Battery system and vehicle

Abstract

The application discloses a battery system and a vehicle, the battery system comprising: a battery module for power supply; a first switch and a second switch, both of which are arranged in a power supply loop of the battery module to control the conduction and disconnection of the power supply loop, the first switch and the second switch jointly control the conduction of the power supply loop, and the power supply loop is disconnected when at least one of the first switch and the second switch is disconnected; a first controller connected with the first switch to control the conduction or disconnection of the first switch; and a second controller connected with the second switch to control the conduction or disconnection of the second switch. When a fault exists in the battery module, even if any one of the first controller and the second controller cannot timely disconnect the corresponding first switch or second switch, the other one can control the corresponding switch to be disconnected to cut off the power supply loop, thereby improving the safety and stability of the battery system.

Description

Technical Field

[0001] This application relates to the field of battery technology, and more specifically, to a battery system and a vehicle. Background Technology

[0002] During the charging and discharging process of the battery module, if a fault occurs in the battery module (such as an over-temperature fault), the battery management module of the battery module can control the switches in the circuit (such as contactors or relays) to disconnect in order to protect the battery module.

[0003] In the event of a controller or switch malfunction (such as a contactor failing to switch), or network latency in the interaction between the controller and the switch, the battery management module may be unable to continue providing protection for the battery module, potentially leading to damage to the battery module and reduced battery module safety. Summary of the Invention

[0004] This application provides a battery system and a vehicle, wherein the battery system has high safety.

[0005] One embodiment of the battery system of this application includes: a battery module for supplying power; a first switch and a second switch, both disposed in the power supply circuit of the battery module to control the on and off of the power supply circuit; a first controller connected to the first switch, wherein the first switch and the second switch jointly control the on / off state of the power supply circuit, and the power supply circuit is disconnected when at least one of the first switch and the second switch is disconnected; and a second controller connected to the second switch to control the on / off state of the second switch.

[0006] In some implementations, the first controller and the second controller are communicatively connected. The second controller is used to collect battery information of the battery module and send the battery information to the first controller, so that the first controller can determine whether the battery module is faulty based on the battery information. If the battery module is faulty, the first controller disconnects the first switch.

[0007] In some implementations, the first controller and the second controller are communicatively connected. The second controller is used to collect battery information of the battery module and determine whether the battery module is faulty based on the battery information. If the battery module is faulty, the second controller sends corresponding fault information to the first controller so that the first controller disconnects the first switch.

[0008] In some embodiments, the first controller is further configured to send a disconnect command to the second controller in the event of a fault in the battery module, so as to control the second controller to disconnect the second switch; if the second controller does not receive the disconnect command in the event of a fault in the battery module, it controls the second switch to disconnect for a first preset time period.

[0009] In some embodiments, the first controller is further configured to send a disconnect command to the second controller in the event of a fault in the battery module, so as to control the second controller to disconnect the second switch; the second controller is further configured to control the second switch to disconnect in response to the disconnect command.

[0010] In some implementations, the fault includes at least one of over-temperature fault, over-voltage fault, over-current fault, leakage fault, and open circuit fault.

[0011] In some implementations, the second controller is used to send a heartbeat signal to the first controller, and the first controller controls the first switch to disconnect after a second preset time period in which it has not received the heartbeat signal.

[0012] In some implementations, upon power-on, the first controller sends a power-on command to the second controller, which, in response to the power-on command, controls the second switch to turn on. While controlling the second switch to turn on, the second controller sends first feedback information to the first controller, which, in response to the first feedback information, controls the first switch to turn on.

[0013] In some implementations, in the event of power failure, the first controller is used to disconnect the first switch, and when the first switch is disconnected, the first controller sends second feedback information to the second controller, and the second controller, in response to the second feedback information, controls the second switch to disconnect.

[0014] In some implementations, the first controller is configured to send an interaction message to the second controller for a third preset duration, and the second controller is configured to control the second switch to disconnect if it does not receive the interaction message within a fourth preset duration, wherein the fourth preset duration is longer than the third preset duration.

[0015] In some implementations, the first controller is configured to send an interaction message to the second controller for a third preset duration. The second controller is configured to send battery information and power limit of the battery module to the first controller when it receives the interaction message and the battery module is not faulty, so that the first controller controls the battery module based on the power limit.

[0016] In some embodiments, the interactive message includes at least one of a low-voltage power-off command, a discharge command, a charging command, and a state switching command. The low-voltage power-off command is used to control the battery module to power off, the discharge command is used to control the battery module to discharge, the charging command is used to control the battery module to charge, and the state switching command is used to confirm the working state of the battery module. The power limit includes charging power and discharging power. The second controller is configured to: control the second switch to open when receiving the low-voltage power-off command and the battery module is not faulty; send the corresponding power limit to the first controller when receiving at least one of the discharge command and the charging command and the battery module is not faulty; and send the current power limit of the battery module to the first controller when receiving the state switching command and the battery module is not faulty.

[0017] In some embodiments, the battery system further includes: a distribution box, the distribution box including a charging interface and a power supply interface; in charging mode, a first controller controls the charging interface to connect to the power supply circuit; in discharging mode, the first controller controls the power supply interface to connect to the power supply circuit.

[0018] The vehicle according to the embodiments of this application includes the battery system described in any of the above embodiments.

[0019] In some implementations, the vehicle includes a rail vehicle.

[0020] The battery system and vehicle described in this application include a battery module, a first switch, a second switch, a first controller, and a second controller. The battery module provides power. Both the first and second switches are located in the power supply circuit of the battery module to control the on / off state of the power supply circuit. The first controller is connected to the first switch to control its on / off state. The second controller is connected to the second switch to control its on / off state. Since the first and second switches jointly control the on / off state of the power supply circuit, the power supply circuit is disconnected when at least one of the first and second switches is disconnected. That is, both the first and second controllers (the first and second switches) can cut off the power supply circuit of the battery module. Even if either the first or second controller cannot disconnect the corresponding first or second switch in time when the battery module malfunctions and the power supply circuit needs to be cut off, the other controller can still control the corresponding switch to disconnect, thus cutting off the power supply circuit. This prevents the battery module's protection function from being activated, providing effective protection for the battery module and improving the safety and stability of the battery system.

[0021] Additional aspects and advantages of embodiments of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of embodiments of this application. Attached Figure Description

[0022] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the description of the embodiments taken in conjunction with the following drawings, wherein:

[0023] Figure 1 This is a schematic diagram illustrating the application scenario of the battery system according to certain embodiments of this application;

[0024] Figure 2 This is a schematic diagram of a battery system according to certain embodiments of this application;

[0025] Figure 3 This is a schematic diagram of the battery system according to some embodiments of this application;

[0026] Figure 4 This is a control flowchart of the second controller in some embodiments of this application;

[0027] Figure 5 This is a control flowchart of the first controller and the second controller in certain embodiments of this application;

[0028] Figure 6 This is a control flowchart of the second controller controlling the system according to the interaction messages in some embodiments of this application;

[0029] Figure 7This is a power-on control flowchart of the first and second controllers in certain embodiments of this application;

[0030] Figure 8 This is a power-off control flowchart of the first and second controllers in certain embodiments of this application;

[0031] Figure 9 This is a control flowchart of the first controller in some embodiments of this application when the load is powered on;

[0032] Figure 10 This is a control flowchart of the first controller in some embodiments of this application when the load is de-energized. Detailed Implementation

[0033] The embodiments of this application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the embodiments of this application, and should not be construed as limiting the embodiments of this application.

[0034] In this application, unless otherwise expressly specified and limited, "above" or "below" the second feature can mean that the first feature is in direct contact with the second feature, or that the first feature is in indirect contact with the second feature through an intermediate medium. Furthermore, "above," "on top of," and "over" the second feature can mean that the first feature is directly above or diagonally above the second feature, or simply that the first feature is at a higher horizontal level than the second feature. "Below," "below," and "under" the second feature can mean that the first feature is directly below or diagonally below the second feature, or simply that the first feature is at a lower horizontal level than the second feature.

[0035] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one feature. In the description of this application, "multiple" means at least two, such as two or three, unless otherwise explicitly specified.

[0036] To facilitate understanding of this application, the background of this application is explained below:

[0037] During the charging and discharging process of the battery module, if a fault occurs in the battery module (such as an over-temperature fault), the battery management module can control the switches in the circuit (such as contactors or relays) to disconnect, thereby protecting the battery module. However, if the controller or switch malfunctions (such as a contactor failing to switch), or if there is a network delay in the interaction between the controller and the switch, the battery management module cannot continue to provide protection for the battery module, potentially leading to damage and reduced safety.

[0038] To address the aforementioned technical problems, this application provides a battery system that can be applied to vehicles, energy storage devices, and the like.

[0039] Please see Figure 1 First, the application scenarios of the technical solution of this application will be introduced. The battery system 10 provided by this application can be applied to, for example... Figure 1 Among the vehicles shown, 100.

[0040] Vehicle 100 is any vehicle 100 that can be charged, such as an electric vehicle.

[0041] In some implementations, vehicle 100 can be a rail vehicle, such as a rubber-tired train or a skyrail.

[0042] The battery system of this application will be described in detail below:

[0043] Please see Figure 1 , Figure 2 and Figure 3 This application provides a battery system, which is described using an application of the battery system in a vehicle as an example. The battery system includes:

[0044] Battery module 11 is used for power supply;

[0045] The first switch 12 and the second switch 13 are both provided in the power supply circuit of the battery module 11 to control the conduction and disconnection of the power supply circuit.

[0046] The first controller 14 is connected to the first switch 12 to control the first switch 12 to be turned on or off;

[0047] The second controller 15 is connected to the second switch 13 to control the second switch 13 to be turned on or off.

[0048] The first switching element 12 and the second switching element 13 can be a switching assembly including a contactor, a relay, etc.; or, the first switching element 12 and the second switching element 13 can be electronic components such as a contactor or a relay. For example, please refer to [link to relevant documentation]. Figure 3The first switch 12 may be a switch assembly including a first contactor 121, a first circuit breaker 122 (e.g., a circuit breaker with a control handle), and a first protective element 123. The first circuit breaker 122 is normally closed. During the charging and discharging process of the battery system 10, the first switch 12 is switched on and off by controlling the opening and closing of the first contactor 121. The second switch 13 may be a switch assembly including a second contactor 131, a second circuit breaker 132 (e.g., a circuit breaker with a control handle), and a second protective element 133. The second circuit breaker 132 is normally closed. The second switch 13 is switched on and off by controlling the opening and closing of the second contactor 131.

[0049] In this circuit, the first and second switching elements jointly control the conduction of the power supply circuit. The power supply circuit is disconnected when at least one of the first and second switching elements is open. The power supply circuit is on when both the first and second switching elements are closed; and disconnected when at least one of the first and second switching elements is open (e.g., the first switching element is open and the second switching element is closed; or the second switching element is open and the first switching element is closed; or both the first and second switching elements are open).

[0050] The first controller 14 can control the first switch 12 to be turned on or off, and the second controller 15 can control the second switch 13 to be turned on or off. Taking the first controller 14 controlling the first switch 12 to be turned on or off as an example, the first controller 14 can control the switch contacts of the first switch 12 to be closed or opened by outputting a signal to the first switch 12 (e.g., outputting a high-level signal or a low-level signal; or outputting a preset current signal or a voltage signal, etc.), thereby realizing the control of the first switch 12 to be turned on or off.

[0051] Specifically, please refer to Figure 1 The following explanation uses the application of battery system 10 in vehicle 100 as an example. Battery system 10 may include battery module 11, which provides power to vehicle 100, enabling vehicle 100 to operate (for example, battery module 11 powers the electric motor of vehicle 100 to drive vehicle 100; or, for example, battery module 11 powers equipment in vehicle 100 (such as air conditioning, audio system, etc.) to enable vehicle 100 to provide corresponding functions). Figure 2As shown, the vehicle 100 (such as the central controller of the vehicle 100) can communicate with the first controller 14 to send charging and discharging requests. When both the first switch 12 and the second switch 13 are turned on, the power supply circuit of the battery module 11 is turned on, at which time the battery module 11 can be charged or used to supply power to the vehicle or load, etc. When at least one of the first switch 12 and the second switch 13 (e.g., the first switch 12; or the second switch 13; or the first switch 12 and the second switch 13) is turned off, the power supply circuit of the battery module 11 is turned off, and the battery module 11 cannot supply power or charge.

[0052] Thus, since the first and second switches jointly control the conduction of the power supply circuit, the power supply circuit is disconnected when at least one of the first and second switches is disconnected. That is, both the first controller 14 and the second controller 15 (the first switch 12 and the second switch 13) can cut off the power supply circuit of the battery module 11. If the battery module 11 malfunctions and needs to disconnect the power supply circuit, but one of the first controller 14 or the second controller 15 cannot disconnect the corresponding first switch 12 or second switch 13 in time, the other controller can control the corresponding switch to disconnect, thereby cutting off the power supply circuit. This prevents the battery module's protection function from being activated, providing effective protection for the battery module and improving the safety and stability of the battery system.

[0053] Optionally, the first controller 14 and the second controller 15 are communicatively connected. The second controller 15 is used to collect battery information of the battery module 11 and send the battery information to the first controller 14, so that the first controller 14 can determine whether the battery module 11 is faulty based on the battery information. If the battery module 11 is faulty, the first controller 14 disconnects the first switch 12.

[0054] The communication connection between the first controller 14 and the second controller 15 may include a wired connection or a wireless connection. The wireless connection may be at least one of Wireless Local Area Network (WLAN), Bluetooth, and Near Field Communication (e.g., ZigBee).

[0055] The battery information may include temperature information, current information, voltage information, and power limit information (such as charging power) of the battery module 11.

[0056] Optionally, the fault may include at least one of the following: over-temperature fault, over-voltage fault, over-current fault, leakage fault, and open circuit fault.

[0057] The fault may include over-temperature fault; or, the fault may include over-temperature fault, over-voltage fault and over-current fault; or, the fault may include over-temperature fault, over-voltage fault, over-current fault, leakage fault and open circuit fault, etc. This application does not limit the fault in this regard, and they are not listed here.

[0058] The battery module 11 typically operates within preset operating temperature, voltage, and current ranges to ensure both charging and discharging efficiency and safety. Over-temperature faults occur when the temperature of the battery module 11 exceeds the preset temperature range during charging and discharging; over-voltage faults occur when the voltage of the battery module 11 exceeds the preset voltage range during charging and discharging; over-current faults occur when the current of the battery module 11 exceeds the preset current range during charging and discharging; leakage faults occur when the current in the battery module 11 flows beyond a preset path; and open-circuit faults occur when the connections of wires or circuits within the battery module 11 are broken or fail, preventing the normal flow of current within the battery module 11.

[0059] For details, please refer to Figure 3 The battery module 11 may include a battery information collector 111, also known as a BIC (Battery Information Collector). The second controller 15 can connect to the battery information collector 111 and acquire battery information from the battery module 11 based on the collector. Then, through communication with the first controller 14, the battery information is sent to the first controller 14. The first controller 14 determines whether the battery module 11 is faulty based on the battery information. For example, a preset over-temperature threshold can be used. The first controller 14 determines whether the battery module 11 is faulty based on whether the battery temperature in the battery information exceeds the preset over-temperature threshold. If the battery temperature in the acquired battery information exceeds the preset over-temperature threshold, the battery module 11 is determined to be faulty, and the fault is an over-temperature fault. In the event of a fault in the battery module 11, the first controller 14 controls the first switch 12 to open, thereby disconnecting the power supply circuit and improving the safety of the battery module 11.

[0060] Optionally, the first controller 14 is further configured to send a disconnect command to the second controller 15 in the event of a fault in the battery module 11, so as to control the second controller 15 to disconnect the second switch 13; the second controller 15 is further configured to control the second switch 13 to disconnect in response to the disconnect command.

[0061] The disconnect command can be used to drive the second controller 15 to disconnect the second switch 13.

[0062] Specifically, in the event of a fault in the battery module 11, the first controller 14 can send a disconnect command to the second controller 15. In response to the disconnect command, the second controller 15 controls the second switch 13 to disconnect. Even if the first controller 14 cannot control the first switch 12 to disconnect (for example, if there is a communication error between the first controller 14 and the first switch 12, or if the first switch 12 fails to disconnect), the second controller 15 can still disconnect the second switch 13 according to the disconnect command, thereby cutting off the power supply circuit and further improving the safety of the battery module 11.

[0063] In some embodiments, the first controller 14 and the second controller 15 are communicatively connected. The second controller 15 is used to collect battery information of the battery module 11 and determine whether the battery module 11 is faulty based on the battery information. If the battery module 11 is faulty, the second controller 15 sends the corresponding fault information to the first controller 14 so that the first controller 14 disconnects the first switch 12.

[0064] The fault information includes details about the specific type of fault in battery module 11.

[0065] Specifically, the second controller 15 can collect battery information from the battery module 11 and then determine whether the battery module 11 has a fault based on the battery information. For example, by setting a preset overvoltage threshold, if the voltage of the battery module 11 is greater than the preset overvoltage threshold, it is determined that the battery module 11 has an overvoltage fault, and the second controller 15 sends the specific corresponding fault to the first controller 14; or, it can send both the specific corresponding fault and the battery information to the first controller 14. Upon receiving the fault information, the first controller 14 controls the first switch 12 to open, thereby disconnecting the power supply circuit and improving the safety of the system.

[0066] Optionally, the first controller 14 is further configured to send a disconnect command to the second controller 15 in the event of a fault in the battery module 11, so as to control the second controller 15 to disconnect the second switch 13; if the second controller 15 does not receive a disconnect command in the event of a fault in the battery module 11, it controls the second switch 13 to disconnect for a first preset time period.

[0067] The first preset duration can be, for example, 10 seconds (s), 13 seconds, 15 seconds, 18 seconds, 20 seconds, etc.

[0068] Specifically, upon receiving a fault message, the first controller 14 controls the first switch 12 to open and sends a disconnect command to the second controller 15. Upon receiving the disconnect command, the second controller 15 opens the second switch 13 to disconnect the battery module 11. If a communication failure, a fault in the first controller 14, or a fault in the first switch 12 prevents the first controller 14 from receiving the fault message in a timely manner, from opening the first switch 12 in a timely manner, or from sending the disconnect command to the second controller 15, it cannot be determined whether the first switch 12 has been opened, and the power supply circuit may still be closed. To ensure the safety of the battery module 11, please refer to [further details needed]. Figure 4 If the second controller 15 determines that there is a fault in the battery module and does not receive a disconnect command, it can control the second switch 13 to disconnect after a first preset time (15 seconds for example) to disconnect the power supply circuit, thereby improving the safety and stability of the battery module 11. In this way, regardless of whether the first controller 14 and the first switch 12 are faulty, the power supply circuit can be cut off in time, further improving the safety of the battery system 10.

[0069] In some implementations, the second controller 15 is used to send a heartbeat signal to the first controller 14, and the first controller 14 controls the first switch 12 to open after a second preset time period in which no heartbeat signal is received.

[0070] The heartbeat signal can be used to determine the connectivity status of the communication link between the first controller 14 and the second controller 15.

[0071] The preset duration can be 20s, 30s, 40s, 50s, 60s, 70s, etc.

[0072] Specifically, the second controller 15 can send a heartbeat signal to the first controller 14. After a second preset time (e.g., 60 seconds) without receiving the heartbeat signal, the first controller 14 cannot determine whether the second controller 15 is still working properly (nor can it determine whether the battery module 11 is faulty). It then controls the first switch 12 to disconnect, thereby disconnecting the power supply circuit and improving the safety of the battery system.

[0073] In some implementations, the first controller 14 is used to send an interaction message to the second controller 15 for a third preset duration, and the second controller 15 is used to control the second switch 13 to disconnect if it does not receive the interaction message within a fourth preset duration.

[0074] The interactive message may include at least one of the following: low-voltage power-off command, discharge command, charging command, and state switching command. The low-voltage power-off command can be used to control the battery module 10 to power off, the discharge command can be used to control the battery module 10 to discharge, the charging command can be used to control the battery module 10 to charge, and the state switching command can be used to confirm the working status of the battery module 10.

[0075] The third preset duration can be, for example, 50s, 60s, 70s, 75s, 80s, 85s, etc. The fourth preset duration is longer than the third preset duration, and the duration of the fourth preset duration that is longer than the third preset duration can be, for example, 10s, 15s, 20s, etc.

[0076] Specifically, please refer to Figure 5 The first controller 14 can send an interaction message to the second controller 15 for a third preset time period (e.g., 60 seconds). If the second controller 15 does not receive an interaction message within a fourth preset time period (e.g., 75 seconds) after the last time it received the interaction message, in order to ensure the protection system of the battery system, the second controller 15 controls the second switch 13 to open, thereby improving the safety of the battery system.

[0077] In some embodiments, the first controller 14 is used to send an interaction message to the second controller 15 for a third preset duration. The second controller 15 is used to send battery information and power limit of the battery module 11 to the first controller 14 when it receives the interaction message and the battery module 11 is not faulty, so that the first controller 14 controls the battery module 11 based on the power limit.

[0078] The power limit includes at least one of the charging power and the discharging power.

[0079] Specifically, the first controller 14 sends an interaction message to the second controller 15 for a third preset duration. Upon receiving the interaction message, the second controller 15 can determine whether the battery module 11 is faulty based on the collected battery information. If the battery module 11 is not faulty, the second controller 15 sends the battery information and the power limit corresponding to the interaction message to the first controller 14. The first controller 14 controls the battery module 11 according to the power limit.

[0080] Optionally, the interactive message includes at least one of a low-voltage power-off command, a discharge command, a charging command, and a state switching command. The low-voltage power-off command is used to control the battery module 11 to power off, the discharge command is used to control the battery module 11 to discharge, the charging command is used to control the battery module 11 to charge, and the state switching command is used to confirm the working status of the battery module 11.

[0081] Specifically, please refer to Figure 6The second controller 15 can determine the specific instruction of the received interaction message based on the interaction message; alternatively, the second controller 15 can compare the low-voltage power-off instruction, discharge instruction, charging instruction, and state switching instruction with the interaction message one by one to determine the specific instruction of the interaction message. When the second controller 15 receives a low-voltage power-off instruction and determines that the battery module 11 is not faulty based on the battery information, the second controller 15 controls the second switch 13 to open and sends the corresponding battery information and power limit information (e.g., charging power and discharging power are both 0) to the first controller 14; when the second controller 15 receives a discharge instruction and the battery module 11 is not faulty, it can send the corresponding power limit information (e.g., the discharge power and charging power of the battery module 11 are 0) to the first controller 14; when the second controller 15 receives a charging instruction and the battery module 11 is not faulty, it can send the corresponding power limit information (e.g., the charging power and discharging power of the battery module 11 are 0) to the first controller 14. In this way, the first controller 14 can control the charging and discharging of the battery system according to the received power limit information. During the charging and discharging process of battery module 11, the current power limit of battery module 11 can be monitored to improve charging and discharging safety. Therefore, a state switching command can be sent from the first controller 14 to the second controller 15. In response to the state switching command, the second controller 15 sends the current power limit of battery module 11 back to the first controller 14, thereby improving charging and discharging safety. When switching the operating state of battery module 11 (e.g., switching from charging to discharging), there is a certain delay in the battery module 11's operation. By sending a state switching command from the first controller 14 to the second controller 15, the switching process of battery module 11 can be monitored, further improving the safety of battery module 11.

[0082] In some embodiments, when powered on, the first controller 14 sends a power-on command to the second controller 15. In response to the power-on command, the second controller 15 controls the second switch 13 to turn on. When the second switch 13 is turned on, the second controller 15 sends a first feedback message to the first controller 14. In response to the first feedback message, the first controller 14 controls the first switch to turn on.

[0083] Optionally, please refer to Figure 3 The first switch 12 is connected to the positive terminal of the battery module 11, and the second switch 13 is connected to the negative terminal of the battery module 11.

[0084] The first feedback information may include information that the second switch 13 is turned on.

[0085] Specifically, circuit connections typically begin with the negative terminal of the power supply, sequentially connecting each circuit component, and finally connecting to the positive terminal of the power supply to improve the safety of the circuit connection.

[0086] Therefore, please refer to Figure 7 When the battery system is powered on (e.g., when the first controller 14 receives a power-on command), the first controller 14 can first send a first power-on command to the second controller 15; the second controller 15 controls the second switch 13 to close according to the first power-on command, and sends a first feedback message including that the second switch 13 is turned on to the first controller 14; the first controller 14 responds to the first feedback message and then controls the first switch 12 to close. In this way, the safety of the battery system when powered on can be improved.

[0087] In some implementations, in the event of power failure, the first controller 14 is used to disconnect the first switch 12. When the first switch 12 is disconnected, the first controller 14 sends a second feedback message to the second controller 15. In response to the second feedback message, the second controller 15 controls the second switch 13 to disconnect.

[0088] The second feedback information may include information that the first switch 12 has been disconnected.

[0089] Specifically, please refer to Figure 8 In the event of a battery system power failure (e.g., when the first controller 14 receives a power failure command), the first controller 14 can first control the first switch 12 to disconnect, thereby cutting off the power supply in the power supply circuit and reducing potential electrical risks in the battery system during power failure. Then, the first controller 14 sends a second feedback message that the first switch 12 has been disconnected to the second controller 15. In response to the second feedback message, the second controller 15 controls the second switch 13 to disconnect, thereby improving the safety of the battery system.

[0090] Please see Figure 3 In some embodiments, the battery system further includes:

[0091] The distribution box 16 includes a charging interface 161 and a power supply interface 162.

[0092] In charging mode, the first controller 14 controls the charging interface 161 to connect to the power supply circuit;

[0093] In discharge mode, the first controller 14 controls the power supply interface 162 to connect to the power supply circuit.

[0094] Specifically, the battery system 10 includes a power distribution box 16, which includes a charging interface 161 and a power supply interface 162, such as... Figure 3As shown, the charging interface 161 may include a positive charging interface 1611 and a negative charging interface 1612. In charging mode, the first controller 14 can control the positive charging interface 1611 and the negative charging interface 1612 to close, thereby connecting the power supply circuit and charging the battery module 11 through the charger. In discharging mode, the first controller 14 controls the power supply interface 162 to close, connecting the power supply circuit to connect the battery module 11 and external electrical equipment (such as...). Figure 3 The load shown is supplied with power.

[0095] Please see Figure 9 When powering on the load (for example, the central controller of vehicle 100 can send a high-voltage power-on command to the first controller 14, and the first controller 14 receives the load power-on command), if the second switch 13 is already closed and the first controller 14 has controlled the first switch 12 to close in response to the first feedback information, the first controller 14 can determine whether the load has been successfully powered on (for example, the first controller 14 can send a load power-on command to the load, and after receiving the load power-on command, the load can send a load power-on success command to the first controller 14 if the power-on is successful, and the first controller 14 determines whether the load has been successfully powered on based on whether the load power-on success command has been received). If the load power-on success command is received, the load is determined to be successfully powered on. If the load power-on success command is not received within a sixth preset time period (such as 10s, 12s, 15s, etc.), the power-on is determined to have failed, and the first switch 12 is controlled to open, and a power-off command is sent to the second controller 15 to control the second switch 13 to open.

[0096] Please see Figure 10After the load is successfully powered on and in the case of powering off the load (for example, the first controller 14 can determine whether the power-off conditions are met to determine whether the load is being powered off; the power-off conditions can be that the first controller 14 receives a power-off instruction for the load; or the second controller 15 determines that the battery module has a fault), a load power-off instruction can be sent to the load through communication between the first controller 14 and the load. Upon receiving the load power-off instruction, the load unloads itself and sends an unloading success instruction to the first controller 14 after successful unloading. This process continues for a fifth preset time period after the load power-off (e.g., ...). After 0.5s, 1s, 1.5s, etc., the first switch 12 is opened and a second feedback message is sent to the second controller 15 to open the second switch 13; or, after the load is successfully de-energized, a load de-energization success command can be sent to the first controller. If the first controller receives the load de-energization success command, it determines that the load de-energization is successful. If the load de-energization success command is not received after a seventh preset time (such as 1s, 2s, etc.), the second feedback message is sent to the second controller 15 to open the second switch 13 to improve the safety of the battery system.

[0097] Please refer to it again. Figure 1 The vehicle described in this application may include the battery system of any of the above embodiments, which will not be repeated here for the sake of brevity.

[0098] In the description of this specification, the references to terms such as "some embodiments," "in one example," "exemplarily," etc., indicate that a specific feature, structure, material, or characteristic described in connection with an embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0099] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the function involved, as will be understood by those skilled in the art to which embodiments of this application pertain.

[0100] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A battery system, characterized in that, include: Battery module, used for power supply; A first switch and a second switch are both disposed in the power supply circuit of the battery module. The first switch and the second switch jointly control the conduction of the power supply circuit. When at least one of the first switch and the second switch is disconnected, the power supply circuit is disconnected. A first controller is connected to the first switch to control the first switch to be turned on or off; A second controller is connected to the second switch to control the second switch to be turned on or off; The first controller and the second controller are communicatively connected. The second controller is used to collect battery information of the battery module and determine whether the battery module is faulty based on the battery information. If the battery module is faulty, the second controller sends corresponding fault information to the first controller so that the first controller disconnects the first switch. The first controller is also configured to send a disconnect command to the second controller in the event of a fault in the battery module, so as to control the second controller to disconnect the second switch. If the battery module malfunctions and the second controller does not receive the disconnect command, it will control the second switch to disconnect after a first preset time period. The second controller is also configured to send a heartbeat signal to the first controller, and the first controller controls the first switch to disconnect after a second preset time period in which it has not received the heartbeat signal; When powered on, the first controller sends a power-on command to the second controller. In response to the power-on command, the second controller controls the second switch to turn on. When the second controller controls the second switch to turn on, it sends a first feedback message to the first controller. In response to the first feedback message, the first controller controls the first switch to turn on. In the event of power failure, the first controller disconnects the first switch. When the first switch is disconnected, the first controller sends a second feedback message to the second controller. In response to the second feedback message, the second controller controls the second switch to disconnect.

2. The battery system according to claim 1, characterized in that, The first controller is further configured to send a disconnect command to the second controller in the event of a fault in the battery module, so as to control the second controller to disconnect the second switch; the second controller is further configured to control the second switch to disconnect in response to the disconnect command.

3. The battery system according to claim 1 or 2, characterized in that, The fault includes at least one of the following: over-temperature fault, over-voltage fault, over-current fault, leakage fault, and open circuit fault.

4. The battery system according to claim 1, characterized in that, The first controller is used to send an interaction message to the second controller for a third preset duration. If the second controller does not receive the interaction message within a fourth preset duration, it controls the second switch to open. The fourth preset duration is longer than the third preset duration.

5. The battery system according to claim 1, characterized in that, The first controller is configured to send an interaction message to the second controller for a third preset duration. The second controller is configured to send the battery information and power limit of the battery module to the first controller when it receives the interaction message and the battery module is not faulty, so that the first controller controls the battery module based on the power limit.

6. The battery system according to claim 5, characterized in that, The interactive message includes at least one of a low-voltage power-off command, a discharge command, a charging command, and a state switching command. The low-voltage power-off command is used to control the battery module to power off; the discharge command is used to control the battery module to discharge; the charging command is used to control the battery module to charge; the state switching command is used to confirm the operating state of the battery module; the power limit includes charging power and discharging power; and the second controller is used for: If the low-voltage power-off command is received and the battery module is not faulty, the second switch is controlled to disconnect. If at least one of the discharge command and the charging command is received, and the battery module is not faulty, the corresponding power limit is sent to the first controller; Upon receiving the state switching command and if the battery module is not faulty, the current power limit of the battery module is sent to the first controller.

7. The battery system according to claim 1, characterized in that, The battery system also includes: A distribution box, the distribution box including a charging interface and a power supply interface; In charging mode, the first controller controls the charging interface to connect to the power supply circuit; In discharge mode, the first controller controls the power supply interface to connect to the power supply circuit.

8. A vehicle, characterized in that, The vehicle includes the battery system according to any one of claims 1-7.

9. The vehicle according to claim 8, characterized in that, The vehicles include rail vehicles.

Images