DE102015200124A1 - Method for supplying at least one consumer - Google Patents

Abstract

A method is presented for supplying at least one consumer (100) in a vehicle electrical system and such a vehicle electrical system. It is provided to supply the consumer (100) from several subnetworks of the electrical system.

Description

The invention relates to a method for supplying at least one redundant load in a vehicle electrical system, in particular a vehicle electrical system in a motor vehicle, and such a vehicle electrical system.

State of the art

Under an electrical system is to be understood in the automotive use, the totality of all electrical components in a motor vehicle. Thus, this includes both electrical consumers and supply sources, such as batteries. In the motor vehicle care must be taken to ensure that electrical energy is available in such a way that the motor vehicle can be started at any time and that sufficient power is available during operation. But even when parked, electrical consumers should still be operable for a reasonable period of time, without a subsequent start being impaired.

It should be noted that due to the increasing electrification of units and the introduction of new driving functions, the requirement for the reliability of the electrical energy supply in the motor vehicle steadily increases. Furthermore, it must be taken into account that, in the future, highly non-driving activities should be permitted to a limited extent in the case of highly automated driving. A sensory, regulatory, mechanical and energetic fallback by the driver in this case is limited.

Under a highly automatic driving, which is also referred to as highly automated driving, an intermediate step between an assisted driving in which the driver is assisted by assistance systems, and an autonomous driving in which the vehicle drives automatically and without the driver's intervention, to understand. In this, the vehicle has its own intelligence, which could plan ahead and take over the driving task, at least in most driving situations. Therefore, in a highly automatic driving the electrical supply has not previously known in the motor vehicle safety relevance.

Today's conventional 14 V electrical system with only one generator and only one battery can no longer meet the increased demands on the reliability of the electrical supply sufficiently. As an example, mention is made of sailing with the internal combustion engine switched off. During the sailing phase, the generator is no longer available as an energy generator. The failure of the battery in the sailing phase therefore leads to failure of the entire electrical supply in the vehicle. For this reason, 14 V electrical systems with two batteries, so-called 2-battery systems, are currently being discussed by car manufacturers and suppliers of sails.

On-board network topologies for increased reliability based on a 14 V on-board network are known, in which scalable and modular on-board network topologies for supplying safety-relevant electrical consumers are realized. In these consumers are divided into consumer groups with different security relevance, in principle, a two-channel electrical supply for redundant, security-relevant consumers and a fault-tolerant supply for simply existing security-relevant consumers are provided.

In addition to the further development of the 14 V electrical system, car manufacturers are planning to introduce the 48 V / 14 V vehicle electrical system. This 48 V / 14 V electrical system is used in addition to the supply of high-power consumers as entry-level hybridization.

In the publication DE 198 55 245 B4 is described a redundant power supply for electrical loads in a vehicle electrical system. In this case, existing consumers are supplied redundantly from two sub-board networks with different voltage, including a supply of two separate voltage branches is provided.

From the publication DE 10 2006 010 713 B4 is a wiring system for a vehicle with at least one safety-relevant consumer known. In this case, a simply existing security-relevant consumer is supplied redundantly from two subnetworks, a primary network and a secondary network.

Disclosure of the invention

Against this background, a method with the features of claim 1 and an electrical system according to claim 5 are presented. Embodiments result from the dependent claims and the description.

The proposed method allows one or more voltage levels, such as 12 V or 48 V. In this case, multiple, galvanically isolated masses for the individual subnetworks are provided, even if they have the same voltage level or even if the voltage levels are different. Furthermore, a galvanically isolated coupling between the subnets may be provided.

The presented method and the electrical system described have, at least in some of the embodiments, a number of advantages. Thus, safety-relevant subnetworks can be executed independently of each other. Continue to influence electrical faults in a subnet not another security related subnet. Thus, for example, vehicles with automatic driving functions can also reach the safe state in the event of a vehicle electrical system fault by maintaining the electrical supply for the necessary components that are required for this purpose. Furthermore, with the presented on-board electrical system consumers, the more voltage levels, z. B. 14 V and 48 V and internally galvanically isolated, are supplied.

Further advantages and embodiments of the invention will become apparent from the description and the accompanying drawings.

It is understood that the features mentioned above and those yet to be explained below can be used not only in the particular combination indicated, but also in other combinations or in isolation, without departing from the scope of the present invention.

Brief description of the drawings

1 shows an embodiment of a vehicle electrical system according to the prior art.

2 shows a further embodiment of the electrical system according to the prior art.

3 shows a schematic representation of a consumer that is internally redundant and requires a redundant electrical supply.

4 shows an embodiment of an arrangement for supplying a consumer with separate ground lines, namely the supply of a consumer of two subnets and connection to two galvanically isolated ground lines.

5 shows an embodiment of an arrangement for supplying multiple consumers with separate ground lines, namely the supply of multiple loads from three subnets and connection to three galvanically isolated ground lines.

6 shows a further embodiment of an arrangement for supplying multiple consumers with separate ground lines, namely the supply of multiple loads from three sub-networks and connection to two galvanically isolated ground lines.

7 shows an embodiment of an arrangement for supplying a consumer with separate ground lines, namely the supply of a consumer of two subnets, each with a source and connection to two galvanically isolated ground lines.

Embodiments of the invention

The invention is schematically illustrated by means of embodiments in the drawings and will be described in detail below with reference to the drawings.

1 shows a first stage of development for the reliable supply of electrical consumers. The illustration shows a wiring system 10 with a baseboard network 12 , a first subnet 14 and a second subnet 16 , The base board network 12 includes a starter S 20 , a generator G 22 , a battery B _B 24 and a consumer group R ₃ 26 with non-safety consumers.

In the first subnet 14 are a first switch S _F1 30 , a second switch S _F2 32 , a third switch S _F3 34 , a consumer R ₂ 36 , a battery B _1a 38 and a consumer R _1a 40 intended. In the second subnet 16 is a consumer R _1b 44 intended.

• 1. Redundante Verbraucher, die zweifach vorhanden sind und die gleiche Funktion übernehmen können, bspw. zwei verschiedene Bremsaktuatoren. Diese redundanten Verbraucher sind mit R_1a 40 und R_1b 44 bezeichnet. Sie werden über die beiden getrennten Bordnetzkanäle versorgt, entweder über die Batterie B_B 24 des Basisbordnetzes, den Generator G 22 des Basisbordnetzes 12 oder die Batterie B_1a 38 des ersten Teilnetzes 14. Alternativ können die Verbraucher R_1a 40 und R_1b 44 auch in einem Bauteil bzw. einem Gehäuse zusammengefasst werden. Dieser Aufbau ist in 3 zu sehen.
• 2. Weiterhin gibt es Verbraucher, die nur einfach vorhanden sind, aber zuverlässig, d. h. fehlertolerant, mit elektrischer Energie versorgt werden müssen. In 1 ist ein solcher Verbraucher mit R₂ 36 gekennzeichnet. Diese Verbraucher können ebenfalls entweder aus dem Basisbordnetz 12 oder aus der Batterie B_1a 38 des ersten Teilnetzes 14 versorgt werden. Die Umschaltung zwischen den Bordnetzkanälen erfolgt mit Hilfe der beiden Schalter S_F2 32 und S_F3 34.

In the electrical system 10 Different types of safety-relevant consumers are provided. These are divided into two categories:

• 1. Redundant consumers who are two-fold and can take over the same function, for example, two different brake actuators. These redundant consumers are _labeled R _1a 40 and R _1b 44 designated. They are supplied via the two separate vehicle power supply channels, either via the battery B _B 24 of the base network, the generator G 22 of the base board network 12 or the battery B _1a 38 of the first subnetwork 14 , Alternatively, consumers R _1a 40 and R _1b 44 be summarized in a component or a housing. This construction is in 3 to see.
• 2. Furthermore, there are consumers who are simply present, but reliable, ie fault-tolerant, must be supplied with electrical energy. In 1 is such a consumer with R ₂ 36 characterized. These consumers can also either from the base board network 12 or from the battery B _1a 38 of the first subnetwork 14 be supplied. Switching between the on-board network channels takes place with the aid of the two switches S _F2 32 and S _F3 34 ,

In normal operation, the switches S _F1 30 and S _F3 34 closed and the switch S _F2 32 it is open. Consumers R _1a 40 , R _1b 44 , R ₂ 36 and R ₃ 26 be via the base board network 12 supplied and the battery B _1a 38 Loading. In case of error, for example, if the voltage in the base board network 12 collapses, the switches S _F1 30 and S _F3 34 opened and S _F2 32 closed and the redundant or fault-tolerant to be supplied consumers R _1a 40 and R ₂ 36 from the battery B _1a 38 provided.

2 shows an embodiment of a fault-tolerant 48 V / 14 V electrical system, the whole with the reference numeral 50 is designated. The illustration shows a base vehicle network 52 , a vehicle electrical system duct a 54 and an electrical system duct b 56 , By a DC-DC converter 66 in the base board network 52 are a first 14 V subnet 57 and a second 48V subnet 59 given.

The base board network 52 includes an electric machine 60 , a battery B ₁ 62 , a consumer R ₁ 64 , a DC-DC converter 66 , a battery B ₂ 68 and a consumer R ₂ 70 , The vehicle electrical system duct a 54 comprises a coupling member K _3a 80 , a battery B _3a 82 and a consumer R _3a 84 , The vehicle electrical system duct b 56 has a coupling member K _3b 90 , a battery B _3b 92 and a consumer R _3b 94 on. The coupling links K _3a 80 and K _3b 90 set the connection of the vehicle electrical system channels a and b to the subnetworks 57 and 59 with the voltages 48 V and 14 V, respectively.

The two electrical systems a 54 and b 56 for safety-relevant, redundant consumers are each to both the 14 V subnet 57 as well as the 48 V subnet 59 coupled. This ensures a diversified energy supply for these channels in terms of safety technology. In the event of failure of a subnetwork, ie the 48 V or 14 V subnetwork, at least one vehicle electrical system channel, a or b, will continue to be supplied with energy by the still functioning subnetwork. The power electronic coupling elements K _3a 80 and K _3b 90 can be realized for example as a DC-DC converter or switch.

Occurs, for example, a fault in a subnet, z. B. an overvoltage, the associated vehicle electrical system channel a 54 or b 56 by means of the coupling member K _3a 80 or K _3b 90 separated from the respective subnet.

So far, the focus in the development of on-board networks has been to design the supply line redundantly in order to realize two independent supplies. Background is the requirement of ISO 26262 after sufficiently independent architectural elements.

It should be noted, however, that a circuit is only closed when the charge carriers can flow back to the power source. Therefore, in addition to the positive line and the ground line must be sufficiently independent. This has not been considered so far.

The method described herein and the illustrated on-board network are therefore designed to make the ground lines of the safety-relevant subnets accordingly independent.

Here, however, the problem arises that in today's vehicles, in which the body consists mainly of metal, this is basically used as a ground conductor. This means that all electrical consumers only need to be connected to the electrical system with the positive line. The ground line back to the generator or to the battery is saved by just laying a short ground line to the nearest body shop.

This is also possible with 2-voltage on-board networks. In these, a common mass is defined, which is connected via spatially separated ground bolt connections. In this common ground between the subnets, errors can propagate from one subnetwork to another. In addition, failures of components in case of faults may be too late or not at all, or short circuits may occur directly between supply and ground. Only in high-voltage on-board networks in the vehicle already exist 2-board electrical system, ie the high-voltage electrical system is galvanically isolated from the low-voltage network, as occur in the high-voltage electrical system voltages> 60 DC or AC voltages> U _eff > 30 volts.

The presented invention now shows how the ground line of the individual subnetworks, which are low-voltage networks, can be implemented sufficiently independently so as not to allow errors such as ground offset or short circuits to ground to be transferred from one safety-relevant subnetwork to the other. For this purpose, an approach for a vehicle electrical system with one or more than one voltage level, z. B. 12 V + 48 V, presented.

There are several existing, galvanically isolated masses for the individual subnets introduced, even if they have the same voltage level or the voltage levels are different. Furthermore, a galvanically isolated coupling between the subnets may be provided.

With the presented electrical system consumers who have multiple voltage levels, z. B. 14 V and 48 V and internally galvanically isolated, are supplied.

An example of a safety-related redundant consumer is simplified in 3 to see which one with the reference number 100 is designated. In this all elements including energy supply and communication are doubled. This means that if one channel fails, the other channel alone can ensure safe operation.

The illustration shows a first signal electronics 102 , a second signal electronics 104 , a first main controller 106 , a second main controller 108 , a first power amplifier 110 , a second amplifier 112 , a first engine 114 and a second engine 116 , Furthermore, with double arrows, a first communication 118 , a second communication 120 as well as an internal communication 122 clarified. Arrows show a first connection 124 to a first electrical system path and a second connection 126 to a second electrical system path. The illustration shows components of a control unit 130 and an engine 132 marked with borders.

The in 3 shown consumer 100 is, for example, designed as a steering system or brake system, ie the engine 132 controls a safety-relevant system. In this redundant consumer 100 are both the signal electronics 102 respectively. 104 , the main controller 106 respectively. 108 , the power amplifiers or output stages 110 respectively. 112 and the engine 132 duplicated. Also the connections 124 respectively. 126 to the on-board network paths and the communication 118 respectively. 120 are provided twice. Thus, in case of failure of a component or a vehicle electrical system or channel in one half, the other half redundant assume the function.

The consumer 100 consists internally of two components or parts, a part shown here above 140 and a part shown below 142 Everyone can ensure at least one fallback level of function (first motor 114 and second engine 116 ). Every part 140 or 142 contains the logic (signal electronics 102 respectively. 104 , Main controller 106 respectively. 108 ), the power (power amp 110 respectively. 112 ) and an actuator (motor 114 respectively. 116 ). Every part 140 or 142 has its own supply (vehicle electrical system 1 and on-board network 2). Both supplies can have different voltage levels and are internally galvanically isolated. Each part is connected to a network (first communication 118 and second communication 120 ). The internal communication 122 between the two parts 140 and 142 is galvanically isolated. It should be noted that existing fuses are not shown.

4 shows a first embodiment of the electrical system, the whole with the reference numeral 200 is designated with two safety-related subnets, namely subnetwork A 202 and subnet C 204 ,

The illustration shows an energy source Q ₁ 202 , For example, a generator in a vehicle with an internal combustion engine, both subnetworks 202 . 204 provided. The left subnet A 202 further comprises an electrical memory S _a 208 and consumer V _1a 210 and V _x 212 , The elements of subnet A 202 are via a positive line A shown above 214 and mass M _a 216 connected.

Subnet C 204 includes an electrical memory S _c 220 and consumers V _1c 222 and V _Z 224 , The consumers are made of a coupling element K _ac 226 via a positive line C 228 supplied and are over a common mass M _c 230 connected.

V _1a 210 and V _1c 222 are different consumers who can ensure the same function redundantly. This is typically used for safety-critical functions, e.g. B. braking during automatic driving or brake booster.

It is still a consumer V _2ac 240 provided by two different supplies, namely positive line A 214 and plus line C 228 and the two corresponding masses M _a 216 and M _c 230 is supplied. Both supplies are within the consumer V _2ac 240 galvanically isolated, as in 3 is clarified. Each galvanic isolated part inside the consumer V _2ac 240 allows redundancy of the same function. It is typically used for critical functions, e.g. B. for a steering or steering assistance.

Both subnets 202 and 204 are via the coupling element K _ac 226 coupled. The coupling element K _ac 226 is a galvanic isolated coupling element, eg. B. a DC-DC converter.

The electrical storage S _a 208 and S _c 220 are two separate energy storage, such as a battery or a DLC memory. The voltage level of the two energy storage can be different, z. B. 48 V and 14 V, or the same. The electrical storage S _a 208 and S _c 220 can alternatively be used as high-voltage storage, z. B. with 310 V or 400 V, be formed.

With the topology of the illustrated wiring system 200 can the two subnets A 202 and C 204 be designed completely independently of each other. This will be explained by the following examples.

Example 1:

The energy source Q ₁ 206 causes a short circuit between the positive line A 214 and the mass M _a 216 , In this case, the voltage in subnet A breaks 202 together and the function of consumers V _1a 210 and V _X 212 was cancelled. Since the Consumer V _1a 210 a safety-relevant function, such as the construction of the brake pressure has taken over, this must be from the redundant component, the consumer V _1c 222 to be executed. In this case, the coupling element K _ac 226 switched inactive. Subnet C 204 which is still intact can thus be independent of the error in subnet A 202 continue working and the electric storage S _c 220 can consumers V _1c 222 and V _Z 224 provide at least temporary.

The consumer V _2ac 240 can be operated in the fallback, since he still has the positive line C 228 is supplied with electrical energy. It is important that the safety-relevant function, such. As the structure of the brake pressure, despite the short circuit in the power source Q _first 206 can be carried out safely.

Example 2:

There is an electrical fault in the consumer V _Z 224 , resulting in a mass displacement of the mass M _c 230 leads. This is done by the coupling element K _ac 226 detected and this is deactivated. As a result, the error does not affect subnet A 202 , The safety-relevant consumers V _1a 210 and V _2ac 240 can continue to be supplied reliably.

5 shows an alternative embodiment of the electrical system, in total with the reference numeral 300 is designated. This electrical system 300 includes a subnet A 302 , a subnet B 304 and a subnet C 306 ,

Subnet B 304 includes an electrical memory S _b 310 and consumer V _1b 312 and V _Y 314 , The elements of subnet B 304 are over a positive line B 316 and mass M _b 318 connected. The subnet A 302 includes an electrical memory S _b 320 and consumer V _1a 322 and V _X 324 , The elements of subnet A 302 are via a positive line A 326 and mass M _a 328 connected. Subnet C 306 includes an electrical memory S _c 330 and consumer V _1c 332 and V _Z 334 , The elements of subnet C 306 are over a positive line C 336 and mass M _c 338 connected. The illustration also shows a coupling element K _ac 350 , a coupling element K _from 352 and consumers V2ac 354 , V3bc 356 and V4ab 358 and a power source Q1 360 ,

The consumer V _1b 312 is a redundancy to the consumer V _1a 322 and / or the consumer V _1c 332 to ensure a function, such as a braking or Bremskraftverstärkung. The consumer V _3bc 356 or V _4ab 358 is like V _2ac 354 a consumer who has two different supplies, namely the positive leads B 316 and C 336 or the plus lines A 326 and B 316 , and the two corresponding masses, namely M _b 318 and M _c 338 or M _a 328 and M _b 318 is supplied. Both supplies are galvanically isolated within the consumer. It is on this 3 directed. Each galvanically isolated part within the consumer ensures the redundancy of the same function. This is typically used for critical functions.

Subnet B 304 is with subnet A 302 via the coupling element K _from 352 coupled. The coupling element K _from 352 is the same as the coupling element K _ac 350 a galvanic isolated coupling element, for example. A DC-DC converter.

The electric storage S _b 310 is, analogous to S _a and S _c in 4 , an energy storage, z. As a battery or a DLC memory. The voltage level of this energy storage may continue to be different, for. B. 48 V and 14 V. Since all subnets are galvanically isolated from each other, one or more memory as a high-voltage memory, z. B. with 310 V or 400 V, be formed.

With the topology shown, subnets A 302 , B 304 and C 306 be designed completely independently of each other. Alternatively, a 3-voltage electrical system is possible, for. HV / 48V / 14V, 48V / 14V / 14V or 48V / 48V / 14V.

Regardless, consumers with two supplies, ie V _3bc 356 , V _4ab 358 and V _2ae 354 use different or equal voltage levels or voltage levels as supplies.

The operation is according to Examples 1 and 2 of 4 , In addition to the statements made above, the subnetwork B can continue to function in the event of a fault and the consumers V _1b 312 , V _Y 314 , V _3bc 356 and V _4ab 358 continue to provide at least temporary.

In 6 shows a further alternative embodiment of the electrical system 400 , This electrical system 400 includes a subnet A 402 , a subnet B 404 and a subnet C 406 ,

Subnet B 404 includes an electrical memory S _b 410 and consumer V _1b 412 and V _Y 414 , The elements of subnet B 404 are over a positive line B 416 and mass M _b 418 connected. The subnet A 402 includes an electrical memory S _b 420 and consumer V _1a 422 and V _X 424 , The elements of subnet A 402 are via a positive line A 426 and mass M _a 428 connected. Subnet C 406 includes an electrical memory S _c 430 and consumer V _1c 432 and V _Z 434 , The elements of subnet C 406 are about one Plus line C 436 and mass M _c 438 connected. The illustration also shows a coupling element Kac 450 , a coupling element 452 and consumers V2ac 454 , V3bc 456 and V4ab 458 and a power source Q ₁ 460 ,

The coupling element K _from 452 is in this case a coupling element that is not galvanically isolated. This is, for example, as a DC-DC converter, z. B. as a buck / boost converter, as a simple switch of the supply line or as a double switch of ground and supply line or as a combination of the said possibilities.

If the two masses M _a 428 and M _b 418 are always coupled, ie there is no switch in the ground line, the body can be used for both masses. Alternatively, the mass M _b 418 through separate lines with the mass M _a 428 get connected.

It should be noted that with this topology the subnetwork C 406 completely independent of subnets A 402 and B 404 can be designed. Thus, this represents a compromise between the topologies of 4 and 5 In addition, a 3-voltage electrical system in the full system is possible, for. HV / 48V / 14V (HV: high voltage, typically ~ 300V or ~ 400V for subnet C only), 48V / 14V / 14V or 48V / 48V / 14V. However, it may fail after a mistake It may be that only one subnetwork is available.

• 1. Das Koppelelement K_ab 452 erkennt ausreichend früh den Fehler und entkoppelt die beiden Teilnetze A 402 und B 404 so schnell, dass sich der Fehler nicht in das Teilnetz B 404 ausgebreitet. In diesem Fall kann das Teilnetz B 404 zumindest zeitbegrenzt weiterhin die Verbraucher V_1b 412, V_Y 414, V_3bc 456 und V_4ab 458 versorgen.
• 2. Das Koppelelement K_ab 452 erkennt nicht oder nicht ausreichend schnell den Fehler bzw. das Koppelelement K_ab 452 entkoppelt nicht ausreichend schnell die beiden Teilnetze A 402 und B 404, oder das Koppelement K_ab 452 kann nicht die Teilnetze A 402 und B 404 entkoppeln, da z. B. kein Schalter auf der Masseleitung ist. In diesem Fall bleibt nur das Teilnetz C 406 zur Verfügung und es können nur die Verbraucher V_1c 432, V_Z 434 V_2ac 454 und V_3bc 456 weiterversorgt werden.

In the previously discussed example 1, where the generator causes a short between positive line A and ground M _a , two alternative scenarios are possible:

• 1. The coupling element K _from 452 detects the error sufficiently early and decouples the two subnets A 402 and B 404 so fast that the bug does not break into subnet B 404 spread. In this case, the subnet B can 404 at least for a limited time consumers continue to use V _1b 412 , V _Y 414 , V _3bc 456 and V _4ab 458 supply.
• 2. The coupling element K _from 452 does not recognize or not sufficiently fast the error or the coupling element K _from 452 does not decouple the two subnets A fast enough 402 and B 404 , or the coupling element K _from 452 can not be the subnets A 402 and B 404 decouple because z. B. is no switch on the ground line. In this case, only the subnet C remains 406 available and it can only consumers V _1c 432 , V _Z 434 V _2ac 454 and V _3bc 456 be further supplied.

7 shows a further embodiment of the presented electrical system, the whole with the reference numeral 500 is designated. The illustration shows a subnetwork A 502 and a subnet C 504 ,

The subnet A 502 includes a power source Q ₁ 510 , an electric storage S _a 512 and consumer V _1a 514 and V _x 516 , Furthermore, a positive line A 518 and mass M _a 520 intended. Subnet B 504 includes a power source Q ₂ 530 , an electrical storage S _c 532 and consumer V _1c 534 and V _Z 536 , Furthermore, a positive line C 538 and mass M _c 540 intended. Furthermore, the illustration shows a coupling element K _ac 550 and a consumer V _2ac 552

The energy sources Q ₁ 510 and Q ₂ 530 each independently supply a subnet, the power source Q ₂ 530 the subnet C 504 supplied and the power source Q ₁ 510 the subnet A 502 provided.

The energy sources Q ₁ 510 and Q ₂ 530 can each be used as a generator, eg. B. in a vehicle with an internal combustion engine, an electric motor or actuators for recuperation, z. As roll stabilization with energy recovery, or as a HV-12 V converter, z. B. in an electric vehicle, be formed.

The coupling element K _ac 550 is, as in the embodiments described above, a galvanic isolated coupling element, for. B. a DC-DC converter. In this case, the coupling element K _ac 550 the energy transfer between subnets A 502 and C 504 , There is also another similar topology conceivable in which this coupling is omitted, since each subnet has its own energy storage.

The consumer V _2ac 552 is, as already explained above, a consumer, with two different supplies, namely the positive line A 518 and the plus line C 538 , and the two corresponding masses, namely M _a 520 and M _c 540 , is supplied.

Consumers V _1a 514 and V _1c 534 are different consumers who can ensure the same function redundantly. Such a construction is typically used for safety critical functions, e.g. B. for braking or brake booster.

Without coupling element, such. B. the coupling element K _ac 550 , and without consumers with redundant supplies, such as the consumer V _2ac 552 , creates a topology with two subnets without energetic connection. The redundancy of the functions can continue through the consumer V _1a 514 and V _1c 534 be ensured.

With this topology, the subnets A 502 and C 504 be designed completely independently of each other. A 2-voltage electrical system is also possible. Because each subnet has its own source consumers can be supplied after a mistake longer.

Furthermore, combinations of the aforementioned topology are also conceivable, for example by supplementing the 4 . 5 . 6 and 7 with additional coupling elements, sources, energy storage, etc. that could be connected in parallel or in series with the mapped subnetworks. Multiple subnets, ground lines, voltage levels and consumers with multiple supplies are therefore possible.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 19855245 B4 [0008]
• DE 102006010713 B4 [0009]

Cited non-patent literature

• ISO 26262 [0031]

Claims (8)

Method for supplying at least one safety-relevant consumer ( 100 . 210 . 212 . 222 . 224 . 240 . 312 . 314 . 322 . 324 . 332 . 334 . 412 . 414 . 422 . 424 . 432 . 434 . 454 . 456 . 458 . 514 . 516 . 534 . 536 . 552 ), in a vehicle electrical system ( 200 . 300 . 400 . 500 ), wherein the electrical system ( 200 . 300 . 400 . 500 ) several subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ), which are galvanically separated from each other, the subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) with separate masses ( 216 . 230 . 318 . 328 . 338 . 418 . 428 . 438 . 520 . 540 ), at least one of the at least one safety-relevant consumer ( 100 . 210 . 212 . 222 . 224 . 240 . 312 . 314 . 322 . 324 . 332 . 334 . 412 . 414 . 422 . 424 . 432 . 434 . 454 . 456 . 458 . 514 . 516 . 534 . 536 . 552 ) from several of the subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) is supplied. Method according to Claim 1, in which, if an error occurs in one of the subnetworks ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) of at least one of the further subnetworks ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) is decoupled. Method according to Claim 1 or 2, in which the redundant consumer ( 100 . 210 . 212 . 222 . 224 . 240 . 312 . 314 . 322 . 324 . 332 . 334 . 412 . 414 . 422 . 424 . 432 . 434 . 454 . 456 . 458 . 514 . 516 . 534 . 536 . 552 ) at least two redundant components ( 140 . 142 ), the different subnetworks ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ), whereby in case of failure of one of the subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) the component ( 140 . 142 ), which is an intact subnetwork ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) assigned. Method according to one of claims 1 to 3, in an electrical system ( 200 . 300 . 400 . 500 ) of a motor vehicle. On-board network, which has several subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ), which are galvanically separated from each other, comprising, wherein in the electrical system ( 200 . 300 . 400 . 500 ) at least one safety-relevant consumer ( 100 . 210 . 212 . 222 . 224 . 240 . 312 . 314 . 322 . 324 . 332 . 334 . 412 . 414 . 422 . 424 . 432 . 434 . 454 . 456 . 458 . 514 . 516 . 534 . 536 . 552 ), the subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) with separate masses ( 216 . 230 . 318 . 328 . 338 . 418 . 428 . 438 . 520 . 540 ), whereby the electrical system ( 200 . 300 . 400 . 500 ) is arranged to at least one of the at least one security-relevant consumer ( 100 . 210 . 212 . 222 . 224 . 240 . 312 . 314 . 322 . 324 . 332 . 334 . 412 . 414 . 422 . 424 . 432 . 434 . 454 . 456 . 458 . 514 . 516 . 534 . 536 . 552 ) from several of the subnets ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) to supply. Vehicle electrical system according to Claim 5, in which at least two of the subnetworks ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) have different voltage levels. Vehicle electrical system according to Claim 5 or 6, in which at least two of the subnetworks ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) a galvanically isolated coupling is provided. On-board network according to one of Claims 5 to 7, in which the safety-relevant consumer ( 100 . 210 . 212 . 222 . 224 . 240 . 312 . 314 . 322 . 324 . 332 . 334 . 412 . 414 . 422 . 424 . 432 . 434 . 454 . 456 . 458 . 514 . 516 . 534 . 536 . 552 ) at least two redundant components ( 140 . 142 ), the different subnetworks ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) are assigned, whereby in case of failure of one of the subnet ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) the component ( 140 . 142 ), which is an intact subnetwork ( 202 . 204 . 302 . 304 . 306 . 402 . 404 . 406 . 502 . 504 ) assigned.

Images