Information processing method of replaceable automobile power battery and automobile

Abstract

The invention discloses an information processing method of a replaceable automobile power battery and an automobile, which can realize a fault responsibility distribution scheme of the replaceable power battery, and the used battery fault snapshot information comprises the instant state of the fault of the replaceable power battery. The traceability data can be used as traceability data during later fault detection of the replaceable automobile power battery, so that an executed fault responsibility allocation scheme has good credibility and fairness, and legal rights and interests of multiple parties such as a user of an automobile body system and all parties of the replaceable power battery can be effectively guaranteed; moreover, hardware of the vehicle body system and the replaceable power battery required for executing the information processing method of the replaceable automobile power battery can be hardware of the vehicle body system and the replaceable power battery, and hardware addition or modification is not needed, so that the information processing method has relatively low use cost. The invention is widely applied to the technical field of automobiles.

Description

Technical Field

[0001] This invention relates to the field of automotive technology, and in particular to an information processing method for a replaceable automotive power battery and an automotive vehicle. Background Technology

[0002] Electric vehicles (EVs) offer advantages such as environmental friendliness, powerful performance, and low operating costs. However, driving range remains a significant limiting factor for their widespread adoption. Currently, several technological directions exist for improving EV driving range, including increasing charging power, improving battery specific energy, and using swappable batteries. Swappable batteries, in particular, involve making the battery easily removable. Users of vehicles with swappable batteries can easily drive to a battery swapping station when the battery level is low, remove the current swappable battery, and install a higher-capacity swappable battery. Therefore, using swappable batteries requires relatively lower technical standards for charging and battery materials, and allows for rapid "charging" of EVs, making it a promising technological direction.

[0003] Due to the replaceable nature of swappable batteries, electric vehicles using them typically operate under a "vehicle-battery separation" model. In this model, users generally maintain ownership of the vehicle system (e.g., by purchasing or long-term leasing), but not necessarily of the specific swappable battery. For example, they might rent a swappable battery from a battery rental company, and then rent another one after depleting its charge. Under this model, the ownership of the swappable battery generally does not belong to the electric vehicle user. On the other hand, swappable batteries are susceptible to various factors such as poor driving habits (overcharging and over-discharging), and external damage, making them prone to malfunctions. If a swappable battery fails or is damaged, disputes over liability can easily arise between the user and the battery rental company. Summary of the Invention

[0004] In view of at least one of the above-mentioned technical problems, the purpose of this invention is to provide an information processing method for a replaceable automotive power battery and an automotive vehicle.

[0005] On one hand, embodiments of the present invention include an information processing method for a replaceable automotive power battery, wherein the vehicle body system includes a first controller and a sensor group, the sensor group includes at least one sensor, and the vehicle body system is used to carry a replaceable power battery, which provides power. The information processing method for the replaceable automotive power battery is executed by the first controller and includes the following steps: Detect potential failure events of the replaceable power battery; In response to the aforementioned fault risk event, the sensor group is triggered to acquire data from multiple sources; the sensor group detects the replaceable power battery. Based on the multi-source data, battery fault snapshot information is generated.

[0006] Furthermore, the sensor group includes an environmental sensor, a vehicle body sensor, and a battery sensor. The environmental sensor detects the environment in which the vehicle body system is located, the vehicle body sensor detects the vehicle body system, and the battery sensor detects the replaceable power battery. The process of triggering the sensor group to acquire data from multiple sources includes the following steps: The environmental sensors are triggered to collect data and obtain environmental data; The vehicle body sensors are triggered to collect data and obtain vehicle body data; The battery sensor is triggered to collect data and obtain battery data; The multi-source data consists of the environmental data, the vehicle body data, and the battery data.

[0007] Furthermore, the types of data acquired by the sensor array include performance parameters and optical images.

[0008] Furthermore, generating battery fault snapshot information based on the multi-source data includes: Generate user key; The multi-source data is used as plaintext information, and the multi-source data is encrypted using the user key; The encrypted information obtained through encryption is used as the battery fault snapshot information.

[0009] Furthermore, the vehicle system also includes an in-vehicle communication module and a wireless communication module; The information processing method for the replaceable automotive power battery executed by the first controller further includes the following steps: The battery fault snapshot information is digitally signed to obtain first signature information; The in-vehicle communication module is invoked to send the battery fault snapshot information to the replaceable power battery; The wireless communication module is invoked to send the first signature information, the user key, and the battery failure snapshot information to the cloud.

[0010] On the other hand, embodiments of the present invention include an information processing method for a replaceable automotive power battery, applied to the replaceable power battery, wherein the replaceable power battery includes a second controller and a plurality of battery cells, the battery cells being used to provide power to the vehicle system; The information processing method for the replaceable automotive power battery is executed by the second controller and includes the following steps: Receive battery fault snapshot information sent by the vehicle system; The battery failure snapshot information is stored locally.

[0011] Furthermore, the information processing method for the replaceable automotive power battery executed by the second controller further includes the following steps: The battery fault snapshot information is digitally signed to obtain a second signature. Store the second signature information locally; The second signature information is sent to the first controller in the vehicle system.

[0012] Furthermore, the step of digitally signing the battery fault snapshot information to obtain second signature information includes the following steps: Obtain salinity information; The salt value information is added to the battery fault snapshot information to obtain salting information; The salting information is processed using a data digest algorithm to obtain a second digest. The second digest information is encrypted using the second private key in the public-key encryption algorithm to obtain the second signature information.

[0013] Furthermore, the replaceable power battery also includes a housing and multiple cell temperature sensors. Each cell and each cell temperature sensor are encapsulated inside the housing. The number of cell temperature sensors is equal to or less than the number of cell cells. Each cell temperature sensor is used to detect the operating temperature of a corresponding cell. The process of obtaining salinity information includes the following steps: The operating phase of the replaceable power battery is detected; When the replaceable power battery is stable at a specific working stage, the temperature sensors of each individual cell are called to detect the corresponding multiple battery cells and obtain multiple working temperature values. Each of the aforementioned working temperature values ​​is discretized to obtain multiple discrete values; The salt value information is composed of the discrete values.

[0014] On the other hand, embodiments of the present invention also include a vehicle, the vehicle including the vehicle body system in the information processing method for the replaceable vehicle power battery in the embodiments, and / or the replaceable power battery in the information processing method for the replaceable vehicle power battery in the embodiments.

[0015] The beneficial effects of this invention are as follows: The information processing method for replaceable automotive power batteries in the embodiments can realize a fault responsibility allocation scheme for replaceable power batteries. The battery fault snapshot information used therein contains the state of the replaceable power battery at the moment of the fault, which can be used as traceability data for subsequent fault detection of replaceable automotive power batteries. This makes the implemented fault responsibility allocation scheme have good credibility and fairness, and can effectively protect the legitimate rights and interests of multiple parties, including the users of the vehicle system (car users) and the owners of the replaceable power batteries (such as battery leasing institutions). Moreover, the hardware of the vehicle system and the replaceable power battery required to implement the information processing method for replaceable automotive power batteries can be the hardware that the vehicle system and the replaceable power battery themselves have, without the need for hardware addition or modification, thus having a low usage cost. Attached Figure Description

[0016] Figure 1 This is a schematic diagram of the structure of an electric vehicle in which the information processing method for replaceable automotive power batteries can be applied in the embodiment. Figure 2 This is a schematic diagram illustrating the steps of the information processing method for a replaceable automotive power battery executed by the first controller in the embodiment. Figure 3 This is a schematic diagram illustrating the principle of the information processing method for a replaceable automotive power battery executed by the first controller in this embodiment. Figure 4 This is a schematic diagram illustrating the steps of the information processing method for a replaceable automotive power battery executed by the second controller in this embodiment. Figure 5 This is a schematic diagram illustrating the principle of the information processing method for a replaceable automotive power battery executed by the second controller in this embodiment. Detailed Implementation

[0017] In this embodiment, an electric vehicle that can apply the information processing method for replaceable automotive power batteries, such as... Figure 1As shown, it includes a vehicle body system and a replaceable power battery. The vehicle body system includes all other parts of the electric vehicle except for the replaceable power battery, such as the body, power system, transmission system, braking system, suspension system, handling system, and electrical system. The vehicle body system has locations and interfaces for installing the replaceable power battery, allowing it to provide power to the power system and other electrical equipment within the vehicle body system through self-discharge after installation.

[0018] In this embodiment, refer to Figure 1 The vehicle system includes a first controller and a sensor array. The first controller may be an ADAS Domain Controller Unit (ADCU), and the sensor array includes one or more of the following sensors: surround-view camera, LiDAR, millimeter-wave radar, visible light camera, suspension travel sensor, steering wheel angle sensor, tire pressure sensor, battery surface temperature sensor, battery pressure sensor, and battery appearance camera. These sensors are connected to and controlled by the first controller.

[0019] In this embodiment, Figure 1 The sensors in the system, such as surround-view cameras, lidar, millimeter-wave radar, and visible light cameras, detect the environment in which the vehicle system is located, such as roads, parking lots, and obstacles in the environment. These sensors belong to environmental sensors. The sensors such as suspension travel sensors, steering wheel angle sensors, and tire pressure sensors detect the vehicle system itself. These sensors belong to vehicle body sensors. The sensors such as battery surface temperature sensors, battery pressure sensors, and battery exterior cameras (with a field of view covering the exterior area of ​​the replaceable power battery, such as the casing) detect the replaceable power battery. These sensors belong to battery sensors.

[0020] In this embodiment, the surround-view camera uses the environment surrounding the vehicle system as its field of view to capture a surround-view image in optical image format; the lidar uses the environment surrounding the vehicle system as its field of view to detect lidar point cloud data in optical image format; the millimeter-wave radar uses the environment surrounding the vehicle system as its field of view to detect millimeter-wave point cloud data in image format; and the visible light camera uses the environment surrounding the vehicle system as its field of view to capture a single-direction (e.g., forward-looking or rear-looking) image in visible light optical image format. The environmental sensors collect data, and the resulting surround-view image, lidar point cloud data, millimeter-wave point cloud data, and single-direction image constitute the environmental data.

[0021] In this embodiment, a suspension travel sensor detects the suspension system within the vehicle body system, obtaining suspension travel values ​​in performance parameter format; a steering wheel angle sensor detects the steering wheel within the vehicle body system, obtaining steering wheel angle values ​​in performance parameter format; and a tire pressure sensor detects the tires within the vehicle body system, obtaining tire pressure values ​​in performance parameter format. The data collected by these vehicle body sensors, including suspension travel values, steering wheel angle values, and tire pressure values, constitutes the vehicle body data.

[0022] In this embodiment, a battery surface temperature sensor detects the temperature of the casing and other areas of the replaceable power battery, obtaining a battery surface temperature value in performance parameter format; a battery pressure sensor detects the pressure of substances such as electrolyte inside the replaceable power battery, obtaining a battery pressure value in performance parameter format; and a battery exterior camera captures images of the casing and other exterior areas of the replaceable power battery, obtaining a battery exterior image in image format. The battery sensors collect data, and the obtained battery surface temperature value, battery pressure value, and battery exterior image constitute battery data.

[0023] In summary, when the first controller calls the sensor group to collect data, it can obtain environmental data, vehicle body data, and battery data, which come from the environment, vehicle body, and power battery, respectively. These data have data types such as performance parameters or optical images, thus forming multi-source data.

[0024] In this embodiment, refer to Figure 1 The vehicle system also includes a wireless communication module and an in-vehicle communication module. The wireless communication module establishes a connection with a cloud server via wireless communication protocols such as 5G, enabling communication between the vehicle system and the outside world. The in-vehicle communication module establishes a connection between the first controller and other components within the vehicle via communication protocols such as Ethernet (ETH), enabling communication between the first controller and other in-vehicle components.

[0025] In this embodiment, the cloud server can be operated by a third party other than the owner of the vehicle system (car user) and the owner of the replaceable power battery (battery leasing agency), such as the manufacturer of the vehicle system, a specialized automotive information service provider, or a traffic management department.

[0026] In this embodiment, refer to Figure 1The replaceable power battery includes a second controller and multiple battery cells. The second controller is a control component with functions such as data acquisition, processing, storage, and output, and it has a large storage capacity (over 32GB) and a long storage time (supporting data retention for over 10 years after power failure). Each battery cell is the basic unit for charging and discharging in the replaceable power battery. These battery cells are connected in series, parallel, or a combination of series and parallel to achieve a sufficiently high supply voltage and a sufficiently large supply current to meet the needs of the vehicle system.

[0027] In this embodiment, refer to Figure 1 The replaceable power battery also includes multiple cell temperature sensors. Each cell temperature sensor is used to detect the temperature of a corresponding cell, obtain the operating temperature value of that cell, and send the detected operating temperature value to the second controller. In this embodiment, the number of cell temperature sensors is no more than the number of cell cells, and generally can be less than the number of cell cells, that is, it is only necessary to detect the operating temperature values ​​of a portion of the cell cells.

[0028] In this embodiment, the replaceable power battery also includes a casing, which encapsulates the second controller, each battery cell, and each cell temperature sensor inside the casing. The casing has pre-installed interfaces for the battery cells to output power current and interfaces for the second controller to communicate with the outside. Without damaging the casing, the outside cannot directly detect or modify the information of the internal battery cells; data detection and control of the battery cells can only be performed through the second controller, thus maintaining the independence of the replaceable power battery.

[0029] In this embodiment, when the replaceable power battery is installed on the vehicle body system, the first controller in the vehicle body system communicates with the second controller in the replaceable power battery through the in-vehicle communication module (Ethernet).

[0030] In this embodiment, the first controller in the vehicle system and the second controller in the replaceable power battery respectively execute the steps in their respective information processing methods for the replaceable automotive power battery. The steps executed by each can be performed simultaneously, and communication can occur during execution.

[0031] In this embodiment, the information processing method for the replaceable automotive power battery executed by the first controller is as follows: Figure 2 As shown, it includes the following steps: S1A. Detection of potential failure events for replaceable power batteries; S2A. In response to a fault risk event, it triggers the sensor group to collect data and obtain multi-source data; S3A. Generates battery fault snapshot information based on multi-source data.

[0032] In step S1A, the first controller can dynamically detect in real time whether a fault risk event has occurred in the replaceable power battery. Fault risk events include events where the replaceable power battery already has a fault, or events where, although there is no fault, there is a high risk of a fault occurring. Specifically, the first controller can dynamically call... Figure 1 Sensor groups in, and / or calling Figure 1 The sensor array is used to detect the necessary data and determine whether a fault risk event has occurred.

[0033] For example, the first controller can determine that a fault risk event has occurred if any of the following events are detected: the vertical acceleration of the vehicle's front system, the road impact intensity, the distance to the obstacle, and the wading depth are all greater than the corresponding threshold; for example, vertical acceleration > 3g, sudden drop in suspension travel > 30mm and duration > 40ms, insulation resistance drop reported by the battery management system (BMS) > 30%, or detection of an echo of a hard object impacting the bottom.

[0034] When the first controller detects a fault risk event, it immediately executes step S2A and calls... Figure 1 The sensor array in the system collects data from multiple sources. Specifically, the time interval between the execution of step S1A and step S2A by the first controller is generally very short (e.g., within 200ms), so the multiple source data are essentially detected simultaneously at the moment the fault risk event occurs.

[0035] When executing step S2A, the first controller can collect only one set of multi-source data, or it can perform multiple samplings at certain time intervals (e.g., 200ms) to obtain multiple sets of multi-source data. In the case of detecting multiple sets of multi-source data, the first controller can also generate a UTC+8 timestamp with a precision of 1ms to mark the collection time of each set of multi-source data.

[0036] Since neither a single set of multi-source data nor multiple sets of multi-source data will affect the execution of step S3A, it is not necessary to distinguish between a single set of multi-source data and multiple sets of multi-source data.

[0037] In step S3A, the first controller can process the multi-source data detected in step S2A by performing data packaging, file name generation, and file information (UUID, timestamp vehicle VIN, battery ID) marking, thereby obtaining battery fault snapshot information. In this case, the multi-source data exists in plaintext form in the battery fault snapshot information, meaning that the multi-source data can be easily extracted as long as the battery fault snapshot information is obtained.

[0038] In this embodiment, when the first controller executes step S3A, which is the step of generating battery fault snapshot information based on multi-source data, it can specifically perform the following steps: S301A. Generate user key; S302A. Using multi-source data as plaintext information, encrypt the multi-source data using a user key; S303A. Use encrypted information as battery failure snapshot information.

[0039] In step S301A, the first controller can run a key generation algorithm to generate a user key. user The length of a user key is typically 128 bits or 256 bits.

[0040] In step S302A, the first controller can run symmetric encryption algorithms such as AES, using the multi-source data obtained in step S2A as plaintext information, i.e., the object to be encrypted, and using the user key. user Configure the AES encryption algorithm to encrypt multi-source data and obtain the corresponding ciphertext information.

[0041] In step S303A, the ciphertext information obtained by encrypting with the AES encryption algorithm is used as the battery failure snapshot information.

[0042] By executing steps S301A-S303A, the multi-source data in the battery fault snapshot information generated by the first controller exists in encrypted form, and can only be accessed after obtaining the user key. user Only under certain circumstances can battery fault snapshot information be encrypted to recover multi-source data. Therefore, vehicle system users (car owners) only need to safeguard their user key. user There is no leakage; even if the vehicle system sends the battery fault snapshot information obtained from steps S301A-S303A to other parties, it will not cause leakage of multi-source data.

[0043] In this embodiment, the information processing method for the replaceable automotive power battery executed by the first controller further includes the following steps: S4A. Digitally sign the battery fault snapshot information to obtain the first signature information; S5A. Call the in-vehicle communication module to send battery fault snapshot information to the replaceable power battery; S6A. Invoke the wireless communication module to send the first signature information, user key, and battery failure snapshot information to the cloud.

[0044] The principle of steps S4A-S6A is as follows: Figure 3 As shown.

[0045] Reference Figure 3 In step S4A, the first controller first processes the battery fault snapshot information using a data digest algorithm such as SHA-256 to obtain the first digest information digest1. Then, it executes a public-key encryption algorithm such as RSA-2048 to generate a first public key public1 and a corresponding first private key private1. The first public key public1 is public (can be sent externally), while the first private key private1 is confidential (only stored by the first controller). The first controller uses the first private key private1 to encrypt the first digest information digest1, thereby obtaining the first signature information signature1.

[0046] Reference Figure 3 In step S5A, the first controller calls the in-vehicle communication module to send the battery fault snapshot information to the replaceable power battery, so that the second controller in the replaceable power battery can back up the battery fault snapshot information.

[0047] Reference Figure 3 In step S6A, the first controller calls the wireless communication module to transmit the first signature information signature1 and the user key key. user Battery failure snapshot information is sent to the cloud server. The cloud server can execute blockchain technology to store the first signature information (signature1) and the user key. user And battery failure snapshot information.

[0048] In this embodiment, refer to Figure 3 By executing steps S4A-S6A, the following fault liability allocation scheme for replaceable automotive power batteries can be achieved: 1. In the case of a fault in the vehicle system (car user) when using the car, if the replaceable car power battery fails, steps S1A-S3A will be triggered to generate battery fault snapshot information. The battery fault snapshot information is the on-site information detected at the time the replaceable car power battery fails. It contains original information related to the fault of the replaceable car power battery and its cause, and has high evidentiary value. 2. Vehicle system users (car owners) can drive their electric vehicles to the battery swapping station or schedule an appointment for a battery swapping station staff member to come to their home. The battery swapping station staff member will inspect the replaceable automotive power battery installed on the electric vehicle and determine the fault level. 3. Vehicle system users (car owners) can pre-sign contracts with battery swapping stations, agreeing that lower-level faults in the replaceable vehicle battery will be borne by the car owner, the battery swapping station, or jointly. This allows for rapid fault diagnosis and responsibility allocation in cases of low-level faults. In this case, vehicle system users (car owners) do not need to provide their user key. user The data was sent to the battery swapping station, but the station did not have the user's key. user Even if the battery swapping station recovers the replaceable power battery, it can still read the battery fault snapshot information from it. This is because the battery fault snapshot information is obtained through the user key. user The encrypted ciphertext information means that even battery swapping stations cannot decrypt the battery fault snapshot information to recover multi-source data. Since multi-source data contains a lot of information related to the car user's use of the vehicle system and driving the car, it can protect the car user's privacy and security. 4. If the fault level determined by the battery swapping station staff is high, or if the vehicle user disagrees with the inspection results, the vehicle user can raise an objection and thus bear the "self-proof of no liability" obligation stipulated in the contract; specifically, the vehicle user can provide their user key. user Sending it to the battery swapping station so that the station can use the user key. user By decrypting the battery fault snapshot information, multi-source data can be recovered. The battery swapping station can then conduct a detailed inspection of the removed replaceable battery. The data obtained during this inspection represents the battery's condition when the vehicle was brought in for repair, while the recovered multi-source data represents the battery's condition at the moment of the fault. Therefore, the swapping station can compare the data obtained during this inspection with the multi-source data to obtain more convincing inspection results. For example, the swapping station can perform 3D line scanning to generate high-precision point clouds from the removed replaceable battery and compare these high-precision point clouds with laser point cloud data and millimeter-wave point cloud data from the multi-source data to determine if the replaceable battery has developed new cracks, dents, or other expanding faults. This helps the swapping station determine whether the fault was caused by the battery's own product quality or improper use by the vehicle user, thus allocating responsibility for the fault. 5. If car owners wish to obtain more convincing inspection results, they can request the involvement of a trusted third-party entity running the cloud server (such as the vehicle system manufacturer, a specialized automotive information service provider, or traffic management authorities); see reference. Figure 3The cloud server can verify the signature. Specifically, the cloud server uses the first public key (public1) to decrypt the first signature information (signature1). If it can decrypt and obtain data identical to the first digest information (digest1), it indicates that the battery fault snapshot information stored on the cloud server is the same as the original battery fault snapshot information generated by the vehicle system, and has not been tampered with by the cloud server or other means. The battery fault snapshot information stored on the cloud server is trustworthy. A third-party trusted structure can use the trustworthy battery fault snapshot information as the instantaneous state of the replaceable power battery when it fails, to detect and compare the replaceable power battery, thereby determining whether the fault is caused by the product quality of the replaceable power battery itself or by improper use by the vehicle user, and thus allocating responsibility for the fault. Responsibility allocation based on battery fault snapshot information by a third-party trusted structure is more trustworthy than responsibility allocation not performed by a third-party trusted structure or not based on battery fault snapshot information.

[0049] In summary, by executing steps S4A-S6A based on steps S1A-S3A, a fault liability allocation scheme for replaceable power batteries can be realized. The battery fault snapshot information used in this scheme includes the state of the replaceable power battery at the moment of the fault, thus ensuring that the executed fault liability allocation scheme has good credibility and fairness, and can at least effectively protect the legitimate rights and interests of the vehicle system user (car owner).

[0050] In a scenario where only the first controller in the vehicle system executes the information processing method for the replaceable automotive power battery (steps S1A-S6A), and the second controller in the replaceable power battery does not execute corresponding steps, there is a possibility that the user of the vehicle system (the car owner) could tamper with the battery fault snapshot information to their own advantage after it is generated, thereby harming the legitimate rights and interests of the operator of the replaceable power battery, i.e., the battery leasing agency. To mitigate this possibility, in this embodiment, the second controller also executes some steps in the information processing method for the replaceable automotive power battery.

[0051] In this embodiment, the information processing method for the replaceable automotive power battery executed by the second controller is as follows: Figure 4 As shown, it includes the following steps: S1B. Receives battery fault snapshot information sent by the vehicle system; S2B stores battery failure snapshot information locally.

[0052] The second controller can execute step S1B when the first controller executes step S5A, sending battery fault snapshot information to the replaceable power battery, thereby receiving the battery fault snapshot information sent by the first controller in the vehicle system. If the first controller executes steps S301A-S303A, the battery fault snapshot information received by the second controller is encrypted information corresponding to multi-source data, and the second controller lacks the user key. user However, it is impossible to decrypt the battery fault snapshot information to obtain multi-source data.

[0053] In step S5A, the second controller stores the battery fault snapshot information locally. This allows it to compare the locally backed-up battery fault snapshot information with the cloud server's backup when the first controller requests the cloud server to retrieve the backup. This comparison determines whether the cloud server's backup has been tampered with, thus giving the owner of the swappable battery (battery leasing organization) the opportunity to review the battery fault snapshot information. This reduces the operational risk for the owner (battery leasing organization), discourages malicious damage by users, and achieves a more objective and fair allocation of responsibility.

[0054] In this embodiment, in addition to executing steps S1B-S2B, the second controller can also execute the following steps: S3B. Digitally sign the battery fault snapshot information to obtain a second signature; S4B. Store the second signature information locally; S5B. Sends the second signature information to the first controller in the vehicle system.

[0055] The principle of steps S3B-S5B is as follows: Figure 5 As shown.

[0056] Reference Figure 5 When the second controller performs step S3B, which is to digitally sign the battery fault snapshot information and obtain the second signature information, it can specifically perform the following steps: S301B. Obtain salt value information; S302B. Add salt value information to battery fault snapshot information to obtain salting information; S303B. The salting information is processed using a data digest algorithm to obtain a second digest. S304B. Encrypt the second digest information using the second private key in the public-key encryption algorithm to obtain the second signature information.

[0057] In step S301B, the second controller can generate hardware-secure salt information. For example, the second controller can execute a random number algorithm to generate a random number as the salt information.

[0058] However, since the production and setup of the hardware of the second controller are generally not controlled by the owner of the replaceable power battery (battery leasing organization), if the second controller executes a random number algorithm to generate a random number as the salt value information, then the owner of the replaceable power battery (battery leasing organization) cannot control the generation process of the salt value information, which may create a backdoor for the owner of the replaceable power battery (battery leasing organization).

[0059] In this embodiment, the second controller can call the individual cell temperature sensors to detect the operating temperature value of each battery cell to generate salt information.

[0060] Specifically, refer to Figure 5 You can set the number of individual temperature sensors equal to the bit length of the salt information to be generated. For example, to generate a 128-bit / 256-bit salt information, you can set 128 / 256 individual temperature sensors to detect the operating temperature of the corresponding 128 / 256 battery cells, thereby detecting temp1, temp2, temp3... temp 128 / temp 256 128 / 256 working temperature values.

[0061] In this embodiment, multiple operating temperature values ​​(temp1, temp2, temp3...temp) 128 / temp 256 The combination of these parameters is generally related to the operating phase of the replaceable power battery. For example, a replaceable power battery may have different operating temperature values ​​(temp1, temp2, temp3... temp1) in different operating phases such as cold start, stable operation, and low charge. 128 / temp 256 The combination of these parameters is used. Since the number of operating stages of a replaceable power battery is limited, the second controller can collect the corresponding operating temperature values ​​(temp1, temp2, temp3…temp) at each operating stage of the replaceable power battery. 128 / temp 256 The combination of ) and, for a specific working stage, the working temperature values ​​(temp1, temp2, temp3...temp 128 / temp 256The combination of these factors is related to the position of the battery cells inside the replaceable power battery and the individual differences between the battery cells. These factors can be adjusted by the owner of the replaceable power battery (battery leasing organization) and are not detectable from the outside without damaging the casing. Therefore, in this embodiment, the second controller calls the individual cell temperature sensors to detect the operating temperature values ​​of each battery cell (temp1, temp2, temp3...temp1). 128 / temp 256 The combination of these factors is controllable for the owners of the replaceable power battery (battery leasing agencies), but random for others.

[0062] In this embodiment, for each group of working temperature values ​​(temp1, temp2, temp3...temp... 128 / temp 256 The combination of the two controllers allows the second controller to discretize each working temperature value, thereby converting continuous working temperature values ​​such as temp1 into discrete values ​​such as 0 and 1.

[0063] For example, the second controller can perform discretization through threshold judgment. Specifically, the second controller can set a temperature threshold temp. threshold And through the formula

[0064] This is used to calculate the discrete values ​​corresponding to the operating temperature value temp. Thus, for each group of operating temperature values ​​(temp1, temp2, temp3...temp... 128 / temp 256 The combination of these two controllers allows the second controller to discretize each operating temperature value, thereby converting operating temperature value temp1 into a corresponding discrete value (0 or 1), operating temperature value temp2 into a corresponding discrete value (0 or 1), and so on, to operating temperature value temp... 128 / temp 256 Convert it to the corresponding discrete value (0 or 1) to obtain the 128-bit / 256-bit salt information.

[0065] Due to the operating temperature values ​​of each battery cell (temp1, temp2, temp3...temp) 128 / temp 256 The combination of these factors is controllable for the owner of the replaceable power battery (battery leasing organization) but random for other aspects. Therefore, the salt value information obtained by discretizing the operating temperature value is also controllable for the owner of the replaceable power battery (battery leasing organization) but random for other aspects.

[0066] After obtaining the salt value information (salt) through step S301B, the second controller can execute step S302B to add the salt value information to the battery fault snapshot information to obtain the salted information. Specifically, the second controller can add the salt value information to a specific location (e.g., the end) of the battery fault snapshot information, so that the battery fault snapshot information and the salted information together constitute the salted information.

[0067] In step S303B, the second controller can execute data digest algorithms such as SHA-256 to process the salted information to obtain the second digest information digest2.

[0068] In step S304B, the second controller can execute a public-key encryption algorithm such as RSA-2048 to generate a second public key public2 and a corresponding second private key private2. The second public key public2 is public (can be sent externally), while the second private key private2 is confidential (only stored by the second controller). The second controller uses the second private key private2 to encrypt the second digest information digest2, thereby obtaining the second signature information signature2.

[0069] Reference Figure 5 After obtaining the second signature information signature2, the second controller can execute step S4B to store the second signature information signature2 locally, and execute step S5B to send the second signature information signature2 to the first controller in the vehicle system. The first controller can also send the second signature information signature2 to the cloud server for backup.

[0070] In this embodiment, the principle of executing steps S3B-S5B is as follows: By executing steps S3B-S5B, the battery fault snapshot information can be sent to the second controller as soon as it is generated. The second controller then digitally signs the salted information containing the battery fault snapshot information to obtain the second signature information, signature2. If any party needs to call the battery fault snapshot information for fault analysis of the replaceable power battery, the battery fault snapshot information can be verified, thus making the battery fault snapshot information non-repudiable to the owner of the replaceable power battery (battery leasing institution). For example, any party can use the second public key, public2, to decrypt the second signature information, signature2. If the same data as the second digest information, digest2, is obtained, it indicates that the currently processed salted information does indeed contain the battery fault snapshot information previously received by the second controller; otherwise, it does not. The detection result is convincing.

[0071] In this embodiment, the principle of executing steps S301B-S304B during steps S3B-S5B is as follows: Salt information (salt) is generated by the second controller, and salted information (salted) is obtained by salting the battery fault snapshot information. Since the salt information (salt) is controllable for the owner of the replaceable power battery (battery leasing organization) and undetectable and random for other parties, it improves the security of obtaining the second signature information (signature2) through digital signature by the owner of the replaceable power battery (battery leasing organization), thereby protecting the legitimate rights and interests of the owner of the replaceable power battery (battery leasing organization). It also enhances the uniqueness of the second signature information (signature2), making it more reliable for the owner of the replaceable power battery (battery leasing organization). The second controller, by calling the temperature sensors of each individual cell to detect the operating temperature value and generate salt information, can further improve the controllability of the owner (battery leasing organization) of the replaceable power battery over the generated salt information (for example, the salt information can be adjusted by adjusting the operating parameters and installation position of each individual cell when maintaining the removed replaceable power battery). It can also further improve the undetectability and randomness of the salt information to other parties (for example, information related to the salt information cannot be obtained without damaging the casing, and the salt information does not originate from the second controller, thus avoiding backdoors in the second controller), thereby protecting the legitimate rights and interests of the owner (battery leasing organization) of the replaceable power battery.

[0072] A computer program that executes the information processing method for the replaceable automotive power battery in this embodiment can be written into a computer device or storage medium. When the computer program is read out and run, the information processing method for the replaceable automotive power battery and / or the information processing method for the replaceable automotive power battery in this embodiment can be executed, thereby achieving the same technical effect as the information processing method for the replaceable automotive power battery and / or the information processing method for the replaceable automotive power battery in the embodiment.

[0073] It should be noted that, unless otherwise specified, when a feature is referred to as "fixed" or "connected" to another feature, it can be directly fixed or connected to the other feature, or indirectly fixed or connected to the other feature. Furthermore, the descriptions of "upper," "lower," "left," and "right" used in this disclosure are only relative to the relative positional relationships of the components of this disclosure in the accompanying drawings. The singular forms "a," "an," and "the" used in this disclosure are also intended to include the plural forms, unless the context clearly indicates otherwise. Moreover, unless otherwise defined, all technical and scientific terms used in this embodiment have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this embodiment specification is only for describing particular embodiments and is not intended to limit the invention. The term "and / or" as used in this embodiment includes any combination of one or more of the associated listed items.

[0074] It should be understood that although the terms first, second, third, etc., may be used to describe various elements in this disclosure, these elements should not be limited to these terms. These terms are only used to distinguish elements of the same type from each other. For example, a first element may also be referred to as a second element without departing from the scope of this disclosure, and similarly, a second element may also be referred to as a first element. The use of any and all instances or exemplary language (“e.g.,” “such as,” etc.) provided in this embodiment is intended only to better illustrate embodiments of the invention and, unless otherwise required, does not impose a limitation on the scope of the invention.

[0075] It should be recognized that embodiments of the present invention can be implemented or carried out by computer hardware, a combination of hardware and software, or by computer instructions stored in a non-transitory computer-readable storage medium. The method can be implemented using standard programming techniques—including a non-transitory computer-readable storage medium configured with a computer program, wherein such a storage medium causes the computer to operate in a specific and predefined manner—according to the methods and drawings described in the specific embodiments. Each program can be implemented in a high-level procedural or object-oriented programming language to communicate with the computer system. However, if desired, the program can be implemented in assembly or machine language. In any case, the language can be a compiled or interpreted language. Furthermore, for this purpose, the program can run on a programmed application-specific integrated circuit (ASIC).

[0076] Furthermore, the procedures described in this embodiment can be performed in any suitable order unless otherwise indicated by this embodiment or otherwise obviously contradict the context. The procedures (or variations and / or combinations thereof) described in this embodiment can be executed under the control of one or more computer systems configured with executable instructions, and can be implemented by hardware or a combination thereof as code (e.g., executable instructions, one or more computer programs, or one or more applications) that commonly executes on one or more processors. A computer program includes a plurality of instructions executable by one or more processors.

[0077] Furthermore, the method can be implemented in any suitable type of computing platform, including but not limited to personal computers, minicomputers, mainframes, workstations, networked or distributed computing environments, standalone or integrated computer platforms, or in communication with charged particle tools or other imaging devices, etc. Aspects of the invention can be implemented as machine-readable code stored on a non-transitory storage medium or device, whether removable or integrated into a computing platform, such as a hard disk, optical read and / or write storage medium, RAM, ROM, etc., such that it is readable by a programmable computer, and when the storage medium or device is read by the computer, it can be used to configure and operate the computer to perform the processes described herein. Furthermore, the machine-readable code, or portions thereof, can be transmitted via wired or wireless networks. The invention of this embodiment includes these and other different types of non-transitory computer-readable storage media when such media comprises instructions or programs that implement the steps above in conjunction with a microprocessor or other data processor. When programmed according to the methods and techniques of the invention, the invention also includes the computer itself.

[0078] A computer program can be applied to input data to perform the functions of this embodiment, thereby transforming the input data to generate output data stored in non-volatile memory. The output information can also be applied to one or more output devices, such as a display. In a preferred embodiment of the invention, the transformed data represents physical and tangible objects, including specific visual depictions of physical and tangible objects generated on the display.

[0079] The above are merely preferred embodiments of the present invention. The present invention is not limited to the above-described embodiments. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention, as long as they achieve the technical effects of the present invention by the same means, should be included within the scope of protection of the present invention. Within the scope of protection of the present invention, the technical solutions and / or implementation methods can have various modifications and variations.

Claims

1. An information processing method for a replaceable automotive power battery, applied to a vehicle body system, characterized by, The vehicle body system comprises a first controller and a sensor group comprising at least one sensor, and is configured to carry a replaceable power battery and to be powered by the replaceable power battery; The information processing method of the replaceable power battery comprises the following steps: detecting a failure risk event of the replaceable power battery; in response to the failure risk event, triggering the sensor group to collect data and obtain multi-source data; the detection object of the sensor group comprises the replaceable power battery; generating battery failure snapshot information according to the multi-source data.

2. The information processing method of a replaceable automotive power battery according to claim 1, characterized by, The sensor group comprises an environment sensor, a vehicle body sensor and a battery sensor, the detection object of the environment sensor is the environment in which the vehicle body system is located, the detection object of the vehicle body sensor is the vehicle body system, and the detection object of the battery sensor is the replaceable power battery; The triggering of the sensor group to collect data and obtain multi-source data comprises the following steps: triggering the environment sensor to collect data and obtain environment data; triggering the vehicle body sensor to collect data and obtain vehicle body data; triggering the battery sensor to collect data and obtain battery data; The multi-source data comprises the environment data, the vehicle body data and the battery data.

3. The information processing method of the replaceable automotive power battery according to claim 2, characterized by, The data collected by the sensor group comprises performance parameters and optical images.

4. The information processing method of a replaceable automotive power battery according to any one of claims 1 to 3, characterized by, The generation of the battery failure snapshot information according to the multi-source data comprises: generating a user key; encrypting the multi-source data using the user key as plaintext information; the ciphertext information obtained by encryption is used as the battery failure snapshot information.

5. The information processing method of the replaceable automotive power battery according to claim 4, characterized by, The vehicle body system further comprises an in-vehicle communication module and a wireless communication module; The information processing method of the replaceable power battery executed by the first controller further comprises the following steps: digitally signing the battery failure snapshot information to obtain first signature information; calling the in-vehicle communication module to send the battery failure snapshot information to the replaceable power battery; calling the wireless communication module to send the first signature information, the user key and the battery failure snapshot information to the cloud.

6. A method for processing information of a replaceable automotive traction battery, applied to the replaceable traction battery according to any one of claims 1-5, characterized in that, The replaceable power battery comprises a second controller and a plurality of battery monomers, and the battery monomers are configured to provide power supply to the vehicle body system; The information processing method of the replaceable power battery executed by the second controller comprises the following steps: receiving the battery failure snapshot information sent by the vehicle body system; storing the battery failure snapshot information locally.

7. The information processing method of the replaceable automotive power battery according to claim 6, characterized by, The information processing method of the replaceable power battery executed by the second controller further comprises the following steps: digitally signing the battery failure snapshot information to obtain second signature information; storing the second signature information locally; sending the second signature information to the first controller in the vehicle body system.

8. The information processing method of the replaceable automotive power battery according to claim 7, characterized by, The digitally signing of the battery failure snapshot information to obtain second signature information comprises the following steps: obtaining salt value information; add the salt value information to the battery fault snapshot information to obtain salted information; process the salted information using a data digest algorithm to obtain second digest information; encrypt the second digest information using a second private key in a public key encryption algorithm to obtain the second signature information.

9. The information processing method of the replaceable automotive power battery according to claim 8, characterized by, The replaceable power battery further comprises a shell and a plurality of single cell temperature sensors, each of the battery single cells and each of the single cell temperature sensors are packaged inside the shell, the number of the single cell temperature sensors is equal to or less than the number of the battery single cells, and each of the single cell temperature sensors is used for detecting the working temperature of a corresponding one of the battery single cells. The method for obtaining the salt value information comprises the following steps: detecting the working stage of the replaceable power battery; when the replaceable power battery is stable at a specific working stage, calling each of the single cell temperature sensors to detect a corresponding one of the plurality of battery single cells to obtain a plurality of working temperature values; discretizing each of the working temperature values to obtain a plurality of discrete values; composing the salt value information with each of the discrete values.

10. An automobile characterized by comprising: The automobile comprises the vehicle body system in the information processing method of the replaceable automobile power battery according to any one of claims 1-5 and / or the replaceable power battery in the information processing method of the replaceable automobile power battery according to any one of claims 6-9.

Images