JP2019176695A - Electronic control device - Google Patents

Abstract

To inhibit occurrence of damage caused by communication abnormality.SOLUTION: A control section 45 and an engine ECU 2 are electronic control devices used in a power supply system 1 comprising a rotary electric machine 41, the control section 45, storage batteries 3, 11, switches 17, 18, a control section 29 for a lithium battery unit 4, and the engine ECU 2. The control section 45 stops power generation by the rotary electric machine 41 when it is determined that power generation communication abnormality occurs. Further, the control section 45 executes autonomous power generation when a switching completion condition showing that the control section 29 has completed execution of abnormality time changeover processing in the case of occurrence of switch communication abnormality is satisfied. The engine ECU 2 instructs to stop power generation when the switch communication abnormality occurs. Further, the engine ECU 2 instructs conventional power generation when it is determined that a changeover completion condition is satisfied.SELECTED DRAWING: Figure 1

Description

  The present disclosure relates to an electronic control device that controls power generation in a vehicle equipped with an engine.

  Patent Document 1 describes a battery unit having an internal storage battery in which an external storage battery and a rotating electrical machine are connected. The battery unit described in Patent Literature 1 includes a first switch disposed on an energization path that connects an external storage battery and a rotating electrical machine, and a second switch disposed on an energization path that connects the internal storage battery and the rotating electrical machine. With. Patent Document 1 describes a host control device that is communicably connected between a battery unit and a rotating electrical machine unit having a rotating electrical machine. The host control device controls power running and power generation of the rotating electrical machine in the rotating electrical machine unit, and controls on / off of the switch in the battery unit.

  In addition, when an instruction from the host control device cannot be acquired due to a communication abnormality, the battery unit switches the switch in the battery unit so as to have a power source configuration equivalent to a conveyor vehicle as fail-safe processing. It has been known. The power source configuration equivalent to the conveyor vehicle is a configuration in which the external storage battery and the rotating electrical machine are electrically connected, and the internal storage battery and the rotating electrical machine are not electrically connected.

  In addition, when an instruction from the host control device cannot be acquired due to a communication abnormality, power generation is performed autonomously in order to secure electric power necessary for driving the vehicle safely. A rotating electric machine unit that is configured is known.

Japanese Patent Laying-Open No. 2015-149849

  However, if the battery unit performs switchover as a fail-safe process when the rotating electrical machine unit is generating power autonomously, excessive power generation is performed with respect to the energization path connecting the rotating electrical machine and each storage battery. As a result, a surge is generated, and there is a possibility that the device connected to the energization path and the switch in the battery unit are damaged.

  An object of the present disclosure is to suppress occurrence of breakage due to communication abnormality.

  One aspect of the present disclosure includes a rotating electrical machine (41), a power generation control unit (45), a first storage battery (3) and a second storage battery (11), a first switch (17), and a second switch (18 ), A switch control unit (29), and an upper control unit (2), an electronic control device (45) used as a power generation control unit in the power supply system (1).

  The rotating electric machine has a rotating shaft connected to an output shaft of a vehicle engine. The power generation control unit is configured to control at least power generation using a rotating electrical machine. The first storage battery and the second storage battery are connected in parallel to the rotating electrical machine. The first switch is disposed on a first energization path (12) that electrically connects the rotating electrical machine and the first storage battery, and the first energization path and the first energization path in which the first energization path is electrically conducted are It is configured to switch to either one of the first non-conductive states that are not electrically conductive. The second switch is disposed on the second energization path (13) that electrically connects the rotating electrical machine and the second storage battery, and the second energization path in which the second energization path is electrically conducted and the second energization path are It is configured to switch to either one of the second non-conducting states that are not electrically conducting.

  The switch control unit is configured to control switching between the first conduction state and the first non-conduction state in the first switch and switching between the second conduction state and the second non-conduction state in the second switch. The host control unit is communicably connected to the power generation control unit and the switch control unit, and is configured to control the power generation control unit and the switch control unit.

  The electronic control device according to an aspect of the present disclosure includes a power generation abnormality determination unit (S110, S120), a power generation abnormality limitation unit (S140), a power generation completion determination unit (S150, S160), and a power generation abnormality execution unit ( S170).

The power generation abnormality determination unit is configured to determine whether or not a power generation communication abnormality has occurred, with a communication abnormality occurring between the power generation control unit and the host control unit as a power generation communication abnormality.
The power generation abnormality limiting unit is configured to limit power generation by the rotating electrical machine when the power generation abnormality determination unit determines that a power generation communication abnormality has occurred.

  The power generation completion determination unit determines that a communication abnormality occurring between the switch control unit and the host control unit is a switch communication abnormality, and when a switch communication abnormality occurs, the switch control unit determines the state of the first switch and the second switch. It is configured to determine whether or not a preset switching completion condition indicating that the execution of the switching process at the time of abnormality for switching to a state at the time of communication abnormality set in advance according to the switch communication abnormality is completed is satisfied.

  The power generation abnormality execution unit is a power generation set in advance according to the power generation communication abnormality by canceling the power generation limitation by the power generation abnormality limiting unit when the power generation completion determination unit determines that the switching completion condition is satisfied. It is comprised so that power generation at the time of power generation communication abnormality may be performed.

  The electronic control device of the present disclosure configured as described above is in the case of power generation communication abnormality even when abnormality occurs in communication with the upper control unit and a power generation instruction cannot be acquired from the upper control unit. Power generation can be performed. For this reason, the electronic control device according to the present disclosure can ensure electric power necessary for the vehicle even when an abnormality occurs in communication with the host control unit.

  Furthermore, the electronic control device according to the present disclosure performs power generation after the switch control unit completes the abnormal time switching process when the power generation communication abnormality and the switch communication abnormality occur. For this reason, the electronic control device of the present disclosure includes a device connected to the first and second energization paths and the first and second switches due to excessive power generation with respect to the first and second energization paths. Occurrence of a situation where at least one of them is damaged can be suppressed.

  Another aspect of the present disclosure is a power supply system including a rotating electrical machine, a power generation control unit, a first storage battery and a second storage battery, a first switch, a second switch, a switch control unit, and a host control unit. The electronic control device (2) used as the upper control unit.

  The electronic control device according to another aspect of the present disclosure includes a switch abnormality determination unit (S400, S410), a switch abnormality restriction unit (S430), a switch completion determination unit (S440, S450), and a switch abnormality execution unit. (S460).

  The switch abnormality determination unit is configured to determine whether or not a switch communication abnormality has occurred, with a communication abnormality occurring between the switch control unit and the host control unit as a switch communication abnormality.

The switch abnormality limiting unit is configured to instruct the power generation control unit to limit power generation by the rotating electrical machine when the switch abnormality determination unit determines that a switch communication abnormality has occurred.
The switch completion determination unit performs an abnormal time switching process in which when the switch communication abnormality occurs, the switch control unit switches the state of the first switch and the second switch to a communication abnormality state set in advance according to the switch communication abnormality. It is configured to determine whether or not a preset switching completion condition indicating that the execution has been completed is satisfied.

  When the switch completion determination unit determines that the switching completion condition is satisfied, the switch abnormality execution unit performs power generation control unit power generation that is preset according to the switch communication abnormality to the power generation control unit. Configured to direct.

  The electronic control device of the present disclosure configured as described above can cause the rotating electrical machine to generate power after the switch control unit completes the switching process at the time of abnormality when a switch communication abnormality occurs. For this reason, the electronic control device according to the present disclosure can secure the electric power necessary for the vehicle even when an abnormality occurs in communication with the switch control unit. Furthermore, the electronic control device according to the present disclosure includes a device connected to the first and second energization paths and the first and second switches due to excessive power generation with respect to the first and second energization paths. Generation | occurrence | production of the situation where at least one is damaged can be suppressed.

  Note that the reference numerals in parentheses described in this column and in the claims indicate the correspondence with the specific means described in the embodiment described later as one aspect, and the technical scope of the present disclosure It is not limited.

It is a block diagram which shows the structure of a power supply system. It is a flowchart which shows a rotary electric machine abnormality process. It is a flowchart which shows a switch abnormality process. It is a flowchart which shows a high-order abnormality process. It is a 1st timing chart which shows the specific example of operation | movement of a power supply system. It is a 2nd timing chart which shows the specific example of operation | movement of a power supply system.

Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.
The power supply system 1 of this embodiment is mounted on a vehicle and includes an engine ECU 2, a storage battery 3, a lithium battery unit 4, and a rotating electrical machine unit 5, as shown in FIG. ECU is an abbreviation for Electronic Control Unit.

  The engine ECU 2 controls an engine (not shown). The engine ECU 2 is an electronic control unit that is configured around a known microcomputer including a CPU, a ROM, a RAM, and the like. Various functions of the microcomputer are realized by the CPU executing a program stored in a non-transitional physical recording medium. In this example, the ROM corresponds to a non-transitional tangible recording medium that stores a program. Further, by executing this program, a method corresponding to the program is executed. Note that some or all of the functions executed by the CPU may be configured by hardware using one or a plurality of ICs. Further, the number of microcomputers constituting the engine ECU 2 may be one or plural.

  The storage battery 3 is a lead storage battery that can be charged and discharged. The rated voltage of the storage battery 3 is set to 12 V, for example. The storage battery 3 supplies power to the starter ST and an electric load EL1 such as a headlight.

  The lithium battery unit 4 includes a storage battery 11, energization paths 12, 13, 14, 15, switches 17, 18, 19, 20, 21, limiting resistors 22, 23, terminals 24, 25, 26, 27, And a control unit 29.

  The storage battery 11 is a chargeable / dischargeable lithium ion storage battery. The rated voltage of the storage battery 11 is set to 12 V, for example. Lithium ion storage batteries have higher charge / discharge energy efficiency and energy density than lead storage batteries.

  The energization path 12 is a path that is connected so that a current flows between the terminal 24 and the terminal 25. The energization path 13 is a path that is connected so that a current flows between the positive electrode of the storage battery 11 and the terminal 25. The energization path 14 is a path that is connected so that a current flows between the terminal 24 and the terminal 26. The energization path 15 is a path that is connected so that a current flows between the positive electrode of the storage battery 11 and the terminal 26.

  The switch 17 is disposed on the energization path 12, one end is connected to the terminal 24, and the other end is connected to the terminal 25. The switch 17 has an ON state in which current flows between the terminal 24 and the terminal 25 through the energization path 12 and an OFF state in which current does not flow through the energization path 12 between the terminal 24 and the terminal 25. It is driven to be in any state.

  The switch 18 is disposed on the energization path 13, one end is connected to the terminal 25, and the other end is connected to the positive electrode of the storage battery 11. In the switch 18, no current flows through the energization path 13 between the terminal 25 and the positive electrode of the storage battery 11, and an on state where the current flows through the energization path 13 between the terminal 25 and the positive electrode of the storage battery 11. It is driven so as to be in any state of the off state.

  The switches 19 and 20 are connected to each other in series and are disposed on the energization path 15. One end of the switch 19 on the side not connected to the switch 20 is connected to the terminal 26. One end of the switch 20 on the side not connected to the switch 19 is connected to the positive electrode of the storage battery 11. The switches 19 and 20 have an ON state in which a current flows through the energization path 15 between the terminal 26 and the positive electrode of the storage battery 11, and a current through the energization path 15 between the terminal 26 and the positive electrode of the storage battery 11. It is driven so as to be in any state of an off state in which it does not flow.

  The switch 21 is disposed on the energization path 14, one end is connected to the terminal 24, and the other end is connected to the terminal 26. The switch 21 has an ON state in which current flows between the terminal 24 and the terminal 26 through the energization path 14 and an OFF state in which current does not flow through the energization path 14 between the terminal 24 and the terminal 26. It is driven to be in any state.

  Each of the switches 17, 18, 19, 20, and 21 includes four MOSFETs. Of the four MOSFETs, two MOSFETs are connected in series, and the remaining two MOSFETs are connected in series. The first series part constituted by two MOSFETs connected in series and the second series part constituted by the remaining two MOSFETs connected in series are connected in parallel to each other.

  The limiting resistors 22 and 23 are connected in series to each other and are connected in parallel to the switch 17. That is, one end of the limiting resistor 22 on the side not connected to the limiting resistor 23 is connected to the terminal 24. One end of the limiting resistor 23 on the side not connected to the limiting resistor 22 is connected to the terminal 25.

  The terminal 24 is connected to the positive electrode of the storage battery 3. The terminal 25 is connected to the rotating electrical machine unit 5. The terminal 26 is connected to an electric load EL2 such as a navigation device via the fuse FS1. Terminal 27 is connected to the positive electrode of storage battery 3 via fuse FS2 and ignition switch IGS (hereinafter referred to as IG switch IGS).

  The control unit 29 controls the switches 17, 18, 19, 20, and 21. The control unit 29 communicates with the engine ECU 2 via the CAN bus 7 according to the CAN communication protocol. CAN is an abbreviation for Controller Area Network. CAN is a registered trademark.

  The control unit 29 is an electronic control device that is configured around a known microcomputer including a CPU, a ROM, a RAM, and the like. Various functions of the microcomputer are realized by the CPU executing a program stored in a non-transitional physical recording medium. In this example, the ROM corresponds to a non-transitional tangible recording medium that stores a program. Further, by executing this program, a method corresponding to the program is executed. Note that some or all of the functions executed by the CPU may be configured by hardware using one or a plurality of ICs. Further, the number of microcomputers constituting the control unit 29 may be one or plural.

The rotating electrical machine unit 5 includes a rotating electrical machine 41, an inverter 42, a capacitor 43, a rotation angle sensor 44, and a control unit 45.
The rotating electrical machine 41 is a three-phase AC motor. The rotating shaft of the rotating electrical machine 41 is drivingly connected to the crankshaft of the engine by a belt. Therefore, the rotating shaft of the rotating electrical machine 41 is rotated by the rotation of the crankshaft.

  The inverter 42 is a well-known three-phase bridge circuit including six switching elements. The inverter 42 converts the DC voltage output from the terminal 25 of the lithium battery unit 4 into a three-phase AC, and drives the rotating electrical machine 41 with a U-phase, V-phase, and W-phase three-phase AC current. The inverter 42 converts the AC voltage output from the U phase, the V phase, and the W phase of the rotating electrical machine 41 into a DC voltage as the rotating electrical machine 41 rotates, and outputs the DC voltage to the terminal 25 of the lithium battery unit 4.

One end of the capacitor 43 is connected to the terminal 25 of the lithium battery unit 4 and the other end is grounded.
The rotation angle sensor 44 is attached to the rotation shaft of the rotary electric machine 41 and detects the rotation angle of the rotary electric machine 41. The rotation angle sensor 44 outputs a detection signal indicating the detection result to the control unit 45.

The control unit 45 controls the inverter 42. The control unit 45 communicates with the engine ECU 2 via the CAN bus 7 according to the CAN communication protocol.
The control unit 45 is an electronic control device configured around a known microcomputer including a CPU, a ROM, a RAM, and the like. Various functions of the microcomputer are realized by the CPU executing a program stored in a non-transitional physical recording medium. In this example, the ROM corresponds to a non-transitional tangible recording medium that stores a program. Further, by executing this program, a method corresponding to the program is executed. Note that some or all of the functions executed by the CPU may be configured by hardware using one or a plurality of ICs. The number of microcomputers constituting the control unit 45 may be one or more.

Next, the procedure of the rotating electrical machine abnormality process executed by the control unit 45 of the rotating electrical machine unit 5 will be described. The rotating electrical machine abnormality process is a process repeatedly executed during the operation of the control unit 45.
When this rotating electrical machine abnormality process is executed, the control unit 45 first determines in S10 whether or not the complete explosion completion flag provided in the RAM of the control unit 45 is set, as shown in FIG. To do. If the complete explosion completion flag is set, the process proceeds to S100. On the other hand, when the complete explosion completion flag is cleared, the rotation speed of the rotating electrical machine 41 (hereinafter referred to as the rotating electrical machine rotation speed) is calculated based on the detection signal from the rotation angle sensor 44 in S20.

  Then, in S30, it is determined whether or not the rotating electrical machine rotational speed calculated in S20 exceeds a preset complete explosion determination rotational speed N1 (for example, 700 rpm × pulley ratio). If the rotational speed of the rotating electrical machine is equal to or lower than the complete explosion determination rotational speed N1, the complete explosion determination flag provided in the RAM of the control unit 45 is cleared in S40, and the rotating electrical machine abnormality process is temporarily terminated. .

  On the other hand, when the rotational speed of the rotating electrical machine exceeds the complete explosion determination rotational speed, it is determined in S50 whether or not the complete explosion determination flag is set. If the complete explosion determination flag is cleared, the complete explosion determination flag is set in S60. Further, in S70, a complete explosion determination timer provided in the RAM of the control unit 45 is started, and the rotating electrical machine abnormality process is temporarily terminated. The complete explosion determination timer is a timer that increments every 1 ms, for example, and when activated, its value is incremented from 0 (that is, 1 is added).

  On the other hand, if the complete explosion determination flag is set, it is determined in S80 whether a preset complete explosion determination time has elapsed. Specifically, it is determined whether or not the value of the complete explosion determination timer is equal to or greater than a value corresponding to the complete explosion determination time. Here, when the complete explosion determination time has not elapsed, the rotating electrical machine abnormality process is temporarily terminated. On the other hand, if the complete explosion determination time has elapsed, the complete explosion determination flag is set in S90, and the process proceeds to S100.

  In S100, it is determined whether or not a communication abnormality flag provided in the RAM of the control unit 45 is set. Here, if the communication abnormality flag is set, the rotating electrical machine abnormality process is temporarily terminated. On the other hand, if the communication abnormality flag is cleared, a communication abnormality is diagnosed in S110. Specifically, when a state in which data transmitted from engine ECU 2 is not received continues for a preset abnormality determination time T1, it is determined that a communication abnormality has occurred with engine ECU 2.

  Further, in S120, it is determined whether or not a communication abnormality has occurred based on the diagnosis result in S110. Here, when no communication abnormality has occurred, the rotating electrical machine abnormality process is temporarily terminated. On the other hand, if a communication error has occurred, a communication error flag is set in S130. Further, in S140, the state transits to neutral. “Neutral” is a state in which the rotating electrical machine 41 of the rotating electrical machine unit 5 is not performing powering or power generation.

  Next, in S150, a standby timer provided in the RAM of the control unit 45 is started. The standby timer is a timer that increments, for example, every 1 ms, and its value is incremented from 0 when activated.

  Then, in S160, it is determined whether or not a preset abnormal time switching determination time T4 has elapsed. Specifically, it is determined whether or not the value of the standby timer is equal to or greater than a value corresponding to the abnormal time switching determination time T4. The abnormality switching determination time T4 is set to be equal to a value obtained by subtracting the abnormality determination time T1 from the abnormality determination time T3 described later.

  If the abnormal time switching determination time T4 has not elapsed, the process of S160 is repeated to wait until the abnormal time switching determination time T4 has elapsed. When the abnormal time switching determination time T4 elapses, autonomous power generation is executed in S170, and the rotating electrical machine abnormality process is temporarily terminated.

  Next, the procedure of the switch abnormality process executed by the control unit 29 of the lithium battery unit 4 will be described. The switch abnormality process is a process repeatedly executed during the operation of the control unit 29.

  When this switch abnormality process is executed, the control unit 29 first determines in S210 whether or not a communication abnormality flag provided in the RAM of the control unit 29 is set, as shown in FIG. Here, when the communication abnormality flag is set, the switch abnormality process is temporarily ended. On the other hand, if the communication abnormality flag is cleared, a communication abnormality is diagnosed in S220. Specifically, when a state in which data transmitted from engine ECU 2 is not received continues for a preset abnormality determination time T3, it is determined that a communication abnormality has occurred with engine ECU 2. In the present embodiment, the abnormality determination time T3 is set to be longer than the abnormality determination time T1 and longer than an abnormality determination time T2, which will be described later.

  Further, in S230, it is determined whether or not a communication abnormality has occurred based on the diagnosis result in S220. Here, if no communication abnormality has occurred, the switch abnormality process is temporarily terminated. On the other hand, if a communication error has occurred, a communication error flag is set in S240. Further, in S250, an abnormal time switching process is executed. Specifically, the control unit 29 switches the switches 17 and 21 to the on state and switches the switches 18, 19, and 20 to the off state. Then, when the process of S250 is finished, the switch abnormality process is once finished.

Next, the procedure of the upper abnormality process executed by the engine ECU 2 will be described. The upper abnormality process is a process that is repeatedly executed during the operation of the engine ECU 2.
When this upper abnormality process is executed, the engine ECU 2 first determines in S310 whether or not a complete explosion completion flag provided in the RAM of the engine ECU 2 is set, as shown in FIG. If the complete explosion completion flag is set, the process proceeds to S390. On the other hand, if the complete explosion completion flag is cleared, it is determined in S320 whether or not the engine speed exceeds the complete explosion determination speed N1 / pulley ratio. If the engine speed is equal to or less than the complete explosion determination speed N1 / pulley ratio, the complete explosion determination flag provided in the RAM of the engine ECU 2 is cleared in S330, and the upper abnormality process is temporarily terminated. .

  On the other hand, if the engine speed exceeds the complete explosion determination speed N1 / pulley ratio, it is determined in S340 whether or not the complete explosion determination flag is set. If the complete explosion determination flag is cleared, the complete explosion determination flag is set in S350. Further, in S360, a complete explosion determination timer provided in the RAM of the engine ECU 2 is started, and the upper abnormality process is temporarily terminated. The complete explosion determination timer is a timer that increments, for example, every 1 ms, and its value is incremented from 0 when activated.

  On the other hand, if the complete explosion determination flag is set, it is determined in S370 whether or not the complete explosion determination time has elapsed. Here, if the complete explosion determination time has not elapsed, the host abnormality process is temporarily terminated. On the other hand, if the complete explosion determination time has elapsed, the complete explosion completion flag is set in S380, and the process proceeds to S390.

  In S390, it is determined whether or not a communication abnormality flag provided in the RAM of the engine ECU 2 is set. Here, when the communication abnormality flag is set, the host abnormality process is temporarily terminated. On the other hand, if the communication abnormality flag is cleared, a communication abnormality is diagnosed in S400. Specifically, when a state in which data transmitted from the lithium battery unit 4 is not received continues for a preset abnormality determination time T2, it is determined that a communication abnormality has occurred with the lithium battery unit 4. . In the present embodiment, the abnormality determination time T2 is set to be longer than the abnormality determination time T1 and shorter than the abnormality determination time T3.

  Further, in S410, it is determined whether or not a communication abnormality has occurred based on the diagnosis result in S400. Here, if no communication abnormality has occurred, the host abnormality process is temporarily terminated. On the other hand, if a communication abnormality has occurred, a communication abnormality flag is set in S420. Further, in S430, a neutral instruction is transmitted to the control unit 45 of the rotating electrical machine unit 5 via the CAN bus 7. Next, in S440, a standby timer provided in the RAM of the engine ECU 2 is started. The standby timer is a timer that increments, for example, every 1 ms, and its value is incremented from 0 when activated.

  Then, in S450, it is determined whether or not preset abnormality time instruction determination time T5 has elapsed. Specifically, it is determined whether or not the value of the standby timer is equal to or greater than a value corresponding to the abnormal time instruction determination time T5. The abnormality instruction determination time T5 is set to be equal to a value obtained by subtracting the abnormality determination time T2 from the abnormality determination time T3.

  If the abnormal time instruction determination time T5 has not elapsed, the process of S450 is repeated to wait until the abnormal time instruction determination time T5 has elapsed. When the abnormal time instruction determination time T5 has elapsed, in S460, the combined power generation instruction is transmitted to the control unit 45 of the rotating electrical machine unit 5 via the CAN bus 7, and the upper level abnormality process is temporarily terminated.

  FIG. 5 is a timing chart showing a specific example of the operation of the power supply system 1 when communication between the engine ECU 2 and the rotating electrical machine unit 5 and communication between the engine ECU 2 and the lithium battery unit 4 are interrupted. It is.

  As shown in FIG. 5, after the IG switch IGS is turned on, the battery voltage is supplied from the storage battery 3 to the engine ECU 2, the control unit 29 of the lithium battery unit 4, and the control unit 45 of the rotating electrical machine unit 5. Let's say. In FIG. 5, at time t0, “IG-ENG”, “IG-ISG”, and “IG-LiB” are “ON”. “IG-ENG” indicates a voltage supply state of the engine ECU 2. “IG-ISG” indicates a voltage supply state of the control unit 45 of the rotating electrical machine unit 5. “IG-LiB” indicates a voltage supply state of the control unit 29 of the lithium battery unit 4.

  It is assumed that the engine ECU 2, the control unit 29 of the lithium battery unit 4, and the control unit 45 of the rotating electrical machine unit 5 are in CAN communication at time t0. In FIG. 5, “CAN-ENG”, “CAN-ISG”, and “CAN-LiB” are set to “OK” at time t0. “CAN-ENG” indicates a CAN communication state of the engine ECU 2. “CAN-ISG” indicates the CAN communication state of the control unit 45 of the rotating electrical machine unit 5. “CAN-LiB” indicates the CAN communication state of the control unit 29 of the lithium battery unit 4.

  At time t0, the engine ECU 2 is instructing the power generation unit or the “assist” to the control unit 45 of the rotating electrical machine unit 5. “Assist” is a state in which the rotating electrical machine 41 is driven during acceleration of the vehicle, and the motor driving force is applied to the engine driving force. In FIG. 5, “CMD-ISG” is set to “PG / ASSIST” at time t0. “CMD-ISG” indicates an instruction state from the engine ECU 2 to the control unit 45 of the rotating electrical machine unit 5. “PG” indicates power generation. “ASSIST” indicates assist.

  Therefore, at time t0, the state of the rotating electrical machine unit 5 is “power generation” or “assist”. In FIG. 5, “ST-ISG” is set to “PG / ASSIST” at time t0. “ST-ISG” indicates the state of the rotating electrical machine unit 5.

  At time t0, it is assumed that the switches 17 to 21 are in an indeterminate state in which it is not determined whether they are on or off. In FIG. 5, at time t0, “ST-SW1”, “ST-SW2”, “ST-SW3”, and “ST-SW4” are set to “ON / OFF”, respectively. “ST-SW1” indicates the state of the switch 17. “ST-SW2” indicates the state of the switch 18. “ST-SW3” indicates the state of the switches 19 and 20. “ST-SW4” indicates the state of the switch 21.

  Then, at time t1, it is assumed that an abnormality that prevents communication between engine ECU 2 and rotating electrical machine unit 5 and between engine ECU 2 and lithium battery unit 4 occurs. Accordingly, it is assumed that the control unit 45 of the rotating electrical machine unit 5 recognizes that the CAN communication with the engine ECU 2 is disabled at the time t2 when the abnormality determination time T1 has elapsed from the time t1. Thereby, the control part 45 of the rotary electric machine unit 5 changes to neutral. In FIG. 5, “ST-ISG” changes from “PG / ASSIST” to “NEUTRAL” at time t2.

  Thereafter, at time t3 when the abnormality determination time T2 has elapsed from time t1, it is assumed that the engine ECU 2 has recognized that CAN communication with the rotating electrical machine unit 5 has been disabled. At this time, the engine ECU 2 instructs the controller 45 of the rotating electrical machine unit 5 to “combine power generation”. “Combine power generation” is power generation capable of securing electric power necessary for driving a vehicle safely as a fail-safe process when an abnormality occurs in the vehicle. That is, the power generation amount of “combine power generation” is smaller than “normal power generation”. In FIG. 5, “CMD-ISG” changes from “PG / ASSIST” to “CONVENTIONAL” at time t3. However, the lithium battery unit 4 cannot receive an instruction from the engine ECU 2. For this reason, the state of the rotating electrical machine unit 5 remains “neutral”.

  After that, at time t4 when the abnormality determination time T3 has elapsed from time t1, it is assumed that the control unit 29 of the lithium battery unit 4 recognizes that CAN communication with the engine ECU 2 has been disabled. At this time, the controller 29 of the lithium battery unit 4 switches the switches 17 and 21 to the on state and switches 18, 19 and 20 to the off state. In FIG. 5, at time t4, “ST-SW1”, “ST-SW2”, “ST-SW3”, and “ST-SW4” are set to “ON”, “OFF”, “OFF”, and “ON”, respectively. .

  Furthermore, the control unit 45 of the rotating electrical machine unit 5 performs autonomous power generation at time t4 when the abnormal time switching determination time T4 has elapsed from time t2. In FIG. 5, “ST-ISG” changes from “NEUTRAL” to “AUTONOMOUS” at time t4. The abnormal time switching determination time T4 is equal to a value obtained by subtracting the abnormality determination time T1 from the abnormality determination time T3.

FIG. 6 is a timing chart showing a specific example of the operation of the power supply system 1 when communication between the engine ECU 2 and the lithium battery unit 4 is interrupted.
As shown in FIG. 6, after the IG switch IGS is turned on, the battery voltage is supplied from the storage battery 3 to the engine ECU 2, the control unit 29 of the lithium battery unit 4, and the control unit 45 of the rotating electrical machine unit 5. Let's say. In FIG. 6, “IG-ENG”, “IG-ISG”, and “IG-LiB” are “ON” at time t10.

  At time t10, it is assumed that the engine ECU 2, the control unit 29 of the lithium battery unit 4, and the control unit 45 of the rotating electrical machine unit 5 are in a state where CAN communication is possible. In FIG. 6, “CAN-ENG”, “CAN-ISG”, and “CAN-LiB” are set to “OK” at time t10.

  At time t10, the engine ECU 2 is instructing “power generation” or “assist” to the control unit 45 of the rotating electrical machine unit 5. In FIG. 6, “CMD-ISG” is set to “PG / ASSIST” at time t10.

  Therefore, at the time t10, the state of the rotating electrical machine unit 5 is “power generation” or “assist”. In FIG. 6, “ST-ISG” is set to “PG / ASSIST” at time t10.

  It is assumed that at time t10, the switches 17 to 21 are in an indefinite state in which it is not determined whether they are in an on state or an off state. In FIG. 6, at time t10, “ST-SW1”, “ST-SW2”, “ST-SW3”, and “ST-SW4” are set to “ON / OFF”, respectively.

  It is assumed that an abnormality that prevents communication between the engine ECU 2 and the lithium battery unit 4 occurs at time t11. As a result, the engine ECU 2 cannot instruct the controller 29 of the lithium battery unit 4 to turn on or off the switches 17, 18, 19, 20, and 21 or grasp the state of these switches.

  Thereafter, it is assumed that the engine ECU 2 recognizes that the CAN communication with the lithium battery unit 4 cannot be performed at time t12 when the abnormality determination time T2 has elapsed from time t11. At this time, the engine ECU 2 instructs the control unit 45 of the rotating electrical machine unit 5 to be “neutral”. Thereby, the control part 45 of the rotary electric machine unit 5 changes to neutral. In FIG. 6, “ST-ISG” changes from “PG / ASSIST” to “NEUTRAL” at time t11.

  After that, at time t4 when the abnormality determination time T3 has elapsed from time t1, it is assumed that the control unit 29 of the lithium battery unit 4 recognizes that CAN communication with the engine ECU 2 has been disabled. At this time, the controller 29 of the lithium battery unit 4 switches the switches 17 and 21 to the on state and switches 18, 19 and 20 to the off state. In FIG. 6, at time t13, “ST-SW1”, “ST-SW2”, “ST-SW3”, and “ST-SW4” are set to “ON”, “OFF”, “OFF”, and “ON”, respectively. .

  Further, the engine ECU 2 instructs the control unit 45 of the rotating electrical machine unit 5 to perform “combine power generation” at time t13 when the abnormal time instruction determination time T5 has elapsed from time t12. In FIG. 6, “CMD-ISG” changes from “NEUTRAL” to “CONVENTIONAL” at time t13. Thereby, the control part 45 of the rotary electric machine unit 5 performs the combined power generation. In FIG. 6, “ST-ISG” changes from “NEUTRAL” to “CONVENTIONAL” at time t13. The abnormal time instruction determination time T5 is equal to a value obtained by subtracting the abnormality determination time T2 from the abnormality determination time T3.

  The control unit 45 of the rotating electrical machine unit 5 configured as described above includes the rotating electrical machine 41, the inverter 42, the control unit 45, the storage battery 3 and the storage battery 11, the switch 17, the switch 18, and the lithium battery unit 4. It is an electronic control unit used in the power supply system 1 provided with the control part 29 and engine ECU2.

  The rotating electric machine 41 has a rotating shaft connected to a crankshaft of a vehicle engine. The inverter 42 constitutes a drive circuit that drives the rotating electrical machine 41 by adjusting the electric power supplied to the rotating electrical machine 41. The control unit 45 uses the rotating electrical machine 41 to control at least power generation. The storage battery 3 and the storage battery 11 are connected in parallel to the rotating electrical machine 41. The switch 17 is disposed on the energization path 12 that electrically connects the rotating electrical machine 41 and the storage battery 3, and is in an on state in which the energization path 12 is electrically conducted and an off state in which the energization path 12 is not electrically conducted. Switch to one of these. The switch 18 is disposed on the energization path 13 that electrically connects the rotating electrical machine 41 and the storage battery 11, and is in an on state in which the energization path 13 is electrically connected and in an off state in which the energization path 13 is not electrically conductive. Switch to one of these.

  The control unit 29 controls switching between the on state and the off state in the switches 17 and 18. The engine ECU 2 is communicably connected to the control unit 45 and the control unit 29 and controls the control unit 45 and the control unit 29.

  Then, the control unit 45 determines whether a power generation communication abnormality has occurred. The power generation communication abnormality is a communication abnormality that occurs between the control unit 45 and the engine ECU 2. The control unit 45 stops power generation by the rotating electrical machine 41 when it is determined that a power generation communication abnormality has occurred.

  Further, when a switch communication abnormality occurs, the control unit 45 determines whether or not a preset switching completion condition indicating that the control unit 29 has completed the execution of the abnormal time switching process is satisfied. The switch communication abnormality is a communication abnormality that occurs between the control unit 29 and the engine ECU 2. The switching completion condition is that the abnormal time switching determination time T4 elapses after the control unit 45 determines that a power generation communication abnormality has occurred.

When the control unit 45 determines that the switching completion condition is satisfied, the control unit 45 cancels the power generation stop by the rotating electrical machine 41 and performs autonomous power generation.
As described above, the control unit 45 can execute autonomous power generation even when an abnormality occurs in communication with the engine ECU 2 and a power generation instruction cannot be acquired from the engine ECU 2. For this reason, the control part 45 can ensure the electric power required for a vehicle, even if it is a case where abnormality arises in communication between engine ECU2.

  Further, the control unit 45 performs power generation after the control unit 29 completes the abnormal time switching process when the power generation communication abnormality and the switch communication abnormality occur. For this reason, the controller 45 causes damage to at least one of the devices connected to the energization paths 12 and 13 and the switches 17 and 18 due to excessive power generation with respect to the energization paths 12 and 13. It is possible to suppress the occurrence of the situation.

  The switching completion condition is that the abnormal time switching determination time T4 elapses after the control unit 45 determines that a power generation communication abnormality has occurred. Thereby, the control part 45 can judge easily that the control part 29 completed execution of the switching process at the time of abnormality.

  Further, the engine ECU 2 determines whether or not a switch communication abnormality has occurred. If the engine ECU 2 determines that a switch communication abnormality has occurred, the engine ECU 2 instructs the control unit 45 to stop power generation. Furthermore, when a switch communication abnormality occurs, the engine ECU 2 determines whether or not a preset switching completion condition indicating that the control unit 29 has completed the execution of the abnormal time switching process is satisfied. This switching completion condition is that the abnormal time instruction determination time T5 has elapsed after the engine ECU 2 determines that a switch communication abnormality has occurred. When the engine ECU 2 determines that the switching completion condition is satisfied, the engine ECU 2 instructs the controller 45 to perform the combined power generation.

  As described above, when a switch communication abnormality occurs, the engine ECU 2 can cause the rotating electrical machine 41 to generate power after the control unit 29 completes the abnormality switching process. For this reason, the engine ECU 2 can secure the electric power necessary for the vehicle even when an abnormality occurs in the communication with the control unit 29. Furthermore, in the engine ECU 2, a situation where at least one of the devices connected to the energization paths 12 and 13 and the switches 17 and 18 is damaged due to excessive power generation with respect to the energization paths 12 and 13 is caused. Can be suppressed.

  The switching completion condition is that the abnormality instruction determination time T5 has elapsed after the engine ECU 2 determines that a switch communication abnormality has occurred. Thereby, the engine ECU 2 can easily determine that the control unit 29 has completed the execution of the abnormal time switching process.

  The abnormal time switching process is a process of switching the switch 17 to the on state and switching the switch 18 to the off state. As a result, when at least one of power generation communication abnormality and switch communication abnormality occurs, it is possible to realize power generation by realizing a power supply configuration equivalent to a conveyor vehicle, and to secure power necessary for driving the vehicle safely. be able to.

  In the embodiment described above, the control unit 45 corresponds to the power generation control unit, the storage battery 3 corresponds to the first storage battery, the storage battery 11 corresponds to the second storage battery, the switch 17 corresponds to the first switch, and the switch 18. Corresponds to a second switch.

The control unit 29 corresponds to a switch control unit, and the engine ECU 2 corresponds to a host control unit.
S110 and S120 correspond to processing as a power generation abnormality determining unit, S140 corresponds to processing as a power generation abnormality limiting unit, S150 and S160 correspond to processing as a power generation completion determination unit, and S170 when power generation is abnormal. This corresponds to processing as an execution unit.

  The crankshaft corresponds to the output shaft, the energization path 12 corresponds to the first energization path, the on state of the switch 17 corresponds to the first conduction state, and the off state of the switch 17 corresponds to the first non-conduction state. The energization path 13 corresponds to the second energization path, the on state of the switch 18 corresponds to the second conduction state, and the off state of the switch 18 corresponds to the second non-conduction state.

In addition, the determination condition in S160 corresponds to a switching completion condition, and autonomous power generation corresponds to power generation when power generation communication is abnormal.
The abnormality determination time T1 corresponds to the power generation communication abnormality determination time, and the abnormality determination time T3 corresponds to the switch communication abnormality determination time.

  S400 and S410 correspond to processing as a switch abnormality determination unit, S430 corresponds to processing as a switch abnormality limiting unit, S440 and S450 correspond to processing as a switch completion determination unit, and S460 corresponds to a switch abnormality time. This corresponds to processing as an execution unit.

Further, the determination condition of S450 corresponds to the switching completion condition, the combined power generation corresponds to the power generation when the switch communication is abnormal, and the abnormality determination time T2 corresponds to the upper communication abnormality determination time.
As mentioned above, although one embodiment of this indication was described, this indication is not limited to the above-mentioned embodiment, and can carry out various modifications.

[Modification 1]
For example, in the above-described embodiment, the power generation is not performed until it is determined that the communication abnormality has occurred and the abnormal time switching determination time T4 or the abnormal time instruction determination time T5 has elapsed. However, the present invention is not limited to a mode in which power generation is not performed, and the abnormal time switching determination time T4 or the abnormal time instruction determination time T5 has elapsed until the abnormal time switching determination time T4 or the abnormal time instruction determination time T5 has elapsed. Any form that restricts power generation more than after is sufficient. For example, the generated power may be made smaller than after the abnormal time switching determination time T4 or the abnormal time instruction determination time T5 has elapsed.

[Modification 2]
In the above embodiment, the abnormal time switching determination time T4 is set to be equal to the value obtained by subtracting the abnormality determination time T1 from the abnormality determination time T3. However, the abnormal time switching determination time T4 may be equal to or longer than a value obtained by subtracting the abnormality determination time T1 from the abnormality determination time T3.

[Modification 3]
In the above-described embodiment, the abnormality instruction determination time T5 is set to be equal to the value obtained by subtracting the abnormality determination time T2 from the abnormality determination time T3. However, the abnormality time instruction determination time T5 may be equal to or longer than a value obtained by subtracting the abnormality determination time T2 from the abnormality determination time T3.

  In addition, the function of one component in the above embodiment may be shared by a plurality of components, or the function of a plurality of components may be exhibited by one component. Moreover, you may abbreviate | omit a part of structure of the said embodiment. In addition, at least a part of the configuration of the above embodiment may be added to or replaced with the configuration of the other embodiment. In addition, all the aspects included in the technical idea specified from the wording described in the claims are embodiments of the present disclosure.

  In addition to the control unit 45 and the engine ECU 2 described above, a system including the control unit 45 and the engine ECU 2 as components, a program for causing the computer to function as the control unit 45 and the engine ECU 2, a medium storing the program, and a control method The present disclosure can also be realized in various forms.

  DESCRIPTION OF SYMBOLS 1 ... Power supply system, 2 ... Engine ECU, 3 ... Storage battery, 4 ... Lithium battery unit, 5 ... Rotating electrical machine unit, 11 ... Storage battery, 12 ... Current supply path, 13 ... Current supply path, 17 ... Switch, 18 ... Switch, 29 ... Control unit, 41 ... rotating electric machine, 42 ... inverter, 45 ... control unit

Claims (5)

A rotating electrical machine (41) having a rotating shaft connected to an output shaft of a vehicle engine;
A power generation control unit (45) configured to control at least power generation using the rotating electrical machine;
A first storage battery (3) and a second storage battery (11) connected in parallel to the rotating electrical machine;
A first conduction state in which the first conduction path is electrically connected and the first conduction path are electrically connected to the first conduction path (12) that electrically connects the rotating electrical machine and the first storage battery. A first switch (17) configured to switch to either one of the first non-conducting states that are not electrically conductive;
A second conduction state is disposed on a second energization path (13) that electrically connects the rotating electrical machine and the second storage battery, and the second energization path is electrically connected, and the second energization path is electrically connected. A second switch (18) configured to switch to either one of the second non-conductive states that are not electrically conductive;
A switch configured to control switching between the first conduction state and the first non-conduction state in the first switch and switching between the second conduction state and the second non-conduction state in the second switch. A control unit (29);
In a power supply system (1) comprising a host control unit (2) connected to the power generation control unit and the switch control unit in a communicable manner and configured to control the power generation control unit and the switch control unit. An electronic control device (45) used as the power generation control unit,
A power generation abnormality determination unit (S110, S120) configured to determine whether or not the power generation communication abnormality has occurred, with a communication abnormality occurring between the power generation control unit and the host control unit as a power generation communication abnormality. )When,
A power generation abnormality limiting unit (S140) configured to limit power generation by the rotating electrical machine when the power generation abnormality determination unit determines that the power generation communication abnormality has occurred;
When a communication abnormality occurring between the switch control unit and the host control unit is regarded as a switch communication abnormality, and the switch communication abnormality occurs, the switch control unit changes the states of the first switch and the second switch. It is configured to determine whether or not a preset switching completion condition indicating that the execution of the switching process at the time of abnormality for switching to a state at the time of communication abnormality set in advance according to the switch communication abnormality is completed is satisfied. A power generation completion determination unit (S150, S160);
When the power generation completion determination unit determines that the switching completion condition is satisfied, the power generation abnormality abnormality is canceled by canceling the power generation restriction by the power generation abnormality restriction unit and preset in response to the power generation communication abnormality. An electronic control device comprising: a power generation abnormality execution unit (S170) configured to execute hour power generation. The electronic control device according to claim 1,
The switching completion condition is that a preset switching determination time at the time of abnormality elapses after the power generation abnormality determination unit determines that the power generation communication abnormality has occurred,
From the time when the power generation communication abnormality occurs, the time required for the power generation abnormality determination unit to determine that the power generation communication abnormality has occurred is defined as a power generation communication abnormality determination time.
The time required from when the switch communication abnormality occurs until the switch control unit determines that the switch communication abnormality has occurred is a switch communication abnormality determination time,
The electronic control device, wherein the abnormal time switching determination time is set to be equal to or greater than a value obtained by subtracting the power generation communication abnormality determination time from the switch communication abnormality determination time. A rotating electrical machine having a rotating shaft connected to an output shaft of a vehicle engine;
A power generation control unit configured to control at least power generation using the rotating electrical machine;
A first storage battery and a second storage battery connected in parallel to the rotating electrical machine;
A first conduction state in which the rotating electrical machine and the first storage battery are electrically connected to each other and electrically connected to the first conduction path and the first conduction path are electrically connected. A first switch configured to switch to any one of the first non-conducting states that are not
A second conduction state is disposed on a second energization path that electrically connects the rotating electrical machine and the second storage battery, and the second energization path is electrically conducted, and the second energization path is electrically conducted. A second switch configured to switch to any one of the second non-conducting states that are not
A switch configured to control switching between the first conduction state and the first non-conduction state in the first switch and switching between the second conduction state and the second non-conduction state in the second switch. A control unit;
In a power supply system that is communicably connected to the power generation control unit and the switch control unit and configured to control the power generation control unit and the switch control unit, used as the upper control unit An electronic control device (2),
A switch abnormality determination unit (S400, S410) configured to determine whether or not the switch communication abnormality has occurred, with a communication abnormality occurring between the switch control unit and the host control unit as a switch communication abnormality. )When,
A switch abnormality limiting unit (S430) configured to instruct the power generation control unit to limit power generation by the rotating electrical machine when the switch abnormality determination unit determines that the switch communication abnormality has occurred. )When,
When the switch communication abnormality occurs, the switch control unit executes an abnormal time switching process for switching the state of the first switch and the second switch to a communication abnormal state set in advance according to the switch communication abnormality. A switch completion determination unit (S440, S450) configured to determine whether a preset switching completion condition indicating completion of
When the switch completion determination unit determines that the switching completion condition is satisfied, the power generation control unit is instructed to generate power when the switch communication is abnormal, which is power generation set in advance according to the switch communication abnormality. An electronic control device comprising: a switch abnormality execution unit (S460) configured as described above. The electronic control device according to claim 3,
The switching completion condition is that an abnormal instruction determination time elapses after the switch abnormality determination unit determines that the switch communication abnormality has occurred,
The time required for the switch abnormality determination unit to determine that the switch communication abnormality has occurred from the time when the switch communication abnormality has occurred is defined as an upper communication abnormality determination time,
The time required from when the switch communication abnormality occurs until the switch control unit determines that the switch communication abnormality has occurred is a switch communication abnormality determination time,
The electronic control device, wherein the abnormality instruction determination time is set to be equal to or greater than a value obtained by subtracting the upper communication abnormality determination time from the switch communication abnormality determination time. The electronic control device according to any one of claims 1 to 4,
The abnormality control switching process is an electronic control device which is a process of switching the first switch to the first conductive state and switching the second switch to the second non-conductive state.

Images