Patent Description:
With the continuous improvement of living standards, automobiles have become an indispensable part of people's daily travel. Energy saving and emission reduction is the key to the sustainable development of the automobile industry. Electric vehicles have gradually become an important part of the sustainable development of the automobile industry due to their advantages of energy saving and environmental protection. Safety of automobiles has always been a subject of great concern to people. A power supply system is an important factor in ensuring vehicle safety. For an electric vehicle, the power supply system is particularly critical. A reliable and stable power supply system is a key to ensuring safety of a vehicle (especially for an electric vehicle). <CIT>, which discloses the preamble of claim <NUM>, mentions a dual-power-supply control system of electric vehicle and an electric vehicle. <CIT> mentions a power supply system having a plurality of power systems. <CIT> mentions a power supply apparatus for vehicle including dual power supply loops. <CIT> mentions a power supply system including two power sources. <CIT> mentions a method for operating a diagnostic system of a vehicle.

In view of the foregoing problem, the present disclosure provides a double-loop power supply system as specified in claims <NUM>-<NUM> and an electric vehicle with a double-loop power supply system as specified in claims <NUM>-<NUM>.

According to a first aspect, the present disclosure provides a power supply system, including: a first loop, where the first loop includes a DC-DC conversion module and a first load that are connected in parallel, and each first terminal of the DC-DC conversion module and the first load that are connected in parallel is grounded; a second loop, where the second loop includes a storage battery and a second load that are connected in parallel, and each first terminal of the storage battery and the second load that are connected in parallel is grounded; and a switch unit, where the switch unit includes a switch, the switch is coupled in series between a second terminal of each of the DC-DC conversion module and the first load that are connected in parallel and a second terminal of each of the storage battery and the second load that are connected in parallel, and the switch is in an on-state by default. The switch unit further includes a control module and a sensor. The control module is configured to: in response to receiving a sensing signal from the sensor, send a control signal to the switch. The sensor may detect various parameters in the power supply system. The sensor includes a voltage sensor, where the voltage sensor is coupled in parallel to the switch. The control module is further configured to: receive a voltage value from the voltage sensor, and send a turn-off signal to the switch in response to determining that the received voltage value is greater than a voltage threshold. The voltage sensor is coupled in parallel with the switch, and measures a voltage value across the switch (namely, between the first loop and the second loop), so as to detect an operating state of the first loop and the second loop.

In the technical solution of an embodiment of the present disclosure, only one storage battery is used to implement the dual-circuit power supply system. In such a power supply system, when one loop fails, the other loop is used to supply power, so that a vehicle can continue to drive or perform an emergency safety operation, significantly improving vehicle safety. In such a power supply system, the switch is in an on-state by default, so that the vehicle can be started by using the storage battery in the second loop as a starting power supply.

Such a design is implemented by improving an original vehicle single power supply system, without adding additional storage battery or another component, so that no additional costs is added, and a structure is simple. In addition, such a design does not have an impact on a weight and the like of the vehicle, or cause a problem such as subsequent vehicle tuning.

The sensor may detect various parameters in the power supply system. The control module may control the switch in the switch unit based on the various parameters detected by the sensor, to cope with various cases that may occur when the power supply system fails.

In some embodiments, the sensor may include a current sensor, where the current sensor is coupled in series to the switch. The control module is further configured to: receive a current value from the current sensor, and send a turn-off signal to the switch in response to determining that the received current value is greater than a current threshold. The current sensor is coupled in series with the switch, and may measure a current value flowing between the first loop and the second loop, so as to detect an operating state of the first loop and the second loop. The control module may determine the operating state of the two loops in the power supply system based on the current value between the first loop and the second loop measured by the current sensor, and control the switch to be turned off when it is determined that the current value is greater than the current threshold, so that one loop in the power supply system can continue to work normally, and the vehicle can continue to drive or perform an emergency operation with the help of the remaining loop.

The voltage sensor is coupled in parallel with the switch, and measures a voltage value across the switch (namely, between the first loop and the second loop), so as to detect an operating state of the first loop and the second loop. The control module determines the operating state of the two loops in the power supply system based on the voltage value between the first loop and the second loop measured by the voltage sensor, and control the switch to be turned off when it is determined that the voltage value is greater than the voltage threshold, so that one loop in the power supply system can continue to work normally, and the vehicle can continue to drive or perform an emergency operation with the help of the remaining loop.

In some embodiments, the switch unit may further includes a timer, and the timer is coupled to the control module. The control module may be further configured to start the timer upon determining that the received voltage value is greater than the voltage threshold. When the control module determines that the received voltage value is greater than the voltage threshold for a duration that is greater than a duration threshold, a turn-off signal is sent to the switch. When the control module determines that the received voltage value is greater than the voltage threshold for a duration that is less than the duration threshold, no processing is performed. The use of a timer may prevent the control module from turning off the switch at a moment of startup of a high-power device during normal operation of the power supply system.

In some embodiments, the control module may be configured to: after sending the turn-off signal to the switch, report to a vehicle controller that the switch is in turned off. The control module may report a state of the switch and/or a state of the power supply system to the vehicle controller, so that the vehicle controller can perform a corresponding operation based on the report.

In some embodiments, the sensor may include a temperature sensor, where the temperature sensor is coupled in series to the switch. The control module may be configured to receive a temperature value from the temperature sensor, and determine that the switch is disabled in response to determining that the received temperature value is greater than a temperature threshold. The temperature sensor is coupled in series to the switch, and may measure the temperature value of the switch unit (or the switch) for detecting a state of the switch unit (or switch). The control module may determine, based on the temperature of the switch unit (or switch) measured by the temperature sensor, whether the state of the switch is a normal state or a failure state.

In some embodiments, the control module may be configured to: after a signal that the switch is disabled is determined, report to a vehicle controller that the switch is disabled. The control module may report to the vehicle controller whether the switch is disabled, so that the vehicle controller can perform a corresponding operation based on the report.

According to a second aspect, the present disclosure provides an electric vehicle, which may include the power supply system in the foregoing embodiments.

In some embodiments, the electric vehicle may include a vehicle controller, and the vehicle controller may be configured to exit an automatic driving mode in response to receiving, from a control module, a signal that the switch is turned off or a signal that the switch is disabled. The vehicle controller may obtain a switch status signal from the control module, and perform a corresponding operation based on the switch status signal to ensure safety of vehicle driving.

The foregoing description is merely a summary of the technical solution of the present disclosure. In order to make the technical means of the present disclosure to be understood more clearly and implemented in accordance with the content of the specification, and in order to make the above and other objectives, features and advantages of the present disclosure more obvious and easier to understand, specific implementations of the present disclosure are described below.

For a person of ordinary skill in the art, various other advantages and benefits will become clearer by reading detailed descriptions of the following optional implementations. The accompanying drawings are merely used for illustrating the optional implementations, and are not considered as a limitation on the present disclosure. Throughout the accompanying drawings, a same reference symbol is used to indicate a same part.

In the accompanying drawings, the drawings are not drawn to actual scales.

Reference numerals in the drawings are as follows:.

The following further describes implementations of the present disclosure in detail with reference to the accompanying drawings and embodiments. The detailed description and drawings of the following embodiments are used to exemplarily illustrate the principles of the present disclosure, but cannot be used to limit the scope of the present disclosure, that is, the present disclosure is not limited to the described embodiments.

In the description of the embodiments of the present disclosure, it should be noted that, unless otherwise specified, the term "a plurality of" means two or more; the term "and/or" describes only an association relationship for describing associated objects and represents that three relationships may exist. For example, A and/or B may represent the following three cases: only A exists, both A and B exist, and only B exists. In addition, the character "/" in the present disclosure generally indicates an "or" relationship between the associated objects. Moreover, the terms such as "first", "second", and "third" are used only for description and are not intended to indicate or imply relative importance.

Unless otherwise defined, all technical and scientific terms used in the present disclosure have the same meaning as that commonly understood by a person skilled in the art of the present disclosure. The terms used in the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise" and "have" and any other variants thereof in the specification and claims of the present disclosure are intended to cover the non-exclusive inclusion.

The "embodiment" mentioned in the present disclosure means that a specific feature, structure, or characteristic described in combination with the embodiment may be included in at least one embodiment of the present disclosure. The appearance of the term in various places in the specification is not necessarily all referring to a same embodiment, nor is it a separate or alternative embodiment that is mutually exclusive with other embodiments. It may be explicitly or implicitly appreciated by those skilled in the art that the embodiments described in the present disclosure may be combined with other embodiments.

In the following descriptions, many specific details (such as examples of a specific component, circuit, and process) are provided to thoroughly understand the present disclosure. As used in the present disclosure, the terms "coupled", "coupling", "connected", or "connecting" mean directly connected to, or connected through one or more intervening media or components. For those of ordinary skill in the art, specific meanings of the foregoing terms in the present disclosure may be understood according to specific circumstances. In addition, in the description below and for purposes of explanation, many specific names are illustrated to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent to those skilled in the art that example embodiments may be practiced without these specific details. In other examples, well-known circuits and devices are shown in block diagram form in order to avoid obscuring the present disclosure.

With the continuous improvement of living standards, automobiles have become an indispensable part of people's daily travel. Energy saving and emission reduction is the key to the sustainable development of the automobile industry. Electric vehicles have gradually become an important part of the sustainable development of the automobile industry due to their advantages of energy saving and environmental protection. Safety of automobiles has always been a subject of great concern to people. A power supply system is an important factor in ensuring vehicle safety. For an electric vehicle, the power supply system is particularly critical. A reliable and stable power supply system is a key to ensuring safety of a vehicle (especially for an electric vehicle).

Currently, the power supply system of many automobiles uses a single-loop power supply system. When a single-loop power supply system of a vehicle fails, an electric load of the whole vehicle cannot work normally, which affects normal driving of the vehicle. When a power failure occurs while the vehicle is running, safety of the vehicle or passengers in the vehicle may also be affected. In addition, with the rapid advancement of science and technology, autonomous vehicles are slowly entering people's field of vision. Although fully autonomous vehicles are not yet widespread, vehicles with partially autonomous capabilities are already entering the market. Undoubtedly, autonomous driving has put forward a new requirement for safety of a vehicle. When the vehicle is in automatic driving mode, if a single-loop power supply system of the vehicle fails, an automatic driving system cannot work normally, and the vehicle in automatic driving mode is in danger of losing control. Moreover, when the single-loop power supply system of the vehicle fails, a safety module (such as a body stability control system ESC, and an electric power steering EPS) of the vehicle also fails.

In view of the foregoing problem, the present disclosure provides a power supply system and an electric vehicle. The power supply system of the present disclosure may include: a first loop, where the first loop includes a DC-DC conversion module and a first load that are connected in parallel, and each first terminal of the DC-DC conversion module and the first load that are connected in parallel is grounded; a second loop, where the second loop includes a storage battery and a second load that are connected in parallel, and each first terminal of the storage battery and the second load that are connected in parallel is grounded; and a switch unit, where the switch unit includes a switch, the switch is coupled in series between a second terminal of each of the DC-DC conversion module and the first load that are connected in parallel and a second terminal of each of the storage battery and the second load that are connected in parallel. The switch is in an on-state by default, so that a vehicle is started by using the storage battery in the second loop.

The power supply system of the present disclosure uses only one storage battery to form a dual-circuit power supply network. In such a power supply system, when one loop fails, the other loop can be used to supply power, so that a vehicle can continue to drive or perform a corresponding emergency operation (such as reducing a driving speed, emergency actuation, or pulling over), significantly improving vehicle safety. Such a power supply system is implemented by improving an original single-loop power supply network, without adding additional storage battery or another component, so that no additional costs is added, and a structure is simple. In addition, such a design does not have an impact on a weight and the like of the vehicle, or cause a problem such as subsequent vehicle tuning.

The power supply system of the present disclosure may be used for, but not limited to, a vehicle, a ship, or an aircraft. For ease of description, a vehicle is used as an example for description below; however, those skilled in the art will appreciate that the power supply system of the present disclosure may alternatively be applied to another vehicle with an electrical load (such as a ship or an aircraft). The use of the power supply system disclosed in the present disclosure can provide a backup power supply loop for the vehicle, which significantly improves safety of the vehicle (especially during driving).

The electric vehicle including the foregoing power supply system disclosed in the embodiment of the present disclosure may be, but not limited to, a pure electric vehicle, a hybrid electric vehicle, an extended-range vehicle, or the like. The power supply system disclosed in the present disclosure can use another loop to supply power when a single loop of the power supply system fails, and safety is significantly improved.

According to some embodiments of the present disclosure, the present disclosure provides a power supply system <NUM>.

<FIG> is a schematic structural diagram of the power supply system <NUM> according to an embodiment of the present disclosure. As shown in <FIG>, the power supply system <NUM> may include a first loop <NUM>, a second loop <NUM>, and a switch unit <NUM>. The first loop <NUM> may include a DC-DC conversion module <NUM> and a first load <NUM> that are connected in parallel. A first terminal of each of the DC-DC conversion module <NUM> and the first load <NUM> that are connected in parallel is grounded. The second loop <NUM> may include a storage battery <NUM> and a second load <NUM> that are connected in parallel. A first terminal of each of the storage battery <NUM> and the second load <NUM> that are connected in parallel is grounded. Further, <FIG> is a schematic structural diagram of the switch unit <NUM> according to an embodiment of the present disclosure. As shown in <FIG>, the switch unit <NUM> may include a switch <NUM>. The switch <NUM> is coupled between a second terminal of each of the DC-DC conversion module <NUM> and the first load <NUM> and a second terminal of each of the storage battery <NUM> and the second load <NUM>. The switch <NUM> is in an on-state by default.

In an exemplary case, the first load <NUM> may include a primary load (for example, a driving-related load), and the second load <NUM> may include a safety load (such as an electronic stability control ESC (Electronic Stability Control) system, and electric power steering EPS (Electric Power Steering)). In this case, the first load <NUM> may optionally include an autonomous driving unit.

In an exemplary case, the second load <NUM> is a redundancy of part of the first load <NUM>, that is, the first load <NUM> not only includes the second load <NUM>, but also includes some other loads that are related to driving and other than the second load <NUM>.

In an exemplary case, an input terminal of the DC-DC conversion module <NUM> may be connected to a power battery of a vehicle. The power battery is a high-voltage battery, and its voltage may be <NUM> volts. An output voltage of the DC-DC conversion module <NUM> may range from <NUM> volts to <NUM> volts; optionally <NUM> volts, <NUM> volts, or the like may be selected. Thus, the DC-DC conversion module <NUM> may convert a high voltage direct current into a low voltage direct current, to provide power for the first loop <NUM>.

When the two loops of the power supply system <NUM> are working normally, the switch <NUM> in the switch unit <NUM> is in an on-state by default. When the switch <NUM> is turned on, the first load <NUM> and the second load <NUM> may be powered by the storage battery <NUM> to start the vehicle. After the vehicle is started, the power battery connected to the input terminal of the DC-DC conversion module <NUM> starts to work. In this case, a voltage of the output terminal of the DC-DC conversion module <NUM> is greater than a voltage of the storage battery <NUM>. Thus, the output terminal of the DC-DC conversion module <NUM> may supply power for the first load <NUM> and the second load <NUM>. In addition, if a capacity of the storage battery <NUM> does not reach the maximum in this case, the output terminal of the DC-DC conversion module <NUM> may also charge the storage battery <NUM>. The arrows in <FIG> show a schematic diagram of a current flow generated after the power battery starts to work.

When the first loop <NUM> in the power supply system <NUM> fails, the switch <NUM> in the switch unit <NUM> is turned off. In this case, the second loop <NUM> continues to work normally, that is, to ensure that the second load <NUM> coupled to the storage battery <NUM> works normally (for example, normal operation of the safety load causes the vehicle to perform an emergency safety operation, such as reducing a driving speed, emergency actuation, or pulling over). When the second loop <NUM> in the power supply system <NUM> fails, the switch <NUM> in the switch unit <NUM> is turned off. In this case, the first loop <NUM> continues to work normally, that is, the first load <NUM> coupled to the DC-DC conversion module <NUM> works normally (for example, the driving-related load is functioning properly, that is, the vehicle is driving normally).

When the vehicle is in an automatic driving mode, regardless of failure of the first loop <NUM> or the second loop <NUM>, the vehicle exits the automatic driving mode. Furthermore, when the first loop <NUM> or the second loop <NUM> fails, that is, when the switch <NUM> is turned off, the vehicle is not allowed to enter the automatic driving mode. After the switch <NUM> is turned on again, the vehicle is allowed to enter the automatic driving mode.

The power supply system <NUM> implements a dual-circuit structure using only one storage battery. In the power supply system <NUM>, when one loop fails, the other loop can be used to supply power, so that the vehicle can continue to drive or perform a corresponding emergency operation, significantly improving vehicle safety. In the power supply system <NUM>, the switch <NUM> is in an on-state by default, so that the vehicle can be started by using the storage battery <NUM> in the second loop <NUM> as a starting power supply.

According to some embodiments of the present disclosure, optionally, the switch unit <NUM> may further include a control module <NUM> and a sensor. The control module <NUM> may be configured to: in response to receiving a sensing signal from the sensor, send a control signal to the switch <NUM>.

The control module <NUM> is coupled to the sensor to enable signal (such as a current signal, a voltage signal, and a control signal) transfer. The control module <NUM> may receive the sensing signal from the sensor in real time or periodically (for example, every <NUM> seconds, <NUM> seconds, or <NUM> seconds). The control module <NUM> may send a control signal to the switch <NUM> if it is determined that the sensing signal received from the sensor satisfies a specific condition.

The sensor may detect various parameters in the power supply system <NUM>. The control module <NUM> may control a switch in the switch unit <NUM> based on the sensing signal, to cope with various cases that may occur when the first loop <NUM> or the second loop <NUM> in the power supply system <NUM> fails.

According to some embodiments of the present disclosure, optionally, referring to <FIG> and <FIG>, the sensor may include a current sensor <NUM>, where the current sensor <NUM> is coupled in series to the switch <NUM>. The control module <NUM> may be configured to: receive a current value from the current sensor <NUM>, and in response to determining that the received current value is greater than a current threshold, send a turn-off signal to the switch <NUM> to cause the switch <NUM> to be turned off.

The current sensor <NUM> is coupled in series with the switch <NUM>. Although <FIG> shows that the current sensor <NUM> is coupled in series between the first loop <NUM> and the switch <NUM>, those skilled in the art will appreciate that the current sensor <NUM> may alternatively be coupled in series between the switch <NUM> and the second loop <NUM>.

The current sensor <NUM> may measure a current value flowing between the first loop <NUM> and the second loop <NUM>, so as to detect an operating state of the first loop <NUM> and the second loop <NUM>. In an optional case, the current sensor <NUM> may measure the current value flowing between the first loop <NUM> and the second loop <NUM> in real time. The control module <NUM> may receive a current value from the current sensor <NUM> in real time or periodically (for example, every <NUM> seconds, <NUM> seconds, or <NUM> seconds).

The control module <NUM> may determine the operating state of the two loops in the power supply system <NUM> based on the current value between the first loop <NUM> and the second loop <NUM> measured by the current sensor <NUM>, and control the switch <NUM> to be turned off in a case of determining that the current value is greater than the current threshold, so that one circuit in the power supply system <NUM> can continue to work normally. The current threshold may be determined based on a vehicle model. For example, the current threshold may be set to ranging from <NUM>% to <NUM>% of a rated operating current, optionally <NUM>%, <NUM>%, or the like. For example, when the rated operating current is <NUM> amps, the current threshold may be <NUM> amps, <NUM> amps, or the like. For example, the control module <NUM> may send a turn-off signal to the switch <NUM> to turn off the switch <NUM> upon determining that the current value received from the current sensor <NUM> is greater than <NUM> amps. In addition, the control module <NUM> may send a turn-on signal to the switch <NUM> to turn on the switch <NUM> upon determining that the current value received from the current sensor <NUM> is less than <NUM> amps.

According to some embodiments of the present disclosure, referring to <FIG> and <FIG>, the sensor includes a voltage sensor <NUM>, and the voltage sensor <NUM> is coupled in parallel with the switch <NUM>. The control module <NUM> is configured to: receive a voltage value from the voltage sensor <NUM>, and in response to determining that the received voltage value is greater than a voltage threshold, send a turn-off signal to the switch <NUM> to cause the switch <NUM> to be turned off.

The voltage sensor <NUM> is coupled in parallel with the switch <NUM>. Although <FIG> shows that one end of the voltage sensor <NUM> is coupled between the first loop <NUM> and the current sensor <NUM>, those skilled in the art will appreciate that the current sensor <NUM> may alternatively be coupled in series between the current sensor <NUM> and the switch <NUM>. The same goes for the other end of the voltage sensor <NUM>.

The voltage sensor <NUM> measures a voltage value across the switch <NUM> (namely, between the first loop <NUM> and the second loop <NUM>), so as to detect an operating state of the first loop <NUM> and the second loop <NUM>. In an optional case, the voltage sensor <NUM> may measure the voltage value across the switch <NUM> in real time. The control module <NUM> may receive a voltage value from the voltage sensor <NUM> in real time or periodically (for example, every <NUM> seconds, <NUM> seconds, or <NUM> seconds).

The control module <NUM> determines the operating state of the two loops in the power supply system <NUM> based on the voltage value across the first loop <NUM> and the second loop <NUM> measured by the voltage sensor <NUM>, and control the switch <NUM> to be turned off in a case of determining that an absolute value of the voltage value is greater than the voltage threshold (for example, the first loop is operating normally while the second loop is undervoltage, or the second loop is operating normally while the first loop is undervoltage), so that one circuit in the power supply system <NUM> can work normally. The voltage threshold may be determined based on a vehicle model. For example, the voltage threshold may be set to ranging from <NUM>% to <NUM>% of an absolute value of a rated voltage, optionally <NUM>%, <NUM>%, or the like. For example, when the rated current is <NUM> volts, the voltage threshold may be <NUM> volts or the like. For example, the control module <NUM> may send a turn-off signal to the switch <NUM> to turn off the switch <NUM> upon determining that the voltage value received from the voltage sensor <NUM> is greater than <NUM> volts. In addition, the control module <NUM> may send a turn-on signal to the switch <NUM> to turn on the switch <NUM> upon determining that an abstract value of the voltage value received from the voltage sensor <NUM> is less than <NUM> volts.

In some embodiments of the present disclosure, optionally, the switch unit may further includes a timer (not shown), and the timer is coupled to the control module <NUM>. The control module <NUM> may be further configured to start the timer upon determining that the received voltage value is greater than the voltage threshold. When the control module <NUM> determines that the received voltage value is greater than the voltage threshold for a duration that is greater than a duration threshold, a turn-off signal is sent to the switch <NUM> to cause the switch <NUM> to be turned off. When the control module <NUM> determines that the received voltage value is greater than the voltage threshold for a duration that is less than the duration threshold, no processing is performed.

The timer may be started when the voltage value is greater than the voltage threshold to determine the duration for which the voltage value is greater than the voltage threshold. When the duration is greater than the duration threshold, the control module <NUM> may send the turn-off signal to the switch <NUM> to cause the switch <NUM> to be turned off. When the voltage value has recovered to be less than the voltage threshold before the duration threshold expires, no processing is performed. The duration threshold may range from <NUM> seconds to <NUM> seconds, which may be determined based on a vehicle model.

During vehicle operation, a high-power device may be suddenly turned on, which may momentarily pull down the voltage value. When the high-power device starts normally, the voltage recovers. The timer can prevent the switch <NUM> from being turned off due to a sudden change of voltage caused when the high-power device suddenly starts. In this case, turn-off of the switch is not necessary. In addition, turn-off of the switch may also affect normal start-up of the high-power device. The timer can avoid these cases.

According to some embodiments of the present disclosure, optionally, referring to <FIG> and <FIG>, the control module <NUM> may be configured to: after sending the turn-off signal to the switch <NUM>, report to a vehicle controller that the switch is turned off.

After the vehicle controller receives the report that the switch is turned off, if the vehicle is in the automatic driving mode, the vehicle exits the automatic driving mode. When the first loop <NUM> fails, the switch <NUM> is turned off, the second loop <NUM> continues to work normally, and the vehicle can complete an emergency safety operation (such as reducing a driving speed, emergency actuation, or pulling over) with the help of the storage battery <NUM> in the second loop <NUM>. In an optional case, when the first loop <NUM> fails, the switch <NUM> is turned off and the storage battery <NUM> can support the vehicle in completing the emergency safety operation within a period of time (for example, within <NUM> minutes). When the second loop <NUM> fails, the switch <NUM> is turned off, the first loop <NUM> continues to work normally, and the vehicle can continue to drive by means of the power battery and the DC-DC conversion module <NUM>. When the vehicle continues to drive when the switch <NUM> is turned off, the vehicle controller may restrict the vehicle to entering the automatic driving mode, so as to prevent the vehicle from entering the automatic driving mode when the switch <NUM> is turned off, thereby avoiding possible dangers. The vehicle controller may allow the vehicle to enter the automatic driving mode after receiving a report that the switch is turned on.

According to some embodiments of the present disclosure, optionally, referring to <FIG>, the switch unit <NUM> may include a temperature sensor <NUM>, where the temperature sensor <NUM> is coupled in series with the switch <NUM>. The control module <NUM> may be further configured to: receive a temperature value from the temperature sensor <NUM>, and determine that the switch unit <NUM> (for example, the switch <NUM>) is disabled in response to determining that the received temperature value is greater than a temperature threshold.

The temperature sensor <NUM> is coupled in series with the switch <NUM>, and may measure the temperature value of the switch unit <NUM> (or the switch <NUM>) for detecting a state of the switch unit <NUM> (or the switch <NUM>). Although <FIG> shows that the temperature sensor <NUM> is coupled in series between the switch <NUM> and the second loop <NUM>, those skilled in the art will appreciate that the temperature sensor <NUM> may alternatively be coupled in series between the first loop <NUM> and the switch <NUM>. It should be noted that the present disclosure does not limit positions of the switch <NUM>, the current sensor <NUM>, or the temperature sensor <NUM>, and the three devices may be connected in series between the first loop <NUM> and the second loop <NUM> in any order. In an optional case, the temperature sensor <NUM> is disposed next to the switch to accurately detect a temperature of the switch.

The control module <NUM> may receive a temperature value from the temperature sensor <NUM> in real time or periodically (for example, every <NUM> seconds, <NUM> seconds, or <NUM> seconds). The control module <NUM> may determine, based on the temperature of the switch unit (or the switch) measured by the temperature sensor <NUM>, whether the state of the switch is a normal state or a failure state. The temperature threshold may be determined based on a vehicle model. For example, the voltage threshold may be set to ranging from <NUM> to <NUM>, optionally <NUM>, <NUM>, or the like. For example, the control module <NUM> may determine that the switch unit <NUM> (for example, the switch <NUM>) is disabled upon determining that the temperature value received from the temperature sensor <NUM> is greater than <NUM>. In addition, the control module <NUM> may determine that the switch is active upon determining that the temperature value received from the temperature sensor <NUM> is less than <NUM>.

According to some embodiments of the present disclosure, optionally, referring to <FIG>, the control module <NUM> may be configured to: after determining a signal that the switch unit <NUM> (for example, the switch <NUM>) is turned off, report to the vehicle controller that the switch unit <NUM> (for example, the switch <NUM>) is disabled.

After the vehicle controller receives a report that the switch is disabled, if the vehicle is in the automatic driving mode, the vehicle exits the automatic driving mode; if the vehicle is not in the automatic driving mode, the vehicle controller may restrict the vehicle to entering the automatic driving mode, so as to prevent the vehicle from entering the automatic driving mode when the switch is disabled, thereby avoiding possible dangers. The vehicle controller may allow the vehicle to enter the automatic driving mode after receiving a report that the switch is active.

The control module <NUM> may report to the vehicle controller whether the switch is disabled, so that the vehicle controller can perform a corresponding operation based on the report.

Optionally, the control module <NUM> may report a state of the switch and/or a state of the power supply system to the vehicle controller, so that the vehicle controller can perform a corresponding operation based on the report.

According to some embodiments of the present disclosure, the present disclosure provides an electric vehicle, which may include the power supply system in the foregoing embodiments.

According to some embodiments of the present disclosure, optionally, the electric vehicle may include a vehicle controller, and the vehicle controller may be configured to exit an automatic driving mode in response to receiving, from a control module <NUM>, a signal that a switch is turned off or a signal that a switch is disabled, as shown in <FIG>.

After the vehicle controller receives the report that the switch is turned off, if the vehicle is in the automatic driving mode, the vehicle exits the automatic driving mode. When a first loop <NUM> fails, a switch <NUM> is turned off, a second loop <NUM> continues to work normally, and the vehicle can complete an emergency safety operation (such as reducing a driving speed, emergency actuation, or pulling over) with the help of a storage battery <NUM> in the second loop. In an optional case, when the first loop <NUM> fails, the switch <NUM> is turned off and the storage battery <NUM> can support the vehicle in completing the emergency safety operation within a period of time (for example, within <NUM> minutes). When the second loop <NUM> fails, the switch <NUM> is turned off, the first loop <NUM> continues to work normally, and the vehicle can continue to drive by means of the power battery and the DC-DC conversion module <NUM>. When the vehicle continues to drive when the switch <NUM> is turned off, the vehicle controller may restrict the vehicle to entering the automatic driving mode, so as to prevent the vehicle from entering the automatic driving mode when the switch <NUM> is turned off, thereby avoiding possible dangers. The vehicle controller may allow the vehicle to enter the automatic driving mode after receiving a report that the switch is turned on.

The vehicle controller may obtain a switch status signal from the control module <NUM>, and perform a corresponding operation based on the switch status signal to ensure safety of vehicle driving.

According to some embodiments of the present disclosure, referring to <FIG>, the present disclosure provides a power supply system <NUM>. The power supply system <NUM> includes a first loop <NUM>, a second loop <NUM>, and a switch unit <NUM>.

The first loop <NUM> may include a DC-DC conversion module <NUM> and a first load <NUM> that are connected in parallel. A first terminal of each of the DC-DC conversion module <NUM> and the first load <NUM> that are connected in parallel is grounded.

The second loop <NUM> may include a storage battery <NUM> and a second load <NUM> that are connected in parallel. A first terminal of each of the storage battery <NUM> and the second load <NUM> that are connected in parallel is grounded.

The switch unit <NUM> includes a switch <NUM> and a control module <NUM>, where the switch <NUM> is coupled between the first loop <NUM> and the second loop <NUM>. The control module <NUM> is coupled with the switch <NUM> to control turn-on or turn-off of the switch <NUM>. The switch unit <NUM> may further include a current sensor <NUM>, a voltage sensor <NUM>, and/or a temperature sensor <NUM>. The switch unit <NUM> may further include a current sensor <NUM>, a voltage sensor <NUM>, and/or a temperature sensor <NUM>. The current sensor <NUM> and/or the temperature sensor <NUM> may be coupled between the first loop <NUM> and the second loop <NUM> and connected in series with the switch <NUM>. Although <FIG> shows that the current sensor <NUM> is coupled in series between the first loop <NUM> and the switch <NUM>, and the temperature sensor <NUM> is coupled in series between the switch <NUM> and the second loop <NUM>, those skilled in the art will appreciate that the temperature sensor <NUM> may alternatively be coupled in series between the first loop <NUM> and the switch <NUM>, and the current sensor <NUM> may alternatively be coupled in series between the switch <NUM> and the second loop <NUM>. In other words, the present disclosure does not limit positions of the switch <NUM>, the current sensor <NUM>, or the temperature sensor <NUM>, and the three devices may be connected in series between the first loop <NUM> and the second loop <NUM> in any order. Optionally, the temperature sensor <NUM> may be disposed next to the switch. The voltage sensor <NUM> may be coupled across the switch <NUM> in parallel. Alternatively, the voltage sensor <NUM> may be coupled in parallel with the switch, and/or at least one of the current sensor <NUM> and the temperature sensor <NUM>. The control module <NUM> may be coupled with the current sensor <NUM>, the voltage sensor <NUM>, and/or the temperature sensor <NUM> to implement communication of a signal (such as a sensing signal, or a control signal) with these sensors.

In some cases, referring to <FIG>, the control module <NUM> may be configured to: in response to determining that a current value received from the current sensor <NUM> is greater than a current threshold (for example, <NUM> amps), or in response to determining that an abstract value of a voltage value received from the voltage sensor <NUM> is greater than a voltage threshold (for example, <NUM> volts), send a turn-off signal to the switch <NUM> to cause the switch <NUM> to be turned off. In addition, the control module <NUM> may be configured to: in response to determining that the current value received from the current sensor <NUM> is less than the current threshold (for example, <NUM> amps), or in response to determining that the abstract value of the voltage value received from the voltage sensor <NUM> is less than the voltage threshold (for example, <NUM> volts), send a turn-on signal to the switch <NUM> to cause the switch <NUM> to be turned on.

In some cases, referring to <FIG>, for example, the control module <NUM> may be configured to: in response to determining that a temperature value received from the temperature sensor <NUM> is greater than a temperature threshold (for example, <NUM>), determine that the switch unit <NUM> (for example, the switch <NUM>) is disabled. In addition, the control module <NUM> may be configured to: in response to determining that the temperature value received from the temperature sensor <NUM> is less than the temperature threshold (for example, <NUM>), determine that the switch unit <NUM> (for example, the switch <NUM>) is active.

In an optional case, after the switch <NUM> is turned off, the control module <NUM> may send the turn-on signal to the switch <NUM> in a case of detecting that the current value is less than the current threshold, the absolute value of the voltage value is less than the voltage threshold, and the temperature value is less than the temperature threshold, so as to turn on the switch <NUM>.

According to some embodiments of the present disclosure, the present disclosure provides an electric vehicle, which may include the power supply system in the foregoing embodiments. The electric vehicle may optionally include a vehicle controller.

In some cases, referring to <FIG>, after the vehicle controller receives the report that the switch is turned off, if the vehicle is in the automatic driving mode, the vehicle exits the automatic driving mode. When a first loop <NUM> fails, a switch <NUM> is turned off, a second loop <NUM> continues to work normally, and the vehicle can complete an emergency safety operation (such as reducing a driving speed, emergency actuation, or pulling over) with the help of a storage battery <NUM> in the second loop. In an optional case, when the first loop <NUM> fails, the switch <NUM> is turned off and the storage battery <NUM> can support the vehicle in completing the emergency safety operation within a period of time (for example, within <NUM> minutes). When the second loop <NUM> fails, the switch <NUM> is turned off, the first loop <NUM> continues to work normally, and the vehicle can continue to drive by means of a power battery and a DC-DC conversion module. When the vehicle continues to drive when the switch <NUM> is turned off, the vehicle controller may restrict the vehicle to entering the automatic driving mode, so as to prevent the vehicle from entering the automatic driving mode when the switch <NUM> is turned off, thereby avoiding possible dangers. The vehicle controller may allow the vehicle to enter the automatic driving mode after receiving a report that the switch is turned on.

In some cases, after the vehicle controller receives a report that the switch is disabled, if the vehicle is in the automatic driving mode, the vehicle exits the automatic driving mode; if the vehicle is not in the automatic driving mode, the vehicle controller may restrict the vehicle to entering the automatic driving mode, so as to prevent the vehicle from entering the automatic driving mode when the switch is disabled, thereby avoiding possible dangers. The vehicle controller may allow the vehicle to enter the automatic driving mode after receiving a report that the switch is active.

In an optional case, after the switch <NUM> is turned off, the control module <NUM> may allow the vehicle to enter the automatic driving mode after receiving a report that the switch is turned on and receiving the report that the switch is active.

The "range" disclosed in the present disclosure is defined in the form of lower and upper limits, with a given range being defined by selection of a lower limit and an upper limit. The selected lower limit and upper limit define a boundary of a particular range. Ranges defined in this manner may or may not include an end value, and may be arbitrarily combined, that is, any lower limit may be combined with any upper limit to form a range. In the present disclosure, unless otherwise stated, a numerical range "a-b" represents an abbreviated representation of any combination of real numbers between a and b, where both a and b are real numbers.

In the present disclosure, unless otherwise specified, all implementations and preferred implementations in the present disclosure may be combined with each other to form a new technical solution.

Claim 1:
A power supply system, comprising:
a first loop (<NUM>), wherein the first loop (<NUM>) comprises a DC-DC conversion module (<NUM>) and a first load (<NUM>) that are connected in parallel, and each first terminal of the DC-DC conversion module (<NUM>) and the first load (<NUM>) that are connected in parallel is grounded;
a second loop (<NUM>), wherein the second loop (<NUM>) comprises a storage battery (<NUM>) and a second load (<NUM>) that are connected in parallel, and each first terminal of the storage battery (<NUM>) and the second load (<NUM>) that are connected in parallel is grounded; and
a switch unit (<NUM>), wherein the switch unit (<NUM>) comprises a switch (<NUM>), the switch (<NUM>) is coupled in series between a second terminal of each of the DC-DC conversion module (<NUM>) and the first load (<NUM>) and a second terminal of each of the storage battery (<NUM>) and the second load (<NUM>), and the switch (<NUM>) is in an on-state by default;
wherein the switch unit (<NUM>) further comprises a control module (<NUM>) and a sensor, and the control module (<NUM>) is configured to: in respond to receiving a sensing signal from the sensor, send a control signal to the switch (<NUM>); and
wherein the sensor comprises a voltage sensor (<NUM>), and the voltage sensor (<NUM>) is coupled in parallel to the switch (<NUM>); and
the control module (<NUM>) is further configured to: receive a voltage value from the voltage sensor (<NUM>), and characterized in that the control module (<NUM>) is further configured to:
send a turn-off signal to the switch (<NUM>) in response to determining that the received voltage value is greater than a voltage threshold.