Fault tolerant modular power supply system

• US 4,877,972 A
• Filed: 06/21/1988
• Issued: 10/31/1989
• Est. Priority Date: 06/21/1988
• Status: Expired due to Fees

• Current Assignee: Breed Automotive Technology, Inc. (Ningbo Junsheng Investment Group Co., Ltd.)
• Original Assignee: The Boeing Co.
• Inventors: Sobhani, Seyd M., Smith, Raldon M.
• Primary Examiner(s): Shoop, Jr., William M.
• Assistant Examiner(s): IP, SHIK LUEN PAUL
• Application Number:
  US07/209,506
• Time in Patent Office: 497 Days
• Field of Search: 307/34"41, 307/64, 307/66, 307/82, 307/83, 307/84, 307/85, 307/86, 307/87, 363/49, 363/47, 361/90, 361/91, 361/92, 361/93, 361/89, 364/200, 364/492, 323/906, 323/23, 323/19, 323/272
• US Class Current: 307/43
• CPC Class Codes: G05F 1/59 including plural semiconductor devices as final control devices for a single load
• CPC Class Codes: H02J 1/10 Parallel operation of dc sources
• CPC Class Codes: H02J 1/102 being switching converters H02J1/108, H02J1/12 take precedence
• CPC Class Codes: H02J 9/00 Circuit arrangements for emergency or stand-by power supply, e.g. for emergency lighting
• CPC Class Codes: Y10S 323/906 Solar cell systems

Abstract

A modular power supply system in which a plurality of power supply modules connected in parallel to a load contribute equal currents, even if one or more of the power supply modules fails. A first order fault tolerant modular power supply system includes three power supply modules (38, 40 and 42) connected in parallel to a load (32). The output current from each of the power supply modules is separately compared to the output current from one of the other power supply modules in a loop arrangement, using three control circuits (64, 66 and 68). A signal indicative of the current contributed by each pair of the power supply modules is input to the control circuit, producing a differential output signal used as a reference to control the output current from each of the power supply modules. Failure of any one of the modules does not affect the ability of the system to continue to supply substantially equal currents from the remaining two operating modules, so long as the total rated capacity of the power supply modules continuing to operate is not exceeded. Second and third order fault tolerant modular power supply systems (400 and 500) are also disclosed.

Claims

1. A fault tolerant modular power system comprising:

(a) a plurality of power supplies, each having an output connected in parallel to supply current to a load, and each having the same nominal output voltage;

(b) current monitoring means associated with each of the power supplies, for monitoring a condition indicative of the magnitude of the current output by each, and operative to produce a signal corresponding to the magnitude of said current; and

(c) comparator means, connected to the current monitoring means and responsive to the signals said current monitoring means produce, for determining the difference between the current supplied by each power supply and at least one other power supply in the system that serves as a first order reference power supply, each power supply having a different first order reference power supply thereby producing a plurality of differential signals corresponding to said differences, each differential signal serving as a reference signal to control the output current of one of the power supplies causing the power supplies to have substantially equal output voltages and equal output currents.

2. The fault tolerant modular power system of claim 1, wherein the comparator means comprise a plurality of differential amplifiers interconnected in a loop, each differential amplifier being associated with one of the power supplies and connected to receive the signals produced by the current monitoring means associated with said one power supply and with at least one other power supply, producing the differential signals as a function of the difference between the signals.

3. The fault tolerant modular power system of claim 2, wherein each differential amplifier compares the signals produced by current monitoring means associated with successive power supplies in the loop, and wherein if a power supply fails, the signal produced by the current monitoring means associated with at least one power supply preceding the failed power supply in the loop is compared to the signal produced by the current monitoring means associated with a power supply following the failed power supply in the loop.

4. The fault tolerant modular power system of claim 2, wherein there are N power supplies, and the signals produced by the current monitoring means associated with M power supplies are connected to each differential amplifier, failure of any M-1 power supplies not affecting the capacity of the remaining operating power supplies to provide substantially equal currents to the load, so long as a total rated current capacity of the remaining operating power supplies is not exceeded.

5. The fault tolerant modular power system of claim 2, wherein each differential amplifier compares the signals produced by current monitoring means associated only with a pair of the power supplies.

6. The fault tolerant modular power system of claim 1, further comprising control means for defining a range for the differential signal between predefined upper and lower limits in which the differential signal serves as the reference signal of an associated power supply, and for producing a default reference signal to control the output current of the associated power supply if the differential signal is outside said range.

7. The fault tolerant modular power system of claim 1, wherein the current monitoring means comprise a plurality of resistors, each connected to the output of one of the power supplies, the signals produced by the current monitoring means corresponding to the voltage drop across the resistors.

8. A fault tolerant modular power system comprising:

(a) a plurality of N power supplies modules, arbitrarily arranged in a sequence 1 through N, each of the N power supply modules having;

(i) an output connected in parallel to supply an output current to a load;

(ii) a nominal output voltage that is variable in response to a control signal; and

(iii) a rated power output greater than P/N, where P is the total power required by load;

(b) means for sensing a condition indicative of the output current of each of the power supply modules, thereby producing an output current signal for each power supply module that serves as a first order reference power supply module, each power supply module having a different first order reference power supply module that is proportional to its output current; and

(c) comparator means connected to each of the N power supply modules, for comparing the output current signal of each one of the power supply modules to the output current signal of at least an other of the N power supply modules, producing a difference signal proportional to the difference between the output currents of said one and at least said other of the power supply modules, and producing a plurality of control signals as a function of the difference signals, the control signs being connected to the power supply modules to control the output current provided by each of the N power supply modules, forcing the power supply modules to have substantially equal output voltages and substantially equal output currents, even upon failure of one or more of the power supply modules, so long as the rated capacity of any of the operating power supply modules is not exceeded.

9. The fault tolerant modular power system of claim 8, wherein J is an integer in the sequence 1 . . . N, and wherein the comparator means are operative to produce a Jth control signal input to the Jth power supply module to control its output voltage to minimize the differential signal produced by comparison of its output current signal to that of:

(i) the J-1 power supply module in the sequence if J does not equal 1, and (ii) the Nth power supply module in the sequence, if J equals 1.

10. The fault tolerant modular power system of claim 8, wherein the comparator means comprise a plurality of differential amplifiers, each having M input signals, where M is equal to at least 2, each differential amplifier being connected to receive the output current signals produced by the means for sensing output current, for selected power supply modules, and producing the control signal input to one of the power supply modules.

11. The fault tolerant modular power system of claim 8, wherein the comparator means comprise a plurality of differential amplifiers, each having M input signals, and wherein M is equal to 2, and wherein the sequence of power supply modules, 1 . . . N, a first differential amplifier of the plurality of differential amplifiers is connected to receive the output current signals from the means for sensing output current of a first and a second power supply module in the sequence, a second differential amplifier of the plurality of differential amplifiers is connected to receive the output current signals from the means for sensing output current of the second and a third power supply module in the sequence, and others of the plurality of differential amplifiers are similarly each respectively connected to receive the output current signals from the means for sensing output current for each remaining successive pairs of power supply modules in the sequence, if any, including the Nth and the first.

12. The fault tolerant modular power system of claim 10, wherein N-(M-1) power supply modules have a combined rated power output greater than P, so that the total power required by the load may be adequately provided by the remaining operating power supply modules in equal shares, if any M-1 power supply modules should fail.

13. The fault tolerant modular power system of claim 11, wherein an input to each of the plurality of differential amplifiers is connected to receive the output current signals from selected power supply modules, forming an interconnected loop, so that failure of any (M-1) power supply modules does not prevent the control signals from varying the output current of the power supply modules continuing to operate, in order to provide substantially equal output voltages and equal output currents, the differential amplifiers connected to receive the output current signals of failed power supply modules also being connected to receive the output current signals of other power supply modules prior to and following any failed power supply module in the sequence 1. . .N and N to 1.

14. The fault tolerant modular power system of claim 8, wherein the load comprises a plurality of distributed loads.

15. The fault tolerant modular power system of claim 8, further comprising means for limiting the range of the control signals produced by the comparator means between predetermined upper and lower limits.

16. In a power supply system including a plurality of power supply modules connected in parallel to provide an output current to a load, each power supply module having an output voltage variable about the same nominal value, a method for controlling the output current of the power supply modules so that they are substantially equal, comprising the steps of:

(a) monitoring the output current of the plurality of power supply modules, producing signals indicative of said current;

(b) comparing the signals indicative of the output currents of selected pairs of the plurality of power supply modules that serves as one power supply module of each selected pair comprising a first order reference power supply module, each selected pair having a different first order reference power supply module thereby producing a difference signal indicative of the relative magnitude of said output currents; and

(c) adjusting the output voltages of each of the plurality of power supply modules in response to the difference signals, so that the output current of each of the plurality of power supply modules is equal to the output current of at least one other of the plurality of power supply modules, thereby causing the plurality of power supply modules to substantially equally share the total current supplied to the load and to have substantially equal output voltages.

17. The method of claim 16, wherein the step of adjusting the output voltages is limited to a difference signal within a predetermined range.

18. The method of claim 16, wherein the output current of each selected pair of power supply modules is monitored by measuring the voltage drop across a resistor that carries the output current of each of the selected pairs of power supply modules.

19. The method of claim 16, wherein the plurality of power supply modules are connected in a first closed loop circuit in which the selected pairs of power supply modules comprise successive power supply modules and in a second closed loop circuit in which the selected pairs of power supply modules skip every other power supply module in the first closed loop circuit, the step of comparing the signals indicative of the output currents comprising the steps of:

(a) comparing the signals indicative of the output currents of the selected pairs of power supply modules connected in the first closed loop, and if one of the power supply modules of a selected pair in the first closed loop circuit has failed; and

(b) comparing the signals indicative of the output currents of the selected pair of power supply modules of the second closed loop circuit that skips the failed power supply module in the first closed loop circuit.

20. The method of claim 16, wherein the plurality of power supply modules are connected in a plurality of closed loop circuits of increasing order, the selected pairs of the plurality of power supply modules in each of the plurality of closed loop circuits comprising different combinations of the plurality of power supply modules, further comprising the step of bypassing a failed power supply module by using a selected pair of power supply modules from a higher order closed loop circuit to produce the difference signal, said selected pair of power supply modules from the higher order closed loop circuit including a power supply module of a selected pair from a lower order closed loop circuit that includes the failed power supply module.

21. The method of claim 20, wherein there are N closed circuits, and wherein up to N of the plurality of power supply modules may fail without affecting the equal sharing of the total current supplied to the load, so long as the total current supplied to the load does not exceed the rated current capacity of the operating power supply modules.