A battery management system and management method for high-reliability analog front-end communication

Abstract

The application relates to a high-reliability battery management system and management method for analog front-end communication, which is composed of a switch control module, a chip communication module, a protection logic module, a protection communication module and a logic execution module; the switch control module comprises a high-voltage isolation unit for protecting a chip from high-voltage interference and a short-circuit switch corresponding to different analog front-end communication lines; the chip communication module comprises CAN communication and SPI communication; the protection logic module comprises a main chip, IO, an SPI communication channel and a CAN communication channel; the protection communication module comprises a transceiver and a channel switching switch module according to communication modes; the main chip included in the protection logic module is a logic processing chip of the protection system, and the chip and the main chip constitute an entity of the logic execution module. The application can immediately start a hardware protection mechanism after a broken chain fault occurs, the chip accesses a daisy chain protection circuit by receiving a broken chain position informed by the main chip, and whether the broken chain fault is a hard-wire fault is tested.

Description

Technical Field

[0001] This invention belongs to the field of battery technology, specifically relating to a battery management system and management method with high reliability analog front-end communication. Background Technology

[0002] The main function of a battery management system (BMS) is to estimate battery state parameters and diagnose battery-related faults, and then respond accordingly based on this information. The core information acquisition unit of the BMS is the analog front-end, which collects cell voltage and battery temperature, and can diagnose the sampling line, equalization line, and its own functions.

[0003] The accuracy and reliability of the information reported by the above functions depend on whether the simulation front-end can report accurate information. Due to the complex electromagnetic environment and numerous hard-wired connection points in electric vehicle battery systems, chain breakage faults are relatively common. One cause is software misjudgment when battery interference exceeds the software filtering threshold; another is unreliable actual connections. Currently, in the industry, when a chain breakage fault occurs, it limits or even interrupts power, severely impacting user experience and even posing a danger in driving scenarios. Summary of the Invention

[0004] The purpose of this invention is to provide a battery management system with highly reliable analog front-end communication, and a management method for the battery management system with highly reliable analog front-end communication, so as to solve the problem of vehicle and vehicle power limitation caused by false fault reports.

[0005] The objective of this invention is achieved through the following technical solution:

[0006] A highly reliable battery management system with analog front-end communication comprises a switch control module 100, a chip communication module 200, a protection logic module 300, a protection communication module 400, and a logic execution module.

[0007] The switch control module 100 includes a high-voltage isolation unit for protecting the chip from high-voltage interference and a short-circuit switch for different analog front-end communication lines.

[0008] The chip communication module 200 includes CAN communication and SPI communication; the CAN communication provides redundancy protection and verification for SPI communication data.

[0009] The protection logic module 300 includes a main chip, multiple I / O, SPI and CAN communication channels. The SPI or CAN communication channel is used as a redundant communication link of the main communication link, and the I / O channel is used as a switch for the redundant communication link. Each channel is controlled by the protection logic module 300.

[0010] The protection communication module 400 includes a transceiver and a channel switching module for the corresponding communication mode; the channel switching module is used to communicate with the analog front end of the fault point in a time-division communication manner to reduce the number of transceivers.

[0011] The protection logic module 300 includes a main chip that is primarily a logic processing chip for the protection system. This chip, together with the main chip, constitutes the entity of the running logic execution module.

[0012] Furthermore, the high-voltage isolation unit is used to protect the protection chip from high-voltage interference; the number of short-circuit switch channels of the communication line needs to be at least no less than the number of the original communication lines.

[0013] Furthermore, the switch control module 100 includes a switch for the battery cell and a short-circuit switch for the redundant communication link. The switches are used to change the location of the redundant communication link and to bypass the damaged battery cell.

[0014] Furthermore, the redundancy protection allows the main chip to retransmit the SPI data via CAN communication when the SPI data fails verification. At the same time, the SPI data will also be sent. When the protection chip determines that the CAN chip data and the SPI data are consistent, it can stop the CAN communication transmission and resume the SPI communication interaction.

[0015] Furthermore, when SPI communication is normal, CAN communication synchronously sends SPI data at a ratio of 1:10. The protection chip will judge the data to ensure its validity. If the chip's computing power is limited, the verification ratio can be appropriately reduced.

[0016] Furthermore, the chip communication module 200 includes, but is not limited to, SPI and CAN communication, and adds another communication method for verification in addition to the communication method of the main communication link.

[0017] Furthermore, the IO channel can control the short-circuit switch and also the cell combination switch.

[0018] Furthermore, the cell combination switch can bypass the cells, excluding potentially hazardous cells from the battery system.

[0019] Furthermore, the protection communication module 400 is used to change the corresponding broken communication link, and realizes the communication switching function through the communication transceiver and the channel switching switch.

[0020] A management method for a battery management system with highly reliable analog front-end communication, wherein the logic execution module executes based on the aforementioned battery management system, includes the following steps:

[0021] A. When the main chip detects a chain break fault, it sends the chain break location to the protection chip through the chip communication module 200.

[0022] B. The protection chip closes the communication line short-circuit switch at the corresponding position, connecting the protection communication link to the main communication link;

[0023] C. The protection chip will send a link break detection command to the main chip, and the main chip will send a preset communication link break reconfirmation command to the protection chip through the main communication link.

[0024] D. If the protection chip receives the disconnection reconfirmation command correctly, it can be inferred that the previous disconnection fault was a software false alarm. The protection chip will disconnect the short-circuit switch and notify the main chip to restore the normal working mechanism.

[0025] E. If the protection chip cannot receive the disconnection reconfirmation command sent by the main chip, the protection chip will notify the main chip that the transmission was unsuccessful. The disconnection fault is determined to be a real disconnection. The communication link between the main chip and the protection chip will be changed to the chip communication module. The protection chip will send the main chip's transmission failure command to the analog front end after the disconnection location.

[0026] F. If the remaining analog front-end data is received, all received data is forwarded to the main chip, and the main chip can then obtain all valid analog front-end data.

[0027] G. If no valid data is received from the remaining analog front-ends, first determine if the number of remaining analog front-ends that failed to read data is 0. If it is 0, exit the protection mechanism; if it is not 0, disconnect the short-circuit switch corresponding to the next analog front-end that cannot communicate and close the short-circuit switch of the next node.

[0028] H. The protection chip sets the data of the bypassed cells to the average of the valid data, and notifies the main chip of the number of bypassed nodes. Finally, it sends all the remaining cell data to the main chip.

[0029] Compared with the prior art, the beneficial effects of the present invention are:

[0030] This invention utilizes a battery management system that simulates front-end communication. This system can immediately activate a hardware protection mechanism upon the occurrence of a chain breakage fault. The protection chip receives the chain breakage location from the main chip and connects to the daisy-chain protection circuit to test whether the chain breakage fault is a hard wire fault. If it is a software fault, the protection chip can instruct the main chip to restart the operating mechanism, eliminating false chain breakage fault reports and allowing the vehicle to return to normal operation, avoiding vehicle-wide problems caused by false fault reports. If it is a hardware fault, the protection chip receives a failure command from the main chip and transmits this command through the protection circuit's communication line to the simulated front-end at the chain breakage location. It then sends the return information back to the main chip, allowing the main chip to obtain all battery information in this way, thereby preventing vehicle power limitation issues. Attached Figure Description

[0031] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0032] Figure 1 A schematic diagram of a battery management system with high-reliability analog front-end communication;

[0033] Figures 2-3 Workflow diagram of the battery management system protection mechanism for high-reliability analog front-end communication. Detailed Implementation

[0034] The present invention will be further described below with reference to embodiments:

[0035] The present invention will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and not intended to limit it. Furthermore, it should be noted that, for ease of description, the accompanying drawings show only the parts relevant to the present invention, and not all of the structures.

[0036] It should be noted that similar reference numerals and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. Furthermore, in the description of this invention, terms such as "first," "second," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0037] like Figure 1 As shown, the battery management system with high reliability analog front-end communication of the present invention consists of a switch control module 100, a chip communication module 200, a protection logic module 300, a protection communication module 400, and a logic execution module.

[0038] The switch control module 100 includes a high-voltage isolation unit and short-circuit switches corresponding to different analog front-end communication lines. The high-voltage isolation unit protects the protection chip from high-voltage interference, ensuring normal operation. The short-circuit switches for the communication lines have at least as many channels as the original number of communication lines, ensuring redundancy for each communication line.

[0039] Specifically, the switch control module 100 includes a switch for the battery cell and a short-circuit switch for the redundant communication link. The protection system can use the above switches to change the location of the redundant communication link and bypass the damaged battery cell.

[0040] The chip communication module 200 includes CAN communication and SPI communication. The CAN communication provides redundancy protection and verification for the SPI communication data.

[0041] Redundancy protection allows the main chip to retransmit SPI data via CAN communication when SPI data verification fails. Simultaneously, SPI data is also transmitted. When the protection chip determines that the CAN chip data and SPI data are consistent, it can stop CAN communication transmission and resume SPI communication interaction.

[0042] When SPI communication is normal, CAN communication synchronously sends SPI data at a ratio of 1:10. The protection chip will judge the data to ensure its validity. If the chip's computing power is limited, the verification ratio can be appropriately reduced.

[0043] Specifically, the chip communication module 200 includes, but is not limited to, SPI and CAN communication, and adds another communication method for verification in addition to the communication method of the main communication link.

[0044] The protection logic module 300 needs to have as many IO, SPI and CAN communication channels as possible. The SPI channel or CAN communication channel needs to be used as a redundant communication link of the main communication link, and the IO channel mainly serves as a switch for the redundant communication link.

[0045] The IO channel can control the short-circuit switch and also the cell combination switch.

[0046] The cell combination switch can bypass the cells, excluding potentially hazardous cells from the battery system.

[0047] All channels are controlled by the protection logic module 300.

[0048] Provided that the main chip resources are sufficient, the aforementioned protection logic module 300 can be part of the main chip.

[0049] Specifically, the protection logic module 300 includes a main chip that is primarily a logic processing chip for the protection system. This chip, together with the main chip, constitutes the entity of the running logic execution module.

[0050] The protection communication module 400 includes a transceiver for the corresponding communication mode and a channel switching module. The function of the channel switching module is to reduce the number of transceivers, adopt time-division communication to communicate with the analog front end of the fault point, and reduce hardware development costs.

[0051] Specifically, the protection communication module 400 enables the change of the corresponding broken communication link, and realizes the communication switching function through a communication transceiver and a channel switching switch. Specifically, the logic execution module executes the system according to the judgment logic of the management method.

[0052] The battery management system with highly reliable simulated front-end communication can ensure that the main communication circuit of the simulated front-end can still obtain cell information normally in the event of a chain failure. At the same time, it can bypass the fault simulation front-end and the corresponding cell to ensure the robustness and safety of the system.

[0053] The present invention discloses a management method for a battery management system with high-reliability analog front-end communication. The logic execution module executes based on the aforementioned battery management system and includes the following steps:

[0054] 1. For example Figure 3 As shown, when the main chip detects a chain break fault, it sends the chain break location to the protection chip through the chip communication module 200.

[0055] 2. The protection chip closes the communication line short-circuit switch at the corresponding position, connecting the protection communication link to the main communication link;

[0056] 3. The protection chip will send a link break detection command to the main chip, and the main chip will send a preset communication link break reconfirmation command to the protection chip through the main communication link.

[0057] 4. If the protection chip receives the disconnection reconfirmation command correctly, it can be inferred that the previous disconnection fault was a software false alarm. The protection chip will disconnect the short-circuit switch and notify the main chip to restore the normal working mechanism.

[0058] 5. If the protection chip cannot receive the reconfirmation command for the broken link sent by the main chip, the protection chip will notify the main chip that the transmission was unsuccessful. The broken link fault is determined to be a real broken link. The communication link between the main chip and the protection chip will be changed to the chip communication module. The protection chip will send the command of the main chip's failure to send to the analog front end after the broken link location.

[0059] 6. If the remaining analog front-end data is received, all received data is forwarded to the main chip, and the main chip can then obtain all valid analog front-end data;

[0060] 7. If no valid data is received from the remaining analog front-ends, first determine if the number of remaining analog front-ends that failed to read data is 0. If it is 0, exit the protection mechanism; if it is not 0, disconnect the short-circuit switch corresponding to the next analog front-end that cannot communicate and close the short-circuit switch of the next node.

[0061] 8. The protection chip sets the data of the bypassed cells to the average of the valid data, and notifies the main chip of the number of bypassed nodes. Finally, it sends all the remaining cell data to the main chip.

[0062] This invention employs a highly reliable battery management system with simulated front-end communication. It bypasses the main communication link failure point and uses a protection system to re-upload the node information after the communication link break to the main chip. This management method ensures the continued normal operation of the battery system even when a communication link failure occurs, improving the robustness of the simulated front-end communication of the battery management system and enhancing the safety and reliability of electric vehicles.

[0063] When a fault is detected in the simulated front-end communication link, the protection system will re-establish communication with the simulated front-end after the breakpoint through the protection chip to confirm the fault again. This will determine whether the fault is a chip fault. If it is a chip fault, the chip and the corresponding battery cell will be bypassed. By bypassing the faulty chip and battery cell, the continuous operation of the system can be ensured, while ensuring system safety.

[0064] This invention relies entirely on the local system for decision-making and execution, without depending on an external environment, and can be used independently. It employs a low-cost hardware and software protection system, a fault-tolerant system based on specific fault points, ensuring system minimization and low cost while improving system stability, rather than using two identical sets of equipment for backup. This invention provides detailed fault handling logic and can reconfirm the presence of a protection exit mechanism for faults. It can minimize the bypass of the simulated front end and corresponding battery cells based on the actual fault situation, rather than directly bypassing a preset battery unit in the event of a standalone fault.

[0065] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.

Claims

1. A battery management system with high-reliability analog front-end communication, characterized in that: It consists of a switch control module (100), a chip communication module (200), a protection logic module (300), a protection communication module (400), and a logic execution module; The switch control module (100) includes a high-voltage isolation unit for protecting the chip from high-voltage interference and short-circuit switches for different analog front-end communication lines; The chip communication module (200) includes CAN communication and SPI communication; the CAN communication provides redundancy protection and verification for the SPI communication data; The protection logic module (300) includes a protection chip, multiple I / O pins, SPI, and CAN communication channels. The protection chip is connected to the high voltage isolator via IO communication, and the protection chip is connected to the transceiver via SPI communication. The SPI channel or CAN communication channel is used as a redundant communication link for the main communication link, and the IO channel is used as a switch for the redundant communication link. Each channel is controlled by the protection logic module (300). The protection communication module (400) includes a transceiver and a channel switching module for communication modes; the channel switching module is used to communicate with the analog front end of the fault point in a time-division communication manner to reduce the number of transceivers. The protection chip and the main chip together constitute the entity of the running logic execution module; The number of short-circuit switch channels of the communication line needs to be at least as many as the original number of communication lines; the switch control module (100) includes a cell switch and a redundant communication link short-circuit switch, which realizes the change of redundant communication position and bypass of damaged cells through the above switches; the IO channel controls the short-circuit switch and also controls the cell switch; the cell switch bypasses the cell.

2. A management method for a battery management system with high-reliability analog front-end communication, characterized in that, The logic execution module executes the battery management system for high-reliability analog front-end communication according to claim 1, including the following steps: A. When the main chip detects a chain break fault, it sends the chain break location to the protection chip through the chip communication module (200); B. The protection chip closes the communication line short-circuit switch at the corresponding position, connecting the protection communication link to the main communication link; C. The protection chip will send a link break detection command to the main chip, and the main chip will send a preset communication link break reconfirmation command to the protection chip through the main communication link. D. If the protection chip receives the disconnection reconfirmation command correctly, it can be inferred that the previous disconnection fault was a software false alarm. The protection chip will disconnect the short-circuit switch and notify the main chip to restore the normal working mechanism. E. If the protection chip cannot receive the disconnection reconfirmation command sent by the main chip, the protection chip will notify the main chip that the transmission was unsuccessful. The disconnection fault is determined to be a real disconnection. The communication link between the main chip and the protection chip will be changed to the chip communication module. The protection chip will send the main chip's transmission failure command to the analog front end after the disconnection location. F. If the remaining analog front-end data is received, all received data is forwarded to the main chip, and the main chip can then obtain all valid analog front-end data. G. If no valid data is received from the remaining analog front-ends, first determine whether the number of remaining analog front-ends that have not successfully read data is 0. If it is 0, exit the protection mechanism. If it is not 0, then disconnect the short-circuit switch corresponding to the next analog front-end that cannot communicate and close the short-circuit switch of the next node. H. The protection chip sets the data of the bypassed cells to the average of the valid data, and notifies the main chip of the number of bypassed nodes. Finally, it sends all the remaining cell data to the main chip.

Images