Fault-tolerant power semiconductor switching device control system

A fault-tolerant power semiconductor switching device control system, the control system comprising:

• a coordinating control system;
• a plurality of power semiconductor switching devices;
• and
• respective switching device controllers each coupled to the coordinating control system and each configured to control a respective one of the power semiconductor switching device;
• wherein the coordinating control system is configured to send real time switching control data to the switching device controllers to control switching of the respective power semiconductor switching devices, and to receive real time acknowledgment data including fault detection data from the switching device controllers;
• wherein each switching device controller is configured to receive the real time switching control data from the coordinating control system to control the respective power semiconductor switching device in response to the real time switching control data and to provide the real time acknowledgment data confirming switching device control to the coordinating control system;
• wherein the coordinating control system is further configured to control further switching of the power semiconductor switching devices in response to the real time acknowledgment data;
• wherein each switching device controller is configured to monitor switching of the respective power semiconductor switching device and to generate the fault detection data in response to such monitoring;
• wherein the fault detection data indicates whether a fault is present in the switching of the power semiconductor switching device;
• wherein the coordinating control system is configured to process the fault detection data to identify when a fault is present and to make in response a fault handling decision that comprises a decision to control the respective power semiconductor switching device for which the fault is present to a safe switching state that includes at least one intermediate state between a fully-off state and a saturated-on state;
• the coordinating control system is configured to merge the fault detection data from the plurality of switching device controllers to identify whether the fault is present;
• and
• said coordinating control system comprises a central controller coupled to one or more sub-controllers that are each coupled to a group of said switching device controllers, and wherein each sub-controller is configured to merge said fault detection data from the group of switching device controllers to which it is coupled such that the merged fault detection data identifies whether said fault is present in the respective group of switching device controllers.

A method of fault-tolerant control of switching of a plurality of power semiconductor switching devices, the method comprising;

• sending real time switching control data from a coordinating control system to a plurality of switching device controllers;
• controlling switching of said power semiconductor switching devices using said switching device controllers;
• monitoring the controlling of the switching of said power semiconductor switching devices;
• sending acknowledgment data including fault detection data from said switching device controllers to said coordinating control system;
• and
• controlling further switching of one or more of said power semiconductor switching devices in response to sent acknowledgment data;
• generating the fault detection data in response to the monitoring such that the fault detection data indicates whether a fault is present in the switching of the power semiconductor switching device;
• processing the fault detection data to identify when one of the faults is present and in response thereto to make a fault handling decision that comprises a decision to control the power semiconductor switching device for which the fault is present to one of a plurality of safe switching state that include at least one intermediate state between a fully-off state and a saturated-on state.

A fault-tolerant power semiconductor switching device control system, the control system comprising:

• means for sending real time switching control data from a coordinating control system to a plurality of switching device controllers;
• means for controlling switching of said power semiconductor switching devices using said switching device controllers;
• means for monitoring the controlling of said switching of said power semiconductor switching devices;
• means for sending acknowledgment data including fault detection data from said switching device controllers to said coordinating control system;
• and
• means for controlling further switching of one or more of said power semiconductor switching devices in response to sent acknowledgment data;
• means for generating in response to the monitoring fault detection data when one of the faults is present in the switching of the power semiconductor switching device;
• means for processing the fault detection data to identify when one of the faults is present and to make in response a fault handling decision comprising a decision to control the power semiconductor switching device for which the fault is present to one of a plurality of safe switching state that include at least one intermediate state between a fully-off state and a saturated-on state.