Patent Description:
In recent times many system components and actuators in commercial vehicles are replaced by electric systems. This relates in particular to electric and hybrid vehicles that need a different vehicle infrastructure, which is not anymore based on pressurized air as primary energy source. Nevertheless, also the electric systems shall provide the same safety level as the conventional systems.

Safety relevant functions in vehicles are particularly the braking and steering. To meet the safety requirements, it is typically required to have a redundant electric power management system with a high safety level - in particular for an automated driving the safety requirements are very high.

A conventional power system is disclosed in <CIT>, wherein a first and second voltage supply are connected via a decoupling element, safety relevant loads are coupled over further decoupling elements to the voltage supply. Another conventional power system is disclosed in <CIT>, wherein a plurality of energy storage devices is arranged in parallel so that in case of a failure, one of the other voltage supplies can be engaged. <CIT> discloses a redundant electric power system with a power supply converter. <CIT> discloses a battery storage system comprising multiple energy storage units for supplying electrical power to an electrical vehicle.

However, there is a demand for further systems that are able provide information regarding the condition of the energy storage units continuously and in a redundant way to meet the high safety requirements in automotive applications.

At least some of these problems are overcome by a vehicle of claim <NUM> or a method according to claim <NUM>.

The dependent claims refer to further advantageous realizations of the subject matter of the independent claims.

Embodiments of the present invention relate to a system for providing redundant electric power to at least one vehicle component (consumer). The system comprises at least one power management unit connectable to a vehicle power network, and storage units coupled to the at least one power management unit for receiving electric power to be stored in the storage units. The at least one vehicle component is connectable to at least two of the storage units to enable a redundant electric power supply.

The one power management unit comprises at least one of the following components: a charging unit for providing a charging power to the one or more storage units, a switching unit for (selectively) interrupting a connection to one or more of the storage units, and a logic circuit for controlling the charging unit and/or the switching unit.

Optionally, one power management unit is coupled to multiple storage units and the switching unit may be adapted to interrupt one or more of the storage units coupled to the one power management unit.

Optionally, the multiple storage units comprise each a storage element and a further logic circuit for monitoring a state of the storage element.

Optionally, each of the power management units is associated with one of the storage units with a storage element. The logic circuit of the power management unit may be adapted to monitor a state of the storage element in the associated storage unit.

Optionally at least some of the storage units comprise one or more terminals for connecting safety relevant vehicle components and/or other vehicle components. The terminals may enable voltage supplies for different voltages values for the vehicle component(s).

Optionally, the system comprises a (redundant) vehicle communication network. At least one of the logic circuits of the power management units may be adapted to provide status information about the storage units to the vehicle communication network.

Further embodiments relate to a vehicle, in particular to a commercial vehicle, with at least one vehicle component and a system as defined before which is suitable for providing redundant electric power to the least one vehicle component.

Further embodiments relate to a method for providing redundant electric power to at least one vehicle component. The method comprises:.

This method or part thereof may also be implemented or caused by software or a computer program product. Embodiments of the present invention can, in particular, be implemented by software or a software module in an ECU of the vehicle.

Embodiments of the present invention overcome issues of the conventional systems by providing an intelligent electric energy management solution that meets high levels of security by enabling a continuous information flow regarding the condition of the energy storage units for the vehicle via a redundant communication network. Therefore, embodiments provide a board network system which is in particular suitable for safety relevant applications (for example in braking or steering systems).

Some examples of the systems and/or methods will be described in the following by way of examples only, and with respect to the accompanying figures, in which:.

<FIG> depicts a first embodiment for the system for providing redundant electric power to at least one vehicle component <NUM>, <NUM>. The system comprises one power management unit <NUM> connected to a vehicle power network <NUM> that may provide the power. In addition, status information can be provided to a vehicle communication network <NUM>. The system comprises a plurality of storage units <NUM> that are coupled to the one power management unit <NUM> for receiving electric power to be stored in the storage units <NUM>. For this, the storage units <NUM> comprise at least one storage cell <NUM>.

The power management unit <NUM> comprises a charging unit <NUM> which is adapted to carry out the charging of the storage units <NUM>. The power management unit <NUM> further comprises a logic circuit <NUM> that monitors the charging as well as determines status information about the storage units <NUM> (for example the charge level of the storage cells <NUM> within the storage units <NUM>) and may provide this information to the vehicle communication network <NUM>. The power management unit <NUM> finally comprises at least one switching unit <NUM> which is configured to interrupt the connection between the power management unit <NUM> to one or more of the storage cells <NUM>. The interruption is controlled by the logic circuit <NUM> and ensures that in case of a malfunctioning, for example within the storage units <NUM>, the respective storage unit <NUM> or at least the storage cell <NUM> can be disconnected from the system. For this, each storage unit <NUM> may include a further logic circuit <NUM>.

Each of the storage units <NUM> or a subset thereof may comprise one or more terminals to connect vehicle components <NUM>, <NUM> to the respective storage unit(s) <NUM>. The vehicle components <NUM>, <NUM> relate to safety relevant vehicle components <NUM> and the braking and steering systems as defined above in page <NUM>. As a result, a safety relevant vehicle component <NUM> can be connected different storage units <NUM> so that even in case of a malfunctioning of one or some of the storage units <NUM>, the power supply to the safety relevant vehicle component <NUM> can still be maintained. Even if one storage unit <NUM> is down, the logic circuits <NUM>, <NUM> will replace the "missing" power through the other storage units <NUM> connected to the vehicle component <NUM>. Hence, a safe power supply can be maintained up to a needed level.

<FIG> depicts another embodiment for the system for providing redundant electric power to the vehicle components <NUM>, <NUM>. This embodiment is not encompassed by the wording of the claims but is considered as useful for understanding the invention.

When compared to the embodiment of <FIG>,.

in this embodiment each of the storage units <NUM> comprises its own, dedicated power management unit <NUM> that controls and monitors the charging and the charge level of the storage cells <NUM>. The respective incorporated power management units <NUM> again comprise a switch <NUM> which is configured to disconnect the storage cell <NUM> from the system in order to provide a protection in case a malfunctioning occurs. As in <FIG>, the power management units <NUM> each comprises a logic circuit <NUM> for controlling the charging unit <NUM> and the switch <NUM>. Each of the power management units <NUM> is connected to the vehicle power network <NUM> to receive power and to the communication network <NUM> in order to provide information about the charging state of the electric power supply.

In the embodiment of <FIG> there is no need that each or any of the storage units <NUM> comprise a respective logic circuit, because this function can be taken over by the logic circuit <NUM> being arranged in the power management unit <NUM> (also known as central unit). Likewise, it is possible that the function of the logic circuit <NUM> in the power management unit <NUM> can be taken over by a respective logic circuit arranged in the storage units <NUM> (not shown in <FIG>).

Again, safety relevant vehicle components <NUM> can be connected to various storage cells <NUM> in order to ensure a redundant power supply to the safety relevant vehicle component(s) <NUM>. The redundant voltage supply through the various terminals of the storage units <NUM> may also enable a supply for different voltage values.

Both embodiments are powered by the electric board network <NUM> of the vehicle and can provide energy storage status information over a redundant vehicle communication network <NUM>.

It is understood that not all of the storage cells <NUM> need to be connected to the vehicle component(s) by respective terminals. Instead a grouping of storage units <NUM> or storage cells <NUM> can be arranged. For example, a connection can be provided between different storage units <NUM> to keep the voltages at the different storage units at the same or at a desired level. Likewise, an active charge balancing unit can be formed between the different storage units <NUM>. The storage cells <NUM> can be any electrical component that is able to store electric energy and may include one or more battery cells.

The power management unit(s) <NUM> in both embodiments is/are responsible for keeping a charge level of the energy storage cells <NUM> in each electric energy storage circuit at a target level to guarantee the availability for the safety relevant consumers <NUM>. Moreover, the power management unit <NUM> is responsible for monitoring the energy storage and provides respective status information about the available energy and remaining functionality (for example the number or amount of remaining braking cycles or steering maneuvers that are still possible).

The intelligent electric energy storage units <NUM> are responsible for providing energy for safety relevant consumers <NUM> and other consumers <NUM> - even on different/mixed voltage levels if needed. These voltage levels are produced from electrical components that store the potential energy. The further logic circuit <NUM> monitors the circuit outputs and charge levels of the storage components <NUM>, collects the respective data and provides it to the power management unit <NUM>. According to further embodiments, it is also possible to provide different voltage levels at the output terminals for different consumers (vehicle components) from the same circuit (the same power supply).

In the embodiment of <FIG>, the power management unit <NUM> and the storage units <NUM> may be combined within a common block and act together as in the embodiment of <FIG>. An advantage of the embodiment of <FIG> is the separation between the different storage units <NUM> together with the power management units <NUM>. Hence, it prevents better any failure propagation through the system. The logic circuit <NUM> within these blocks provides a monitoring of the energy storage, the charge management and provides status information.

Through the constant monitoring using the logic circuits <NUM>, <NUM> embodiments are able to provide likewise a protection with respect to overcharging, overcurrent or a pre-charge protection. Furthermore, an energy storage charge balancing made possible by corresponding connections via charge balancing units between the output terminals.

The safety switches (for example the switch unit <NUM>) provide another advantage of embodiments, because they are able to separate immediately some or a single circuit or component in case of any failure or malfunctioning. As a result, the failure will not have an adverse effect on any other component and the system according to embodiments is actually a fail-operational power supply suitable in particular for safety relevant applications. The power supply according to embodiments is thus particularly suited as backup energy that can be provided to any safety relevant consumer in case any single failure occurs in the electric energy supply system.

Further advantageous embodiments relate to the following subject matters:.

The scope of the invention is only defined by the appended claims.

Claim 1:
A system configured to provide redundant electric power to at least one safety relevant vehicle component (<NUM>, <NUM>),
characterized by:
- one power management unit (<NUM>) connectable to a vehicle power network (<NUM>, <NUM>); and
- storage units (<NUM>) coupled to the one power management unit (<NUM>) for receiving electric power to be stored in the storage units (<NUM>),
wherein the at least one vehicle component (<NUM>, <NUM>) relates to safety functions braking and steering in the vehicle,
wherein the at least one vehicle component (<NUM>, <NUM>) is connectable to at least two of the storage units (<NUM>) to enable a redundant electric power supply,
and wherein the one power management unit (<NUM>) comprises:
- a charging unit (<NUM>) for providing a charging power to the storage units (<NUM>),
- a switching unit (<NUM>) for interrupting a connection to the storage units (<NUM>), and
- a logic circuit (<NUM>) for controlling the charging unit (<NUM>) and/or the switching unit (<NUM>).