阳光电机控制器功能安全产品化开发中的关键技术-外发

Fun cti on Con trol le r
Level 3
LC
Memory Test Level 2
LC Test of
Hardware-configuration rel. Safety
Test of autonomous HW-Module
LC
PFC Lin kin g
Redundancy
HardwareErr or
© 2019 SUNGROW
2019 Copyright © SUNGROW.Confidential
01 02 03 04 05
2
2019 Copyright © SUNGROW.Confidential
2019 Copyright © SUNGROW.Confidential
Functional safety standard
Man ag em ent Module
LC
Function Test Monitoring Module
En abl e
En abl e
HW Incl. Mo nito rin g
Module
Questions
Monitoring Modules
An swe r
En abl e
6
2019 Copyright © SUNGROW.Confidential
VC U ASIL C
BMS ASIL C
PDU
MCU ASIL C
ABS/Break system ASIL C
Power Battery
MOTOR QM
RE SO LVE R ASIL C
•
•
5
2019 Copyright © SUNGROW.Confidential
Input Signals
~2000A
关断电流
2019 Copyright © SUNGROW.Confidential
同一桥臂IGBT壳温温升趋势曲线
85
80
75
70
IGBT 关断
65
60 0
5
10
15
20
25
30
35
40
IGBT-1
IGBT-2
IGBT-3
IGBT-4
IGBT-5
IGBT-6
12
2019 Copyright © SUNGROW.Confidential
2019 Copyright © SUNGROW.Confidential
L1功能层
(整车控制功能，电机控制功能等)
L2功能监控层
(关键信号合理性验证，转矩监控，关断路径执行等)
L3处理器监控层
(看门狗处理，关断路径测试等)
2019 Copyright © SUNGROW.Confidential
For E/E/PE
Risk
IEC 61508
All industry
ISO 26262
Automotive
Functional safety system complexity
•
•
4
2019 Copyright © SUNGROW.Confidential
MCU ITEM ASIL C
百度文库
ACU KEY Low Vol.Batter Fuel Pedal Shift Brake ped al Cruise Set
I_V_AIN
ADC口
采样通道U/V
+5VA2
调理电路W
I_W_AIN
采样通道W
CPU
PWM输出
驱劢电路
门级状态回采
• •
2019 Copyright © SUNGROW.Confidential
桥臂
*专利保护
9
*专利保护
CPU
SPWM L1_SD L2_SD L3_SD ASC_EN
CPLD
SPWM
Level 1
Control Function
Level 2
LC Function Monitoring
Program Flow Check
En abl e
HWErr or Corr ectio n Code
Power determining output stage/ Safety-related Bus Com mu nicati on
Delay β
FIR LPF
DSRF PLL
Speed Angle
AD2S1210 Excitation
Boost
Excitation
Mechanical Angle
Rseolver
Cos,CosLo Sin,SinLo
Speed SPI/GPIO Angle
PWM4A
Exc ADC
Cos
ADC
Sin
看门狗
2019 Copyright © SUNGROW.Confidential
Mechanical Angle
LPF
Excitation
Boost
DSP PWM 5A, 5B
PWM4A
Rseolver
Cos,CosLo Sin,SinLo
LPF Cos Sin
ADC ADC
LUT
SEQ2 ISR
驱劢电路
SPI&FSP
L3-外部看门狗 SBC
直流母线采样1
SS1/2 Vdc_ov
FSBEN FSSTATE
2019 Copyright © SUNGROW.Confidential
关断路径1 关断路径2
主功率桥
10
正常关断 过流保护关断 DESAT关断
（硬关断） （硬关断） （软关断）
0A
~800A
ADC
DSP
SEQ2 ISR
Speed
FIR
LPF
DSRF PLL Angle
2019 Copyright © SUNGROW.Confidential
•
START
Safety related TASK -RUN1
Cou nt复位
Cou nt++
Count++ Count++
END
Safety related TASK -RUN2
Safety related TASK -RUN3
Safety related TASK -RUN4
监控 程序
Count发送 Count复位 触发
•
2019 Copyright © SUNGROW.Confidential
•
START
Interrupted
Safety related TASK
Interrupted DeadLine END
Safety related TASK
Safety related TASK
监控 程序
触发 看门狗
•
7
2019 Copyright © SUNGROW.Confidential
2019 Copyright © SUNGROW.Confidential
+5VA1 I_U
U相传感器
+5VA1
调理电路U
I_U_AIN
CPU
+5VA1 I_V
V相传感器
+5VA2 I_W
W相传感器
+5VA1
调理电路V