Battery module protection method, BMS system, battery cluster and power consumption device

Abstract

The embodiments of the present application relate to the field of battery protection technology, and in particular to a battery module protection method, a BMS system, a battery cluster and an electrical device. The battery module protection method includes: a first control unit obtains first data of battery cells in at least one group of battery modules, and a second control unit obtains second data of battery cells in the corresponding battery module. When any of the above-mentioned first data or second data meets the protection condition, the battery module protection is triggered. Among them, the protection condition includes: a first protection condition set in the first control unit and a second protection condition set in the second control unit. It provides at least two protection paths implemented by different control units, which effectively improves the reliability of battery module protection and will not cause the entire system to be in an unsafe state due to the failure of some components.

Description

[Technical field]

[0001] The present application relates to the field of battery protection technology, and in particular to a battery module protection method, a BMS system, a battery cluster and an electrical device. [Background technology]

[0002] At present, various types of rechargeable batteries are widely used in various devices. Therefore, the safety of rechargeable batteries (also called secondary batteries) during use has attracted more and more attention.

[0003] Typically, rechargeable batteries can monitor their operating conditions through related circuit systems such as an analog front end (AFE) and a battery control unit (BCU), and cut off the circuit of the rechargeable battery in time to ensure safe use.

[0004] However, some components in these circuit systems may fail due to various factors, which may cause the entire rechargeable battery and its management system (Battery Management System, BMS) to be in an unsafe state. Therefore, there is an urgent need to provide a more reliable battery module protection method. [Summary of the invention]

[0005] The embodiments of the present application aim to provide a battery module protection method, a BMS system, a battery cluster and an electrical device, which can solve the defects existing in the traditional rechargeable battery protection system.

[0006] In order to solve the above technical problems, the embodiments of the present application provide the following technical solutions: a battery module protection method. The battery module protection method comprises: a first control unit obtains first data of battery cells in at least one group of battery modules, and a second control unit obtains second data of battery cells in the battery module corresponding to the second control unit. When any of the above first data or second data meets the protection condition, the battery module protection is triggered. The protection condition comprises: a first protection condition set in the first control unit and a second protection condition set in the second control unit.

[0007] Optionally, the first data includes: a cell voltage and / or a cell temperature of a battery module; and the second data includes: a cell voltage and a cell temperature in a battery module corresponding to the second control unit. The battery module protection method specifically includes: triggering the battery module protection when the cell voltage and / or the cell temperature meet a protection condition.

[0008] Optionally, the protection condition further includes: a third protection condition set in the first acquisition unit. The battery module protection method further includes: acquiring first sampling data of the bus current by the first acquisition unit; and triggering battery module protection when the first sampling data meets the third protection condition.

[0009] Optionally, the battery module protection method further includes: acquiring, by a first control unit, second sampling data of the bus current; and triggering the battery module protection when the second sampling data meets the first protection condition.

[0010] Optionally, the battery module protection method further includes: triggering battery module protection when the difference between the bus current acquired by the first control unit and the bus current acquired by the second control unit is not within a preset first range.

[0011] Optionally, the first control unit and the second control unit communicate at least through any one of the first communication link and the second communication link. The battery module protection method also includes: when the first communication link fails, the second control unit provides the first control unit with second data of the battery cells in a group of battery modules through the second communication link.

[0012] Optionally, the battery module protection method further includes: triggering the battery module protection when the difference between the first transmission data and the second transmission data is not within a preset second range. The first transmission data is the second data provided by the second control unit to the first control unit via the first communication link; the second transmission data is the second data provided by the second control unit to the first control unit via the second communication link.

[0013] Optionally, the battery module protection method further includes: when the first control unit is unable to determine the first protection condition, the second control unit determines the second protection condition, or when the second control unit is unable to determine the second protection condition, the first control unit determines the first protection condition.

[0014] In order to solve the above technical problems, the embodiment of the present application also provides the following technical solutions: A BMS system. The BMS system includes: at least one first control module, at least one second control module and a protection module. The first control module is coupled to the second control module and the protection module respectively, and the second control module is coupled to the protection module. The first control module is configured to: when the first protection condition is met, trigger the protection module to perform a protection action. The second control module is configured to: when the second protection condition is met, trigger the protection module to perform a protection action.

[0015] Optionally, the second control module includes: a second acquisition unit and a first microcontroller. The second acquisition unit is configured to: acquire the cell voltage and / or cell temperature of the battery module corresponding to the second control module. The first microcontroller is configured to: when the cell voltage and / or the cell temperature meets the second protection condition, output a first control signal to enable the protection module to perform a protection action.

[0016] Optionally, the BMS system further includes: a first acquisition module coupled to the first control module and the protection module respectively, wherein the first acquisition module is configured to: acquire first sampling data including bus current, and trigger the protection module to perform a protection action when the first sampling data meets a third protection condition.

[0017] Optionally, the first acquisition module includes: a first sampling circuit and a second microcontroller. The first sampling circuit is configured to: acquire first sampling data of the bus current. The second microcontroller is configured to: output a second control signal to enable the protection module to perform a protection action when the first sampling data meets the third protection condition.

[0018] Optionally, the first sampling circuit includes: a shunt, an amplifier, and an analog-to-digital converter. The shunt is arranged on the battery cluster bus to form a voltage signal that varies with the bus current. The amplifier is coupled to the shunt; the amplifier is configured to amplify the voltage signal. The analog-to-digital converter is coupled to the output end of the amplifier; the analog-to-digital converter is configured to convert the amplified voltage signal into a digital signal and provide it to the second microcontroller.

[0019] Optionally, the first acquisition module further comprises: a first comparator coupled to the output end of the amplifier, wherein the first comparator is configured to: trigger the protection module to perform a protection action when the amplified voltage signal meets a third protection condition.

[0020] Optionally, the first control module is further configured to: acquire second sampling data including bus current; and trigger the protection module to perform a protection action when the second sampling data meets the first protection condition.

[0021] Optionally, the first control module is further configured to: trigger the protection module to perform a protection action when the difference between the bus current of the first sampling data and the bus current of the second sampling data is not within a preset first range.

[0022] Optionally, the BMS system further includes: a second sampling circuit coupled to the first control module, wherein the second sampling circuit is configured to: collect second sampling data of the bus current.

[0023] Optionally, the second sampling circuit includes: a Hall sensor, a constant voltage source and a filter. The Hall sensor is connected to the battery cluster bus and outputs a voltage signal that varies with the bus current. The constant voltage source is connected to the Hall sensor to provide a stable voltage for the Hall sensor. The filter is coupled to the output end of the Hall sensor and the first control module respectively, and is used to filter the voltage signal output by the Hall sensor and provide it to the first control module.

[0024] Optionally, the first control module further comprises: a second comparator coupled to the output end of the Hall sensor, wherein the second comparator is configured to: trigger the protection module to perform a protection action when the voltage signal output by the Hall sensor meets the first protection condition.

[0025] Optionally, the first control module communicates with the second control module via the first communication link and / or the second communication link, wherein the second control module is further configured to provide the second data to the first control module via the second communication link when the first communication link fails.

[0026] Optionally, the first control module is further configured to: trigger the protection module to perform a protection action when the difference between the first transmission data and the second transmission data is not within a preset second range. The first transmission data is the second data provided by the second control module to the first control module through the first communication link, and the second transmission data is the second data provided by the second control module to the first control module through the second communication link.

[0027] Optionally, when the first control module is unable to determine the first protection condition, the second control module determines the second protection condition; or when the second control module is unable to determine the second protection condition, the first control module determines the protection condition.

[0028] Optionally, the protection module includes: a first relay arranged on the positive bus and a second relay arranged on the negative bus.

[0029] In order to solve the above technical problems, the embodiments of the present application also provide the following technical solutions: a battery cluster. The battery cluster includes the BMS system as described above and one or more battery modules.

[0030] To solve the above technical problems, the embodiments of the present application further provide the following technical solutions: an electric device comprising: the battery cluster as described above and a load powered by the battery cluster.

[0031] The battery module protection method of the embodiment of the present application provides at least two protection paths implemented by different control units as redundant backups for each other, effectively improving the reliability of battery module protection and preventing the entire system from being in an unsafe state due to failure of some components.

Brief Description of the Drawings

[0032] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0033] Figure 1a A schematic diagram of a battery cluster provided in an embodiment of the present application;

[0034] Figure 1b A schematic diagram of a battery cluster provided in another embodiment of the present application;

[0035] Figure 2 A method flow chart of a battery module protection method provided in an embodiment of the present application;

[0036] Figure 3 A method flow chart of a battery module protection method provided by another embodiment of the present application;

[0037] Figure 4 A schematic diagram of a BMS system provided in an embodiment of the present application;

[0038] Figure 5 A schematic diagram of a BMS system provided in another embodiment of the present application;

[0039] Figure 6 A circuit schematic diagram of a first sampling circuit provided in an embodiment of the present application;

[0040] Figure 7 A schematic diagram of a BMS system provided in yet another embodiment of the present application;

[0041] Figure 8 A circuit schematic diagram of a second sampling circuit provided in an embodiment of the present application;

[0042] Fig. 9 A schematic diagram of the communication connection between the first control module and the second control module provided in an embodiment of the present application;

[0043] Fig.10 A schematic diagram of a microcontroller provided in an embodiment of the present application;

[0044] Fig.11 A schematic diagram of a battery cluster provided according to another embodiment of the present application. [Specific implementation method]

[0045] In order to facilitate the understanding of the present application, the present application is described in more detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that when an element is described as "fixed to" another element, it can be directly on another element or there can be one or more centered elements therebetween. When an element is described as "connected" to another element, it can be directly connected to another element or there can be one or more centered elements therebetween. The orientation or positional relationship indicated by the terms "upper", "lower", "inner", "outer", "bottom" and the like used in this specification is based on the orientation or positional relationship shown in the accompanying drawings, only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application. In addition, the terms "first", "second", "third" and the like are used only for descriptive purposes and cannot be understood as indicating or implying relative importance.

[0046] Unless otherwise defined, all technical and scientific terms used in this specification have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used in this specification and in the specification of this application are only for the purpose of describing specific embodiments and are not intended to limit this application. The term "and / or" used in this specification includes any and all combinations of one or more of the related listed items.

[0047] In addition, the technical features involved in the different embodiments of the present application described below can be combined with each other as long as they do not conflict with each other.

[0048] Figure 1a This is a schematic diagram of a battery cluster provided in an embodiment of the present application. The present application does not limit the specific implementation of the battery cluster. Figure 1a As shown, the battery cluster may include: a battery module (Battery, BAT), a battery management unit (Battery Management Unit, BMU), a battery cluster control unit (Battery Controller Unit, BCU), an intensity and voltage acquisition unit (Intensity and Voltage acquisition Unit, IVU) and a protection module (Switch, SW).

[0049] The battery module BAT is a component for storing electric energy. It can be assembled from cells of corresponding types, quantities and structures according to the actual needs. The number of battery modules BAT can be set according to the actual needs (in Figure 1aFor the sake of simplicity, only one is shown). The battery management unit BMU, the battery cluster control unit BCU and the current and voltage acquisition unit IVU are functional modules in an electronic system (which may be referred to as a BMS system in this embodiment) for monitoring, controlling and managing one or more battery modules.

[0050] Among them, the battery management unit BMU is a functional module paired with the battery module BAT. It can collect a series of data of the corresponding battery module (such as the voltage, current, temperature, etc. of the battery cell) through similar acquisition circuits such as analog front-end chips, and realize the operation status monitoring of the battery module and provide communication interface functions.

[0051] The battery cluster control unit BCU is the processing center of the entire battery cluster. It can establish a communication connection with the battery management unit BMU (such as through a CAN bus connection), can obtain data information collected by the battery management unit BMU, and perform one or more operation steps such as processing, calculation, detection or control based on it.

[0052] The current and voltage acquisition unit IVU is a sampling module for collecting bus current / voltage. The "bus" refers to the line that provides DC power to the load after multiple battery modules are connected in series / parallel to form a complete energy storage unit. The current and voltage acquisition unit IVU can also establish a communication connection with the battery cluster control unit BCU to provide the battery cluster control unit BCU with the sampled bus current / voltage.

[0053] The protection module SW is a controllable switch module connected to the positive busbar and / or the negative busbar. Upon receiving a trigger signal, it can cut off the positive busbar and / or the negative busbar to protect the battery cluster and avoid safety accidents such as overheating or even fire of the battery module.

[0054] In some embodiments, the protection module SW may include a first relay connected to the positive bus and a second relay connected to the negative bus. When a trigger signal is received, the first relay and / or the second relay is disconnected to achieve battery module protection.

[0055] Figure 2 A method flow chart of a battery module protection method provided in an embodiment of the present application. The battery module protection method can be Figure 1b The BMS system shown is executed to improve the safety protection reliability of the BMS system.

[0056] like Figure 2 As shown, the battery module protection method includes:

[0057] S201. A first control unit obtains first data of battery cells in at least one group of battery modules.

[0058] The “first control unit 210” refers to a control unit associated with a battery module in a battery cluster (eg Figure 1a The battery cluster control unit BCU shown in the figure) can obtain the cell data of the battery module in the battery cluster by any suitable means (for example, receiving data from the second control unit). In this embodiment, "first data" is used to represent the cell data located in the first control unit 210. In one embodiment, the first data includes the cell data of the battery module that is in communication with the first control unit 210.

[0059] S202: The second control unit obtains second data of the battery cells in the corresponding battery module.

[0060] The “second control unit 220” refers to a control unit paired with or connected to a battery module (e.g. Figure 1a The battery management unit BMU shown in the figure) can collect and obtain the cell data of a battery module to facilitate the control or management of the corresponding battery module. In this embodiment, "second data" is used to represent the cell data located in the second control unit 220.

[0061] It should be noted that the above-mentioned “first” and “second” are only used to distinguish different control units and locations of data, but are not used to make specific limitations on the control units and data.

[0062] In some embodiments, a communication connection for transmitting data information can be established between the first control unit 210 and multiple second control units 220. According to the communication status between the second control unit 220 and the first control unit 210, the battery cell data of different battery modules collected by each second control unit 220 can be provided to the first control unit 210.

[0063] S203: Determine whether any one of the first data or the second data meets the protection condition. If yes, execute step S204; if no, continue to keep detecting, or perform periodic detection.

[0064] The protection conditions refer to some pre-set benchmarks for measuring the safety risk of the battery cluster or determining whether the battery cluster is safe.

[0065] The above protection conditions can be set at different locations of the BMS system to form multiple relatively independent battery cluster safety protection mechanisms, which serve as redundant backups for each other. For example, when the first control unit 210 cannot determine the first protection condition, the second control unit 220 can execute step S203 to determine whether the second protection condition is met. When the second control unit 220 cannot determine the second protection condition, the first control unit 210 can execute step S203 to determine whether the first protection condition is met.

[0066] The “first protection condition” refers to the protection condition set in the first control unit 210, and the “second protection condition” refers to the protection condition set in the second control unit 220. The “first” and “second” are only used to distinguish the location where the protection condition is set, and are not used to limit the specific content of the protection condition.

[0067] S204, triggering battery module protection.

[0068] When the protection conditions are met, it indicates that the battery cluster is in a dangerous state and needs to trigger battery module protection. "Battery module protection" is to make the BMS system issue action instructions such as cutting off the busbar to trigger the protection module SW to disconnect and avoid safety accidents such as fire.

[0069] In some embodiments, the first data acquired by the first control unit 210 may include the cell voltage and the cell temperature of the battery module. Accordingly, the first protection condition may include a judgment condition set based on the cell voltage and / or the cell temperature (e.g., a preset cell voltage and / or cell temperature limit value).

[0070] When executing step S203, the first control unit 210 can determine whether the cell voltage and / or cell temperature of any battery module in the first data has reached a preset limit value. If so, it is determined that the first data meets the protection condition and the battery module protection needs to be triggered.

[0071] In other embodiments, other functional modules in the BMS system may also be provided with protection conditions to allow more functional modules to independently execute step S203 to provide more safety redundancy. For example, a third protection condition may be provided in the first acquisition unit.

[0072] The “first acquisition unit 230” refers to another sampling unit (e.g., a sampling unit that collects data from the bus current, which is different from the object (i.e., the battery cell module) collected by the second control unit 220. Figure 1aThe "third protection condition" has a similar meaning to the terms "first protection condition" and "second protection condition", and is also only used to illustrate the location of the protection condition without limiting the specific content of the protection condition.

[0073] Specifically, the third protection condition may be a judgment condition set based on the bus current and / or voltage (for example, a preset limit value of the bus current and / or voltage). When the first acquisition unit 230 executes step S203, it may determine whether the bus current has reached a preset limit value based on the sampled data it obtains. If so, it is determined that the sampled data meets the protection condition, and the battery module protection is triggered.

[0074] In some embodiments, as the control center of the battery cluster, the first control unit 210 can also obtain the bus current and / or voltage in any suitable manner (such as receiving sampled data from the first acquisition unit 230). Correspondingly, the first protection condition set in the first control unit 210 can also include a judgment condition set based on the bus current and / or voltage (for example, a preset limit value of the bus current and / or voltage).

[0075] When executing step S203, the first control unit 210 may determine whether the bus current in the sampled data has reached a preset limit value. If so, it is determined that the sampled data meets the protection condition and the battery module protection is triggered.

[0076] In some other embodiments, in addition to the bus current / voltage data provided by the first acquisition unit 230, the first control unit 210 may also obtain the bus current / voltage data in other different ways. In order to distinguish and explain the acquisition method of the sampled data, the data obtained by the first acquisition unit 230 may be referred to as "first sampled data", and the bus current data obtained by the first control unit 210 in other ways may be referred to as "second sampled data".

[0077] In the case where there are multiple bus current / voltage data acquisition sources, the first protection condition set in the first control unit 210 may also include a judgment condition (e.g., a preset difference range) set based on the difference between the first sampled data and the second sampled data. In this embodiment, the preset difference range between the first sampled data and the second sampled data may be referred to as a "first range".

[0078] The first range indicates the allowable difference between the first sampled data and the second sampled data. If the difference exceeds the first range, it indicates that the battery cluster is in a dangerous or unsafe state and protection needs to be triggered in time.

[0079] The difference between the first sampled data and the second sampled data can be represented in many ways. For example, it can be represented by the absolute value of the difference between the first sampled data and the second sampled data. The larger the absolute value, the greater the difference between the two.

[0080] When the first control unit 210 executes step S203, it can first calculate the difference between the first sampled data and the second sampled data, and then take the absolute value of the difference as the difference. Finally, it is determined whether the difference exceeds the first range. If so, it is determined that the first protection condition is met, and the battery module protection is triggered.

[0081] In some embodiments, the second data acquired by the second control unit 220 may include the cell voltage and / or cell temperature of the battery module paired with the second control unit 220. Correspondingly, the second protection condition may also be a judgment condition set based on the cell voltage and / or cell temperature (for example, a preset limit value of the cell voltage and / or cell temperature).

[0082] When executing step S203, the second control unit 220 may determine whether the cell voltage and / or cell temperature in the second data has reached a preset limit value. If so, it is determined that the second protection condition is met, and the battery module protection is triggered.

[0083] It should be noted that the limit value described in the above embodiments is not limited to a specific numerical value, but may also be a floating range or other representation forms (such as percentage).

[0084] One of the advantages of the battery module protection method provided in the embodiment of the present application is that when the battery safety protection mode related to one or more control units fails, the battery safety protection function of the BMS system can be maintained by another control unit or the first acquisition unit 230, thereby improving the reliability of the battery cluster operation.

[0085] Figure 3 A method flow chart of a battery module protection method provided by another embodiment of the present application. In this embodiment, there are at least two different communication links between the first control unit 210 and the second control unit 220, and data can be transmitted between the two control units through any one of the communication links.

[0086] like Figure 3 As shown, the battery module protection method includes:

[0087] S301, determine whether the first communication link fails; if so, execute step S302, if not, execute step S303.

[0088] In this embodiment, an example is given in which two different first communication links and second communication links are provided between the first control unit 210 and the second control unit 220. The "first communication link" and the "second communication link" are only used to distinguish different communication links, indicating that the two communication links can operate independently without affecting each other, and are not used to limit the specific implementation form of the communication links.

[0089] The communication link may be implemented in any suitable communication connection mode. For example, the first communication link may be a bus communication link based on RS485 bus connection, and the second communication link may be a daisy chain communication link based on a daisy chain connection structure.

[0090] S302 . Provide second data of the battery cells in the battery module to the first control unit through a second communication link.

[0091] The first communication link can be considered as a default communication link, and the second communication link can be used as a backup communication link. Thus, when the first communication link fails due to various factors and cannot transmit information, the second communication link can be used to maintain data information transmission between the two control units.

[0092] S303: Provide second data of the battery cells in the battery module to the first control unit through the first communication link and / or the second communication link.

[0093] Wherein, when both the first communication link and the second communication link are available, the first communication link may be used by default to transmit data information preferentially. Of course, the first communication link and the second communication link may also be used simultaneously to transmit data information.

[0094] In some embodiments, in the case where the second data is transmitted via the first communication link and the second communication link, the first protection condition may also include a judgment condition set based on the difference between the first transmission data and the second transmission data (e.g., a preset transmission data difference range). In this embodiment, the data transmitted via the first communication link may be referred to as "first transmission data", the data transmitted via the second communication link may be referred to as "second transmission data", and the allowable difference range between the two may be referred to as "second range".

[0095] The second range can be set by those skilled in the art according to the actual needs. The difference between the first transmission data and the second transmission data can be represented in a variety of ways. For example, it can be represented by the absolute value of the difference between the first transmission data and the second transmission data. The larger the absolute value, the greater the difference between the two.

[0096] When the first control unit 210 executes step S203, it can first calculate the difference between the first transmission data and the second transmission data, and then take the absolute value of the difference as the difference. Finally, it is determined whether the difference exceeds the second range. If so, it is determined that the first protection condition is met, and the battery module protection is triggered.

[0097] One of the advantages of the battery module protection method provided in the embodiment of the present application is that at least two independent communication links are provided as data transmission redundancy, which can ensure the data information transmission between the first control unit 210 and the second control unit 220 when some communication links fail, thereby improving the reliability of system operation.

[0098] Based on the method steps to be performed in the above method embodiment, the embodiment of the present application further provides a BMS system. Figure 4 The BMS system provided in the embodiment of the present application. Figure 4 As shown, the BMS system may include: a first control module 410 , a second control module 420 and a protection module 430 .

[0099] The first control module 410 and the second control module 420 are processing units that belong to different functional modules in the BMS system and have logical operation capabilities. For example, the first control module 420 can be Figure 1a The battery cluster control unit BCU shown in the figure, the second control module 420 can be Figure 1a The battery management unit BMU shown.

[0100] Of course, the number of the first control module 410 and the second control module 420 can be determined according to actual conditions, and can be one or more and is not limited to Figure 4 The one shown.

[0101] The protection module 430 is a functional module for executing protection actions. It can be implemented in any suitable structure or form, which can be determined by the actual application scenario. For example, Figure 1a A pair of relays connected to the positive and negative bus bars are shown.

[0102] In this embodiment, the first control module 410 is coupled to the second control module 420 and the protection module 430 , and the second control module 420 is also coupled to the protection module 430 , thereby forming at least two relatively independent BMS protection triggering paths.

[0103] The first control module 410 may be configured to trigger the protection module 430 to perform a protection action (such as disconnecting a relay) when the first protection condition is met. The second control module 420 may also be configured to trigger the protection module 430 to perform a protection action when the second protection condition is met.

[0104] In some embodiments, please refer to Figure 4 The second control module 420 may further include a second acquisition unit 421 and a first microcontroller 422 .

[0105] The second acquisition unit 421 is a hardware circuit device connected to a battery module and used to collect relevant data of the battery module (such as the battery cell voltage and / or battery cell temperature). It can be implemented in a suitable manner according to the actual situation (for example, it can be implemented in a manner such as Figure 1a The analog front-end chip shown).

[0106] The first microcontroller 422 is a processor arranged in the second control module 420 or a device with similar logic operation capability. Based on the data information provided by the second acquisition unit 421, the first microcontroller 422 can be configured to perform the following steps: determine whether the cell voltage and / or the cell temperature acquired by the second acquisition unit 421 reaches a preset limit value. If so, output a first control signal to the protection module 430 to enable the protection module 430 to perform a protection action.

[0107] One of the advantages of the BMS system provided by the embodiment of the present application is that the two relatively independent first control modules 410 and second control modules 420 can serve as redundant backups for each other. In the event of failure of one of the control modules, the protection module 430 can be triggered by the other control module to perform a protection action, thereby achieving better system reliability.

[0108] Figure 5 A BMS system is provided in another embodiment of the present application. Figure 5 As shown, in Figure 4 Based on the BMS system shown, it further includes a first acquisition module 440 .

[0109] The first acquisition module 440 is a functional module for acquiring data related to the positive / negative busbars of the battery cluster (such as busbar current). It can be implemented in any suitable form, for example Figure 1a The current and voltage sampling unit IVU is shown.

[0110] The first acquisition module 440 is coupled to the first control module 410 and the protection module 430 respectively. In addition to providing the first control module 410 with the sampling data it has collected, it can also determine whether the sampling data it has collected meets the third protection condition, and then trigger the protection module 430 to perform a protection action when the third protection condition is met.

[0111] In some embodiments, please refer to Figure 5The first acquisition module 440 may include: a first sampling circuit 441 and a second microcontroller 442 .

[0112] Among them, the first sampling circuit 441 is a circuit structure for collecting bus current or voltage. It can have a variety of different implementation forms, as long as it can meet the needs of bus current detection. For example, a sampling circuit implemented based on the shunt principle, or a sampling circuit implemented based on a Hall sensor. In this application, the bus current collected by the first sampling circuit 441 can be referred to as the first sampling data.

[0113] The second microcontroller 442 is a device with logic operation capability similar to the first microcontroller 422. It can be configured to perform the following steps by embedding computer instructions or the like: determining whether the first sampled data meets the third protection condition, and outputting the second control signal to trigger the protection module to perform the protection action if the third protection condition is met.

[0114] Of course, the first control signal and the second control signal are only used to distinguish the control signals sent by different microcontrollers, and are not used to limit the specific form of the control signal. The control signal can be a high-level signal or a low-level signal, as long as it can trigger the protection module to perform the protection action.

[0115] One of the advantages of the BMS system provided by the embodiment of the present application is that: in addition to the first control module and the second control module, a method is provided in which the first acquisition module triggers the protection module to perform a protection action, which can provide more safety redundancy and further improve the reliability of the system.

[0116] Figure 6 Schematic diagram of the structure of the first acquisition module 440 provided in the embodiment of the present application. Figure 6 As shown, the first sampling circuit 441 of the first acquisition module 440 may be a sampling circuit implemented based on the shunt principle, including: a shunt Shunt, an amplifier Amp, and an analog / digital converter ADC.

[0117] The shunt may be a resistor with a suitable resistance value, which may be connected to the battery cluster bus in parallel and output a voltage signal that varies with the bus current.

[0118] The amplifier Amp is a device for amplifying electrical signals. It is coupled to the shunt Shunt, proportionally amplifies the voltage signal output by the shunt, and outputs it at its output end.

[0119] The analog / digital converter ADC is a device for users to realize mutual conversion between digital signals and analog signals. It can be coupled to the output end of the amplifier Amp, receive the proportionally amplified voltage signal and convert it into a digital signal, and provide it to the second microcontroller 442, so that the second microcontroller 442 performs the subsequent protection condition judgment step.

[0120] It should be noted that Figure 6 The structural diagram shown is only used to represent the basic structure of the sampling circuit implemented based on the shunt principle. Those skilled in the art can further adjust it to obtain other more embodiments. For example, a suitable filter Filter and an electrostatic resistor can be set between the shunt and the amplifier to reduce interference and protect electrical components such as the amplifier; or when the second microcontroller 442 has an analog signal input port, the analog / digital converter ADC is cancelled.

[0121] In some embodiments, please refer to Figure 6 , the first acquisition module also includes: a first comparator 443.

[0122] The first comparator 443 is a voltage comparator, which can compare the voltages between two input terminals and change the level signal outputted at its output terminal when the voltage magnitude relationship changes.

[0123] One of the input terminals of the first comparator 443 can be coupled to the output terminal of the amplifier Amp to receive the voltage signal acquired in real time. Another input terminal of the first comparator 443 can be connected to a reference voltage (such as a preset voltage limit value) determined according to the third protection condition.

[0124] In the actual operation process, Figure 6 As shown, when the voltage signal collected in real time by the first sampling circuit is abnormal (such as exceeding the reference voltage), the level signal output by the output end of the first comparator 443 will change. The changed level signal will be sent to the high-side driver chip (High Side Driver, HSD) through the isolation optical coupler, and then the high-side driver chip HSD drives the relay of the protection module 430 to disconnect.

[0125] Of course, the second microcontroller 442 can also send a corresponding control signal to the isolation optocoupler when the protection conditions are met, and then drive the relays connected to the positive bus and the negative bus to disconnect through the high-end driver chip HSD.

[0126] One of the advantages of the BMS system provided by the embodiment of the present application is that two relatively independent protection module triggering modes (based on the first comparator triggering and based on the second microcontroller triggering) are arranged in the first acquisition module, and the two can serve as redundant backup paths for each other, further improving the reliability of the system.

[0127] Figure 7 A BMS system is provided in another embodiment of the present application. Figure 7 As shown, in Figure 5 Based on the BMS system shown, it further includes: a second sampling circuit 451.

[0128] The second sampling circuit 451 is a sampling circuit independent of the first sampling circuit 441 and is also used to collect the bus current / voltage of the battery cluster. It can be any suitable sampling circuit, which may be the same as the first sampling circuit 441 or different from the first sampling circuit 441.

[0129] The second sampling circuit 451 is coupled to the first control module 410 and can provide the first control module 410 with data information related to the battery cluster bus (such as bus current). After receiving the sampled data, the first control module 410 can determine whether it meets the first protection condition. If so, the protection module is triggered to perform a protection action.

[0130] Please continue reading Figure 7 , the first control module 410 can obtain data information related to the battery cluster busbar through two different ways. In order to distinguish the data obtained in two different ways, the data information collected by the second sampling circuit 451 can be called the second sampling data, and the data information collected by the first acquisition module through the first sampling circuit 441 can be called the first sampling data.

[0131] In some embodiments, the first control module 410 may also determine whether it is necessary to trigger the protection module to perform a protection action based on the difference between the first sampling data and the second sampling data.

[0132] It can be understood that during the normal operation of the battery cluster, the first sampling data and the second sampling data collected by the two sampling circuits should be substantially the same. If the difference between the first sampling data and the second sampling data is very significant and exceeds the normal error range, it usually indicates that there is a problem with the battery cluster or its BMS system. Therefore, the first control module 410 can use the preset first range as a judgment standard (i.e., to judge whether the protection condition is met). By setting a suitable first range, it is judged whether the difference between the first sampling data and the second sampling data is very significant and exceeds the normal error range.

[0133] The difference between the first sampled data and the second sampled data can be represented by various methods such as difference. In some embodiments, the first control module 410 can calculate the difference between the first sampled data and the second sampled data, and then take the absolute value of the difference between the two to represent the difference between the first sampled data and the second sampled data.

[0134] One of the advantages of the BMS system provided in the embodiment of the present application is that it enriches the methods for the first control module to obtain current / voltage data related to the battery cluster bus, and in the event of failure of some methods, it can also provide data information such as bus current through redundant backup, thereby improving the reliability of the system during operation.

[0135] Figure 8 This is a schematic diagram of the structure of the second sampling circuit provided in the embodiment of the present application. Figure 8 As shown, the second sampling circuit 451 may be a sampling circuit implemented based on a Hall sensor, including: a Hall sensor Holl, a constant voltage source VCC and a filter Filter;

[0136] The Hall sensor Holl is a sensor based on the Hall effect, which can be connected to the battery cluster busbar in a non-contact manner and output a voltage signal that varies with the busbar current at the output end based on the Hall effect.

[0137] The constant voltage source VCC is connected to the power supply end of the Hall sensor Holl and is used in conjunction with the Hall sensor Holl to provide a stable voltage for the Hall sensor Holl.

[0138] The filter Filter is coupled to the output end of the Hall sensor Holl and the first control module 410 respectively, and can be used to filter the voltage signal output by the Hall sensor and provide the filtered voltage signal to the first control module 410 .

[0139] In some embodiments, please refer to Figure 8 In addition to the third microcontroller 412 as the main body, the first control module 410 may also include: a second comparator 413.

[0140] The second comparator 413 is similar to the first comparator 443 and is also a voltage comparator, which has the characteristic of changing the level signal outputted at its output terminal when the voltage magnitude relationship changes.

[0141] One input end of the second comparator 413 can be coupled to the output end of the Hall sensor Holl to receive the voltage signal acquired in real time. Another input end of the second comparator 413 can be connected to a reference voltage (such as a preset voltage limit value) determined according to the first protection condition.

[0142] In the actual operation process, Figure 7 , 8 As shown, when the voltage signal collected by the second sampling circuit is abnormal (such as exceeding the reference voltage), the level signal output by the output end of the second comparator 413 will change. The changed level signal will be sent to the high-end driver chip HSD through the isolation optical coupler. Then, the relay of the protection module 430 is driven by the high-end driver chip HSD to disconnect.

[0143] Of course, the third microcontroller 412 can also send a corresponding control signal to the isolation optocoupler when the protection conditions are met, and then drive the relays connected to the positive bus and the negative bus to disconnect through the high-end driver chip HSD.

[0144] One of the advantages of the BMS system provided by the embodiment of the present application is that a triggering method for triggering the protection module by a comparator is added in the first control module. It can be used as a redundant backup path to trigger the protection module to perform a protection action when the triggering method based on the microcontroller fails.

[0145] Fig. 9 A BMS system is provided in another embodiment of the present application. Figure 4 Compared with the BMS system shown in FIG. 1 , a first communication link L1 and a second communication link L2 are provided between the first control module 410 and the second control module 420 .

[0146] The first communication link L1 and the second communication link L2 are two independent communication links. The two can be implemented based on the same or different communication modes, and the failure of any one of the communication links will not affect the other communication link. For example, the first communication link L1 can be a communication link established based on bus communication, and the second communication link L2 can be a communication link established based on a daisy chain.

[0147] Thus, when the first communication link fails, the second control module 420 can provide the second data collected to the first control module 410 through the backup second communication link. When the second communication link fails, the second control module 420 can provide the second data to the first control module 410 through the first communication link.

[0148] In some embodiments, the first control module 410 may also determine whether it is necessary to trigger the protection module to perform a protection action according to the difference between the first transmission data and the second transmission data.

[0149] The “first transmission data” refers to the second data transmitted via the first communication link, and the “second transmission data” refers to the second data transmitted via the second communication link.

[0150] During normal operation, the data information transmitted to the first control module 410 by the two communication links should be substantially the same. If there is a significant difference between the first transmission data and the second transmission data, it usually indicates that there is a problem with the battery cluster or its BMS system. Therefore, the first control module 410 can use the preset second range as a judgment standard (i.e., judging whether the protection condition is met) to judge whether the difference between the first transmission data and the second transmission data exceeds the normal error range.

[0151] The difference between the first transmission data and the second transmission data can be represented by various methods such as difference. In actual execution, the first control module 410 can calculate the difference between the first transmission data and the second transmission data, and then take the absolute value of the difference between the two to represent the difference between the first transmission data and the second transmission data.

[0152] One of the advantages of the BMS system provided in the embodiment of the present application is that it enriches the communication links between the first control module and the second control module, and when some communication links fail, other backup communication links can be used to ensure data transmission between the first control module and the second control module, thereby improving the reliability of the system during operation.

[0153] It should be noted that the technical solutions provided in one or more of the above embodiments (such as increasing the number of communication links between the first control module and the second control module, increasing the number of sampling circuits for collecting bus current / voltage, independently executing the judgment steps of whether the protection conditions are met by the first control module, the second control module and the first acquisition module, and adding a new comparator-based protection module triggering method in the first control module and the first acquisition module) can be used in any combination and superposition.

[0154] The technical solutions provided in each embodiment can improve the reliability of the BMS system by increasing safety redundancy in different aspects. The embodiments obtained by superimposing more technical solutions will increase safety redundancy.

[0155] Fig.10 A schematic diagram of the structure of a microcontroller provided in an embodiment of the present application. The microcontroller may be a microcontroller in the first control module, a first microcontroller in the second control module, or a second microcontroller in the first acquisition module, and its specific implementation is not limited here.

[0156] like Fig.10 As shown, the microcontroller may include: a processor 502 , a communication interface 504 , a memory 506 , and a communication bus 508 .

[0157] The processor 502, the communication interface 504 and the memory 506 communicate with each other through the communication bus 508. The communication interface 504 is used for communication connection with other devices. The processor 502 is used to call the program 510 to execute one or more method steps in the above embodiments. Specifically, the program 510 may include program code or computer operation instructions.

[0158] In this embodiment, depending on the type of hardware used, processor 502 can be a central processing unit, other general-purpose processors, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc.

[0159] The memory 506 is used to store the program 510. The memory 506 may include a high-speed RAM memory, and may also include a non-volatile memory, such as at least one disk memory.

[0160] The embodiment of the present application further provides a computer-readable storage medium. The computer-readable storage medium may be a non-volatile computer-readable storage medium. The computer-readable storage medium stores a computer program.

[0161] When the computer program is executed by the processor, one or more steps of the battery module protection method disclosed in the embodiment of the present application are implemented. The complete computer program product is embodied in one or more computer-readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing the computer program disclosed in the embodiment of the present invention.

[0162] In order to fully illustrate the BMS system provided by the embodiment of the present application, the following Fig.11 The battery cluster shown is described in detail as an example.

[0163] like Fig.11 As shown, the battery cluster includes: a battery module BAT, a battery management unit BMU, a battery cluster control unit BCU, a current and voltage acquisition unit IVU and a protection module SW.

[0164] The battery module BAT is composed of several battery cells and is used to store electrical energy. The number of cells can be set appropriately according to the actual needs. Fig.11 For the sake of simplicity, only one is shown). After multiple battery modules BAT are connected in series / parallel to form a complete energy storage unit, a positive bus P+ and a negative bus P- provide direct current power to the load.

[0165] The battery management unit BMU is a functional module paired with the battery module BAT. It includes an analog front end AFE and a first microcontroller MCU1. The analog front end AFE is the acquisition circuit of the battery module, which is used to collect a series of data of the corresponding battery module (such as the voltage, current, temperature, etc. of the battery cell). The first microcontroller MCU1 is connected to the analog front end AFE to realize the functions of monitoring the operating status of the battery module and providing a communication interface.

[0166] The current and voltage acquisition unit IVU is a sampling module for collecting bus current / voltage, and includes a first sampling circuit Sample1 implemented based on a current divider, a second microcontroller MCU2, and a first comparator Competitor1.

[0167] The first sampling circuit Sample1 collects the bus current by connecting to the shunt of the positive bus and the negative bus. The second microcontroller MCU2 is connected to the first sampling circuit Sample1 to realize detection, provide communication interface and other functions. The first comparator Competitor1 is connected to the first sampling circuit Sample1, and can trigger the protection module SW by hardware circuit method.

[0168] The battery cluster control unit BCU is the processing center of the entire battery cluster. On the one hand, its main microcontroller MCU3 communicates with the first microcontroller MCU1 of the battery management unit BMU through CAN bus connection and daisy chain communication connection, and receives data related to the battery cell module collected by the battery management unit BMU. On the other hand, it communicates with the current and voltage acquisition unit IVU through RS485 serial bus communication to receive data related to the bus current collected by the current and voltage acquisition unit IVU.

[0169] In addition to the main microcontroller MCU3, the battery cluster control unit BCU also includes a second sampling circuit Sample2 and a second comparator Competitor2 based on a Hall sensor. The second sampling circuit Sample2 collects the bus current in a non-contact manner through the Hall sensor and provides it to the microcontroller MCU3 and the second comparator Competitor2. The second comparator Competitor2 and the microcontroller MCU3 trigger the protection module SW through hardware circuits and software programs respectively according to the bus current data collected by the second sampling circuit Sample2.

[0170] The protection module SW is a pair of relays arranged on the positive bus and the negative bus. The battery management unit BMU, the battery cluster control unit BCU, and the current and voltage acquisition unit IVU can be connected to the control end of the relay through a high-end driver chip (HSD) or other similar drive circuits. When the protection conditions are met, a trigger signal is provided and the relay is driven to cut off the positive bus and the negative bus to protect the battery cluster and avoid safety accidents such as overheating and fire of the battery module.

[0171] Fig.11 The battery cluster shown can perform a variety of different battery module protections, and timely cut off the positive busbar P+ and the negative busbar P- in an unsafe state to prevent the battery module from short circuiting, catching fire and other safety accidents. These battery module protections can be roughly divided into single-cell protection for the battery module and cluster protection for the entire battery cluster.

[0172] Among them, the single-cell protection methods for battery modules can include the following:

[0173] 11) The analog front end AFE has a built-in protection circuit, which can output a control signal to disconnect the relay when the battery cell is undervoltage, overvoltage, or the temperature exceeds the preset limit and maintains a certain delay time.

[0174] 12) The limit value of the battery module is set in the first microcontroller MCU1. It can process and collect the data collected by the analog front end AFE. After the undervoltage, overvoltage or temperature of the battery module exceeds the preset limit value and maintains a certain delay time, the output control signal causes the relay to disconnect.

[0175] 13) The battery module data collected and summarized by the battery management unit BMU is provided to the battery cluster control unit BCU through the CAN bus connection. After the battery cluster control unit BCU determines that there is undervoltage, overvoltage or temperature of at least one battery module exceeding the preset limit value and maintaining a certain delay time, it outputs a control signal to disconnect the relay.

[0176] 14) The battery module data collected and summarized by the battery management unit BMU is provided to the battery cluster control unit BCU through daisy chain communication. After the battery cluster control unit BCU determines that there is undervoltage, overvoltage or temperature of at least one battery module exceeding the preset limit value and maintaining a certain delay time, it outputs a control signal to disconnect the relay.

[0177] The cluster protection methods for the entire battery cluster can include the following:

[0178] 21) The first sampling circuit Sample1 of the current and voltage acquisition unit IVU acquires the current changes on the positive and negative busbars of the battery cluster. When the busbar current / voltage exceeds the reference voltage of the first comparator built into the current and voltage acquisition unit IVU, a corresponding control signal is generated to disconnect the relay.

[0179] 22) The first sampling circuit Sample1 of the current and voltage acquisition unit IVU acquires the current changes on the positive bus and the negative bus of the battery cluster. The second microcontroller MCU2 receives the bus current and determines whether the bus current exceeds the preset limit value. If so, a control signal is output to disconnect the relay.

[0180] 23) The battery cluster control unit BCU acquires the current changes on the positive bus and the negative bus through the current and voltage acquisition unit IVU. When the microcontroller MCU3 determines that the bus current exceeds the preset limit value, it outputs a control signal to disconnect the relay.

[0181] 24) The battery cluster control unit BCU collects the current changes on the positive bus and the negative bus through the second sampling circuit Sample2. When the microcontroller MCU3 determines that the bus current exceeds the preset limit value, it outputs a control signal to disconnect the relay.

[0182] 25) The second comparator Competitor built into the battery cluster control unit BCU receives the bus current acquisition result from the second sampling circuit Sample2 or the current and voltage acquisition unit IVU. When the acquired bus current / voltage exceeds the reference voltage of the second comparator, a corresponding control signal is generated to disconnect the relay.

[0183] In this embodiment, the design of single-cell protection fully utilizes the idle microprocessor resources located in the battery management unit BMU, and adds protection mode 12 as a redundant protection scheme. Even if the protection modes 13 and 14 executed by the battery cluster control unit BCU fail, single-cell protection of the battery module can be achieved.

[0184] The data transmission and communication between the battery management unit BMU and the battery cluster control unit BCU is the basis for the effective operation of protection modes 13 and 14. Fig.10 Two different communication links are provided in the battery cluster shown, which serve as redundant backup for each other to ensure the quality of data transmission between the battery management unit BMU and the battery cluster control unit BCU.

[0185] In the design of cluster protection, by adding a second sampling circuit (i.e., protection mode 24), the overcurrent protection function can still be provided when the current and voltage acquisition unit IVU fails. By adding a current and voltage acquisition unit IVU (i.e., protection mode 22), the overcurrent protection function can still be provided when the battery cluster control unit BCU fails.

[0186] In addition, the protection mode 25 implemented by the second comparator of the battery cluster control unit BCU can still provide the overcurrent protection function when the current and voltage acquisition unit IVU and the microcontroller MCU3 fail.

[0187] In summary, the BMS system provided in the embodiment of the present application fully utilizes the idle resources in the BMS system and provides and integrates a variety of different protection methods. These protection methods are relatively independent and can serve as redundant backups for each other, thereby effectively improving the reliability of battery module protection.

[0188] Based on the battery cluster provided in the above embodiments, the present application further provides an electric device, which includes the battery cluster and a load provided in one or more embodiments, and uses the battery cluster as a power source to supply power to the load.

[0189] Among them, the electrical device can specifically be any type of equipment or system that uses electricity as an energy source, including but not limited to similar energy storage devices such as emergency power supplies, electric vehicles with one wheel, two wheels, three wheels, four wheels or more wheels, electric impact drills, electric seed drills and other similar electric tools, and fixed-wing aircraft, rotorcraft, helicopters or quadcopters and other similar unmanned aerial vehicles that rely on electricity to drive.

[0190] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Under the concept of the present application, the technical features in the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other changes in different aspects of the present application as described above, which are not provided in detail for the sake of simplicity. Although the present application has been described in detail with reference to the aforementioned embodiments, a person of ordinary skill in the art should understand that the technical solutions described in the aforementioned embodiments can still be modified, or some of the technical features can be replaced by equivalents. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A battery module protection method, characterized in that: The method comprises: The first control unit obtains first data of the battery cells in at least one group of battery modules; The second control unit acquires second data of the battery cells in the battery module corresponding to the second control unit; When the first data or the second data meets the protection condition, triggering the battery module protection; the triggering of the battery module protection includes: controlling the controllable switch module connected to the positive bus and / or the negative bus to disconnect, cutting off the positive bus and / or the negative bus; Wherein, the protection condition includes: a first protection condition and a second protection condition, the first protection condition is set in the first control unit, and the second protection condition is set in the second control unit; The method further comprises: When the difference between the first sampling data and the second sampling data is not within a preset first range, the battery module protection is triggered; the first sampling data and the second sampling data are bus currents obtained by the first control unit in different ways; The first control unit communicates with the second control unit via at least one of a first communication link and a second communication link; or, When the first communication link fails, the second control unit provides the second data of the battery cells in a group of battery modules to the first control unit through the second communication link; When the difference between the first transmission data and the second transmission data is not within a preset second range, triggering the battery module protection; The first transmission data is the second data provided by the second control unit to the first control unit through the first communication link; The second transmission data is the second data provided by the second control unit to the first control unit through the second communication link.

2. The protection method according to claim 1, characterized in that: The first data includes: a cell voltage and / or a cell temperature of a battery module; The second data includes: a cell voltage and / or a cell temperature in a battery module corresponding to the second control unit; When the battery cell voltage and / or the battery cell temperature meets the protection condition, the battery module protection is triggered.

3. The protection method according to claim 1, characterized in that: The protection condition further includes: a third protection condition, the third protection condition being set in the first acquisition unit; The method further comprises: The first acquisition unit acquires first sampling data of the bus current; When the first sampling data meets the third protection condition, the battery module protection is triggered.

4. The protection method according to claim 3, characterized in that: Also includes: The first control unit acquires second sampling data of the bus current; When the second sampling data meets the first protection condition, the battery module protection is triggered.

5. The protection method according to claim 4, characterized in that: When the difference between the bus current acquired by the first control unit and the bus current acquired by the second control unit is not within a preset first range, the battery module protection is triggered.

6. The protection method according to any one of claims 1 to 5, characterized in that: When the first control unit is unable to determine the first protection condition, the second control unit determines the second protection condition; or, When the second control unit is unable to determine the second protection condition, the first control unit determines the first protection condition.

7. A BMS system, characterized in that: include: at least one first control module, at least one second control module and a protection module; The first control module is coupled to the second control module and the protection module respectively, and the second control module is coupled to the protection module; The first control module is configured to: trigger the protection module to perform a protection action when a first protection condition is met; The second control module is configured to: trigger the protection module to perform a protection action when the second protection condition is met; the protection module is: a controllable switch module connected to the positive bus and / or the negative bus; The first control module is further configured to: acquire first sampling data and second sampling data; and When the second sampling data meets the first protection condition, triggering the protection module to perform a protection action; The first sampling data and the second sampling data are bus currents obtained by the first control module in different ways; The first control module is further configured to: When the difference between the bus current of the first sampling data and the bus current of the second sampling data is not within a preset first range, triggering the protection module to perform a protection action; The first control module communicates with the second control module via a first communication link and / or a second communication link; the second control module is further configured to: Acquire second data of the battery cells in the battery module corresponding to the second control module; When the first communication link fails, providing the second data to the first control module via the second communication link; The first control module is further configured to: When the difference between the first transmission data and the second transmission data is not within a preset second range, triggering the protection module to perform a protection action; Wherein, the first transmission data is the second data provided by the second control module to the first control module through the first communication link; The second transmission data is the second data provided by the second control module to the first control module through the second communication link.

8. The BMS system according to claim 7, characterized in that: The second control module includes: a second acquisition unit and a first microcontroller; The second acquisition unit is configured to: collect the cell voltage and / or cell temperature of the cell in the battery module corresponding to the second control module; The first microcontroller is configured to: when the battery cell voltage and / or the battery cell temperature meets the second protection condition, output a first control signal to enable the protection module to perform a protection action.

9. The BMS system according to claim 7, characterized in that: Also includes: A first acquisition module coupled to the first control module and the protection module respectively; and a second sampling circuit coupled to the first control module; Wherein, the second sampling circuit is configured to: collect second sampling data of the bus current; The first acquisition module is configured to: acquire first sampling data, and When the first sampling data meets a third protection condition, triggering the protection module to perform a protection action; The first sampling data includes bus current.

10. The BMS system according to claim 9, characterized in that: The first acquisition module includes: a first sampling circuit and a second microcontroller; The first sampling circuit is configured to: collect first sampling data of bus current; The second microcontroller is configured to output a second control signal to enable the protection module to perform a protection action when the first sampling data meets the third protection condition.

11. The BMS system according to claim 10, characterized in that: The first sampling circuit includes: a current divider, an amplifier and an analog-to-digital converter; The shunt is connected to the battery cluster bus and outputs a voltage signal that varies with the bus current; The amplifier is coupled to the shunt; the amplifier is configured to: amplify the voltage signal; The analog-to-digital converter is coupled to the output end of the amplifier; the analog-to-digital converter is configured to: convert the amplified voltage signal into a digital signal and provide it to the second microcontroller; The second sampling circuit includes: a Hall sensor, a constant voltage source and a filter; The Hall sensor is connected to the battery cluster bus and outputs a voltage signal that varies with the bus current; The constant voltage source is connected to the Hall sensor to provide a stable voltage for the Hall sensor; The filter is coupled to the output end of the Hall sensor and the first control module respectively, and is used for filtering the voltage signal output by the Hall sensor and providing the signal to the first control module.

12. The BMS system according to claim 11, characterized in that: The first acquisition module further includes: a first comparator; The first comparator is coupled to the output end of the amplifier; the first comparator is configured to: trigger the protection module to perform a protection action when the amplified voltage signal meets a third protection condition.

13. The BMS system according to claim 11, characterized in that: The first control module further includes: a second comparator; The second comparator is coupled to the output terminal of the Hall sensor; The second comparator is configured to trigger the protection module to perform a protection action when the voltage signal output by the Hall sensor meets the first protection condition.

14. The BMS system according to any one of claims 7 to 12, characterized in that: When the first control module is unable to determine the first protection condition, the second control module determines the second protection condition, or; When the second control module is unable to determine the second protection condition, the first control module determines the protection condition.

15. The BMS system according to any one of claims 7 to 12, characterized in that: The protection module includes: a first relay connected to the positive bus and a second relay connected to the negative bus.

16. A battery cluster, characterized in that: It comprises a BMS system and a battery module as described in any one of claims 7 to 15, wherein the battery module is one or more.

17. An electrical device, characterized in that: The electric device comprises the battery cluster as claimed in claim 16 and a load powered by the battery cluster.

Images