System and method for providing ASIL D fail operational power systems in automated vehicle applications

A method for providing fail operational power comprising:

• controlling, by a DC/DC controller a first switch configured to disable power from a high voltage vehicle battery pack to a low voltage power network when the first switch is open, wherein the DC/DC controller includes a DC/DC converter, and wherein the high voltage vehicle battery pack and the DC/DC controller comprise a primary power source, wherein the DC/DC controller receives information from an intelligent voltage/current sensor via a first feedback path;
• controlling, by the intelligent voltage/current sensor, via a second feedback path a second switch coupled to the DC/DC controller, the second switch configured to disable power from the high voltage vehicle battery pack to the low voltage power network when the second switch is open;
• the DC/DC controller receiving feedback front the intelligent voltage/current sensor via the first feedback path to open the fir switch in response to the intelligent voltage/current sensor detecting a failure in the primary power source;
• and
• the intelligent voltage/current sensor configured to send a signal via the second feedback path to open the second switch in case of a fault in opening the first switch;
• and
• a secondary power source supplying power to the low voltage power network via a power path in response to the intelligent voltage/current sensor detecting the failure in the primary power source.

A system for providing failover comprising:

• a DC/DC controller controls a first switch to disable power from a high voltage vehicle battery pack to a low voltage power network when the first switch is open, and wherein the high voltage vehicle battery pack and the DC/DC controller comprise a primary power source;
• a second switch coupled to the DC/DC controller, the second switch disables power from the high voltage vehicle battery pack to the low voltage power network when the second switch is open;
• the DC/DC controller receives a signal from an intelligent voltage/current sensor via a first feedback path for opening the first switch in response to the intelligent voltage/current sensor detecting a failure in the primary power source;
• the intelligent voltage/current sensor sends a signal via a second feedback path to open the second switch in case of a fault in opening the first switch;
• and
• a secondary power source including a low voltage vehicle battery pack supplies power to the low voltage power network via a power path in response to the intelligent voltage/current sensor detecting the failure in the primary power source.