Stories from the rotabench lab: >>Let them (almost) burn!<<

The title picture is a photograph of the setup for testing the “freewheel” diodes on the rotabench 6P lab-inverter power stage. The purpose of this experiment was to find out, how much “reverse current” the power stage can handle in a fault condition. The experiment was motivated by a couple of destroyed power stages at the customer and in my lab.
One of the worst-case scenarios for an inverter power stage is, when suddenly the DC voltage drops while running a PMSM on a 4-quadrant test bench with a 2-quadrant PSU. When this happens, the brake engine delivers mechanical power to the DUT, the DUT becomes a generator, converts the mechanical energy into electrical energy and delivers current back to the inverter, which is converted in to heat (or fed back into the grid) by the load/PSU.
Another situation – with a similar outcome – would be if the PMSM is operating in the field weakening area and the DC-Bus voltage is lower than the theoretical Back-EMF voltage at a (theoretical) iD = 0 and for some reason the control fails, e.g. because the coupling slips. This could also lead to a situation where the DUT is forced into breaking operation and delivering current back to the inverter.
Such a sudden event – which happens typically within a timeframe < 1 second – is capable of wreaking havoc among the power electronic components, destroying the power stage within a blink of an eye and releasing the “magic dust”. The power stage takes the max. amount of damage possible in very little time.
Therefore such a situation needs to be addressed fast, fully automated and in the proper way. The most important countermeasure is to cut off the AC connections to the motor as fast as possible to stop the motor from feeding currents back into the inverter.
But: failure detection algorithms need time “to be sure”. No one want’s a device that shuts down into error mode at every little voltage spike, which simply could be a measurement error. Contactors need time for switching, you can’t stop a rotating machine within no time, and so on. So there is a short time span, where the power stage must be able to handle harsh overload conditions, without getting destroyed.
The power stage in the rotabench 6P lab-inverter has “freewheel” diodes arranged in a B6 configuration in parallel to the body-diodes of the MOSFETS. The main purpose of those (Schottky) diodes is to catch the (positive and negative) Back-EMF voltage spikes generated by the inductance of the DUT and the wiring (not to mistake with the Back-EMF of the motor!) during normal operation. In the scenarios described above those diodes become an involuntary B6 bridge rectifier, which rectify the (short circuit) current delivered the DUT and fed it into the DC Bus. There is not much you can do to prevent this, you just can design the PCB in a way that it is capable of handling this situation for the time necessary to separate the DUT from the inverter and shut everything down.

In order to check how much current the diodes can handle, I built a B6 rectifier bridge in the same configuration like on the rotabench 6P lab-inverter power stage but without the MOSFETs, short circuited the DC bus to allow the max. amount of current flow and used an EPS motor (Bosch, 4 pole-pairs, 12 Volt PMSM) driven by my test bench as generator. Then I measured the temperature on the diodes with a thermal camera, with the following results:

At a rectified DC current of slightly above 100 Ampere DC (200 Hz AC frequency), the temperature of the diodes increases from room temperature to ~80°C in one second and reaches ~120°C after two seconds, which is close to thermal destruction of the diodes. However, the encouraging result is: I have at least one second to detect an error condition in the motor control, switching off the AC contactor and shutting down the system. And in the microcontroller world, thinking in milliseconds, a second is a huge amount of time, even if the contactor is slow and needs 100 ms for a full separation of the electric circuit. So the conclusion is: 1 second is enough to shut down the test bench without major damage on the inverter.