QUESTION:
Is there an easy way to protect your power designs against faults?
Answer:
Yes, there are integrated circuits available like the MAX17613 and MAX17526.
Introduction
Uptime is a critical metric for productivity and profitability in applications such as industrial automation, building automation, motion control, and process control. Downtimes are typically caused by maintenance, human errors, and equipment failures. The cost of repairs and lost productivity associated with downtimes can be very high depending on the industry and the nature of the event. Maintenance- and human error-related downtimes can or cannot be prevented, but the majority of equipment-related failures can be prevented. This article focuses on downtimes caused by power faults and how they can be prevented using the modern protection ICs in the power systems of this equipment.
System Power Protection Overview
A power system is subjected to many electrical stressors and faults. Along the electrical path, voltage surges and transients due to lightning strikes or inductive load switching, inrush currents due to the initial charging of the storage capacitors, and reverse voltages due to wiring errors or accidental shorts in the wiring harness, overcurrent, and overtemperature can induce degradation or irreversible damage. It is necessary to build a perimeter of protection around the load to handle these potentially catastrophic events. Let us review some common terminology, types of power faults, what traditional solutions are available along with their challenges, and modern protection ICs and their benefits.
Common Terminology
Besides discrete solutions, there is a host of integrated solutions that provides single-function protection. For example, a surge protector (or an overvoltage protector) provides protection against voltage surges; a hot swap controller (or an inrush limiter) can protect against inrush current; an ORing controller (or an ideal diode controller) can protect against reverse voltage as well as provide power sources distribution; an eFuse (or a current limiter) can protect against short circuit or overloading; and a power limiter/load switch/USB switch/power selector provides management and control for the system with multiple input power sources and/or multiple loads. Figure 1 illustrates these products, which have a common purpose: to provide system power protection. They do, however, provide only a partial solution to protect the system against either voltage, current, or temperature faults. A holistic solution is needed to provide complete, comprehensive system power protection.
Where System Power Protection Is Necessary
Figure 2 illustrates a generic system board power distribution. The board receives power from three separate input power sources, charges a large hold-up capacitor, creates board power for its own use, and passes on power to two subsequent peripheral devices. This system board requires several power protection and power distribution functions at both its inputs and outputs.
In terms of input power protection, it needs overvoltage/undervoltage, eFuse, inrush limit, and reverse voltage protection. If this board is powered from a source that has limited power capability, then it would also need the power limit function.
Since the board receives power from three different sources, it requires power ORing or power muxing. Power ORing automatically selects the power source with the highest voltage to power the board, while power muxing gives the system the choice to select whichever power source to use, regardless of its voltage as long as it is within the operating range. The board also needs reverse voltage protection so that a higher voltage power source does not back drive a lower voltage one.
Now, for the output power protection, the board needs current limit protection against output overload or a short on the connector, and reverse voltage protection against an accidental short to a higher voltage rail. To manage output power distribution, the board requires load switch, ORing, and power limit.
Three Main Types of System Power Faults
There are three main types of system power faults (see Figure 3): voltage, current, and temperature faults. Let us closely examine each one of them in more detail.
Voltage faults: Input voltages can go higher and/or lower than the normal DC voltage range due to a number of incidents, such as lightning strikes, blown fuses, short circuits, hot swap events, and cable inductive ringing.
A lightning strike can cause a high energy surge voltage that is typically handled by a front-end transient voltage suppressor (TVS) device and input filter. Figure 4 summarizes the IEC 61000-4-4 electrical fast transient specification. After TVS and input filter, the residue surge voltage at the system board level can still be quite large, sometimes 2× to 3× the nominal DC input voltage.
Figure 5 demonstrates a short-circuit event where a brief short circuit at the end of a 10-foot cable causes its voltage to ring and peak to 50.4 V, doubling its 24 VDC normal voltage. The voltage also rings down to about 11 V. A robust system would continue to operate throughout this ringing without interruption or, at least, survive it without damage. Similar voltage ringing can happen during an inductive load switching event, during a hot swapping event where a card with a discharged capacitor is plugged into a live backplane, or when a blown fuse occurs elsewhere in the system.
System miswiring is rare but, nonetheless, can occur. For example, in a rackmount system, a person might plug a card in reverse or connect the power cable with the wrong polarity. When the input voltage drops suddenly (the input is shorted or rings low), the output capacitor is now at a higher potential, which causes a reverse voltage condition. A reverse voltage condition can also occur when the output is suddenly shorted to a higher voltage rail (in a bundled cable, for example). While the input reverse voltage faults are rare, when they do happen, they can cause costly system damage.
Current faults: Output overloading and short circuiting are two obvious current faults. Overcurrent loading is triggered when the system runs overcapacity. As for a short circuit, this can be caused by a faulty component on a board. A bad short circuit could happen if someone accidentally drops a wrench onto the power connector or drills into a cable bundle. Unprotected boards can suffer permanent damage or, worse, catch fire.
When a board with a discharged capacitor is plugged into a live backplane, a surge of current rushes in to charge up the capacitor. Uncontrolled, this inrush current follows this equation:
I = CdV/dt
where:
I = inrush current
C = capacitance
dV/dt = rate of change of the capacitor voltage over time
If a discharged capacitor (at 0 V) is plugged into a live backplane at 24 V, dV/dt in this case is instantaneous (infinite), translating to I = infinite. Without inrush control, this infinitely high current spike can damage connectors, blow up fuses, and cause voltage ringing on the backplane voltage.
When a reverse voltage event occurs, current flow in the reverse direction can cause severe damage to the system. Figure 6 illustrates inrush/short-circuit and reverse currents.
Temperature fault: If designed properly, a system should be able to operate without ever experiencing a temperature fault. But a primary fault condition—such as an extended overload condition, failed or failing system fan, accidental blocking of the system air inlet/outlet, or failure of the room A/C—can trigger a temperature fault.
To prevent damage and potential fire-related problems, overtemperature protection shuts down the system when its temperature, or one of its other components, reaches a dangerous level. Compared to an overtemperature shutdown, thermal protection has more intelligence. When the temperature rises higher than normal during operation due to a primary fault, thermal protection provides the system with a warning and options. For example, the system can choose to shed noncritical loads, running at a lower switching speed to dissipate less power. As a result, the system might be able to avoid an overtemperature shutdown with reduced system performance until the primary fault is resolved.
System Implications Without Protection and Design Challenges
It is because all electrical systems experience voltage, current, and thermal faults, neglecting protection can hamper the successful completion of system designs during the design verification test stage. In fact, an even worse scenario involves line-down situations on the factory floor. Protection circuitries to holistically safeguard against equipment-damaging faults are valuable for maximizing the system uptime.
System engineers who want to fully protect their products face some design challenges. A discrete or partly IC implementation calls for many external components. Figure 7 illustrates a complete system power protection solution using 40 discrete components. The tolerances’ stack up of the components is tedious to analyze. It is also difficult to verify and guarantee their performance over time and to achieve system accuracy and fast response time to faults. With multiple components, the resulting solution is large. The cost of ownership is high due to low system mean time between failures (MTBF).
System Protection Made Easy
The traditional ways of implementing protection with discrete circuits or partly ICs might have worked fine in the past, but it does not work for modern systems. Modern systems have smaller board spaces, shorter development schedules, and tight development budgets. Given this transformation, what is the most suitable protection solution for modern systems? The solution is a highly integrated protection IC (see Figure 8) that integrates field effect transistors (FETs), current sense/limit, power limit, thermal protection, and undervoltage/overvoltage protection. In addition, a fully integrated protection IC that meets the Underwriters Laboratories, Inc./International Electrotechnical Commission (UL/IEC) safety requirements is even better. Higher integration in combination with safety certification results in reliable protection for modern systems.
Protection IC Examples and Key Working Concepts
The MAX17613 and MAX17526 from Analog Devices are examples of protection ICs that would fit the requirements of modern systems.
The MAX17613 (Figure 9) is a 60 V/3 A protection IC that has all the key components and features such as forward and reverse FETs, programmable current sense, thermal protection, programmable undervoltage lockout (UVLO), and overvoltage lockout (OVLO) all integrated into a single IC. It also has a pin CLMODE to select the IC’s mode of response to current faults between continuous, latchoff, and autoretry modes.
The MAX17526 (Figure 10) is a 60 V/6 A protection IC, which is also a fully integrated IC. Additionally, it has advanced protection features such as power limit and thermally controlled current foldback.
Now, let us review a couple of key features in detail using the MAX17526 as an example.
As shown in Figure 11, the MAX17526 measures the current drawn by the system and reports it to the system controller using the pin SETI. The resistor RSETI can be adjusted to program the current limit level per system requirements.
Figure 12 demonstrates the MAX17526’s current limit function and how it controls the inrush current during the system power up. A large 1000 μF capacitor is charged in a controlled fashion at 1.0× of the current limit value (on the left) and at 2.0× of the current limit value (on the right) without crashing the voltage source.
Figure 13 shows the MAX17526’s unique power limit feature, which can be used to limit the input or output power depending on whether the node VEXT is connected to the input voltage (VIN) or output voltage (VOUT). The IC adjusts the current limit dynamically to achieve the input or output power limit.
Figure 14 illustrates how the power limit feature works to limit the output power at 10 W when the IC is configured to limit the output power.
UL/IEC Safety Certification
As discussed earlier, modern systems can take advantage of any safety compliance aspects of the protection ICs as well. A protection IC that is recognized by UL 2367, IEC 60950, or IEC 62368 can simplify the system-level safety requirements, which can reduce certification-related costs and shorten the certification schedules to help with faster time to market. For example, the MAX17608 and MAX17613 from ADI are UL- and IEC-recognized protection ICs.
Conclusion
Power systems are critical blocks for any system or equipment. Power faults are inherent and do happen, but by implementing proper circuit protection, system failures and equipment downtimes can be prevented. This is critical for productivity and profitability in a highly competitive global business environment today. In comparison to the traditional discrete or single-function IC solutions, today’s advanced protection ICs offer holistic system protection in small packages, with high performance, high reliability, and easy design and qualification. Also, some of the advanced features offered by these protection ICs enable system monitoring and diagnostics features, which can be instrumental in today’s complex end equipment. Investing in fully integrated protection ICs is the cheapest insurance against costly downtimes.