Redundant secure communication method and device, equipment and storage medium

Abstract

The invention discloses a redundancy safety communication method, device and equipment and a storage medium, relates to the technical field of battery management, and is applied to a battery management system. Based on a preset self-defined unibus communication protocol and a corresponding bidirectional coding IO line, verifying and coding the physical address of each battery cluster management assembly in the management system; if the address coding result shows success, judging whether the battery cluster management component meets a preset normal communication condition or not through the battery cabin management component; if any condition judgment result shows that the condition judgment result is not satisfied, triggering a redundant security communication process corresponding to the corresponding battery cluster management component based on a preset self-defined single bus communication protocol and a bidirectional coding IO line through the battery cabin management component to determine a communication result; and if so, not triggering the redundant secure communication. According to the invention, the coding efficiency and accuracy can be improved, and the safety monitoring capability of the battery management system on the energy storage system is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of battery management, and in particular to a redundant safety communication method, device, equipment and storage medium. Background Art

[0002] The battery management system (BMS) is a crucial component of lithium-ion energy storage systems. A high-power energy storage battery compartment consists of multiple battery clusters connected in parallel, which in turn consist of multiple battery packs connected in series. The corresponding BMS comprises a master control unit (BSMU), a master control unit (BCMU), and a slave control unit (BMU). The master control unit communicates with the BMU via a CAN (Controller Area Network) or LAN (Local Area Network). Therefore, physical address encoding is required to ensure the uniqueness of the master control unit's address, allowing the BMU to accurately identify the source of data and complete communication.

[0003] However, in the existing related solutions, (1) the address of the main control unit that is initially coded at the factory or manually coded on site can only be modified later by updating the software or through the host computer. The labor and time costs brought by this are uncontrollable, which will affect the debugging progress of the project site and increase the debugging cost of the project; (2) Coding through auxiliary equipment not only fails to solve the above cost issues, but also places high demands on the operators. In addition, the manual operation error rate in this method is high, and there are hidden dangers of missing codes and incorrect codes. In addition, none of the above solutions can complete communication when the communication line of the battery management system fails. Summary of the Invention

[0004] In view of this, the purpose of the present invention is to provide a redundant safety communication method, device, equipment and storage medium. On the one hand, it can effectively realize the automatic encoding of the physical address of the battery cluster management component, improve the encoding efficiency and accuracy, and thus avoid the situation of missing encoding and miscoding. On the other hand, it can realize the communication between the battery compartment management component and the battery cluster management component through the bidirectional encoding IO line when the communication line of the battery management system fails, thereby improving the battery management system's ability to monitor the safety of the energy storage system, avoiding the occurrence of safety accidents of the energy storage system, and thus improving the availability and reliability of the battery management system. The specific scheme is as follows:

[0005] In a first aspect, the present application provides a redundant safety communication method applied to a battery management system, comprising:

[0006] The battery compartment management component in the battery management system performs physical address verification and encoding on each battery cluster management component in the battery management system based on a preset custom single bus communication protocol and corresponding bidirectional encoding IO lines to determine the address encoding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop based on the bidirectional encoding IO lines;

[0007] If the address encoding result indicates that the encoding is successful, the battery compartment management component determines whether each battery cluster management component meets the preset normal communication condition, and determines the condition judgment result corresponding to each battery cluster management component;

[0008] If any of the conditional judgment results indicate that it is not satisfied, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line to determine the corresponding communication result;

[0009] If the judgment results of each of the conditions indicate that they are met, the redundant safety communication process will not be triggered.

[0010] Optionally, the physical address of each battery cluster management component in the battery management system is verified and encoded respectively by the battery compartment management component in the battery management system based on a preset custom single bus communication protocol and a corresponding bidirectional coding IO line, including:

[0011] Sending a first automatic encoding command to a second IO port of a first battery cluster management component in the battery management system through a first IO port of a battery compartment management component in the battery management system and based on a preset custom single bus communication protocol, so that the first battery cluster management component and the received first automatic encoding command verify and encode its own physical address;

[0012] The battery compartment management component and each of the battery cluster management components have corresponding first IO ports and second IO ports, and the first IO ports and the second IO ports located in different components are connected using a bidirectional coded IO line;

[0013] If the first coding response sent by the first battery cluster management component is not received within a first preset time period through the first IO port of the battery compartment management component, it is determined that the coding has failed and the bidirectional coding IO line between the battery compartment management component and the first battery cluster management component is abnormal, and the corresponding first address coding result is output;

[0014] If the first coded response is received through the first IO port of the battery compartment management component within the first preset time period, determining whether the battery compartment management component receives the second coded response sent by the last battery cluster management component within a second preset time period to determine a first judgment result;

[0015] If the first judgment result is yes, the second automatic coding command sent by the first IO port of the last battery cluster management component is received through the second IO port of the battery compartment management component, and a corresponding third coding response is fed back based on the second automatic coding command, so as to return the third coding response to the battery compartment management component step by step through the second IO port of the last battery cluster management component to complete the corresponding bidirectional coding IO line abnormality check operation;

[0016] If a fourth coding response corresponding to the third coding response is received from the first battery cluster management component through the second IO port of the battery compartment management component within the second preset time period, determining whether the number of successful codings of the battery cluster management component is less than a preset number based on the fourth coding response to determine a second judgment result;

[0017] If the second judgment result indicates that it is not less than, the encoding is determined to be successful, and the corresponding second address encoding result is output through the battery compartment management component;

[0018] If the second judgment result indicates that it is less than, it is determined that the encoding fails, and the corresponding third address encoding result is output through the battery compartment management component.

[0019] Optionally, the verifying and encoding the physical address of the battery cluster management component and the received first automatic encoding command includes:

[0020] Comparing, by the first battery cluster management component, whether the physical address stored in the local memory is equal to the first encoding value in the first automatic encoding command to determine a corresponding first verification result;

[0021] When the first verification result indicates that the encoding is equal, it is determined that the encoding is successful, and a corresponding first encoding response is sent to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component;

[0022] When the first verification result indicates that they are not equal, a physical address modification operation corresponding to the first battery cluster management component is completed based on the first coding value to complete the corresponding address coding operation, and the corresponding first coding response is sent to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component.

[0023] Optionally, after sending the corresponding first coded response to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component, the method further includes:

[0024] For any of the battery cluster management components, a corresponding target automatic encoding command is sent to the second IO port of the next battery cluster management component through the first IO port of the current battery cluster management component and based on the preset custom single bus communication protocol, so as to verify and encode its own physical address through the next battery cluster management component and the received target automatic encoding command, and send a corresponding target encoding response to the current battery cluster management component, so as to return the target encoding response to the battery compartment management component step by step;

[0025] After the last battery cluster management component completes the corresponding coding response sending operation, the second automatic coding command is sent to the second IO port of the battery compartment management component through the first IO port of the last battery cluster management component and based on the preset custom single bus communication protocol.

[0026] Optionally, after determining the first judgment result, the method further includes:

[0027] If the first judgment result is no, determining whether the fourth coded response returned by the first battery cluster management component is received through the second IO port of the battery compartment management component within the second preset time period to determine a third judgment result;

[0028] When the third judgment result is yes, determining whether the number of successful encodings of the battery cluster management component is less than the preset number based on the fourth coding response to determine a fourth judgment result;

[0029] If the fourth determination result indicates that it is not less than, the encoding is determined to be successful, and the corresponding fourth address encoding result is outputted through the battery compartment management component;

[0030] If the fourth determination result indicates that it is less than, it is determined that the encoding has failed, and the corresponding fifth address encoding result is output through the battery compartment management component.

[0031] Optionally, triggering a redundant safety communication process corresponding to the corresponding battery cluster management component through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line includes:

[0032] Sending a data query command to the second IO port of the first battery cluster management component through the first IO port of the battery compartment management component and based on the preset custom single bus communication protocol;

[0033] determining whether the data query command is received by the first battery cluster management component to determine a fifth determination result;

[0034] If the fifth judgment result is yes, performing address matching through the first battery cluster management component and the data query command, and completing a corresponding data query response operation based on the determined address matching result;

[0035] When a target data query response sent by the first battery cluster management component is received through the battery compartment management component within the second preset time period, determining whether a query abnormality result response sent by the first battery cluster management component is received to determine a sixth judgment result;

[0036] If the sixth judgment result is no, determining that the data query is successful, parsing the target data query response by the battery compartment management component to determine the corresponding first communication result;

[0037] If the sixth judgment result is yes, it is determined that the data query fails, and a corresponding second communication result is determined based on the query abnormal result response.

[0038] Optionally, completing a corresponding data query response operation based on the determined address matching result includes:

[0039] If the determined address match result indicates that the target address in the data query command is equal to the physical address of the first battery cluster management component, the match is determined to be successful, and a corresponding target data query response is fed back to the battery compartment management component through the second IO port of the first battery cluster management component and using the command code in the data query command;

[0040] If the address matching result indicates that the address is not equal, it is determined that the match fails, and the data query command is forwarded to the next battery cluster management component through the first IO port of the first battery cluster management component;

[0041] If the target data query response returned by the next battery cluster management component is received through the first battery cluster management component within a third preset time period, the target data query response is forwarded to the battery compartment management component;

[0042] If the target data query response returned by the next battery cluster management component is not received within a third preset time period through the first battery cluster management component, a corresponding query abnormal result response is sent to the battery compartment management component.

[0043] In a second aspect, the present application provides a redundant safety communication device, which is applied to a battery management system, including:

[0044] An address encoding module is used to verify and encode the physical address of each battery cluster management component in the battery management system through the battery compartment management component in the battery management system based on a preset custom single bus communication protocol and corresponding bidirectional encoding IO lines to determine the address encoding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop manner based on the bidirectional encoding IO lines;

[0045] a condition judgment module, configured to, if the address encoding result indicates that the encoding is successful, determine, through the battery compartment management component, whether each of the battery cluster management components meets a preset normal communication condition, and determine a condition judgment result corresponding to each of the battery cluster management components;

[0046] A redundant safety communication module, configured to trigger a redundant safety communication process corresponding to the corresponding battery cluster management component through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line if any of the conditional judgment results indicate that the condition is not satisfied, so as to determine a corresponding communication result;

[0047] The condition satisfaction processing module is used to not trigger the redundant security communication process if the results of each condition judgment indicate that the condition is satisfied.

[0048] In a third aspect, the present application provides an electronic device, comprising:

[0049] Memory, used to store computer programs;

[0050] The processor is configured to execute the computer program to implement the steps of the aforementioned redundant secure communication method.

[0051] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program, which implements the steps of the aforementioned redundant secure communication method when executed by a processor.

[0052] It can be seen that in the present application, it is applied to the battery management system, through the battery compartment management component in the battery management system, and based on the preset custom single bus communication protocol and the corresponding bidirectional coding IO line, the physical address of each battery cluster management component in the battery management system is checked and encoded respectively to determine the address coding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop manner based on the bidirectional coding IO line; if the address coding result shows that the coding is successful, the battery compartment management component is used to judge whether each battery cluster management component meets the preset normal communication conditions, and determine the condition judgment result corresponding to each battery cluster management component; if any of the condition judgment results shows that it is not met, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coding IO line to determine the corresponding communication result; if all the condition judgment results indicate that they are met, the redundant safety communication process is not triggered. That is, in this application, the physical address of each battery cluster management component is first verified and encoded through the battery compartment management component and the preset custom single bus communication protocol in the battery management system. Then, when the encoding is successful, it is determined whether each battery cluster management component meets the preset normal communication conditions. If it does not meet the conditions, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coding IO line to determine the corresponding communication result. If all conditions are met, redundant safety communication is not performed. In this way, on the one hand, it is possible to effectively realize the automatic encoding of the physical address of the battery cluster management component, improve the encoding efficiency and accuracy, and thus avoid the situation of missing encoding or incorrect encoding; on the other hand, when the battery management system communication line fails, the bidirectional coding IO line can be used to realize communication between the battery compartment management component and the battery cluster management component, thereby improving the battery management system's safety monitoring capability of the energy storage system, avoiding the occurrence of energy storage system safety accidents, and thus improving the availability and reliability of the battery management system. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0054] Figure 1 A flow chart of a redundant secure communication method provided by this application;

[0055] Figure 2A schematic diagram of the connection between a battery compartment management component and a battery cluster management component provided in this application;

[0056] Figure 3 A timing diagram of a preset custom single bus communication protocol provided in this application;

[0057] Figure 4 A schematic diagram of a preset custom single bus communication protocol frame format provided in this application;

[0058] Figure 5 A schematic diagram of an automatic encoding process provided for this application;

[0059] Figure 6 A specific redundant secure communication process diagram provided for this application;

[0060] Figure 7 A schematic diagram of the structure of a redundant safety communication device provided in this application;

[0061] Figure 8 This is a structural diagram of an electronic device provided in this application. DETAILED DESCRIPTION

[0062] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0063] Among the existing related solutions, (1) the address of the main control unit that is initially coded at the factory or manually coded on site can only be modified later by updating the software or through the host computer. The labor and time costs brought by this are uncontrollable, which will affect the debugging progress of the project site and increase the debugging cost of the project; (2) Coding through auxiliary equipment not only fails to solve the above cost issues, but also places high demands on the operators. In addition, the manual operation error rate in this method is high, and there are hidden dangers of missing codes and miscoding. In addition, none of the above solutions can complete communication when the communication line of the battery management system fails.

[0064] To this end, the present application provides a redundant safety communication solution that can effectively improve coding efficiency and accuracy, thereby avoiding missed coding and incorrect coding. When the battery management system communication line fails, it can realize communication between the battery compartment management component and the battery cluster management component through the bidirectional coding IO line, thereby improving the battery management system's ability to safely monitor the energy storage system.

[0065] See also Figure 1As shown, an embodiment of the present invention discloses a redundant safety communication method applied to a battery management system, including:

[0066] Step S11: Through the battery compartment management component in the battery management system, and based on the preset custom single bus communication protocol and the corresponding bidirectional coding IO line, the physical address of each battery cluster management component in the battery management system is verified and encoded respectively to determine the address coding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop manner based on the bidirectional coding IO line.

[0067] In this embodiment, a custom single-bus communication protocol is used to implement automatic encoding and redundant secure communication between the master control unit (i.e., the battery compartment management component) and the main control unit (battery cluster management component). During the automatic encoding process, the single-bus communication protocol can be used to verify the main control unit's address, automatically encode, and diagnose abnormalities in the encoding IO line (also known as the IO encoding line). This ensures the uniqueness of the main control unit address and the matching of the main control unit address with the physical location of the battery cluster, reducing on-site commissioning time and project costs for energy storage projects. After successful encoding, the bidirectional encoding IO line harness can serve as a redundant secure communication line between the master control unit and the main control unit. In the event of a battery management system communication line failure, the master control unit can exchange data with the main control unit via the bidirectional encoding IO line, thereby improving the availability and reliability of the battery management system.

[0068] Combine Figure 2 As shown in the figure, in the battery management system, the master control unit and multiple main control units are connected in a cascade loop through a coded IO harness. The IO port 1 (i.e., the first IO port) of the master control unit is connected to the IO port 2 (i.e., the second IO port) of the first main control unit; the IO port 1 of the first main control unit is connected to the IO port 2 of the second main control unit; and so on. Figure 2 The IO port 1 of the main control unit n) is connected to the IO port 2 of the master control unit. In addition, the master control unit forms a bus connection with multiple main control units through the communication line in the system.

[0069] Combine Figure 3As shown in the figure, the preset custom single bus communication protocol timing in this embodiment can be seen. In this figure, the encoding IO line is in the idle state by default, and the IO line maintains a high level; sending 1 bit of data is divided into three stages. The first stage is the bit sending start confirmation stage, and the IO line is pulled from a high level to a low level and lasts for Ts (5us-10us); the second stage is the data sending stage. If a logic "1" is sent, the IO line is pulled high and lasts for Td (50us-80us). If a logic "0" is sent, the IO line continues to maintain a low level and lasts for Td (50us-80us); the third stage is the bit sending end confirmation stage, and the IO line is pulled high and lasts for Te (5us-10us). Among them, Ts, namely Start Time, indicates the time required to confirm after the level is pulled low to start a single bit of data transmission; Td, namely Data Time, indicates the time required to confirm a single bit of data; Te, namely End Time, indicates the time required to confirm after the single bit of data transmission is completed and the level is maintained at a high level; the positive pole of the power supply is VCC (Voltage Common Collector); the reference ground or ground line is GND (GEOUND); us, namely Microseconds, indicates microseconds. In addition, the frame format of the single bus communication protocol is as follows Figure 4 As shown in the following table, the start byte is 0x55 by default; the command byte is from the command set; the source address is the data sending unit address, 0x00: the main control unit address; 0x01-0xFE: the master control unit address; 0xFF: the master control unit broadcast address; the destination address is the data receiving unit address, 0x00: the main control unit address; 0x01-0xFE: the master control unit address; 0xFF: the master control unit broadcast address; the data length is the total length of the data set in bytes, valid range 1-255; the data set is the interactive data array, with a minimum support of 1 byte and a maximum support of 255 bytes; the CRC (Cyclic Redundancy Check) is the CRC value calculated from a frame of data. The command set is shown in Table 1 below.

[0070] Table 1

[0071]

[0072] It should be understood that, in the process of realizing automatic encoding of the main control unit address by the master control unit through the customized single bus communication protocol, this embodiment can also realize main control address verification and encoding IO line abnormality diagnosis. Specifically, regarding the automatic encoding of the battery cluster management component, a first automatic encoding command is first sent to the second IO port of the first battery cluster management component in the battery management system through the first IO port of the battery compartment management component in the battery management system and based on a preset custom single bus communication protocol, so as to verify and encode its own physical address through the first battery cluster management component and the received first automatic encoding command; wherein, the battery compartment management component and each of the battery cluster management components have corresponding first IO ports and second IO ports, and the first IO ports and the second IO ports respectively located in different components are connected by a bidirectional encoding IO line; if the first encoding response sent by the first battery cluster management component is not received within a first preset time period through the first IO port of the battery compartment management component, it is determined that the encoding has failed and the bidirectional encoding IO line between the battery compartment management component and the first battery cluster management component is abnormal, and the corresponding first address encoding result is output; if the first encoding response is received within the first preset time period through the first IO port of the battery compartment management component, it is determined whether the battery compartment management component is in the first A second coding response is received from the last battery cluster management component within the second preset time period to determine the first judgment result; if the first judgment result is yes, a second automatic coding command is received from the first IO port of the last battery cluster management component through the second IO port of the battery compartment management component, and a corresponding third coding response is fed back based on the second automatic coding command, so that the third coding response is returned to the battery compartment management component step by step through the second IO port of the last battery cluster management component to complete the corresponding bidirectional coding IO line abnormality check operation; if a fourth coding response corresponding to the third coding response is received from the first battery cluster management component through the second IO port of the battery compartment management component within the second preset time period, whether the number of successful coding of the battery cluster management component is less than the preset number is determined based on the fourth coding response to determine the second judgment result; if the second judgment result indicates not less than, the coding is determined to be successful, and the corresponding second address coding result is outputted through the battery compartment management component; if the second judgment result indicates less than, the coding is determined to be unsuccessful, and the corresponding third address coding result is outputted through the battery compartment management component. The first preset time period, the second preset time period and the preset number can be set by the system by default, or can be configured or adjusted by the user based on actual needs. Figure 5 The first preset time period is 1S, and the second preset time period is 20S.

[0073] Furthermore, regarding the verification and encoding of its own physical address through the first battery cluster management component and the first automatic encoding command received, that is, first, through the first battery cluster management component, compare whether the physical address stored in the local memory is equal to the first encoding value in the first automatic encoding command to determine the corresponding first verification result; then when the first verification result shows that it is equal, it is determined that the encoding is successful, and the corresponding first encoding response is sent to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component; when the first verification result shows that it is not equal, the physical address modification operation corresponding to the first battery cluster management component is completed based on the first encoding value to complete the corresponding address encoding operation, and the corresponding first encoding response is sent to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component.

[0074] In addition, after sending the corresponding first coding response to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component, this embodiment will also, for any of the battery cluster management components, send the corresponding target automatic coding command to the second IO port of the next battery cluster management component through the first IO port of the current battery cluster management component and based on the preset custom single-bus communication protocol, so as to verify and encode its own physical address through the next battery cluster management component and the received target automatic coding command, and send the corresponding target coding response to the current battery cluster management component, so as to return the target coding response to the battery compartment management component step by step; until the last battery cluster management component completes the corresponding coding response sending operation, and then sends the second automatic coding command to the second IO port of the battery compartment management component through the first IO port of the last battery cluster management component and based on the preset custom single-bus communication protocol.

[0075] Furthermore, after determining the first judgment result, in this embodiment, if the first judgment result is no, it is determined whether the fourth coding response returned by the first battery cluster management component is received through the second IO port of the battery compartment management component within the second preset time period to determine the third judgment result; when the third judgment result is yes, it is determined based on the fourth coding response whether the number of successful codings of the battery cluster management component is less than the preset number to determine the fourth judgment result; if the fourth judgment result indicates not less than, it is determined that the coding is successful, and the corresponding fourth address coding result is output through the battery compartment management component; if the fourth judgment result indicates less than, it is determined that the coding fails, and the corresponding fifth address coding result is output through the battery compartment management component.

[0076] That is to say, combined Figure 5 As can be seen from the above description, in a specific implementation process, the automatic encoding process of this embodiment may include the following steps:

[0077] (1) The master control unit sends an automatic encoding command to the IO port 2 of the first master control unit through the IO port 1. The command format is as follows:

[0078] Start byte (0x55) + command byte (0x01) + source address (0x00) + destination address (0xFF) + data length (0x01) + data set (encoded value 0x01) + CRC check code.

[0079] (2) The first master control unit receives the automatic encoding command. If the address stored in its memory is equal to the encoding value in the command data set, the master control unit address is considered correct; otherwise, the master control unit address is considered incorrect and the master control unit address is modified to the encoding value in the data set.

[0080] (3) The first master control unit sends a coded response to the IO port 1 of the master control unit. The response format is as follows:

[0081] Start byte (0x55) + command byte (0x02) + source address (0x01) + destination address (0x00) + data length (0x01) + data set (number of successfully encoded bytes: 1) + CRC checksum.

[0082] (4) If the master control unit does not receive the coding response from the first master control unit within 1s, it is considered that the coding has failed and the coding IO line between the master control unit and the first master control unit is abnormal, and the abnormal node position of the coding IO line is output.

[0083] (5) After the first master control unit sends the coding response, it sends the automatic coding command to the IO port 2 of the second master control unit through IO port 1. The command format is as follows:

[0084] Start byte (0x55) + command byte (0x01) + source address (0x01) + destination address (0xFF) + data length (0x01) + data set (encoded value 0x02) + CRC checksum.

[0085] (6) The second master control unit receives the automatic encoding command sent by the first master control unit. If the address stored in its memory is equal to the encoding value in the command data set, the address of the master control unit is considered correct; otherwise, the address of the master control unit is considered incorrect and the address of the master control unit is modified to the encoding value in the data set.

[0086] (7) The second master control unit sends a coded response to the IO port 1 of the previous master control unit. The response format is as follows:

[0087] Start byte (0x55) + command byte (0x02) + source address (0x02) + destination address (0x01) + data length (0x01) + data set (number of successful encodings: 2) + CRC checksum.

[0088] (8) If the first master control unit does not receive the coding response from the second master control unit within 1 second, the coding is considered to have failed and the automatic coding process ends. The coding IO line between the first and second master control units is considered to be abnormal. The IO port 2 of the first master control unit sends the automatic coding result response to the IO port 1 of the main control unit. The response format is as follows:

[0089] Start byte (0x55) + command byte (0x03) + source address (0x01) + destination address (0x00) + data length (0x01) + data set (number of successfully encoded bytes: 1) + CRC checksum.

[0090] (9) Similarly, the n-1th master control unit encodes the nth master control unit, and the n-1th master control unit determines whether the encoding IO line between the two master control units is abnormal by whether it receives the automatic encoding response of the nth master control unit.

[0091] (10) After the last master control unit successfully encodes, it sends an automatic encoding command to the IO port 2 of the master control unit through IO port 1. After receiving it, the master control unit sends an automatic encoding result response to the last master control unit. The response format is as follows:

[0092] Start byte (0x55) + command byte (0x03) + source address (0x00) + destination address (the address of the last master control unit n) + data length (0x01) + data set (the number of successfully encoded master control units n) + CRC check code.

[0093] (11) After the last master control unit recognizes the automatic encoding result sent by the master control unit, it sends an automatic encoding result response to the previous master control unit. The response format is as follows:

[0094] The starting byte (0x55) + command byte (0x03) + source address (n) + destination address (n-1) + data length (0x01) + data set (number of master control units that successfully encode, n) + CRC checksum; the master control unit uploads the automatic encoding result response step by step until it is uploaded to the main control unit to realize abnormal detection of the other part of the encoding IO line. If the main control unit successfully receives it, it means there is no abnormality. Otherwise, it means there is an abnormality and outputs the abnormal node position of the encoding IO line.

[0095] (12) The master control unit judges the coding results according to the following conditions:

[0096] 1) If the master control unit does not receive the coding response sent by the first master control unit within 1s, it is considered that the automatic coding has failed and the coding IO line connection between the master control unit port 1 and the first master control unit port 2 is abnormal;

[0097] 2) If the master control unit receives the automatic encoding command sent by the last master control unit within 20 seconds, and the number of successful encodings by the master control unit equals the number configured by the system (i.e. the preset number), then the automatic encoding is considered successful and the encoding IO lines are normal;

[0098] 3) If the master control unit receives the automatic encoding command sent by the last master control unit within 20 seconds, but the number of successful encodings by the master control unit is not equal to the number configured by the system, the automatic encoding is considered to have failed;

[0099] 4) If the master control unit receives the automatic encoding command sent by the last master control unit within 20 seconds, but does not receive the automatic encoding result response sent by the first master control unit within 20 seconds, it is considered that the automatic encoding has failed;

[0100] 5) If the master control unit does not receive the automatic encoding command sent by the last master control unit within 20 seconds, but the number of successful encodings of the master control unit is equal to the number configured by the system, the automatic encoding is considered successful, but the encoding IO line between the IO port 2 of the master control unit and the IO port 1 of the last master control unit is abnormal, and the abnormal node position of the encoding IO line is output;

[0101] 6) If the master control unit does not receive the automatic encoding command sent by the last main control unit within 20 seconds, and the number of successful encodings of the main control unit is not equal to the number configured by the system, it is considered that the automatic encoding has failed and there is an abnormality in the encoding IO line. The location of the abnormal node of the encoding IO line is output according to the number of successful encodings of the main control unit;

[0102] 7) If the master control unit does not receive the automatic encoding command sent by the last master control unit within 20 seconds, and does not receive the automatic encoding result response sent by the first master control unit within 20 seconds, it is considered that the automatic encoding has failed.

[0103] Step S12: If the address encoding result indicates that the encoding is successful, the battery compartment management component determines whether each battery cluster management component meets the preset normal communication condition, and determines the condition judgment result corresponding to each battery cluster management component.

[0104] In this embodiment, after the master control unit automatically encodes the address of the main control unit, it uses the coded IO line as a redundant safety communication line between the master control unit and the main control unit. If the communication line between the master control unit and the main control unit fails, the master control unit communicates with the main control unit via the coded IO line harness, enabling 24-hour safety monitoring of the battery system and improving the availability and robustness of the battery management system.

[0105] It is important to understand that, combined with Figure 6 as well as Figure 2 As shown, in this embodiment, after the automatic encoding process of the main control unit is completed, the main control unit determines whether the communication lines of all the main control units are normal, that is, whether there is a main control unit communication abnormality lasting for more than 2s (which can be adjusted to other values). If so, the redundant safety communication of the main control unit is enabled; if the main control unit communication is normal, the redundant safety communication of the main control unit is not enabled.

[0106] Step S13: If any of the conditional judgment results show that it is not met, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line to determine the corresponding communication result.

[0107] Combine Figure 6The overall redundant safety communication process shown in the figure, in this embodiment, if there is an abnormality in the communication line of the main control unit, redundant safety communication is performed. Specifically, a data query command is first sent to the second IO port of the first battery cluster management component through the first IO port of the battery compartment management component and based on the preset custom single bus communication protocol; then, it is determined whether the data query command is received by the first battery cluster management component to determine a fifth judgment result; if the fifth judgment result is yes, an address matching is performed by the first battery cluster management component and the data query command, and a corresponding data query response operation is completed based on the determined address matching result; when the battery compartment management component receives the target data query response sent by the first battery cluster management component within the second preset time period, it is determined whether a query abnormality result response sent by the first battery cluster management component is received to determine a sixth judgment result; if the sixth judgment result is no, it is determined that the data query is successful, and the battery compartment management component parses the target data query response to determine the corresponding first communication result; if the sixth judgment result is yes, it is determined that the data query fails, and the corresponding second communication result is determined based on the query abnormality result response. The data query command may be a query command for data of a certain data type. This embodiment may query data of multiple data types, and the query process logic is the same.

[0108] Furthermore, regarding completing the corresponding data query response operation based on the determined address matching result, in this embodiment, if the determined address matching result indicates that the target address in the data query command is equal to the physical address of the first battery cluster management component, then the match is determined to be successful, and the corresponding target data query response is fed back to the battery compartment management component through the second IO port of the first battery cluster management component and using the command code in the data query command; if the address matching result indicates that they are not equal, then the match is determined to be unsuccessful, and the data query command is forwarded to the next battery cluster management component through the first IO port of the first battery cluster management component; if the target data query response returned by the next battery cluster management component is received by the first battery cluster management component within a third preset time period, then the target data query response is forwarded to the battery compartment management component; if the target data query response returned by the next battery cluster management component is not received by the first battery cluster management component within the third preset time period, then a corresponding query abnormal result response is sent to the battery compartment management component. The third preset time period can be set by the system default, or can be configured or adjusted by the user based on actual needs. Figure 6 The first preset time period is 10S.

[0109] That is to say, combined Figure 6 As can be seen from the above description, in a specific implementation process, the complete automatic encoding process in this embodiment may include the following steps:

[0110] (1) After the automatic encoding process is completed, the main control unit determines whether the communication of all main control units is normal. If there is a main control unit communication abnormality that lasts for more than 2 seconds, the redundant safety communication of the main control unit is enabled; if the main control unit communication is normal, the redundant safety communication of the main control unit is not enabled.

[0111] (2) Enable redundant safety communication of the master control unit. The master control unit sends a query data command to the IO port IO2 of the first master control unit through IO port 1. The command format is as follows:

[0112] Start byte (0x55) + command byte (query data command code) + source address (0x00) + destination address (communication abnormality master control unit address) + data length (0x01) + data set (query data command code) + CRC check code.

[0113] (3) The first master control unit receives the query data command. If the target address matches its own address, it returns a data response to the master control unit according to the query data command code. The response format is as follows:

[0114] Start byte (0x55) + command byte (0x01) + source address (address of the master control unit with communication abnormality) + target address (0x00) + data length (total byte length of the data set) + data set (data response) + CRC checksum; if the target address does not match the local address, the query data command of the main control unit is forwarded to the next master control unit until it is forwarded to the master control unit corresponding to the target address.

[0115] (4) After forwarding the query data command to the next master control unit, if the data response of the next master control unit is received within 10 seconds, the data response will be forwarded to the previous master control unit until it is forwarded to the main control unit; if the data response of the next master control unit is not received within 10 seconds, the query abnormal result response will be forwarded to the previous master control unit. The response format is as follows:

[0116] Start byte (0x55) + command byte (0xFF) + source address (0x00) + destination address (address of the communication abnormal master control unit) + data length (0x01) + data set (query data command code) + CRC check code.

[0117] (5) If the master control unit receives a data response or a query exception result response from the next master control unit, it forwards the data response or the query exception result response to the previous master control unit until it is forwarded to the main control unit.

[0118] (6) The master control unit determines the query results according to the following conditions:

[0119] 1) If the master control unit does not receive the data response uploaded by the main control unit within 20 seconds, it will consider that the coding IO line communication is abnormal, report the coding IO line communication abnormality fault, and the data query fails.

[0120] 2) When the master control unit receives the abnormal query result response uploaded by the main control unit, it considers that the coding IO line communication is abnormal, reports the abnormal coding IO line communication fault, and the query data fails.

[0121] 3) If the master control unit receives the data response uploaded by the main control unit within 20 seconds and does not receive the query abnormal result response uploaded by the main control unit, it will parse and process the data uploaded by the main control unit. If the query data is successful, the next data type can be queried.

[0122] Step S14: If all the conditional judgment results indicate that they are satisfied, the redundant secure communication process is not triggered.

[0123] In this embodiment, if the condition determination result of each main control unit indicates that the communication is normal, the redundant safety communication of any main control unit is not enabled.

[0124] In summary, the automatic encoding and redundant secure communication solution provided in this embodiment can bring the following beneficial effects:

[0125] 1) Through the customized single bus protocol, the main control unit address and the actual physical connection position are verified during the automatic encoding process to improve the accuracy of automatic encoding and avoid missing encoding and incorrect encoding;

[0126] 2) Through the customized single bus protocol, the abnormal connection of the encoding IO harness can be diagnosed during the automatic encoding process;

[0127] 3) After the automatic encoding is completed, the encoding IO line is used as the redundant safety communication harness of the battery management system. Through the custom single bus protocol, data interaction between the master control unit and the main control unit with abnormal communication line is realized. It also supports a large number of data interaction scenarios, which improves the battery management system's safety monitoring capability of the energy storage system and avoids safety accidents of the energy storage system.

[0128] As can be seen, in this application, the physical address of each battery cluster management component is first verified and encoded through the battery compartment management component in the battery management system and the preset custom single bus communication protocol. Then, when the encoding is successful, it is determined whether each battery cluster management component meets the preset normal communication conditions. If it does not meet the conditions, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coding IO line to determine the corresponding communication result. If all conditions are met, redundant safety communication is not performed. In this way, on the one hand, it is possible to effectively realize the automatic encoding of the physical address of the battery cluster management component, improve the encoding efficiency and accuracy, and thus avoid the situation of missing encoding or incorrect encoding; on the other hand, when the battery management system communication line fails, the communication between the battery compartment management component and the battery cluster management component can be realized through the bidirectional coding IO line, thereby improving the battery management system's ability to monitor the safety of the energy storage system, avoiding the occurrence of safety accidents in the energy storage system, and thus improving the availability and reliability of the battery management system.

[0129] See also Figure 7 As shown, the embodiment of the present application also discloses a redundant safety communication device, which is applied to a battery management system, including:

[0130] The address encoding module 11 is used to verify and encode the physical address of each battery cluster management component in the battery management system through the battery compartment management component in the battery management system based on a preset custom single bus communication protocol and the corresponding bidirectional encoding IO line to determine the address encoding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop manner based on the bidirectional encoding IO line;

[0131] a condition judgment module 12 for judging whether each of the battery cluster management components meets a preset normal communication condition through the battery compartment management component if the address encoding result indicates that the encoding is successful, and determining a condition judgment result corresponding to each of the battery cluster management components;

[0132] A redundant safety communication module 13 is configured to trigger a redundant safety communication process corresponding to the corresponding battery cluster management component through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line if any of the conditional judgment results indicate that the condition is not satisfied, so as to determine a corresponding communication result;

[0133] The condition satisfaction processing module 14 is configured to not trigger the redundant safety communication process if all the condition judgment results indicate that they are satisfied.

[0134] As can be seen, in this application, the physical address of each battery cluster management component is first verified and encoded through the battery compartment management component in the battery management system and the preset custom single bus communication protocol. Then, when the encoding is successful, it is determined whether each battery cluster management component meets the preset normal communication conditions. If it does not meet the conditions, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coding IO line to determine the corresponding communication result. If all conditions are met, redundant safety communication is not performed. In this way, on the one hand, it is possible to effectively realize the automatic encoding of the physical address of the battery cluster management component, improve the encoding efficiency and accuracy, and thus avoid the situation of missing encoding or incorrect encoding; on the other hand, when the battery management system communication line fails, the communication between the battery compartment management component and the battery cluster management component can be realized through the bidirectional coding IO line, thereby improving the battery management system's ability to monitor the safety of the energy storage system, avoiding the occurrence of safety accidents in the energy storage system, and thus improving the availability and reliability of the battery management system.

[0135] In some specific embodiments, the address encoding module 11 may specifically include:

[0136] a first coding command sending submodule, configured to send a first automatic coding command to a second IO port of a first battery cluster management component in the battery management system via a first IO port of a battery compartment management component in the battery management system and based on a preset custom single bus communication protocol, so as to verify and encode its own physical address via the first battery cluster management component and the received first automatic coding command; wherein the battery compartment management component and each of the battery cluster management components have corresponding first IO ports and second IO ports, and the first IO ports and the second IO ports located in different components are connected using a bidirectional coding IO line;

[0137] a first coding result determining submodule, configured to determine that coding has failed and that the bidirectional coding IO line between the battery compartment management component and the first battery cluster management component is abnormal, if a first coding response sent by the first battery cluster management component is not received within a first preset time period through the first IO port of the battery compartment management component, and output a corresponding first address coding result;

[0138] a first judgment result determination submodule, configured to determine whether the battery compartment management component receives a second coded response sent by a last battery cluster management component within a second preset time period if the first coded response is received through the first IO port of the battery compartment management component within the first preset time period, so as to determine a first judgment result;

[0139] a third coded command step-by-step feedback submodule, configured to, if the first judgment result is yes, receive, through the second IO port of the battery compartment management component, a second automatic coded command sent by the first IO port of the last battery cluster management component, and feed back a corresponding third coded response based on the second automatic coded command, so as to return the third coded response step-by-step to the battery compartment management component through the second IO port of the last battery cluster management component, thereby completing the corresponding bidirectional coded IO line abnormality check operation;

[0140] a second judgment result determination submodule, configured to, if a fourth coding response corresponding to the third coding response is received from the first battery cluster management component within the second preset time period through the second IO port of the battery compartment management component, determine, based on the fourth coding response, whether the number of successful codings of the battery cluster management component is less than a preset number, so as to determine a second judgment result;

[0141] a second coding result determination submodule, configured to determine that the coding is successful if the second judgment result indicates that it is not less than, and output the corresponding second address coding result through the battery compartment management component;

[0142] The third coding result determination submodule is used to determine that the coding fails if the second judgment result indicates that it is less than, and output the corresponding third address coding result through the battery compartment management component.

[0143] In some specific embodiments, the first coded command sending submodule may specifically include:

[0144] a first verification unit, configured to compare, through the first battery cluster management component, whether the physical address stored in the local memory is equal to the first code value in the first automatic coding command, so as to determine a corresponding first verification result;

[0145] a verification success processing unit, configured to determine that the encoding is successful when the first verification result indicates equality, and to send a corresponding first coding response to the first IO port of the battery compartment management component via the second IO port of the first battery cluster management component;

[0146] An address modification unit is configured to complete a physical address modification operation corresponding to the first battery cluster management component based on the first coding value when the first verification result indicates that the first verification result is not equal to the first battery cluster management component, so as to complete a corresponding address coding operation, and send a corresponding first coding response to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component.

[0147] In some specific embodiments, the redundant safety communication device may further include:

[0148] a target command sending unit, configured to send, for any of the battery cluster management components, a corresponding target automatic encoding command to the second IO port of the next battery cluster management component via the first IO port of the current battery cluster management component and based on the preset custom single bus communication protocol, so as to verify and encode its own physical address through the next battery cluster management component and the received target automatic encoding command, and send a corresponding target encoding response to the current battery cluster management component, so as to return the target encoding response to the battery compartment management component step by step;

[0149] A second command sending unit is used to send the second automatic coding command to the second IO port of the battery compartment management component through the first IO port of the last battery cluster management component and based on the preset custom single bus communication protocol until the last battery cluster management component completes the corresponding coding response sending operation.

[0150] In some specific embodiments, the redundant safety communication device may further include:

[0151] a third judgment result determining unit, configured to, if the first judgment result is negative, determine whether the fourth coded response returned by the first battery cluster management component is received through the second IO port of the battery compartment management component within the second preset time period, so as to determine a third judgment result;

[0152] a fourth judgment result determining unit, configured to, when the third judgment result is yes, determine, based on the fourth coding response, whether the number of successful coding of the battery cluster management component is less than the preset number, so as to determine a fourth judgment result;

[0153] a fourth coding result determining unit, configured to determine that the coding is successful if the fourth judgment result indicates that it is not less than, and output a corresponding fourth address coding result through the battery compartment management component;

[0154] The fifth coding result determining unit is used to determine that the coding fails if the fourth judgment result indicates that it is less than, and output the corresponding fifth address coding result through the battery compartment management component.

[0155] In some specific embodiments, the redundant safety communication module 13 may specifically include:

[0156] a data query command sending submodule, configured to send a data query command to the second IO port of the first battery cluster management component through the first IO port of the battery compartment management component and based on the preset custom single bus communication protocol;

[0157] a fifth judgment result determination submodule, configured to determine whether the data query command is received through the first battery cluster management component, so as to determine a fifth judgment result;

[0158] an address matching submodule, configured to perform address matching through the first battery cluster management component and the data query command if the fifth judgment result is yes, and complete a corresponding data query response operation based on the determined address matching result;

[0159] a sixth judgment result determination submodule, configured to, when receiving a target data query response sent by the first battery cluster management component within the second preset time period through the battery compartment management component, determine whether a query abnormality result response sent by the first battery cluster management component is received, so as to determine a sixth judgment result;

[0160] a first communication result determination submodule, configured to determine, if the sixth judgment result is no, that the data query is successful, and parse the target data query response through the battery compartment management component to determine a corresponding first communication result;

[0161] The second communication result determination submodule is configured to determine that the data query has failed if the sixth judgment result is yes, and determine a corresponding second communication result based on the abnormal query result response.

[0162] In some specific embodiments, the address matching submodule may specifically include:

[0163] a match success processing unit, configured to, if the determined address match result indicates that the target address in the data query command is equal to the physical address of the first battery cluster management component, determine that the match is successful, and feed back a corresponding target data query response to the battery compartment management component via the second IO port of the first battery cluster management component and using the command code in the data query command;

[0164] a match failure processing unit, configured to determine that the match has failed if the address match result indicates that the address is not equal, and forward the data query command to the next battery cluster management component through the first IO port of the first battery cluster management component;

[0165] a response forwarding unit, configured to forward the target data query response to the battery compartment management component if the target data query response returned by the next battery cluster management component is received through the first battery cluster management component within a third preset time period;

[0166] The exception sending unit is configured to send a corresponding query exception result response to the battery compartment management component if the target data query response returned by the next battery cluster management component is not received within a third preset time period through the first battery cluster management component.

[0167] Furthermore, the embodiment of the present application also discloses an electronic device, Figure 8 This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram should not be considered as any limitation to the scope of application of the present application.

[0168] Figure 8 This is a schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps of the redundant secure communication method disclosed in any of the aforementioned embodiments. Furthermore, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0169] In this embodiment, the power supply 23 is used to provide operating voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device. The communication protocol it follows is any communication protocol that can be applied to the technical solution of this application and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world. Its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0170] In addition, the memory 22, as a carrier for resource storage, can be a read-only memory, random access memory, disk or CD, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0171] The operating system 221 is used to manage and control the hardware devices on the electronic device 20 and the computer program 222, and can be Windows Server, Netware, Unix, Linux, etc. In addition to including computer programs that can be used to implement the redundant secure communication method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include computer programs that can be used to perform other specific tasks.

[0172] Furthermore, this application also discloses a computer-readable storage medium for storing a computer program; wherein, when executed by a processor, the computer program implements the aforementioned redundant secure communication method. The specific steps of this method can be referred to the corresponding contents disclosed in the aforementioned embodiments and will not be repeated here.

[0173] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from the other embodiments. Reference can be made to the descriptions of the identical or similar parts between the various embodiments. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and the relevant parts can be referred to the descriptions of the methods.

[0174] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0175] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0176] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or device comprising the element.

[0177] The above is a detailed introduction to the technical solution provided by the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the ideas of the present application, there may be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A redundant secure communication method, characterized in that: Applications in battery management systems, including: The battery compartment management component in the battery management system performs physical address verification and encoding on each battery cluster management component in the battery management system based on a preset custom single bus communication protocol and corresponding bidirectional encoding IO lines to determine the address encoding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop based on the bidirectional encoding IO lines; If the address encoding result indicates that the encoding is successful, the battery compartment management component determines whether each battery cluster management component meets the preset normal communication condition, and determines the condition judgment result corresponding to each battery cluster management component; If any of the conditional judgment results indicate that it is not satisfied, the redundant safety communication process corresponding to the corresponding battery cluster management component is triggered through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line to determine the corresponding communication result; If the judgment results of each of the conditions indicate that they are met, the redundant safety communication process will not be triggered.

2. The redundant safety communication method according to claim 1, characterized in that: The physical address of each battery cluster management component in the battery management system is verified and encoded respectively through the battery compartment management component in the battery management system based on a preset custom single bus communication protocol and a corresponding bidirectional coding IO line, including: Sending a first automatic encoding command to a second IO port of a first battery cluster management component in the battery management system through a first IO port of a battery compartment management component in the battery management system and based on a preset custom single bus communication protocol, so that the first battery cluster management component and the received first automatic encoding command verify and encode its own physical address; The battery compartment management component and each of the battery cluster management components have corresponding first IO ports and second IO ports, and the first IO ports and the second IO ports located in different components are connected using a bidirectional coded IO line; If the first coding response sent by the first battery cluster management component is not received within a first preset time period through the first IO port of the battery compartment management component, it is determined that the coding has failed and the bidirectional coding IO line between the battery compartment management component and the first battery cluster management component is abnormal, and the corresponding first address coding result is output; If the first coded response is received through the first IO port of the battery compartment management component within the first preset time period, determining whether the battery compartment management component receives the second coded response sent by the last battery cluster management component within a second preset time period to determine a first judgment result; If the first judgment result is yes, the second automatic coding command sent by the first IO port of the last battery cluster management component is received through the second IO port of the battery compartment management component, and a corresponding third coding response is fed back based on the second automatic coding command, so as to return the third coding response to the battery compartment management component step by step through the second IO port of the last battery cluster management component to complete the corresponding bidirectional coding IO line abnormality check operation; If a fourth coding response corresponding to the third coding response is received from the first battery cluster management component through the second IO port of the battery compartment management component within the second preset time period, determining whether the number of successful codings of the battery cluster management component is less than a preset number based on the fourth coding response to determine a second judgment result; If the second judgment result indicates that it is not less than, the encoding is determined to be successful, and the corresponding second address encoding result is output through the battery compartment management component; If the second judgment result indicates that it is less than, it is determined that the encoding fails, and the corresponding third address encoding result is output through the battery compartment management component.

3. The redundant safety communication method according to claim 2, characterized in that: The checking and encoding of the physical address of the battery cluster management component by the first battery cluster management component and the received first automatic encoding command includes: Comparing, by the first battery cluster management component, whether the physical address stored in the local memory is equal to the first encoding value in the first automatic encoding command to determine a corresponding first verification result; When the first verification result indicates that the encoding is equal, it is determined that the encoding is successful, and a corresponding first encoding response is sent to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component; When the first verification result indicates that they are not equal, a physical address modification operation corresponding to the first battery cluster management component is completed based on the first coding value to complete the corresponding address coding operation, and the corresponding first coding response is sent to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component.

4. The redundant safety communication method according to claim 3, characterized in that: After sending the corresponding first coded response to the first IO port of the battery compartment management component through the second IO port of the first battery cluster management component, the method further includes: For any of the battery cluster management components, a corresponding target automatic encoding command is sent to the second IO port of the next battery cluster management component through the first IO port of the current battery cluster management component and based on the preset custom single bus communication protocol, so as to verify and encode its own physical address through the next battery cluster management component and the received target automatic encoding command, and send a corresponding target encoding response to the current battery cluster management component, so as to return the target encoding response to the battery compartment management component step by step; After the last battery cluster management component completes the corresponding coding response sending operation, the second automatic coding command is sent to the second IO port of the battery compartment management component through the first IO port of the last battery cluster management component and based on the preset custom single bus communication protocol.

5. The redundant safety communication method according to claim 2, characterized in that: After determining the first judgment result, the method further includes: If the first judgment result is no, determining whether the fourth coded response returned by the first battery cluster management component is received through the second IO port of the battery compartment management component within the second preset time period to determine a third judgment result; When the third judgment result is yes, determining whether the number of successful encodings of the battery cluster management component is less than the preset number based on the fourth coding response to determine a fourth judgment result; If the fourth determination result indicates that it is not less than, the encoding is determined to be successful, and the corresponding fourth address encoding result is outputted through the battery compartment management component; If the fourth determination result indicates that it is less than, it is determined that the encoding has failed, and the corresponding fifth address encoding result is output through the battery compartment management component.

6. The redundant safety communication method according to claim 2, characterized in that: The redundant safety communication process corresponding to the corresponding battery cluster management component is triggered by the battery compartment management component based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line, including: Sending a data query command to the second IO port of the first battery cluster management component through the first IO port of the battery compartment management component and based on the preset custom single bus communication protocol; determining whether the data query command is received by the first battery cluster management component to determine a fifth determination result; If the fifth judgment result is yes, performing address matching through the first battery cluster management component and the data query command, and completing a corresponding data query response operation based on the determined address matching result; When a target data query response sent by the first battery cluster management component is received through the battery compartment management component within the second preset time period, determining whether a query abnormality result response sent by the first battery cluster management component is received to determine a sixth judgment result; If the sixth judgment result is no, determining that the data query is successful, parsing the target data query response by the battery compartment management component to determine the corresponding first communication result; If the sixth judgment result is yes, it is determined that the data query fails, and a corresponding second communication result is determined based on the query abnormal result response.

7. The redundant safety communication method according to claim 6, characterized in that: The corresponding data query response operation is completed based on the determined address matching result, including: If the determined address match result indicates that the target address in the data query command is equal to the physical address of the first battery cluster management component, the match is determined to be successful, and a corresponding target data query response is fed back to the battery compartment management component through the second IO port of the first battery cluster management component and using the command code in the data query command; If the address matching result indicates that the address is not equal, it is determined that the match fails, and the data query command is forwarded to the next battery cluster management component through the first IO port of the first battery cluster management component; If the target data query response returned by the next battery cluster management component is received through the first battery cluster management component within a third preset time period, the target data query response is forwarded to the battery compartment management component; If the target data query response returned by the next battery cluster management component is not received within a third preset time period through the first battery cluster management component, a corresponding query abnormal result response is sent to the battery compartment management component.

8. A redundant safety communication device, characterized in that: Applications in battery management systems, including: An address encoding module is used to verify and encode the physical address of each battery cluster management component in the battery management system through the battery compartment management component in the battery management system based on a preset custom single bus communication protocol and corresponding bidirectional encoding IO lines to determine the address encoding result; the battery compartment management component and each battery cluster management component are connected in a cascade loop manner based on the bidirectional encoding IO lines; a condition judgment module, configured to, if the address encoding result indicates that the encoding is successful, determine, through the battery compartment management component, whether each of the battery cluster management components meets a preset normal communication condition, and determine a condition judgment result corresponding to each of the battery cluster management components; A redundant safety communication module, configured to trigger a redundant safety communication process corresponding to the corresponding battery cluster management component through the battery compartment management component and based on the preset custom single bus communication protocol and the corresponding bidirectional coded IO line if any of the conditional judgment results indicate that the condition is not satisfied, so as to determine a corresponding communication result; The condition satisfaction processing module is used to not trigger the redundant security communication process if the results of each condition judgment indicate that the condition is satisfied.

9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, configured to execute the computer program to implement the redundant safety communication method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that Used to store a computer program, which, when executed by a processor, implements the redundant safety communication method according to any one of claims 1 to 7.

Images