CN116278953A - Signal processing method and device for battery management system and storage medium - Google Patents

Signal processing method and device for battery management system and storage medium Download PDF

Info

Publication number
CN116278953A
CN116278953A CN202310274215.1A CN202310274215A CN116278953A CN 116278953 A CN116278953 A CN 116278953A CN 202310274215 A CN202310274215 A CN 202310274215A CN 116278953 A CN116278953 A CN 116278953A
Authority
CN
China
Prior art keywords
battery
fault
management system
signal
state
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202310274215.1A
Other languages
Chinese (zh)
Inventor
王君君
荣常如
马腾翔
牛春静
范广冲
侯典坤
杨庆敖
朱鹏飞
冯先振
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
FAW Group Corp
Original Assignee
FAW Group Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by FAW Group Corp filed Critical FAW Group Corp
Priority to CN202310274215.1A priority Critical patent/CN116278953A/en
Publication of CN116278953A publication Critical patent/CN116278953A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L58/00—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles
    • B60L58/10—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles for monitoring or controlling batteries
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L3/00—Electric devices on electrically-propelled vehicles for safety purposes; Monitoring operating variables, e.g. speed, deceleration or energy consumption
    • B60L3/0023—Detecting, eliminating, remedying or compensating for drive train abnormalities, e.g. failures within the drive train
    • B60L3/0046—Detecting, eliminating, remedying or compensating for drive train abnormalities, e.g. failures within the drive train relating to electric energy storage systems, e.g. batteries or capacitors
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L2240/00—Control parameters of input or output; Target parameters
    • B60L2240/40—Drive Train control parameters
    • B60L2240/54—Drive Train control parameters related to batteries
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T10/00—Road transport of goods or passengers
    • Y02T10/60—Other road transportation technologies with climate change mitigation effect
    • Y02T10/70—Energy storage systems for electromobility, e.g. batteries

Landscapes

  • Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Sustainable Development (AREA)
  • Sustainable Energy (AREA)
  • Transportation (AREA)
  • Mechanical Engineering (AREA)
  • Electric Propulsion And Braking For Vehicles (AREA)

Abstract

The invention discloses a signal processing method, a signal processing device and a storage medium of a battery management system. The method can be used for monitoring the functional safety of the battery management system, and comprises the following steps: monitoring the running state of a subsystem in a battery management system of the vehicle to obtain monitoring data; based on the monitoring data, determining that the battery management system is in a normal working state, and controlling the battery management system to check the received battery fault signal to obtain a first check result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle; and responding to the first verification result to be that the battery fault signal is valid, and determining a fault state of the power battery based on fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not. The invention solves the technical problem that the reliability of the battery management system for processing the battery fault signal is poor.

Description

Signal processing method and device for battery management system and storage medium
Technical Field
The present invention relates to the field of battery technologies, and in particular, to a signal processing method and apparatus for a battery management system, and a storage medium.
Background
At present, a detected battery fault signal is directly processed through a battery management system (Battery Management System, abbreviated as BMS), but if a key function of the battery management system fails, a battery collision signal cannot be processed, so that the technical problem of poor reliability of processing the battery fault signal by the battery management system is caused.
Aiming at the technical problem that the reliability of the battery management system for processing the battery fault signal is poor, no effective solution is proposed at present.
Disclosure of Invention
The embodiment of the invention provides a signal processing method, a device and a storage medium of a battery management system, which are used for at least solving the technical problem that the reliability of the battery management system for processing battery fault signals is poor.
According to one aspect of an embodiment of the invention, a signal processing method of a battery management system is provided. The method may include: monitoring the running state of a subsystem in a battery management system of the vehicle to obtain monitoring data; based on the monitoring data, determining that the battery management system is in a normal working state, and controlling the battery management system to check the received battery fault signal to obtain a first check result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle; and responding to the first verification result to be that the battery fault signal is valid, and determining a fault state of the power battery based on fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not.
Optionally, the monitoring data includes system state data of the subsystem in a driving state and system data generated by the subsystem in the driving state, and determining that the battery management system is in a normal working state based on the monitoring data may include: and determining that the battery management system is in a normal working state in response to the fact that the system state data does not contain fault data of the subsystem and is valid, wherein the fault data are used for representing that the subsystem breaks down.
Optionally, the method may further include: performing cyclic redundancy check on the system data to obtain a second check result; and responding to the second check result to complete the system data, and determining that the system data is valid.
Optionally, the battery fault signal includes a bus fault signal and a hard wire fault signal, and the method may include: the battery management system is controlled to check the bus fault signal to obtain a third check result, and/or the battery management system is controlled to check the hard wire fault signal to obtain a fourth check result; and responding to the third check result to represent that the bus fault signal is valid, and/or the fourth check result to represent that the hard wire fault signal is valid, and determining that the first check result is the battery fault signal valid.
Optionally, determining the fault state of the power battery based on the fault information in the battery fault signal may include: the fault condition is determined to be a power battery fault in response to the fault information in the bus fault signal being triggered by a fault event of the battery and/or the fault information in the hard-line fault signal being triggered by a fault event.
Optionally, the method may further include: and responding to the failure of the power battery, at least controlling the battery management system to disconnect a high-voltage contactor of the power battery, and sending prompt information to the vehicle, wherein the prompt information is used for indicating the failure of the power battery to the vehicle.
According to an aspect of an embodiment of the present invention, there is provided a signal processing apparatus of a battery management system, the apparatus may include: the monitoring unit is used for monitoring the running state of the subsystem in the battery management system of the vehicle to obtain monitoring data; the verification unit is used for determining that the battery management system is in a normal working state based on the monitoring data, and controlling the battery management system to verify the received battery fault signal to obtain a first verification result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle; and the determining unit is used for responding to the first check result to be that the battery fault signal is valid, and determining the fault state of the power battery based on the fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not.
According to another aspect of an embodiment of the present invention, there is also provided a computer-readable storage medium. The computer readable storage medium includes a stored program, wherein the device in which the computer readable storage medium is located is controlled to execute the signal processing method of the battery management system according to the embodiment of the present invention when the program runs.
According to another aspect of an embodiment of the present invention, there is also provided a processor. The processor is configured to execute a program, where the program executes a signal processing method of the battery management system according to the embodiment of the present invention.
According to another aspect of the embodiment of the invention, a vehicle is also provided. The vehicle is used for executing the signal processing method of the battery management system according to the embodiment of the invention.
In the embodiment of the invention, the operation condition of a subsystem in a battery management system of a vehicle is monitored to obtain monitoring data; based on the monitoring data, determining that the battery management system is in a normal working state, and controlling the battery management system to check the received battery fault signal to obtain a first check result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle; and responding to the first verification result that the battery fault signal is effective, and determining the fault state of the power battery based on the fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not, so that the technical problem that the reliability of the battery management system for processing the battery fault signal is poor is solved, and the technical effect of the battery management system for processing the battery fault signal is improved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description serve to explain the invention and do not constitute a limitation on the invention. In the drawings:
fig. 1 is a flowchart of a signal processing method of a battery management system according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a battery safety monitoring management system according to an embodiment of the present invention;
fig. 3 is a flowchart of a safety monitoring method of a battery according to an embodiment of the present invention;
fig. 4 is a schematic view of a safety monitoring device for a battery according to an embodiment of the present invention;
fig. 5 is a flowchart of a method of monitoring functional safety of a battery according to an embodiment of the present invention;
FIG. 6 is a flowchart of another battery safety monitoring method according to an embodiment of the present invention;
fig. 7 is a schematic diagram of a signal processing apparatus of a battery management system according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, shall fall within the scope of the invention.
It should be noted that the terms "first," "second," and the like in the description and the claims of the present invention and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
Example 1
According to an embodiment of the present invention, there is provided a signal processing method of a battery management system, it being noted that in the flowchart of the drawings, steps shown therein may be performed in a computer system such as a set of computer executable instructions, and that although a logical order is shown in the flowchart, in some cases, steps shown or described may be performed in an order different from that herein.
The following describes a signal processing method of the battery management system according to an embodiment of the present invention.
Fig. 1 is a flowchart of a signal processing method of a battery management system according to an embodiment of the present invention, and as shown in fig. 1, the method may include the steps of:
step S101, monitoring the running state of a subsystem in a battery management system of the vehicle to obtain monitoring data.
In the step S101 of the present invention, the battery management system may be composed of a master controller and a slave controller, where the master controller and the slave controller may be used to monitor multiple subsystems of the battery management system, and the slave controller may be placed inside the power battery and used to collect voltage and temperature information of a battery cell inside the power battery, and the master controller may be disposed inside the power battery or may be disposed outside the power battery and used to monitor the subsystems of the following battery management system: the method includes the steps of receiving signals of a direct-current charger, an alternating-current charger, a vehicle controller, a controller local area network (Controller Area Network, abbreviated as CAN) of an air bag controller, collision hard line signals of the air bag controller, driving of a high-voltage relay, relay hardware monitoring, relay time sequence monitoring, battery total voltage rationality monitoring, relay state detection, relay open-circuit current detection, degradation mode monitoring, over-the-air technology (Over the Air Technology, abbreviated as OTA) upgrading monitoring, relay service life monitoring, high-voltage relay hardware turn-off path checking, end-to-End (End, abbreviated as E2E) protection of CAN communication, read Only Memory (ROM), random access Memory (Random Access Memory, abbreviated as RAM) data protection and the like, and is not limited in detail by the method of monitoring a subsystem and a subsystem of a battery management system.
In this embodiment, the battery management system of the vehicle may be started first, and then the operation conditions of the plurality of subsystems in the battery management system may be monitored to obtain the monitored data, where the monitored data may include data for monitoring the operation states of the plurality of subsystems, or may include data for monitoring the data security of the plurality of subsystems. It should be noted that, the type of the monitoring data is not specifically limited, and any monitoring data obtained by monitoring the operation conditions of a plurality of subsystems in the battery management system is within the protection scope of the embodiment of the present invention, which is not illustrated herein.
Step S102, based on the monitoring data, determining that the battery management system is in a normal working state, and controlling the battery management system to check the received battery fault signal to obtain a first check result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle.
In the above step S102 of the present invention, the normal working state may be used to indicate that the plurality of subsystems in the battery management system have no faults in the operation process, and the data generated or collected by the plurality of subsystems in the operation process is safe and effective data, and the battery fault signal may be a signal triggered by a sensor mounted on the vehicle after sensing that the power battery has a fault, for example, a battery collision signal sent after the air bag controller senses that the power battery has a collision. It should be noted that, the specific content of the battery fault signal is not limited herein, and any battery fault signal triggered by the power battery fault is within the protection scope of the embodiments of the present invention, which is not illustrated herein.
In this embodiment, the monitoring data obtained in the step S102 may be analyzed and checked, and the working state of the battery management system may be determined according to the analysis and check result, and if the battery management system is in a normal working state, the battery management system may be controlled to check the received battery fault signal, to obtain the first check result, where the battery fault signal is obtained by monitoring the power battery by the vehicle.
Optionally, when analyzing and checking the monitoring data, if the data for monitoring the operation states of the plurality of subsystems does not include fault data and the data for monitoring the data security of the plurality of subsystems is not damaged or leaked, it may be determined that the plurality of subsystems are in a normal operation state, that is, it may be further determined that the battery management system is in a normal operation state; if the data for monitoring the operation states of the subsystems contain fault data and/or the data for monitoring the data security of the subsystems are damaged or leaked, the subsystems can be determined to be in the fault operation states, that is, the battery management system can be further determined to be in the abnormal operation state.
Optionally, when the battery management system is in a normal working state, validity check can be performed on the battery fault signal received by the battery management system, for example, when the battery fault signal is a battery collision signal, the main controller monitors the battery collision signal sent by the air bag controller to perform edge-to-edge check, if the check result is that the battery collision signal is an error signal, the battery fault signal is determined to be invalid, and if the check result is that the battery collision signal is a correct signal, the battery fault signal is determined to be valid. It should be noted that, the preferred embodiment of verifying the battery fault signal is only a preferred embodiment, and the method for verifying the battery fault signal is not specifically limited, and any method and process for verifying the battery fault signal are within the scope of the embodiments of the present invention, and are not specifically described herein.
And step S103, responding to the first check result to be that the battery fault signal is valid, and determining the fault state of the power battery based on the fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not.
In the above step S103 of the present invention, if the battery management system is in a normal operating state and the first verification result obtained by verifying the battery fault signal received by the battery management system is that the battery fault signal is valid, the fault information included in the battery fault signal may be further analyzed to determine the fault state of the power battery, if it is determined that the fault information is the information generated by the fault event trigger of the power battery, the fault state may be determined to be used to indicate that the power battery is faulty, and if it is determined that the fault information is not the information generated by the fault event trigger of the power battery, the fault state may be determined to be used to indicate that the power battery is not faulty.
For example, in the case where the battery failure signal is a battery collision signal, if the main controller monitors that the battery collision signal transmitted from the air bag controller is valid and the battery collision signal indicates that the collision state is triggered by a collision, it may be determined that the power battery is collided.
Optionally, after determining that the power battery fails, the connection between the power battery and all the high-voltage relays connected externally can be disconnected within a target period of time, and the vehicle can be informed that the power battery fails, so as to achieve the purpose of reminding the driver of carefully driving.
In the invention, the operation state of the subsystem in the battery management system of the vehicle is monitored to obtain monitoring data from the steps S101 to S103; based on the monitoring data, determining that the battery management system is in a normal working state, and controlling the battery management system to check the received battery fault signal to obtain a first check result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle; and responding to the first verification result to be that the battery fault signal is valid, and determining a fault state of the power battery based on fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not. That is, in the embodiment of the invention, the operation state of the battery management system can be monitored by monitoring the monitoring data obtained by monitoring the operation state of the subsystem in the battery management system of the vehicle, then the obtained battery fault signal is checked when the battery management system is in the normal operation state, and finally the fault state of the power battery is judged according to the check result, so that the purpose of monitoring the battery management system in advance before the battery fault signal is processed is achieved, the technical problem that the reliability of the battery management system for processing the battery fault signal is poor is solved, and the technical effect of improving the reliability of the battery management system for processing the battery fault signal is realized.
The above-described method of this embodiment is further described below.
As an alternative embodiment, the monitoring data includes system state data of the subsystem in the driving state and system data generated by the subsystem in the driving state, and the determining that the battery management system is in the normal working state based on the monitoring data in step S102 may include: and determining that the battery management system is in a normal working state in response to the fact that the system state data does not contain fault data of the subsystem and is valid, wherein the fault data are used for representing that the subsystem breaks down.
In this embodiment, the monitoring data may include system status data of the subsystem in the driving state of the battery management system and system data generated by the subsystem in the driving state of the battery management system, and the fault data may be used to indicate that the subsystem is faulty.
Optionally, the system state data and the system data may be respectively analyzed and checked, and if the system state data does not include fault data of the subsystem and the system data is valid, it may be determined that the battery management system is in a normal working state.
For example, hardware errors of the relay may be monitored, and when the main controller detects that the driving state of the charging relay is an error, the main controller needs to at t c Setting a hardware state signal of the charging positive relay as an error in time; when the main controller detects that the driving state of the charging negative relay is wrong, the main controller needs to at t c And setting the hardware state signal of the charging negative relay as an error in time. When the hardware state signal of the charging positive relay or the charging negative relay is not wrong, if the charging positive relay and the charging negative relay are not in the attraction state, the battery management system can be determined to be in the normal working state. Wherein t is c The time value may be manually set according to the actual monitoring condition, and is only exemplified herein, and is not particularly limited.
As an alternative embodiment, the method further comprises: performing cyclic redundancy check on the system data to obtain a second check result; and responding to the second check result to complete the system data, and determining that the system data is valid.
In this embodiment, the second check result may be used to characterize a check result obtained after performing cyclic redundancy check on the system data, and if the second check result is that the system data is complete, it indicates that the system data is valid and not damaged, and it may be determined that the system data is valid.
For example, when the main controller is in an operating state, the data in the RAM is subjected to cyclic redundancy check at intervals, and when the cyclic redundancy check is successful, it may be determined that the data in the RAM is complete, that is, the data in the RAM is not damaged, so as to determine that the data is valid.
As an alternative embodiment, the battery fault signal includes a bus fault signal and a hard wire fault signal, and the controlling the battery management system to verify the received battery fault signal to obtain a first verification result includes: the battery management system is controlled to check the bus fault signal to obtain a third check result, and/or the battery management system is controlled to check the hard wire fault signal to obtain a fourth check result; and responding to the third check result to represent that the bus fault signal is valid, and/or the fourth check result to represent that the hard wire fault signal is valid, and determining that the first check result is the battery fault signal valid.
In this embodiment, when the battery management system is controlled to check the bus fault signal, a third check result may be obtained, when the battery management system is controlled to check the hard-wire fault signal, a fourth check result may be obtained, if the third check result is used to indicate that the bus fault signal is valid, and/or if the fourth check result is used to indicate that the hard-wire fault signal is valid, it may be determined that the battery fault signal is valid, that is, either one of the bus fault signal and the hard-wire fault signal is valid, that is, it may be determined that the battery fault signal is valid, where the bus fault signal may be a CAN signal, and the hard-wire fault signal may be a pulse width modulated (Pulse Width Modulation, abbreviated as PWM) hard-wire signal.
For example, when an electric vehicle collides, the air bag controller sends a collision trigger signal CAN signal and a PWM hard wire signal to the main controller through the CAN bus and the hard wire. The method comprises the steps that the main controller checks the correctness of a collision signal CAN signal sent by the air bag controller to the CAN bus, and when the result of the detection of the CAN signal by the main controller is correct and the collision information of the CAN signal is triggering, the main controller sets the collision signal CAN signal transmitted by the air bag controller on the CAN bus to be effective; the main controller checks the correctness of the PWM hard-wire signal sent by the air bag controller, and when the main controller monitors that the state of the PWM signal of the air bag controller is correct and the PWM hard-wire signal of the air bag controller indicates that the collision state is collision triggering, the main controller needs to set the PWM hard-wire signal to be effective. At this time, when the CAN signal and the PWM hard-wire signal are indicated as being valid, it CAN be determined that the failure information of the battery is also valid.
As an alternative embodiment, determining a fault condition of the power battery based on fault information in the battery fault signal includes: the fault condition is determined to be a power battery fault in response to the fault information in the bus fault signal being triggered by a fault event of the battery and/or the fault information in the hard-line fault signal being triggered by a fault event.
In this embodiment, the fault state may be determined to be a power cell fault in response to the fault information in the bus fault signal being generated by the fault event trigger of the battery and/or the fault information in the hard line fault signal being generated by the fault event trigger, i.e., in the case where the bus fault signal is valid and the fault information in the bus fault signal is determined to be generated by the fault event trigger of the battery, the fault state may be determined to be a power cell fault; under the condition that the hard line fault signal is effective and the fault information in the hard line fault signal is generated by triggering a fault event of the battery, the fault state can be determined as the power battery fault; under the condition that both the bus fault signal and the hard wire fault signal are valid and the fault information in the bus fault signal and the hard wire fault signal are generated by the fault event trigger of the battery, the fault state can be determined to be that the power battery breaks down, wherein the fault event trigger of the battery can be used for indicating that the collision state is the collision trigger for the bus signal, and the fault event trigger can be used for indicating that the collision state is the collision trigger for the hard wire signal.
For example, when the CAN collision signal of the airbag controller is valid and the CAN collision signal indicates that the collision state is a collision trigger, the main controller sets the CAN collision signal to "collision" occurrence for a certain period of time; when the PWM signal state of the air bag controller is valid and the PWM hard-wire signal of the air bag controller indicates that the collision state is collision triggering, the main controller sets the PWM hard-wire signal to be collision in a certain time period, and at the moment, the fault state which can be determined is that the power battery breaks down.
As an alternative embodiment, in response to a failure of the power battery, at least the battery management system is controlled to open the high voltage contactor of the power battery and to send a prompt message to the vehicle, the prompt message being used to indicate to the vehicle that the power battery is failed.
In this embodiment, if the power battery fails, the battery management system needs to be controlled to disconnect the high-voltage contactor of the power battery and send a prompt message of the failure of the power battery to the vehicle, so as to achieve the purpose of ensuring the life safety of the driver.
For example, if a power battery of a vehicle fails, a safety design and a safety requirement for avoiding the problem need to be formulated so as to send a warning message of the failure of the battery to the vehicle, and prevent the damage to a driver after the failure of the battery.
Example 2
The technical solution of the embodiment of the present invention will be illustrated in the following with reference to a preferred embodiment.
When an electric vehicle collides, the damaged battery is extremely easy to generate the conditions of thermal runaway, short circuit, electric leakage and the like, so that drivers and passengers are in danger, in order to avoid the dangerous conditions, the prior art breaks off a high-voltage loop through the fault diagnosis of a battery management system so as to achieve the purpose of reducing personnel and property loss, but a corresponding safety method meeting safety requirements is formulated and proposed when the collision occurs on the basis of systematic hazard analysis and risk assessment, and the harm of the collided battery to the drivers and passengers is prevented. Accordingly, in order to solve the above-mentioned problems, the present invention provides a signal processing method of a battery management system so as to achieve the technical effect of improving the reliability of the battery management system in processing a battery failure signal.
Fig. 2 is a schematic diagram of a battery safety monitoring management system according to an embodiment of the present invention, and as shown in fig. 2, the system may include: a master controller 201, a slave controller 202, a high-voltage positive relay 203, a charging positive relay 204, a high-voltage negative relay 205, a charging negative relay 206, an airbag controller (Airbag Control Unit, abbreviated as ACU) 207, and a master controller (Hybrid Control Unit, abbreviated as HCU) 208 of the hybrid system.
The main controller 201 may include: a multi-core microprocessor 2011, a read only memory 2012, a random access memory 2013, a high voltage digital to analog converter 2014, a high voltage relay driver 2015, a controller area network communication interface 2016, and a collision signal hard wire detection circuit 2017.
Optionally, the main controller CAN be arranged inside the power battery or outside the power battery and is mainly responsible for detecting the total voltage of the power battery and receiving CAN signals of the direct-current charger, the alternating-current charger, the HCU and the ACU; receiving ACU collision hard wire signals, driving a high-voltage relay, error monitoring of relay hardware, monitoring of relay time sequence, monitoring of battery total voltage rationality, relay state detection, relay open-circuit current detection, degradation mode monitoring, OTA upgrading monitoring, relay service life monitoring, shutdown path checking of the high-voltage relay hardware, end-to-end protection of CAN communication, and data protection of a read-only memory and a random access memory.
Optionally, to ensure that the battery can be safely monitored after an electric vehicle collision, the main controller is designed to meet the following conditions: when the external voltage of the main controller is 12 volts (V), the redundant design is carried out on the power supply sources, and the two paths of 12V power supply sources are mutually independent; when the external voltage of the main controller is 12V and the power supply voltage is lower than 6.5V, the high-voltage relay can be ensured not to be disconnected passively; when the external voltage of the main controller is 12V and the power supply voltage exceeds 24V, at t d The main controller does not have dysfunction in a time period; when the external voltage of the main controller is 12V and the power supply voltage is lower than 6.5V, the main controller is actively driven at t c Cutting off the high-voltage relay in a time period, and prohibiting the battery from outputting outwards; when the main controller distributes the internal power supply, different cores of the microprocessor can be guaranteed to be supplied with power in a double-way redundancy mode; when the main core of the microprocessor of the main controller needs to have an independent redundant core to monitor the operation of the main core, then the redundancyThe core may turn off the high voltage relay in the event of failure of the primary core; when the main controller detects hardware faults and basic software faults, the high-voltage relay can be turned off; when the redundant core in the microprocessor of the main controller is restarted under the condition that the operation of the main core is not influenced, the main core is required to ensure the original opening and closing states of the high-voltage relay; when the microprocessor redundant core of the main controller fails, the main core is required to cut off the high-voltage relay.
The slave controller 202 is used for being placed inside the power battery to collect cell voltage, temperature information and the like of the battery inside the power battery.
The relevant description of the high-voltage positive relay 203, the charging positive relay 204, the high-voltage negative relay 205, the charging negative relay 206, the airbag controller (Airbag Control Unit, abbreviated as ACU) 207, and the main controller (Hybrid Control Unit, abbreviated as HCU) 208 of the hybrid system will be further explained in fig. 3.
Fig. 3 is a flowchart of a method of monitoring safety of a battery according to an embodiment of the present invention, as shown in fig. 3, the method may include the steps of:
step S301, collecting and monitoring the internal cell voltage of the power cell by using the slave controller.
In this embodiment, the cell voltage of the internal battery of the power battery may be collected from the controller and monitored, and the accuracy of the cell voltage needs to be maintained at 5 millivolts (mv) up and down.
Alternatively, the conditions that the hardware components of the slave controller need to meet for measurement of the cell voltage may be: the detection degree of single-point fault measurement (Single Point Faults Metric, SPFM) is more than or equal to 99 percent; the detection degree of potential fault measurement (Latent Fault Metric, abbreviated as LFM) is more than or equal to 90 percent; random hardware failure probability metric (Probabilistic Metric for random Hardware Failures, PMHF for short)<10 failure rate (FIT). Wherein 1FIT is defined as the part at 10 9 Failure rate of one functional failure occurs within an hour.
Alternatively, any cell voltage detected from the controller is below 0.5V or above 4.8V,any cell voltage measurement channel is open or short-circuited, and the slave controller can be at t a During this time, the battery voltage is reported to the main controller via the daisy chain. Wherein t is a Can be expressed as a functionally safe processing time, t in the present system a Is preferably 100-200 milliseconds (ms).
Alternatively, the main controller software should be at every t b All voltage measurements received from the controller, i.e. maximum cell voltage, minimum cell voltage, average cell voltage, are obtained by daisy-chaining over time with a voltage accuracy of + -5 mV. Wherein t is b Can be expressed as a functional safety recognition time, t in the present system b Is 300ms.
In step S302, the internal total voltage of the power battery collected by the high-voltage digital-to-analog converter is monitored.
In this embodiment, the internal total voltage of the power cell collected by the high voltage digital-to-analog converter may be used and monitored, i.e., the main controller at t a In time, the voltage of the power battery pack between the high-voltage sampling points A and D is measured by a high-voltage digital-analog converter (Digital to Analog Converter, DAC for short), and the detection error is +/-5 volts (V) or +/-1 percent.
Alternatively, the hardware design of the high voltage digital to analog converter module should satisfy: the detection degree of SPFM is more than or equal to 99%; the detection degree of the LFM is more than or equal to 90 percent; PMHF <10FIT.
Optionally, the main controller needs to at t when detecting that the high voltage digital-to-analog converter has a short circuit fault to the power supply a The set voltage detection value is invalid in time. That is, the main controller is to at t a In time, measuring the voltage between the sampling points B and D by a high-voltage digital-analog converter, and detecting the error by +/-5V or +/-1%; the main controller is to at t a In time, measuring the voltage between the sampling points C and D by a high-voltage digital-analog converter, and detecting the error by +/-5V or +/-1%; the main controller is to at t a In time, measuring the voltage between the sampling points E and A by a high-voltage digital-analog converter, and detecting the error by +/-5V or +/-1%; master controlThe preparation is to be at t a In time, the voltage between sampling points F and A is measured by a high-voltage digital-analog converter, and the detection error is + -5V or + -1%.
Optionally, the main controller is required to be at t when detecting the normally open and normally closed faults of the high-voltage positive relay, the high-voltage negative relay, the charging positive relay and the charging negative relay b And (5) making a corresponding prompt for the driver in time.
Optionally, when the voltage value detected by the high voltage digital-to-analog converter is valid, the main controller is to at t a And finishing the processing of the voltage data in time.
Step S303, monitoring the rationality of the battery voltage based on the internal cell voltage value and the internal total voltage value of the monitored power battery.
In this embodiment, the main controller sums all the voltages of the battery cells collected from the controller and compares the sum with the total voltage of the battery collected by the high-voltage digital-to-analog converter, and if the sum of the total voltages of the battery cells differs from the total voltage of the battery collected by the high-voltage digital-to-analog converter by more than 30V under the premise that the voltage data of the battery cells are valid and the total voltage data of the battery is valid, the main controller continues to perform t d After the time, the main controller reports a fault, prohibits charging and limits charging and discharging power, and if the fault fails to recover, t c After the time, the main controller cuts off the connection between the battery and the outside. Wherein t is c Can be represented as the safe handling time of this functional recovery, and the present system t c Is preferably 200ms.
Step S304, the state of the high-voltage relay is monitored.
In this embodiment, the state of the high-voltage relay can be monitored using the relevant data. The specific implementation mode can be as follows: the main controller takes t a The time is the period to detect the drive current and voltage of the relay. When the driving current of the high-voltage positive relay is more than 1 ampere (A), the voltage is more than 12V, B, the voltage between D is more than 200V, and the voltage signal collected by the high-voltage digital-analog converter is effective, the main controller needs to be at t b In the time, controlling the state of the high-voltage positive relay to be a closed state; when the driving current of the high-voltage negative relay is more than 1A,When the voltage signal collected by the high-voltage digital-analog converter is effective and the voltage is more than 12V, the main controller needs to be at t b The state of the high-voltage negative relay is controlled to be in a closed state in time; when the driving current of the charging positive relay is more than 1A, the voltage is more than 12V, C, the D-to-D voltage is more than 200V, and the voltage signal collected by the high-voltage digital-analog converter is effective, the main controller needs to be at t b The state of the charging positive relay is controlled to be in a closed state in time; when the driving current of the charging negative relay is more than 1A, the voltage is more than 12V, C, the D-to-D voltage is more than 200V, and the voltage signal collected by the high-voltage digital-analog converter is effective, the main controller needs to be at t b And controlling the state of the charging negative relay to be a closed state in time.
Optionally, the specific monitoring implementation manner may be: when the voltage signal collected by the high-voltage digital-analog converter is invalid, the hardware state of the high-voltage positive relay is a fault, and the driving state of the high-voltage positive relay is a fault, the main controller software is used for controlling the high-voltage digital-analog converter to control the high-voltage positive relay to be a fault, and the main controller software is used for controlling the high-voltage digital-analog converter to control the high-voltage positive relay to be a fault b Setting the state of the high-voltage positive relay as invalid in time; when the voltage signal collected by the high-voltage digital-analog converter is invalid, the hardware state of the high-voltage negative relay is a fault, and the driving state of the high-voltage negative relay is a fault, the main controller software is used for controlling the high-voltage digital-analog converter to control the high-voltage digital-analog converter to operate according to the state of the high-voltage digital-analog converter b Setting the state of the high-voltage negative relay as invalid in time; when the voltage signal collected by the high-voltage digital-analog converter is invalid, the hardware state of the charging positive relay is a fault, and the driving state of the charging positive relay is a fault, the main controller software is used for controlling the power supply to supply power to the charging positive relay at t b Setting the state of the charging positive relay as invalid in the time; when the voltage signal collected by the high-voltage digital-analog converter is invalid, the hardware state of the charging negative relay is a fault, and the driving state of the charging negative relay is a fault, the main controller software is used for controlling the power supply to be in a state of t b And setting the state of the charging negative relay to be invalid in the time.
In step S305, the open circuit current of the relay is monitored.
In this embodiment, the open circuit current of the relay may be monitored. The specific monitoring mode can be as follows: when the battery current exceeds 5A and the current signal is valid, the high-voltage positive relay is in an open state and the state is valid, and the high-voltage negative relay is in an open stateWhen the state is valid, the main controller is at t d All relays are turned off sequentially in time. Wherein t is d Can be expressed as functional safety tolerance time, then t in the system d Is 500ms.
Step S306, the hardware error of the relay is monitored.
In this embodiment, hardware errors of the relay may be monitored. The specific monitoring mode can be as follows: the main controller takes t a And detecting hardware driving states of the high-voltage positive relay, the high-voltage negative relay, the charging negative relay and the charging positive relay by taking time as a period. When the main controller detects that the driving state of the high-voltage positive relay is wrong, the main controller needs to at t c Setting a hardware state signal of the high-voltage positive relay as an error in time; when the main controller detects that the driving state of the high-voltage negative relay is wrong, the main controller needs to at t c Setting a hardware state signal of the high-voltage negative relay as an error in time; after the main controller detects that the driving state of the charging positive relay is wrong, the main controller needs to be at t c Setting a hardware state signal of the charging positive relay as an error in time; after the main controller detects that the driving state of the charging negative relay is wrong, the main controller needs to be at t c Setting a hardware state signal of the charging negative relay as an error in time; when the hardware state signal of the high-voltage positive relay or the high-voltage negative relay is wrong, if the high-voltage positive relay and the high-voltage negative relay are in the attraction state, the main controller will at t b The battery is forbidden to charge in time, the available charge and discharge power of the battery is reduced, and if the hardware state signal of the high-voltage positive relay or the high-voltage negative relay is that the error is not recovered, the main controller is used for controlling the power supply to charge the battery at t c After the time, the high-voltage positive relay and the high-voltage negative relay are disconnected; when the hardware state signal of the charging positive relay or the charging negative relay is wrong, if the charging positive relay and the charging negative relay are in the attraction state, the main controller will at t b Prohibiting battery charging and reducing available charge-discharge power of the battery in time, if the hardware state signal of the charge positive relay or the charge negative relay is error and is not recovered, the main controller at t c After the time, the charging positive relay and the charging negative relay are disconnectedAnd a relay.
Step S307, the time sequence of the relay is monitored.
In this embodiment, the timing of the relay may be monitored. The specific monitoring mode can be as follows: when the main controller does not have low-voltage power supply, the driving circuit of the main controller is forbidden to use; when the main controller is awakened, the initialization driving instructions of the high-voltage positive relay and the high-voltage negative relay are opened; when the driving circuit of the main controller is not powered, the default state of the relay is opened; when the driving circuit of the main controller is powered off, the relay should be at t act And is fully open in time. Wherein t is act The time for the relay to perform the action can be expressed, and the preferred value is 30-50ms; when the microprocessor of the main controller is in hardware reset or software reset, the state of the relay should be kept in the state before reset; in the high-voltage power-on process of the battery, the main controller is required to attract the high-voltage negative relay first until the voltage between the B and the E exceeds 95% of the sum of the voltages of the battery monomers, then the high-voltage positive relay is attracted, and if the high-voltage positive relay is detected to be attracted earlier than the high-voltage negative relay, or the voltage between the B and the E does not exceed 95% of the sum of the voltages of the battery monomers, the high-voltage positive relay is attracted, and then the main controller can immediately disconnect all the relays.
Step S308, monitoring the degradation mode of the main controller.
In this embodiment, the degraded mode of the master controller may be monitored. The specific monitoring mode can be as follows: when the main controller enters a safe state for limiting the battery charge and discharge power to 0 and the validity of the current signal is valid at the moment, and the actual charge and discharge current value of the battery is more than 10A and lasts for 2 seconds(s), the main controller needs to control the battery to charge and discharge at t a Disconnecting all high-voltage relays connected with the battery and the outside in time; when the main controller enters a safe state for limiting the charge and discharge power of the battery to 0 and the validity of the current signal is invalid at the moment, the main controller needs to at t a And all high-voltage relays connected with the outside are disconnected from the battery in time.
In step S309, the OTA upgrade is monitored.
In this embodiment, upgrades to the air download technology may be monitored. The specific monitoring mode can be as follows: the main controller software is provided with an OTA flag bit, and when the OTA flag bit is 'allowed', the main controller can update the software; when the main controller is at t a When the time is a period, a speed signal of the electric vehicle CAN be received on the CAN bus, and when the condition that the speed signal is valid, the speed signal is less than 5 kilometers per hour (km/h), the state indication of the battery relay is valid, the state of the battery relay is disconnected, and the central gateway requests an OTA upgrade signal to be 'request', the OTA mark position in the main controller software is 'permission'.
Step S310, the service life of the relay is monitored.
In this embodiment, the relay life may be monitored. The specific monitoring mode can be as follows: and when the voltage value detected by the high-voltage digital-analog converter is effective, the driving state of the high-voltage relay is effective, and the current detection signal is effective, the main controller monitors the times of carrying and opening of the high-voltage relay.
Optionally, when the service life of the high-voltage relay is monitored, the load opening current is set to be I, and the service life judgment load opening current threshold I is set 1 And I 2 And I 1 <I 2 . Setting the high-voltage relay to open current I under load 1 And I 2 Life span between M 1 (unit: times) with a load opening current greater than I 2 Lifetime at the time of M 2 (unit: times) when the main controller records the current I of the high-voltage relay 1 And I 2 Number of loaded opens C in between 1 Recording that the current of the high-voltage relay is larger than I 2 Number of load opening times C of (2) 2 When C 1 ≥M 1 When or C 2 ≥M 2 When the main controller reduces the allowable discharge power of the battery to 15% of the normal state; when the load is on and the current detection signal is invalid, the load is on with the current larger than I 2 Record C 2 Is a number of times (1).
Step S311, the shutdown path of the power battery is monitored.
In this embodiment, the shutdown path of the power cell may be monitored. The specific monitoring mode can be as follows: the main controller adopts bilateral driving to two sides of the high-voltage relay driving coil and monitors the current of the coil driving loop, when any side of the bilateral driving is disconnected, if the current of the coil driving loop is more than 200 milliamperes (mA), the duration exceeds t b Time, judging that the high-voltage relay has turned off the path fault; when the two sides of the double-sided drive are closed, if the coil drive loop current is less than 150mA and the duration exceeds t b And (5) judging the fault of the high-voltage relay turn-off path.
Optionally, after detecting a failure of the high-voltage relay turn-off path, the main controller enters a safe state for prohibiting the battery from outputting the external output again, that is, if the battery is outputting the external output at this time, the main controller keeps an output state, and prohibits the next external output after the battery stops outputting the external output; and if the battery is not externally output at the moment, the battery is forbidden to externally output.
Step S312 protects the CAN input converter.
In this embodiment, the input converter of the CAN may be protected. Specific embodiments may be: the main controller software performs rolling counting and cyclic redundancy check (Cyclic Redundancy Check, CRC for short) check diagnosis on signals communicated by the main controller, the direct current charger and the alternating current charger of the hybrid power system, and the diagnosis coverage rate is more than or equal to 99%.
Optionally, the hamming distance between the main controller and the CRC data of the communication nodes of the main controller, the direct-current charger and the alternating-current charger of the hybrid power system is more than or equal to 3.
Step S313, protecting the end-to-end of CAN communication.
In this embodiment, the end-to-end of CAN communications may be protected. The specific protection content is as follows: CRC (cyclic redundancy check) of data, addition of a cyclic sequence counting signal in each message, checking whether a counting value is correct or not by a message receiving end, overtime detection of the message and ID detection of the message. And the main controller performs end-to-end protection on each message transmitted on the CAN.
In step S314, the data of the rom is protected.
In this embodiment, the data of the read-only memory can be protected. The specific protection content is as follows: the ROM of the main controller stores internal calibration data to be protected through CRC; the service life evaluation data of the high-voltage relay stored in the ROM of the main controller is protected by CRC; when the main controller is in a working state, every t a The time period carries out one-time check on the data needing CRC check, if the data check result is error, the main controller needs to carry out the T d The high-voltage relay is sequentially disconnected in time.
In step S315, the data of the random access memory is protected.
In this embodiment, the data of the random access memory may be protected. The specific protection content is as follows: when the main controller is in a working state, every t a Performing CRC check on the RAM data once in a time period, judging that the RAM data is damaged when the CRC check fails, and determining that the RAM data is damaged when the main controller detects the RAM data damage at t e And executing software reset in time. Wherein t is e Can be expressed as a functionally safe minimum logic period, and in the present system, t e Is preferably 10-20ms.
Step S316, the microprocessor software is protected.
In this embodiment, the microprocessor software may be protected. The specific protection content is as follows: the main controller takes t e And the time is a period, and random failure detection is carried out on the hardware circulation. When the main controller detects a hardware random failure fault, at t e Resetting the hardware in time; the main controller takes t e The time is a period, and data overflow and program clamping stagnation detection are carried out on the software circulation; after the main controller detects data overflow and program stuck fault, at t e Resetting hardware or software in time; the main controller performs partition management on the RAM data to prevent the key data from being covered by other functions.
In step S317, the battery collision signal is monitored.
In this embodiment, the battery collision signal may be monitored. The specific monitoring mode can be as follows: the main controller takes t e The method comprises the steps that a CAN signal of an air bag controller is received periodically, when an electric vehicle collides, an ACU sends a collision trigger signal to a main controller through a CAN bus and a hard wire, the main controller checks the correctness of the collision signal sent to the CAN bus by the ACU, and when the end-to-end check CAN signal of the ACU is detected to be wrong by the main controller and is not triggered at the moment, the main controller sets the collision signal transmitted by the ACU on the CAN to be invalid; when the CAN collision signal of the ACU is effective and the collision information of the CAN collision signal is collision trigger, the main controller at t crash The CAN collision signal is set to be 'collision' in time. Wherein t is crash Can be expressed as a period of time for the main controller to handle collision hazards, and t crash Is preferably 10ms.
Optionally, the monitoring mode for monitoring the battery collision signal may further be: the main controller takes t e The time is the period of detecting the PWM hard-wire signal from the ACU. When the main controller detects that the PWM hard-wire signal of the ACU is open circuit to the ground, open circuit to the power supply, open circuit to the signal and out of range of the signal frequency, the main controller at t crash Setting the PWM hard wire collision signal to be invalid in time; when the main controller monitors that the CAN collision signal and the PWM hard wire collision signal of the ACU are invalid, the main controller needs to perform the following operation at t crash And limiting the charge and discharge power in time. When the main controller monitors that the PWM signal state of the ACU is valid and the PWM hard-wire signal of the ACU indicates that the collision state is collision triggering, the main controller needs to perform the operation at t crash During the time, the PWM hard-wire signal is set to "bump" occurrence. Wherein t is crash Can be expressed as the time period, t, of the main controller to handle the collision hazard crash Is preferably 10ms. When the main controller monitors that the CAN collision signal of the ACU is collision or the PWM hard-wire signal is collision, the main controller at t relay And all high-voltage relays connected with the outside are disconnected from the battery in time. Wherein, time t relay Consisting of two parts, i.e. t relay ＝t drive +t act ,t drive Can be expressed as the time for the main controller to drive the relay, the preferred value of this time being 1ms, t act Can be expressed as the time for which the relay performs the action, which is preferably 30-50ms, thus t relay Is preferably 31-51ms.
In the above steps S301 to S317 of the present embodiment, the internal battery cell voltage of the power battery is collected from the controller and monitored, then the internal total voltage of the power battery collected by the high-voltage digital-analog converter is used to monitor, based on the internal battery cell voltage value and the internal total voltage value of the power battery, the rationality of the battery voltage is monitored, and then the state of the high-voltage relay CAN be monitored, the open-circuit current of the relay is monitored, the hardware error of the relay is monitored, the time sequence of the relay is monitored, the degradation mode of the main controller is monitored, the upgrading of the air downloading technology is monitored, the service life of the relay is monitored, the shutdown path of the power battery is monitored, the input converter of the CAN is protected, the end-to-end of-CAN communication is protected, the data of the read-only memory is protected, the data of the random access memory is protected, the microprocessor software is protected, and the battery collision signal is monitored, thereby solving the technical problem that the reliability of the battery management system for processing the battery fault signal is poor, and improving the technical effect of the battery management system for processing the fault signal.
Fig. 4 is a schematic view of a safety monitoring device for a battery according to an embodiment of the present invention, and as shown in fig. 4, the device may include: a parameter monitoring module 401, a collision monitoring module 402, a data protection module 403, and a safety execution module 404.
The parameter monitoring module 401 is configured to monitor a battery cell voltage, a battery total voltage, a battery voltage rationality, a BMS relay state, a relay open circuit current, a relay hardware error, a relay time sequence, a master controller degradation mode, an OTA upgrading process, a relay lifetime, and a relay turn-off path.
The collision monitoring module 402 is configured to monitor a collision signal sent by the air bag controller.
The data protection module 403 is configured to protect the input converter of the CAN, the end-to-end of the CAN communication, the ROM data of the main controller, the RAM data of the main controller, and the software of the microprocessor.
A safety execution module 404 for disconnecting all high voltage relays of the battery from the outside.
In the embodiment, through the parameter monitoring module, the battery cell voltage, the total battery voltage, the battery voltage rationality, the BMS relay state, the relay open circuit current, the relay hardware error, the relay time sequence, the main controller degradation mode, the OTA upgrading process, the relay service life and the relay turn-off path can be monitored; the collision monitoring module is used for monitoring collision signals sent by the air bag controller; the data protection module is used for protecting the input converter of the CAN, the end-to-end of CAN communication, ROM data of the main controller, RAM data of the main controller and software of the microprocessor; and the safety execution module is used for disconnecting all high-voltage relays connected with the battery and the outside, so that the technical problem that the reliability of the battery management system for processing the battery fault signals is poor is solved, and the technical effect of the battery management system for processing the battery fault signals is improved.
Fig. 5 is a flowchart of a method for monitoring the functional safety of a battery according to an embodiment of the present invention, and as shown in fig. 5, specific steps of the method may include:
step S501, acquiring monitoring parameters or monitoring states of a vehicle collision, a battery state, data transmission and protection, a battery control function, a battery system shutdown path.
Step S502, monitoring collision signals, and judging whether the battery collides according to monitoring parameters.
Step S503, executing the safety control function according to the determination result of whether the battery collides.
In this embodiment, according to the determination result of step S502 to determine whether the battery is crashed, the corresponding safety control function is executed.
Fig. 6 is a flowchart of another battery safety monitoring method according to an embodiment of the present invention, and as shown in fig. 6, specific steps of the method may include:
in step S601, the system is started.
In step S602, the system status is monitored.
Step S603, judging whether the system has faults according to the monitored system state.
In this embodiment, whether the system fails or not may be determined according to the monitored system state, if the system fails, step S609 is performed, and if the system does not fail, step S604 is performed.
In step S604, the system data is protected.
Step S605 determines whether an error occurs in the system data.
In this embodiment, it may be determined whether the system data is in error, if the system data is in error, step S609 is performed, and if the system data is not in error, step S606 is performed.
In step S606, the collision signal is monitored.
In step S607, it is determined whether the battery collides.
In this embodiment, it may be determined whether the battery has collided, if it is determined that the battery has collided, step S608 is performed, and if it is determined that the battery has not collided, step S602 is performed.
Step S608, the high voltage contactor is disconnected.
Step S609, the driver is prompted that the system is malfunctioning.
In step S610, the task ends.
In this embodiment, after the system is started, the system state is monitored, whether the system fails or not is judged according to the monitored system state, if so, a driver is prompted, if not, the system data is required to be protected, so that whether the system data is wrong or not is judged, then the collision signal is monitored, whether the battery collides or not is judged, if so, the high-voltage connector is required to be disconnected, if not, the system state is required to be continuously monitored, so that the technical problem of poor reliability of the battery management system in processing the battery fault signal is solved, and the technical effect of the battery management system in processing the battery fault signal is improved.
Example 3
According to an embodiment of the present invention, there is provided a signal processing apparatus of a battery management system. It should be noted that the signal processing device of the battery management system may be used to perform the signal processing method of the battery management system in embodiment 1.
Fig. 7 is a schematic diagram of a signal processing apparatus of a battery management system according to an embodiment of the present invention. As shown in fig. 7, a signal processing apparatus 700 of a battery management system may include: a monitoring unit 701, a verification unit 702, and a determination unit 703.
The monitoring unit 701 is configured to monitor an operation condition of a subsystem in a battery management system of the vehicle, and obtain monitoring data.
And the verification unit 702 is configured to determine that the battery management system is in a normal working state based on the monitoring data, and control the battery management system to verify the received battery fault signal to obtain a first verification result, where the battery fault signal is obtained by monitoring the power battery by the vehicle.
And a determining unit 703, configured to determine, based on the fault information in the battery fault signal, a fault state of the power battery in response to the first verification result being that the battery fault signal is valid, where the fault state is used to characterize whether the power battery has a fault.
Optionally, the monitoring data includes system state data of the subsystem in the driving state and system data generated by the subsystem in the driving state, and the verification unit 702 may include: and the first determining unit is used for responding to the fault data of the subsystem which is not contained in the system state data and is valid, and determining that the battery management system is in a normal working state, wherein the fault data is used for representing that the subsystem breaks down.
Alternatively, the verification unit 702 may include: the acquisition module is used for carrying out cyclic redundancy check on the system data to obtain a second check result; and the first determining module is used for determining that the system data is valid in response to the fact that the second checking result is that the system data is complete.
Optionally, the battery fault signal includes a bus fault signal and a hard wire fault signal, and the verification unit 702 may include: the control module is used for controlling the battery management system to check the bus fault signal to obtain a third check result and/or controlling the battery management system to check the hard wire fault signal to obtain a fourth check result; and the second determining module is used for responding to the third checking result to represent that the bus fault signal is valid and/or the fourth checking result to represent that the hard wire fault signal is valid, and determining that the first checking result is the battery fault signal valid.
Alternatively, the determining unit 703 may include: and the third determining module is used for responding to the fault information in the bus fault signal and generating by the fault event trigger of the battery, and/or generating by the fault information in the hard wire fault signal and determining that the fault state is that the power battery breaks down.
Optionally, the apparatus further comprises: and the control unit is used for responding to the fault of the power battery, at least controlling the battery management system to disconnect the high-voltage contactor of the power battery, and sending prompt information to the vehicle, wherein the prompt information is used for indicating the fault of the power battery to the vehicle.
In the embodiment, the operation condition of a subsystem in a battery management system of a vehicle is monitored by a monitoring unit to obtain monitoring data; the verification unit is used for determining that the battery management system is in a normal working state based on the monitoring data, and controlling the battery management system to verify the received battery fault signal to obtain a first verification result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle; the determining unit is used for responding to the first checking result to be effective in the battery fault signal and determining the fault state of the power battery based on the fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not, so that the technical problem that the reliability of the battery management system for processing the battery fault signal is poor is solved, and the technical effect of the battery management system for processing the battery fault signal is improved.
Example 4
According to an embodiment of the present invention, there is also provided a computer-readable storage medium including a stored program, wherein the device in which the computer-readable storage medium is controlled to execute the signal processing method of the battery management system in embodiment 1 when the program runs.
Example 5
According to an embodiment of the present invention, there is also provided a processor for running a program, wherein the program executes the signal processing method of the battery management system in embodiment 1 when running.
Example 6
According to an embodiment of the present invention, there is also provided a vehicle characterized by being used to perform the signal processing method of the battery management system in embodiment 1.
The foregoing embodiment numbers of the present invention are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.
In the foregoing embodiments of the present invention, the descriptions of the embodiments are emphasized, and for a portion of this disclosure that is not described in detail in this embodiment, reference is made to the related descriptions of other embodiments.
In the several embodiments provided in the present invention, it should be understood that the disclosed technology may be implemented in other manners. The above-described embodiments of the apparatus are merely exemplary, and the division of units may be a logic function division, and there may be another division manner in actual implementation, for example, multiple units or components may be combined or integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be through some interfaces, units or modules, or may be in electrical or other forms.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed over a plurality of units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.
The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in essence or a part contributing to the prior art or all or part of the technical solution in the form of a software product stored in a storage medium, comprising several instructions for causing a computer device (which may be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method of the various embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a removable hard disk, a magnetic disk, or an optical disk, or other various media capable of storing program codes.
The foregoing is merely a preferred embodiment of the present invention and it should be noted that modifications and adaptations to those skilled in the art may be made without departing from the principles of the present invention, which are intended to be comprehended within the scope of the present invention.

Claims (10)

1. A signal processing method of a battery management system, comprising:
monitoring the running state of a subsystem in a battery management system of the vehicle to obtain monitoring data;
based on the monitoring data, determining that the battery management system is in a normal working state, and controlling the battery management system to check the received battery fault signal to obtain a first check result, wherein the battery fault signal is obtained by monitoring a power battery by the vehicle;
and responding to the first verification result to be that the battery fault signal is valid, and determining a fault state of the power battery based on fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not.
2. The method of claim 1, wherein the monitoring data comprises system state data for the subsystem in a drive state and system data generated for the subsystem in the drive state,
Based on the monitoring data, determining that the battery management system is in a normal working state comprises:
and responding to the system state data, wherein the fault data of the subsystem are not contained, and the system data are valid, and determining that the battery management system is in the normal working state, wherein the fault data are used for representing that the subsystem breaks down.
3. The method according to claim 2, wherein the method further comprises:
performing cyclic redundancy check on the system data to obtain a second check result;
and determining that the system data is valid in response to the second check result being that the system data is complete.
4. The method of claim 1, wherein the battery fault signal comprises a bus fault signal and a hard-wire fault signal, and wherein controlling the battery management system to verify the received battery fault signal to obtain a first verification result comprises:
controlling the battery management system to check the bus fault signal to obtain a third check result, and/or controlling the battery management system to check the hard wire fault signal to obtain a fourth check result;
And responding to the third check result to represent that the bus fault signal is valid, and/or the fourth check result to represent that the hard wire fault signal is valid, and determining that the first check result is the battery fault signal to be valid.
5. The method of claim 4, wherein determining the fault condition of the power battery based on fault information in the battery fault signal comprises:
the fault state is determined to be a fault of the power battery in response to the fault information in the bus fault signal being generated by a fault event trigger of the battery and/or the fault information in the hard-line fault signal being generated by the fault event trigger.
6. The method according to claim 1, wherein the method further comprises:
and responding to the failure of the power battery, at least controlling the battery management system to disconnect a high-voltage contactor of the power battery, and sending prompt information to the vehicle, wherein the prompt information is used for indicating the failure of the power battery to the vehicle.
7. A signal processing apparatus of a battery management system, comprising:
The monitoring unit is used for monitoring the running state of the subsystem in the battery management system of the vehicle to obtain monitoring data;
the verification unit is used for determining that the battery management system is in a normal working state based on the monitoring data, controlling the battery management system to verify the received battery fault signal to obtain a first verification result, wherein the battery fault signal is obtained by monitoring the power battery by the vehicle;
and the determining unit is used for responding to the first check result to be that the battery fault signal is valid, and determining the fault state of the power battery based on the fault information in the battery fault signal, wherein the fault state is used for representing whether the power battery has a fault or not.
8. A computer-readable storage medium, characterized in that the computer-readable storage medium includes a stored program, wherein the program, when run, controls a device in which the computer-readable storage medium is located to execute the signal processing method of the battery management system according to any one of claims 1 to 6.
9. A processor for executing a program, wherein the program when executed by the processor performs the signal processing method of the battery management system according to any one of claims 1 to 6.
10. A vehicle characterized by being configured to execute the signal processing method of the battery management system according to any one of claims 1 to 6.
CN202310274215.1A 2023-03-20 2023-03-20 Signal processing method and device for battery management system and storage medium Pending CN116278953A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310274215.1A CN116278953A (en) 2023-03-20 2023-03-20 Signal processing method and device for battery management system and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310274215.1A CN116278953A (en) 2023-03-20 2023-03-20 Signal processing method and device for battery management system and storage medium

Publications (1)

Publication Number Publication Date
CN116278953A true CN116278953A (en) 2023-06-23

Family

ID=86830233

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310274215.1A Pending CN116278953A (en) 2023-03-20 2023-03-20 Signal processing method and device for battery management system and storage medium

Country Status (1)

Country Link
CN (1) CN116278953A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117289144A (en) * 2023-11-27 2023-12-26 宁德时代新能源科技股份有限公司 Fault positioning method, device, equipment, system and medium

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117289144A (en) * 2023-11-27 2023-12-26 宁德时代新能源科技股份有限公司 Fault positioning method, device, equipment, system and medium
CN117289144B (en) * 2023-11-27 2024-04-19 宁德时代新能源科技股份有限公司 Fault positioning method, device, equipment, system and medium

Similar Documents

Publication Publication Date Title
CN108367681B (en) Automatic overlapping device and method for charging line control device of electric automobile
US8269462B2 (en) State monitoring apparatus for assembled battery
CN102893448B (en) The control device of secondary cell and control method
CN116278953A (en) Signal processing method and device for battery management system and storage medium
US9573472B2 (en) Battery control system and vehicle control system
CN110838609A (en) Power battery thermal runaway protection method, device and system
CN112435428B (en) New energy automobile and fire alarm system and method thereof
CN109484185A (en) Power battery system low-voltage power supply fault diagnosis method and device and electric automobile
KR20180023140A (en) Power Relay Assembly fault controlling system and the method thereof
JP6983991B2 (en) Battery control device
US9941721B2 (en) System for managing the charging of a storage battery
CN110036305A (en) For running the method and battery management device thus of the traction battery group of motor vehicle
CN111993891B (en) Electric vehicle data storage device and control method and monitoring system thereof
EP2618419B1 (en) Over-current protection method for lithium battery and device thereof
CN115817272A (en) Battery management system, electric quantity monitoring method and device thereof, and new energy automobile
CN112026583A (en) Method and system for detecting battery pack and vehicle
CN116572745A (en) Power battery fault processing method, device and storage medium
CN116298478A (en) Power battery function safety detection method and device and vehicle
CN116298948A (en) Method and device for monitoring safety of vehicle power battery function and storage medium
CN116400221A (en) Method for testing safety function of battery management system
KR20140063170A (en) Power switching device for high voltage battery in vehicle and control method thereof
CN112009251B (en) Electric vehicle battery replacement system diagnosis method
CN116176282B (en) Safety monitoring method and device for power battery system and vehicle
CN113646648B (en) Method and system for detecting connection failure of parallel battery units
CN114013281A (en) Power-off method and device for new energy automobile

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination