High-voltage interlocking protection method and system for marine lithium battery pack

Abstract

The invention discloses a high-voltage interlocking protection method and system for a marine lithium battery pack, and relates to the technical field of circuit emergency protection. The method comprises the following steps: generating a continuous interlocking feedback signal through a mechanical normally-closed detection switch; the high-voltage interlocking monitoring circuit receives the signal and carries out real-time diagnosis; when it is diagnosed that the signal is interrupted, a delay confirmation mechanism based on continuous judgment logic is started, and the mechanism continuously monitors whether the signal is recovered or not within irreversible preset delay time; if the signal is not recovered all the time, generating a negative logic jump instruction; the execution relay cuts off the main high-voltage loop according to the instruction. According to the method, an irreversible delay confirmation mechanism is introduced, instantaneous signal jitter and real connection faults can be effectively distinguished, so that false operation and refusal operation of the system are prevented at the same time under extreme working conditions, and the reliability and safety of operation of the marine lithium battery high-voltage system are remarkably improved.

Description

Technical Field

[0001] This application relates to the field of circuit emergency protection technology, and in particular to a high-voltage interlock protection method and system for marine lithium battery packs. Background Technology

[0002] Marine electrical systems widely utilize high-voltage lithium battery packs as their power source, and the reliability of their high-voltage circuit connections directly impacts the safety of ship operation. High-voltage interlocking systems are crucial for ensuring this safety, monitoring the connection status of high-voltage connectors and cutting off power in case of abnormalities to prevent dangers such as arcing and short circuits. However, the marine environment is extremely complex, and high-voltage connectors are subjected to severe vibrations, humidity, and salt spray over long periods, which can easily lead to momentary physical loosening of the connectors. This, in turn, causes brief, high-frequency jitter in the interlocking feedback signal reflecting the connection status.

[0003] Traditional high-voltage interlock protection strategies often employ simple level triggering or short-time filtering, making it difficult to effectively distinguish between transient jitter and genuine permanent connection faults. This frequently leads to system malfunctions, such as unnecessarily cutting off the main power supply when the connection is still safe, affecting the ship's normal navigation; or failure to act, where signal jitter fails to effectively trigger protection when a real danger has occurred, creating serious safety hazards. Therefore, existing technologies face the dilemma of both malfunctions and failures to act in high-reliability marine applications, urgently requiring an intelligent judgment mechanism that is immune to signal jitter interference. Summary of the Invention

[0004] In order to overcome the above-mentioned defects of the prior art, the embodiments of this application provide a high-voltage interlock protection method for marine lithium battery packs to solve the problems mentioned in the background art.

[0005] To achieve the above objectives, this application provides a high-voltage interlock protection method for marine lithium battery packs, comprising: S1. A continuous interlocking feedback signal is generated by a mechanical normally closed detection switch located at the high-voltage connector interface; S2. The high-voltage interlock monitoring circuit receives the interlock feedback signal and performs real-time diagnosis of the integrity of the interlock feedback signal based on the preset signal logic judgment rules. S3. When the interruption of the interlock feedback signal is diagnosed, the high-voltage interlock monitoring circuit starts a delayed confirmation mechanism based on continuous judgment logic; the continuous judgment logic is configured to continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time. S4. If the interlock feedback signal is not restored within the preset delay time, the high-voltage interlock monitoring circuit generates and outputs a negative logic jump instruction. S5. The relay receives the negative logic switching instruction and cuts off the main high-voltage circuit of the marine lithium battery pack accordingly.

[0006] Optionally, the generation of a continuous interlocking feedback signal via a mechanically closed detection switch disposed at the high-voltage connector interface includes: The contacts of the mechanical normally closed detection switch are mechanically linked to the physical locking mechanism of the high-voltage connector. When the high-voltage connector is in a fully engaged state, the physical locking mechanism presses the contacts of the mechanical normally closed detection switch to close it, thereby forming a path for the continuous interlocking feedback signal.

[0007] Optionally, the high-voltage interlock monitoring circuit receives the interlock feedback signal and performs real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules, including: The high-voltage interlock monitoring circuit includes a signal acquisition unit, which acquires the level state of the interlock feedback signal by periodic sampling. The signal logic judgment rule is defined as follows: if the acquired level is low for multiple consecutive sampling periods, the interlock feedback signal is diagnosed as interrupted.

[0008] Optionally, when the interlock feedback signal is diagnosed as interrupted, the high-voltage interlock monitoring circuit initiates a delayed confirmation mechanism based on continuous judgment logic, including: The high-voltage interlock monitoring circuit immediately triggers a timer to start timing for an irreversible preset delay time the moment an interruption is detected. Meanwhile, the high-voltage interlock monitoring circuit will lock the interrupt diagnostic status until the timer finishes counting, and will not respond to new interrupt diagnostic triggers during this period.

[0009] Optionally, the continuous judgment logic is configured to: continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time, including: Throughout the entire irreversible timing process of the timer, the signal acquisition unit continuously acquires the level state of the interlock feedback signal using the periodic sampling method. The continuous judgment logic compares the level state acquired in each sampling period with the high-level threshold representing signal recovery. If the level state acquired in any sampling period reaches the high-level threshold, it is determined that the interlock feedback signal has been recovered.

[0010] Optionally, if the interlock feedback signal fails to recover within the preset delay time, the high-voltage interlock monitoring circuit generates and outputs a negative logic transition command, including: If the continuous judgment logic fails to determine signal recovery until the timer completes its count, the instruction generation unit of the high-voltage interlock monitoring circuit generates a level transition signal from high to low. The instruction generation unit outputs the level transition signal as the negative logic transition instruction to the signal output port.

[0011] Optionally, the execution relay receives the negative logic switching command and thereby disconnects the main high-voltage circuit of the marine lithium battery pack, including: The execution relay includes a drive coil, and the power supply circuit of the drive coil is connected in series with the signal output port of the high-voltage interlock monitoring circuit. The low level in the negative logic transition instruction disconnects the power supply circuit of the drive coil; When the drive coil loses power, it causes the normally open main contact it controls to open, thereby cutting off the main high-voltage circuit.

[0012] Optionally, the timing process of the irreversible preset delay time cannot be interrupted or reset by the recovery of the interlock feedback signal.

[0013] Optionally, in step S2, the real-time diagnosis process further includes: the high-voltage interlock monitoring circuit monitors its own operating voltage; when the operating voltage is lower than a preset voltage threshold, the delay confirmation mechanism in step S3 is skipped, and the high-voltage interlock monitoring circuit directly generates and outputs the negative logic jump instruction, and executes step S5 to cut off the main high-voltage circuit.

[0014] To address the aforementioned problems, this application also provides a high-voltage interlock protection system for marine lithium battery packs, the system comprising: An interlock signal generation module is used to generate a continuous interlock feedback signal through a mechanical normally closed detection switch located at the high-voltage connector interface; The interlock signal diagnostic module is used by the high-voltage interlock monitoring circuit to receive the interlock feedback signal and perform real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules. The delay confirmation control module is used to activate a delay confirmation mechanism based on continuous judgment logic when the interruption of the interlock feedback signal is diagnosed. The continuous judgment logic is configured to continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time. The protection instruction generation module is used to generate and output a negative logic jump instruction if the interlock feedback signal is not restored within the preset delay time. The high-voltage circuit execution module is used to execute the relay to receive the negative logic switching command and thereby disconnect the main high-voltage circuit of the marine lithium battery pack.

[0015] This application effectively solves the reliability problem of marine high-voltage interlock systems under harsh operating conditions by introducing a delayed confirmation mechanism based on continuous judgment logic and strictly limiting its operation to an irreversible preset delay time. Its technical effect is primarily reflected in the prevention of malfunctions: when a connector becomes slightly loose due to instantaneous vibration, causing a brief interruption in the interlock feedback signal, the high-voltage interlock monitoring circuit will initially diagnose the signal interruption but will not immediately trigger protection. Instead, it will initiate an irreversible delayed confirmation window. Within this window, the system continuously monitors the signal status. If the signal recovers within this period, the interruption is determined to be caused by interference, and the fault status is cleared, allowing the system to resume normal monitoring. This process provides a crucial time criterion for distinguishing between instantaneous interference and genuine faults, effectively filtering signal jitter, preventing the main power supply from being mistakenly cut off due to instantaneous interference, and ensuring the continuity of the ship's power supply.

[0016] Secondly, it fundamentally eliminates the occurrence of non-action, thus improving system safety. The timing process of this delay confirmation mechanism is designed to be irreversible; once activated, it must complete the monitoring of the entire preset delay time. This means that even if the signal experiences complex jitter of "interruption-brief recovery-re-interruption" during the delay period, the timer will not be interrupted or reset, and the system will make a global final judgment on the signal state throughout the entire delay window. Only when the signal fails to recover throughout the entire delay time is it finally confirmed as a real and continuous connection fault, and protection commands are executed. This design ensures that the system is not paralyzed by continuous signal jitter and can make a decisive and reliable response to real connection failures, promptly cutting off the main high-voltage circuit, thereby greatly improving the inherent safety level of the ship's high-voltage electrical system. In addition, the monitoring of its own operating voltage and the corresponding direct protection strategy of the high-voltage interlock monitoring circuit further serve as safety redundancy, ensuring that even if the power supply of the monitoring circuit itself is abnormal, it can still guide the system into a safe state, forming a multi-layered safety protection system. Attached Figure Description

[0017] Figure 1 A flowchart illustrating a high-voltage interlock protection method for a marine lithium battery pack provided in an embodiment of this application; Figure 2 A functional block diagram of a high-voltage interlock protection system for a marine lithium battery pack provided in an embodiment of this application; The realization of the purpose, functional features and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0018] It should be understood that the specific embodiments described herein are merely illustrative of this application and are not intended to limit this application.

[0019] This application provides a high-voltage interlock protection method for marine lithium battery packs. The executing entity of the high-voltage interlock protection method for marine lithium battery packs includes, but is not limited to, at least one of the following electronic devices that can be configured to execute the method provided in this application embodiment: a server, a terminal, etc. In other words, the high-voltage interlock protection method for marine lithium battery packs can be executed by software or hardware installed on a terminal device or a server device. The server includes, but is not limited to, a single server, a server cluster, a cloud server, or a cloud server cluster. The server can be an independent server or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks, and big data and artificial intelligence platforms.

[0020] The implementation of this method relies on a hardware system consisting of a mechanical normally closed detection switch, a high-voltage interlock monitoring circuit, and an execution relay. The mechanical normally closed detection switch is installed at the interface of the high-voltage connector. The high-voltage interlock monitoring circuit is a control unit with a microcontroller at its core, which receives and processes signals from the detection switch. The execution relay is a power switching device controlled by the monitoring circuit, and its contacts are connected in series in the main high-voltage circuit.

[0021] Reference Figure 1 The diagram shown is a flowchart illustrating a high-voltage interlock protection method for a marine lithium battery pack according to an embodiment of this application. In this embodiment, the high-voltage interlock protection method for the marine lithium battery pack includes: S1. A continuous interlocking feedback signal is generated by a mechanical normally closed detection switch located at the high-voltage connector interface.

[0022] In some embodiments, generating a continuous interlocking feedback signal via a mechanically normally closed detection switch disposed at the high-voltage connector interface includes: The contacts of the mechanical normally closed detection switch are mechanically linked to the physical locking mechanism of the high-voltage connector. When the high-voltage connector is in a fully engaged state, the physical locking mechanism presses the contacts of the mechanical normally closed detection switch to close it, thereby forming a path for the continuous interlocking feedback signal.

[0023] In this embodiment, the mechanical normally closed detection switch is a switching element whose contacts are in a closed conducting state when not subjected to external force. It is interconnected with the physical structure of the high-voltage connector. The high-voltage connector is an electrical connection component used to transmit high-voltage electrical energy. The interlock feedback signal is a continuous electrical signal that reflects the connection status of the high-voltage connector.

[0024] In this embodiment, the contacts of the mechanical normally closed detection switch are mechanically linked to the physical locking mechanism of the high-voltage connector. When the operator fully inserts and locks the high-voltage connector, the physical locking mechanism of the connector (e.g., a latch or slider) moves to a specific position, which presses against the triggering component of the mechanical normally closed detection switch. Once pressed, the normally closed contacts inside the switch change from a default closed state to an open state. This open contact state generates a high-level signal representing "reliable connection" throughout the monitoring circuit. Conversely, if the connector is not fully locked or loosens due to vibration or impact, the physical locking mechanism retracts, releasing the pressure on the detection switch. The normally closed contacts of the detection switch then reset and close, pulling the signal in the monitoring circuit down to a low level. This low level is the interlock feedback signal representing a "connection failure."

[0025] That is, when the high-voltage connector is fully engaged, the locking mechanism presses the detection switch, causing its normally closed contact to change from closed to open, thereby generating a high-level signal in the monitoring circuit (indicating a reliable connection); when the connector is not engaged or is loose, the switch resets and closes, generating a low-level signal (indicating a connection fault).

[0026] For example, the mechanical normally closed detection switch uses a micro switch with an IP67 protection rating. Its button is mechanically linked to the physical locking mechanism (such as a snap-fit ​​slider) of the high-voltage connector. When the high-voltage connector is fully inserted and locked, its locking mechanism presses against the button of the detection switch, causing its normally closed contact to open. At this time, the monitoring circuit input port detects a high-level signal (e.g., 12V). Conversely, when the connector is not fully locked or has come loose, the locking mechanism no longer presses against the switch button, its normally closed contact resets and closes, pulling the monitoring circuit input port down to a low level (0V).

[0027] S2. The high-voltage interlock monitoring circuit receives the interlock feedback signal and performs real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules.

[0028] In some embodiments, the high-voltage interlock monitoring circuit receives the interlock feedback signal and performs real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules, including: The high-voltage interlock monitoring circuit includes a signal acquisition unit, which acquires the level state of the interlock feedback signal by periodic sampling. The signal logic judgment rule is defined as follows: if the acquired level is low for multiple consecutive sampling periods, the interlock feedback signal is diagnosed as interrupted.

[0029] In this embodiment, the signal logic judgment rule is a program algorithm pre-stored in the monitoring circuit, which defines how to determine whether the connection status is normal based on the input signal level.

[0030] In this embodiment, the high-voltage interlock monitoring circuit includes a signal acquisition unit, which is typically an analog-to-digital converter module of a microcontroller. This signal acquisition unit samples and reads the level state of the interlock feedback signal at fixed, periodic time intervals. For example, the sampling period can be set to ten milliseconds.

[0031] For example, the high-voltage interlock monitoring circuit is based on an automotive-grade MCU (such as Infineon TC275), whose internal ADC module serves as a signal acquisition unit, sampling the interlock feedback signal voltage at the input terminal once at a fixed period (e.g., every 10ms).

[0032] In this embodiment, the signal logic judgment rule is specifically defined as follows: if the acquired level is identified as low within multiple consecutive sampling periods, an interlock feedback signal interruption is diagnosed. For example, the monitoring circuit can be set to detect a low level for three consecutive sampling periods (i.e., within thirty milliseconds) before initially determining a signal interruption. This multiple confirmation rule is itself a simple software filter that can filter out some nanosecond or microsecond-level extremely high-frequency noise glitches.

[0033] For example, the signal logic judgment rule embedded in the MCU is: if the voltage value collected is lower than the low-level threshold (e.g., 1.5V) for three consecutive sampling cycles (i.e., within 30ms), the MCU diagnoses it as an "interlock feedback signal interruption". This digital filtering method can initially filter out extremely brief noise interference.

[0034] In some embodiments, the real-time diagnostic process further includes: the high-voltage interlock monitoring circuit monitors its own operating voltage; when the operating voltage is lower than a preset voltage threshold, the delay confirmation mechanism of step S3 is skipped, and the negative logic jump instruction is directly generated and output by the high-voltage interlock monitoring circuit, and step S5 is executed to cut off the main high-voltage circuit.

[0035] In this embodiment, as a safety redundancy design, the high-voltage interlock monitoring circuit continuously monitors its own operating voltage. If the operating voltage falls below a preset threshold, it indicates that the monitoring circuit itself may be unable to operate reliably due to a power supply failure. In this case, the circuit will skip the conventional process of the delay confirmation mechanism in step S3 and directly jump to S4 and S5, immediately issuing a command to cut off the high-voltage circuit. This ensures that even if the monitoring system itself fails, the system can enter a safe state, further improving overall reliability.

[0036] For example, during the real-time diagnostic process of S2, the MCU also monitors its own operating voltage (Vdd) in real time through its internal monitoring circuit. If the operating voltage is lower than the preset voltage threshold (e.g., 6V), it indicates that the circuit may be about to fail due to a power supply failure. At this time, the MCU will skip the 100ms delay confirmation mechanism of S3 and directly output a negative logic transition instruction to forcibly disconnect the high-voltage circuit.

[0037] S3. When the interruption of the interlock feedback signal is diagnosed, the high-voltage interlock monitoring circuit starts a delayed confirmation mechanism based on continuous judgment logic; the continuous judgment logic is configured to continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time.

[0038] In this embodiment, the irreversible preset delay time refers to a time length that must be completed once the timing starts, during which the timing process will not be interrupted or reset by any external conditions; the continuous judgment logic is a signal processing algorithm pre-programmed into the monitoring circuit, used to continuously judge the signal state within a specific time window.

[0039] In this embodiment, the timer is implemented using a hardware timer, which cannot be interrupted or reset by software once started, ensuring the integrity and reliability of the delay confirmation process.

[0040] In some embodiments, when an interruption of the interlock feedback signal is diagnosed, the high-voltage interlock monitoring circuit initiates a delayed confirmation mechanism based on continuous judgment logic, including: The high-voltage interlock monitoring circuit immediately triggers a timer to start timing for an irreversible preset delay time the moment an interruption is detected. Meanwhile, the high-voltage interlock monitoring circuit will lock the interrupt diagnostic status until the timer finishes counting, and will not respond to new interrupt diagnostic triggers during this period.

[0041] In this embodiment, the delayed confirmation mechanism is a protection strategy that verifies the authenticity of signal anomalies by introducing a time delay.

[0042] In this embodiment, the high-voltage interlock monitoring circuit immediately triggers an internal timer to begin an irreversible, preset delay time when it detects an interruption in the interlock feedback signal through signal logic judgment rules. This preset delay time is a reasonable time value pre-set based on the typical vibration characteristics of the ship and the mechanical characteristics of the connector. At the same time, the high-voltage interlock monitoring circuit locks the current interruption diagnosis state. This locked state will remain until the timer completes the entire timing process. During this period, the system will not respond to any new interruption diagnosis triggers. This design ensures the integrity and independence of the confirmation process.

[0043] In some embodiments, the continuous judgment logic is configured to: continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time, including: Throughout the entire irreversible timing process of the timer, the signal acquisition unit continuously acquires the level state of the interlock feedback signal using the periodic sampling method. The continuous judgment logic compares the level state acquired in each sampling period with the high-level threshold representing signal recovery. If the level state acquired in any sampling period reaches the high-level threshold, it is determined that the interlock feedback signal has been recovered.

[0044] In this embodiment, when the high-voltage interlock monitoring circuit diagnoses a signal interruption according to the rules of step S2, it immediately triggers an internal timer to begin timing for a preset delay time. This time can be set according to the typical vibration frequency of the ship, for example, one hundred milliseconds. Crucially, this timing process is irreversible; once started, it cannot be interrupted or reset. Simultaneously, the monitoring circuit locks the current "interruption diagnosis state." During the entire one hundred millisecond delay, the monitoring circuit temporarily ignores any new interrupt triggers that may occur in step S2, thereby stabilizing the system state within the current diagnostic confirmation process. Throughout the delay, the continuous judgment logic continues to operate, commanding the signal acquisition unit to continue sampling and monitoring the interlock feedback signal at the original ten-millisecond cycle and determining whether it has recovered to the high level representing a normal connection.

[0045] For example, once a signal interruption is diagnosed, the MCU immediately starts an irreversible timer with a preset delay time T (e.g., 100ms). Simultaneously, the MCU locks the current interrupt diagnosis state. During this 100ms delay, even if the diagnostic logic in step S2 detects a high level again (instantaneous recovery), it will not exit the current delay confirmation process; that is, it "does not respond to new interrupt diagnosis triggers." Throughout the entire 100ms delay, the continuous judgment logic (MCU program) continuously samples the signal level at a period of 10ms. If the voltage sampled at any point is higher than the high-level threshold (e.g., 3.5V), the signal is considered recovered. The MCU clears the interrupt flag and exits the current delay confirmation process, and the system returns to normal monitoring status.

[0046] In this embodiment, the timing process of the timer is irreversible. Once the 100ms timing begins, even if the signal recovers at 50ms and disconnects again at 60ms, the timer will not be interrupted or reset; it will continue to run for the remaining 40ms. This design is a critical protection against continuous signal jitter, preventing the system from failing to trigger protection during the "diagnosis-recovery-rediagnosis" cycle, thereby solving the "failure to act" problem.

[0047] In this embodiment, the irreversible delay mechanism is the core of resolving the contradiction between "false alarm" and "failure to operate". On the one hand, the 100-millisecond delay window provides sufficient recovery time for signal jitter caused by instantaneous vibration. As long as the signal recovers within this window, the system considers it interference and returns to normal, thereby preventing false alarm. On the other hand, the irreversibility of timing ensures that once timing begins, the system must make a "global decision" on the signal state within 100 milliseconds. Even if the signal recovers briefly in the middle and then disconnects again, timing will not stop, and the system will eventually execute the protection action. This completely eliminates the risk of the system becoming paralyzed and refusing to operate due to continuous signal jitter.

[0048] S4. If the interlock feedback signal is not restored within the preset delay time, the high-voltage interlock monitoring circuit generates and outputs a negative logic jump instruction.

[0049] In some embodiments, if the interlock feedback signal fails to recover within the preset delay time, the high-voltage interlock monitoring circuit generates and outputs a negative logic transition instruction, including: If the continuous judgment logic fails to determine signal recovery until the timer completes its count, the instruction generation unit of the high-voltage interlock monitoring circuit generates a level transition signal from high to low. The instruction generation unit outputs the level transition signal as the negative logic transition instruction to the signal output port.

[0050] In this embodiment, if the continuous judgment logic fails to detect a signal recovery to a valid high level at every 10-millisecond sampling point during the entire irreversible 100-millisecond delay, then at the moment the timer finishes counting, the instruction generation unit (usually an output pin of a microcontroller) in the high-voltage interlock monitoring circuit will generate a clear control instruction. This instruction is a potential transition, dropping from a higher level (e.g., 12 volts) to a lower level (e.g., zero volts). This high-to-low transition is the negative logic transition instruction.

[0051] In some embodiments, the timing process of the irreversible preset delay time cannot be interrupted or reset by the recovery of the interlock feedback signal.

[0052] In this embodiment of the application, if the continuous judgment logic does not detect signal recovery (i.e., all sampling points are low level) during the entire 100ms irreversible delay time, the instruction generation unit of the MCU (a GPIO port) will perform a negative logic transition operation: pull its output level from high level (12V) to low level (0V).

[0053] S5. The relay receives the negative logic switching instruction and cuts off the main high-voltage circuit of the marine lithium battery pack accordingly.

[0054] In some embodiments, the execution relay receiving the negative logic switching command and accordingly disconnecting the main high-voltage circuit of the marine lithium battery pack includes: The execution relay includes a drive coil, and the power supply circuit of the drive coil is connected in series with the signal output port of the high-voltage interlock monitoring circuit. The low level in the negative logic transition instruction disconnects the power supply circuit of the drive coil; When the drive coil loses power, it causes the normally open main contact it controls to open, thereby cutting off the main high-voltage circuit.

[0055] In this embodiment, the relay contains a drive coil, whose power supply circuit is electrically connected in series with the signal output port of the high-voltage interlock monitoring circuit. When the negative logic transition instruction output by S4 is low (zero volts), it is equivalent to cutting off the power supply circuit of the drive coil. The drive coil loses its magnetic force due to de-energization, and its normally open main contact quickly opens under the action of a spring. Since this main contact is connected in series in the main high-voltage circuit of the marine lithium battery pack, its opening physically cuts off the transmission path of high-voltage electrical energy.

[0056] In this embodiment, the high-voltage interlock monitoring circuit outputs a high level under normal conditions to keep the relay engaged; when a fault occurs, the output changes from high level to low level (negative logic transition) to disconnect the relay.

[0057] For example, one end of the drive coil of the relay is connected to a power supply (12V), and the other end is connected to the aforementioned output port of the MCU. Under normal circumstances, the MCU outputs a high level, the coil is energized, the relay is energized, and the main high-voltage circuit is turned on. When the MCU outputs a negative logic transition instruction (low level 0V), it is equivalent to disconnecting the drive coil's circuit to ground, and the coil is de-energized. The normally open main contact it controls then opens, thereby completely cutting off the main high-voltage circuit of the marine lithium battery pack and achieving safety protection.

[0058] like Figure 2 The diagram shown is a functional block diagram of a high-voltage interlock protection system for a marine lithium battery pack provided in an embodiment of this application.

[0059] The high-voltage interlock protection system 100 for marine lithium battery packs described in this application can be installed in electronic devices. Depending on the functions implemented, the high-voltage interlock protection system 100 may include an interlock signal generation module 101, an interlock signal diagnosis module 102, a delay confirmation control module 103, a protection command generation module 104, and a high-voltage circuit execution module 105. The module described in this application can also be referred to as a unit, which refers to a series of computer program segments that can be executed by the processor of an electronic device and can perform a fixed function, and which are stored in the memory of the electronic device.

[0060] In this embodiment, the functions of each module / unit are as follows: Interlock signal generation module 101 is used to generate a continuous interlock feedback signal through a mechanical normally closed detection switch arranged at the high-voltage connector interface; The interlock signal diagnosis module 102 is used for the high-voltage interlock monitoring circuit to receive the interlock feedback signal and perform real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules. The delay confirmation control module 103 is used to activate a delay confirmation mechanism based on continuous judgment logic when the interruption of the interlock feedback signal is diagnosed. The continuous judgment logic is configured to continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time. The protection instruction generation module 104 is used to generate and output a negative logic jump instruction if the interlock feedback signal is not restored within the preset delay time. The high-voltage circuit execution module 105 is used to execute the relay to receive the negative logic switching command and thereby cut off the main high-voltage circuit of the marine lithium battery pack.

[0061] In the embodiments provided in this application, it should be understood that the disclosed methods and systems can be implemented in other ways. For example, the system embodiments described above are merely illustrative; for instance, the division of modules is only a logical functional division, and other division methods may be used in actual implementation.

[0062] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0063] Furthermore, the functional modules in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or in the form of hardware plus software functional modules.

[0064] It will be apparent to those skilled in the art that this application is not limited to the details of the exemplary embodiments described above, and that this application can be implemented in other specific forms without departing from the spirit or essential characteristics of this application.

[0065] The embodiments of this application can acquire and process relevant data based on artificial intelligence technology. Artificial intelligence is the theory, method, technology, and application system that uses digital computers or machines controlled by digital computers to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use that knowledge to obtain optimal results.

[0066] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application and are not intended to limit it. Although this application has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of this application without departing from the spirit and scope of the technical solutions of this application.

Claims

1. A high-voltage interlock protection method for marine lithium battery packs, characterized in that, The method includes: S1. A continuous interlocking feedback signal is generated by a mechanical normally closed detection switch located at the high-voltage connector interface; S2. The high-voltage interlock monitoring circuit receives the interlock feedback signal and performs real-time diagnosis of the integrity of the interlock feedback signal based on the preset signal logic judgment rules. S3. When the interruption of the interlock feedback signal is diagnosed, the high-voltage interlock monitoring circuit starts a delayed confirmation mechanism based on continuous judgment logic; the continuous judgment logic is configured to continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time. S4. If the interlock feedback signal is not restored within the preset delay time, the high-voltage interlock monitoring circuit generates and outputs a negative logic jump instruction. S5. The relay receives the negative logic switching instruction and cuts off the main high-voltage circuit of the marine lithium battery pack accordingly.

2. The high-voltage interlock protection method for marine lithium battery packs as described in claim 1, characterized in that, The continuous interlocking feedback signal generated by the mechanical normally closed detection switch arranged at the high-voltage connector interface includes: The contacts of the mechanical normally closed detection switch are mechanically linked to the physical locking mechanism of the high-voltage connector. When the high-voltage connector is in a fully engaged state, the physical locking mechanism presses the contacts of the mechanical normally closed detection switch to close it, thereby forming a path for the continuous interlocking feedback signal.

3. The high-voltage interlock protection method for marine lithium battery packs as described in claim 1, characterized in that, The high-voltage interlock monitoring circuit receives the interlock feedback signal and performs real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules, including: The high-voltage interlock monitoring circuit includes a signal acquisition unit, which acquires the level state of the interlock feedback signal by periodic sampling. The signal logic judgment rule is defined as follows: if the acquired level is low for multiple consecutive sampling periods, the interlock feedback signal is diagnosed as interrupted.

4. The high-voltage interlock protection method for marine lithium battery packs as described in claim 3, characterized in that, When the interlock feedback signal is diagnosed as interrupted, the high-voltage interlock monitoring circuit initiates a delayed confirmation mechanism based on continuous judgment logic, including: The high-voltage interlock monitoring circuit immediately triggers a timer to start timing for an irreversible preset delay time the moment an interruption is detected. Meanwhile, the high-voltage interlock monitoring circuit will lock the interrupt diagnostic status until the timer finishes counting, and will not respond to new interrupt diagnostic triggers during this period.

5. The high-voltage interlock protection method for marine lithium battery packs as described in claim 4, characterized in that, The continuous judgment logic is configured to: continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time, including: Throughout the entire irreversible timing process of the timer, the signal acquisition unit continuously acquires the level state of the interlock feedback signal using the periodic sampling method. The continuous judgment logic compares the level state acquired in each sampling period with the high-level threshold representing signal recovery. If the level state acquired in any sampling period reaches the high-level threshold, it is determined that the interlock feedback signal has been recovered.

6. The high-voltage interlock protection method for marine lithium battery packs as described in claim 4, characterized in that, If the interlock feedback signal fails to recover within the preset delay time, the high-voltage interlock monitoring circuit generates and outputs a negative logic transition instruction, including: If the continuous judgment logic fails to determine signal recovery until the timer completes its count, the instruction generation unit of the high-voltage interlock monitoring circuit generates a level transition signal from high to low. The instruction generation unit outputs the level transition signal as the negative logic transition instruction to the signal output port.

7. The high-voltage interlock protection method for marine lithium battery packs as described in claim 1, characterized in that, The execution relay receives the negative logic transition command and accordingly disconnects the main high-voltage circuit of the marine lithium battery pack, including: The execution relay includes a drive coil, and the power supply circuit of the drive coil is connected in series with the signal output port of the high-voltage interlock monitoring circuit. The low level in the negative logic transition instruction disconnects the power supply circuit of the drive coil; When the drive coil loses power, it causes the normally open main contact it controls to open, thereby cutting off the main high-voltage circuit.

8. The high-voltage interlock protection method for marine lithium battery packs as described in claim 5, characterized in that, The timing process of the irreversible preset delay time cannot be interrupted or reset by the recovery of the interlock feedback signal.

9. The high-voltage interlock protection method for marine lithium battery packs as described in claim 1, characterized in that, In step S2, the real-time diagnostic process also includes: the high-voltage interlock monitoring circuit monitors its own operating voltage. When the operating voltage is lower than the preset voltage threshold, the delay confirmation mechanism in step S3 is skipped, and the high-voltage interlock monitoring circuit directly generates and outputs the negative logic jump instruction, and executes step S5 to cut off the main high-voltage circuit.

10. A high-voltage interlock protection system for marine lithium battery packs, characterized in that, The system includes: An interlock signal generation module is used to generate a continuous interlock feedback signal through a mechanical normally closed detection switch located at the high-voltage connector interface; The interlock signal diagnostic module is used by the high-voltage interlock monitoring circuit to receive the interlock feedback signal and perform real-time diagnosis of the integrity of the interlock feedback signal based on preset signal logic judgment rules. The delay confirmation control module is used to activate a delay confirmation mechanism based on continuous judgment logic when the interruption of the interlock feedback signal is diagnosed. The continuous judgment logic is configured to continuously monitor whether the interlock feedback signal is restored within an irreversible preset delay time. The protection instruction generation module is used to generate and output a negative logic jump instruction if the interlock feedback signal is not restored within the preset delay time. The high-voltage circuit execution module is used to execute the relay to receive the negative logic switching command and thereby disconnect the main high-voltage circuit of the marine lithium battery pack.

Images