Fault processing method, electronic equipment, high-voltage system, vehicle and storage medium

Abstract

The embodiment of the invention provides a fault processing method, electronic equipment, a high-voltage system, a vehicle and a storage medium. The fault processing method comprises the steps that when at least one of a first battery pack and a second battery pack reports fault information, the first battery pack and the second battery pack report fault information; determining a fault processing strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack, wherein the fault processing strategy enables the vehicle to keep running continuously through the other battery pack when one of the first battery pack and the second battery pack breaks down; and executing the fault processing strategy. According to the embodiment of the invention, when one of the first battery pack and the second battery pack breaks down, the other battery pack can keep the vehicle running continuously.

Description

Technical Field

[0001] The present application relates to the technical field of electric vehicles, and in particular to a fault handling method, electronic equipment, a high-voltage system, a vehicle and a storage medium. Background Art

[0002] The power battery system is the power source of electric vehicles and the core component of electric vehicles. The power battery system mainly includes battery packs, battery management systems, thermal management systems, high and low voltage wiring harnesses and packaging components. At present, electric vehicles use a single power battery system design. If the battery pack fails, the vehicle needs to be stopped and towed away for repair. When the battery pack fails, the vehicle cannot continue to operate after the failure. Summary of the invention

[0003] The embodiments of the present application provide a fault handling method, an electronic device, a high-voltage system, a vehicle, and a storage medium. When a fault occurs in one of the first battery pack and the second battery pack, the vehicle can be kept running through the other battery pack.

[0004] A first aspect of an embodiment of the present application provides a fault handling method, the method comprising:

[0005] In the case where at least one of the first battery pack and the second battery pack reports fault information, determining a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack, wherein the fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails;

[0006] The fault handling strategy is executed.

[0007] Optionally, the fault information reported by the first battery pack includes: any one of a first type of fault occurring in the first battery pack and a second type of fault occurring in the first battery pack; the fault information reported by the second battery pack includes: any one of a first type of fault occurring in the second battery pack and a second type of fault occurring in the second battery pack, and the safety risk of the second type of fault is greater than the safety risk of the first type of fault.

[0008] Optionally, determining a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack includes:

[0009] When a first type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, determining that the fault handling strategy is a first fault handling strategy;

[0010] When the first battery pack does not report fault information and the second battery pack has a first type of fault, determining that the fault handling strategy is a second fault handling strategy;

[0011] When a first type of fault occurs in the first battery pack and the second battery pack does not report fault information, determining that the fault handling strategy is a third fault handling strategy;

[0012] When the first battery pack does not report fault information and the second battery pack has a second type of fault, determining that the fault handling strategy is a fourth fault handling strategy;

[0013] When a second type of fault occurs in the first battery pack and the second battery pack does not report fault information, determining that the fault handling strategy is a fifth fault handling strategy;

[0014] When a second type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy;

[0015] When a first type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy;

[0016] When a second type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, the fault handling strategy is determined to be a sixth fault handling strategy.

[0017] Optionally, the first fault handling strategy includes:

[0018] Controlling the first battery pack and the second battery pack to alternately operate for a first time period;

[0019] Within the first time period, if it is detected that the first type of fault of the first battery pack and the first type of fault of the second battery pack have been resolved, resuming the operation of the first battery pack and the second battery pack;

[0020] Within the first time period, if it is detected that the first type of fault of the first battery pack has not been resolved and the first type of fault of the second battery pack has been resolved, the operation of the second battery pack is restored and the contactor of the first battery pack is disconnected;

[0021] Within the first time period, if it is detected that the first type of fault of the first battery pack has been resolved, but the first type of fault of the second battery pack has not been resolved, the operation of the first battery pack is restored, and the contactor of the second battery pack is disconnected;

[0022] Within the first time period, if it is detected that both the first type of fault of the first battery pack and the first type of fault of the second battery pack are not resolved, the contactor of the first battery pack is disconnected, and the contactor of the second battery pack is disconnected.

[0023] Optionally, the second fault handling strategy includes:

[0024] disconnecting the contactor of the second battery pack, and monitoring whether the first type of fault of the second battery pack is resolved within the second time period when the continuous disconnection time of the contactor of the second battery pack reaches a second time period; if the first type of fault of the second battery pack has been resolved within the second time period, closing the contactor of the second battery pack, and controlling the power of the second battery pack to increase step by step from the first limit power when the contactor of the second battery pack is closed;

[0025] If the first type of fault of the second battery pack is not resolved within the second time period, or if a first type of fault or a second type of fault of the second battery pack is monitored during the process of the power of the second battery pack gradually increasing from the first limited power, the contactor of the second battery pack is disconnected and the fourth fault handling strategy is executed.

[0026] Optionally, the third fault handling strategy includes:

[0027] disconnecting the contactor of the first battery pack, and monitoring whether a first type of fault of the first battery pack is resolved within the third time period when the continuous disconnection time of the contactor of the first battery pack reaches a third time period; if the first type of fault of the first battery pack has been resolved within the third time period, closing the contactor of the first battery pack, and controlling the power of the first battery pack to increase step by step from the second limit power when the contactor of the first battery pack is closed;

[0028] If the first type of fault of the first battery pack is not resolved within the third time period, or if a first type of fault or a second type of fault of the first battery pack is monitored during the process of the power of the first battery pack gradually increasing from the second limiting power, the contactor of the first battery pack is disconnected and the fifth fault handling strategy is executed.

[0029] Optionally, the fourth fault handling strategy includes:

[0030] disconnecting a contactor of the second battery pack, and calculating a first maximum allowable output power that the first battery pack is allowed to output to the motor controller and the motor;

[0031] When the required power of the motor controller and the motor is greater than the first maximum allowable output power, control the first battery pack to output to the motor controller and the motor according to the first maximum allowable output power, or reduce the power of the load and control the first battery pack to output to the motor controller and the motor according to the required power;

[0032] When the required power is less than or equal to the first maximum allowable output power, the first battery pack is controlled to output power to the motor controller and the motor according to the required power.

[0033] Optionally, the fifth fault handling strategy includes:

[0034] Disconnecting a contactor of the first battery pack, turning off non-essential loads, and calculating a second maximum allowable output power that the second battery pack is allowed to output according to an expected cruising range;

[0035] When the driving demand power is greater than the second maximum allowable output power, controlling the second battery pack to output according to the second maximum allowable output power, or according to the demand power;

[0036] When the required power is less than or equal to the second maximum allowable output power, controlling the second battery pack to output according to the required power;

[0037] Wherein, the first battery pack is used to supply power to the load.

[0038] Optionally, the sixth fault handling strategy includes:

[0039] A contactor of the first battery pack is opened, and a contactor of the second battery pack is opened.

[0040] A second aspect of an embodiment of the present application provides a fault handling device, the device is applied to a high-voltage system, the high-voltage system includes: a first battery pack and a second battery pack; the device includes:

[0041] a determination unit, configured to determine a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack when at least one of the first battery pack and the second battery pack reports fault information, wherein the fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails;

[0042] A processing unit is used to execute the fault handling strategy.

[0043] A third aspect of an embodiment of the present application provides an electronic device, comprising a processor and a memory, wherein the memory is used to store a computer program, the computer program comprises program instructions, and the processor is configured to call the program instructions to execute the step instructions in the first aspect of the embodiment of the present application.

[0044] The fourth aspect of the embodiments of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for electronic data exchange, wherein the computer program enables a computer to execute part or all of the steps described in the first aspect of the embodiments of the present application.

[0045] The fifth aspect of the embodiment of the present application provides a computer program product, wherein the computer program product includes a computer program, and the computer program is operable to cause a computer to execute some or all of the steps described in the first aspect of the embodiment of the present application. The computer program product can be a software installation package.

[0046] A sixth aspect of the embodiments of the present application provides a high-voltage system, comprising: a first battery pack, a second battery pack, and the electronic device described in the third aspect of the embodiments of the present application.

[0047] A seventh aspect of the embodiments of the present application provides a vehicle, comprising the electronic device described in the third aspect of the embodiments of the present application and the high-voltage system described in the sixth aspect of the embodiments of the present application.

[0048] In the embodiment of the present application, when at least one of the first battery pack and the second battery pack reports fault information, a fault handling strategy is determined based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack, and the fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails; the fault handling strategy is executed. When one of the first battery pack and the second battery pack fails, the vehicle can continue to operate through the other battery pack. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0050] Figure 1 is a structural schematic diagram of a high-voltage system provided in an embodiment of the present application;

[0051] Figure 2 is a specific structural schematic diagram of a high-voltage system provided in an embodiment of the present application;

[0052] Figure 3 It is a flowchart of a fault handling method provided in an embodiment of the present application;

[0053] Figure 4 It is a specific flow chart of a fault handling method provided in an embodiment of the present application;

[0054] Figure 5 A schematic diagram of the structure of a fault handling device provided in an embodiment of the present application;

[0055] Figure 6 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application;

[0056] Figure 7 It is a structural schematic diagram of a vehicle provided in an embodiment of the present application. DETAILED DESCRIPTION

[0057] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0058] The terms "first", "second", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices.

[0059] Reference to "embodiments" in this application means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described in this application may be combined with other embodiments.

[0060] See also Figure 1 , Figure 1 Schematic diagram of a high voltage system provided in an embodiment of the present application. Figure 1As shown, the high-voltage system may include: a first battery pack 10, a second battery pack 20, a DC converter 30, a motor controller 40, a motor 50 and a load 60. The first battery pack 10 and the second battery pack 20 are connected via the DC converter 30. The first battery pack 10 is used to power the load 60, and the second battery pack 20 is used to power the motor controller 40 and the load 60.

[0061] The positive electrode of the first battery pack 10 is connected to the positive electrode of the load 60 and the first positive terminal of the DC converter 30 through the first contactor S1, and the second battery pack 20 is connected to the second positive terminal of the DC converter 30 and the positive electrode of the motor controller 40 through the second contactor S2, and the output of the motor controller 40 is connected to the input of the motor 50. Figure 1 The motor 50 is taken as a three-phase motor as an example, and the three-phase output terminals of the motor controller 40 are respectively connected to the three-phase input terminals of the motor 50 .

[0062] The negative electrode of the load 60 is connected to the negative electrode of the first battery pack 10 , the negative electrode of the DC converter, the negative electrode of the second battery pack, and the negative electrode of the motor controller 40 .

[0063] The first battery pack 10 is an energy type battery, and the first battery pack 10 can also be called an energy pack. The second battery pack 20 is a power type battery, and the second battery pack can also be called a power pack or a performance pack.

[0064] Since electric vehicles require very high voltages to operate, single cells are difficult to meet the requirements, and battery packs are generally composed of multiple single cells. For example, the first battery pack 10 can be composed of multiple single cells connected in series, and the second battery pack 20 can be composed of multiple single cells connected in series.

[0065] The high-voltage system of the embodiment of the present application adopts a dual battery pack design. The first battery pack 10 uses energy-type batteries with low voltage. Its main function is to store energy and be used daily, and to supply power to the load 60. The second battery pack 20 uses power-type batteries with high voltage and high short-term discharge rate, which can meet the requirements of high-power working conditions.

[0066] The DC converter 30 may be a DC / DC converter, also known as a DC-DC converter, which is a DC conversion device that converts a DC power source into other DC voltages. The DC converter 30 may convert a high voltage into a low voltage, or may convert a low voltage into a high voltage.

[0067] The DC converter 30 may be a bidirectional DC / DC converter. Figure 1In the embodiment, the first battery pack 10 can convert the DC voltage output by the first battery pack 10 into a voltage capable of operating the motor controller 40 through the DC converter 30, and then supply power to the motor controller 40 and the motor 50. The first battery pack 10 can also charge the second battery pack 20 by converting the DC voltage output by the first battery pack 10 into the voltage of the second battery pack 20 through the DC converter 30. The second battery pack 20 can power the load 60 by converting the DC voltage output by the second battery pack 20 into a voltage capable of operating the load 60 through the DC converter 30. The second battery pack 20 can also charge the first battery pack 10 by converting the DC voltage output by the second battery pack 20 into the voltage of the first battery pack 10 through the DC converter 30.

[0068] Figure 1 The first contactor S1 in the figure is the contactor of the first battery pack 10. When the first contactor S1 is closed, the first battery pack 10 is connected to the high-voltage system, and the first battery pack 10 can supply power to the load 60 in the high-voltage system. The first battery pack 10 can also supply power to the motor controller 40 and the motor 50 through the DC converter 30, and can also charge the second battery pack 20. When the first contactor S1 is disconnected, the first battery pack 10 is disconnected from the high-voltage system, and the first battery pack 10 cannot supply power to the components (load 60, motor controller 40 and motor 50) in the high-voltage system, and the first battery pack 10 cannot charge the second battery pack 20 in the high-voltage system.

[0069] Figure 1 The second contactor S2 in the figure is the contactor of the second battery pack 20. When the second contactor S2 is closed, the second battery pack 20 is connected to the high-voltage system, and the second battery pack 20 can supply power to the motor controller 40 and the motor 50. The second battery pack 20 can also supply power to the load 60 in the high-voltage system through the DC converter 30, and can also charge the first battery pack 10. When the second contactor S2 is disconnected, the second battery pack 20 is disconnected from the high-voltage system, and the second battery pack 20 cannot supply power to the components in the high-voltage system (the load 60, the motor controller 40, and the motor 50), and the second battery pack 20 cannot charge the first battery pack 10 in the high-voltage system.

[0070] The load 60 may be a load that requires high voltage power supply, such as an air conditioner or a positive temperature coefficient (PTC) heater.

[0071] The function of the motor controller 40 is to convert the electric energy stored in the power battery into the electric energy required by the drive motor 50 according to the gear position, accelerator, brake and other instructions, so as to control the starting operation, forward and backward speed, climbing strength and other driving states of the electric vehicle, or to help the electric vehicle brake and store part of the braking energy in the power battery (such as Figure 1In the first battery pack 10 or the second battery pack 20 shown.

[0072] The motor 50 can convert electrical energy into mechanical energy and drive wheels and working devices through a transmission device or directly.

[0073] It should be noted that the motor controller 40 and the motor 50 are also high-voltage loads, and the difference between them and the load 60 is that the rated operating voltages of the motor controller 40 and the motor 50 are higher than the rated operating voltage of the load 60 .

[0074] The embodiment of the present application provides a high-voltage system including two battery packs, and a system architecture of a high-voltage system based on an energy pack and a power pack. When one of the first battery pack and the second battery pack fails, the vehicle can continue to operate through the other battery pack. The two battery packs are mutually redundant, and the vehicle can continue to operate even if one of the battery packs fails, which can realize emergency operation of the vehicle after the failure and improve the usability of the vehicle.

[0075] See also Figure 2 , Figure 2 Schematic diagram of a high voltage system provided in the embodiment of the present application. Figure 2 As shown, the high-voltage system may include: a first battery pack 10, a second battery pack 20, a DC converter 30, a motor controller 40, a motor 50 and a load 60. The first battery pack 10 and the second battery pack 20 are connected via the DC converter 30. The first battery pack 10 is used to power the load 60, and the second battery pack 20 is used to power the motor controller 40 and the load 60.

[0076] The positive electrode of the first battery pack 10 is connected to the positive electrode of the load 60 and the first positive terminal of the DC converter 30 through the first contactor S1, the second battery pack 20 is connected to the second positive terminal of the DC converter 30 and the positive electrode of the motor controller 40 through the second contactor S2, and the output of the motor controller 40 is connected to the input of the motor 50. The negative electrode of the first battery pack 10 is connected to the negative electrode of the load 60 through the third contactor S3, and the negative electrode of the second battery pack 20 is connected to the negative electrode of the motor controller 40 through the fourth contactor S4.

[0077] The negative electrode of the load 60 is connected to the negative electrode of the first battery pack 10 , the negative electrode of the DC converter, the negative electrode of the second battery pack, and the negative electrode of the motor controller 40 .

[0078] Figure 2 The motor 50 is taken as a three-phase motor as an example, and the three-phase output terminals of the motor controller 40 are respectively connected to the three-phase input terminals of the motor 50 .

[0079] Figure 2 The DC converter 30 includes an inductor and two switching tubes. Figure 2 The structure of the DC converter 30 is Figure 1 A possible example of a DC converter 30 . Figure 2 The motor controller 40 includes 6 switch tubes, Figure 2 The structure of the motor controller 40 is Figure 1 One possible example of a motor controller 40 .

[0080] The switch tube may be any one of a triode, a metal-oxide-semiconductor (MOS) field effect transistor, and an insulate-gate bipolar transistor (IGBT).

[0081] It should be noted that Figure 2 The third contactor S3 is also the contactor of the first battery pack 10. When the first contactor S1 and the third contactor S3 are simultaneously energized, the first battery pack 10 is connected to the high voltage system. Figure 2 The fourth contactor S4 is also the contactor of the second battery pack 20. When the second contactor S2 and the fourth contactor S4 are simultaneously energized, the second battery pack 20 is connected to the high voltage system.

[0082] Figure 2 The charging pile is a component of the system architecture of the high-voltage system in the charging state. Figure 2 The first battery pack 10 and the second battery pack in the high-voltage system are charged. When the first contactor S1, the third contactor S3, the fifth contactor S5 and the seventh contactor S7 are all energized, the charging pile can charge the first battery pack 10. When the second contactor S2, the fourth contactor S4, the sixth contactor S6 and the seventh contactor S7 are all energized, the charging pile can charge the second battery pack 20. The charging pile can charge the first battery pack 10 and the second battery pack 20 at the same time, or charge one of the battery packs separately, or charge only one of the battery packs (for example, when the charging pile charges the first battery pack 10, the first battery pack 10 can charge the second battery 20 through the DC converter 30; for another example, when the charging pile charges the second battery pack 20, the second battery pack 20 can charge the first battery pack 10 through the DC converter 30).

[0083] Figure 2The first battery pack 10 and the second battery pack 20 may both include a battery management system (BMS), and the BMS of the first battery pack 10 may determine whether the first battery pack 10 has a fault based on the collected battery status information of the first battery pack 10 (the battery status information includes current, voltage, temperature, power, etc.). The BMS of the second battery pack 20 may determine whether the second battery pack 20 has a fault based on the collected battery status information of the second battery pack 20 (the battery status information includes current, voltage, temperature, power, etc.).

[0084] Figure 1 and Figure 2 The high voltage system may further include an electronic device (not shown in the figure). For example, the electronic device may include a vehicle control unit (VCU). The electronic device may be used to perform the following Figure 3 or Figure 4 The method flow in .

[0085] The BMS of the first battery pack 10 and the BMS of the second battery pack 20 can both communicate with a vehicle control unit (VCU). The BMS can report the fault information of the battery pack to the VCU.

[0086] It should be noted that Figure 1 and Figure 2 The contactor in can be replaced by a relay.

[0087] See also Figure 3 , Figure 3 It is a flowchart of a fault handling method provided in an embodiment of the present application. Figure 3 The method shown can be applied to Figure 1 or Figure 2 High pressure systems such as Figure 3 As shown, the fault handling method includes the following steps.

[0088] 301. When at least one of the first battery pack and the second battery pack reports fault information, a fault handling strategy is determined based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack; wherein the fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails.

[0089] In the embodiment of the present application, both the first battery pack and the second battery pack can report their own fault information to the electronic device. Specifically, when the BMS of the first battery pack detects that the first battery pack has a fault, the BMS of the first battery pack can report the fault information of the first battery pack (i.e., the fault information reported by the first battery pack) to the electronic device. When it is detected that the first battery pack has not failed, the BMS of the first battery pack will not report the fault information. When the BMS of the second battery pack detects that the second battery pack has a fault, the BMS of the second battery pack can report the fault information of the second battery pack (i.e., the fault information reported by the second battery pack) to the electronic device. When it is detected that the second battery pack has not failed, the BMS of the second battery pack will not report the fault information.

[0090] The BMS of the first battery pack can determine whether the first battery pack has a fault based on the collected battery status information of the first battery pack (the battery status information includes current, voltage, temperature, power, etc.), and after detecting that the first battery pack has a fault, report the fault information of the first battery pack (i.e., the fault information reported by the first battery pack) to the electronic device. The BMS of the second battery pack can determine whether the second battery pack has a fault based on the collected battery status information of the second battery pack (the battery status information includes current, voltage, temperature, power, etc.), and after detecting that the second battery pack has a fault, report the fault information of the second battery pack (i.e., the fault information reported by the second battery pack) to the electronic device.

[0091] Among them, BMS can define faults as tolerable faults and intolerable faults. Tolerable faults include but are not limited to: battery capacity imbalance, large battery voltage deviation, DC charging contactor sintering, etc. Intolerable faults include but are not limited to: battery leakage, severe battery overheating, severe low single cell voltage, battery sampling failure, etc.

[0092] In one possible embodiment, for tolerable faults, no processing is required temporarily, and the BMS will not report fault information to the electronic device. For intolerable faults, the BMS will report fault information to the electronic device. In another possible embodiment, for both tolerable and intolerable faults, the BMS will report fault information to the electronic device.

[0093] For intolerable faults, they are further divided into recoverable faults and unrecoverable faults. Recoverable faults include but are not limited to: battery pack temperature is generally too high, single cell voltage is generally too low, etc. Unrecoverable faults include but are not limited to: battery is seriously overheated, single cell voltage is seriously too low, etc. In actual use, the definition of recoverable faults and unrecoverable faults can be distinguished according to the battery pack's own state and performance. The recoverable faults and unrecoverable faults defined in the embodiments of this application are only a possible example.

[0094] Unbalanced battery capacity: Each single cell in the battery pack has a different capacity when it leaves the factory. The capacity of the battery pack depends on the capacity of the single cell with the lowest capacity. If the capacity difference between the single cell with the highest capacity and the single cell with the lowest capacity is relatively large, the battery capacity is considered to be unbalanced. For example, if the BMS detects that the capacity difference between the single cell with the highest capacity and the single cell with the lowest capacity in the battery pack is greater than the first threshold (the first threshold can be pre-set in the BMS), the battery capacity is considered to be unbalanced. The capacity that can be discharged by the battery pack during the discharge process depends on the lower capacity limit of the single cell. If it is detected that the capacity of one of the single cells reaches the lower capacity limit, the discharge is stopped. If the battery capacity is unbalanced, when the discharge is stopped, the single cell with high capacity in the battery pack still has more capacity, and the unbalanced battery capacity does not have a great impact on the safety of the vehicle. However, it will cause the cruising range of the entire battery pack to decrease. For unbalanced battery capacity, the BMS can perform capacity balancing to increase the capacity of the single cell with smaller capacity. Unbalanced battery capacity will not cause the vehicle to break down, and it is a tolerable fault. BMS will have a capacity balancing strategy (for example, active strategy, passive strategy, etc. Active balancing: the principle of active balancing is to transfer energy from higher single cells to lower single cells to achieve capacity balancing between single cells; passive balancing: the passive balancing method is to connect resistors to the terminals of each battery so that the battery charge flows through the resistor, thereby achieving charge balance between batteries), which will keep the capacity of all batteries almost the same.

[0095] Large battery voltage deviation: refers to the voltage difference between the single cell with the highest voltage and the single cell with the lowest voltage in the battery pack being greater than the second threshold (the second threshold can be pre-set in the BMS). During the charging process of the battery pack, if a single cell in the battery pack reaches the charging cut-off voltage first, the battery pack stops charging, and other single cells with lower voltages also stop charging. At this time, the battery pack is not fully charged. If the battery voltage deviation is large, the amount of electricity that can be charged into the battery pack is less. Large battery voltage deviation does not have a big impact on the safety of the vehicle. However, it will cause the cruising range of the entire battery pack to decrease, which is a tolerable fault.

[0096] The function of the DC charging contactor is: during DC charging, if the current is detected to be too large, the DC charging can be disconnected by disconnecting the DC charging contactor. During vehicle driving, if the DC charging contactor is detected to be sintered, it will not have any impact on driving. Therefore, the sintering of the DC charging contactor is considered to be a tolerable fault.

[0097] Battery leakage: There will be an insulation monitoring module on the vehicle to detect the current from the battery to the ground. For example, an insulation resistor is placed between the battery and the ground, and the resistance of the insulation resistor is detected. If the resistance is detected to be less than the third threshold (the third threshold can be pre-set in the BMS), it is considered that there is a risk of battery leakage.

[0098] Battery overtemperature: refers to the temperature of the battery pack exceeding a certain threshold. When the battery is overheated, thermal runaway may occur, posing a safety risk (for example, battery spontaneous combustion).

[0099] Battery overtemperature can be divided into: general battery overtemperature and severe battery overtemperature. General battery overtemperature means that the temperature of the battery pack exceeds the fourth threshold; severe battery overtemperature means that the temperature of the battery pack exceeds the fifth threshold. The fourth threshold and the fifth threshold can be pre-set in the BMS, and the fourth threshold is less than the fifth threshold.

[0100] Low cell voltage: refers to the voltage of a single cell in the battery pack being too low. If the voltage of a single cell in the battery pack is detected to be less than a certain threshold, it is considered that the cell voltage is too low. When the cell voltage is too low, thermal runaway may occur, posing a safety risk.

[0101] The single cell voltage is too low, which can be divided into: the single cell voltage is generally too low and the single cell voltage is seriously too low. The single cell voltage is generally too low, which means that the voltage of the single cell is lower than the sixth threshold, and the single cell voltage is seriously too low, which means that the voltage of the single cell is lower than the seventh threshold. Among them, the sixth threshold and the seventh threshold can be pre-set in the BMS, and the sixth threshold is greater than the seventh threshold.

[0102] Among them, the single cell voltage is too low, which can also be called: single cell over-discharge. The single cell voltage is generally too low, which can also be called: single cell general over-discharge. The single cell voltage is seriously too low, which can also be called: single cell serious over-discharge.

[0103] Battery sampling failure: refers to a failure in the sampling of the battery's voltage, current, and temperature, that is, the battery's voltage, current, and other information cannot be sampled. Battery sampling failures can also be classified into levels. For example, if one of the sensors (such as the current sensor) fails, the detection result of the sensor can be judged with the assistance of other sensors (such as the voltage sensor), then it is considered that there is no battery sampling failure. If there are more sensors that fail, it is considered that there is a battery sampling failure.

[0104] It should be noted that the determination of tolerable faults and intolerable faults needs to be analyzed from the perspective of the impact of battery faults on the safety of the entire vehicle. Different battery types and structures may lead to different classifications. The tolerable faults and intolerable faults defined in the embodiments of the present application are only a possible example.

[0105] Battery types include: ternary lithium battery and lithium iron phosphate battery. The voltage values ​​of ternary lithium battery and lithium iron phosphate battery are different. The battery characteristics are also different. The standards for judging tolerable faults and intolerable faults are also different.

[0106] The structure of the battery can include a single-channel layer or a dual-channel layer. For example, for the dual-channel layer, there are two current sampling channels. If one current sampling channel fails and the other current sampling channel can still be used, it is considered a tolerable fault. For the single-channel layer, there is only one circuit sampling channel. If the current sampling channel fails, it is considered an intolerable fault.

[0107] The electronic device may be a vehicle controller, and the BMS of the battery pack and the electronic device may communicate via a controller area network (CAN) bus.

[0108] In step 301, a fault handling strategy is determined based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack, which may include any one of the following three situations:

[0109] The first case: when the electronic device receives the fault information reported by the first battery pack but does not receive the fault information reported by the second battery pack, the electronic device determines a fault handling strategy based on the fault information reported by the first battery pack.

[0110] The second situation: when the electronic device receives the fault information reported by the second battery pack but does not receive the fault information reported by the first battery pack, the electronic device determines a fault handling strategy based on the fault information reported by the second battery pack.

[0111] The third situation: when the electronic device receives fault information reported by the first battery pack and fault information reported by the second battery pack, the electronic device determines a fault handling strategy based on the fault information reported by the first battery pack and the fault information reported by the second battery pack.

[0112] The first battery pack and the second battery pack may periodically report their own status information. For example, if the BMS in the first battery pack detects that the first battery pack has a fault, the status information reported by the BMS may include fault information of the first battery pack.

[0113] The fault handling strategy of the embodiment of the present application enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails. For example, when it is detected that the first battery pack fails but the second battery pack does not fail, the load can continue to be powered by the second battery pack; when it is detected that the first battery pack does not fail but the second battery pack fails, the motor controller and the motor can continue to be powered by the first battery pack, thereby ensuring the continued operation of the vehicle.

[0114] 302, execute the fault handling strategy.

[0115] In the embodiment of the present application, the high-voltage system adopts a dual battery pack design. When at least one of the first battery pack and the second battery pack reports fault information, a fault handling strategy is determined based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack. The fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails; the fault handling strategy is executed. When one of the first battery pack and the second battery pack fails, the vehicle can continue to operate through the other battery pack.

[0116] Optionally, the fault information reported by the first battery pack includes: any one of a first type of fault occurring in the first battery pack and a second type of fault occurring in the first battery pack; the fault information reported by the second battery pack includes: any one of a first type of fault occurring in the second battery pack and a second type of fault occurring in the second battery pack, and the safety risk of the second type of fault is greater than the safety risk of the first type of fault.

[0117] In the embodiment of the present application, the safety risk of the second type of fault is greater than the safety risk of the first type of fault. The first type of fault may be the above-mentioned recoverable fault, and the second type of fault may be the above-mentioned irrecoverable fault. When the battery pack has a first type of fault, the battery pack can still work for a short time or intermittently. When the battery pack has a second type of fault, in order to reduce the possibility of a greater safety risk to the vehicle, the battery pack stops working.

[0118] Optionally, in step 301, determining a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack may specifically include the following steps:

[0119] (11) when a first type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, determining that the fault handling strategy is a first fault handling strategy;

[0120] (12) when the first battery pack does not report fault information and the second battery pack has a first type of fault, determining that the fault handling strategy is a second fault handling strategy;

[0121] (13) when the first battery pack has a first type of fault and the second battery pack does not report fault information, determining that the fault handling strategy is a third fault handling strategy;

[0122] (14) when the first battery pack does not report fault information and the second battery pack has a second type of fault, determining that the fault handling strategy is a fourth fault handling strategy;

[0123] (15) when the first battery pack has a second type of fault and the second battery pack does not report fault information, determining that the fault handling strategy is a fifth fault handling strategy;

[0124] (16) when the first battery pack has a second type of fault and the second battery pack has a second type of fault, determining that the fault handling strategy is a sixth fault handling strategy;

[0125] (17) when a first type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy;

[0126] (18) When a second type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, the fault handling strategy is determined to be a sixth fault handling strategy.

[0127] In the embodiment of the present application, the first fault handling strategy, the second fault handling strategy, the third fault handling strategy, the fourth fault handling strategy, the fifth fault handling strategy, and the sixth fault handling strategy are different from each other. Different fault handling strategies can be executed according to the fault types of the first battery pack and the second battery pack. Among them, the first fault handling strategy, the second fault handling strategy, the third fault handling strategy, the fourth fault handling strategy, and the fifth fault handling strategy will not stop both the first battery pack and the second battery pack from working, and can still ensure the normal operation of the vehicle. In the case where the first battery pack and the second battery pack do not fail at the same time, the normal operation of the vehicle can still be guaranteed, thereby improving the usability of the vehicle.

[0128] Optionally, the first fault handling strategy includes:

[0129] Controlling the first battery pack and the second battery pack to alternately operate for a first time period;

[0130] Within the first time period, if it is detected that the first type of fault of the first battery pack and the first type of fault of the second battery pack have been resolved, resuming the operation of the first battery pack and the second battery pack;

[0131] Within the first time period, if it is detected that the first type of fault of the first battery pack has not been resolved and the first type of fault of the second battery pack has been resolved, the operation of the second battery pack is restored and the contactor of the first battery pack is disconnected;

[0132] Within the first time period, if it is detected that the first type of fault of the first battery pack has been resolved, but the first type of fault of the second battery pack has not been resolved, the operation of the first battery pack is restored, and the contactor of the second battery pack is disconnected;

[0133] Within the first time period, if it is detected that both the first type of fault of the first battery pack and the first type of fault of the second battery pack are not resolved, the contactor of the first battery pack is disconnected, and the contactor of the second battery pack is disconnected.

[0134] In the embodiment of the present application, the first fault handling strategy is an alternating operation strategy. When the first type of fault occurs in the first battery pack and the first type of fault occurs in the second battery pack, the first type of fault may be the above-mentioned recoverable fault, such as the battery pack temperature is generally overheated, the single cell voltage is generally too low, etc. For the battery pack temperature being generally overheated, the two battery packs are alternately operated for a short period of time, and the fault can be automatically recovered after a period of time, so that the fault can be quickly and effectively resolved.

[0135] The first duration can be set in advance. The first battery pack and the second battery pack alternately operate for the first duration, which means that within the first duration, the first battery pack and the second battery pack alternately operate at a certain frequency. For example, if the first duration is 100 seconds, the first battery pack and the second battery pack can alternately operate every 10 seconds, that is, the first battery pack operates for the first 10 seconds, the second battery pack operates for the second 10 seconds, and so on.

[0136] During the first time period, the electronic device can continue to receive the battery status information reported by the first battery pack and the second battery pack, so as to determine whether the first type of fault of the first battery pack has been resolved and whether the first type of fault of the second battery pack has been resolved. If the first type of faults of both battery packs have been resolved within the first time period, the operation of the first battery pack and the second battery pack is restored to a normal working state, and the first battery pack and the second battery pack are both working normally. If the first type of fault of one of the battery packs has been resolved within the first time period, and the first type of fault of the other battery pack has not been resolved, the operation of the battery pack whose fault has been resolved is restored, the contactor of the battery pack whose fault has not been resolved is disconnected, the battery pack whose fault has not been resolved is disconnected from the circuit, and the battery pack whose fault has been resolved continues to operate. When one of the first battery pack and the second battery pack fails, the vehicle can continue to operate through the other battery pack. If the first type of faults of both battery packs have not been resolved within the first time period, the contactor of the first battery pack can be disconnected, the contactor of the second battery pack can be disconnected, and both battery packs can be disconnected from the circuit. Since the first battery pack and the second battery pack have been running alternately for the first period of time, an alarm can be issued to the driver within the first period of time, leaving the driver with sufficient time to handle the emergency and park the vehicle in a safe location.

[0137] Optionally, the second fault handling strategy includes:

[0138] disconnecting the contactor of the second battery pack, and monitoring whether the first type of fault of the second battery pack is resolved within the second time period when the continuous disconnection time of the contactor of the second battery pack reaches a second time period; if the first type of fault of the second battery pack has been resolved within the second time period, closing the contactor of the second battery pack, and controlling the power of the second battery pack to increase step by step from the first limit power when the contactor of the second battery pack is closed;

[0139] If the first type of fault of the second battery pack is not resolved within the second time period, or if a first type of fault or a second type of fault of the second battery pack is monitored during the process of the power of the second battery pack gradually increasing from the first limited power, the contactor of the second battery pack is disconnected and the fourth fault handling strategy is executed.

[0140] In the embodiment of the present application, the second duration can be preset. The second duration can be equal to or different from the first duration. The first limited power can be preset, and the first limited power is less than the power of the second battery pack when it is working normally.

[0141] If the first type of fault of the second battery pack is resolved within the second time period, the contactor of the second battery pack is energized to connect the second battery pack to the circuit. After connecting to the circuit, the power of the second battery pack is gradually increased from the first power limit until it reaches the power of the second battery pack when it is working normally. If the first type of fault of the second battery pack is not resolved within the second time period, or the first type of fault or the second type of fault of the second battery pack is monitored during the process of the power of the second battery pack gradually increasing from the first power limit, the contactor of the second battery pack is disconnected to disconnect the second battery pack from the circuit. At this time, the first battery pack continues to operate, and when one of the first battery pack and the second battery pack fails, the other battery pack can be used to keep the vehicle running. In the embodiment of the present application, if the first type of fault of the second battery pack is resolved within the second time period, the power of the second battery pack is gradually increased from the first limited power. Because the second battery pack has previously failed (there is a priori fault), the low power output of the second battery pack is limited. After the fault of the second battery pack is resolved, the power of the second battery pack is increased in steps to avoid the second battery pack from failing due to running at full power, and the second battery pack is gradually restored to normal.

[0142] Optionally, the third fault handling strategy includes:

[0143] disconnecting the contactor of the first battery pack, and monitoring whether a first type of fault of the first battery pack is resolved within the third time period when the continuous disconnection time of the contactor of the first battery pack reaches a third time period; if the first type of fault of the first battery pack has been resolved within the third time period, closing the contactor of the first battery pack, and controlling the power of the first battery pack to increase step by step from the second limit power when the contactor of the first battery pack is closed;

[0144] If the first type of fault of the first battery pack is not resolved within the third time period, or if a first type of fault or a second type of fault of the first battery pack is monitored during the process of the power of the first battery pack gradually increasing from the second limiting power, the contactor of the first battery pack is disconnected and the fifth fault handling strategy is executed.

[0145] In the embodiment of the present application, the third duration can be set in advance. The third duration can be equal to or different from the second duration. The second limited power can be set in advance, and the second limited power is less than the power of the first battery pack when it is working normally. The second limited power can be equal to or different from the first limited power.

[0146] If the first type of fault of the first battery pack has been resolved within the third time period, the contactor of the first battery pack is energized to connect the first battery pack to the circuit. After connecting to the circuit, the power of the first battery pack is gradually increased from the second limit power until it reaches the power of the first battery pack when it is working normally. If the first type of fault of the first battery pack is not resolved within the third time period, or the first type of fault or the second type of fault of the first battery pack is monitored during the process of the power of the first battery pack gradually increasing from the second limit power, the contactor of the first battery pack is disconnected to disconnect the first battery pack from the circuit. At this time, the second battery pack continues to operate, and when one of the first battery pack and the second battery pack fails, the other battery pack can be used to keep the vehicle running. In the embodiment of the present application, if the first type of fault of the first battery pack is resolved within the third time period, the power of the first battery pack is gradually increased from the second limited power. Because the first battery pack has previously failed (a prior fault exists), the low power output of the first battery pack is limited. After the fault of the first battery pack is resolved, the power of the first battery pack is increased in steps to avoid the first battery pack from failing due to running at full power, and the first battery pack is gradually restored to normal.

[0147] Optionally, the fourth fault handling strategy includes:

[0148] disconnecting a contactor of the second battery pack, and calculating a first maximum allowable output power that the first battery pack is allowed to output to the motor controller and the motor;

[0149] When the required power of the motor controller and the motor is greater than the first maximum allowable output power, control the first battery pack to output to the motor controller and the motor according to the first maximum allowable output power, or reduce the power of the load and control the first battery pack to output to the motor controller and the motor according to the required power;

[0150] When the required power is less than or equal to the first maximum allowable output power, controlling the first battery pack to output power to the motor controller and the motor according to the required power;

[0151] The first battery pack is used to power the load, and the second battery pack is used to power the motor controller and the motor.

[0152] In the embodiment of the present application, after the contactor of the second battery pack is disconnected and the second battery pack is disconnected from the circuit, the power supply of the circuit is now entirely provided by the first battery pack. The motor controller and motor originally powered by the second battery pack will take away part of the power of the first battery pack. The maximum power allowed to be output to the motor controller and the motor by the first battery pack can be calculated (i.e., the first maximum allowable output power). If in order to meet the required power of the load, when the required power of the motor controller and the motor is greater than the first maximum allowable output power, the first battery pack is controlled to output to the motor controller and the motor according to the first maximum allowable output power. Since the power output of the first battery pack is limited, the performance of the motor controller and the motor will be limited at this time, and the power and speed limit of the motor may be reduced. If in order to meet the required power of the motor controller and the motor, when the required power of the motor controller and the motor is greater than the first maximum allowable output power, the power of the load is reduced, and the first battery pack is controlled to output to the motor controller and the motor according to the required power.

[0153] The first maximum allowable output power that the first battery pack is allowed to output to the motor controller and the motor can be calculated based on the current power of the first battery pack, the battery voltage, the power demand of the load and its own capacity.

[0154] Optionally, the fifth fault handling strategy includes:

[0155] Disconnecting a contactor of the first battery pack, turning off non-essential loads among the loads, and calculating a second maximum allowable output power that the second battery pack is allowed to output according to an expected cruising range;

[0156] When the driving demand power is greater than the second maximum allowable output power, controlling the second battery pack to output according to the second maximum allowable output power, or according to the demand power;

[0157] When the required power is less than or equal to the second maximum allowable output power, controlling the second battery pack to output according to the required power;

[0158] Wherein, the first battery pack is used to supply power to the load.

[0159] In the embodiment of the present application, after the contactor of the first battery pack is disconnected and the first battery pack is separated from the circuit, the power supply of the circuit is now entirely provided by the second battery pack. Since the second battery pack has a small capacity and a large short-term output power, it cannot maintain a long-term high-power output without replenishing the power. At this time, two methods can be provided. One is to calculate the second maximum allowable output power allowed to be output by the second battery pack based on the expected cruising range, so that the power output by the second battery pack can meet the cruising range requirements. The other is to meet driving needs and respond normally to the driver's needs without any power restrictions (for example, the driver finds that the distance between the current location and the destination is much less than the expected cruising range. In order to improve the driving experience, there is no need to reduce power).

[0160] The second maximum allowable output power allowed to be output by the second battery pack can be calculated according to the current power of the second battery pack and the expected cruising range.

[0161] The sixth fault handling strategy will disconnect the first battery pack and the second battery pack from the high-voltage system. At this time, the vehicle cannot continue to operate to ensure the safety of the vehicle. It should be noted that the sixth fault handling strategy needs to be executed when both batteries fail and at least one of them has a second-type fault. Since the battery pack generally has a first-type fault first, the second-type fault will occur only when the fault is not effectively resolved. When a first-type fault occurs in the battery pack, it can be handled by the above-mentioned first fault handling strategy, second fault handling strategy, and third fault handling strategy. In the case of the first-type fault handling strategy, the second-type fault handling strategy, the third-type fault handling strategy, the fourth-type fault handling strategy, and the fifth-type fault handling strategy, an alarm can be issued to the driver, leaving enough time for the driver to handle the emergency and park the vehicle in a safe location.

[0162] See also Figure 4 , Figure 4 It is a specific flow chart of a fault handling method provided in an embodiment of the present application. Figure 4 The method shown can be applied to Figure 1 or Figure 2 High pressure systems such as Figure 4 As shown, the fault handling method includes the following steps.

[0163] 401, the BMS collects the battery status and determines whether a fault occurs; if so, execute step 402, if not, end this process.

[0164] 402 , judging whether it is an intolerable fault according to the battery fault type; if so, executing step 403 , if not, executing step 404 .

[0165] 403, determine whether it is a recoverable fault. If yes, execute step 405, if no, execute step 406.

[0166] 404, the vehicle controller does not process and runs normally.

[0167] 405, determine whether it is a single packet failure. If yes, execute step 407, if no, execute step 408.

[0168] 406 , determine whether it is a single packet failure, if so, execute step 411 , if not, execute step 412 .

[0169] 407 , determine whether it is a performance package failure, if so, execute step 409 , if not, execute step 410 .

[0170] 408, the vehicle controller executes a short-term alternating operation strategy for the two battery packs.

[0171] 409, the vehicle controller executes the performance package to recover the fault post-processing strategy.

[0172] 410, the vehicle controller executes the energy packet recoverable fault post-processing strategy.

[0173] 411, determine whether it is a performance package failure, if so, execute step 413, if not, execute step 414.

[0174] 412, the vehicle controller reports a functional failure, cuts off the vehicle's high-voltage circuit, and prohibits power-on driving.

[0175] 413, the vehicle controller executes the performance package irrecoverable fault post-processing strategy.

[0176] 414, the vehicle controller executes the energy packet irrecoverable fault post-processing strategy.

[0177] In the embodiment of the present application, the BMS may define faults as tolerable faults and intolerable faults. Tolerable faults include, but are not limited to, unbalanced battery capacity, large battery voltage deviation, sintering of DC charging contactors, etc. Intolerable faults include, but are not limited to, battery leakage, severe battery overtemperature, severe low cell voltage, battery sampling failure, etc. For tolerable faults, the vehicle controller does not need to be processed temporarily and operates normally. For intolerable faults, the BMS further determines whether it is a recoverable fault. If the performance package fails in a single package and it is a recoverable fault, the performance package recoverable fault post-processing strategy (such as the above-mentioned second fault processing strategy) can be executed. If the energy package fails in a single package and it is a recoverable fault, the energy package recoverable fault post-processing strategy (such as the above-mentioned third fault processing strategy) can be executed. If both the performance package and the energy package are recoverable faults, a short-term alternating operation strategy of the two battery packages is executed (such as the above-mentioned first fault processing strategy).

[0178] If the performance pack fails alone and it is an irrecoverable fault, the performance pack irrecoverable fault post-processing strategy can be executed (such as the fourth fault processing strategy mentioned above). If the energy pack fails alone and it is an irrecoverable fault, the energy pack irrecoverable fault post-processing strategy can be executed (such as the fifth fault processing strategy mentioned above). If both battery packs (performance pack and energy pack) fail, and at least one of the performance pack and energy pack fails irrecoverably, the vehicle controller reports a functional fault, cuts off the high-voltage circuit of the vehicle, and prohibits power-on drive (such as the sixth fault processing strategy mentioned above).

[0179] In the embodiment of the present application, for tolerable faults, no processing is required for the time being. For intolerable faults, they are further divided into recoverable faults and unrecoverable faults. Recoverable faults include general overtemperature of the battery pack and general low voltage, etc., and unrecoverable faults include serious overtemperature of the battery pack, serious low voltage, serious over-discharge of the battery, etc. The actual use can be distinguished according to the state and performance of the battery pack itself. The embodiment of the present application is only used as an example and does not represent all usage situations. For recoverable faults, it is determined whether both battery packs report faults. If both report faults, the two battery packs execute a short-time alternating operation strategy. If it is a single pack fault, the performance pack fault executes the performance pack recoverable fault post-processing strategy, and the energy pack executes the energy pack recoverable fault post-processing strategy. For unrecoverable faults, it is determined whether both battery packs report faults. If both report faults, the whole vehicle executes the fault alarm function, cuts off the high-voltage circuit, and prohibits power-on driving. If it is a single pack fault, the performance pack fault executes the performance pack unrecoverable fault post-processing strategy, and the energy pack executes the energy pack unrecoverable fault post-processing strategy.

[0180] The short-term alternating operation strategy of the two battery packs mentioned above includes that the two battery packs work alternately at a certain frequency, and monitor whether the recoverable faults are cleared after a period of time. If both packs are cleared, normal operation is restored. If the fault of one pack is restored, the single pack is maintained and single pack operation is executed without fault. If the faults of both packs do not disappear, it is considered that the system is in an unsafe state at this time. The whole vehicle executes the fault alarm function, cuts off the high-voltage circuit, and prohibits power-on driving.

[0181] The above-mentioned performance package recoverable fault post-processing strategy includes the following: first disconnect the performance package (such as Figure 2The contactor of the second battery pack in the circuit is used to disconnect the performance pack from the high-voltage circuit. All power supply in the circuit is provided by the energy pack. The fault status of the performance pack is continuously monitored during operation. When the fault status of the performance pack is relieved, the contactor of the performance pack is energized to limit the low-power output of the performance pack. If the alarm occurs again, the contactor is disconnected and the post-processing strategy for the irrecoverable fault of the performance pack is executed. If there is no alarm, the graded power limit can be released. If the alarm occurs again during operation, the contactor is disconnected and the post-processing strategy for the irrecoverable fault of the performance pack is executed.

[0182] The energy packet recoverable fault post-processing strategy mentioned above includes the following: first disconnect the energy packet (such as Figure 2 The contactor of the first battery pack in the energy pack does not participate in the work of the high-voltage circuit and is provided with electrical energy by the performance pack. The fault status of the energy pack is continuously monitored during operation. When it is found that the energy pack has released the fault status, the contactor of the energy pack is attracted to limit the low-power output of the energy pack. If an alarm occurs again, the contactor is disconnected and the energy pack irrecoverable fault post-processing strategy is executed. If there is no alarm, the graded power limit can be released. Once an alarm occurs again during operation, the contactor is disconnected and the energy pack irrecoverable fault post-processing strategy is executed.

[0183] The above-mentioned performance package unrecoverable fault post-processing strategy includes the following: First disconnect the performance package (such as Figure 2 The performance pack is disconnected from the high-voltage circuit by the contactor of the second battery pack in the circuit, and the power supply in the circuit is all provided by the energy pack. Secondly, based on the characteristics of the energy pack, the voltage is low, the energy storage is high, but the discharge rate is small. The power supply to the motor controller and the motor needs to pass through the DC converter. Since the performance pack does not participate in the work, it cannot meet the short-term high-power output. The energy pack is based on the current power, battery voltage, load (such as Figure 2 The maximum allowable output power is calculated and sent to the motor controller according to the power demand of the load shown in the figure and its own capacity. When there is a high power request, the power output is limited according to the maximum allowable output power calculated at this time. If necessary, the load operation can be further limited to provide a larger motor output power.

[0184] The above-mentioned energy packet unrecoverable fault post-processing strategy includes the following: first disconnect the energy packet (such as Figure 2 The energy pack does not participate in the high-voltage circuit, and only the performance pack remains in the circuit. The performance pack can supply power to the load (such as Figure 2The performance pack has a high voltage, small capacity, and high short-term output power. It cannot maintain high power output for a long time without power replenishment. At this time, two operating modes are provided: Mode 1: Respond to endurance requirements, turn off all other non-essential loads (such as air conditioning, PTC, etc.), and use all the power of the performance pack to drive the vehicle. At the same time, the maximum allowable output current is obtained based on the power of the performance pack and the expected mileage. When the demand is greater than the maximum allowable output, it is executed according to the maximum allowable output; Mode 2: Respond to driving needs, respond normally to driver needs without any restrictions.

[0185] The embodiment of the present application provides an operation control method for a dual-battery electric vehicle when the battery pack fails. Based on the system architecture of the high-voltage system of the energy pack and the power pack, after the battery pack fails, different operation control methods can be adopted according to the type of fault and the failed battery pack, so that the electric vehicle can continue to operate when a partial failure occurs. A dual-battery pack design is adopted, one uses an energy-type battery with a low voltage, and its main function is to store energy and daily use, and to supply power to other high-voltage loads. The other battery pack uses a power-type battery with a high voltage and a large short-term discharge rate, which can meet the requirements of high-power working conditions. The two battery packs are redundant with each other. By defining the operation control method when the battery pack fails, the emergency operation of the vehicle after the failure can be achieved, and the usability of the vehicle can be improved.

[0186] The above-mentioned scheme of the embodiment of the present application is introduced from the perspective of the execution process of the method side. It is understandable that, in order to realize the above-mentioned functions, the electronic device includes a hardware structure and / or software module corresponding to the execution of each function. It should be easily appreciated by those skilled in the art that, in combination with the units and algorithm steps of each example described in the embodiments provided herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present application.

[0187] The embodiment of the present application can divide the electronic device into functional units according to the above method example. For example, each functional unit can be divided according to each function, or two or more functions can be integrated into one processing unit. The above integrated unit can be implemented in the form of hardware or in the form of software functional units. It should be noted that the division of units in the embodiment of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation.

[0188] See also Figure 5 , Figure 5A schematic diagram of the structure of a fault handling device provided in an embodiment of the present application, the fault handling device is applied to a high voltage system, the high voltage system comprising: a first battery pack and a second battery pack; the fault handling device 500 may include a determination unit 501 and a processing unit 502, wherein:

[0189] a determining unit 501, configured to determine a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack when at least one of the first battery pack and the second battery pack reports fault information, wherein the fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails;

[0190] The processing unit 502 is configured to execute the fault handling strategy.

[0191] Optionally, the fault information reported by the first battery pack includes: any one of a first type of fault occurring in the first battery pack and a second type of fault occurring in the first battery pack; the fault information reported by the second battery pack includes: any one of a first type of fault occurring in the second battery pack and a second type of fault occurring in the second battery pack, and the safety risk of the second type of fault is greater than the safety risk of the first type of fault.

[0192] Optionally, the determining unit 501 determines a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack, including:

[0193] When a first type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, determining that the fault handling strategy is a first fault handling strategy;

[0194] When the first battery pack does not report fault information and the second battery pack has a first type of fault, determining that the fault handling strategy is a second fault handling strategy;

[0195] When a first type of fault occurs in the first battery pack and the second battery pack does not report fault information, determining that the fault handling strategy is a third fault handling strategy;

[0196] When the first battery pack does not report fault information and the second battery pack has a second type of fault, determining that the fault handling strategy is a fourth fault handling strategy;

[0197] When a second type of fault occurs in the first battery pack and the second battery pack does not report fault information, determining that the fault handling strategy is a fifth fault handling strategy;

[0198] When a second type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy;

[0199] When a first type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy;

[0200] When a second type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, the fault handling strategy is determined to be a sixth fault handling strategy.

[0201] Optionally, the first fault handling strategy includes:

[0202] Controlling the first battery pack and the second battery pack to alternately operate for a first time period;

[0203] Within the first time period, if it is detected that the first type of fault of the first battery pack and the first type of fault of the second battery pack have been resolved, resuming the operation of the first battery pack and the second battery pack;

[0204] Within the first time period, if it is detected that the first type of fault of the first battery pack has not been resolved and the first type of fault of the second battery pack has been resolved, the operation of the second battery pack is restored and the contactor of the first battery pack is disconnected;

[0205] Within the first time period, if it is detected that the first type of fault of the first battery pack has been resolved, but the first type of fault of the second battery pack has not been resolved, the operation of the first battery pack is restored, and the contactor of the second battery pack is disconnected;

[0206] Within the first time period, if it is detected that both the first type of fault of the first battery pack and the first type of fault of the second battery pack are not resolved, the contactor of the first battery pack is disconnected, and the contactor of the second battery pack is disconnected.

[0207] Optionally, the second fault handling strategy includes:

[0208] disconnecting the contactor of the second battery pack, and monitoring whether the first type of fault of the second battery pack is resolved within the second time period when the continuous disconnection time of the contactor of the second battery pack reaches a second time period; if the first type of fault of the second battery pack has been resolved within the second time period, closing the contactor of the second battery pack, and controlling the power of the second battery pack to increase step by step from the first limit power when the contactor of the second battery pack is closed;

[0209] If the first type of fault of the second battery pack is not resolved within the second time period, or if a first type of fault or a second type of fault of the second battery pack is monitored during the process of the power of the second battery pack gradually increasing from the first limited power, the contactor of the second battery pack is disconnected and the fourth fault handling strategy is executed.

[0210] Optionally, the third fault handling strategy includes:

[0211] disconnecting the contactor of the first battery pack, and monitoring whether a first type of fault of the first battery pack is resolved within the third time period when the continuous disconnection time of the contactor of the first battery pack reaches a third time period; if the first type of fault of the first battery pack has been resolved within the third time period, closing the contactor of the first battery pack, and controlling the power of the first battery pack to increase step by step from the second limit power when the contactor of the first battery pack is closed;

[0212] If the first type of fault of the first battery pack is not resolved within the third time period, or if a first type of fault or a second type of fault of the first battery pack is monitored during the process of the power of the first battery pack gradually increasing from the second limiting power, the contactor of the first battery pack is disconnected and the fifth fault handling strategy is executed.

[0213] Optionally, the high-voltage system also includes a DC converter, a motor controller, a motor and a load, the first battery pack and the second battery pack are connected via a DC converter, the first battery pack is used to power the load, and the second battery pack is used to power the motor controller and the motor; the first battery pack is an energy-type battery, and the second battery pack is a power-type battery.

[0214] Optionally, the fourth fault handling strategy includes:

[0215] disconnecting a contactor of the second battery pack, and calculating a first maximum allowable output power that the first battery pack is allowed to output to the motor controller and the motor;

[0216] When the required power of the motor controller and the motor is greater than the first maximum allowable output power, control the first battery pack to output to the motor controller and the motor according to the first maximum allowable output power, or reduce the power of the load and control the first battery pack to output to the motor controller and the motor according to the required power;

[0217] When the required power is less than or equal to the first maximum allowable output power, controlling the first battery pack to output power to the motor controller and the motor according to the required power;

[0218] The first battery pack is used to power the load, and the second battery pack is used to power the motor controller and the motor.

[0219] Optionally, the fifth fault handling strategy includes:

[0220] Disconnecting a contactor of the first battery pack, turning off non-essential loads, and calculating a second maximum allowable output power that the second battery pack is allowed to output according to an expected cruising range;

[0221] When the driving demand power is greater than the second maximum allowable output power, controlling the second battery pack to output according to the second maximum allowable output power, or according to the demand power;

[0222] When the required power is less than or equal to the second maximum allowable output power, controlling the second battery pack to output according to the required power;

[0223] Wherein, the first battery pack is used to supply power to the load.

[0224] Optionally, the sixth fault handling strategy includes:

[0225] A contactor of the first battery pack is opened, and a contactor of the second battery pack is opened.

[0226] In this embodiment of the present application, the determining unit 501 and the processing unit 502 may be processors in an electronic device.

[0227] In the embodiment of the present application, the high-voltage system adopts a dual battery pack design. When at least one of the first battery pack and the second battery pack reports fault information, a fault handling strategy is determined based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack. The fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails; the fault handling strategy is executed. When one of the first battery pack and the second battery pack fails, the vehicle can continue to operate through the other battery pack.

[0228] See also Figure 6 , Figure 6 is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application, such as Figure 6As shown, the electronic device 600 includes a processor 601 and a memory 602, and the processor 601 and the memory 602 can be connected to each other via a communication bus 603. The communication bus 603 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus or a controller area network (CAN) bus. The communication bus 603 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 6 The memory 602 is used to store computer programs. The computer programs include program instructions. The processor 601 is configured to call the program instructions. The program includes instructions for executing Figure 3-4 Some or all of the steps in the method included.

[0229] The processor 601 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the above program.

[0230] The memory 602 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory may exist independently and be connected to the processor via a bus. The memory may also be integrated with the processor.

[0231] The electronic device 600 may also include a display (eg, a vehicle-mounted display screen), a speaker, a microphone, and the like.

[0232] In addition, the electronic device 600 may also include common components such as a communication interface (eg, a USB interface, a microphone interface, etc.), an antenna, etc., which will not be described in detail here.

[0233] In the embodiment of the present application, the high-voltage system adopts a dual battery pack design. When at least one of the first battery pack and the second battery pack reports fault information, a fault handling strategy is determined based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack. The fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails; the fault handling strategy is executed. When one of the first battery pack and the second battery pack fails, the vehicle can continue to operate through the other battery pack.

[0234] An embodiment of the present application also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for electronic data exchange, and the computer program enables a computer to execute part or all of the steps of any one of the fault handling methods recorded in the above method embodiments.

[0235] See also Figure 7 , Figure 7 is a schematic diagram of the structure of a vehicle provided in an embodiment of the present application, such as Figure 7 As shown, the vehicle includes the above-mentioned high voltage system.

[0236] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0237] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0238] In the several embodiments provided in the present application, it should be understood that the disclosed device can be implemented in other ways. For example, the device embodiments described above are only schematic, such as the division of the units, which is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the device or unit can be electrical or other forms.

[0239] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0240] In addition, the functional units in the various embodiments of the application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated units may be implemented in the form of hardware or in the form of software program modules.

[0241] If the integrated unit is implemented in the form of a software program module and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a memory, including a number of instructions to enable a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned memory includes: U disk, read-only memory (ROM), random access memory (RAM), mobile hard disk, disk or optical disk and other media that can store program codes.

[0242] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable memory, which can include: a flash drive, a read-only memory, a random access memory, a magnetic disk or an optical disk, etc.

[0243] The embodiments of the present application are introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method and core idea of ​​the present application. At the same time, for general technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A fault handling method, characterized in that: The method comprises: In the case where at least one of the first battery pack and the second battery pack reports fault information, determining a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack, wherein the fault handling strategy enables the vehicle to continue to operate through the other battery pack when one of the first battery pack and the second battery pack fails; The fault handling strategy is executed.

2. The method according to claim 1, characterized in that The fault information reported by the first battery pack includes: any one of the first type of fault occurring in the first battery pack and the second type of fault occurring in the first battery pack; the fault information reported by the second battery pack includes: any one of the first type of fault occurring in the second battery pack and the second type of fault occurring in the second battery pack, and the safety risk of the second type of fault is greater than the safety risk of the first type of fault.

3. The method according to claim 2, characterized in that The determining a fault handling strategy based on the fault information reported by the first battery pack and / or the fault information reported by the second battery pack includes: When a first type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, determining that the fault handling strategy is a first fault handling strategy; When the first battery pack does not report fault information and the second battery pack has a first type of fault, determining that the fault handling strategy is a second fault handling strategy; When a first type of fault occurs in the first battery pack and the second battery pack does not report fault information, determining that the fault handling strategy is a third fault handling strategy; When the first battery pack does not report fault information and the second battery pack has a second type of fault, determining that the fault handling strategy is a fourth fault handling strategy; When a second type of fault occurs in the first battery pack and the second battery pack does not report fault information, determining that the fault handling strategy is a fifth fault handling strategy; When a second type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy; When a first type of fault occurs in the first battery pack and a second type of fault occurs in the second battery pack, determining that the fault handling strategy is a sixth fault handling strategy; When a second type of fault occurs in the first battery pack and a first type of fault occurs in the second battery pack, the fault handling strategy is determined to be a sixth fault handling strategy.

4. The method according to claim 3, characterized in that The first fault handling strategy includes: Controlling the first battery pack and the second battery pack to alternately operate for a first time period; Within the first time period, if it is detected that the first type of fault of the first battery pack and the first type of fault of the second battery pack have been resolved, resuming the operation of the first battery pack and the second battery pack; Within the first time period, if it is detected that the first type of fault of the first battery pack has not been resolved and the first type of fault of the second battery pack has been resolved, the operation of the second battery pack is restored and the contactor of the first battery pack is disconnected; Within the first time period, if it is detected that the first type of fault of the first battery pack has been resolved, but the first type of fault of the second battery pack has not been resolved, the operation of the first battery pack is restored, and the contactor of the second battery pack is disconnected; Within the first time period, if it is detected that both the first type of fault of the first battery pack and the first type of fault of the second battery pack are not resolved, the contactor of the first battery pack is disconnected, and the contactor of the second battery pack is disconnected.

5. The method according to claim 3, characterized in that: The second fault handling strategy includes: disconnecting the contactor of the second battery pack, and monitoring whether the first type of fault of the second battery pack is resolved within the second time period when the continuous disconnection time of the contactor of the second battery pack reaches a second time period; if the first type of fault of the second battery pack has been resolved within the second time period, closing the contactor of the second battery pack, and controlling the power of the second battery pack to increase step by step from the first limit power when the contactor of the second battery pack is closed; If the first type of fault of the second battery pack is not resolved within the second time period, or if a first type of fault or a second type of fault of the second battery pack is monitored during the process of the power of the second battery pack gradually increasing from the first limited power, the contactor of the second battery pack is disconnected and the fourth fault handling strategy is executed.

6. The method according to claim 3, characterized in that The third fault handling strategy includes: disconnecting the contactor of the first battery pack, and monitoring whether a first type of fault of the first battery pack is resolved within the third time period when the continuous disconnection time of the contactor of the first battery pack reaches a third time period; if the first type of fault of the first battery pack has been resolved within the third time period, closing the contactor of the first battery pack, and controlling the power of the first battery pack to increase step by step from the second limit power when the contactor of the first battery pack is closed; If the first type of fault of the first battery pack is not resolved within the third time period, or if a first type of fault or a second type of fault of the first battery pack is monitored during the process of the power of the first battery pack gradually increasing from the second limiting power, the contactor of the first battery pack is disconnected and the fifth fault handling strategy is executed.

7. The method according to claim 3, characterized in that The fourth fault handling strategy includes: disconnecting a contactor of the second battery pack, and calculating a first maximum allowable output power that the first battery pack is allowed to output to the motor controller and the motor; When the required power of the motor controller and the motor is greater than the first maximum allowable output power, control the first battery pack to output to the motor controller and the motor according to the first maximum allowable output power, or reduce the power of the load and control the first battery pack to output to the motor controller and the motor according to the required power; When the required power is less than or equal to the first maximum allowable output power, controlling the first battery pack to output power to the motor controller and the motor according to the required power; The first battery pack is used to power the load, and the second battery pack is used to power the motor controller and the motor.

8. The method according to claim 3, characterized in that The fifth fault handling strategy includes: Disconnecting a contactor of the first battery pack, turning off non-essential loads, and calculating a second maximum allowable output power that the second battery pack is allowed to output according to an expected cruising range; When the driving demand power is greater than the second maximum allowable output power, controlling the second battery pack to output according to the second maximum allowable output power, or according to the demand power; When the required power is less than or equal to the second maximum allowable output power, controlling the second battery pack to output according to the required power; Wherein, the first battery pack is used to supply power to the load.

9. The method according to claim 3, characterized in that: The sixth fault handling strategy includes: A contactor of the first battery pack is opened, and a contactor of the second battery pack is opened.

10. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory is used to store a computer program, the computer program comprises program instructions, and the processor is configured to call the program instructions to execute the method according to any one of claims 1 to 9.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by a processor, the processor is caused to perform the method according to any one of claims 1 to 9.

12. A high-voltage system, characterized in that: The high voltage system comprises: a first battery pack, a second battery pack and the electronic device as claimed in claim 10.

13. A vehicle, characterized in that: Includes the high voltage system as claimed in claim 12.

Images