Method for managing safety of lithium battery pack for space vehicles

Abstract

The application provides a lithium battery pack safety management method for a space vehicle, aiming at the design idea that the comprehensive electronics is the whole satellite control center of the modern spacecraft, adopts the power controller and the comprehensive electronics to realize the hierarchical alarm measures of the whole satellite safety management, the power controller and the comprehensive electronics are redundant backups in the first stage light undersupply alarm, the two must all meet the starting control condition in the second stage deep undersupply alarm, the two stage alarms can effectively prevent the lithium battery over-discharge, gain time for manual intervention treatment of over-discharge, avoid the high-risk action of the discharge switch opening frequently, and improve the flexibility and reliability of the safety management measures; when the lithium battery pack power recovers, the power supply path can be recovered step by step according to the preset threshold, and the discharge switch of the space vehicle is automatically recovered and connected only when the power is sufficient.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of space vehicle energy safety management control logic, in particular to a lithium battery pack safety management method for a space vehicle. BACKGROUND

[0002] As an important component of the power system of a space vehicle, a battery pack is the only power supply device for the vehicle during the main active phase of orbit insertion and the shadow period in orbit. There are three types of battery commonly used in space vehicles: cadmium-nickel batteries, hydrogen-nickel batteries and lithium-ion batteries. When cadmium-nickel batteries and hydrogen-nickel batteries are discharged to 0V, they can still be restored to normal use, so there is no over-discharge protection measure for the battery in the previous on-orbit power management module.

[0003] However, lithium-ion batteries are different from cadmium-nickel batteries and hydrogen-nickel batteries. When a space vehicle using a lithium-ion battery pack experiences a serious over-discharge due to an on-orbit failure, the discharge voltage of the battery will be lower than the minimum allowable use voltage, and a large amount of lithium ions will be deintercalated from the negative electrode and intercalated into the layered structure of the positive electrode, which not only changes the lattice structure of the positive electrode material, but also causes the negative electrode lattice to collapse, resulting in a decrease in conductivity and an irreversible loss of capacity of the battery, i.e., the battery pack will lose its original energy storage function and cannot be restored, which will lead to the failure of the space vehicle mission. Therefore, the control strategy of strictly limiting over-discharge and preventing under-voltage for lithium-ion battery packs is crucial to the reliability of the lithium-ion battery packs and even the vehicle.

[0004] The current under-voltage protection method for the power system of a domestic space vehicle is controlled by software of the lower computer. If the on-orbit lower computer fails, only basic charge and discharge control of the lithium battery pack can be maintained, and the over-discharge protection function of the lithium battery pack will be lost. When the entire satellite is powered on again, the discharge path cannot be automatically restored, and an uplink remote control command needs to be sent to turn on the discharge switch, which cannot meet the restoration requirements under extreme conditions such as all light periods being outside the country or satellite attitude rollover.

[0005] In the patent document with publication number CN106787017A, a lithium battery over-discharge protection and autonomous recovery power supply control method for a spacecraft is disclosed. In view of the characteristics of some spacecrafts, such as multiple cabin sections, high equipment integration and complex arc section flight process, the over-discharge protection and autonomous recovery power supply control of the lithium-ion battery pack for two cabin sections is realized by software control of the power system lower computer. The lower computer autonomously detects the voltage of the battery pack and the voltage of the individual cells, compares them with the preset over-discharge threshold, and adopts different cabin section grading power-off protection control. When the entire satellite is powered on again, the discharge switch is automatically turned on by the preset over-discharge recovery voltage threshold, thereby restoring the power supply.

[0006] A satellite battery pack adaptive charging method is disclosed in the patent document with publication number CN106848461A. Under the condition that the charging current is not greater than the preset current, the adaptive charging control program is enabled, which includes overvoltage protection program and over-temperature protection program. In the absence of overvoltage protection program and over-temperature protection program, the charging is started.

[0007] A space battery charging control system is disclosed in the patent document with publication number CN105552989A. The battery can be charged with large current limited charging and small current trickle charging by combining multiple solar cell arrays. The battery charging control system circuit is divided into two stages. In the first stage, the MOSFET tube is switched controlled by PWM control method, which can shunt the excess solar cell array power and control the battery to charge with large current constant current. In the second stage, the battery power is calculated and judged by the electric quantity meter. If the current conversion requirement is met, the trickle charging is performed by trickle selection control.

[0008] A space vehicle long-term on-orbit energy system safety evaluation method is disclosed in the patent document with publication number CN109558653A, which includes: (1) establishing an energy system safety model; (2) injecting the preset failure rate parameter index into the energy system safety model to obtain a safety index equation; (3) injecting the current stress, thermal stress and mechanical stress tolerance obtained by experiment into the obtained safety index equation to obtain an energy system safety boundary; (4) allowing the energy system to operate on-orbit and monitoring the occurrence frequency and magnitude of current stress, thermal stress and mechanical stress of the energy system; (5) injecting the occurrence frequency and magnitude monitored in step (4) into the safety index equation to obtain an energy system safety real-time value; (6) comparing the energy system safety real-time value with the size of the energy system safety boundary to complete the safety evaluation of the space vehicle long-term on-orbit energy system.

[0009] For the related technology in the above, the inventors believe that the above scheme mainly protects the battery management by overvoltage, over-temperature and under-voltage protection. After under-voltage, it only adjusts the battery charge-discharge ratio and unlocks the charging, and the control method of the charging current in the battery pack charging process does not involve the over-discharge control method. Therefore, a technical solution is needed to improve the above technical problems. SUMMARY

[0010] In view of the defects in the prior art, the purpose of the present application is to provide a lithium battery pack safety management method for space vehicles.

[0011] According to the present invention, a safety management method for a lithium battery pack for a spacecraft includes a lithium battery pack composed of three parallel and seven series lithium battery cells. The method includes an undervoltage protection method and an autonomous power-on recovery method. When the operating voltage of the lithium battery pack is lower or higher than a set value, the safety management method is activated. The set value includes set value 1, set value 2, set value 3, set value 4 and set value 5.

[0012] Preferably, the undervoltage protection method includes the following steps:

[0013] Step S1: The power controller software and integrated electronics respectively collect and process the lithium battery pack voltage. When either party detects that the lithium battery pack has entered a slightly undervoltage state, it will automatically enter the preset slightly undervoltage mode.

[0014] Step S2: Utilize integrated electronic data acquisition and processing to process the lithium battery pack voltage. When the lithium battery pack is detected to have entered a deep undervoltage state, close the software undervoltage protection switch.

[0015] Step S3: The power controller hardware circuit collects and processes the lithium battery pack voltage. When the lithium battery pack is detected to be in a deep undervoltage state, the hardware undervoltage protection switch is closed to complete the satellite discharge switch disconnection action.

[0016] Preferably, step S1 includes the following steps:

[0017] Step S1.1: Use the power controller software to collect and process the lithium battery pack voltage, and determine whether the lithium battery pack voltage is less than or equal to the set value 1 for n consecutive collection cycles. If yes, send an alarm status word to the integrated electronics via the bus and then jump to step S1.2. If no, repeat step S1.1. Use the integrated electronics to collect and process the lithium battery pack voltage, and determine whether the lithium battery pack voltage is less than or equal to the set value 2 for n consecutive collection cycles. If yes, jump to step S1.3. If no, repeat step S1.1. Use the integrated electronics to monitor the bus alarm status and determine whether a bus alarm status word has been received. If yes, jump to step S1.4. If no, repeat step S1.1.

[0018] Step S1.2: The power controller software restores setting value 1 to its default value, and then proceeds to step S1.4;

[0019] Step S1.3: The integrated electronics restores the set value 2 to its default value, and then proceeds to step S1.4;

[0020] Step S1.4: The integrated electronics sends the corresponding load shutdown remote control command and jumps to step S2.

[0021] Preferably, step S2 includes the following steps:

[0022] Step S2.1: Utilize integrated electronic data acquisition to process the lithium battery pack voltage and determine whether the lithium battery pack voltage is less than or equal to the set value 3 within n consecutive acquisition cycles. If yes, proceed to step S2.2; otherwise, repeat step S2.1.

[0023] Step S2.2: The integrated electronics restores the set value 3 to its default value, sends a lithium battery pack software undervoltage protection command, closes the software undervoltage protection switch, and jumps to step S3.

[0024] Preferably, step S3 includes the following steps:

[0025] Step S3.1: Use the power controller hardware circuit to collect and process the lithium battery pack voltage, and use a three-out-of-two redundant circuit to determine whether the lithium battery pack voltage is less than or equal to the set value of 4. If yes, jump to step S3.2; if no, repeat step S3.1.

[0026] Step S3.2: The power controller hardware circuit sends a hardware undervoltage protection command to close the hardware undervoltage protection switch;

[0027] Step S3.3: The discharge switch disconnection command transmission path is established, and the entire satellite discharge switch is disconnected.

[0028] Preferably, the autonomous power-on recovery method includes the following steps:

[0029] Step 1: Use the power controller hardware circuit to collect and process the lithium battery pack voltage. Use a 3-out-of-2 redundant circuit to determine whether the lithium battery pack voltage is greater than the set value of 4. If yes, jump to step 2; if no, repeat step 1.

[0030] Step 2: The power controller hardware circuit stops sending hardware undervoltage protection commands, and the hardware undervoltage protection switch is turned off;

[0031] Step 3: Utilize integrated electronic data acquisition and processing to determine whether the lithium battery pack voltage is greater than the set value of 5 for n consecutive cycles. If yes, proceed to step 4; otherwise, terminate.

[0032] Step 4: Use the integrated electronic discharge switch to send a direct command to disconnect the software undervoltage protection switch and simultaneously connect the discharge switch to restore the power supply path of the entire satellite.

[0033] Preferably, the setpoint 1 is adjusted in orbit and set by parameter injection; the setpoint 2 is adjusted in orbit and set by parameter injection, and the setpoint 2 is less than the setpoint 1; the setpoint 3 is adjusted in orbit and set by parameter injection, and the setpoint 3 is less than the setpoint 2.

[0034] Preferably, the set value 4 is less than the set value 3, and the set value 4 is a fixed value; the set value 5 is adjusted on-orbit and set by parameter injection, and the set value 5 is greater than the set value 1.

[0035] Preferably, the software undervoltage protection switch is a magnetic latching relay.

[0036] Preferably, the hardware undervoltage protection switch is an electromagnetic relay.

[0037] Compared with the prior art, the present invention has the following beneficial effects:

[0038] 1. The power controller and integrated electronic redundancy safety management scheme adopted in this invention can be applied to all spacecraft containing a power control unit and an integrated management unit, including battery undervoltage protection management and autonomous power recovery management.

[0039] 2. This invention enables graded safety management of energy for spacecraft. When a mild undervoltage mode is reached, only the downstream load is shut off. When a deep undervoltage mode is reached, the main discharge switch of the spacecraft is disconnected. This allows the spacecraft to recover autonomously during the transition period from mild to deep undervoltage mode. This effectively prevents over-discharge of lithium batteries and avoids the frequent occurrence of high-risk actions such as disconnecting the discharge switch, thus improving the flexibility and reliability of safety management measures.

[0040] 3. After parameter injection, this invention can fully realize on-orbit autonomous control of spacecraft without ground human intervention, and is applicable to spacecraft under various orbital conditions. Attached Figure Description

[0041] Other features, objects, and advantages of the present invention will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings:

[0042] Figure 1 This is a flowchart of the undervoltage protection procedure of the present invention;

[0043] Figure 2 This is a flowchart of the autonomous power-on recovery procedure of the present invention;

[0044] Figure 3 A schematic diagram of a lithium battery pack safety management and control circuit provided in an embodiment of the present invention;

[0045] Figure 4 This is a schematic diagram of the three-parallel seven-series lithium battery pack of the present invention. Detailed Implementation

[0046] The present invention will now be described in detail with reference to specific embodiments. These embodiments will help those skilled in the art to further understand the present invention, but do not limit the invention in any way. It should be noted that those skilled in the art can make several changes and improvements without departing from the concept of the present invention. These all fall within the protection scope of the present invention.

[0047] The problem solved by this invention is that, based on the original preset threshold comparison method, a two-level alarm measure is adopted for the safety management of the entire satellite. Each level of alarm has two control methods: power controller and integrated electronics. The dual-machine redundancy control improves the flexibility and reliability of the lithium battery pack's undervoltage protection and solves the problem that the power controller cannot control the entire satellite's load. When the entire satellite's energy is gradually restored, the discharge switch can be turned on autonomously through the graded threshold control of the power controller and integrated electronics, so as to realize the spacecraft's autonomous power restoration.

[0048] A safety management method for a lithium battery pack used in a spacecraft includes an undervoltage protection procedure and an autonomous power-on recovery procedure. The lithium battery pack is composed of three parallel and seven series lithium battery cells. The safety management parameter settings are: setting value 1 is 23.8V, setting value 2 is 23.1V, setting value 3 is 21.7V, setting value 4 is 20.5V, and setting value 5 is 25.2V.

[0049] A safety management method for lithium battery packs used in spacecraft, the undervoltage protection procedure includes the following steps:

[0050] Step S1: The power controller software and integrated electronics respectively collect and process the lithium battery pack voltage. When either party detects that the lithium battery pack has entered a slightly undervoltage state, it will automatically enter the preset slightly undervoltage mode. Step S1.1: The power controller software collects and processes the lithium battery pack voltage, and determines whether the lithium battery pack voltage is less than or equal to the set value 1 for n consecutive collection cycles. If yes, an alarm status word is sent to the integrated electronics via the bus, and then the process jumps to step S1.2. If no, step S1.1 is repeated. At the same time, the integrated electronics collects and processes the lithium battery pack voltage, and determines whether the lithium battery pack voltage is less than or equal to the set value 2 for n consecutive collection cycles. If yes, the process jumps to step S1.3. If no, step S1.1 is repeated. At the same time, the integrated electronics monitors the bus alarm status and determines whether a bus alarm status word is received. If yes, the process jumps to step S1.4. If no, step S1.1 is repeated. Step S1.2: The power controller software restores the set value 1 to its default value, and then jumps to step S1.4. Step S1.3: The integrated electronics restores the set value 2 to its default value, and then jumps to step S1.4. Step S1.4: The integrated electronics sends the corresponding load shutdown remote control command and jumps to step S2.

[0051] Step S2: The lithium battery pack voltage is processed using integrated electronic data acquisition. When the lithium battery pack is detected to be in a deep undervoltage state, the software undervoltage protection switch is closed. Step S2.1: The lithium battery pack voltage is processed using integrated electronic data acquisition to determine if the lithium battery pack voltage is less than or equal to the set value 3 for n consecutive acquisition cycles. If yes, proceed to step S2.2; otherwise, repeat step S2.1. Step S2.2: The integrated electronic data acquisition restores the set value 3 to its default value, sends a lithium battery pack software undervoltage protection command, closes the software undervoltage protection switch, and proceeds to step S3.

[0052] Step S3: The power controller hardware circuit collects and processes the lithium battery pack voltage. When the lithium battery pack is detected to be in a deep undervoltage state, the hardware undervoltage protection switch is closed, completing the satellite discharge switch disconnection action. Step S3.1: The power controller hardware circuit collects and processes the lithium battery pack voltage. A 3-out-of-2 redundant circuit is used to determine whether the lithium battery pack voltage is less than or equal to the set value of 4. If yes, proceed to step S3.2; otherwise, repeat step S3.1. Step S3.2: The power controller hardware circuit sends a hardware undervoltage protection command to close the hardware undervoltage protection switch. Step S3.3: The discharge switch disconnection command transmission path is established, and the satellite discharge switch is disconnected.

[0053] The self-restore power-on procedure includes the following steps:

[0054] Step 1: Use the power controller hardware circuit to collect and process the lithium battery pack voltage. Use a 3-out-of-2 redundant circuit to determine whether the lithium battery pack voltage is greater than the set value of 4. If yes, jump to step 2; if no, repeat step 1.

[0055] Step 2: The power controller hardware circuit stops sending hardware undervoltage protection commands, and the hardware undervoltage protection switch is turned off.

[0056] Step 3: Utilize integrated electronic data acquisition and processing to determine whether the lithium battery pack voltage is greater than the set value of 5 for n consecutive cycles. If yes, proceed to step 4; otherwise, terminate.

[0057] Step 4: Use the integrated electronic discharge switch to send a direct command to disconnect the software undervoltage protection switch and simultaneously connect the discharge switch to restore the power supply path of the entire satellite.

[0058] Setting value 1 can be adjusted in orbit and set via parameter injection; setting value 2 can be adjusted in orbit and set via parameter injection, and setting value 2 should be less than setting value 1; setting value 3 can be adjusted in orbit and set via parameter injection, and setting value 3 should be less than setting value 2; setting value 4 should be less than setting value 3, and setting value 4 is a fixed value; setting value 5 can be adjusted in orbit and set via parameter injection, and setting value 5 should be greater than setting value 1.

[0059] The software undervoltage protection switch uses a magnetic latching relay; the hardware undervoltage protection switch uses an electromagnetic relay.

[0060] When the operating voltage of the spacecraft's lithium battery pack continues to drop below 23.8V, the undervoltage protection program is first activated. The power controller software collects data and finds that the lithium battery pack voltage is less than or equal to 23.8V for five consecutive collection cycles. Then, the threshold of 23.8V is restored to the default value of 0, and an alarm status word is sent to the integrated electronics via the bus. After the integrated electronics monitors more than two consecutive frames of alarm status words on the bus, it shuts down all loads except for the satellite's constantly powered unit, such as data transmission, relays, and payloads, and switches the thermal control mode to the minimum mode.

[0061] The lithium battery pack operating voltage continued to drop. When it fell below 23.1V, the integrated electronic system detected that the lithium battery pack voltage was less than or equal to 23.1V for five consecutive acquisition cycles. After that, the integrated electronic system restored the threshold of 23.1V to the default value of 0, shut down the data transmission, relay, and load loads except for the satellite's constantly powered single unit, and switched the thermal control mode to the minimum mode.

[0062] Reference Figure 3 After the above two safety management measures are implemented, if the lithium battery pack operating voltage continues to drop below 21.7V, the integrated electronic system detects that the lithium battery pack voltage is less than or equal to 21.7V for five consecutive sampling cycles. After that, the integrated electronic system restores 21.7V to the default value of 0 and sends a lithium battery pack software undervoltage protection command, closing the software undervoltage protection switch. If the lithium battery pack operating voltage continues to drop, the power controller hardware circuit detects that the lithium battery pack voltage is less than or equal to 20.5V and continuously sends a hardware undervoltage protection command, closing the hardware undervoltage protection switch. At this point, the discharge switch disconnect command transmission path is established, the discharge switch is disconnected, the lithium battery pack will no longer discharge, and the aircraft will lose power.

[0063] Reference Figure 2 , Figure 3 After a power outage, the spacecraft can be powered normally by its solar panels during periods of on-orbit illumination. In addition to maintaining the continuous power supply of the entire satellite and the operation of individual units, it can also continuously charge the lithium battery pack. When the lithium battery pack voltage exceeds 20.5V, the power controller hardware circuit stops sending hardware undervoltage protection commands, the hardware undervoltage protection switch is opened, the discharge switch disconnect command transmission path is disconnected, and the transmission of discharge switch disconnect commands stops. As charging continues, the lithium battery pack operating voltage continues to rise. During periods of illumination, when the integrated electronic power supply is activated, if the lithium battery pack voltage exceeds 25.2V for 20 consecutive acquisition cycles, a direct command to connect the discharge switch is sent, and at the same time, the control software undervoltage protection switch is disconnected. At this point, the discharge switch is reconnected, and the power supply path of the entire satellite returns to normal.

[0064] The power controller and integrated electronic redundancy safety management scheme adopted in this invention can be applied to all spacecraft containing a power control unit and an integrated management unit, including battery undervoltage protection management and autonomous power recovery management. This invention enables graded safety management of the spacecraft's energy. When a mild undervoltage mode is reached, only the downstream load is shut down. Only when a deep undervoltage mode is the spacecraft's main discharge switch disconnected. This allows the spacecraft an opportunity to autonomously recover during the transition period from mild to deep undervoltage modes, effectively preventing lithium battery over-discharge and avoiding the frequent occurrence of high-risk actions such as discharge switch disconnection, thus improving the flexibility and reliability of safety management measures. After parameter injection, this invention can fully realize on-orbit autonomous control of the spacecraft without ground human intervention and is suitable for spacecraft under various orbital conditions.

[0065] Those skilled in the art will understand that, besides implementing the system and its various devices, modules, and units provided by this invention in the form of purely computer-readable program code, the same functions can be achieved entirely through logical programming of the method steps, making the system and its various devices, modules, and units of this invention function in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers. Therefore, the system and its various devices, modules, and units provided by this invention can be considered as a hardware component, and the devices, modules, and units included therein for implementing various functions can also be considered as structures within the hardware component; alternatively, the devices, modules, and units for implementing various functions can be considered as both software modules implementing the method and structures within the hardware component.

[0066] Specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the specific embodiments described above, and those skilled in the art can make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention. Unless otherwise specified, the embodiments and features described in this application can be arbitrarily combined with each other.

Claims

1. A safety management method for lithium battery packs used in spacecraft, characterized in that, The method includes a lithium battery pack, which is composed of three parallel and seven series lithium battery cells. The method includes an undervoltage protection method and an autonomous power recovery method. When the operating voltage of the lithium battery pack is lower or higher than a set value, a safety management method is activated. The set value includes set value 1, set value 2, set value 3, set value 4 and set value 5. The undervoltage protection method includes the following steps: Step S1: The power controller software and integrated electronics respectively collect and process the lithium battery pack voltage. When either party detects that the lithium battery pack has entered a slightly undervoltage state, it will automatically enter the preset slightly undervoltage mode. Step S2: Utilize integrated electronic data acquisition and processing to process the lithium battery pack voltage. When the lithium battery pack is detected to have entered a deep undervoltage state, close the software undervoltage protection switch. Step S3: Use the power controller hardware circuit to collect and process the lithium battery pack voltage. When the lithium battery pack is detected to be in a deep undervoltage state, close the hardware undervoltage protection switch and complete the whole satellite discharge switch disconnection action. The autonomous power-on recovery method includes the following steps: Step 1: Use the power controller hardware circuit to collect and process the lithium battery pack voltage. Use a 3-out-of-2 redundant circuit to determine whether the lithium battery pack voltage is greater than the set value of 4. If yes, jump to step 2; if no, repeat step 1. Step 2: The power controller hardware circuit stops sending hardware undervoltage protection commands, and the hardware undervoltage protection switch is turned off; Step 3: Utilize integrated electronic data acquisition and processing to determine whether the lithium battery pack voltage is greater than the set value of 5 for n consecutive cycles. If yes, proceed to step 4; otherwise, terminate. Step 4: Use the integrated electronic system to send a direct command to the discharge switch, disconnect the software undervoltage protection switch, and simultaneously connect the discharge switch to restore the power supply path for the entire satellite. Step S2 includes the following steps: Step S2.1: Utilize integrated electronic data acquisition to process the lithium battery pack voltage and determine whether the lithium battery pack voltage is less than or equal to the set value 3 within n consecutive acquisition cycles. If yes, proceed to step S2.2; otherwise, repeat step S2.

1. Step S2.2: The integrated electronics restores the set value 3 to the default value, sends a lithium battery pack software undervoltage protection command, closes the software undervoltage protection switch, and jumps to step S3; Step S3 includes the following steps: Step S3.1: Use the power controller hardware circuit to collect and process the lithium battery pack voltage, and use a three-out-of-two redundant circuit to determine whether the lithium battery pack voltage is less than or equal to the set value of 4. If yes, jump to step S3.2; if no, repeat step S3.

1. Step S3.2: The power controller hardware circuit sends a hardware undervoltage protection command to close the hardware undervoltage protection switch; Step S3.3: The discharge switch disconnection command transmission path is established, and the entire satellite discharge switch is disconnected; When the mild undervoltage mode is reached, only the downstream load is turned off. When the deep undervoltage mode is reached, the main discharge switch of the aircraft is disconnected, so that the aircraft has the opportunity to recover autonomously during the transition period from mild undervoltage to deep undervoltage mode.

2. The safety management method for lithium battery packs used in spacecraft according to claim 1, characterized in that, Step S1 includes the following steps: Step S1.1: Use the power controller software to collect and process the lithium battery pack voltage, and determine whether the lithium battery pack voltage is less than or equal to the set value 1 for n consecutive collection cycles. If yes, send an alarm status word to the integrated electronics via the bus and then jump to step S1.

2. If no, repeat step S1.

1. Use the integrated electronics to collect and process the lithium battery pack voltage, and determine whether the lithium battery pack voltage is less than or equal to the set value 2 for n consecutive collection cycles. If yes, jump to step S1.

3. If no, repeat step S1.

1. Use the integrated electronics to monitor the bus alarm status and determine whether a bus alarm status word has been received. If yes, jump to step S1.

4. If no, repeat step S1.

1. Step S1.2: The power controller software restores setting value 1 to its default value, and then proceeds to step S1.4; Step S1.3: The integrated electronics restores the set value 2 to its default value, and then proceeds to step S1.4; Step S1.4: The integrated electronics sends the corresponding load shutdown remote control command and jumps to step S2.

3. The safety management method for lithium battery packs used in spacecraft according to claim 1, characterized in that, The setpoint 1 is adjusted in orbit and set by parameter injection; the setpoint 2 is adjusted in orbit and set by parameter injection, and the setpoint 2 is less than the setpoint 1; the setpoint 3 is adjusted in orbit and set by parameter injection, and the setpoint 3 is less than the setpoint 2.

4. The safety management method for lithium battery packs used in spacecraft according to claim 1, characterized in that, The set value 4 is less than the set value 3, and the set value 4 is a fixed value; the set value 5 is adjusted on-orbit and set by parameter injection, and the set value 5 is greater than the set value 1.

5. The safety management method for lithium battery packs used in spacecraft according to claim 1, characterized in that, The software undervoltage protection switch uses a magnetic latching relay.

6. The safety management method for lithium battery packs used in spacecraft according to claim 1, characterized in that, The hardware undervoltage protection switch uses an electromagnetic relay.

Images