Spacecraft battery management and energy storage battery integrated system and control method thereof

Abstract

The application discloses a spacecraft battery management and energy storage battery integrated system and a control method thereof, which comprises a plurality of battery strings, bus bars, an equalization acquisition circuit board, a control and communication circuit board, a fixed bottom plate, a protective cover and a connecting plate. The plurality of battery strings are connected in parallel among the strings through the bus bars and are installed on the top of the fixed bottom plate. The equalization acquisition circuit board and the control and communication circuit board are integrally installed in the protective cover and are arranged on the top of the battery pack. The protective cover is connected with the fixed bottom plate. A plurality of battery monitoring and equalization chips are integrated on the equalization acquisition circuit board. Each battery monitoring and equalization chip is responsible for monitoring and managing all single batteries in a battery string. The plurality of battery monitoring and equalization chips are cascaded with the control and communication circuit board through daisy chain communication. The application can effectively solve the problems of the existing single battery, such as monitoring blind area, poor equalization control flexibility, poor fault diagnosis and isolation capability and insufficient adaptability to the aerospace environment.

Description

Technical Field

[0001] This invention relates to the technical field of spacecraft, and in particular to an integrated system for spacecraft battery management and energy storage, and its control method. Background Technology

[0002] In the aerospace field, satellite battery packs and their battery management systems (BMS) are critical components ensuring the normal operation of spacecraft. However, existing technologies have many shortcomings in terms of reliability, monitoring capabilities, and environmental adaptability. The traditional "parallel-then-series" architecture connects multiple individual batteries in parallel to form modules, and then connects multiple modules in series. This BMS architecture can only monitor the voltage at the parallel module level, unable to obtain voltage information for each individual battery within the module, nor can it accurately balance individual batteries. Once a battery in a module fails, it will cause the operating status of other batteries in the same module to deteriorate, triggering a chain reaction, ultimately leading to performance degradation or failure of the entire battery pack. Furthermore, the lengthy voltage acquisition wiring introduces noise and errors, resulting in poor acquisition accuracy. While the "series-then-parallel + hardware autonomous balancing" architecture offers an improvement, it still has monitoring blind spots. Although this architecture connects individual batteries in series first and then in parallel, it often uses simple three-terminal voltage regulator chips and other purely hardware circuits for autonomous balancing, completely detached from the monitoring of the entire satellite management system. The satellite cannot obtain any critical status information such as voltage and temperature of any individual battery, nor can it determine whether the balancing circuit itself is functioning properly. If components in the equalization circuit (such as a three-terminal voltage regulator chip) fail (e.g., short-circuit), the battery will continue to discharge, introducing new fault risks. Ground-based or onboard systems cannot detect and isolate this fault, threatening the overall satellite's energy security. Furthermore, existing ground-based BMS technology cannot meet the requirements of the aerospace environment. Mature ground-based BMS solutions, if directly applied to spacecraft, face challenges such as the space radiation environment, vacuum environment, harsh launch mechanics, and extremely high reliability requirements. They are unsuitable in terms of component selection, radiation hardening, heat dissipation design, and fault management strategies, lacking a systematic and highly reliable design tailored to aerospace applications.

[0003] In summary, existing technologies have significant shortcomings in terms of precise monitoring of individual cells, flexibility of equalization control, fault diagnosis and isolation capabilities, and adaptability to aerospace environments, and cannot meet the spacecraft's requirements for high-reliability energy storage batteries and BMS. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of the prior art and provide an integrated system for spacecraft battery management and energy storage batteries, which can effectively solve the problems of existing single batteries, such as monitoring blind spots, poor flexibility in equalization control, poor fault diagnosis and isolation capabilities, and insufficient adaptability to the aerospace environment.

[0005] Another objective of this invention is to provide a control method for an integrated system of spacecraft battery management and energy storage batteries.

[0006] The objective of this invention is achieved through the following technical solution: An integrated system for spacecraft battery management and energy storage includes multiple battery strings, busbars, a balancing acquisition circuit board, a control and communication circuit board, a base plate, a protective cover, and a connecting plate. Multiple battery strings are connected in parallel via busbars to form a battery pack. Each battery string includes multiple individual batteries connected in series. The battery pack is mounted on top of the base plate. The balancing acquisition circuit board and the control and communication circuit board are integrated and mounted inside the protective cover, positioned on top of the battery pack. The protective cover and the base plate are connected via the connecting plate, thereby pressing the battery pack together. The protective cover protects the balancing acquisition circuit board and the control and communication circuit board. The circuit board is protected by physical shielding, electromagnetic shielding, radiation protection, and single-event protection. The equalization acquisition circuit board integrates multiple radiation-hardened battery monitoring and equalization chips. Each battery monitoring and equalization chip is responsible for monitoring and managing all individual cells in a battery string. The battery monitoring and equalization chip synchronously acquires the voltage of each individual cell through a high-precision ADC and performs discharge control on the individual cells. Multiple battery monitoring and equalization chips are cascaded through a daisy-chain communication and control and communication circuit board. The control and communication circuit board receives battery data and issues equalization control commands to the battery monitoring and equalization chips based on the battery data.

[0007] Furthermore, thermally conductive adhesive is used to attach high atomic number metal shielding sheets to the battery monitoring and balancing chip and the main control MCU of the control and communication circuit board, thereby effectively attenuating incident gamma photons and high-energy electrons, reducing the total absorbed dose, and assisting in heat dissipation.

[0008] Furthermore, the control and communication circuit board includes a CAN bus communication circuit for data exchange with the satellite integrated electronic system and a power supply circuit for providing operating power. The CAN bus communication circuit adopts a dual-redundancy design, which can switch to the backup channel when the primary channel fails.

[0009] Furthermore, the fixed base plate and the protective cover are made of high thermal conductivity materials, and the fixed base plate and the protective cover are in close contact with the individual cells through silicone rubber. The heat generated by the equalization acquisition circuit board and the control and communication circuit board during operation is effectively transferred to the protective cover, the fixed base plate and the battery pack through thermal conduction, and heat dissipation is carried out by utilizing their heat capacity.

[0010] Furthermore, each CMOS device on the equalization acquisition circuit board and the control and communication circuit board is designed with two parallel current-limiting resistors at its power input terminal to increase the trigger current required for single-event latch-up.

[0011] Furthermore, decoupling capacitors are configured near the power supply pins of the battery monitoring equalization chip on the equalization acquisition circuit board and the main control MCU on the control and communication circuit board to filter out high-frequency noise, effectively suppress the influence of single-particle transient pulses, and improve the circuit's anti-interference capability.

[0012] Furthermore, the battery monitoring equalization chip of the equalization acquisition circuit board and the main control MCU of the control and communication circuit board are respectively arranged in the central area of ​​the corresponding circuit boards.

[0013] Furthermore, each battery monitoring and equalization chip's power supply circuit is equipped with a controlled relay. When a battery monitoring and equalization chip experiences a persistent latch-up effect, the main control MCU of the control and communication circuit board sends a direct command to cut off the power supply circuit of the locked battery monitoring and equalization chip through the controlled relay, thereby hard-resetting and eliminating the latch-up state. The level command output channel of the battery monitoring and equalization chip uses the controlled relay to control the power supply of its driver chip. When the driver chip generates an erroneous output due to a single event event, the main control MCU sends an indirect pulse command to turn off the controlled relay, causing it to power down and reset, thus preventing the continuous output of erroneous commands.

[0014] Furthermore, the protective cover includes a protective frame and a top cover disposed on top of the protective frame, the thickness of which is determined according to the total dose of the mission trajectory.

[0015] Another objective of this invention is achieved through the following technical solution: A control method for an integrated system of spacecraft battery management and energy storage batteries, comprising the following steps: S1. Data Acquisition: S1.1 System power-on or timer trigger; S1.2 The main control MCU of the control and communication circuit board sends a battery data acquisition command and broadcasts it to all cascaded battery monitoring and equalization chips through daisy-chain communication. S1.3 The battery monitoring and equalization chip measures the voltage of individual batteries and aggregates it to the main control MCU through daisy-chain communication; S2, Intelligent Equilibrium: S2.1 After receiving the voltage data of all individual batteries, the main control MCU analyzes the battery voltage data using the preset equalization algorithm and issues equalization commands. If it finds that the voltage of one or more individual batteries is significantly higher than that of other individual batteries and exceeds the preset safety threshold, it sends a command to the corresponding battery monitoring and equalization chip through daisy-chain communication. S2.2 Upon receiving the corresponding instruction, the battery monitoring and equalization chip drives its internal switch to connect the passive equalization discharge resistor of the corresponding single cell channel, thereby discharging the single cell. S2.3 During the discharge process, the main control MCU continuously monitors the voltage change. If the voltage drops to the preset target range, a command is issued to stop the equalization. S3. Fault Diagnosis and Handling: S3.1 If the main control MCU detects a serious overvoltage, undervoltage, open circuit, or short circuit fault in a single cell, the main control MCU will generate a fault flag bit and report it to the on-board intelligent fault diagnosis system through the CAN bus communication circuit. S3.2 The on-board intelligent fault diagnosis system remotely isolates faulty units according to the fault type and preset strategies, thereby achieving on-orbit fault isolation and ensuring the safety of single-point faults in the battery management system.

[0016] Compared with the prior art, the present invention has the following advantages and beneficial effects: 1. This invention combines a "series-then-parallel" battery pack topology with a radiation-hardened battery monitoring chip and a main control MCU that are suitable for aerospace environments and based on daisy-chain communication to form a highly reliable BMS architecture. This architecture enables accurate and synchronous acquisition and monitoring of the voltage of each individual cell in the battery pack. Under the monitoring of the satellite integrated electronic system, it achieves intelligent and controllable balancing of individual cells, and the balancing strategy can be flexibly configured.

[0017] 2. This invention adopts a highly integrated layout that is adaptable to the aerospace environment. By directly integrating the equalization acquisition circuit board and the control and communication circuit board onto the protective cover, it forms an integrated structure with the battery stack that has extremely short wiring harnesses, facilitates thermal management, and is vibration resistant. By optimizing the physical layout, the length of the acquisition wiring harness is reduced, the accuracy is improved, and the integration and electromagnetic compatibility of the system are enhanced.

[0018] 3. This invention enables the monitoring and fault isolation of the equalization circuit itself, effectively improving the overall reliability of the system and ensuring the long-term high-reliability operation of the BMS in orbit. Attached Figure Description

[0019] Figure 1 This is a schematic diagram of the overall structure of the integrated system of the present invention.

[0020] Figure 2 This is a schematic diagram of the battery pack of the present invention mounted on a fixed base plate.

[0021] Figure 3 This is a schematic diagram of the structure in which the equalization acquisition circuit board and the control and communication circuit board of the present invention are integrated and installed inside the protective cover.

[0022] Figure 4 This is an exploded view of the integrated system of the present invention.

[0023] Figure 5This is a flowchart of data acquisition in the control method of the present invention.

[0024] Figure 6 This is a flowchart of the intelligent balancing process in the control method of the present invention.

[0025] Figure 7 This is a flowchart of the fault diagnosis and handling process in the control method of the present invention. Detailed Implementation

[0026] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are some embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0027] Example 1: like Figures 1 to 4 As shown, this embodiment provides an integrated system for spacecraft battery management and energy storage, including multiple battery strings, busbars 2, an equalization acquisition circuit board 3, a control and communication circuit board 4, a fixed base plate 5, a protective cover 6, and a connecting plate 7. Multiple battery strings are connected in parallel via the busbars 2 to increase the total capacity. A battery pack is formed from these multiple battery strings, with each battery string comprising multiple individual cells 1 connected in series. The battery pack is mounted on top of the fixed base plate 5. The equalization acquisition circuit board 3 and the control and communication circuit board 4 are integrated and mounted inside the protective cover, positioned on top of the battery pack. Each individual cell 1 has two voltage acquisition lines 7 led out and soldered to the equalization acquisition circuit board 3. The protective cover and the fixed base plate 5 are connected via the connecting plate 7 and screws, thereby pressing the cell stack together. The protective cover provides physical protection, electromagnetic shielding, radiation protection, and single-event protection for the equalization acquisition circuit board 3 and the control and communication circuit board 4. This integrated structural design layout results in extremely short acquisition wires, directly connecting from the battery tabs to the circuit board, reducing the risk of loosening during launch vibrations and greatly improving acquisition accuracy and anti-interference capabilities.

[0028] The equalization acquisition circuit board 3 integrates multiple radiation-hardened battery monitoring and equalization chips, such as TI's BQ79616. Each battery monitoring and equalization chip is responsible for monitoring and managing all individual cells 1 in a battery string. The battery monitoring and equalization chip synchronously acquires the voltage of each individual cell 1 through a high-precision ADC, and controls the discharge of the individual cell 1 by controlling the switch of the passive equalization discharge resistor connected to that individual cell 1 (integrated inside the battery monitoring and equalization chip). Multiple battery monitoring and equalization chips are cascaded with the control and communication circuit board 4 through a daisy-chain communication line 8. The control and communication circuit board 4 receives battery data (including voltage, temperature, equalization status, and fault flag bits) and issues equalization control commands to the battery monitoring and equalization chips according to the battery data. Only one set of isolated communication lines is needed to upload all the data of the entire battery pack.

[0029] In this embodiment, local shielding is performed on key chips. Specifically, a high atomic number metal shielding sheet is bonded to the battery monitoring and equalization chip using thermally conductive adhesive. In this embodiment, a 0.5mm thick tantalum sheet is bonded to the chip using silicone rubber, thereby effectively attenuating incident gamma photons and high-energy electrons, reducing the total absorbed dose, and assisting in heat dissipation. A high atomic number metal shielding sheet is bonded to the main control MCU on the control and communication circuit board using thermally conductive adhesive. In this embodiment, a 0.5mm thick tantalum sheet is bonded to the chip using silicone rubber, thereby effectively attenuating incident gamma photons and high-energy electrons, reducing the total absorbed dose, and assisting in heat dissipation.

[0030] Meanwhile, the PCB layout is optimized in this embodiment. The battery monitoring equalization chip of the equalization acquisition circuit board and the main control MCU of the control and communication circuit board are respectively arranged in the central area of ​​the corresponding circuit boards, and the surrounding components and the certain mass of the circuit board itself are used to provide additional shielding.

[0031] The control and communication circuit board includes a CAN bus communication circuit for data exchange with the satellite integrated electronic system and a power supply circuit for providing operating power. The CAN bus communication circuit adopts a dual-redundant design, which can switch to the backup channel when the primary channel fails.

[0032] The base plate and the protective cover are made of high thermal conductivity materials. In this embodiment, aluminum alloy is used as an example. The base plate and the protective cover are in close contact with the individual cells through silicone rubber. The heat generated when the circuit board and the control and communication circuit board are working is effectively transferred to the protective cover, the base plate and the battery pack through thermal conduction. The heat capacity is used for heat dissipation, which solves the heat dissipation problem of lack of air convection in the vacuum of space.

[0033] The protective cover 6 includes a protective frame 601 and a top cover 602 located on top of the protective frame 601. The equalization acquisition circuit board and the control and communication circuit board are completely covered by the top cover. The top cover not only provides physical and EMI protection, but also has a certain material thickness (determined according to the total dose of the mission orbit) to form the first major barrier against space radiation, which can significantly reduce the total radiation dose entering the protective frame.

[0034] In this embodiment, the protective cover, the fixing base plate, and the battery pack itself together form a nearly enclosed metal cavity. This structure not only mechanically compresses the battery but also provides additional radiation shielding protection for the internal electronic circuitry.

[0035] In this embodiment, single-event protection measures are also systematically designed for the BMS at the device level, circuit level, and software level, as follows: Device and circuit-level protection: Each CMOS device on the equalization acquisition board and control and communication board is equipped with two parallel current-limiting resistors at its power input terminal to increase the trigger current required for single-event latch-up. When a device latches up due to a single-event effect, this design effectively limits the sudden increase in current, reduces damage to the integrated circuit, and provides a guarantee for circuit recovery; even if a device fails, it will not cause a short circuit in the power bus, thus preventing fault propagation.

[0036] Decoupling and anti-interference design: Decoupling capacitors are configured near the power supply pins of the battery monitoring equalization chip on the equalization acquisition circuit board and the main control MCU on the control and communication circuit board to filter out high-frequency noise, effectively suppress the influence of single-event transient (SET) pulses, and improve the circuit's anti-interference capability.

[0037] Power supply zoning and controllable isolation design: Each battery monitoring and equalization chip has a controlled relay in its power supply circuit. When a battery monitoring and equalization chip experiences a persistent latch-up effect, the main control MCU on the control and communication circuit board sends a direct command to cut off the power supply circuit of the locked battery monitoring and equalization chip through the controlled relay, thereby hard-resetting and eliminating the latch-up state.

[0038] The battery monitoring equalization chip's level command output channel uses a controlled relay to control the power supply to its driver chip. When the driver chip generates an erroneous output due to a single event event, the main control MCU sends an indirect pulse command to shut down the controlled relay, causing it to power off and reset, thus preventing the continuous output of erroneous commands.

[0039] Software and system-level protection: Program Storage and Repair: The main control MCU stores four copies of the application program and one copy of the bootloader in its internal FLASH memory. After system power-on or reset, a verification mechanism selects the correct program to run. When a running program encounters an error due to a single-event upset (SEU), the system can automatically verify and jump to other backup areas for execution. Subsequently, the faulty application area will be overwritten with the correct program data, achieving on-orbit autonomous repair.

[0040] Watchdog mechanism: A hardware watchdog timer is set. The main program needs to "feed" the watchdog periodically during normal operation. If the program crashes due to a single-event event and the watchdog is not fed for more than a set time (e.g., 2 seconds), the watchdog circuit will force the microcontroller to reset, restoring the system to a known reliable state.

[0041] Critical Register Monitoring: The software periodically monitors and verifies critical control registers (such as timer configuration registers and interrupt controller registers) of the microcontroller core and peripherals. When an unexpected change in the value of these registers is detected (i.e., a single-event upset), the software immediately performs a reinitialization operation on the affected module to ensure its functionality is restored.

[0042] Communication data hardening: All CAN bus communication messages undergo rigorous multi-level verification of data format and content, including but not limited to message ID (identifier) ​​verification, length verification, checksum verification, or cyclic redundancy check (CRC) verification. Instructions are only executed after all critical information is verified to be correct, ensuring error-free operation of bus communication and preventing erroneous actions caused by single-event effects.

[0043] In addition, this embodiment also adopts comprehensive protection measures from the system design level: Selection of aerospace-grade / high radiation resistance components: When selecting components, give priority to aerospace-grade (such as QY or YB), radiation-hardened (Rad-Hard) or at least industrial-grade high radiation resistance (such as >10 krad(Si)) components to improve their ability to withstand total dose effects from the source.

[0044] Functional redundancy and system reconfiguration: As mentioned earlier, multiple program backups and channel redundancy designs are effective strategies not only for dealing with SEE (Self-Effective Response) but also for dealing with TID (Total Intake Discharge). When a unit experiences performance degradation or functional failure due to excessively high cumulative dose, the system can switch to a backup unit or degrade mode to extend the overall on-orbit lifespan of the system.

[0045] In this embodiment, all electronic components (resistors, capacitors, integrated circuits, relays, etc.) are selected and applied in accordance with aerospace-grade derating standards. This ensures that the electrical stress (voltage, current) and thermal stress (junction temperature, power consumption) that all components experience during operation are lower than their rated maximum values ​​by a certain percentage (e.g., 50%-70%), thereby significantly improving their long-term service life and reliability, and resisting the stresses of the space environment.

[0046] Redundancy is employed in critical signal paths and functions. For example, the CAN bus communication interface uses a dual-redundant design, switching to the backup channel when the primary channel fails. The daisy-chain communication link uses differential signal transmission, which inherently provides stronger anti-interference capabilities. The power input circuit can also be designed with dual-redundant power supply to avoid single-point failure.

[0047] The system has functional and data backup capabilities. As mentioned above, the four programs within the main control MCU are hot backups of each other. Key configuration parameters and operating data are stored in multiple backups in non-volatile memory (such as FRAM). The "series-then-parallel" battery topology itself is also a form of capacity backup; the failure of a single battery will not cause the entire battery pack to lose its functionality.

[0048] Example 2: like Figures 5 to 7 As shown, this embodiment provides a control method for an integrated system of spacecraft battery management and energy storage batteries, including the following steps: S1. Data Acquisition: S1.1 System power-on or timer trigger; S1.2 The main control MCU of the control and communication circuit board sends a battery data acquisition command and broadcasts it to all cascaded battery monitoring and equalization chips through daisy-chain communication. S1.3 The battery monitoring and equalization chip measures the voltage of individual batteries. The raw data collected is uploaded level by level through daisy-chain communication and finally aggregated to the main control MCU (main control microcontroller) for processing.

[0049] S2, Intelligent Equilibrium: S2.1 After receiving the voltage data of all individual cells, the main control MCU analyzes the battery voltage data using a preset equalization algorithm and issues equalization commands (such as dissipative equalization based on the highest voltage threshold). If it finds that the voltage of one or more individual cells is significantly higher than that of other individual cells and exceeds the preset safety threshold, it sends a command to the corresponding battery monitoring and equalization chip through daisy-chain communication. S2.2 Upon receiving the corresponding instruction, the battery monitoring and equalization chip drives its internal switch to connect the passive equalization discharge resistor of the corresponding single cell channel, thereby discharging the single cell. S2.3 During the discharge process, the main control MCU continuously monitors the voltage change. If the voltage drops to the preset target range, a command is issued to stop the equalization. S3. Fault Diagnosis and Handling: S3.1 If the main control MCU detects a serious overvoltage, undervoltage, open circuit, or short circuit fault in a single cell, the main control MCU will generate a fault flag bit and report it to the on-board intelligent fault diagnosis system through the CAN bus communication circuit. S3.2. Ground personnel or the onboard intelligent fault diagnosis system remotely isolate faulty units according to the fault type and preset strategies, thereby achieving on-orbit fault isolation and ensuring the system's single-point fault safety. For example, the main control MCU can disable the equalization function of a faulty chip, thereby isolating the fault on-orbit, preventing it from bringing additional risks, and ensuring the single-point fault safety of the spacecraft's energy system.

[0050] The above description is merely a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope disclosed in the present invention, based on the technical solution and inventive concept of the present invention, shall fall within the scope of protection of the present invention.

Claims

1. A spacecraft battery management and energy storage battery integrated system, characterized in that: The system comprises multiple battery strings, busbars, a balancing acquisition circuit board, a control and communication circuit board, a base plate, a protective cover, and a connecting plate. Multiple battery strings are connected in parallel via busbars to form a battery pack. Each battery string includes multiple individual batteries connected in series. The battery pack is mounted on top of the base plate. The balancing acquisition circuit board and the control and communication circuit board are integrated and mounted inside the protective cover, positioned on top of the battery pack. The protective cover and the base plate are connected via a connecting plate to compress the battery pack. The protective cover provides physical protection, electromagnetic shielding, and radiation protection for the balancing acquisition circuit board and the control and communication circuit board. The balancing acquisition circuit board integrates multiple radiation-hardened battery monitoring and balancing chips. Each battery monitoring and balancing chip monitors and manages all individual batteries in a battery string. The battery monitoring and balancing chip synchronously acquires the voltage of each individual battery via a high-precision ADC and controls the discharge of each individual battery. Multiple battery monitoring and balancing chips are cascaded via a daisy-chain communication and control and communication circuit board. The control and communication circuit board receives battery data and issues balancing control commands to the battery monitoring and balancing chips based on the battery data.

2. The spacecraft battery management and energy storage battery integrated system of claim 1, wherein: High atomic number metal shielding sheets are attached to the battery monitoring and equalization chip and the main control MCU of the control and communication circuit board using thermally conductive adhesive, which effectively attenuates incident gamma photons and high-energy electrons, reduces the total absorbed dose, and assists in heat dissipation.

3. The spacecraft battery management and energy storage battery integrated system of claim 1, wherein: The control and communication circuit board includes a CAN bus communication circuit for data exchange with the satellite integrated electronic system and a power supply circuit for providing operating power. The CAN bus communication circuit adopts a dual-redundancy design, which can switch to the backup channel when the primary channel fails.

4. The spacecraft battery management and energy storage battery integrated system of claim 1, wherein: The fixed base plate and the protective cover are made of high thermal conductivity materials, and the fixed base plate and the protective cover are in close contact with the individual cells through silicone rubber. The heat generated by the equalization acquisition circuit board and the control and communication circuit board during operation is effectively transferred to the protective cover, the fixed base plate and the battery pack through thermal conduction, and heat dissipation is carried out by utilizing their heat capacity.

5. The spacecraft battery management and energy storage battery integrated system of claim 1, wherein: Each CMOS device on the equalization acquisition circuit board and the control and communication circuit board is designed with two parallel current-limiting resistors at its power input terminal to increase the trigger current required for single-event latch-up.

6. The spacecraft battery management and energy storage battery integrated system of claim 1, wherein: The power pins of the battery monitoring equalization chip on the equalization acquisition circuit board and the main control MCU on the control and communication circuit board are all equipped with decoupling capacitors nearby to filter out high-frequency noise, effectively suppress the influence of single-particle transient pulses, and improve the anti-interference capability of the circuit.

7. The spacecraft battery management and energy storage battery integrated system of claim 1, wherein: The battery monitoring equalization chip of the equalization acquisition circuit board and the main control MCU of the control and communication circuit board are respectively arranged in the central area of ​​the corresponding circuit boards.

8. The integrated system for spacecraft battery management and energy storage batteries according to claim 1, characterized in that: Each battery monitoring and equalization chip's power supply circuit is equipped with a controlled relay. When a battery monitoring and equalization chip experiences a persistent latch-up effect, the main control MCU of the control and communication circuit board sends a direct command to cut off the power supply circuit of the locked battery monitoring and equalization chip through the controlled relay, thereby hard-resetting and eliminating the latch-up state. The battery monitoring equalization chip's level command output channel uses a controlled relay to control the power supply to its driver chip. When the driver chip generates an erroneous output due to a single event event, the main control MCU sends an indirect pulse command to shut down the controlled relay, causing it to power off and reset, thus preventing the continuous output of erroneous commands.

9. The integrated system for spacecraft battery management and energy storage batteries according to claim 1, characterized in that: The protective cover includes a protective frame and a top cover disposed on top of the protective frame, the thickness of which is determined according to the total dose of the mission trajectory.

10. A control method for a spacecraft battery management and energy storage battery integrated system according to any one of claims 1 to 9, comprising the steps of: S1. Data Acquisition: S1.1 System power-on or timer trigger; S1.2 The main control MCU of the control and communication circuit board sends a battery data acquisition command and broadcasts it to all cascaded battery monitoring and equalization chips through daisy-chain communication. S1.3 The battery monitoring and equalization chip measures the voltage of individual batteries and aggregates it to the main control MCU through daisy-chain communication; S2, Intelligent Equilibrium: S2.1 After receiving the voltage data of all individual batteries, the main control MCU analyzes the battery voltage data using the preset equalization algorithm and issues equalization commands. If it finds that the voltage of one or more individual batteries is significantly higher than that of other individual batteries and exceeds the preset safety threshold, it sends a command to the corresponding battery monitoring and equalization chip through daisy-chain communication. S2.2 Upon receiving the corresponding instruction, the battery monitoring and equalization chip drives its internal switch to connect the passive equalization discharge resistor of the corresponding single cell channel, thereby discharging the single cell. S2.3 During the discharge process, the main control MCU continuously monitors the voltage change. If the voltage drops to the preset target range, a command is issued to stop the equalization. S3. Fault Diagnosis and Handling: S3.1 If the main control MCU detects a serious overvoltage, undervoltage, open circuit, or short circuit fault in a single cell, the main control MCU will generate a fault flag bit and report it to the on-board intelligent fault diagnosis system through the CAN bus communication circuit. S3.2 The on-board intelligent fault diagnosis system remotely isolates faulty units according to the fault type and preset strategies, thereby achieving on-orbit fault isolation and ensuring the safety of single-point faults in the battery management system.

Images