JP2018182864A - POWER CONTROL DEVICE AND POWER CONTROL METHOD - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a power control device and a power control method, for continuously supplying electric power to an in-vehicle device that needs power supply without adding a power supply, even if an electrical failure occurs in a power supply system that supplies power to each of a plurality of in-vehicle devices from at least one of the plurality of power supplies.SOLUTION: A power control device 130 is applied to a power supply system 100 that supplies power from the at least one of a plurality of power supply lines 210, 212 by a plurality of power supplies 110, 120 and power lines 200, 202 respectively connected to power sources to the in-vehicle devices 10, 20 through 24. When detecting that an electrical failure has occurred in one of the power supply systems, the power control device turns off a switch that connects the power supply system having the failure and another power supply system.SELECTED DRAWING: Figure 1

Description

  The present disclosure relates to technology for supplying power to a plurality of on-vehicle devices from a plurality of power supplies.

  In the technology disclosed in Patent Document 1, a power supply system that supplies power to a plurality of on-vehicle devices from a generator and a low voltage storage battery, for example, is prepared in the event of failure of the power supply system where the low voltage storage battery fails. A backup power supply is provided to supply power to the on-vehicle devices.

  In the technology disclosed in Patent Document 1, the backup power supply is connected to the generator and the low voltage storage battery through a switch, and when the low voltage storage battery fails, the backup power supply is turned on to turn off the switch. Power is supplied to the device.

JP, 2016-037067, A

  As in the technology disclosed in Patent Document 1, when a backup power supply is added in preparation for a failure of the power supply system such as failure of the low voltage storage battery, there is a problem that the power supply system becomes larger and the weight increases. .

  The present disclosure provides an on-vehicle device that needs power supply without adding a power supply even if an electrical failure occurs in the power supply system that supplies power to each of the plurality of on-vehicle devices from at least one of the plurality of power supplies. Power supply technology.

  The first power control apparatus (130, 250) of the present disclosure is configured of a plurality of power supply systems (210, 212) by a plurality of power supplies (110, 120) and power lines (200, 202) connected to the respective power supplies. The present invention is applied to a power supply system (100) that supplies power to at least one of the on-vehicle devices (10, 20 to 24).

  As an on-vehicle apparatus, a first on-vehicle apparatus (24) which executes at least one first function necessary for traveling and stopping of the vehicle in one, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of second functions is mounted on the vehicle.

  Each of the first in-vehicle devices is connected to at least two power lines, and one second in-vehicle device performs at least a part of one second function and a plurality of second ones performing each of the second functions. The in-vehicle device is divided into at least two parts and connected to different power lines.

  The first power control apparatus of the present disclosure includes switches (160, 162, 270), detection units (142, 152, 262, S418), and control units (144, 154, 264, S406 to S410, S420). ing.

  The switch connects a plurality of power lines to one another. The detection unit detects whether an electrical failure has occurred in any of the plurality of power supply systems. The control unit turns on the switch when the detection unit does not detect the failure, and when the detection unit detects the failure, the switch connects the power supply system in which the failure is detected and the other power supply system. Turn off.

  According to this configuration, when an electrical failure occurs in any of the power supply systems that supply power from the power supply to the in-vehicle device, the connection between the power supply system where the failure occurred and the other power supply system is It can be easily shut off by turning off the switch. And electric power is supplied to the 1st in-vehicle device and the 2nd in-vehicle device which perform a function required for a run and a stop of vehicles from a power supply system which has not generated fault.

Since the first on-vehicle device and the second on-vehicle device necessary for traveling and stopping of the vehicle operate normally, the traveling of the vehicle is continued by the first on-vehicle device and the second on-vehicle device operating normally. it can.
As described above, even if a failure occurs in any of the power supply systems, power can be supplied to the first on-vehicle apparatus and the second on-vehicle apparatus from the power supply system in which the failure does not occur. As a result, there is no need to install a backup power supply for the occurrence of a failure in the power supply system, so the enlargement of the power supply system is suppressed, and the weight increase of the power supply system is suppressed. it can.

Further, for example, when the failure is a ground fault, it is possible to suppress the consumption of the power by the power supplied from all the power sources flowing into the ground fault location.
According to a first power control method of the present disclosure, a plurality of power supplies (110, 120) and at least one of a plurality of power supply systems (210, 212) by power lines (200, 202) connected to each of the power supplies A power control method applied to a power supply system (170) for supplying power to the devices (10, 20 to 24).

  As an on-vehicle apparatus, a first on-vehicle apparatus (24) which executes at least one first function necessary for traveling and stopping of the vehicle in one, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of second functions is mounted on the vehicle.

  Each of the first in-vehicle devices is connected to at least two power lines, and one second in-vehicle device performs at least a part of one second function and a plurality of second ones performing each of the second functions. The in-vehicle apparatus is divided into at least two parts and connected to the different power lines, and the plurality of power lines are connected by the switches (160, 162, 270).

  The first power control method of the present disclosure detects whether an electrical failure has occurred in any of a plurality of power supply systems, and switches on when no failure is detected, and the failure is detected. Is detected, the switch connecting the power supply system whose failure has been detected to the other power supply system is turned off.

With this configuration, the first power control method of the present disclosure has substantially the same effect as the first power control device of the present disclosure described above.
The second power control apparatus (130, 250) of the present disclosure is at least one of a plurality of power supply systems (240, 242) by an annular power line (220) and a plurality of power sources (120, 182) connected to the power line. The present invention is applied to a power supply system (170) for supplying power to on-vehicle devices (10, 20 to 24).

  As an on-vehicle apparatus, a first on-vehicle apparatus (24) which performs at least one first function necessary for traveling and stopping of the vehicle in one, and at least one second necessary for traveling and stopping of the vehicle And at least one of the second on-vehicle devices (20, 22) that executes a plurality of the respective functions of the vehicle.

  The first on-vehicle devices are connected to the power line at a plurality of locations, one second on-vehicle device performs at least a part of one second function, and the second on-vehicle devices are connected to the power line at one location Do.

  The second power control apparatus of the present disclosure includes switches (160, 162, 270), detection units (142, 152, 262, S418) and control units (144, 154, 264, S406 to S410, S420). ing.

  The switch executes a plurality of connection functions (226, 230) of each of the first on-vehicle devices and the power line and a plurality of each of the second functions in one circumferential direction of the annular power line. It is installed between the plurality of connection points (224, 232) of the second on-vehicle device and the power line and between the plurality of connection points (222, 234) of the plurality of power sources and the power line.

  The detection unit detects whether an electrical failure has occurred in any of the plurality of power supply systems. The control unit turns on the switch when the detection unit does not detect a failure, and turns off the switch at a position across the failure when the detection unit detects a failure.

  According to this configuration, by turning off the switches installed on both sides of the location where the failure occurs, the connection between the failure location and the normal power supply system can be easily cut off. And electric power is supplied to the 1st in-vehicle device and the 2nd in-vehicle device which perform a function required for a run and a stop of vehicles from a power supply system which has not generated fault.

Since the first on-vehicle device and the second on-vehicle device necessary for traveling and stopping of the vehicle operate normally, the traveling of the vehicle is continued by the first on-vehicle device and the second on-vehicle device operating normally. it can.
As described above, even if a failure occurs in any of the power supply systems, power can be supplied to the first on-vehicle apparatus and the second on-vehicle apparatus from the power supply system in which the failure does not occur. As a result, there is no need to install a backup power supply for the occurrence of a failure in the power supply system, so the enlargement of the power supply system is suppressed, and the weight increase of the power supply system is suppressed. it can.

Also, for example, when the failure is a ground fault, the power supplied from all the power sources can be prevented from flowing into the ground fault location and the consumption of the power.
According to a second power control method of the present disclosure, an on-vehicle apparatus is provided from at least one of a plurality of power supply systems (240, 242) by a ring-like power line (220) and a plurality of power supplies (120, 182) connected to the power line. The present invention is applied to a power supply system (170) for supplying power to (10, 20 to 24).

  As an on-vehicle apparatus, a first on-vehicle apparatus (24) which executes at least one first function necessary for traveling and stopping of the vehicle in one, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of second functions is mounted on the vehicle.

  The first on-vehicle devices are connected to the power line at a plurality of locations, one second on-vehicle device performs at least a part of one second function, and the second on-vehicle devices are connected to the power line at one location Do.

  A plurality of first functions for performing a second function between each of a plurality of first connection points (226, 230) of each of the first on-vehicle devices and the power line and a second function in one circumferential direction of the annular power line Switches between the plurality of second connection points (224, 232) of the two on-vehicle devices and the power line, and between the plurality of third connection points (222, 234) of the plurality of power sources and the power line (160, 162, 270) are installed.

  The second power control method of the present disclosure detects whether or not an electrical failure occurs in any of a plurality of power supply systems, and switches on when no failure is detected, and the failure is detected. When it is detected, turn off the switch at the position where the fault is present.

With this configuration, the other power control method of the present disclosure has substantially the same effect as the other power control apparatus of the present disclosure described above.
The third power controller (130, 250) of the present disclosure is at least one of two power supply systems (310, 312) by two power supplies (110, 120) and a power line (290) connecting the two power supplies. The present invention is applied to a power supply system (280) for supplying power to on-vehicle devices (10, 20 to 24).

  As an on-vehicle apparatus, a first on-vehicle apparatus (24) which executes at least one first function necessary for traveling and stopping of the vehicle in one, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of second functions is mounted on the vehicle.

  The first on-vehicle devices are connected to the power line at a plurality of locations, one second on-vehicle device performs at least a part of one second function, and the second on-vehicle devices each perform the power line Connect with

  The third power control apparatus of the present disclosure includes switches (160, 162, 270), detection units (142, 152, 262, S418) and control units (144, 154, 264, S406 to S410, S420). ing.

  The switch is configured to perform each of a plurality of first connection points (296, 298) of each of the first on-vehicle devices and the power line with the connection points (296) of the plurality of second points. A first group having a plurality of second connection points (294, 300) of the on-vehicle device and the power line, and another connection points of the plurality of first connection points (294) 298) and the second group having the plurality of second connection points (294, 300) and the other connection points (300).

  The detection unit detects whether or not an electrical failure has occurred in any of the two power supply systems. The control unit turns on the switch when the detection unit does not detect a failure, and turns off the switch when the detection unit detects a failure.

  According to this configuration, when the switch installed between the connection points divided into the first group and the second group is turned off, the failure point and the first group or the second group Can easily cut off the connection. Then, power is supplied from the normal power supply system to the connection points divided into the first group and the second group.

  That is, power is supplied to the first on-vehicle apparatus and the second on-vehicle apparatus that execute the functions necessary for traveling and stopping of the vehicle from the power supply system in which the failure does not occur. Since the first on-vehicle device and the second on-vehicle device necessary for traveling and stopping of the vehicle operate normally, the traveling of the vehicle is continued by the first on-vehicle device and the second on-vehicle device operating normally. it can.

  As described above, even if a failure occurs in any of the two power supply systems, power can be supplied to the first on-vehicle device and the second on-vehicle device from the power supply system in which the failure does not occur. . As a result, there is no need to install a backup power supply for the occurrence of a failure in the power supply system, so the enlargement of the power supply system is suppressed, and the weight increase of the power supply system is suppressed. it can.

Also, for example, when the failure is a ground fault, the power supplied from the two power sources can be prevented from flowing into the ground fault and consuming power.
According to a third power control method of the present disclosure, an on-vehicle apparatus is provided from at least one of two power supply systems (310, 312) by two power supplies (110, 120) and power lines (290) connecting the two power supplies. The invention is applied to a power supply system (280) for supplying power to (10, 20 to 24).

  As an on-vehicle apparatus, a first on-vehicle apparatus (24) which executes at least one first function necessary for traveling and stopping of the vehicle in one, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of second functions is mounted on the vehicle.

  The first on-vehicle devices are connected to the power line at a plurality of locations, one second on-vehicle device performs at least a part of one second function, and the second on-vehicle devices are connected to the power line at one location. Connecting.

  A plurality of second in-vehicle devices that execute each of a plurality of first connection locations (296, 298) connection locations (296, 298) between each of the first in-vehicle devices and the power line, and a second function And a first group having some connection points (294) of the plurality of second connection points (294, 300) with the power line, and other connection points (298) of the plurality of first connection points Switches (160, 162, 270) are installed on power lines between the plurality of second connection points (294, 300) and the second group having the other connection points (300).

  The third power control method of the present disclosure detects whether or not an electrical failure occurs in any of the two power supply systems, and switches on when no failure is detected, and the failure is detected. When is detected, the switch is turned off.

With this configuration, the third power control method of the present disclosure has substantially the same effect as the third power control device of the present disclosure described above.
In addition, the reference numerals in parentheses described in the claims indicate the correspondence with specific means described in the embodiment described later as one aspect, and limit the technical scope of the present disclosure. is not.

1 is a block diagram showing a power supply system according to a first embodiment. The block diagram which shows the vehicle-mounted apparatus connected to an electric power supply system. FIG. 2 is a block diagram showing a power control apparatus. FIG. 2 is a block diagram showing a power supply system when a failure occurs. 6 is a flowchart showing power control processing. The block diagram which shows the electric power supply system by 2nd Embodiment. FIG. 2 is a block diagram showing a power control apparatus. The block diagram showing the electric power supply system by a 3rd embodiment. The block diagram showing the electric power supply system by a 4th embodiment.

Hereinafter, embodiments to which the present disclosure is applied will be described based on the drawings.
[1. First embodiment]
[1-1. Constitution]
The on-vehicle power supply system 100 shown in FIG. 1 includes a high voltage storage battery 110, a DCDC converter 112, a low voltage storage battery 120, and a power control device 130. The power supply system 100 supplies power to the general load 10, which is an on-vehicle apparatus, and the fail processing loads 20 to 24.

  The general load 10 and the fail processing loads 20 to 24 are power loads that consume the power supplied from the power supply system 100. The power supply system 100 includes two power supply systems 210 and 212.

  The power supply system 210 includes a high voltage storage battery 110, a DCDC converter 112, and a power line 200, and supplies the power of the high voltage storage battery 110 stepped down by the DCDC converter 112 from the power line 200. The power supply system 212 includes a low voltage storage battery 120 and a power line 202, and supplies power of the low voltage storage battery 120 from the power line 202.

  The general load 10 is an electric load such as an air conditioner or an audio device which does not affect the travel and stop of the vehicle even if the power supply is cut off. The fail processing loads 20 to 24 constitute an automatic operation system that automates at least a part of the driving operation of the driver.

  The fail processing load 20 is connected to the power line 200, and power is supplied from the power supply system 210. The fail processing load 22 is connected to the power line 202, and power is supplied from the power supply system 212.

  The fail processing load 20 and the fail processing load 22 are power loads that execute any one of a plurality of functions necessary for traveling and stopping of the vehicle. Even if the power supply to either one of the fail processing load 20 and the fail processing load 22 is interrupted, if the power supply to the other is maintained, any one of a plurality of functions required for traveling and stopping of the vehicle Can do one part of

  The fail processing load 24 is a power load that executes any one of a plurality of functions necessary for traveling and stopping of the vehicle. The fail processing load 24 is connected to both of the power lines 200 and 202, and power is supplied from both of the power supply systems 210 and 212.

Hereinafter, an example of the in-vehicle apparatus of the fail processing loads 20 to 24 will be described based on FIG. Description of each in-vehicle device will be omitted except for a part.
The braking device 34, the recognition determination device 38, the detection recognition device 42, the parking and stopping security device 46, the periphery notification device 52, the visibility securing devices 56 and 60, and the driver notification device 64 are shown in FIG. It is done.

  Furthermore, as an example of the fail processing load 22, a braking device 36, a recognition determination device 40, a detection recognition device 44, a parking and stopping security device 48, a peripheral notification device 54, a view securing device 58 and 62, and a driver notification device 66 are shown. There is.

  The braking device 34 and the braking device 36 are substantially the same devices that operate the braking function for the vehicle, and constitute a dual system. The braking devices 34, 36 are, for example, an ESC. ESC is an abbreviation of Electronic Stability Control. When the braking device 34 is connected to the power line 200 and the braking device 36 is connected to the power line 202, even if a failure occurs in one of the two power supply systems 210, 212, it is supplied from the other power supply system. The electric power activates the braking function for the vehicle.

  The recognition determination device 38 and the recognition determination device 40, the detection recognition device 42 and the detection recognition device 44, the parking and stopping security device 46 and the parking and stopping security device 48, the periphery notification device 52 and the periphery notification device 54, the visibility securing device 56 and the visibility securing device 58, the visibility securing device 60 and the visibility securing device 62, and the driver notification device 64 and the driver notification device 66 are on-vehicle devices that execute similar functions.

  Therefore, even if a failure occurs in one of the power supply systems 210 and 212, the traveling of the vehicle can be maintained by supplying power to one of the on-vehicle apparatuses performing the similar function from the normal power supply system.

  For example, the cognitive determination device 38 is an ADAS, and the cognitive determination device 40 is an ADS. ADAS is an abbreviation for Advanced Driver Assistance System, and ADS is an abbreviation for Automatic Drive System. The recognition judgment devices 38 and 40 recognize and judge the situation around the vehicle and drive the vehicle automatically.

  For example, the detection and recognition device 42 is LiDAR, and the detection and recognition device 44 is a radar. LiDAR is an abbreviation for Light Detection and Ranging. The detection and recognition devices 42 and 44 detect and recognize the situation around the vehicle.

  For example, when the shift lever is set to the parking range, the parking / parking guarantee device 46 is a shift parking device that operates the parking brake electrically to guarantee parking / stopping of the vehicle. For example, the parking and stopping security device 48 is an EPB. EPB is an abbreviation of Electric Parking Brake. The parking and stopping security devices 46 and 48 ensure that the vehicle is parked and stopped.

  For example, the surrounding notification device 52 is a hazard lamp, and the surrounding notification device 54 is a stop light. The peripheral notification devices 52, 54 notify that the vehicle is stopped around the vehicle or that the vehicle is stopped. For example, the visibility securing device 56 is a right headlight, and the visibility securing device 58 is a left headlight. The visibility securing devices 56, 58 illuminate the front of the vehicle to secure the driver's visibility.

For example, the visibility securing device 60 is the right wiper 60, and the visibility securing device 62 is the left wiper. The visibility securing devices 60, 62 wipe the windshield to secure the driver's visibility.
For example, the driver notification device 64 is an MID and a buzzer, and the driver notification device 66 is a CID and a buzzer. MID is an abbreviation for Multi Information Display, and CID is an abbreviation for Central Information Display. The driver notification devices 64, 66 warn the driver with a display or sound.

  Further, FIG. 2 shows a power management device 30, a steering device 32, a post crash function device 50, and a driving position device 68 as an example of the fail processing load 24. The power management device 30, the steering device 32, the post crash function device 50, and the driving position device 68 are supplied with power from both of the power supply systems 210 and 212.

The power management device 30 is, for example, an EPS 32 and controls switching of the DCDC converter 112. EPS stands for Electric Power Steering.
The post crash function device 50 performs a function of electrically hoisting a seat belt and activating an air bag when a vehicle collides. The driving position device 68 is, for example, an electric seat, an electric Ti & Te handle, an electric mirror, an accelerator, an electric pedal such as a brake. Ti is an abbreviation for Tilt, and Te is an abbreviation for Telescopic.

  The motorized seat, the motorized Ti & Te handle, the motorized mirror, and the motorized pedal can be positioned in the relaxed position so as not to disturb the rider, for example, in the case of fully automatic driving or partial automatic driving. Then, when switching from the fully automatic operation to the manual operation requiring the driving operation of the driver, the motorized seat, the motorized Ti & Te handle, the motorized mirror, and the motorized pedal are electrically moved to a position where the driver can operate.

  The high voltage storage battery 110 is, for example, a 350 V storage battery, and the low voltage storage battery 120 is, for example, a 12 V storage battery. The DCDC converter 112 steps down the voltage of the high voltage storage battery 110 to 12 V, which is comparable to the low voltage storage battery 120. Power line 200 is connected to DC-DC converter 112, and power line 202 is connected to low voltage storage battery 120.

  As a failure of the two power supply systems 210 and 212, if the high voltage storage battery 110, the DCDC converter 112, and the low voltage storage battery 120 are abnormal, and the power lines 200 and 202 are not open, or a ground or power fault occurs, FIG. As shown in FIG. 2, the power control device 130 connects the power line 200 and the power line 202. When power line 200 and power line 202 are connected, when the output voltage of DCDC converter 112 is higher than the output voltage of low voltage storage battery 120, low voltage storage battery 120 is charged.

  Here, the ground fault means that the power lines 200 and 202 are short circuited to the ground side, the power fault is that the power lines 200 and 202 short circuit to the power source side, and the open circuit is that the power lines 200 and 202 are disconnected.

  As shown in FIG. 3, the power control device 130 includes two microcomputers 140 and 150 and switches 160 and 162. Hereinafter, a microcomputer is also referred to as a microcomputer. The microcomputers 140 and 150 each include a CPU, a RAM, a ROM, and a flash memory (not shown). The RAM, the ROM, and the flash memory are semiconductor memories which are non-transitional tangible storage media.

  The various functions of the microcomputers 140 and 150 are executed by the CPU executing programs stored in the non-transitional tangible recording medium. The CPU executes this program to execute a method corresponding to the program.

  The method of executing each of the various functions of the microcomputers 140 and 150 is not limited to software, and hardware in which part or all of the elements are combined with a logic circuit, an analog circuit, or the like may be used.

  The microcomputer 140 includes a detection unit 142, a control unit 144, a drive unit 146, and a diagnosis unit 148. The microcomputer 150 includes a detection unit 152, a control unit 154, a drive unit 156, and a diagnosis unit 158. Since the configuration of the microcomputer 140 and the configuration of the microcomputer 150 are substantially the same, the description of the microcomputer 150 is substituted by the description of the microcomputer 140.

  The detection unit 142 detects the voltage and current of the power line 200 and performs AD conversion, and as an electrical failure, any of the abnormality of the high voltage storage battery 110 and the DCDC converter 112 and the open, short or ground fault of the power line 200 It detects whether it has occurred.

  The control unit 144 drives the drive unit 146 based on the detection result of the detection unit 142 and the traveling information of the vehicle, such as whether the vehicle is traveling or stopping, and whether the automatic driving switch is on or off. Decide whether to turn it on or off. The driver 146 turns the switch 160 on or off according to an instruction of the controller 144.

  For example, based on the detection result of the detection unit 142, the control unit 144 instructs the drive unit 146 to turn off the switch 160 when it is determined that a ground fault has occurred as a failure in the power line 200. When the switch 160 is turned off, the power of the low voltage storage battery 120 can be prevented from flowing from the power line 202 to the power line 200 and flowing out to the ground side.

The diagnosis unit 148 determines whether the control value output from the control unit 144 of the microcomputer 140 matches the control value output from the control unit 154 of the microcomputer 150.
When the control value output from the control unit 144 matches the control value output from the control unit 154 of the microcomputer 150, the diagnosis unit 148 determines that the microcomputer 140 and the microcomputer 150 operate normally. When the control value output from the control unit 144 and the control value output from the control unit 154 of the microcomputer 150 do not match, the diagnosis unit 148 determines that either the microcomputer 140 or the microcomputer 150 is abnormal.

  In this case, the diagnosis unit 148 notifies the control unit 144 of an abnormality. The control unit 144 notified of the abnormality from the diagnosis unit 148 instructs the drive unit 146 to turn off the switch 160, or the transition to the manual operation from the automatic operation, a sound, a display on the display, etc. Inform the driver by.

The switch 160 and the switch 162 are connected in series. A MOSFET or an isolated buck-boost DCDC converter is used for the switches 160 and 162.
When a failure occurs in either of the two power supply systems 210 and 212, the switch 160 or the switch 162 is turned off, so that the connection between the power line 200 and the power line 202 is cut off as shown in FIG. Thereby, it is possible to prevent the power from flowing out from the normal power supply system side to the failed power supply system side.

[1-2. processing]
The power control process executed by the power control apparatus 130 will be described based on the flowchart of FIG. The flowchart of FIG. 5 is executed when the start switch of the engine is turned on. In FIG. 5, "S" represents a step.

  In S400, the power control apparatus 130 executes initial checks such as memory checks of the microcomputers 140 and 150 and diagnosis of the microcomputers 140 and 150 on each other. If the determination in S402 is Yes, that is, if the initial check is normal, the process proceeds to S404. If the determination in S402 is No, that is, the initial check is abnormal, the present process ends.

  In S404, the power control apparatus 130 turns on the switches 160 and 162 to connect the power line 200 and the power line 202. In S406, the power control device 130 determines whether the conditions for executing the operation check of the switches 160 and 162 are satisfied. For example, when the high voltage storage battery 110 and the low voltage storage battery 120 are sufficiently charged, the power control apparatus 130 determines that the execution condition of the operation check of the switches 160 and 162 is satisfied.

  If the determination in S406 is YES, that is, the execution condition of the operation check of the switches 160 and 162 is satisfied, the process proceeds to S408. If the determination in S406 is No, that is, the execution condition of the operation check of the switches 160 and 162 is not satisfied, the process proceeds to S418.

  In S408, the power control device 130 turns on and off the switches 160 and 162 at the same time a predetermined number of times simultaneously, alternately turns on and off, and at least one of the switches 160 and 162 is stuck on the off side or is on Check if it is stuck on the side.

If the determination in S410 is No, that is, both the switches 160 and 162 are not stuck to either the on side or the off side and operate normally, the process proceeds to S418.
If the determination in S410 is Yes, that is, it is an abnormality in which at least one of the switches 160 and 162 is stuck on either the on side or the off side, the power control apparatus 130 in S412 has the automatic operation switch on. It is determined whether the automatic operation mode is selected. When one of the switches 160 and 162 is fixed to the on side, the normal switch of the switches 160 and 162 may be turned off.

  If the determination in S412 is Yes, that is, if the automatic operation mode is selected, the power control device 130 determines that it is difficult to continue the automatic operation because one of the switches 160 and 162 is abnormal. . Then, in S414, the power control device 130 notifies the driver of the transition from the automatic operation to the manual operation by sound, display on the display, or the like, and ends this processing.

  When the determination in S412 is No, that is, when the automatic operation mode is not selected, it is difficult for the power control device 130 to shift from the manual operation to the automatic operation because one of the switches 160 and 162 is abnormal. I will judge. Then, in S416, the power control device 130 notifies the driver of the prohibition of the transition from the manual operation to the automatic operation by display on the display or the like, and ends the present process.

  In S418, the power control device 130 determines whether or not a failure has occurred in either the power supply system 210 or the power supply system 212. If the determination in S418 is No, that is, no failure occurs in any of the two power supply systems 210 and 212, the power control apparatus 130 shifts the process to S406.

  If the determination in S418 is Yes, that is, if a failure occurs in either of the two power supply systems 210 and 212, the power control apparatus 130 turns off the switches 160 and 162 in S420. As a result, the connection between the normal power supply system and the failed power supply system is cut off.

Then, at S422, the power control device 130 instructs the traveling control device (not shown) to evacuate the vehicle, and the process ends.
[1-3. effect]
According to the first embodiment described above, the following effects can be obtained.

  (1a) When an electrical failure occurs in any of the power supply systems 210 and 212, the switches 160 and 162 turn off the connection between the failed power supply system and another power supply system. It can be cut off more easily. Then, power is supplied to the fail processing load 20 and any of the fail processing loads 20 and 22 that execute the functions necessary for traveling and stopping of the vehicle from the power supply system in which no fault occurs.

  As a result, there is no need to install a backup power supply for the occurrence of a failure in the power supply system, so the enlargement of the power supply system 100 is suppressed, and the weight of the power supply system 100 is increased. Can be suppressed.

  (1b) Even if a failure occurs in one of the two power supply systems, the automatic operation can be continued by the power supplied from the normal power supply system until transitioning from automatic operation to manual operation .

  In addition, even when it is not possible to shift from the automatic driving to the manual driving, the automatic driving can be continued by the power supplied from the normal power supply system, and the evacuation traveling can be executed. Then, if there is a space available for parking, the vehicle can be stopped by automatic driving to operate the parking brake.

(1c) In the case where the electrical failure is a ground fault, the power supplied from the high voltage storage battery 110 and the low voltage storage battery 120 can be prevented from flowing into the ground fault and consuming power.
(1d) If one of the switches 160 and 162 is stuck on the on side or off side, the power control device 130 instructs the shift from the automatic operation to the manual operation if the automatic operation is being performed, and the manual operation is performed. If driving, prohibit transition to automatic driving. Thereby, it can suppress that automatic operation is performed in the state which switch 160, 162 is abnormal.

  In the first embodiment described above, the general load 10 and the fail processing loads 20 to 24 correspond to the on-vehicle apparatus, the fail processing load 24 corresponds to the first on-vehicle apparatus, and the fail processing loads 20 and 22 are the second. The detection units 142 and 152 correspond to the detection unit, the control units 144 and 154 correspond to the control unit and the information acquisition unit, and the diagnosis units 148 and 158 correspond to the diagnosis unit.

  Further, the function necessary for traveling and stopping of the vehicle to be executed by the fail processing load 24 corresponds to the first function, and the function necessary for traveling and stopping of the vehicle to be executed by the fail processing loads 20 and 22 is second Corresponding to the function of

Further, S406 corresponds to the processing of the information acquisition unit, S418 corresponds to the processing of the detection unit, and S406 to S410 and S420 correspond to the processing of the control unit.
[2. Second embodiment]
[2-1. Constitution]
As shown in FIG. 6, the power supply system 170 of the second embodiment is mounted on a vehicle provided with only the internal combustion engine 180 as a motive power source. In the second embodiment, the same reference numerals are used for the same components as in the first embodiment. The same reference numerals as in the first embodiment refer to the preceding description.

  In the second embodiment, the low voltage storage battery 120, the generator 182 driven by the internal combustion engine 180, the general load 10, and the fail processing load 20 to 24 are connected to the annular power line 220. The generator 182 may be either driven directly by the output shaft of the internal combustion engine 180 or driven by an axle that rotates with the wheels.

The power supply system 240 supplies power from the generator 182 to the power line 220. The power supply system 242 supplies power from the low voltage storage battery 120 to the power line 220.
Power control devices 250a-g are configured such that adjacent connection points and adjacent points are connected at connection points 222-234 of general load 10, fail processing loads 20-24, low voltage storage battery 120 and generator 182, respectively, and power line 220. It is installed between. The power control device 250 f directly connecting between the connection point 222 and the connection point 234 minimizes the electric resistance when the generator 182 charges the low voltage storage battery 120 as much as possible.

  Although each power control apparatus is shown with a different code | symbol in FIG. 6 in order to distinguish the installation position of power control apparatus 250a-250g, power control apparatus 250a-250g is the same structure. Accordingly, in FIG. 7, the power control devices 250 a-g are collectively shown by reference numeral 250 in order to explain the configuration of the power control devices 250 a-250 g.

  As shown in FIG. 7, the power control device 250 includes one microcomputer 260 and a switch 270. The microcomputer 260 includes a CPU, a RAM, a ROM, and a flash memory (not shown). The RAM, the ROM, and the flash memory are semiconductor memories which are non-transitional tangible storage media.

  The various functions of the microcomputer 260 are executed by the CPU executing a program stored in the non-transitional tangible storage medium. The CPU executes this program to execute a method corresponding to the program.

  The method of executing the various functions of the microcomputer 260 is not limited to software, and hardware in which part or all of the elements are combined with a logic circuit, an analog circuit, or the like may be used. The microcomputer 260 includes a detection unit 262, a control unit 264, a drive unit 266, and a diagnosis unit 268.

  In the second embodiment, the process of S418 of the flowchart shown in FIG. 5 of the first embodiment is based on whether or not an electrical failure has occurred in any of the power supply systems 240 and 242 on both sides of the switch 270. If it is replaced with the process to determine whether or not, substantially the same process as the power control process shown by the flowchart shown in FIG. 5 is executed.

  The detection unit 262 detects the direction of the current flowing through the power lines 220a and 220b on both sides of the switch 270, detects the voltage and current of the power lines 220a and 220b, performs AD conversion, and causes the power supply systems 240 and 242 to fail. It is detected whether an abnormality in the low voltage storage battery 120 or the generator 182 or an open, short circuit or ground fault of the power lines 220 on both sides of the power control device 250 has occurred.

  The control unit 264 drives the drive unit 266 based on the detection result of the detection unit 262 and the traveling information of the vehicle such as whether the vehicle is traveling or stopping, and whether the automatic driving switch is on or off. Decide whether to turn it on or off. The driver 266 turns the switch 270 on or off according to an instruction from the controller 264.

  For example, when the control unit 264 determines that a ground fault has occurred as a failure in the power supply systems 240 and 242 based on the detection result of the detection unit 262, the power control devices 250 on both sides of the location where the failure occurs. The controller 264 instructs the driver 266 to turn the switch 270 off. As a result, the switches 270 on both sides of the part where the failure occurs are turned off. As a result, the location where the ground fault occurs is separated from the normal power supply system, so that it is possible to prevent the power from flowing out to the location where the ground fault occurs.

  For example, when a ground fault occurs as a failure in the power line 220 between the power control device 250a and the power control device 250b sandwiching the connection point 224, the power control device 250a on both sides of the connection point 224 and the power control device The control unit 264 with 250 b instructs the drive unit 266 to turn off the switch 270.

  The diagnosis unit 268 inputs the voltage and current of the power lines 220 a and 220 b on both sides of the switch 270 as well as the control unit 264, and travel information, and calculates control values by the same control processing as the control unit 264. The diagnosis unit 268 determines whether the control value output by the control unit 264 and the control value calculated by the diagnosis unit 268 match.

  When the control value output from the control unit 264 matches the control value calculated by the diagnosis unit 268, the diagnosis unit 268 determines that the control unit 264 operates normally. When the control value output from the control unit 264 and the control value calculated by the diagnosis unit 268 do not match, the diagnosis unit 268 determines that the control unit 264 is abnormal. In this case, the diagnosis unit 268 notifies the control unit 264 of the abnormality. The control unit 264 notified of the abnormality from the diagnosis unit 268 instructs the drive unit 266 to turn off the switch 270.

[2-2. effect]
In the second embodiment described above, in the effects (1a) to (1c) of the first embodiment, the power supply system 100 is replaced with the power supply system 170, and the high voltage storage battery 110 is replaced with the generator 182. In addition to the effects obtained by replacing the power control system 130 with the power control apparatus 250 and replacing the switches 160 and 162 with the switch 270, the following effects can be obtained.

  (2a) The power control device between the adjacent connection point and the adjacent point at the connection points 222 to 234 of the general load 10, the fail processing load 20 to 24, the low voltage storage battery 120 and the generator 182 and the power line 220, respectively. 250a-g are installed. Therefore, it is possible to cut off the switches 270 on both sides of the failure point and to minimize the range disconnected from the normal power supply system. Thus, even if a failure occurs in the power supply systems 240 and 242, power can be supplied to as many on-vehicle devices as possible.

(2b) Since the power control apparatus 250 includes one microcomputer 260, the amount of hardware of the power control apparatus 250 can be reduced.
In the second embodiment, the connection points 226 and 230 correspond to the first connection point, the connection points 224 and 232 correspond to the second connection point, and the connection points 222 and 234 correspond to the third connection point. .

Further, the generator 182 corresponds to the power supply, and the control unit 264 corresponds to the control unit and the information acquisition unit.
[3. Third embodiment]
[3-1. Differences from the Second Embodiment]
In the power supply system 190 of the third embodiment shown in FIG. 8, in the second embodiment, only the power control devices 250 c and 250 g are installed without installing the power control devices 250 a, 250 b, 250 d, 250 e and 250 f. It differs from the second embodiment in the points. In the third embodiment, the same reference numerals are used for the same components as in the second embodiment. The same reference numerals as in the first embodiment refer to the preceding description.

  In the third embodiment, the process of S418 of the flow chart shown in FIG. 5 of the first embodiment is based on whether or not an electrical failure has occurred in any of the power supply systems 240 and 242 on both sides of the switch 270. If it is replaced with the process to determine whether or not, substantially the same process as the power control process shown by the flowchart shown in FIG. 5 is executed.

  In one circumferential direction of annular power line 220, between connection points 226 and 230 between fail processing load 24 and power line 220 and between connection points 224 and 232 between fail processing loads 20 and 22 and power line 220 Between the connection point 222 between the low voltage storage battery 120 and the power line 220 and the connection point 234 between the generator 182 and the power line 220, there are two places where the switch 270 for turning off the connection can be shared.

  It is, for example, in the clockwise direction of the annular power line 220 between the connection point 222 and the connection point 234 as well as between the connection point 230 and the connection point 226. Power control devices 250c and 250g are installed on the two power lines 220, respectively. When an electrical failure occurs in any of the power supply systems 240 and 242, the power control devices 250c and 250g installed at positions sandwiching the failure point turn the switch 270 off.

[3-2. effect]
In the third embodiment described above, in addition to the effects (2a) of the second embodiment, it is possible to obtain the effect that the number of power control devices 250 installed in the power supply system 190 can be reduced as much as possible.

[4. Fourth embodiment]
[4-1. Constitution]
In the power supply system 280 of the fourth embodiment shown in FIG. 9, one power line 290 connects the high voltage storage battery 110 and the low voltage storage battery 120.

  Of the connection points 294 and 300 between the fail processing loads 20 and 22 and the power line 290 and the connection points 296 and 298 between the fail processing load 24 and the power lines 290, the connection points 294 and 296 are the first group. The connection point 300 and the connection point 298 constitute a second group. Power supply system 310 supplies power from high voltage storage battery 110 to power line 290. Power supply system 312 supplies power from low voltage storage battery 120 to power line 290.

  The power control devices 130a, 130b, and 130c are disposed between the high voltage storage battery 110 and the first group, between the first group and the second group, and between the low voltage storage battery 120 and the second group. is set up. The power control devices 130a, 130b, and 130c have substantially the same configuration as the power control device 130 of the first embodiment, except for the reference numerals to distinguish the installation positions.

In the fourth embodiment, substantially the same processing as the power control processing shown by the flowchart shown in FIG. 5 of the first embodiment is executed.
In the power supply systems 310 and 312, when an electrical failure occurs between the high voltage storage battery 110 and the connection point 292 between the general load 10 closest to the high voltage storage battery 110 and the power line 290, the power control device 130a The switches 160 and 162 of 130a are turned off. When the switches 160 and 162 of the power control device 130a are turned off, the connection between the electrical failure generated between the connection point 292 and the high voltage storage battery 110 and the normal power supply system 312 is cut off.

Then, power is supplied from the normal power supply system 312 to the general load 10 and the fail processing loads 20 to 24.
In the power supply systems 310 and 312, when an electrical failure occurs between the fail processing load 22 closest to the low voltage storage battery 120 and the connection point 300 between the power line 290, the power control device 130c switches the switch 160 of the power control device 130c. , Turn off 162. When the switches 160 and 162 of the power control device 130 c are turned off, the electrical failure occurring between the connection point 300 and the low voltage storage battery 120 and the connection between the normal power supply system 310 are cut off.

Then, power is supplied from the normal power supply system 310 to the general load 10 and the fail processing loads 20 to 24.
If an electrical failure occurs at a power supply system 310, 312 other than the above, the power control device 130b turns off the switches 160, 162 of the power control device 130b. When the switches 160 and 162 of the power control device 130b are turned off, power is supplied from the normal power supply system to either the first group or the second group sandwiching the power control device 130b. That is, power is supplied from the normal power supply system to one of the fail processing loads 20 and 22 and the fail processing load 24.

  In the fourth embodiment, the power control device 130b installed between the first group and the second group is essential, but the power control devices 130a and 130c may not be installed. In this case, when an electrical failure occurs in any of the power supply systems 310 and 312, the power control device 130b turns off the switches 160 and 162 of the power control device 130b.

As a result, power is supplied from the normal power supply system to one of the fail processing loads 20 and 22 and the fail processing load 24.
[4-2. effect]
In the fourth embodiment described above, in the effects (1a) to (1d) of the first embodiment, the power supply system 100 is replaced with the power supply system 280, and the power supply grids 210 and 212 are converted into the power supply grids 310 and 312. It is possible to obtain the replaced effect.

  In the fourth embodiment, the connection points 296 and 298 correspond to the first connection points, and the connection points 294 and 300 correspond to the second connection points. One of the connection points 296 and 298 and one of the connection points 294 and 300 correspond to a partial connection point, and the other of the connection points 296 and 298 and the other of the connection points 294 and 300 correspond to the other connection point. .

[5. Other embodiments]
(1) In the first to third embodiments, power is supplied to the on-vehicle device from the two power supplies of the high voltage storage battery 110 and the low voltage storage battery 120 or the two power supplies of the generator 182 and the low voltage storage battery 120. did. The number of power supplies is not limited to two and may be three or more.

When the number of power supplies is three or more, in the first embodiment, independent power lines equal to the number of power supplies are installed, and the connection between the power lines is turned on or off by the power control device 130.
Even if the number of power supplies is three or more, the configuration of the annular power line 220 is the same in the second embodiment and the third embodiment.

(2) In each embodiment, the power control device 130 and the power control device 250 may be interchanged.
(3) In the above embodiment, the power supply system for supplying power to the automatic driving system has been described. Besides this, the power supply system may supply power to a manual operation system which does not perform automatic operation.

  (4) In the above embodiment, the power control apparatus 130 includes the two microcomputers 140 and 150, and diagnoses each other's processing based on whether or not the control results match. Besides this, the power control apparatus may include three or more microcomputers and diagnose each other's processing by majority.

  (5) In the above embodiment, the power control device 130 includes the switches 160 and 162, and the power control device 250 includes the switch 270. On the other hand, the switches 160 and 162 may be separated from the power control device 130, and the switch 270 may be separated from the power control device 250. In this case, one power control device may turn on and off the plurality of switches 270.

  (6) In the second embodiment, when a failure occurs in the power supply system 240 and the power control device 250 turns off the switch 270, depending on the position of the switch 270 which is turned off, all the switches 270 are on The current value flowing through the power line 220 may be larger than that.

  For example, in FIG. 6, when the switch 270 between the power control device 250a and the power control device 250g is turned off because the power line between the connection point 222 and the power control device 250a is grounded, the generator 182 receives the general load 10 and In order to supply power to the fail processing loads 20 to 24, the value of the current flowing through the power line 220 is larger than when all the switches 270 are all on.

  In this case, at least one of the power control devices 250b to 250f in which the switch 270 is on may duty control the on / off of the switch 270 to reduce the value of the current flowing through the power line 220.

  Alternatively, a variable resistor capable of electrically changing the resistance value of the power control device 250 is installed on the power line 220, and at least one of the power control devices 250b to 250f whose switch 270 is turned on increases the resistance value of the variable resistor. May be

Alternatively, the general load 10 to which power is supplied and the fail processing loads 20 to 24 may limit the processing amount to reduce the power consumption.
(7) The function possessed by one component in the above embodiment may be distributed as a plurality of components, or the function possessed by a plurality of components may be integrated into one component. Further, at least a part of the configuration of the above embodiment may be replaced with a known configuration having the same function. In addition, part of the configuration of the above embodiment may be omitted. In addition, at least a part of the configuration of the above-described embodiment may be added to or replaced with the configuration of the other above-described embodiment. In addition, all the aspects included in the technical thought specified only by the words described in the claims are the embodiments of the present disclosure.

  (8) In addition to the power control devices 130 and 250 described above, a power supply system 100, 170, 190, 280 having the power control devices 130 and 250 as components is for causing a computer to function as the power control devices 130 and 250. The present disclosure can be implemented in various forms such as a power control program, a recording medium recording the power control program, and a power control method.

10: general load (vehicle-mounted device) 20, 22: failure processing load (second vehicle-mounted device) 24: failure processing load (first vehicle-mounted device) 100, 170, 190, 280: power supply system 110 : High voltage storage battery (power supply), 120: low voltage storage battery (power supply), 130, 250: power control device, 140, 150: microcomputer (microcomputer), 142, 152, 262: detection unit, 144, 154, 264: control unit (Control unit, information acquisition unit) 160, 162, 270: Switch, 182: Generator (power supply), 200, 202, 220, 290: Power line, 210, 212, 240, 242, 310, 312: Power supply system , 222 to 226, 230 to 234, 294 to 300: connection points

Claims (13)

At least one of a plurality of power supply systems (210, 212) by a plurality of power supplies (110, 120) and power lines (200, 202) connected to each of the power supplies to an on-vehicle device (10, 20-24) A power controller (130, 250) applied to a power supply system (100) for supplying power, comprising
A first on-vehicle device (24) which executes at least one first function necessary for traveling and stopping of the vehicle as one of the on-vehicle devices, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of the second functions and a plurality of the second on-vehicle devices (20, 22);
Each of the first on-vehicle devices is connected to at least two of the power lines, and one of the second on-vehicle devices performs at least a part of one of the second functions and performs each of the second functions. A plurality of the second on-vehicle devices are divided into at least two and connected to different power lines;
A switch (160, 162, 270) for connecting the plurality of power lines to each other;
A detection unit (142, 152, 262, S418) configured to detect whether or not an electrical failure has occurred in any of the plurality of power supply systems;
When the detection unit does not detect the failure, the switch is turned on, and when the detection unit detects the failure, the power supply system in which the failure is detected and the other power supply system, and A control unit (144, 154, 264, S406 to S410, S420) configured to turn off the switch connecting the
Power control device comprising: Power is supplied to the on-vehicle devices (10, 20-24) from at least one of a plurality of power supply systems (240, 242) by a ring-shaped power line (220) and a plurality of power sources (120, 182) connected to the power lines. A power controller (130, 250) applied to a power supply system (170) for supplying
A first on-vehicle device (24) which executes at least one first function necessary for traveling and stopping of the vehicle as one of the on-vehicle devices, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of the second functions and a plurality of the second on-vehicle devices (20, 22);
The first in-vehicle devices are connected to the power line at a plurality of locations, one second in-vehicle device executes at least a part of one second function, and each second in-vehicle device Connect to the power line at
In the circumferential direction of one of the annular power lines, the second function is performed between a plurality of first connection points (226, 230) between each of the first on-vehicle devices and the power line Between a plurality of second connection points (224, 232) between the plurality of second on-vehicle devices and the power line, and a plurality of third connection points (222, between the plurality of power sources and the power line) 234) switches (160, 162, 270) installed between each other;
A detection unit (142, 152, 262, S418) configured to detect whether or not an electrical failure has occurred in any of the plurality of power supply systems;
When the detection unit does not detect the failure, the switch is turned on, and when the detection unit detects the failure, the switch at a position across the failure is turned off. A controller (144, 154, 264, S406 to S410, S420);
Power control device comprising: The power control apparatus according to claim 2,
One of each of the locations where the switch can be shared between the plurality of first connection locations, between the plurality of second connection locations, and between the plurality of third connection locations. The switch is installed,
Power control unit. Power is supplied to the on-vehicle devices (10, 20-24) from at least one of two power supply systems (310, 312) by two power supplies (110, 120) and a power line (290) connecting the two power supplies. A power controller (130, 250) applied to a power supply system (280) for supplying
A first on-vehicle device (24) which executes at least one first function necessary for traveling and stopping of the vehicle as one of the on-vehicle devices, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of the second functions and a plurality of the second on-vehicle devices (20, 22);
The first in-vehicle devices are connected to the power line at a plurality of locations, one second in-vehicle device executes at least a part of one second function, and each second in-vehicle device Connect to the power line at
A plurality of connection points (296) of a part of a plurality of first connection points (296, 298) between each of the first on-vehicle devices and the power line, and a plurality of the second functions executing each of the second functions A first group having two on-vehicle devices and a part of connection points (294) of the plurality of second connection points (294, 300) with the power line, and the other of the plurality of first connection points A switch (160, 162) installed on the power line between a second group having a connection point (298) and another connection point (300) of the plurality of second connection points (294, 300) 270),
A detection unit (142, 152, 262, S418) configured to detect whether or not an electrical failure has occurred in any of the two power supply systems;
A control unit (144, 154, 264) configured to turn on the switch when the detection unit does not detect the failure, and turn off the switch when the detection unit detects the failure. , S406 to S410, S420),
Power control device comprising: The power control apparatus according to any one of claims 1 to 4, wherein
The information acquisition unit (144, 154, 264, S406) configured to acquire driving information of the vehicle, further comprising
If the control unit (S406 to S410) determines that the switch may be turned off based on the travel information acquired by the information acquisition unit, the control unit turns the switch on and off a predetermined number of times, and the switch is normally operated. Configured to determine whether or not to operate
Power control unit. The power control apparatus according to claim 5,
The switch is composed of a plurality of switches (160, 162) connected in series,
The control unit (144, 154, S406 to S410) turns off at least one of the plurality of switches when at least one of the plurality of switches constituting one of the switches is fixed on the on side. To make
Power control unit. The power control apparatus according to any one of claims 1 to 6, wherein
The detection unit, the control unit, and a plurality of microcomputers (140, 150) which respectively constitute the information acquisition unit when claim 4 or 5 is cited,
Each of the microcomputers further comprises a diagnosis unit (148, 158) configured to diagnose whether each other is operating normally.
Power control unit. The power control apparatus according to any one of claims 1 to 7, wherein
The plurality of power sources are a high voltage storage battery (110) and a low voltage storage battery (120) which are stepped down by a DCDC converter (112).
Power control unit. The power control apparatus according to any one of claims 1 to 7, wherein
The plurality of power sources are a generator (182) and a low voltage storage battery (120).
Power control unit. The power control apparatus according to any one of claims 1 to 9, wherein
The power supply system supplies power to an automatic driving system that automates at least a part of the driving operation of the driver.
Power control unit. At least one of a plurality of power supply systems (210, 212) by a plurality of power supplies (110, 120) and power lines (200, 202) connected to each of the power supplies to an on-vehicle device (10, 20-24) A power control method applied to a power supply system (100) for supplying power, comprising:
A first on-vehicle device (24) which executes at least one first function necessary for traveling and stopping of the vehicle as one of the on-vehicle devices, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of the second functions and a plurality of the second on-vehicle devices (20, 22);
Each of the first on-vehicle devices is connected to at least two of the power lines, and one of the second on-vehicle devices performs at least a part of one of the second functions and performs each of the second functions. A plurality of the second on-vehicle devices are divided into at least two and connected to different power lines;
The plurality of power lines are connected by switches (160, 162, 270), and it is detected whether or not an electrical failure has occurred in any of the plurality of power supply systems;
If the failure is not detected, the switch is turned on, and if the failure is detected, the switch connecting the power supply system whose failure is detected to the other power supply system is turned off Do,
Power control method. Power is supplied to the on-vehicle devices (10, 20-24) from at least one of a plurality of power supply systems (240, 242) by a ring-shaped power line (220) and a plurality of power sources (120, 182) connected to the power lines. A power control method applied to a power supply system (170) for supplying
A first on-vehicle device (24) which executes at least one first function necessary for traveling and stopping of the vehicle as one of the on-vehicle devices, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of the second functions and a plurality of the second on-vehicle devices (20, 22);
The first in-vehicle devices are connected to the power line at a plurality of locations, one second in-vehicle device executes at least a part of one second function, and each second in-vehicle device Connect to the power line at
A plurality of connection points (226, 230) between each of the first on-vehicle devices and the power line and a plurality of the second functions in one circumferential direction of the annular power line. Switches (a plurality of connection points (224, 232) between the second on-vehicle device and the power line) and a plurality of connection points (222, 234) between the plurality of power sources and the power line 160, 162, 270) are installed,
Detecting whether or not an electrical failure has occurred in any of the plurality of power supply systems;
When the failure is not detected, the switch is turned on, and when the failure is detected, the switch at a position across the failure is turned off.
Power control method. Power is supplied to the on-vehicle devices (10, 20-24) from at least one of two power supply systems (310, 312) by two power supplies (110, 120) and a power line (290) connecting the two power supplies. A power control method applied to a power supply system (280) for supplying
A first on-vehicle device (24) which executes at least one first function necessary for traveling and stopping of the vehicle as one of the on-vehicle devices, and at least one required for traveling and stopping of the vehicle At least one of the second on-vehicle devices (20, 22) that executes a plurality of the second functions and a plurality of the second on-vehicle devices (20, 22);
The first in-vehicle devices are connected to the power line at a plurality of locations, one second in-vehicle device executes at least a part of one second function, and each second in-vehicle device Connect to the power line at
A plurality of connection points (296) of a part of a plurality of first connection points (296, 298) between each of the first on-vehicle devices and the power line, and a plurality of the second functions executing each of the second functions A first group having two on-vehicle devices and a part of connection points (294) of the plurality of second connection points (294, 300) with the power line, and the other of the plurality of first connection points A switch (160, 162, 270) on the power line between a second group having a connection point (298) and another connection point (300) of the plurality of second connection points (294, 300) Is installed,
Detecting whether an electrical failure has occurred in any of the two power supply systems;
The switch is turned on when the failure is not detected, and the switch is turned off when the failure is detected.
Power control method.

Images