Parameter protection method and device of battery controller, vehicle and storage medium

Abstract

The invention relates to a parameter protection method and device of a battery controller, a vehicle and a storage medium, and relates to the technical field of computers. The method comprises the following steps: acquiring a current parameter value of a target configuration parameter of the battery controller in an operation process of the battery controller; the target configuration parameters comprise fixed parameters and / or dynamic parameters; under the condition that the current parameter value of the target configuration parameter meets the preset condition, replacing the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter; the preset condition comprises that the current parameter value of the fixed parameter is not equal to the initial parameter value of the fixed parameter under the condition that the target configuration parameter comprises the fixed parameter, and / or the current parameter value of the dynamic parameter is not located in the safety parameter range when the battery controller normally operates under the condition that the target configuration parameter comprises the dynamic parameter. Therefore, the target configuration parameters of the battery controller are enabled to operate in the safety parameter range, and the stability and the safety of the battery controller are improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to the field of new energy vehicle battery controller technology, and specifically to a parameter protection method, device, vehicle and storage medium for a battery controller. Background Art

[0002] The battery controller is an important component of new energy vehicles, mainly used for vehicle power monitoring, power protection, and battery performance management. The battery controller has a high degree of functional integration, and the hardware generally uses a heterogeneous single chip with stronger performance and higher computing power. Due to the limited resources of the peripherals on the chip, it is inevitable that multiple applications read and write the parameter values ​​of the same module in the battery controller at the same time. Although the operating system of the battery controller provides a resource protection mechanism, it cannot completely avoid the failure of this function. In addition, for the dynamically configured parameter values ​​in the battery controller, the written parameter values ​​may be incorrect or exceed the valid range due to reasons such as memory leaks, and there is a risk that the configured parameter values ​​do not meet expectations, or the parameter values ​​that have been set by the battery controller may change due to factors such as the external environment, which does not meet expectations.

[0003] CN105138929B discloses setting locking control information for registers, and controlling the write operation of registers through locking control information. Through the attributes of the address, the corresponding register lock is found, and the register access attributes in the control module are controlled, and the locked registers are not allowed to be modified. CN114297965A discloses obtaining the first character of the register, comparing the first character with the preset reset value, and obtaining the comparison result to determine the reset verification result of the register. When the comparison result is that the first character is consistent with the preset reset value, the reset value of the register is normal, and when the comparison result is that the first character is inconsistent with the preset reset value, the reset value of the register is abnormal. The above two methods are to set the parameter value of the key module in the battery controller to an unmodifiable mode, or lock the parameter value of the key module in the battery controller to avoid the parameter value from changing, but these two methods cannot prevent the battery controller from being affected by factors such as the external environment. Therefore, how to avoid unexpected changes in the parameter value of the key module in the battery controller is a technical problem that needs to be solved urgently. Summary of the invention

[0004] The present application provides a parameter protection method, device, vehicle and storage medium for a battery controller, so as to at least solve the technical problem in the related art that the parameter values ​​of key modules in the battery controller are prone to unexpected changes. The technical solution of the present application is as follows:

[0005] According to a first aspect of the present application, a parameter protection method for a battery controller is provided, the method comprising: during the operation of the battery controller, obtaining a current parameter value of a target configuration parameter of the battery controller; the target configuration parameter comprises a fixed parameter and / or a dynamic parameter; when the current parameter value of the target configuration parameter satisfies a preset condition, replacing the current parameter value of the target configuration parameter with an initial parameter value of the target configuration parameter; the preset condition comprises: when the target configuration parameter comprises a fixed parameter, the current parameter value of the fixed parameter is not equal to the initial parameter value of the fixed parameter, and / or, when the target configuration parameter comprises a dynamic parameter, the current parameter value of the dynamic parameter is not within a safe parameter range during normal operation of the battery controller.

[0006] According to the above-mentioned technical means, during the operation of the battery controller, by detecting the current parameter value of the target configuration parameter, in the event of a failure of the target configuration parameter, the target configuration parameter is restored based on the initial parameter value of the target configuration parameter, so that the target configuration parameter of the battery controller operates within a safe parameter range, thereby increasing the stability and safety of the battery controller, avoiding the target configuration parameter value being incorrect or exceeding the valid range due to failure of the battery controller's protection mechanism, memory leakage, etc., and improving the working efficiency of the battery controller.

[0007] In a possible implementation, when the target configuration parameter includes a dynamic parameter, the initial parameter value of the dynamic parameter is determined based on the safety parameter range. The battery operates within the safety parameter range to ensure that the battery is always in a safe state during startup and operation.

[0008] According to the above technical means, the initial parameter value of the dynamic parameter is within the safety parameter range, so that the battery controller can operate safely based on the initial parameter value of the dynamic parameter, avoiding the battery controller from operating under inappropriate dynamic parameters, improving the reliability of the battery controller, and reducing the wear of the battery managed by the battery controller, extending the service life.

[0009] In another possible implementation, the method further includes: counting the number of times that the parameter value of the target configuration parameter meets a preset condition during the operation of the battery controller; and resetting the target configuration parameter when the number exceeds a first preset number.

[0010] According to the above-mentioned technical means, when the number of times the parameter value of the target configuration parameter meets the preset conditions exceeds the first preset number of times, it indicates that there may be potential problems inside the battery controller. The target configuration parameter is reset so that the target configuration parameter is restored to the initial state, thereby reducing the risk of instability of the battery controller and reducing failures caused by incorrect target configuration parameters.

[0011] In another possible implementation, the target configuration parameters are reset, including: when the battery controller does not have an independent reset function, resetting the chip of the battery controller and restarting the battery controller; when the battery controller has an independent reset function, resetting the target configuration parameters and entering a safe mode; in the safe mode, the battery managed by the battery controller can be charged and discharged normally.

[0012] According to the above technical means, when the battery controller does not have an independent reset function, the normal operation of the battery controller can be quickly restored by resetting the chip and restarting the battery controller. When the battery controller has an independent reset function, resetting the target configuration parameters and entering the safe mode will help the battery controller to operate stably and prevent failures caused by incorrect target configuration parameters. In addition, the safe mode can ensure that after the target configuration parameters are reset, the batteries managed by the battery controller can be charged and discharged under safe conditions, reducing safety risks.

[0013] In another possible implementation, the method further includes: locking the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters; and executing the control strategy of the battery controller based on the locking of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters.

[0014] According to the above technical means, the locking mechanism ensures that the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters are not easily changed, avoiding the misoperation of changing the initial parameter values ​​and safety parameter range, and improving the safety and stability of the battery controller. In addition, the locking mechanism ensures the consistency of the initial parameter values ​​and safety parameter ranges during the life cycle of the battery controller, which helps to improve the performance and reliability of the battery controller.

[0015] In another possible embodiment, the above method also includes: executing the control strategy of the battery controller based on the locking status of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters, including: if the locking of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters is unsuccessful, re-acquiring the initial parameter values ​​of the fixed parameters and / or the safety parameter range of the dynamic parameters.

[0016] According to the above-mentioned technical means, in the case of unsuccessful locking, there is a risk that the initial parameter value and safety parameter range of the unsuccessful locking are changed by mistaken operation. The initial parameter value and / or safety parameter range are re-acquired, so that the battery controller operates based on the accurate initial parameter value and safety parameter range, avoiding control errors caused by errors in the initial parameter value and safety parameter range, and improving the safety and reliability of the battery controller.

[0017] In another possible implementation, based on the locking status of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters, a control strategy of the battery controller is executed, including: counting the number of unsuccessful locking of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters; when the number of unsuccessful locking is greater than a second preset number, issuing an alarm message; the alarm message is used to indicate that a failure has occurred in the locking of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters.

[0018] According to the above technical means, by counting the number of locking failures, it is possible to quickly discover problems with the locking mechanism of the battery controller, issue an alarm and take corresponding safety measures in a timely manner to avoid further impact on the battery controller and reduce faults caused by errors in initial parameter values ​​and safety parameter ranges caused by the locking mechanism.

[0019] In another possible implementation, based on the locking status of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters, a control strategy of the battery controller is executed, including: when the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters are successfully locked, counting the number of abnormal accesses; the abnormal access is a request to modify the locked initial parameter values ​​of the fixed parameters and / or the locked safety parameter range of the dynamic parameters; when the number of abnormal accesses is greater than a third preset number, entering a safe mode; in the safe mode, the battery managed by the battery controller can charge and discharge normally.

[0020] According to the above technical means, by counting the number of abnormal accesses, potential security threats in the battery controller are identified, and when the number of abnormal accesses is greater than a third preset number, the safety mode is entered to improve the safety and stability of the battery controller.

[0021] According to the second aspect provided by the present application, a parameter protection device for a battery controller is provided, and the device includes: an acquisition module and a replacement module. The acquisition module is used to acquire the current parameter value of the target configuration parameter of the battery controller during the operation of the battery controller; the target configuration parameter includes a fixed parameter and / or a dynamic parameter; the replacement module is used to replace the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter when the current parameter value of the target configuration parameter meets the preset conditions; the preset conditions include: when the target configuration parameter includes a fixed parameter, the current parameter value of the fixed parameter is not equal to the initial parameter value of the fixed parameter, and / or, when the target configuration parameter includes a dynamic parameter, the current parameter value of the dynamic parameter is not within the safe parameter range when the battery controller is operating normally.

[0022] In a possible implementation, when the target configuration parameter includes a dynamic parameter, an initial parameter value of the dynamic parameter is determined based on a safety parameter range.

[0023] In another possible implementation, the device further includes: a statistical module and a reset module. The statistical module is used to count the number of times the parameter value of the target configuration parameter meets the preset condition during the operation of the battery controller; the reset module is used to reset the target configuration parameter when the number exceeds a first preset number.

[0024] In another possible implementation, the reset module is specifically used to reset the chip of the battery controller and restart the battery controller when the battery controller does not have an independent reset function; when the battery controller has an independent reset function, reset the target configuration parameters and enter a safe mode; in the safe mode, the battery managed by the battery controller can be charged and discharged normally.

[0025] In another possible implementation, the device further includes: a locking module and an execution module. The locking module is used to lock the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter; the execution module is used to execute the control strategy of the battery controller based on the locking status of the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter.

[0026] In yet another possible implementation, the execution module is specifically configured to reacquire the initial parameter value of the fixed parameter and / or the security parameter range of the dynamic parameter when the initial parameter value of the fixed parameter and the security parameter range of the dynamic parameter are not locked successfully.

[0027] In another possible implementation, the execution module is specifically used to count the number of unsuccessful locking attempts of the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters; when the number of unsuccessful locking attempts is greater than a second preset number, an alarm message is issued; the alarm message is used to indicate that a failure has occurred in the locking of the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters.

[0028] In another possible implementation, the execution module is specifically used to count the number of abnormal accesses when the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters are successfully locked; the abnormal access is an access request to modify the locked initial parameter values ​​of the fixed parameters and / or the locked safety parameter range of the dynamic parameters; when the number of abnormal accesses is greater than a third preset number, enter a safe mode; in the safe mode, the battery managed by the battery controller can charge and discharge normally.

[0029] According to the third aspect provided by the present application, a vehicle is provided, comprising: a processor; a memory for storing processor executable instructions; wherein the processor is configured to execute instructions to implement the method of the above-mentioned first aspect and any possible implementation manner thereof.

[0030] According to the fourth aspect provided by the present application, a computer-readable storage medium is provided. When the instructions in the computer-readable storage medium are executed by the processor of the vehicle, the vehicle is enabled to execute the method in the above-mentioned first aspect and any possible implementation method thereof.

[0031] According to the fifth aspect provided by the present application, a computer program product is provided, the computer program product comprising computer instructions, and when the computer instructions are executed on a vehicle, the vehicle executes the method of the above-mentioned first aspect and any possible implementation manner thereof.

[0032] Therefore, the above technical features of the present application have the following beneficial effects:

[0033] (1) During the operation of the battery controller, by detecting the current parameter value of the target configuration parameter, in the event of a target configuration parameter failure, the target configuration parameter is restored based on the initial parameter value of the target configuration parameter, so that the target configuration parameter of the battery controller operates within the safe parameter range, thereby increasing the stability and safety of the battery controller, avoiding the target configuration parameter value being incorrect or out of the valid range due to failure of the battery controller's protection mechanism, memory leakage, etc., and improving the working efficiency of the battery controller.

[0034] (2) The initial parameter values ​​of the dynamic parameters are within the safety parameter range, so that the battery controller can operate safely based on the initial parameter values ​​of the dynamic parameters, avoiding the battery controller from operating under inappropriate dynamic parameters, improving the reliability of the battery controller, and reducing the wear of the batteries managed by the battery controller, thereby extending the service life.

[0035] (3) When the number of times the parameter value of the target configuration parameter meets the preset conditions exceeds the first preset number of times, it indicates that there may be potential problems inside the battery controller. The target configuration parameter is reset so that the target configuration parameter is restored to the initial state, thereby reducing the risk of instability of the battery controller and reducing failures caused by incorrect target configuration parameters.

[0036] (4) When the battery controller does not have an independent reset function, the normal operation of the battery controller can be quickly restored by resetting the chip and restarting the battery controller. When the battery controller has an independent reset function, resetting the target configuration parameters and entering the safe mode will help the battery controller to operate stably and prevent failures caused by incorrect target configuration parameters. In addition, the safe mode can ensure that after the target configuration parameters are reset, the batteries managed by the battery controller can be charged and discharged under safe conditions, reducing safety risks.

[0037] (5) The locking mechanism ensures that the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters will not be easily changed, avoiding the accidental change of the initial parameter values ​​and safety parameter range, and improving the safety and stability of the battery controller. In addition, the locking mechanism ensures the consistency of the initial parameter values ​​and safety parameter ranges during the life cycle of the battery controller, which helps to improve the performance and reliability of the battery controller.

[0038] (6) In the event of an unsuccessful locking, there is a risk that the initial parameter value and safety parameter range of the unsuccessful locking may be changed by an incorrect operation. The initial parameter value and / or safety parameter range can be re-acquired so that the battery controller can operate based on the accurate initial parameter value and safety parameter range, thereby avoiding control errors caused by errors in the initial parameter value and safety parameter range, and improving the safety and reliability of the battery controller.

[0039] (7) By counting the number of locking failures, it is possible to quickly discover problems with the locking mechanism of the battery controller, issue an alarm, and take corresponding safety measures in a timely manner to avoid further impact on the battery controller and reduce faults caused by errors in the initial parameter values ​​and safety parameter ranges caused by the locking mechanism.

[0040] (8) By counting the number of abnormal accesses, potential security threats in the battery controller are identified, and when the number of abnormal accesses is greater than a third preset number, the battery controller enters a safe mode to improve the safety and stability of the battery controller.

[0041] It should be noted that the technical effects brought about by any implementation method in the second to fifth aspects can refer to the technical effects brought about by the corresponding implementation method in the first aspect, and will not be repeated here.

[0042] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present application, and together with the specification are used to explain the principles of the present application, and do not constitute an improper limitation on the present application.

[0044] Figure 1 is a structural schematic diagram of a parameter protection system of a battery controller according to an exemplary embodiment;

[0045] Figure 2 is a flow chart of a parameter protection method of a battery controller according to an exemplary embodiment;

[0046] Figure 3is a schematic diagram of configuration parameters in a battery controller according to an exemplary embodiment;

[0047] Figure 4 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment;

[0048] Figure 5 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment;

[0049] Figure 6 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment;

[0050] Figure 7 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment;

[0051] Figure 8 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment;

[0052] Fig. 9 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment;

[0053] Fig.10 is a flow chart showing a method of obtaining a current parameter value of a battery controller according to an exemplary embodiment;

[0054] Fig.11 is a flow chart showing a method of processing fixed parameters of a battery controller according to an exemplary embodiment;

[0055] Fig.12 is a flow chart showing a method of processing dynamic parameters of a battery controller according to an exemplary embodiment;

[0056] Fig.13 is a flow chart showing a method of restoring parameters of a battery controller according to an exemplary embodiment;

[0057] Fig.14 is a block diagram of a parameter protection device of a battery controller according to an exemplary embodiment;

[0058] Fig.15 is a block diagram of a vehicle according to an exemplary embodiment. DETAILED DESCRIPTION

[0059] In order to enable ordinary persons in the art to better understand the technical solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings.

[0060] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. On the contrary, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the attached claims.

[0061] The battery controller is a very important component in new energy vehicles. It is mainly used for vehicle power monitoring, power protection, and battery performance management to provide energy for new energy vehicles. The battery controller has high functional integration, and the hardware adopts a heterogeneous single chip with stronger performance and higher computing power. Due to the limited resources of on-chip peripherals, it is inevitable that multiple applications read and write parameter values ​​of the same module in the battery controller at the same time. Although the operating system of the battery controller provides a resource protection mechanism, it cannot completely avoid the failure of this function. In addition, for the dynamically configured parameter values ​​themselves, the written parameter values ​​may be incorrect or exceed the valid range due to reasons such as memory leaks, and there is a risk that the configured parameter values ​​do not meet expectations. For the dynamically configured parameter values ​​in the battery controller, the written parameter values ​​may be incorrect or exceed the valid range due to reasons such as memory leaks, and there is a risk that the configured parameter values ​​do not meet expectations, or the parameter values ​​that have been set by the battery controller may change due to factors such as the external environment, and do not meet expectations.

[0062] In the related art, it is proposed to use the address attributes to find the corresponding register lock, control the register access attributes in the module, and the locked register is not allowed to be modified. This method belongs to the implementation method at the chip design level and cannot identify configuration parameter errors caused by environmental factors such as strong electromagnetic interference. In another related technology, a cyclic redundancy check (CRC) calculation module is used to protect multiple register values. This method also cannot handle configuration parameter errors caused by environmental factors such as strong electromagnetic interference. Therefore, how to avoid unexpected changes in parameter values ​​of key modules in the battery controller is a technical problem that needs to be solved urgently.

[0063] In response to the above problems, the present application proposes a parameter protection method for a battery controller. In this method, during the operation of the battery controller, the current parameter value of the target configuration parameter is detected. In the event of a failure of the target configuration parameter, the target configuration parameter is restored based on the initial parameter value of the target configuration parameter, so that the target configuration parameter of the battery controller operates within a safe parameter range, thereby increasing the stability and safety of the battery controller, avoiding the target configuration parameter value being incorrect or exceeding the valid range due to failure of the protection mechanism of the battery controller, memory leakage, etc., and improving the working efficiency of the battery controller.

[0064] For ease of understanding, the parameter protection method of the battery controller provided in the present application is specifically introduced below with reference to the accompanying drawings.

[0065] Figure 1 is a structural diagram of a parameter protection system of a battery controller according to an exemplary embodiment. Figure 1 As shown, the parameter protection system 100 of the battery controller includes: a parameter value protection unit 101, a parameter value monitoring unit 102, a fault processing unit 103 and a data storage unit 104.

[0066] In some embodiments, the parameter value protection unit 101 is used to lock the fixed parameter values ​​of the target configuration parameters of the key modules in the battery controller, and trigger an access error when the locked target configuration parameters are write-accessed, and send the access error to the fault processing unit 103. The target configuration parameters of the key modules in the battery controller include: analog-to-digital converter (ADC) / pulse width modulation (PWM) channels, sampling accuracy, reference clock, system clock division coefficient, clock source, direct memory access (DMA) channels, master-slave mode and other fixed parameter values.

[0067] In some embodiments, the parameter value monitoring unit 102 is used to periodically read the initial parameter value of the fixed parameter and / or the safe parameter range of the dynamic parameter in the battery controller, and store the plain text data in the static random access memory (SRAM) area of ​​the data storage unit 104, and compare the plain text data in the SRAM area with the current parameter value of the battery controller one by one to determine whether it meets expectations. When a multi-bit unrecoverable error correction code (ECC) error occurs in the storage area accessed by the parameter value monitoring unit 102, or an error occurs in the parameter value, an access error is triggered, and the access error is sent to the fault processing unit 103.

[0068] In some embodiments, the fault processing unit 103 is used to receive access errors from the parameter value protection unit 101 and the parameter value monitoring unit 102, retrieve the initial parameter value of the fixed parameter and / or the safety parameter range of the dynamic parameter from the non-volatile storage area of ​​the battery controller, decrypt and update to the designated SRAM area of ​​the data storage unit 104, find the module with the abnormality, and write back to the configuration area of ​​the corresponding module based on the re-acquired data in the SRAM area. If the number of consecutive errors exceeds the preset threshold, the battery controller is caused to enter functional degradation or the battery controller is reset by software.

[0069] In some embodiments, the data storage unit 104 is used to store the parameter values ​​and verification information of the key modules of the battery controller, which are stored in a specific FLASH segment in the form of ciphertext, and the FLASH segment is set to read-only. The parameters include: ADC / PWM channel, sampling accuracy, reference clock, system clock division coefficient, clock source, DMA channel, master-slave mode and other fixed parameter values, vehicle model, functional safety level, and the number of modules to be protected.

[0070] It should be understood that the parameter protection system of the battery controller of the present application can prevent the target configuration parameters in the battery controller from being misoperated or unexpectedly tampered with, and enhance the stability of the software operating environment, data transmission, analog acquisition, timing cycle and other functions in the battery controller. The parameter protection system of the battery controller of the present application uses the chip REG_PROT module to protect the configuration parameters of the key modules in the battery controller to prevent the parameters from being tampered with. Avoid parameter changes due to concurrent access by multiple applications, memory leaks, or external environmental factors. When an abnormal configuration parameter is detected, the key parameters of different vehicle models are adapted and taken out from a specific location in the non-volatile storage area. According to the vehicle model configuration information, the erroneous parameters are reset and restored according to the functional module (for example: ADC / PWM / DMA, etc.). When the number of parameter recovery times exceeds the upper limit, the individual modules are reset or the chip of the battery controller is reset according to the vehicle model configuration information to reduce the risk of failure of the battery controller function.

[0071] It should be noted that the system architecture and application scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0072] Figure 2 is a flow chart of a parameter protection method of a battery controller according to an exemplary embodiment. Figure 2As shown, the parameter protection method of the battery controller includes the following steps:

[0073] S201. During the operation of the battery controller, obtain the current parameter value of the target configuration parameter of the battery controller.

[0074] The target configuration parameters include fixed parameters and / or dynamic parameters.

[0075] As a possible implementation method, during the operation of the battery controller, the protection device can obtain the current parameter value of the target configuration parameter of the battery controller to determine whether the current parameter value of the target configuration parameter is erroneous.

[0076] Exemplarily, during the operation of the battery controller, the protection device can periodically acquire the target configuration parameters of the key modules in the battery controller in real time so as to detect the target configuration parameters of the battery controller.

[0077] S202: When the current parameter value of the target configuration parameter meets a preset condition, the current parameter value of the target configuration parameter is replaced with the initial parameter value of the target configuration parameter.

[0078] Among them, the preset conditions include: when the target configuration parameters include fixed parameters, the current parameter value of the fixed parameter is not equal to the initial parameter value of the fixed parameter, and / or, when the target configuration parameters include dynamic parameters, the current parameter value of the dynamic parameter is not within the safe parameter range when the battery controller operates normally.

[0079] As a possible implementation method, after the protection device obtains the current parameter value of the target configuration parameter of the battery controller, if the current parameter value of the target configuration parameter meets the preset conditions, the protection device can replace the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter.

[0080] Exemplarily, the protection device can compare the current parameter value of the target configuration parameter of the battery controller obtained with the initial parameter value or safety parameter range corresponding to the target configuration parameter to determine whether the current parameter value of the target configuration parameter has an ECC failure or exceeds the valid range. Therefore, when the current parameter value of the target configuration parameter is not equal to the initial parameter value of the fixed parameter and is not within the safety parameter range of the dynamic parameter, it indicates that the current parameter value of the target configuration parameter is wrong. The protection device can replace the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter to ensure the normal operation of the battery controller. Improve the security of the battery controller. Among them, the initial parameter value of the target configuration parameter is obtained from the encrypted non-volatile storage area of ​​the battery controller. After obtaining it, the protection device can decrypt it based on the corresponding key, replace the initial parameter value corresponding to the target configuration parameter, and update the initial value corresponding to the target configuration parameter in the SRAM area.

[0081] It should be noted that, when the target configuration parameters include dynamic parameters, the initial parameter values ​​of the dynamic parameters are determined based on the safety parameter range. The initial parameter values ​​of the dynamic parameters are within the safety parameter range, so that the battery controller can operate safely based on the initial parameter values ​​of the dynamic parameters, avoiding the battery controller from operating under inappropriate dynamic parameters, improving the reliability of the battery controller, and reducing the wear of the battery managed by the battery controller, extending the service life.

[0082] As an example, the target configuration parameters of the battery controller include configuration parameters of key modules of the battery controller. Figure 3 is a schematic diagram showing configuration parameters in a battery controller according to an exemplary embodiment. Figure 3 As shown, the parameter values ​​encrypted and saved in FLASH are the target configuration parameters of the battery controller. These include: vehicle model, safety level, number of parameters, parameter field length, module 1 dynamic parameters and effective range, module 1 fixed parameter value, module N dynamic parameters and effective range, module N fixed parameter value; checksum and signature information. Among them, the target configuration parameters of the battery controller stored in FLASH are written when the controller is produced or the vehicle is offline. For vehicles that have been sold or repaired, this segment of data can be remotely updated through over-the-air technology (OTA).

[0083] It should be understood that the configuration parameter values ​​of the key modules of the battery controller are stored in ciphertext in a non-volatile storage area with read-only attributes to protect the configuration parameters from being stolen or tampered with. When the battery controller is started, the ciphertext data of the FLASH segment is read out, decrypted and copied to the specified SRAM area, and the plaintext data of the configuration parameter values ​​is stored in the SRAM area for parameter value reading and comparison to improve processing speed.

[0084] It should also be understood that during the operation of the battery controller, the protection device detects the current parameter value of the target configuration parameter, and in the event of a failure of the target configuration parameter, restores the target configuration parameter based on the initial parameter value of the target configuration parameter, so that the target configuration parameter of the battery controller operates within the safe parameter range, thereby increasing the stability and safety of the battery controller, avoiding the target configuration parameter value being incorrect or exceeding the valid range due to the failure of the protection mechanism of the battery controller, memory leakage, etc., and improving the working efficiency of the battery controller. Therefore, the protection device can effectively solve the problem of battery controller function failure caused by the failure of the protection mechanism provided by the operating system or the error of the written parameter value due to memory leakage of the dynamically configured parameter value, and the configuration parameters of the key modules of the battery controller can be compatible with different vehicle models, which is convenient for platformization and reduces the cost of development and maintenance.

[0085] In some embodiments, the protection device can also count the number of times the parameter value of the target configuration parameter meets the preset conditions during the operation of the battery controller. If it exceeds the first preset number, it means that there is a problem with the target configuration parameter and it cannot be replaced with the initial configuration parameter to ensure the normal operation of the battery controller. The protection device can reset the target configuration parameter to ensure the normal operation of the battery controller. Figure 4 As shown, the parameter protection method of the battery controller provided in the embodiment of the present application also includes the following steps S203-S204:

[0086] S203. Count the number of times that the parameter value of the target configuration parameter meets the preset condition during the operation of the battery controller.

[0087] As a possible implementation method, the protection device can also count the number of times that the parameter value of the target configuration parameter meets the preset conditions during the operation of the battery controller, so as to determine whether the target configuration parameter has a fault based on the number of times the parameter value of the target configuration parameter meets the preset conditions.

[0088] S204: When the number of times exceeds a first preset number of times, the target configuration parameters are reset.

[0089] As a possible implementation method, the protection device counts the number of times that the parameter value of the target configuration parameter meets the preset condition during the operation of the battery controller, and resets the target configuration parameter when the number exceeds a first preset number.

[0090] For example, when the number of times exceeds the first preset number of times, it indicates that the target configuration parameter frequently has a parameter value error problem, and the protection device only replaces the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter, which cannot guarantee the normal operation of the battery controller. The protection device can reset the target configuration parameter value to ensure the normal operation of the target configuration parameter. Among them, the first preset number of times is determined by relevant management personnel or technical personnel according to actual conditions, and the embodiments of the present application are not limited to this.

[0091] It should be understood that when the number of times the parameter value of the target configuration parameter meets the preset conditions exceeds the first preset number of times, it indicates that there may be potential problems inside the battery controller. The protection device resets the target configuration parameter, which can restore the target configuration parameter to its initial state, reducing the risk of instability in the battery controller and reducing failures caused by errors in the target configuration parameters.

[0092] In other embodiments, the protection device takes corresponding measures to reset the target configuration parameters based on whether the battery controller has an independent reset function. Figure 5 As shown, the above step S204 can be specifically implemented as the following steps S2041-S2042:

[0093] S2041. When the battery controller does not have an independent reset function, reset the chip of the battery controller and restart the battery controller.

[0094] As a possible implementation manner, when the battery controller does not have an independent reset function, the protection device can reset the chip of the battery controller and restart the battery controller.

[0095] Exemplarily, when the battery controller does not have an independent reset function, it means that the protection device cannot reset the target configuration parameters independently. The protection device can reset the target configuration parameters by resetting the chip of the battery controller and restarting the battery controller.

[0096] S2042: When the battery controller has an independent reset function, reset the target configuration parameters and enter the safe mode.

[0097] Among them, in safety mode, the battery managed by the battery controller can charge and discharge normally.

[0098] As a possible implementation manner, when the battery controller has an independent reset function, the protection device can reset the target configuration parameters and enter the safety mode.

[0099] Exemplarily, when the battery controller has an independent reset function, the protection device can reset the target configuration parameters independently. However, in order to ensure the charging and discharging of the battery managed by the battery controller, the protection device can control the battery controller to enter a safe mode to avoid the impact of environmental factors on the battery controller to ensure the safety of the battery controller.

[0100] It should be understood that when the battery controller does not have an independent reset function, the protection device can quickly restore the normal operation of the battery controller by resetting the chip and restarting the battery controller. When the battery controller has an independent reset function, the protection device can reset the target configuration parameters and enter the safe mode, which helps the battery controller to operate stably and prevent failures caused by incorrect target configuration parameters. In addition, the safe mode can ensure that after the target configuration parameters are reset, the batteries managed by the battery controller can be charged and discharged under safe conditions, reducing safety risks.

[0101] In some other embodiments, before obtaining the current parameter value of the target configuration parameter of the battery controller, the protection device may also lock the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter to prevent the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter from being changed by mistake, so that the protection device can determine whether the current parameter value of the target configuration parameter is abnormal based on the initial parameter value of the fixed parameter that cannot be changed and the safety parameter range of the dynamic parameter. Figure 6 As shown, the parameter protection method of the battery controller provided in the embodiment of the present application also includes the following steps S601-S602:

[0102] S601. Lock the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter.

[0103] As a possible implementation manner, the protection device may also lock the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter.

[0104] Exemplarily, the protection device can obtain the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters of the key modules of the battery controller from the non-volatile registers of the battery controller, and decrypt the obtained initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters, and store them in plain text in the SRAM area. The protection device can lock the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters in the SRAM area to prevent the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters from being changed by mistake.

[0105] It should be understood that when the battery controller software is initialized, the configuration parameter values ​​stored in the non-volatile storage area are read out, the validity of the data is verified according to the signature information, and if the read data is valid, the data is decrypted according to the encryption algorithm, and the plaintext data is stored in the designated SRAM area to verify whether the parameter value is abnormal. The protection device can lock the address of the area to prevent write access operations during software operation.

[0106] S602: Execute the control strategy of the battery controller based on the initial parameter value of the fixed parameter and the locking status of the safety parameter range of the dynamic parameter.

[0107] As a possible implementation method, after the protection device locks the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters, the control strategy of the battery controller can be executed based on the locking status of the initial parameter values ​​of the fixed parameters and the safety parameter range of the dynamic parameters.

[0108] Exemplarily, the protection device may successfully or unsuccessfully lock the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters. In the case of unsuccessful locking, the protection device may re-acquire the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters and lock them. The protection device may also count the number of unsuccessful locking attempts. If the number exceeds a threshold, it indicates that a problem has occurred with the battery controller, and the protection device may generate a corresponding alarm message. If the locking is successful, the protection device may count the number of abnormal accesses to the initial parameter values ​​of fixed parameters and / or the safety parameter range of dynamic parameters, and if the number exceeds a threshold, control the battery controller to enter a safe mode.

[0109] It should be understood that the protection device can ensure that the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters are locked and will not be easily changed through the locking mechanism, thus avoiding the misoperation of changing the initial parameter values ​​and the safety parameter range, and improving the safety and stability of the battery controller. In addition, the locking mechanism ensures the consistency of the initial parameter values ​​and the safety parameter range during the life cycle of the battery controller, which helps to improve the performance and reliability of the battery controller.

[0110] In some other embodiments, when the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are not locked successfully, the protection device can re-acquire the initial parameter value of the fixed parameter and / or the safety parameter range of the dynamic parameter. Therefore, the above step S602, based on the locking of the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter, executes the control strategy of the battery controller, which can be specifically implemented as follows: when the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are not locked successfully, re-acquire the initial parameter value of the fixed parameter and / or the safety parameter range of the dynamic parameter.

[0111] As a possible implementation manner, when the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are not locked successfully, the protection device may re-acquire the initial parameter value of the fixed parameter and / or the safety parameter range of the dynamic parameter.

[0112] For example, when the initial parameter values ​​of the fixed parameters and the safety parameter ranges of the dynamic parameters are not locked successfully, there is a risk that the initial parameter values ​​of the fixed parameters and the safety parameter ranges of the dynamic parameters originally stored in the SRAM area of ​​the protection device are changed by mistake. To ensure the consistency of the initial parameter values ​​of the fixed parameters and the safety parameter ranges of the dynamic parameters, the protection device can re-obtain the initial parameter values ​​of the fixed parameters and / or the safety parameter ranges of the dynamic parameters from the non-volatile registers of the battery controller and lock them.

[0113] It should be understood that in the event of unsuccessful locking, the initial parameter value and safety parameter range of the unsuccessful locking are at risk of being changed by misoperation. The protection device can reacquire the initial parameter value and / or safety parameter range so that the battery controller operates based on accurate initial parameter value and safety parameter range, avoiding control errors caused by errors in the initial parameter value and safety parameter range, and improving the safety and reliability of the battery controller.

[0114] In other embodiments, the protection device may also count the number of times the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are unsuccessfully locked. If the number of times the locking is unsuccessful is greater than a second preset number, it indicates that there is a problem with the locking mechanism of the battery controller, and the protection device may issue an alarm message. Figure 7 As shown, the above step S602 can be specifically implemented as the following steps S6021-S6022:

[0115] S6021. Count the number of times that initial parameter values ​​of fixed parameters and the security parameter range of dynamic parameters are unsuccessfully locked.

[0116] As a possible implementation method, when the initial parameter values ​​of fixed parameters and the safety parameter ranges of dynamic parameters are not successfully locked, the protection device can count the number of times the initial parameter values ​​of fixed parameters and the safety parameter ranges of dynamic parameters are not successfully locked, so as to determine whether there is a problem with the locking mechanism of the battery controller based on the number of unsuccessful locking attempts.

[0117] S6022: When the number of failed locking attempts is greater than a second preset number, an alarm message is issued.

[0118] The alarm information is used to indicate that a failure has occurred in locking the initial parameter value of a fixed parameter and the safety parameter range of a dynamic parameter.

[0119] As a possible implementation method, after counting the number of unsuccessful locking attempts of the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter, the protection device may issue an alarm message if the number of unsuccessful locking attempts is greater than a second preset number.

[0120] Exemplarily, the protection device can compare the number of unsuccessful locking attempts with a second preset number. If the number of unsuccessful locking attempts is greater than the second preset number, it indicates that the locking mechanism of the battery controller fails and that the locking failures frequently occur. The protection device can issue an alarm message indicating that the locking mechanism of the battery controller fails, so that the locking mechanism of the battery controller can be repaired based on the alarm message alone. The second preset number is determined by relevant management personnel or technical personnel based on actual conditions, and the embodiments of the present application do not limit this.

[0121] It should be understood that the protection device can quickly detect problems with the locking mechanism of the battery controller by counting the number of locking failures, issue an alarm message and take corresponding safety measures in time to avoid further impact on the battery controller and reduce faults caused by errors in initial parameter values ​​and safety parameter ranges caused by the locking mechanism.

[0122] In other embodiments, when the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are locked successfully, the protection device can also count the number of abnormal accesses. When the number of abnormal accesses is greater than a third preset number, it indicates that the battery controller has a fault, and the protection device can control the battery controller to enter a safe mode. Figure 8 As shown, the above step S602 can be specifically implemented as the following steps S602a-S602b:

[0123] S602a: When the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are locked successfully, the number of abnormal accesses is counted.

[0124] The abnormal access is an access requesting to modify the initial parameter value of the locked fixed parameter and / or the security parameter range of the locked dynamic parameter.

[0125] As a possible implementation method, when the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters are locked successfully, the protection device can count the number of abnormal accesses to the initial parameter values ​​of fixed parameters and the safety parameter range of dynamic parameters in the battery controller, so as to determine whether the battery controller has a fault based on the number of abnormal accesses.

[0126] S602b: When the number of abnormal accesses is greater than a third preset number, enter a safe mode.

[0127] Among them, in safety mode, the battery managed by the battery controller can charge and discharge normally.

[0128] As a possible implementation method, after the protection device counts the number of abnormal accesses, if the number of abnormal accesses is greater than a third preset number, the protection device can control the battery controller to enter a safety mode.

[0129] Exemplarily, when the number of abnormal accesses is greater than a third preset number of times, it indicates that a fault has occurred inside the battery controller, and frequent abnormal accesses to the initial parameter values ​​of fixed parameters and the safe parameter range of dynamic parameters pose a potential security threat. To ensure the normal operation of the battery controller, the protection device can control the battery controller to enter a safe mode.

[0130] It should be understood that the protection device identifies potential security threats in the battery controller by counting the number of abnormal accesses, and enters a safe mode when the number of abnormal accesses is greater than a third preset number, thereby improving the safety and stability of the battery controller.

[0131] Fig. 9 is a flow chart of another parameter protection method of a battery controller according to an exemplary embodiment. Fig. 9 As shown, the process includes the following steps: S901, obtaining key module parameters (equivalent to the above step S201). S902, fixed parameter protection, dynamic parameter monitoring. S903, error handling (equivalent to the above step S202).

[0132] Fig.10 is a flow chart showing a method of obtaining a current parameter value of a battery controller according to an exemplary embodiment. Fig.10 As shown, the process includes the following steps: S1001. The FLASH area of ​​key parameters is set to read-only attribute. S1002. After the FLASH initialization is completed, the ciphertext data in the FLASH is read out. S1003. The asymmetric encryption algorithm verifies and decrypts the data. S1004. The plaintext valid data is copied to a specific SRAM area and set to read-only attribute. S1005. The key parameters such as clock, timer, DMA, etc. of the module to be protected are obtained. S1006. The fixed parameter values ​​are obtained one by one according to the module. S1007. Parameter protection, lock the set parameters. S1008. Confirm whether the locking is successful. If the number of locking failures exceeds the upper limit, a fault signal is sent to the exception handling module.

[0133] Fig.11 is a flow chart showing a method of processing fixed parameters of a battery controller according to an exemplary embodiment. Fig.11As shown, the process includes the following steps: S1101, read back all configured data one by one. S1102, retrieve the corresponding parameter value in SRAM and compare it with the acquired parameter value. S1103, send a fault signal to the exception handling module when a parameter value error occurs. S1104, send a fault signal to the exception handling module when a multi-bit ECC error occurs.

[0134] Fig.12 is a flow chart showing a method of processing dynamic parameters of a battery controller according to an exemplary embodiment. Fig.12 As shown, the process includes the following steps: S1201, preset value of dynamic parameter. S1202, read back the current parameter value written, and compare the parameters one by one to see if they match. S1203, retrieve the corresponding range value in SRAM, and compare it with the obtained parameter value. S1204, if a parameter value error occurs, send a fault signal to the exception handling module.

[0135] Fig.13 is a flow chart showing a method of restoring parameters of a battery controller according to an exemplary embodiment. Fig.13 As shown, the process includes the following steps: S1301, identify the module where the parameter value is wrong. S1302, record the number of failures. S1303, retrieve the corresponding parameter value in SRAM and rewrite it. S1304, the number of failures exceeds the upper limit, identify whether the module supports independent reset. S1305, the module cannot be reset independently, trigger chip reset, and the controller restarts. S1306, the module can be reset independently, reset the faulty module, report the fault and enter the safe mode.

[0136] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of the method. In order to achieve the above functions, the parameter protection device of the battery controller or the vehicle includes a hardware structure and / or software module corresponding to the execution of each function. It should be easily appreciated by those skilled in the art that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of this application.

[0137] The embodiment of the present application can divide the parameter protection device of the battery controller or the vehicle into functional modules according to the above method. For example, the parameter protection device of the battery controller or the vehicle may include various functional modules corresponding to the various functional divisions, or two or more functions may be integrated into one processing module. The above-mentioned integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation.

[0138] Fig.14 is a block diagram of a parameter protection device of a battery controller according to an exemplary embodiment. Fig.14 , the parameter protection device 1400 of the battery controller includes: an acquisition module 1401 and a replacement module 1402. The acquisition module 1401 is used to acquire the current parameter value of the target configuration parameter of the battery controller during the operation of the battery controller; the target configuration parameter includes a fixed parameter and / or a dynamic parameter; the replacement module 1402 is used to replace the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter when the current parameter value of the target configuration parameter meets the preset conditions; the preset conditions include: when the target configuration parameter includes a fixed parameter, the current parameter value of the fixed parameter is not equal to the initial parameter value of the fixed parameter, and / or, when the target configuration parameter includes a dynamic parameter, the current parameter value of the dynamic parameter is not within the safety parameter range when the battery controller is operating normally.

[0139] In a possible implementation, when the target configuration parameter includes a dynamic parameter, an initial parameter value of the dynamic parameter is determined based on a safety parameter range.

[0140] In another possible implementation, the device further includes: a statistical module 1403 and a reset module 1404. The statistical module 1403 is used to count the number of times that the parameter value of the target configuration parameter meets the preset condition during the operation of the battery controller; the reset module 1404 is used to reset the target configuration parameter when the number exceeds a first preset number.

[0141] In another possible implementation, the reset module 1404 is specifically used to reset the chip of the battery controller and restart the battery controller when the battery controller does not have an independent reset function; when the battery controller has an independent reset function, reset the target configuration parameters and enter the safe mode; in the safe mode, the battery managed by the battery controller can be charged and discharged normally.

[0142] In another possible implementation, the device further includes: a locking module 1405 and an execution module 1406. The locking module 1405 is used to lock the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter; the execution module 1406 is used to execute the control strategy of the battery controller based on the locking status of the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter.

[0143] In yet another possible implementation, the execution module 1406 is specifically configured to reacquire the initial parameter value of the fixed parameter and / or the security parameter range of the dynamic parameter when the initial parameter value of the fixed parameter and the security parameter range of the dynamic parameter are not locked successfully.

[0144] In another possible implementation, the execution module 1406 is specifically used to count the number of unsuccessful locking of the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters; when the number of unsuccessful locking is greater than a second preset number, an alarm message is issued; the alarm message is used to indicate that a failure has occurred in locking the initial parameter values ​​of the fixed parameters and the security parameter range of the dynamic parameters.

[0145] In another possible implementation, the execution module 1406 is specifically used to count the number of abnormal accesses when the initial parameter values ​​of the fixed parameters and the security parameter ranges of the dynamic parameters are successfully locked; the abnormal access is an access request to modify the locked initial parameter values ​​of the fixed parameters and / or the locked security parameter ranges of the dynamic parameters; when the number of abnormal accesses is greater than a third preset number, enter a safe mode; in the safe mode, the battery managed by the battery controller can charge and discharge normally.

[0146] According to the above-mentioned technical means, during the operation of the battery controller, by detecting the current parameter value of the target configuration parameter, in the event of a failure of the target configuration parameter, the target configuration parameter is restored based on the initial parameter value of the target configuration parameter, so that the target configuration parameter of the battery controller operates within a safe parameter range, thereby increasing the stability and safety of the battery controller, avoiding the target configuration parameter value being incorrect or exceeding the valid range due to failure of the battery controller's protection mechanism, memory leakage, etc., and improving the working efficiency of the battery controller.

[0147] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0148] Fig.15 FIG. 1 is a block diagram of a vehicle according to an exemplary embodiment. Fig.15 As shown, vehicle 1500 includes, but is not limited to, a processor 1501 and a memory 1502 .

[0149] The memory 1502 is used to store executable instructions of the processor 1501. It can be understood that the processor 1501 is configured to execute instructions to implement the parameter protection method of the battery controller in the above embodiment.

[0150] It should be noted that those skilled in the art can understand that Fig.15 The vehicle structure shown in the figure does not constitute a limitation on the vehicle, and the vehicle may include Fig.15 More or fewer components may be shown, or certain components may be combined, or the components may be arranged differently.

[0151] The processor 1501 is the control center of the vehicle, which uses various interfaces and lines to connect various parts of the entire vehicle, and executes various functions of the vehicle and processes data by running or executing software programs and / or modules stored in the memory 1502, and calling data stored in the memory 1502, so as to monitor the vehicle as a whole. The processor 1501 may include one or more processing units. Optionally, the processor 1501 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor may not be integrated into the processor 1501.

[0152] The memory 1502 may be used to store software programs and various data. The memory 1502 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application program required by at least one functional module (such as a determination unit, a processing unit, etc.), etc. In addition, the memory 1502 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0153] In an exemplary embodiment, a computer-readable storage medium including instructions is also provided, such as a memory 1502 including instructions, and the above instructions can be executed by the processor 1501 of the vehicle 1500 to implement the parameter protection method of the battery controller in the above embodiment.

[0154] In actual implementation, Fig.14 The functions of the acquisition module 1401, the replacement module 1402, the statistics module 1403, the reset module 1404, the locking module 1405 and the execution module 1406 in the embodiment can all be implemented by Fig.15 The processor 1501 in the embodiment calls the computer program stored in the memory 1502 to implement. The specific execution process can refer to the description of the method part in the above embodiment, which will not be repeated here.

[0155] Optionally, the computer-readable storage medium may be a non-temporary computer-readable storage medium, for example, the non-temporary computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0156] In an exemplary embodiment, the embodiment of the present application also provides a computer program product including one or more instructions, which can be executed by the vehicle's processor 1501 to complete the parameter protection method of the battery controller in the above embodiment.

[0157] It should be noted that when the instructions in the above-mentioned computer-readable storage medium or one or more instructions in the computer program product are executed by the vehicle's processor, the various processes of the above-mentioned method embodiment are implemented, and the same technical effect as the above-mentioned method can be achieved. To avoid repetition, they will not be repeated here.

[0158] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0159] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0160] The units described as separate components may or may not be physically separated, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0161] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0162] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or the full classification part or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium, including a number of instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to execute the full classification part or part of the steps of each embodiment method of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, ROM, RAM, disk or CD and other media that can store program code.

[0163] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A parameter protection method for a battery controller, characterized in that: The method comprises: During the operation of the battery controller, obtaining a current parameter value of a target configuration parameter of the battery controller; the target configuration parameter includes a fixed parameter and / or a dynamic parameter; When the current parameter value of the target configuration parameter satisfies a preset condition, the current parameter value of the target configuration parameter is replaced with the initial parameter value of the target configuration parameter; the preset condition includes: when the target configuration parameter includes the fixed parameter, the current parameter value of the fixed parameter is not equal to the initial parameter value of the fixed parameter, and / or, when the target configuration parameter includes the dynamic parameter, the current parameter value of the dynamic parameter is not within the safety parameter range when the battery controller is operating normally.

2. The method according to claim 1, characterized in that In the case where the target configuration parameter includes the dynamic parameter, the initial parameter value of the dynamic parameter is determined based on the safety parameter range.

3. The method according to claim 1 or 2, characterized in that: The method further comprises: Counting the number of times that the parameter value of the target configuration parameter meets the preset condition during the operation of the battery controller; When the number exceeds a first preset number, the target configuration parameter is reset.

4. The method according to claim 3, characterized in that The resetting the target configuration parameters includes: If the battery controller does not have an independent reset function, resetting the chip of the battery controller and restarting the battery controller; In the case where the battery controller has an independent reset function, the target configuration parameters are reset and a safe mode is entered; in the safe mode, the battery managed by the battery controller can be charged and discharged normally.

5. The method according to claim 1 or 2, characterized in that: The method further comprises: Locking the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter; Based on the initial parameter value of the fixed parameter and the locking condition of the safety parameter range of the dynamic parameter, the control strategy of the battery controller is executed.

6. The method according to claim 5, characterized in that The step of executing the control strategy of the battery controller based on the initial parameter value of the fixed parameter and the locking condition of the safety parameter range of the dynamic parameter includes: In the case that the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter are not locked successfully, the initial parameter value of the fixed parameter and / or the safety parameter range of the dynamic parameter are reacquired.

7. The method according to claim 5, characterized in that The step of executing the control strategy of the battery controller based on the initial parameter value of the fixed parameter and the locking condition of the safety parameter range of the dynamic parameter includes: Counting the number of times that the initial parameter value of the fixed parameter and the security parameter range of the dynamic parameter are unsuccessfully locked; When the number of unsuccessful locking attempts is greater than a second preset number, an alarm message is issued; the alarm message is used to indicate that a failure has occurred in locking the initial parameter value of the fixed parameter and the safety parameter range of the dynamic parameter.

8. The method according to claim 5, characterized in that The step of executing the control strategy of the battery controller based on the initial parameter value of the fixed parameter and the locking condition of the safety parameter range of the dynamic parameter includes: In the case where the initial parameter value of the fixed parameter and the security parameter range of the dynamic parameter are locked successfully, counting the number of abnormal accesses; the abnormal access is an access requesting to modify the locked initial parameter value of the fixed parameter and / or the locked security parameter range of the dynamic parameter; When the number of abnormal accesses is greater than a third preset number, a safety mode is entered; in the safety mode, the battery managed by the battery controller can be charged and discharged normally.

9. A parameter protection device for a battery controller, characterized in that: The device comprises: An acquisition module, used to acquire the current parameter value of the target configuration parameter of the battery controller during the operation of the battery controller; the target configuration parameter includes a fixed parameter and / or a dynamic parameter; A replacement module, configured to replace the current parameter value of the target configuration parameter with the initial parameter value of the target configuration parameter if the current parameter value of the target configuration parameter meets a preset condition; The preset conditions include: when the target configuration parameters include the fixed parameters, the current parameter value of the fixed parameters is not equal to the initial parameter value of the fixed parameters, and / or, when the target configuration parameters include the dynamic parameters, the current parameter value of the dynamic parameters is not within the safety parameter range when the battery controller operates normally.

10. A vehicle, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the method according to any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that: When the computer-executable instructions stored in the computer-readable storage medium are executed by a processor of a vehicle, the vehicle is capable of performing the method of any one of claims 1 to 8.

12. A computer program product, characterized in that The computer program product comprises computer instructions which, when executed on a vehicle, cause the vehicle to perform the method according to any one of claims 1 to 8.

Images