Abstract:
In order to control a converter ( 1 ) which is used to convert a primary input voltage (U E ) into a secondary output voltage (U a ), a voltage value (U v ) derived from a secondarily detected real voltage (U ist ) is compared with a reference value (U R ), and a control signal (S a ) is produced as a criterion which triggers the disconnection of said converter ( 1 ) if said reference value is exceeded. The voltage value (U v ) or the reference value (U R ) is manipulated during a monitoring phase in such a way that said parameter is met.

Description:
CROSS REFERENCE TO RELATED APPLICATION 
     This application is a continuation of copending International Application No. PCT/EP01/02476 filed Mar. 5, 2001, which designates the United States. 
    
    
     BACKGROUND OF THE INVENTION 
     The invention pertains to a method for controlling a converter that converts the primary input voltage to a secondary output voltage. It also concerns a device for execution of the method. Converter here is understood to mean, in particular, a dc/dc converter. 
     This type of converter is frequently used in a so-called multivoltage network, in order to convert the primary input voltage referred to the converter to a comparatively high or low secondary output voltage. This type of multivoltage system is therefore commonly found in a vehicle as electrical power supply system, which, in addition to the low voltage loads generally set at a dc voltage of 12V, also operates with at least one heavy-duty load set, for example, at 42V. The system in the vehicle field comprises for this purpose a corresponding high-power generator and/or a corresponding heavy-duty battery, as well as a dc/dc converter that converts the dc voltage of, say, 42V to a 12V voltage of at least roughly the same power. The multivoltage network of a vehicle ordinarily also includes a low voltage battery, i.e., a 12V battery for example. 
     Regulation or control that adjusts the secondary output voltage of the converter in the direction toward a stipulated reference value is assigned to the common dc/dc converter within the electrical power supply system of a vehicle. A regulation or control intervention is required, in particular, when the output voltage drops as a result of power takeoff of a secondary load, especially below a stipulated threshold. When a low voltage battery is connected on the secondary side to the converter, this is engaged and the battery recharged if this is discharged below the threshold value because of the connected low voltage load. This type of electrical power supply system for a vehicle with activation or engagement of the dc/dc converter only when required is known from DE 43 10 240 A1. 
     This type of control of a converter with a battery connected on the secondary side can produce an uncontrolled state during malfunction. For example, a detonating gas mixture can form from chemical processes in the secondary battery if the output voltage to be set over a correspondingly long period on the secondary side surpasses a maximum value. 
     SUMMARY OF THE INVENTION 
     The underlying task of the invention is therefore to offer a method for controlling a converter in which malfunctions are reliably avoided by monitoring the regulated or controlled converter. In particular, the functional capability of monitoring itself is also to be monitorable. Moreover, a device particularly suitable for execution of the method is to be offered. 
     The task according to the invention is solved by a method for controlling a converter that converts a primary input voltage to a secondary output voltage, in which a voltage value derived from an actual voltage recorded on the secondary side is compared with a reference value and, on surpassing the reference value, a control signal is generated as tripping criterion for switching off the converter, in which, during a test phase, the voltage value or the reference value is manipulated so that the tripping criterion is met. 
     On the one hand, a threshold value monitoring occurs for this purpose by comparison of an actual voltage recorded on the secondary side with a reference voltage that essentially represents a stipulated maximum output voltage. On the other hand, threshold value monitoring itself is checked cyclically or at stipulated test intervals with respect to its functional capability, in which during the test phase either the reference value or a voltage value derived from the actual voltage recorded on the secondary side is reduced or increased so that the converter is switched off. 
     With such threshold value manipulation, the tripping criterion for switching off the converter is forced. On the one hand, the functional capability of threshold value monitoring can be checked by plausibility testing of the reaction of the converter to the tripping criterion, in which the actual state of the converter is queried. For this purpose the actual voltage recorded on the secondary side and/or an actual current recorded on the secondary side are used. If the recorded value satisfies the stipulated plausibility assertion, error-free function of threshold value monitoring is assumed and the test phase is terminated. Otherwise an error message occurs. In this manner, both the functional capability of the converter and the functional capability of the threshold value monitoring itself can be checked. 
     In order to ensure that the converter has a defined switching state during the test phase, i.e., especially during starting of the corresponding test program or test algorithm, in an advantageous modification, a test signal is initially generated to switch on the converter. The test signal can then be generated both as a function of the actual switching state of the converter and independently of it. 
     Since the actual voltages continuously compared in the context of threshold value monitoring are compared discretely in time to the reference value and a corresponding plausibility assertion is therefore also available during the test phase concerning falling short or surpassing of the reference value, it can be determined even at the beginning of the test phase with the corresponding plausibility query and with the test signal activated whether error-free testing of threshold value monitoring is possible. Threshold value monitoring has the actual voltage, preferably in the form of a voltage value derived from it by division, whereas the reference value expediently represents the maximum admissible output voltage. 
     In a particularly simple variant of the converter-control or regulation, the output voltage is set by a voltage regulator that generates a manipulated variable for the converter when the recorded actual voltage deviates from a stipulated reference voltage. In an advantageous embodiment, the voltage regulator, however, does not directly furnish the manipulated variable for the converter on the output side, but a reference current or current reference signal, which in turn drives a current control circuit subordinate to voltage regulation. This again compares the current reference signal generated by the voltage regulator with the actual current recorded on the secondary side and generates the corresponding manipulated variable for the converter during a deviation. Control of the converter therefore occurs in the manner of cascade control, which is characterized by particularly high control dynamics and control stability. 
     The task is solved according to the invention by a device for controlling a converter that converts a primary input voltage to a secondary output voltage, with a first regulator to set the output voltage, with a voltmeter to record the secondary actual voltage, with a switching device connected to a control input of converter for threshold value monitoring, which compares a voltage value derived from the actual voltage with a reference value and on surpassing reference value generates a control signal as tripping, criterion to switch off converter, and with a threshold value manipulator connected to switching device to raise the voltage value or lower the reference value so that the tripping criterion is met. Advantageous embodiments or objects of the dependent claims refer back to it. 
     The device contains, in addition to a first regulator or voltage regulator for adjustment of the output voltage, on the one hand, a safety or switching device connected to the converter on the output side for threshold value monitoring. This generates a control signal to switch off the converter if the actual voltage recorded on the secondary side by a voltmeter surpasses a reference value. On the other hand, the device contains the threshold value manipulator that is connected on the output side to an input of the switching device. The threshold value manipulator raises or lowers the voltage value during the cyclically initiated test phase. The gauge or measure of the threshold value change determined by calculation is then dimensioned so that the tripping criterion is met. 
     The gauge of threshold value manipulation is then advantageously determined from parameters already available in the context of regulation or control of the converter. The voltage value or reference value is then expediently multiplied by a factor that is determined in turn by quotient formation of the voltage value and reference value. The manipulated threshold value fed to the switching device on the input side is expediently corrected by a tolerance value to compensate for the measurement and/or calculation tolerance. 
     To generate the test signal, which is supposed to ensure, in particular, switching on of the converter during a test phase and before initiation of threshold value manipulation, a control module is provided that can be implemented in terms of hardware and software in a controller that also control the converter. The control module has a first control input for the actual voltage recorded on the secondary side and a second control input for the actual current recorded on the secondary side. The control output is connected to a switch or programmed switching element that switches the test signal appearing at a signal output of the control module to a control input of the converter. 
     The control module expediently serves both for starting and ending the test phase. For this purpose, an algorithm is entered in the control module that generates the test signal at the start of the test phase, on the one hand, and switches this to the converter and activates threshold value manipulation, on the other hand. To terminate the test phase, the threshold value manipulation, on the one hand, is stopped by means of the algorithm entered in the control module or representing it and the test signal switched off. With switching off of the test signal, the manipulated variable generated by the first or second controller is switched to the converter. Switching off of the threshold value manipulation occurs by sending the unaltered voltage value or reference value to the switching device connected on the output side to the switching input of the converter for threshold value monitoring. 
     The advantages achieved with the invention consist, in particular, of the fact that, on the one hand, by threshold value monitoring of a control or regulator converter undesired states as a result of malfunctions in the form of an excess voltage value are reliably avoided. On the other hand, by a test phase cyclically initiated or initiated at stipulated time intervals, threshold monitoring itself can be checked with respect to functional capabilities so that “sleeping errors” can also be reliably recognized. This guarantees that the threshold value monitoring, which represents a safety device for the control of the converter and the converter itself, reliably switches it off when necessary. 
     The method and device are particularly suited for controlling a dc/dc converter. However, they are also similarly suitable in conjunction with an ac-dc converter, a dc-ac converter or an ac-ac converter. The direction of power transmission can then be different, in which primary side is understood to mean the side of the corresponding converter at which power supply occurs, while the secondary side is then the side of the converter at which the power is transferred. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS 
     Practical examples of the invention are further explained below with reference to a drawing. In the drawing, 
     FIG. 1 is schematically depicts a safety device for controlling a dc/dc converter and 
     FIG. 2 shows a flow chart for testing the functional reliability of the safety device. 
    
    
     Parts that correspond to each other in the two figures are provided with the same reference numbers. 
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
     FIG. 1 shows a dc/dc converter  1  that converts an input voltage U i  to an output voltage U o . The input voltage U i  is a voltage of, say, 42V generated in a manner not further shown in an electrical multivoltage network of a vehicle by a generator or heavy-duty battery. A so-called starter generator can also be incorporated on the generator side in the voltage system of the vehicle. 
     The output voltage U o  generated on the secondary side from secondary input voltage U i  by conversion at least roughly identical power referred to the dc/dc converter  1  subsequently referred to as converter is a comparatively low dc voltage in this application within an electrical power supply system of the vehicle, which corresponds, for example, to a 12V battery voltage of a low voltage battery. In this application an output terminal A(+) of converter  1  can be connected to a plus pole and an output terminal A(−) connected to ground can be connected to a minus pole of the low voltage battery supplied from the secondary output voltage U o . 
     A control device  2  is connected to converter  1  that includes a first regulator or voltage regulator R 1  and a second regulator or current regulator R 2 , as well as a threshold monitoring  4  designed here as a comparator and a controller  6  preferably in the form of a microprocessor. Controller  6  contains threshold value manipulator  8  and a control module  10  connected to it, as well as switching element  12 . Voltage regulator R 1  in the practical example is part of controller  6 . 
     A voltmeter  14  connected to the control device  2  records the actual voltage U act  generated by converter  1  on the secondary side. On the one hand, this is fed both to a regulator input E 11  and to threshold value manipulator  8  and control module  10 , and, on the other hand, to a signal input E 42  of threshold value monitoring  4  via a divider and switching element  16 . Voltage regulator R 1  is supplied a reference voltage U ref  via a second regulator input E 12 . A control output A 11  of voltage regulator R 1  is fed to a first switch terminal P 1  and switching element  12 . A second switch terminal P 2  of switching element  12  is connected to signal output A 101  and control module  10 . A switching or control output A 102  of control module  10  acts on switching element  18  of switch  12  to connect its third switch terminal P 3  to switch terminal P 1  or P 2 . Switch terminal P 3  is connected to regulator input E 22  of current regulator R 2 , whose other control input E 21  is connected to ammeter  20  to record the actual current I act  of converter  1  on the secondary side. Regulator output A 21  of current regulator R 2  is connected to control input E 31  of converter  1 . 
     The actual current I act  is also fed to a signal input E 101  of control module  10 . The actual voltage U act  is fed to control module  10  by a signal input E 102 . A control output A 103  of control module  10  is connected to control input E 31  of threshold value manipulator  8 , at whose signal input E 52  to the actual voltage U act  is fed. A control output A 81  of threshold value manipulator  8  is fed to the divider and switching element  16  or to a corresponding divider or switching element  22  to which a reference value U R  representing a maximum voltage U max  is fed. The divider and switching element  22  is connected in turn to a signal input E41 of threshold value monitoring  4 . Its control output A41 is connected to a switching or control input E 32  of converter  1 . 
     When converter  1  is engaged, the voltage regulator R 1  of control device  2  serves to regulate the output voltage U o . For this purpose, voltage regulator R 1  brings the actual voltage U act  recorded on the secondary side to the stipulated reference value U ref . The control output A 1  of voltage regulator R 2  is then connected via switching element  12  to the regulator input E 22  of current regulator R 2 . This again brings the actual current I act  recorded on the secondary side to a reference current representing a current reference value signal I c  generated by the voltage regulator R 1  and generates a manipulated variable S c  for the converter  1 . Control of controller  1  therefore does not occur directly via the high level voltage control circuit, but indirectly via the lower level current regulation circuit. Because of this, particularly high control dynamics and control stability of a cascade control formed by voltage regulator R 1  and current regulator R 2  are achieved. 
     Regardless of the switching state of converter  1 , threshold value monitoring represented by the comparator  4  monitors the actual voltage U act  with respect to surpassing of the reference value U R . The actual voltage U act  is then divided expediently by the divider element  16  by a factor c, in which 0&lt;c≦1. Threshold value monitoring  4  is therefore fed a voltage value U V  with U V =c via its signal input E 42 . The reference value U R  corresponds to a maximum admissible output voltage U 0  with U 0 =U max =U R . Threshold value monitoring  4  compares the voltage value U v  with the reference value U R  and, on surpassing reference value U R , generates an output signal S A  as tripping criterion for switching off converter  1 , which is supplied this via a signal input E 41 . The tripping criterion, for example, is fulfilled when the secondary output voltage U 0  meets the condition: 
     
       
         U o =U act ≧U max , in which U max , for example, is 16V.  
       
     
     In order to be able to recognize a “sleeping error” within the control device  2  and especially within threshold value monitoring  4 , a test phase in the form of a test program T preferably implemented by means of software is cyclically run or during or before each engagement of converter  1 , whose individual program steps (beginning with a program start T start ) are shown in the flow chart, particularly in FIG.  2 . 
     After the program start T start , the control module  10  compares in a first program step T 0  the actual voltage I act  fed to it via a signal input E 102  with the maximum admissible voltage U max  also entered in control module  10 . If the actual voltage U act  is smaller than the admissible maximum voltage U max , the test program goes to a program step T 12 , otherwise to a program step T 22 . In both program steps T 12  and T 22 , the switching element  18  of switch  12  is switched by means of switching module  10  to the switch terminal P 2  connected to the signal output A 101  and a test signal I t  generated by switching module  10  is fed to the regulator input E 22  of current regulator R 2 . The test signal I t  represents a current reference value signal or a reference current that causes the current regulator R 2  to engage to converter  1 . The test signal I t  is also generated when converter  1  is already engaged. 
     In a program step T 23  connected to program step T 22 , control module  10  of controller  6  compares the recorded actual current I act  and/or the recorded actual voltage U act  with the plausibility criterion that is zero in the practical example. If the criterion I act =0, when the converter  1  is connected on the secondary side to a battery or to a load, or the criterion U act =0, when converter  1  is not connected on the secondary side to a battery or to a load, is not met, an error message FM 4  occurs. This indicates a defect of the safety device represented by the threshold value monitoring  4 . Otherwise, i.e., when this plausibility criterion is met, no more detailed assertion is possible, so that this program path of the test program T goes back to the program start T start . Error-free function of the safety device is then assumed, since at U act ≧U max  the converter  1  either does not operate or is defective. 
     In the parallel program path, the control module  10  of controller  6  compares in a program step T 13  that follows program step T 12 , the actual voltage U act  recorded on the secondary side and/or the actual current I act  recorded on the secondary side with an additional plausibility criterion. This corresponds, as shown in the flow chart according to FIG. 2, to the same plausibility criterion, but according to a different relation. If I act &gt;0 when a battery or load is connected on the secondary side to converter, or U act &gt;0 when no battery or no load is connected, the test program T goes to a program step T 14 . Otherwise, an error message FM 2  is generated, which indicates a defect of converter  1 . 
     If the plausibility criterion checked in program step T 13  is fulfilled, threshold value manipulation occurs in program step T 14 . For this purpose, threshold value manipulator  8  is activated by control module  10 . This sends via its control output A 51  either a raised voltage value U′ v  with U′ v &gt;U v  to the signal input E 42  of the comparator  4  or a reduced reference value U′ R  with U′ R &lt;U R  to the signal input E 41  of comparator  4 . Threshold value manipulation with raising of the voltage value U v  occurs expediently according to the relation          U   v   ′     =         U   v     ·                            U   in           +     Δ                 x                              
     in which Δx is a stipulated tolerance value. Similarly, threshold value manipulation by reduction of the reference value U R  expediently occurs according to the relation:          U   R   ′     =         U   R     ·                            U   max           -     Δ                 x                              
     With this program step, forced switching off of converter  1  occurs, since the tripping criterion for switching off converter  1  is met by threshold value manipulation. 
     After an adjustable waiting time t, program T goes to a program step T 15  in which a plausibility query again occurs. Waiting time t is expediently set so that the switch-off signal S a  on the output side is a result of threshold value manipulation of comparator  4  is that the control input E 32  of converter  1  and this is considered switched off. 
     In program step T 15 , the plausibility query whether the actual voltage U act  fulfills the criterion U act =0 and/or whether the actual current I act  fulfills the criterion I act =0 again occurs. If this plausibility criterion is fulfilled, the converter  1  is switched off as a result of the tripping criterion necessarily generated by threshold value manipulation and the program goes to a program step T 15 . Otherwise an error message FM 4  occurs, indicating a defect of threshold value monitoring  4  and therefore of the safety device. 
     In program step T 16 , the control module  10  of controller  6 , on the one hand, switches off threshold value manipulation  8  and, on the other hand, switches the switching element  18  of switch  12  from switch terminal P 2  to the switch terminal P 1 . Because of this the cascade control represented by voltage regulator R 1  and current regulator R 2  and therefore control of converter  1  are activated. Switching off of threshold value manipulator  8  occurs through its control by control module  10  so that the threshold value manipulator  8  sets the signal input E 42  of comparator  4  at the voltage value U v  or the signal input E 41  at the reference value U R . The test program T is then ended by a corresponding program order T end . 
     The test program T therefore carries out testing of the functional capability of threshold value monitoring  4 , in which errors within the control device  2  in terms of hardware or software are recognized. The test program T also permits detailed error recognition of the power supply system formed from the converter  1  and the control device  2  in which a distinction is at least made between a defective converter  1  and a defective threshold value monitoring  4  and therefore a defective safety device  2 . 
     These error messages FM 1,4  can also be used for additional switching functions according to which, for example, during occurrence of an error message FM 4  indicating a defect of threshold value monitoring  4 , the converter  1  is necessarily switched off or held in an engaged state for an adjustable maximum period. The error messages FM 1,4  can also be displayed as warning signals or used as a control criterion for a higher level regulation or control.