The present application claims priority to European patent application no. 24150296.2 filed Jan. 4, 2024, the entire content of which is incorporated herein by reference.
The present disclosure relates to a power supply system with built-in fault detection. The disclosure further relates to a method of handling faults in a non-earthed apparatus.
Power over Ethernet (POE) and regulatory safety standards require electrical isolation between the signals in the ethernet cable and all accessible metal parts of a product. In an electrical device, which has an internal power supply system, the internal power supply system often comprises a flyback topology. A flyback topology is a type of switching power supply circuit for converting one voltage level to another using a transformer, switching elements, a feedback loop and a controller to control the flow of current through a primary side winding of the transformer. When the switch element is turned on, current is passed through the primary side winding of the transformer and energy from the primary side is transferred over to the secondary side winding. The voltage across the secondary side winding is determined by the turns ratio of the transformer, which allows for voltage transformation.
In this type of internal power supply system there is a potential for high voltage spikes, which need to be carefully managed to prevent damage to components and risks of exposing users to high voltages. For example, when the primary side winding of the transformer is switched off, a voltage spike may occur on the primary side. In some electronic devices, in which the load and possible users on the secondary side of the transformer are only allowed to operate on relatively low voltages, peak voltages may cause pain or injury to a user. For example, according to the safety standard IEC 62368, a peak voltage greater than 50 V can be considered to be of a level that could cause pain or injury.
Safety standards require that a product is safe even though a component fails somewhere in the product. If the transformer fails in such a manner that the peak voltage is transferred to the chassis of the electrical device through the secondary side, the chassis will be subjected to the peak voltage and will not be safe to touch anymore. This type of fault is not simple to detect in electrical devices having a transformer-based internal power supply system. There is therefore a risk that the internal power supply system continues its operation in such a scenario and exposes a user to the peak voltage.
Solutions to the problem exist. A common and straightforward solution is to add protective earth to the chassis of the electrical device. This, however, adds costs and complexity to the device as well as the installation. Another solution is to cover the chassis with plastic or another non-conductive material. This may, however, introduce other inconveniences or challenges, such as reduced heat dissipation capabilities and general appearance and robustness of product. This solution may not be possible if the electrical device has external connections.
The present disclosure relates to a power supply system with built-in fault detection that does not rely on the electrical device being equipped with protective earth.
The present disclosure relates to, according to a first embodiment, a power supply system with built-in fault detection comprising:
One advantage of a transformer-based power supply system, such as a flyback converter, is its ability to provide galvanic isolation between the primary side and secondary side of the transformer. In practice this means that the electrical device that the power supply system is part of can have two isolated parts. If the part of the device that uses the output voltage operates on a voltage level that is of a level that does not cause pain or injury to a user, a certain risk of faults in the secondary side of the power supply system may, generally, be manageable.
However, if, for example, the transformer fails in such a manner that the low side of the primary winding of the transformer is shorted to the low side of the secondary winding, which may be connected to the chassis of the device, the user may be directly exposed to a peak voltage, i.e. a voltage that can be considerably higher, for example, 100 V or more, from the primary side of the transformer. Since the primary side and the secondary side are isolated, it is not possible to detect, at the primary or the secondary side, that there is a short to the secondary side and that the energy transfer therefore needs to be immediately stopped.
The presently disclosed power supply system comprises an isolation capacitor connected between the secondary side of the transformer and the primary side of the transformer. Isolation capacitors are commonly used for, for example, blocking DC and allowing AC, which may be useful in, for example, certain audio and telecommunication applications and to reduce electromagnetic interference. The inventor has realized that by connecting the secondary side of the transformer to the primary side of the power supply system by means of an isolation capacitor, and using fault circuitry on the primary side of the power supply system to detect a switching pattern propagated through a short circuit between the primary side and secondary side of the transformer and further propagated through the isolation capacitor back to the primary side, an efficient and secure way of detecting and stopping the power supply system from continuing its operation can be obtained.
The isolation capacitor may act like a communication element in the sense that it may transfer a switching pattern over the isolation barrier from the secondary side to the primary side. On the primary side a diode can be used to rectify the propagated signal.
An additional switch for switching off the current in the primary winding of the transformer may be used to disable switching of the one or more switching elements upon detection of a short circuit between the primary side and secondary side when a fault is detected. This may be implemented, for example, as shown in
The presently disclosed power supply system with built-in fault detection offers an efficient and non-obtrusive solution compared to the existing solutions. The solution eliminates the need to add protective earth to the chassis of the electrical device or cover the chassis with an electrically non-conductive material.
The present disclosure further relates to a method of handling faults in a non-earthed electrical apparatus, the method comprising the steps of:
A person skilled in the art will recognize that the presently disclosed method of handling faults in a non-earthed electrical apparatus may be performed using any embodiment of the presently disclosed power supply system, and/or any embodiment of the presently disclosed electrical apparatus comprising the power supply system, and vice versa.
Various embodiments are described hereinafter with reference to the drawings. The drawings are examples of embodiments and are intended to illustrate some of the features of the presently disclosed power supply system with built-in fault detection.
The present disclosure relates to a power supply system with built-in fault detection. The power supply system comprises a transformer comprising a primary side and a secondary side, wherein the primary side and the secondary side are galvanically isolated. The power supply may further comprise one or more switching elements connected to the primary side of the transformer and a controller configured to control switching of the one or more switching elements to control an output voltage on the secondary side of the transformer. As would, generally, be known by a person skilled in the art, the controller will typically need a feedback loop for adjusting the output voltage. The power supply system may further comprise an isolation capacitor connected, directly or indirectly, from the secondary side of the transformer to the primary side of the transformer, and fault circuitry connected to the isolation capacitor and configured to detect a switching pattern propagated through a short circuit between the primary side and secondary side of the transformer and further propagated through the isolation capacitor. Generally, the primary side and the secondary side of the transformer may refer to two isolated sides of the power supply system, i.e. not only to parts of the transformer itself. In this regard the fault circuitry is thus part of the primary side of the power supply system. The isolation capacitor being “connected between the secondary side of the transformer and the primary side of the transformer” does not necessarily mean that the isolation capacitor is directly connected to the primary side of the transformer. As indicated above, the isolation capacitor is connected to the fault circuitry, which in turn may control the transformer. The fault circuitry may be a separate unit or integrated into the controller. In particular, upon detection of a fault, the controller may stop operation of the transformer, by, directly or indirectly, disabling switching of the one or more switching elements. The power supply system may comprise additional isolation capacitors used for other purposes than detecting faults.
The electrical apparatus may receive an input voltage for the apparatus 100. The electrical apparatus 100 may have input voltage terminals, for example, in the form of a powered device interface towards a corresponding power sourcing equipment interface. More specifically, the interface may be a Power over Ethernet (POE) interface. The power source may, accordingly, be a power sourcing equipment, such as a PoE midspan or a network switch with PoE capabilities. The power supply system may be configured to communicate with PoE power sourcing equipment, for example, by detecting the PoE power sourcing equipment and perform power negotiation etc. A person skilled in the art would, generally, be familiar with the implementation of such functions. While the power source may provide a DC voltage, it may still be useful to rectify the input voltage to the electrical apparatus since the input DC voltage may have reversible polarity. In the examples of
The power supply system may be an isolated power supply system wherein the transformer comprises primary and secondary windings separated by a non-electrically conductive isolation material, wherein the non-electrically conductive isolation material constitutes an isolation barrier. If the power supply system is part of an electrical apparatus, it is common to design the power supply system and/or the electrical apparatus such that the high-voltage side cannot come in contact with the chassis or any accessible conductive parts. This can be done by, for example, barriers, insulating materials and/or gaps. The presently disclosed power supply system and/or the electrical apparatus may be divided into a high-voltage side and a low-voltage side. The input voltage may be a voltage in the range of 37-57 V. The output voltage may be a voltage in the range of 3.3-24 V. This is under operation without faults, i.e. without voltage spikes included. These voltage levels may be useful in an application involving a PoE midspan or a network switch with PoE capabilities providing the input power to the electrical device. The load may be, for example, power-consuming parts of a surveillance camera or a surveillance camera system.
In one embodiment of the presently disclosed power supply system with built-in fault detection, the power supply system is a power supply system for a PoE-powered electrical apparatus. The power supply system may therefore comprise a controller, or additional circuitry, configured to communicate with a PoE PSE. Such an embodiment may comprise rectification circuitry. Preferably, the power supply system is adapted to handle an input voltage in the range of 37-57 V.
The concept of a high-voltage side and a low-voltage side is illustrated (high-voltage side 209, low-voltage side 210) in
As explained, there is a potential for high voltage spikes on the primary side of the power supply system. When the primary side winding of the transformer is switched off, a voltage spike may occur. If, for example, the primary side of the transformer 201 comprises at least one primary winding and the secondary side of the transformer 201 comprises at least one secondary winding, and there is a short circuit between a low side of the primary winding and a low side of the secondary winding, there may be a voltage peak on the secondary side, more particularly on the low side of the secondary winding. Such a point may be connected to the chassis 101 to provide a common ground or reference level for the secondary side. The short circuit between the isolated primary and secondary sides of the transformer can be caused by a number of factors, including, for example, insulation failure, physical damage and manufacturing defects. If, for example, the insulation material is heated more than it can withstand, it may lose its insulating capacity.
The power supply system further comprises an isolation capacitor connected between the secondary side of the transformer and the primary side of the transformer. Isolation capacitors are commonly used for, for example, blocking DC and allowing AC, which may be useful in, for example, certain audio and telecommunication applications and to reduce electromagnetic interference. In the presently disclosed power supply system, the isolation capacitor may transfer a fault signal over its isolation barrier from the secondary side to the primary side. Due to the short circuit between the primary side and secondary side in the transformer, a switching pattern, which originates from the primary side, is also present on the secondary side. The switching pattern is present on the primary side of the transformer under normal operation but transferred to the secondary side if there is a short circuit between the primary side and secondary side of the transformer. The switching pattern, when present on the secondary side of the short circuited transformed, here represents the fault signal. The isolation capacitor transfers a switching pattern in case there is a short circuit between the primary side and secondary side of the transformer. The isolation capacitor, which can be said to bridge the primary side of the transformer and the secondary side of the transformer, forwards the switching pattern to the primary side, enabling the switching pattern to be detected by the fault circuitry. The fault circuitry, which may optionally be part of the controller on the primary side, is configured to detect the switching pattern, which comprises one or more propagated pulses. The power supply system may comprise a current sense element connected to the primary side of the transformer. The current sense element may be connected between the primary side of the transformer and the ground of the primary side. Alternatively, the current sense element may be connected between the negative side (or low side) of the secondary side of the transformer and the ground of the secondary side. The current sense element may comprise, for example, one or more resistors. The controller may be configured to measure the current and/or voltage in/over the current sense element. In the examples of
The controller 205 may thus have several functions. Besides controlling switching of the one or more switching elements to control an output voltage on the secondary side of the transformer in the normal operation, it may disable the transformer from transferring energy from the primary side to the secondary side upon detection of a short circuit between the primary side and secondary side.
The fault circuitry 208 may be further configured to disable the transformer from transferring energy from the primary side to the secondary side upon detection of a short circuit between the primary side and secondary side. This can be done, for example, by disabling switching of the one or more switching elements upon detection of a short circuit between the primary side and secondary side. The fault circuitry may be configured or implemented such that a pulse of a certain magnitude is detected and/or used to turn off the operation of the transformer. According to a specific example, the fault circuitry may comprise a diode connected to the isolation capacitor and a pull-up or pull-down resistor connected to the diode and connected to a fault switching element, for example a control transistor, to disable switching of the one or more switching elements upon detection of a short circuit between the primary side and secondary side. Such a solution may optionally comprise an inverter between the diode and the fault switching element. As would be understood by a person skilled in the art, the fault switching element may be implemented using any suitable type of switch. As mentioned above, for some controllers of switched mode power supplies there is a high/low input pin to control the operation of the power supply. The fault circuitry may be configured to provide a signal that switches off the operation of the transformer. The fault circuitry may thus be configured to control an input to the controller that disables the transformer from transferring energy from the primary side to the secondary side. The signal from the isolation capacitor may be rectified and/or amplified to provide a suitable control signal for turning off the operation of the power supply when there is a pulse having a peak voltage greater than a predefined voltage threshold. The fault circuitry may alternatively, or in combination, comprise pulse detection circuitry. The pulse detection circuitry may be further configured to disable operation of the transformer when a first pulse in the switching pattern is detected.
The power supply system may be, but is not strictly limited to, a flyback transformer power supply system or a forward transformer power supply system, and/or a push pull converter.
The present disclosure further relates to an electrical apparatus comprising any embodiment of the presently disclosed power supply system.
The electrical apparatus may have a high-voltage side and a low-voltage side that are galvanically isolated, wherein the electrical apparatus comprises a power supply system comprising: a transformer comprising a primary side and a secondary side, wherein the primary side and the secondary side are galvanically isolated and wherein an input voltage is supplied to the primary side of the transformer; one or more switching elements connected to the primary side of the transformer; a controller configured to control switching of the one or more switching elements to control an output voltage on the secondary side of the transformer; an isolation capacitor connected between the high-voltage side and the low-voltage side; fault circuitry connected to the isolation capacitor and configured to detect a switching pattern propagated through a short circuit between the primary side and secondary side of the transformer and further propagated through the isolation capacitor.
The electrical apparatus may comprise a chassis, such as an electrically conductive chassis. Typically, the chassis is a metal housing that the device is encased in. In some devices the chassis may serve as the internal earth or reference of the device. The chassis of the presently disclosed electrical apparatus may be a non-earthed chassis. The secondary side of the transformer may therefore be, directly or indirectly, connected to the chassis. The electrical apparatus may have a high-voltage side and a low-voltage side that are galvanically isolated. In such a device it is common that the primary side of the transformer is galvanically isolated from the chassis under operation without faults. If there, however, is a short circuit in the transformer, the previously mentioned voltage peaks may propagate to the low-voltage side of the electrical apparatus.
The electrical apparatus may comprise a powered device interface, such as a Power over Ethernet (POE) interface providing an input voltage to the electrical apparatus. A power sourcing equipment, such as a midspan or a network switch with PoE capabilities, enables an existing network to support PoE. The power sourcing equipment, which adds power to the ethernet cable, may be placed between a network switch and powered devices. The input voltage to the presently disclosed electrical apparatus may be a voltage from a PoE midspan or a network switch with PoE capabilities.
The electrical apparatus may be any electrical apparatus that can benefit from the presently disclosed power supply system. An electrical apparatus will typically include one or more components that use electrical current. Such components may be the load of the power supply system. As an example, a surveillance camera or a surveillance camera system comprises parts that need to be powered by a local power supply system. The camera itself may need to be controlled and there may be additional circuitry for obtaining, storing, processing, communicating images from the camera etc. As would be understood by a person skilled in the art, the electrical apparatus may comprise a number of entities, including, for example, one or more processing units, one or more memories, which may be used for storing instructions that can be executed by any of the processing units, internal and external network interfaces, input and/or output ports, modules for sending and receiving data wirelessly, communication interface that allows software and/or data to be transferred between the system and external devices.
The method may further comprise the step of disabling the transformer from transferring energy from the primary side to the secondary side 404 upon detection of a short circuit between the primary side and secondary side. This can be achieved using any embodiment of the presently disclosed power supply system and/or electrical apparatus. This step is optional.
In one embodiment the power supply system with built-in fault detection comprises:
The primary side may comprise at least one primary winding. The secondary side may comprise at least one secondary winding.
The fault circuitry does not necessarily have to be disposed on the primary side. It is possible to propagate a short in the transformer from the primary side to the secondary side through the isolation capacitor.
Generally, in embodiments having the fault circuitry on the primary side, the isolation capacitor may be connected to the secondary winding of the transformer. The isolation capacitor may be connected to the low side of the secondary winding, or to the high side of the secondary winding, or directly and/or indirectly to both the low side and the high side of the secondary winding.
In the non-limiting example shown in
In embodiments having the fault circuitry on the primary side, the isolation capacitor may be connected to the primary winding, typically through a current sense element. In the non-limiting example shown in
The isolation capacitor may be connected to the fault circuitry. This will typically be the case both in embodiments having the fault circuitry on the primary side and in embodiments having the fault circuitry on the secondary side.
The power supply system may have a primary side ground and a secondary side ground. The primary side ground and the secondary side ground may be separate grounds for the respective sides. In the examples shown in
On the secondary side, the secondary side ground may be connected to, for example, a node, which is connected to the isolation capacitor. On the primary side, the primary side ground may be connected to a node, which is connected to the isolation capacitor.
In embodiments having the fault circuitry on the primary side, the fault circuitry on the primary side may be connected to the primary side ground and/or use the primary side ground as a reference voltage. In embodiments having the fault circuitry on the secondary side, the fault circuitry on the secondary side may be connected to the secondary side ground and/or use the secondary side ground as a reference voltage.
In one embodiment the primary side ground is connected to the primary winding via a current sense element. This is shown in, for example,
The transformer may operate using a switching frequency. The switching frequency depends on the application, but may be in the order of kHz, such as at least 10 KHz or at least 100 KHz. The transformer may typically be configured to transform an input voltage to a higher or lower output voltage. If there is a fault in the transformer in the form of a short circuit between the primary side and secondary side of the transformer, the potential on the primary side and the secondary side of the transformer will consequently be the same.
In embodiments having the fault circuitry on the primary side, the secondary winding of the transformer may be connected to the isolation capacitor on the secondary side. The isolation capacitor may be configured to propagate an AC signal between the primary side and the secondary side in case of a fault. Accordingly, a switching pattern may be propagated through a short circuit between the primary side of the transformer to the secondary side of the transformer, and then further propagated through the isolation capacitor between the secondary side and the primary side. The fault circuit on the primary side may detect the propagated switching pattern as a difference in potential over a current sense element on the primary side. In embodiments having the fault circuitry on the primary side, the propagation of the switching pattern is conceptually the same. In case of a fault in the transformer, there is not only the propagation over the transformer, but also a propagation in the form of an AC signal between the primary side and the secondary side through the isolation capacitor.
The fault circuitry may be configured to detect a physical connection between the primary side ground and the secondary side ground caused by a fault in the transformer. The fault circuitry may be configured to detect a switching pattern propagated through a short circuit between the primary side and secondary side of the transformer and further propagated through the isolation capacitor.
In one embodiment the primary side ground is connected to the primary winding via a current sense element.
The presently disclosed power supply system may be configured to disconnect the transformer when a fault is detected. This can be done, for example, by an implementation in which the fault circuitry is connected to the controller. In such an embodiment the fault circuitry may provide an enable/disable signal that controls a pin on the controller. This can be used to switch off the operation of the power supply system.
Alternatively the fault circuitry can have a separate switch for disconnecting the current to the primary winding. An example of such a fault switching element 215 is shown in
One embodiment of the presently disclosed power supply system is configured such that it is possible to select if the controller shall be used to turn off the operation of the transformer (using for example the controller) or if the incoming connections shall be disconnected or short-circuited, or combinations thereof.
Further options for interrupting the operation of the power supply system when a fault is detected include short-circuiting the connections from the incoming connections, for example from the input rectification circuitry. This will typically cause a fuse to blow. Alternatively, the current from the incoming connections can be disconnected. One example of this is shown in
In embodiments having the fault circuitry on the primary side, it is understood that the fault circuitry can use the primary side ground as a reference when detecting the propagated switching pattern. In embodiments having the fault circuitry on the secondary side, it is understood that the fault circuitry can use the secondary side ground as a reference when detecting the propagated switching pattern.
The transformer may fail in such a manner that the primary side is shorted to the secondary side. As a person skilled in the art would realize, a fault can cause the primary winding to be shorted to the secondary winding in several possible ways. For example, the low side of the primary winding of the transformer can be shorted to the low side of the secondary winding. The high side of the primary winding of the transformer can also be shorted to the low side of the secondary winding, the low side of the primary winding of the transformer shorted to the high side of the secondary winding etc. The invention is not limited to one type of short circuit in the transformer.
The primary side can be, but does not necessarily have to be, a high-voltage side. The secondary side can be, but does not necessarily have to be, a low-voltage side. The power supply system may also be a system in which an input voltage is converted to a higher output voltage. There may still be a risk of voltage spikes being transferred from the primary side to the secondary side if the transformer is shorted due to a fault.
In one embodiment, the power supply system with built-in fault detection comprises:
a transformer comprising a primary side and a secondary side, wherein the primary side comprises at least one primary winding and the secondary side comprises at least one secondary winding, wherein the primary side and the secondary side are galvanically isolated and wherein an input voltage is supplied to the primary side of the transformer;
In one embodiment the isolation capacitor is connected to the fault circuitry, wherein the fault circuitry is connected to a primary side ground, and wherein the primary side ground is connected to a low side of the primary winding via a current sense element, or wherein the isolation capacitor is connected to the fault circuitry, wherein the fault circuitry is connected to the controller, and wherein a primary side ground is connected to the one or more switching elements via a current sense element.
Number | Date | Country | Kind |
---|---|---|---|
24150296.2 | Jan 2024 | EP | regional |