip, and monitoring chip power circuit is used to change supply voltage
Into the voltage required for monitoring chip;
The chip monitoring circuit includes main control chip and monitoring chip, and main control chip is mainly responsible for controlled motor operating,
Monitoring chip is used to be monitored the running status of main control chip;
The fault diagnosis circuit includes electric machine phase current over-current detection circuit, power switch excess temperature detection circuit, bus
Over-voltage detection circuit, IGBT enable signals a, IGBT enable signal b and power bridge enable signal, when power switch excess temperature detects
Circuit, bus overvoltage detection circuit, IGBT enable signal a and IGBT enable signals b is high level, then power bridge enable signal
High level is corresponded to, when power switch excess temperature detection circuit, and/or, bus overvoltage detection circuit, and/or, IGBT enable signals
When a and/or IGBT enable signals b is low level, then power bridge enable signal is correspondingly low level.
Further, in addition to PWM interlock circuits, the PWM interlock circuits be used for the pwm signal for obtaining upper and lower bridge and
Power bridge enable signal, and power output bridge drive signal H and power bridge drive signal L is opened and closed power bridge switching tube.
Further, chip power supply circuit also includes switching device, and it is used to controlling whether electric on controller;The power supply
For battery, its amount voltage is 12V, for providing supply voltage to main control chip and monitoring chip.
Further, the voltage includes analog voltage, digital voltage, reference voltage and the kernel required for main control chip
Voltage, supply voltage and reference voltage needed for monitoring chip.
Further, main control chip power circuit is used to for battery tension to be converted into the voltage required for main control chip,
The monitoring chip power circuit provides power supply and reference voltage for monitoring chip, passes through between main control chip and monitoring chip
SPI communication connections.
Further, the running status includes the running status of peripheral hardware and memory in the piece in main control chip, power supply
The working condition of power supply.
Further, monitoring chip has ADC sampling modules, the work feelings of the power supply for monitoring main control chip
Condition, main control chip have ADC sampling modules, for gathering analog signal and controlled motor operating, and supervise monitoring chip
Power supply.
Further, main control chip has GPIO, and passes through the excessively stream of GPIO monitoring fault diagnosis circuits, excess temperature, overvoltage
Data signal.Power switch pipe, the PWM drive controls that its control terminal is sent by PWM interlock circuits reception main control chip are believed
Number, and can be switched on or off according to the low and high level state that PWM interlock circuits export, PWM interlock circuits share three-phase, carry
For the road pwm signal of three-phase 6.
The control method of the security monitoring circuit of above-mentioned vehicle motor controller, comprises the following steps:
(1) it is electric on controller;
(2) supply voltage is converted into the voltage required for main control chip by the power circuit of main control chip;
(3) simultaneously, supply voltage is converted into the voltage needed for monitoring chip by monitoring chip power circuit;
(4) main control chip and monitoring chip enable power switch pipe operation;
(5) monitoring chip is monitored to the running status of main control chip, once monitoring chip notes abnormalities, then closes work(
Fault message is simultaneously passed to main control chip by rate switching tube, and fault message is sent to entire car controller by main control chip;
(6) simultaneously, the working condition of the power supply of monitoring chip detection main control chip, once detect that power work is different
Chang Shi, immediately turn off power switch;
(7) simultaneously, main control chip collection analog signal and controlled motor operating, the numeral letter of fault diagnosis circuit is also monitored
Number, with this to control power switch pipe, and status information is sent to entire car controller;
(8) in the case of motor and electric machine controller are in normal condition, fault diagnosis circuit makes work(according to level signal
Rate switching tube is by master control chip controls;
(9) when motor and/or electric machine controller operation irregularity, fault diagnosis circuit is closed power according to level signal and opened
Guan Guan.
Further, step (10) is further comprised:In the case of motor and electric machine controller are in normal condition, PWM
The power bridge enable signal that interlock circuit obtains is high level, and the pwm signal of upper and lower bridge can flow through PWM interlock circuits to control
Switching tube, when main control chip occur exception and/or main control chip output the pwm signal of bridge up and down be interfered cause up and down bridge
When pwm signal is high level simultaneously, for upper and lower bridge pwm signal after PWM interlock circuits, PWM interlock circuits force power bridge to drive
Dynamic signal H is low level, and power bridge drive signal L is changed into high level, so as to prevent the hazard event that power bridge is led directly to up and down
Occur;When power bridge enable signal is low level, PWM interlock circuits close the transmission channel of pwm signal, and cause its output
Power bridge drive signal be all low level, so as to close all switching tubes of power bridge.
Compared with prior art, the present invention by simple security monitoring circuit realiration to the vital state of safety
(running status, excessively stream, overvoltage, excess temperature, chip power supply power supply in chip slapper) is monitored, and can be protected in time during abnormal state
Controller, the reliability of controller and the safety by bus of vehicle are improved, in addition, the circuit can also avoid power switch pipe
Upper and lower bridge is led directly to, and further increases the reliability of controller.
Brief description of the drawings
A kind of vehicle motor controller chip power supply circuit schematic diagram of Fig. 1 present invention.
Chip supervisory circuit schematic diagram in a kind of vehicle motor controller of Fig. 2 present invention.
A kind of vehicle motor controller internal fault diagnostic circuit schematic diagram of Fig. 3 present invention.
A kind of vehicle motor controller PWM interlock circuit schematic diagrams of Fig. 4 present invention.
Embodiment
Below according to accompanying drawing, the present invention will be described in detail, and it is a kind of preferred real in numerous embodiments of the present invention
Apply example.
In a preferred embodiment, a kind of vehicle motor controller security monitoring circuit, the circuit is by increasing one newly
Individual monitoring chip monitors the running situation of main control chip, while can also monitor the working condition of main control chip power supply.
Now with the fast development of chip technology, its processing speed is increasingly faster, integrated level also more and more higher, this electricity of just being powered to it
The requirement in source is also more strict, and the power supply of main control chip needs lower voltage, bigger electric current, more stable power supply, so
The power supply quality of power supply directly affect main control chip whether can normal work, while it be also influence electric automobile security pass
Key factor.For monitoring chip in invention once finding main control chip or its power supply operation exception, it can pass through corresponding electricity
Road immediately closing switch pipe (such as:IGBT, MOSFET etc.) because electric machine controller is will to input high pressure by full-bridge switch pipe
DC inversion into three-phase alternating current, what frequency and size by changing three-phase alternating current operated come controlled motor, if master control
Chip operation is abnormal, then can cause full-bridge switch operation irregularity, so may result in switching tube and burns or cause vehicle suddenly to add
Speed, anxious deceleration etc. jeopardize the failure of personal safety, so the energy transmission only closed in time between battery and motor can just be kept away
Exempt from the generation of device failure and hazard event.
Other main control chip needs to transport come controlled motor by the analog signal that ADC collections sensor passes come in piece
Turn, these analog quantitys will participate in the calculating of control algolithm mostly, and in order to ensure that electric machine controller has higher performance, then ADC must
There need be higher sampling precision, so typically using high-precision ADC reference voltages outside main control chip, height is obtained with this
The sampled value of precision, motor will be caused to malfunction if ADC reference power sources fail, it is unpredictable so as to be brought to vehicle
Serious consequence, therefore the present invention monitors main control chip ADC reference voltage using monitoring chip, monitor during reference voltage exception
Chip can close full-bridge switch pipe in time, so as to avoid problem above.
Fault message can be issued by vehicle control by the CAN communication of main control chip when monitoring chip, which monitors, to break down
Device processed, so that staff carries out malfunction elimination and analysis, so that electric machine controller can be accurately and timely by fault message
Pass out, enhance the maintainability of electric machine controller.
Conventional motors controller only all the way power circuit to main control chip, companion chip, analog circuit and digital circuit
Powered Deng part, once power circuit goes wrong, the electronic component in electric machine controller will all be affected.Because monitoring
Chip is most important to the reliability for ensureing electric machine controller, so Redundancy Design is have also been made to its power supply, even if master control
Also it can guarantee that monitoring chip can be with normal work, to ensure that electric machine controller can turn off entirely in time during chip power operation irregularity
Bridge switch pipe, so as to avoid the generation of vehicle risk situation.
Main control chip can also be communicated by SPI and the running situation of monitoring chip is monitored, while main control chip is also logical
The power supply and its ADC reference power source of ADC sampling supervision monitoring chips are crossed, once the power supply of monitoring chip, ADC join
When examining power supply or monitoring chip operation exception, main control chip closes full-bridge switch pipe, and then fault message is passed to by CAN
Entire car controller, so as to it ensure that electric machine controller monitoring chip has also always worked at monitoring in the case of.In addition, master control core
Piece is also monitored to quantity of states such as overvoltage, excessively stream, excess temperature, IGBT enable signals, and when hardware protection occurs, main control chip can
So that fault message is issued into entire car controller.
During electric machine controller operation irregularity, the function of closing full-bridge switch pipe is by fault diagnosis circuit and PWM interlocking electricity
What road was realized.Under normal circumstances, fault diagnosis circuit can export a high level, height electricity in the case where not detecting failure
It is flat to open PWM interlock circuits, a low level will be exported when fault diagnosis detects exception, the low level can make
The output of PWM interlock circuits is low level, so ensures that 6 way switch pipes of full-bridge all in off state.Electricity in addition
Main control chip can produce 6 road pwm signals of three-phase drive in machine controller, and each phase drive signal all includes bridge above and below 2 tunnels
Pwm signal, in abnormal cases, if two-way pwm signal is all high level upper bridge switch can be caused to lead directly to, so as to make
Burnt into switching tube, and PWM interlock circuits can avoid this problem, when the two-way pwm signal of input is all high level, PWM
Interlock circuit can make bridge arm PWM in output be low level, with this come avoid upper and lower bridge pwm signal simultaneously for high level situation.
In a preferred embodiment, a kind of security monitoring circuit of vehicle motor controller is by 4 sub-circuits:Chip
Power supply circuit, chip monitoring circuit, fault diagnosis circuit, PWM interlock circuits composition, this 4 mutually coordinated work of sub-circuit are simultaneously
Complete jointly to phase current, busbar voltage, temperature, the monitoring of chip running situation, diagnosis, fault message in electric machine controller
It is outside transmit and the work such as protection, below in conjunction with drawings and examples, the present invention is further described.
Referring to the drawings 1:
After electricity on controller (switch SW closure) in figure, power supply that the 12V voltages of small battery pass through main control chip
Circuit conversion (DC-DC conversions) into the analog voltage required for main control chip, digital voltage, reference voltage and core voltage,
While conversion above, the 12V voltages of small battery are also converted into the electricity needed for monitoring chip by monitoring chip power circuit
Source voltage and reference voltage, two change-over circuits meet main control chip and monitoring chip, and each required different supply voltage will
Ask.
Referring to the drawings 2:
Under normal circumstances, it is main after electricity on electric machine controller, main control chip and monitoring chip completion piece internal program initialization
Control chip and monitoring chip and IGBT enable signals (being now high level) are exported by itself I/O mouth, so as to enabled power switch
Pipe (such as:IGBT, MOSFET etc.) operation.Afterwards monitoring chip by by SPI communications to peripheral hardware in the piece in main control chip and
Memory (such as:ADC, ePWM, Watchdog, GPIO, SPI, CAN, RAM, ROM, flash in main control chip piece etc.) fortune
Row state is monitored, once monitoring chip notes abnormalities, then exports low level by its I/O mouth to close power switch pipe,
So as to avoid the generation of hazard event, fault message is passed to main control chip, main control chip by monitoring chip by SPI afterwards
Fault message is sent to by entire car controller by the CAN module of itself again, in order to the troubles diagnosis and fixing of controller.
Monitoring chip also monitors master control core while main control chip running situation is monitored by the ADC sampling modules of itself
The working condition of the power supply of piece, when power work exception is detected, low electricity is exported by the I/O mouths of its own immediately
Put down and carry out switch-off power switch, to avoid the generation of hazard event.
While monitoring chip monitors to main control chip, main control chip gathers analog signal by ADC in piece and controlled
Motor operates, and main control chip also monitors the excessively stream (A) of fault diagnosis circuit, excess temperature (B), over-pressed (C) by its GPIO in addition
Data signal, when detecting that any signal all the way is low level in A, B, C, main control chip again will by internal CAN communication
Fault message is sent to entire car controller.While monitoring in addition more than, main control chip passes through itself ADC continuous monitoring
The power supply of monitoring chip, when monitoring chip power supply exception, main control chip output IGBT enable signals a is (now
For low level), power switch pipe is closed with this, afterwards fault message is sent to by vehicle by main control chip CAN communication again
Controller.
Referring to the drawings 3:
After electricity on electric machine controller, in the case of motor and motor are all in normal condition, fault diagnosis circuit is from motor
Phase current over-current detection circuit (its output level is represented with A), device for power switching excess temperature detection circuit (its output level B
Represent) and bus overvoltage detection circuit (its output level is represented with C) acquisition level be high level, IGBT at this moment is enabled
Signal a (its output level is represented with D) and IGBT enable signals b (its output level is represented with E) is also high level, then failure
The power bridge enable signal (its output level is represented with F) of diagnostic circuit output is high level, and power switch can normally receive
The PWM driving control signal of main control chip, so that electric machine controller can be controlled normally after receiving the instruction of entire car controller
Motor operating processed.
When electric machine controller operation irregularity, once fault diagnosis circuit finds that any level all the way becomes in A, B, C, D, E
After low level, then fault diagnosis circuit output F level is changed into low level at once, so as to effectively close power switch pipe, so as to
Prevent the generation of hazard event.
Table 1 below lists the working condition of fault diagnosis circuit:
The working condition of the fault diagnosis circuit of table 1
Diagnostic result |
A |
B |
C |
D |
E |
F |
The function that circuit output is realized |
Normally |
H |
H |
H |
H |
H |
H |
Open pwm signal transmission channel |
It is abnormal |
L |
X |
X |
X |
X |
L |
Close pwm signal transmission channel |
It is abnormal |
X |
L |
X |
X |
X |
L |
Close pwm signal transmission channel |
It is abnormal |
X |
X |
L |
X |
X |
L |
Close pwm signal transmission channel |
It is abnormal |
X |
X |
X |
L |
X |
L |
Close pwm signal transmission channel |
It is abnormal |
X |
X |
X |
X |
L |
L |
Close pwm signal transmission channel |
Annotation:H represents high level, L represents low level, X represents any level
Referring to the drawings 4:
Because electric machine controller general control three phase electric machine, its internal switched using three phase full bridge realizes DC inversion into three
Cross streams electricity, so main control chip needs to provide the road pwm signal of three-phase 6 to control power switch pipe, Fig. 3 only provides A phases
PWM interlock circuits, the PWM interlock circuits of two-phase and A phase PWM interlock circuits are just the same in addition.
Under normal circumstances, the power bridge enable signal (its output level is represented with G) that PWM interlock circuits obtain is high electricity
Flat, the pwm signal (upper bridge pwm signal level is represented with P, lower bridge pwm signal level is represented with Q) of upper and lower bridge can flow through PWM
Interlock circuit carrys out controlling switch pipe, and the pwm signal of bridge up and down for occurring exception or main control chip output when main control chip is interfered
Cause bridge pwm signal up and down while when being high level, for upper and lower bridge pwm signal after PWM interlock circuits, PWM interlock circuits are strong
" A phase power bridge drive signal H " (its output level is represented with J) are low level to system, and (it exports electricity to A phase power bridge drive signals L
It is flat to be represented with K) it is changed into high level, so as to which the hazard event for preventing power bridge to lead directly to up and down occurs.
In addition, when power bridge enable signal is low level, PWM interlock circuits can close the transmission channel of pwm signal, and
So that " the A phase power bridge drive signal H " and " A phase power bridge drive signals L " is low level, so as to close power of its output
All switching tubes of bridge.
Table 2 below lists the working condition of PWM interlock circuits:
The working condition of the PWM interlock circuits of table 2
Controller state |
G |
P |
Q |
J |
K |
Remarks |
Normally |
H |
H |
L |
H |
L |
|
Normally |
H |
L |
H |
L |
H |
|
Normally |
H |
L |
L |
L |
L |
|
It is abnormal |
H |
H |
H |
L |
H |
It is low level to force drive signal H |
It is abnormal |
L |
X |
X |
L |
L |
Close PWM transmission channels |
Annotation:H represents high level, L represents low level, X represents any level
The present invention is exemplarily described above in conjunction with accompanying drawing, it is clear that present invention specific implementation is not by aforesaid way
Limitation, as long as employ the inventive concept and technical scheme of the present invention progress various improvement, or it is not improved directly application
In other occasions, within protection scope of the present invention.