Electric vehicle motor torque safety monitor

Patent metadata

Field	Value
Publication number	US-10447195-B2
Application number	US-201313948307-A
Country	US
Kind code	B2
Filing date	Jul 23, 2013
Priority date	Jul 23, 2013
Publication date	Oct 15, 2019
Grant date	Oct 15, 2019

Abstract

A safety system for an electric motor controller is provided. The safety system includes a torque safety monitor having a first processor distinct from a second processor of a main motor controller. The first processor is configured to one of decrease or shut down AC (alternating current) power, sent from a DC/AC (direct current to alternating current) inverter to an electric motor, in response to an estimated torque of the electric motor differing from a commanded torque associated with the main motor controller by more than a set amount.

First claim

What is claimed is:

1. A safety system for an electric motor controller, comprising:
a torque safety monitor having a status and failure processor separate and distinct from a second processor of a main motor controller, the torque safety monitor having one or more monitors associated with subsystems of a vehicle, the subsystems of the vehicle including at least one of a brake pedal assembly or an accelerator pedal assembly, the status and failure processor coupled to the one or more monitors to detect failure in the one or more monitored sub systems;
a hardware protection unit coupled to the torque safety monitor and configured to couple to the main motor controller and a DC/AC (direct current to alternating current) inverter; and
the status and failure processor configured to direct the hardware protection unit to modify switching signals that the hardware protection unit receives from the main motor controller, so as to decrease to nonzero value AC power, sent from the DC/AC inverter to an electric motor, in response to a detected failure in one or more monitored subsystems and an estimated torque of the electric motor differing from a commanded torque associated with the main motor controller by more than a set amount.

2. The safety system of claim 1 , wherein the set amount is one from a set consisting of: a fixed constant, a variable dependent upon motor speed, and a variable dependent upon vehicle speed.

3. The safety system of claim 1 , further comprising:
the hardware protection unit configured to modify the switching signals from the main motor controller, destined for the DC/AC inverter, to modified switching signals representing reduced nonzero AC power, in response to the first processor directing to decrease to nonzero value the AC power sent from the DC/AC inverter to the electric motor.

4. The safety system of claim 1 , further comprising:
the status and failure processor configured to receive a plurality of status parameters and to output system status information and a protection directive, the system status information and the protection directive based upon the plurality of status parameters.

5. The safety system of claim 1 , wherein a predetermined delay is applied to the commanded torque, the predetermined delay compensating for a path delay of the estimated torque.

6. The safety system of claim 1 , wherein the main motor controller and the torque safety monitor are configured to receive a first current measurement of the AC power from a first type of current sensor and the torque safety monitor is configured to receive a second current measurement of the AC power from a second, differing type of current sensor.

7. The safety system of claim 1 , further comprising:
the torque safety monitor configured to monitor at least one from a set consisting of: an accelerator pedal, a brake pedal, a motor speed, and a stator current.

8. The safety system of claim 1 , further comprising:
the status and failure processor further configured to decrease a maximum commanded torque, as an output of the torque safety monitor, in response to the estimated torque of the electric motor differing from the commanded torque associated with the main motor controller by more than the set amount.

9. A safety system for a vehicle, comprising:
a torque safety monitor, distinct from a main motor controller of a vehicle;
a hardware protection unit coupled to the torque safety monitor and configured to couple to the main motor controller and a DC/AC (direct current to alternating current) inverter;
the torque safety monitor including a torque estimator that produces an estimated torque from inputs including a measurement of a stator current of a motor and a rotational speed of the motor, the motor controlled by the main motor controller via the torque safety monitor;
the torque safety monitor including one or more monitors associated with subsystems of the vehicle, the subsystems of the vehicle including at least one of a brake pedal assembly or an accelerator pedal assembly;
the torque safety monitor including a torque monitor that performs a comparison of the estimated torque and a commanded torque, the commanded torque an input to the main motor controller; and
the torque safety monitor including a status and failure processor operable to output a protection directive based on a detected failure in one or more monitored subsystems and the comparison of the estimated torque and the commanded torque, the protection directive directing the hardware protection unit to modify switching signals from the main motor controller to decrease, to a nonzero level, AC (alternating current) power delivered to the motor.

10. The safety system of claim 9 , further comprising:
the hardware protection unit having as inputs the switching signals from the main motor controller and having as outputs modified switching signals to the DC/AC inverter, the modified switching signals produced in accordance with the protection directive.

11. The safety system of claim 9 , further comprising:
the hardware protection unit having a switching protection gate and a fault status processor;
the switching protection gate receiving the protection directive from the torque safety monitor and receiving a fault parameter from a DC/AC (direct current to alternating current) inverter;
the switching protection gate receiving the switching signals from the main motor controller and outputting modified switching signals to the DC/AC inverter;
the switching protection gate setting the modified switching signals equal to the switching signals in response to the fault parameter indicating no fault in the DC/AC inverter and the protection directive indicating agreement between the estimated torque and the commanded torque; and
the switching protection gate setting the modified switching signals to reduced but nonzero power levels of the DC/AC inverter in response to the fault parameter indicating a fault in the DC/AC inverter or the protection directive indicating disagreement between the estimated torque and the commanded torque.

12. The safety system of claim 9 , further comprising:
the torque safety monitor including a first monitor configured to receive a first sensor value from an accelerator pedal assembly and to detect a ground or power supply fault of the accelerator pedal assembly; and
the torque safety monitor including a second monitor configured to receive a second sensor value from a brake pedal assembly and to detect a ground or power supply fault of the brake pedal assembly.

13. The safety system of claim 9 , further comprising:
the torque safety monitor including a third monitor configured to receive a vehicle speed value from a vehicle speed sensor and the rotational speed of the motor from a motor speed sensor and to detect a discrepancy therebetween exceeding a predetermined tolerance.

14. The safety system of claim 9 , further comprising:
the torque safety monitor including a fourth monitor configured to receive a measurement of a stator current from a first current sensor and a measurement of the stator current from a second current sensor, the first current sensor and the second current sensor having differing types.

15. The safety system of claim 9 , further comprising:
the torque safety monitor including a plurality of monitors coupled to the status and failure processor;
each monitor of the plurality of monitors receiving a sensed value relating to the motor or the vehicle and communicating a status to the status and failure processor; and
the status and failure processor further operable to output an aggregated stat

Assignees

• Atieva Inc

Inventors

• Tang Yifan

Classifications

• B60W2050/0295

  Inhibiting action of specific actuators or systems · CPC title

• B60L3/12

  Recording operating variables {; Monitoring of operating variables} · CPC title

• H02P29/032

  Preventing damage to the motor, e.g. setting individual current limits for different drive conditions · CPC title

• B60L2240/423

  Torque · CPC title

• H02P29/027 Primary

  the fault being an over-current · CPC title