Battery management system, management method thereof, storage medium, electronic device, and program

Abstract

The application discloses a battery management system and a management method thereof, a storage medium, an electronic device and a program, relates to the technical field of battery management systems, and comprises a data acquisition device and a controller, wherein the data acquisition device is electrically connected with the controller; wherein the data acquisition device is used for acquiring a plurality of key parameters of different battery cells in a battery pack; the controller is used for calculating the difference between the actual value corresponding to the plurality of key parameters and a preset parameter threshold value to obtain a plurality of difference values; alarm information corresponding to different key parameters is determined based on the plurality of difference values, and the alarm information is comprehensively processed through multi-dimensional judgment logic to obtain a total weight value; and the running state of the battery management system is controlled and managed through the total weight value. By adopting the technical scheme, the technical problem that the battery management system cannot effectively distinguish the nature of a fault and is prone to false reset when encountering a serious fault is solved.

Description

Technical Field

[0001] This application relates to the technical field of battery management systems, and more specifically, to a battery management system and its management method, storage medium, electronic device, and program. Background Technology

[0002] Currently, the Battery Management System (BMS) is increasingly important as a core component for ensuring battery safety and optimizing performance. The BMS not only monitors the battery's operating state but also balances the state of charge of each cell within the battery pack, preventing battery damage caused by overcharging or over-discharging and ensuring stable system operation. However, most BMSs, when detecting a serious fault, primarily take the action of shutting down the system—a temporary safety measure designed to immediately stop the battery system's operation and prevent the fault from worsening. However, the shutdown state can be easily reset automatically or manually. This mechanism lacks in-depth judgment of the fault's nature and cannot effectively distinguish whether the fault is caused by transient interference or stems from permanent damage to the battery hardware. Therefore, in cases where fault troubleshooting is insufficient or the cause of the fault is unclear, the battery management system may be accidentally reset and restarted, creating a safety hazard, especially for high-risk faults such as thermal runaway, which could lead to even more serious accidents. Furthermore, existing BMS alarm mechanisms are often one-dimensional, triggering alarms based on the exceeding of a certain parameter threshold, ignoring the complex background and interrelationships of fault occurrences. This can lead to unnecessary downtime or delayed response to genuine emergencies. Therefore, related technologies suffer from technical problems such as the inability of battery management systems to effectively distinguish the nature of faults when encountering serious malfunctions, and the susceptibility to false resets.

[0003] There is currently no effective solution to the technical problem that battery management systems cannot effectively distinguish the nature of faults when encountering serious malfunctions and are prone to false resets. Summary of the Invention

[0004] This application provides a battery management system and its management method, storage medium, electronic device and program, to at least solve the technical problem in the related art that the battery management system cannot effectively distinguish the nature of the fault when encountering a serious fault, and is prone to false reset.

[0005] According to one embodiment of this application, a battery management system is provided, including: a data acquisition device and a controller, wherein the data acquisition device is electrically connected to the controller; wherein the data acquisition device is used to acquire multiple key parameters of different cells in a battery pack, wherein the multiple key parameters include at least one of the following: cell operating voltage, cell operating temperature, total voltage of the battery cluster containing the cell, total current of the battery cluster containing the cell, and insulation resistance of the battery cluster containing the cell; the controller is used to calculate the difference between the actual value corresponding to the multiple key parameters and a preset parameter threshold to obtain multiple differences; based on the multiple differences, alarm information corresponding to different key parameters is determined, and the alarm information is comprehensively processed through multi-dimensional judgment logic to obtain a total weight value; the operating state of the battery management system is controlled by the total weight value.

[0006] According to another aspect of the embodiments of this application, a management method for a battery management system is also provided, comprising: an acquisition module, configured to, upon acquiring multiple key parameters of different battery cells, calculate the difference between the actual values ​​corresponding to the multiple key parameters and preset parameter thresholds to obtain multiple differences; wherein, the multiple key parameters include at least one of the following: battery cell operating voltage, battery cell operating temperature, total voltage of the battery cluster in which the battery cell is located, total current of the battery cluster in which the battery cell is located, and insulation resistance of the battery cluster in which the battery cell is located; determining alarm information corresponding to different key parameters based on the multiple differences, and comprehensively processing the alarm information through multi-dimensional judgment logic to obtain a total weight value; and controlling and managing the operating state of the battery management system through the total weight value.

[0007] According to another aspect of the embodiments of this application, a computer-readable storage medium is also provided, wherein a computer program is stored in the computer-readable storage medium, and the computer program is configured to execute the management method of the battery management system described above when it is run.

[0008] According to another aspect of the embodiments of this application, an electronic device is also provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the management method of the battery management system described above through the computer program.

[0009] According to another aspect of the embodiments of this application, a computer program product is also provided, including a computer program that, when executed by a processor, implements the management method of the battery management system described above.

[0010] In this embodiment, multiple key parameters, including voltage, temperature, total battery cluster voltage, total current, and insulation resistance, of different cells in the battery pack are continuously monitored and acquired. The actual values ​​of these key parameters are compared with preset safety thresholds to calculate the difference for each parameter, and then the corresponding alarm information is determined based on the magnitude of the difference. A multi-dimensional fusion strategy is used to comprehensively evaluate the alarm information. This strategy considers not only the degree of abnormality of individual parameters but also the spatial location of the cells, system load status, real-time environmental conditions, and the possible correlations between various anomalies, ultimately deriving a total weight value representing the overall risk level. The operating state of the battery management system is dynamically adjusted based on the magnitude of the obtained total weight value. This ensures that the battery system will not suffer further damage due to misoperation when encountering potential permanent hardware damage. By adopting the above technical solution, the technical problem of the battery management system being unable to effectively distinguish the nature of faults and prone to accidental resets when encountering serious faults is solved. It achieves the use of system locks to avoid major safety risks caused by software faults or misoperation, while enhancing the accuracy and reliability of fault diagnosis. Attached Figure Description

[0011] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0012] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 This is a structural block diagram of a battery management system according to an embodiment of this application;

[0014] Figure 2 This is a flowchart illustrating the management method of a battery management system according to an embodiment of this application;

[0015] Figure 3 This is a schematic diagram of the management process of the battery management system according to an embodiment of this application. Detailed Implementation

[0016] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0017] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0018] The following appropriately discloses an embodiment of a battery according to this application. However, unnecessary detailed descriptions may be omitted. For example, detailed descriptions of well-known matters and repetitive descriptions of practically identical structures may be omitted. This is to avoid making the following description unnecessarily lengthy and to facilitate understanding by those skilled in the art. Furthermore, the following description is provided to enable those skilled in the art to fully understand this application and is not intended to limit the subject matter of the claims.

[0019] The battery in this application is a secondary battery, also known as a rechargeable battery or storage battery, which refers to a battery that can be used again after being discharged by recharging to activate the active materials.

[0020] Typically, a secondary battery includes an electrode assembly, an electrolyte, and an outer casing. The electrode assembly consists of a positive electrode, a negative electrode, and a separator. The electrode assembly and electrolyte are assembled inside the outer casing. During charging and discharging, active ions (such as lithium ions) move back and forth between the positive and negative electrodes, inserting and extracting. The separator, positioned between the positive and negative electrodes, primarily prevents short circuits while allowing active ions to pass through. The electrolyte, located between the positive and negative electrodes, mainly serves to conduct active ions.

[0021] A Battery Management System (BMS) is an electronic system used to monitor and manage battery packs (especially large battery packs composed of multiple cells, such as those in electric vehicles and energy storage systems). Its main functions include:

[0022] Battery status monitoring: Real-time monitoring of key parameters such as battery voltage, current, temperature, and state of charge to ensure that the battery operates within a safe range.

[0023] Balanced management: By controlling the charging and discharging process of each cell in the battery pack, the energy distribution among the cells is balanced, preventing overcharging and discharging of any part, thereby extending the overall lifespan of the battery pack.

[0024] Fault diagnosis and early warning: When abnormal conditions are detected, such as overheating, overcharging, over-discharging, short circuit, etc., the BMS can react quickly, issue alarm signals and take necessary protective measures, such as suspending charging and cutting off the circuit, to prevent battery damage or safety accidents.

[0025] Safety Management: During battery pack operation, the BMS implements various safety strategies, such as overcurrent protection, thermal runaway prevention, and battery status assessment, to ensure the safe operation of the battery pack.

[0026] Communication and Control: The BMS typically communicates with the vehicle controller, the central control unit of the energy storage system, or other external devices to provide battery status information and receive control commands from the outside, such as adjusting the charging rate and reporting battery health status.

[0027] Data recording and analysis: Record the battery pack's operating data for later analysis of battery performance, prediction of lifespan, and assessment of the overall system health.

[0028] Battery Management System (BMS) is an indispensable component in applications such as electric vehicles, energy storage systems, and portable electronic devices. It plays the role of a guardian of battery pack health, ensuring that the battery operates in optimal condition through sophisticated algorithms and sensor networks, while minimizing the occurrence of safety accidents.

[0029] Figure 1 This is a structural block diagram of a battery management system according to an embodiment of this application; as shown below. Figure 1 As shown, it includes:

[0030] Data acquisition device 12 and controller 14, wherein the data acquisition device 12 and the controller 14 are electrically connected;

[0031] The data acquisition device 12 is used to acquire multiple key parameters of different cells in the battery pack. The multiple key parameters include at least one of the following: cell operating voltage, cell operating temperature, total voltage of the battery cluster in which the cell is located, total current of the battery cluster in which the cell is located, and insulation resistance of the battery cluster in which the cell is located.

[0032] The controller 14 is used to calculate the difference between the actual value of the multiple key parameters and the preset parameter threshold to obtain multiple differences; based on the multiple differences, it determines the alarm information corresponding to different key parameters, and performs comprehensive processing on the alarm information through multi-dimensional judgment logic to obtain a total weight value; and controls the operating status of the battery management system through the total weight value.

[0033] The battery management system continuously monitors and acquires multiple key parameters in the battery pack, including voltage, temperature, total battery cluster voltage, total current, and insulation resistance. The real-time values ​​of these key parameters are compared with preset safety thresholds to calculate the difference for each parameter, and then the corresponding alarm information is determined based on the magnitude of the difference. A multi-dimensional fusion strategy comprehensively evaluates the alarm information. This strategy considers not only the degree of abnormality of individual parameters but also the spatial location of the battery cells, system load status, real-time environmental conditions, and the potential correlations between various anomalies, ultimately deriving a total weight value representing the overall risk level. The operating status of the battery management system is dynamically adjusted based on the magnitude of the obtained total weight value. This ensures that the battery system will not suffer further damage due to misoperation when encountering potential permanent hardware damage. This technical solution solves the technical problem that the battery management system cannot effectively distinguish the nature of faults when encountering serious malfunctions and is prone to accidental resets. It achieves the use of system locks to avoid major safety risks caused by software malfunctions or misoperation, while enhancing the accuracy and reliability of fault diagnosis.

[0034] In one exemplary embodiment, the controller further includes: an update module, configured to update the status flag of the system lock associated with the battery management system to "triggered" when the actual value corresponding to any key parameter is greater than the preset parameter threshold corresponding to any key parameter for the first time, wherein the system lock is used to perform a shutdown safety lock on the battery management system; and when the status flag is in the triggered state, allow the determination of the current battery management system to perform a system lock operation through multi-dimensional judgment logic.

[0035] In other words, the controller, through its update module, achieves a separation between the initial instantaneous triggering and logical initiation of the system lock mechanism: when any critical parameter, such as the real-time measured value of a single cell voltage, temperature, or cluster current, exceeds its preset hardware safety threshold for the first time, rather than merely reaching a severe alarm level, the update module immediately and forcibly sets the system lock status flag to triggered. This action is independent of subsequent complex weight calculations, ensuring that any extreme transient anomaly, even a single pulse exceeding the limit, can be captured and marked as a potentially high-risk event immediately. Subsequently, once the system lock status flag is set, it serves as an enabling condition for entering the system lock judgment. Only under this premise will the multi-dimensional fusion judgment logic be activated and initiate a comprehensive evaluation of alarm combinations, spatial distribution, environmental factors, etc., thereby avoiding the accidental initiation of high-overhead fusion calculations without an initial trigger signal. Through a two-tiered architecture of instantaneous hard triggering plus conditional soft judgment, zero-delay response to sudden dangerous events is guaranteed, while the isolation at the logical level prevents frequent false locks due to data fluctuations or noise, improving security while optimizing resource utilization efficiency.

[0036] In one exemplary embodiment, the controller further includes: a limiting module, configured to perform power limiting operations on different cells in the battery pack when the target value corresponding to the alarm information belongs to the value range corresponding to mild or moderate alarm information, and generate a first type of alarm information indicating that the battery management system has not entered a fault shutdown state; and a shutdown module, configured to perform a shutdown operation on different cells in the battery pack, including shutting down the energy storage converter and disconnecting the contactor and circuit breaker, when the target value corresponding to the alarm information belongs to the value range corresponding to severe alarm information, and generate a second type of alarm information indicating that the battery management system has entered a fault shutdown state.

[0037] Optionally, the controller achieves graded, layered, and precise control of battery pack fault response by setting a limiting module and a shutdown module: When the detected alarm parameters, such as voltage, temperature, or current, are within the range of mild or moderate alarm thresholds, the limiting module does not trigger system shutdown. Instead, it implements power limiting strategies for the associated cells within the battery pack, such as limiting charging / discharging current and reducing output power, to maintain partial system operation while ensuring safety. At the same time, it generates a first-type alarm message, clearly indicating that the system is still running but there is an anomaly that requires attention, to guide maintenance personnel in carrying out preventive maintenance. When the alarm parameters exceed the severe alarm threshold and enter the high-risk range, the shutdown module immediately initiates a high-priority safety response, instructing the energy storage converter to shut down through control signals, and simultaneously driving the physical isolation devices, contactors, and circuit breakers to forcibly disconnect, completely cutting off the energy path. At the same time, it generates a second-type alarm message, clearly indicating that the system has entered a fault shutdown state, clearly distinguishing it from mild / moderate alarms. It avoids unnecessary system interruptions caused by excessive intervention in low-risk anomalies, while ensuring physical-level isolation and zero-delay power-off in the event of serious failures that truly endanger safety, significantly improving the balance between system availability and security.

[0038] In one exemplary embodiment, the controller further includes: a first logic module, configured to determine basic dimension judgment logic data based on the factory parameters corresponding to different cells in the battery pack, wherein the basic dimension judgment logic data includes the alarm type corresponding to each of the multiple key parameters corresponding to different cells in the battery pack, and the target weight associated with the alarm information corresponding to each cell; a second logic module, configured to determine spatial dimension judgment logic data based on the installation space location corresponding to different cells in the battery pack, wherein the spatial dimension judgment logic data is used to record the adjustment type of different cells in the battery pack, and the first adjustment coefficient corresponding to the adjustment type; and a third logic module, configured to determine the spatial dimension judgment logic data based on the installation space location corresponding to different cells in the battery pack. The application scenario determines the load dimension judgment logic data, which is used to locate the load type corresponding to different cells in the battery pack, and the second adjustment coefficient corresponding to the load type; the fourth logic module is used to determine the combination dimension judgment logic data based on the historical test data corresponding to different cells in the battery pack, which is used to indicate the alarm combinations that often occur in different cells in the battery pack, and the superposition coefficient corresponding to the alarm combinations; the comprehensive logic module is used to summarize the basic dimension judgment logic data, spatial dimension judgment logic data, load dimension judgment logic data, and combination dimension judgment logic data to obtain multi-dimensional judgment logic for comprehensive processing of alarm information.

[0039] Optionally, the controller constructs a multi-dimensional adaptive judgment logic system for refined risk assessment of energy storage battery packs through five collaborative logic modules: The first logic module establishes a unique basic weight file for each cell based on its individual parameters at the factory, such as nominal capacity, internal resistance, and temperature characteristics, clarifying its initial risk weight under different alarm types, such as overvoltage, overtemperature, and overcurrent; The second logic module dynamically configures a space adjustment coefficient based on the physical installation position of the cell in the battery cluster, such as the edge or center, giving edge cells higher sensitivity, such as a sensitivity of 1.2, because edge cells have poorer heat dissipation and higher risk of heat accumulation; The third logic module automatically matches a load adjustment coefficient of 0.9~1.2 according to the actual operating load state of the system (light load / normal / heavy load). Under heavy load conditions, the system enhances judgment sensitivity to address the risk of accelerated thermal runaway. The fourth logic module identifies high-risk alarm combinations, such as "severe voltage anomaly + temperature anomaly," by mining historical operating data and fault modes, and presets a superposition coefficient for them. For example, a superposition coefficient of 2.0 enables intelligent identification of risk amplification. Finally, the integrated logic module unifies and merges the above four types of data: basic weights, spatial correction, load correction, and combined enhancement, to generate personalized multi-dimensional judgment logic applicable to the current battery pack state. This makes the system lock trigger no longer dependent on a fixed threshold, but based on real-time collaborative analysis of individual cell characteristics, spatial distribution, operating conditions, and historical risk patterns, significantly improving the system's accurate perception and intelligent decision-making capabilities for complex, multi-dimensional, and nonlinear risks.

[0040] In one exemplary embodiment, the controller further includes: a determination module, configured to determine the relationship between the total weight value and a preset weight reference value; if the relationship indicates that the total weight value is less than the preset weight reference value, determine that no system lock operation will be performed on the battery management system, and maintain the current operating state of the battery management system unchanged; if the relationship indicates that the total weight value is greater than or equal to the preset weight reference value, determine that the operating state of the battery management system will be updated to a locked state that prohibits any operation.

[0041] Optionally, the controller constructs a final decision-making closed loop for system lock triggering through a determination module: This module receives the total weight value calculated by multi-dimensional fusion logic in real time and compares it precisely with a preset, engineering-verified threshold, i.e., the "preset weight reference value", such as 4.5; when the total weight value is lower than the threshold, it indicates that although there is an anomaly in the current system, the risk has not yet accumulated to an uncontrollable level, and the system will maintain its original operating state, retaining only the original alarm prompts and power limiting measures to avoid unnecessary shutdowns due to over-response; once the total weight value reaches or exceeds the preset threshold, i.e., multiple risk dimensions have been superimposed to the critical safety boundary, the determination module immediately triggers a system lock decision command, forcibly switching the battery management system to a locked state that prohibits any operation, including blocking all host computer control commands, disabling firmware updates, locking contactor and circuit breaker control permissions, freezing parameter writing, and solidifying the state through hardware-level flag bits to ensure that the system cannot be restored to operation before authorized offline inspection and certification.

[0042] In an exemplary embodiment, the determining module further includes: a construction unit, configured to construct locking feedback information based on all key parameters and environmental conditions under the locked state, as well as the timestamp and locking reason corresponding to the locked state; and a storage unit, configured to send the locking feedback information to the authorized management object associated with the battery management system, and store the target state flag associated with the locking feedback information in a preset non-volatile memory.

[0043] Optionally, the determination module further integrates the construction unit and the storage unit to construct a complete evidence chain generation and persistence mechanism after the system is locked: When the system enters the locked state, the construction unit automatically collects and integrates all key operating parameters at the moment of the lock, such as the instantaneous values ​​of voltage, temperature, and current of each cell; environmental conditions, such as ambient temperature and humidity, and ventilation status; timestamps accurate to milliseconds; and the multi-dimensional weight composition and specific alarm combination path that trigger the lock, forming structured and traceable lock feedback information; this information not only includes what happened, but also records why it happened and under what conditions; subsequently, the storage unit sends the lock feedback information to the authorized management object associated with the battery management system through a secure communication channel, such as the manufacturer's remote platform or operation and maintenance authorization center, to realize real-time information reporting and responsibility linkage. At the same time, the system lock status flag bit strongly associated with this lock event and its complete context information are written into an independent, protected, tamper-proof dedicated non-volatile memory sector in the BMS to ensure that even if there is a power outage, restart, or software anomaly, the lock evidence is still physically solidified and cannot be deleted or forged.

[0044] In an exemplary embodiment, the determining module further includes: a detection unit, configured to detect whether a target cell causing the battery management system to enter a locked state exists when a lock release command is received from an authorized management object; a verification unit, configured to perform security verification on the lock release command when the target cell does not exist, and determine whether to clear the target status flag bit in the preset non-volatile memory based on the verification result; and a prompting unit, configured to send a target prompt message prohibiting unlocking to the authorized management object when the target cell exists.

[0045] Optionally, the determination module further constructs a secure unlocking closed-loop mechanism through the collaborative work of the detection unit, verification unit, and prompting unit: When an authorized management object sends an unlocking command, the detection unit first automatically compares historical system data to identify and locate the target faulty battery cell that triggered the system lock; if the target battery cell has been replaced or physically removed, i.e., does not exist, the verification unit initiates a high-security command verification process, including verifying the encrypted signature, device unique ID, timestamp, operator permissions, and encryption token. Only when all security parameters pass authentication is the system lock status flag stored in the dedicated non-volatile memory allowed to be cleared; conversely, if the detection unit confirms that the target faulty battery cell still exists in the system, i.e., has not been repaired, the prompting unit will immediately send a clear unlocking prohibition prompt message to the authorized personnel, forcibly terminating any illegal or incomplete repair restart attempts.

[0046] In an exemplary embodiment, the verification unit is further configured to clear the target status flag in the preset non-volatile memory and control the battery management system to restart when the verification result indicates that the lock release command has passed the security verification; and to prevent the clearing of the target status flag and generate an alarm message indicating a verification error when the verification result indicates that the lock release command has passed the security verification.

[0047] Optionally, the verification unit constructs a system lock release security control logic: When a lock release command is received from an authorized management object, the verification unit first performs high-strength security verification, including encrypted decryption, device ID matching, timestamp validity verification, operation permission authentication, and command integrity verification. If all verification items pass, the command is confirmed to be legal and valid. The verification unit immediately triggers a clearing operation to securely erase the system lock status flag stored in a dedicated non-volatile memory, and links the bootloader to load the application firmware normally on the next power-on, completing system restart and function recovery. Conversely, if any step in the verification process fails, such as key mismatch, command tampering, or invalid authorization, the verification unit will strictly prohibit the clearing of any flag and actively trigger a verification anomaly alarm. The reasons for failure, such as "invalid command signature" or "unauthorized device request," will be recorded in the system log area in the form of a high-priority log. At the same time, a clear anomaly prompt will be issued to the operation and maintenance personnel through the display screen, buzzer, or communication interface to ensure that any illegal or invalid unlocking attempts are intercepted, recorded, and traceable.

[0048] It should be noted that the bootloader is the first underlying firmware module to run after the system powers on. Its core function is to act as the first gatekeeper for system security, implementing hardware-level, unbypassable, and power-unaffected mandatory verification and control of the system lock state. When the BMS powers on, the bootloader first reads the system lock state flag from a dedicated, hardware-protected non-volatile memory sector and immediately performs an integrity check to ensure that the flag has not been tampered with or damaged. If the flag is detected as locked, the bootloader will directly skip the application layer program loading process and force the system into a locked state. At this time, the application layer software cannot start at all, and all user interfaces, communication protocols, and remote control commands are blocked, fundamentally eliminating the possibility of clearing the lock state through software upgrades, remote resets, or illegal commands. Only when authorized maintenance personnel send an encrypted and authenticated unlock command through a dedicated host computer, and the bootloader completes multiple security processes such as key verification, device identity verification, and operation log recording, will the bootloader allow the flag to be cleared and the application layer program to be loaded normally on the next reboot, restoring system operation.

[0049] In one exemplary embodiment, the controller is further configured to adjust the sub-weight of the target key parameter matching the alarm information to a preset value when the target value in the alarm information cannot be read; and to generate abnormal information of the battery pack when the number of occurrences of the target key parameter is greater than the preset number, and to send the abnormal information to the user of the battery pack.

[0050] Optionally, the controller employs a fault-tolerance mechanism when facing abnormal operating conditions such as missing critical parameter data or communication anomalies: When the system cannot normally read the target value corresponding to a certain alarm information, such as when the voltage / temperature value is invalid due to sensor disconnection, communication interference, or data frame loss, the controller will not simply ignore it or use the default zero value. Instead, it will automatically adjust the sub-weight of the critical parameter corresponding to the alarm to the preset highest safety weight according to the worst-case scenario, such as the corresponding severe alarm level, to ensure that the risk that may be underestimated due to missing data is fully amplified. At the same time, if multiple critical parameters, such as the voltage, temperature, or current of multiple cells, continue to have missing or abnormal data within the same or similar time period, and the number of occurrences exceeds the preset threshold, such as more than 3 cells having no valid readings at the same time, the controller will determine that there is a systemic sampling failure or hardware-level communication failure in the system. It will then generate high-priority battery pack abnormal information, clearly indicating multiple data loss points and a serious decrease in system reliability, and immediately push it to the user or maintenance unit of the battery pack through the communication bus, cloud platform, or local alarm terminal to trigger the manual intervention and troubleshooting process.

[0051] This embodiment provides a management method for a battery management system, such as... Figure 2 As shown, Figure 2 This is a flowchart illustrating a battery management system management method according to an embodiment of this application, including the following steps:

[0052] Step S202: After obtaining multiple key parameters of different cells, calculate the difference between the actual value of the multiple key parameters and the preset parameter threshold to obtain multiple differences; wherein, the multiple key parameters include at least one of the following: cell operating voltage, cell operating temperature, total voltage of the battery cluster where the cell is located, total current of the battery cluster where the cell is located, and insulation resistance of the battery cluster where the cell is located.

[0053] In other words, the battery management system (BMS) collects and records the operating data of each cell within the battery pack in real time. These key parameters include, but are not limited to, the cell's operating voltage, operating temperature, the total voltage and current of the battery cluster, and the insulation resistance of the entire system. Through a sensor network and data acquisition modules, the BMS obtains the real-time values ​​of these parameters. Once the real-time values ​​of these key parameters are collected, they are evaluated to see if they deviate from safe or expected operating ranges. To do this, the BMS compares the actual measured value of each parameter with a preset normal operating threshold, calculates the difference, and obtains multiple difference values. These differences reflect the degree of deviation between the current state of the cell or battery cluster and the ideal state, thus determining the battery's health status.

[0054] Step S204: Determine the alarm information corresponding to different key parameters based on multiple differences, and comprehensively process the alarm information through multi-dimensional judgment logic to obtain the total weight value;

[0055] Optionally, the calculated differences are analyzed, and corresponding alarm information is determined based on the degree to which they exceed the threshold, generally categorized as mild, moderate, and severe alarms. Furthermore, multi-dimensional judgment logic is used to comprehensively process the above alarm information. This ensures that the BMS does not only consider the anomaly of each parameter individually, but also simultaneously considers multiple factors such as the spatial location of the battery cells, system load status, external environmental conditions (e.g., temperature, humidity), and the interactions between parameter anomalies. Through various algorithms such as weighted averaging, conditional judgment, and threshold triggering, the values ​​of mild, moderate, and severe alarm information are transformed into a comprehensive weighted value that reflects the overall system risk.

[0056] Step S206: Control and manage the operating status of the battery management system through the total weight value.

[0057] Optionally, the BMS will decide how to adjust its own operating status to address the current system risks. If the total weight is low, indicating that the overall system risk is manageable, the BMS may issue warnings or impose minor operational restrictions, such as reporting alarm messages or limiting charging and discharging power. However, when the total weight reaches a preset high-risk threshold, the BMS will immediately implement more stringent safety measures, such as triggering a "system lock," completely stopping the battery system and entering a locked state until professional personnel complete fault diagnosis and repair, and unlock the system with an authorized unlocking command. This ensures that the system can only be restarted when safety is fully guaranteed. Through these control mechanisms, the safety of personnel and assets is protected in the event of a truly catastrophic failure.

[0058] Through the above steps, multiple key parameters, including voltage, temperature, total battery cluster voltage, total current, and insulation resistance, of different cells in the battery pack are continuously monitored and acquired. The real-time values ​​of these key parameters are compared with preset safety thresholds to calculate the difference for each parameter, and then the corresponding alarm information is determined based on the magnitude of the difference. A multi-dimensional fusion strategy is used to comprehensively evaluate the alarm information. This strategy considers not only the degree of abnormality of individual parameters but also the spatial location of the cells, system load status, real-time environmental conditions, and the possible correlations between various anomalies, ultimately deriving a total weight value representing the overall risk level. The battery management system's operating status is dynamically adjusted based on the magnitude of the obtained total weight value. This ensures that the battery system will not suffer further damage due to misoperation when encountering potential permanent hardware damage. This technical solution solves the technical problem that the battery management system cannot effectively distinguish the nature of faults when encountering serious malfunctions and is prone to accidental resets. It achieves the use of system locks to avoid major safety risks caused by software malfunctions or misoperation, while enhancing the accuracy and reliability of fault diagnosis.

[0059] In an exemplary embodiment, after obtaining multiple key parameters of different battery cells, the method calculates the difference between the actual values ​​corresponding to the multiple key parameters and preset parameter thresholds. After obtaining multiple differences, the method further includes: when the actual value corresponding to any key parameter is greater than the preset parameter threshold corresponding to any key parameter for the first time, updating the status flag of the system lock associated with the battery management system to "triggered", wherein the system lock is used to perform a shutdown safety lock on the battery management system; when the status flag is in the triggered state, it is allowed to judge the current battery management system to perform a system lock operation through multi-dimensional judgment logic.

[0060] In other words, when the actual operating value of any critical parameter exceeds its preset safety threshold for the first time, the system lock status flag within the battery management system will be immediately marked as triggered. This status flag acts as a hardware-level safety switch; once triggered, it instructs the battery management system to enter the highest level of safety lockout state, i.e., system lock mode. In system lock mode, the battery management system will execute a series of stringent safety measures, including but not limited to cutting off the power supply and stopping all charging and discharging activities, ensuring the battery pack is immediately in a safe, static state to prevent further deterioration of the fault. In particular, when the status flag has been marked as triggered, the battery management system will no longer rely on simple threshold judgments at the software level to react, but will instead employ more complex multi-dimensional judgment logic to conduct a comprehensive and in-depth evaluation of the current system state.

[0061] Optionally, the multi-dimensional judgment logic not only considers the anomaly of a single parameter, but also combines factors such as the relative position of the cell within the battery cluster, the actual system load, and external environmental conditions. It intelligently calculates a total weight value representing the overall risk level of the system. When the total weight value reaches or exceeds a preset threshold, a system lock operation will be executed. This means the battery management system will completely lock, cutting off all possible remote or local operation channels until professional maintenance personnel complete the fault diagnosis and send an unlock command via an authorized host computer tool. Only then can the battery management system unlock and resume normal operation.

[0062] In an exemplary embodiment, after determining the alarm information corresponding to different key parameters based on multiple differences, the method further includes: if the target value corresponding to the alarm information belongs to the value range corresponding to mild or moderate alarm information, determining that the power limiting operation is performed on different cells in the battery pack by the battery management system, and generating a first type of alarm information indicating that the battery management system has not entered a fault shutdown state; if the target value corresponding to the alarm information belongs to the value range corresponding to severe alarm information, determining that the energy storage converter is shut down and the contactor and circuit breaker are disconnected by the battery management system on different cells in the battery pack, and generating a second type of alarm information indicating that the battery management system has entered a fault shutdown state.

[0063] Understandably, when the differences in key parameters of different battery cells fall within the value range corresponding to mild or moderate alarm messages, the battery management system will take relatively mild but effective intervention measures. Specifically, it will limit the charging and discharging power of the battery pack. By limiting the operation, it will prevent the deterioration of the faulty cell's condition while maintaining the normal operation of the rest of the battery pack as much as possible. At the same time, the battery management system will also generate a first-type alarm message to notify the system maintenance personnel to pay attention to the health status of the relevant battery cells. However, at this time, the battery management system has not yet entered an emergency shutdown state.

[0064] Conversely, if the difference in critical parameters reaches or exceeds the threshold for severe alarm messages, the battery management system's response will quickly escalate to the highest level. In this situation, not only will the second type of alarm message be recorded, but a series of shutdown protection operations will also be immediately executed: on the one hand, a shutdown command will be sent to the energy storage converter via the communication bus, forcing the converter to stop energy exchange; on the other hand, the battery management system will directly control the contactors and circuit breakers to disconnect, physically isolating the cells from the external circuits, ensuring that even in the most dangerous scenarios, the battery pack can quickly disconnect from all power sources and enter a fault shutdown state, maximizing the safety of the system and personnel.

[0065] In an exemplary embodiment, before comprehensively processing the alarm information through multi-dimensional judgment logic to obtain the total weight value, the method further includes: determining basic dimension judgment logic data based on the factory parameters corresponding to different cells in the battery pack, wherein the basic dimension judgment logic data includes the alarm type corresponding to each of the multiple key parameters corresponding to different cells in the battery pack, and the target weight value corresponding to the alarm information corresponding to each cell; determining spatial dimension judgment logic data based on the installation space location corresponding to different cells in the battery pack, wherein the spatial dimension judgment logic data is used to record the adjustment type of different cells in the battery pack, and the first adjustment coefficient corresponding to the adjustment type; based on The application scenarios corresponding to different cells in the battery pack determine the load dimension judgment logic data. The load dimension judgment logic data is used to locate the load type corresponding to different cells in the battery pack, and the second adjustment coefficient corresponding to the load type. The combination dimension judgment logic data is determined based on the historical test data corresponding to different cells in the battery pack. The combination dimension judgment logic data is used to indicate the alarm combinations that often occur in different cells in the battery pack, and the superposition coefficient corresponding to the alarm combinations. The basic dimension judgment logic data, spatial dimension judgment logic data, load dimension judgment logic data, and combination dimension judgment logic data are summarized to obtain the multi-dimensional judgment logic used for comprehensive processing of alarm information.

[0066] Optionally, the battery management system employs sophisticated and comprehensive multi-dimensional judgment logic to ensure accurate and efficient risk assessment of the health status of different cells within the battery pack. First, the battery management system establishes basic dimensional judgment logic data based on the cell's factory parameters. This includes the cell's key parameters and their corresponding alarm types and weights, setting a benchmark for initial cell status assessment and ensuring each cell has a clear response strategy when facing anomalies. Second, considering that the cell's installation location within the battery pack may affect its operating performance and heat dissipation efficiency, the battery management system also develops spatial dimension judgment logic data based on different spatial locations. By adjusting the type and corresponding first adjustment coefficient, different degrees of weight adjustment can be applied to cells located at the edge or center to more accurately reflect the risk differences caused by location. Third, due to the diverse application scenarios of battery packs, such as electric vehicles and stationary energy storage, the load conditions faced by the cells also differ. Therefore, the battery management system determines load dimension judgment logic data based on the application scenario, i.e., setting a second adjustment coefficient according to different load types, such as light load and heavy load, to further refine the risk assessment and ensure that even alarms of the same type receive appropriate attention under different operating conditions. Furthermore, to address the potential for multiple alarm combinations within the battery pack, the battery management system (BMS) utilizes historical test data to construct a combined-dimensional judgment logic data set. This dataset records common alarm combination patterns and their corresponding superposition coefficients, enabling the identification and prediction of complex trends in cell status changes and allowing for timely measures to prevent systemic risks arising from alarm superposition. Finally, the BMS aggregates and integrates the judgment logic data from the four dimensions mentioned above, forming a multi-dimensional fusion decision framework. Within this framework, even when facing complex fault scenarios involving multiple cells, parameters, and scenarios, the calculation of the total weight allows for rapid and accurate identification of the risk level, enabling the implementation of corresponding protective measures to curb potential safety hazards at the source and ensure the long-term stability and safe operation of the battery system.

[0067] In an exemplary embodiment, controlling the operating state of the battery management system using the total weight value includes: determining the relationship between the total weight value and a preset weight reference value; if the relationship indicates that the total weight value is less than the preset weight reference value, determining that no system lock operation will be performed on the battery management system, and keeping the current operating state of the battery management system unchanged; if the relationship indicates that the total weight value is greater than or equal to the preset weight reference value, controlling the battery management system to update its operating state to a locked state that prohibits any operation.

[0068] Optionally, the total weight value can be compared with a preset weight reference value to determine whether the system lock function needs to be activated. The battery management system uses a built-in algorithm to determine whether the total weight value is lower than the preset weight reference value. If the total weight value is indeed lower than the reference value, it means that the currently detected risk is still within a controllable range and has not reached the level requiring emergency intervention. In this case, the battery management system will maintain its current operating state and continue to perform routine monitoring and management tasks, while allowing normal charging and discharging operations and other user interactions. However, when the total weight value reaches or exceeds the preset weight reference value, the battery management system will determine that the current battery system is in a high-risk state, which may involve hardware failure, thermal runaway risk, or other safety issues that may lead to serious consequences. At this time, the battery management system will take swift action to update its operating state to system lock mode. In system lock mode, the battery management system will prohibit any operation, including but not limited to stopping charging and discharging activities, setting output parameters to read-only state, and disconnecting hardware contactors and circuit breakers, to ensure that the entire battery system is in an absolutely safe and isolated state and prevent further spread of risk.

[0069] In an exemplary embodiment, after the battery management system updates its operating state to a locked state that prohibits any operation, the method further includes: constructing locking feedback information based on all key parameters and environmental conditions in the locked state, as well as the timestamp and locking reason corresponding to the locked state; sending the locking feedback information to the authorized management object associated with the battery management system; and storing the target state flag associated with the locking feedback information in a preset non-volatile memory.

[0070] In other words, when the battery management system (BMS) determines that a lockout is necessary to ensure safety based on the calculated total weight, its subsequent operations are not limited to simple shutdown or isolation, but extend to a comprehensive information recording and feedback mechanism. Once the BMS decides to execute a lockout, it immediately collects and integrates all current key parameters (including cell voltage, temperature, system current, insulation resistance, etc.), environmental conditions (such as temperature and humidity), timestamps, and the specific reasons for the system lockout, constructing a detailed lockout feedback information. This information constitutes a reference for the fault event, containing a comprehensive record of the battery system state at the time of lockout, which is crucial for subsequent fault investigation, responsibility determination, and system optimization. Subsequently, the BMS sends the lockout feedback information to its associated authorized management objects, which may include the monitoring platform of the energy storage system operator, the back-end server of the OEM (Original Equipment Manufacturer), or a third-party safety auditing agency. By transmitting detailed information about the lockout status in real time, the authorized management objects can quickly grasp the development of the situation and promptly initiate emergency response plans or arrange for professional maintenance teams to conduct on-site repairs. Simultaneously, the BMS also stores the target status flags contained in the lockout feedback information in a preset non-volatile memory. Non-volatile memory can retain data when power is off, which means that even after a restart, the locked state and related information will not be lost, ensuring the continuity and integrity of fault information.

[0071] In an exemplary embodiment, after storing the target status flag associated with the lock feedback information in a preset non-volatile memory, the management method further includes: upon receiving a lock release command from an authorized management object, detecting whether the target cell causing the battery management system to enter a locked state exists; if the target cell does not exist, performing a security verification on the lock release command and determining whether to clear the target status flag in the preset non-volatile memory based on the verification result; and if the target cell exists, sending a target prompt message prohibiting unlocking to the authorized management object.

[0072] Optionally, when an authorized management object issues a lock release command, the battery management system (BMS) first checks whether the target cell that initially entered the locked state has been removed or replaced from the battery pack. This verifies that the source of the fault has been properly handled, preventing a restart while the original faulty cell still exists, thus eliminating potential safety hazards. If the target cell is not present, indicating that the faulty cell has been removed or replaced, the BMS proceeds to the next step: security verification of the lock release command. Security verification includes confirming the source of the command to ensure it comes from a legitimate authorized management object, and decrypting and verifying the encrypted information in the command to guarantee the legitimacy and security of the unlocking operation. Once the command passes all security verification steps, the BMS clears the target status flag stored in the non-volatile memory. This is the hardware marker of the locked state; clearing the flag signifies officially unlocking the BMS. The BMS then performs a safe restart, gradually restoring to normal operating mode. However, if the target cell still exists, indicating that the potentially faulty cell has not been properly handled, the BMS will not execute the unlock command. Instead, it sends a warning message to the authorized management object, explicitly stating that there are still risky cells in the battery pack and that unlocking is not safe. This ensures that the battery management system will not restart until the fault is resolved, avoiding secondary damage caused by the recurrence of the fault. It also forces maintenance personnel to resolve the root cause before unlocking the battery management system, ensuring that the entire battery management system always operates in a safe battery state.

[0073] In an exemplary embodiment, determining whether to clear the target status flag in the preset non-volatile memory based on the verification result includes: if the verification result indicates that the lock release command has passed the security verification, clearing the target status flag in the preset non-volatile memory and controlling the battery management system to restart; if the verification result indicates that the lock release command has passed the security verification, prohibiting the clearing of the target status flag and generating an alarm message indicating a verification error.

[0074] Understandably, a strict, symmetrical binary decision-making mechanism is employed to verify the security results of the lock release command, ensuring that the release of the system lock is absolutely secure, traceable, and resistant to misoperation. Only when the verification results show that the lock release command has passed all security checks, including encrypted signature verification, device authentication, timestamp validity, and key matching, will the system execute the most critical clearing operation: clearing the target status flag stored in the preset non-volatile memory. This immediately triggers the BMS restart process, restoring the system from forced isolation to normal operation. Conversely, if any security verification fails, the system will immediately refuse to clear the flag. Even if the operator has physical access rights or issues a misdirected command, the system will remain locked, ensuring the bottom line of security that unlocking is impossible without authorization. Simultaneously, the system proactively generates a high-priority verification anomaly alarm message, including the reason for failure (e.g., key mismatch, timestamp exceeding limits, unauthorized device attempt), and the operation timestamp. This message is simultaneously recorded in an independent audit log and reported to the authorization management platform via the communication interface, thus forming a closed-loop system lock.

[0075] In an exemplary embodiment, after comprehensively processing the alarm information through multi-dimensional judgment logic, the management method further includes: when the target value in the alarm information cannot be read, adjusting the sub-weight of the target key parameter matching the alarm information to a preset value; when the number of occurrences of the target key parameter is greater than the preset number, generating abnormal information of the battery pack, and sending the abnormal information to the user of the battery pack.

[0076] Optionally, to enhance the robustness of the battery management system under uncertain environments such as data anomalies or communication interruptions, during the execution of multi-dimensional judgment logic, if the original alarm value of a key parameter cannot be read due to sensor failure, communication packet loss, or data corruption (e.g., missing temperature or voltage data for a cell), the system will automatically activate a conservative safety strategy. This involves forcibly replacing the sub-weight value corresponding to the missing parameter with a preset highest-risk value, such as the severity level weight of the alarm type. This ensures that risk assessment is performed according to the worst-case scenario even with incomplete information, preventing underestimation of system risks due to missing data. Simultaneously, when the system detects multiple key parameters within a unit of time, such as three or more cells showing unreadable data or abnormal null values, the system will determine it as a group data anomaly. This may indicate sensor network failure, communication bus interruption, or serious anomalies within the battery cluster, exceeding the scope of a single point of failure. At this point, the system will not only increase the overall weight to trigger a higher level of response, such as a forced system lock, but also actively generate abnormal information about the battery pack, including the type of abnormal parameters, the number of missing parameters, the time of occurrence, and possible failure modes, such as multi-channel acquisition failure. This information will be immediately pushed to the user or maintenance platform of the battery pack through the communication link to trigger a manual intervention mechanism, thereby turning latent data defects into explicit warnings.

[0077] To better understand the management process of the above-described battery management system, the implementation flow of the management method of the above-described battery management system will be described below in conjunction with optional embodiments, but this is not intended to limit the technical solution of the embodiments of this application.

[0078] This embodiment provides a management method for a battery management system. Figure 3 This is a schematic diagram of the management process of the battery management system according to an embodiment of this application, such as... Figure 3 As shown, the specific steps are as follows:

[0079] Step 1, Real-time data monitoring and storage: The BMS continuously collects and processes key parameters such as the voltage and temperature of each cell, the total voltage and current of the battery cluster, and the system insulation resistance, and cyclically stores the timestamped historical data in non-volatile memory.

[0080] Step 2: Standard three-level alarm judgment. Specifically, the monitoring data is compared with the preset alarm thresholds in the BMS. If the "mild" or "moderate" alarm threshold is reached, the system logs the alarm, reports the alarm, and performs operations such as power limiting. If the "critical" alarm threshold is reached, the system logs the alarm, reports the alarm, sends a shutdown command to the energy storage converter via the communication bus, and simultaneously controls the general-purpose I / O ports to drive the contactors and circuit breakers to disconnect, executing the fault power-off procedure. At this time, the system enters the "fault shutdown" state, but the program continues to run. After the fault parameters are restored and a fault reset command is received, the system can be directly restarted.

[0081] It should be noted that, in order to better understand the fault alarms, the fault alarms of the system lock involved in this application are first listed and displayed as shown in Table 1. Table 1 is the fault alarm table of the system lock.

[0082] Table 1

[0083]

[0084]

[0085] Step 3: System lock alarm judgment; that is, the BMS simultaneously runs an independent and higher-priority system lock judgment logic. When any individual cell voltage, total system current, or temperature of any individual cell momentarily exceeds its corresponding hardware safety threshold for the first time, the "system lock triggered" hard flag is immediately set. This is combined with a multi-dimensional fusion system lock judgment logic, which performs intelligent fusion calculations based on the following five dimensions: basic weight calculation, spatial dimension adjustment, load state adjustment, environmental state adjustment, and combined correlation superposition. If the total weight is ≥4.5, a system lock operation is executed.

[0086] Optionally, the above five dimensions can be shown in Table 2 below.

[0087] Table 2

[0088]

[0089] The weights corresponding to the above environmental condition adjustments are determined as follows: Temperature factor = 1.0 + |Ambient temperature - 25| / 50; Humidity factor = 1.0 + (Humidity - 50%) × 0.5; Comprehensive environmental factor = Temperature factor × Humidity factor; The humidity and ambient temperature are directly determined by the sensor detection battery.

[0090] The total weight is determined by the following formula: Total weight = Σ(basic weight × spatial adjustment × load adjustment × environmental adjustment) × combination superposition coefficient, where the system is locked if the total weight is ≥ 4.5.

[0091] Optionally, the other four dimensions mentioned above are determined through conversion using Tables 3 to 6 below. Table 3 corresponds to the calculation of basic alarm weights, Table 4 corresponds to spatial dimension adjustment, Table 5 corresponds to load status adjustment, and Table 6 corresponds to combined association and overlay.

[0092] Table 3

[0093]

[0094] Table 4

[0095]

[0096] Table 5

[0097]

[0098] Table 6

[0099]

[0100] Furthermore, during the determination of the total weight, if a basic weight is missing—for example, if the accurate level of an alarm cannot be determined—then the basic weight is calculated based on the highest level of that type of alarm. When adjustment factors such as space / environment are missing—for example, if parameters for adjustment, such as cell location or ambient temperature, cannot be obtained—the most unfavorable preset coefficient is used. When combined and superimposed coefficients cannot be processed—for example, if incomplete data makes it impossible to reliably determine the correlation between multiple alarms—then the application of the combined superimposed gain is abandoned. While this may underestimate the risk, it avoids erroneous superposition caused by data noise.

[0101] In summary, the system lock triggering mechanism is based on a multi-dimensional fusion strategy. Through intelligent fusion calculations of five dimensions—basic weights, spatial dimension adjustments, load state adjustments, environmental state adjustments, and combined correlation superposition—it achieves accurate quantitative assessment of system risks, ensuring that the system lock is triggered only when truly needed.

[0102] Step 4: Perform a system lock operation; log the changes, report alarms, and send a shutdown command to the energy storage converter via the communication bus. Simultaneously, control the general-purpose I / O ports to drive the contactors and circuit breakers to disconnect, executing the fault power-off procedure. The BMS display shows a red "System Lock" message and the specific fault code, the fault indicator light remains constantly on, and the buzzer sounds continuously. Set all operating parameters to "read-only" to prevent any modification via the host computer. Write the "System Lock" status flag to a dedicated non-volatile memory sector. Each time the system powers on, the bootloader will first read this flag; if it is locked, it will directly enter the locked state. Disable firmware update functionality via software blocking to prevent unauthorized clearing of the lock through software upgrades.

[0103] By storing the system in dedicated non-volatile memory sectors and using the Bootloader's priority verification logic, the "system lock" state becomes a hardware attribute that is independent of software and is not lost due to power failure, thus achieving a true system lock mode. Consequently, the authority to unlock the system lock is completely restricted to the Bootloader level, isolated from the application layer. No application-layer software can bypass the Bootloader's verification to illegally clear the lock state.

[0104] Optionally, the Bootloader is responsible for reading and verifying the system lock status during the system startup phase. The specific steps are as follows: After power-on, the Bootloader first reads the "system lock flag" from a specific sector of the protected Flash; the integrity of the flag is verified by CRC; if the flag is "1", the normal application loading process is skipped and the system directly enters the "system locked state"; when an unlock command is received from the host computer, the Bootloader participates in the command validity verification and clears the flag after it passes; after the clearing operation is completed, the application firmware can be loaded normally on the next startup.

[0105] Step 5: System lock alarm cleared; on-site personnel complete fault location and repair. Authorized maintenance personnel from the BMS manufacturer connect to the BMS using a dedicated host computer tool and send an encrypted command to unlock the system lock. The "system lock" flag is cleared, and the BMS is then restarted to restore normal operation.

[0106] It should be noted that the regular alarm in step 2 and the system lock determination in step 3 are independent and run in parallel. Once the system lock path is triggered, system control can be forcibly taken over, achieving a hard switch from recoverable mode to system locked mode.

[0107] Optionally, the ciphertext command generation and decryption mechanism includes: the BMS main control MCU and the authorized host computer are pre-configured with the same symmetric key at the factory. The key is stored in a protected area of ​​the MCU Flash and read protection is enabled to prevent unauthorized extraction. A plaintext command is constructed, containing a fixed command code, a unique device ID, the current timestamp, and a random number; the plaintext is encrypted using the pre-configured key to generate 16-byte ciphertext; the ciphertext is then sent to the BMS in frames via standard CAN messages. After receiving the complete CAN ciphertext, the MCU decrypts it using its local pre-configured key; it verifies the validity of the command code, device ID, timestamp, and nonce; if all verifications pass, the "system lock" flag is cleared and the operation log is recorded; otherwise, execution is refused.

[0108] Optionally, the standard procedure for fault location and repair involves on-site personnel first performing safety isolation, then exporting historical data and fault information recorded when the system lock was triggered via the BMS to accurately locate the root cause of the faulty cell or module. After replacing or repairing the faulty component, rigorous static and dynamic tests are performed, including insulation testing, capacity testing, and low-current charge-discharge cycles to observe consistency and ensure that the parameters of the new component match the system.

[0109] Optionally, the above decryption also involves third-party testing reports or certifications, which are mandatory for battery management systems in specific severe situations. The main scenarios include: 1) any lock-up involving thermal runaway risk or actual thermal safety events; 2) malfunctions causing significant property damage or personal injury; and 3) cases involving legal disputes or insurance claims. The third-party institution must possess nationally recognized testing qualifications, and its testing reports and certifications are necessary conditions for unlocking. This clarifies safety responsibility from a technical perspective and forms a legally valid chain of evidence.

[0110] In summary, the above implementation methods, utilizing the "system lockout mode," clearly inform all personnel that the system has experienced a fundamental hardware risk and requires offline handling, technically eliminating the possibility of blind trial and error and accidental resets. Secondly, the handling of "serious faults" is upgraded from being within the scope of maintenance personnel to an authorized process requiring intervention from the equipment provider or a third-party authoritative institution, ensuring that safety responsibilities are aligned with technical means. Furthermore, the use of tamper-proof lockout markers, multi-dimensional fusion calculation process records, historical data, and operation logs to form a complete chain of evidence greatly enhances the reliability and legal validity of incident tracing.

[0111] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods according to the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods of the various embodiments of this application.

[0112] Embodiments of this application also provide a storage medium including a stored program, wherein the program executes any of the methods described above when it is run.

[0113] Optionally, in this embodiment, the storage medium may be configured to store program code for performing the following steps:

[0114] S1, after obtaining multiple key parameters of different battery cells, calculate the difference between the actual value of the multiple key parameters and the preset parameter threshold to obtain multiple differences; wherein, the multiple key parameters include at least one of the following: battery cell operating voltage, battery cell operating temperature, total voltage of the battery cluster where the battery cell is located, total current of the battery cluster where the battery cell is located, and insulation resistance of the battery cluster where the battery cell is located.

[0115] S2, based on the multiple differences, determine the alarm information corresponding to different key parameters, and comprehensively process the alarm information through multi-dimensional judgment logic to obtain the total weight value;

[0116] S3, the operating status of the battery management system is controlled and managed through the total weight value.

[0117] Embodiments of this application also provide an electronic device including a memory and a processor, wherein the memory stores a computer program and the processor is configured to run the computer program to perform the steps in any of the above method embodiments.

[0118] Optionally, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor and the input / output device is connected to the processor.

[0119] Optionally, in this embodiment, the processor can be configured to perform the following steps via a computer program:

[0120] S1, after obtaining multiple key parameters of different battery cells, calculate the difference between the actual value of the multiple key parameters and the preset parameter threshold to obtain multiple differences; wherein, the multiple key parameters include at least one of the following: battery cell operating voltage, battery cell operating temperature, total voltage of the battery cluster where the battery cell is located, total current of the battery cluster where the battery cell is located, and insulation resistance of the battery cluster where the battery cell is located.

[0121] S2, based on the multiple differences, determine the alarm information corresponding to different key parameters, and comprehensively process the alarm information through multi-dimensional judgment logic to obtain the total weight value;

[0122] S3, the operating status of the battery management system is controlled and managed through the total weight value.

[0123] Optionally, in this embodiment, the storage medium may include, but is not limited to, various media capable of storing program code, such as USB flash drives, read-only memory (ROM), random access memory (RAM), portable hard drives, magnetic disks, or optical disks.

[0124] Optionally, embodiments of this application also provide a computer program product, which includes a computer program that, when executed by a processor, implements the steps in any of the above method embodiments.

[0125] Optionally, embodiments of this application also provide another computer program product, including a non-volatile computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps in any of the above method embodiments.

[0126] Optionally, embodiments of this application also provide a computer program that includes computer instructions stored in a computer-readable storage medium; a processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the steps in any of the above method embodiments.

[0127] Optionally, specific examples in this embodiment can refer to the examples described in the above embodiments and optional implementations, and will not be repeated here.

[0128] Obviously, those skilled in the art should understand that the modules or steps of this application described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby storing them in a storage device for execution by a computing device. In some cases, the steps shown or described can be performed in a different order than those presented here, or they can be fabricated as separate integrated circuits, or multiple modules or steps can be fabricated as a single integrated circuit. Thus, this application is not limited to any particular hardware and software combination.

[0129] The above are merely preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A battery management system, characterized in that, include: A data acquisition device and a controller, wherein the data acquisition device is electrically connected to the controller; The data acquisition device is used to acquire multiple key parameters of different cells in the battery pack. The multiple key parameters include at least one of the following: cell operating voltage, cell operating temperature, total voltage of the battery cluster containing the cell, total current of the battery cluster containing the cell, and insulation resistance of the battery cluster containing the cell. The controller is used to calculate the difference between the actual values ​​of the multiple key parameters and the preset parameter thresholds to obtain multiple differences; based on the multiple differences, it determines the alarm information corresponding to different key parameters, and performs comprehensive processing on the alarm information through multi-dimensional judgment logic to obtain a total weight value; and controls the operating status of the battery management system through the total weight value.

2. The battery management system according to claim 1, characterized in that, The controller further includes an update module, used to update the status flag of the system lock associated with the battery management system to "triggered" when the actual value corresponding to any key parameter is greater than the preset parameter threshold corresponding to any key parameter for the first time. The system lock is used to perform a shutdown safety lock on the battery management system. When the status flag is in the triggered state, it allows the determination of the current battery management system to perform a system lock operation through multi-dimensional judgment logic.

3. The battery management system according to claim 1, characterized in that, The controller also includes: The limiting module is used to perform power limiting operations on different cells in the battery pack when the target value corresponding to the alarm information belongs to the value range corresponding to the mild or moderate alarm information, and to generate a first type of alarm information that the battery management system has not entered the fault shutdown state. The shutdown module is used to perform shutdown operations on different cells in the battery pack when the target value corresponding to the alarm information belongs to the value range corresponding to the serious alarm information, and to disconnect the contactor and circuit breaker, and generate a second type of alarm information that the battery management system has entered a fault shutdown state.

4. The battery management system according to claim 1, characterized in that, The controller also includes: The first logic module is used to determine basic dimension judgment logic data based on the factory parameters corresponding to different cells in the battery pack. The basic dimension judgment logic data includes the alarm type corresponding to each key parameter among multiple key parameters corresponding to different cells in the battery pack, and the target weight associated with the alarm information corresponding to each cell. The second logic module is used to determine spatial dimension judgment logic data based on the installation space position of different cells in the battery pack. The spatial dimension judgment logic data is used to record the adjustment type of different cells in the battery pack and the first adjustment coefficient corresponding to the adjustment type. The third logic module is used to determine load dimension judgment logic data according to the application scenarios corresponding to different cells in the battery pack. The load dimension judgment logic data is used to locate the load type corresponding to different cells in the battery pack and the second adjustment coefficient corresponding to the load type. The fourth logic module is used to determine combination dimension judgment logic data based on historical test data corresponding to different cells in the battery pack. The combination dimension judgment logic data is used to indicate the alarm combinations that often occur in different cells in the battery pack, and the superposition coefficient corresponding to the alarm combinations. The comprehensive logic module is used to summarize the basic dimension judgment logic data, the spatial dimension judgment logic data, the load dimension judgment logic data, and the combined dimension judgment logic data to obtain multi-dimensional judgment logic for comprehensive processing of alarm information.

5. The battery management system according to claim 1, characterized in that, The controller further includes: a determination module, configured to determine the relationship between the total weight value and a preset weight reference value; if the relationship indicates that the total weight value is less than the preset weight reference value, determine that the system lock operation will not be performed on the battery management system, and maintain the current operating state of the battery management system unchanged; if the relationship indicates that the total weight value is greater than or equal to the preset weight reference value, determine that the operating state of the battery management system will be updated to a locked state that prohibits any operation.

6. The battery management system according to claim 5, characterized in that, The determining module further includes: The construction unit is used to construct locking feedback information based on all key parameters and environmental conditions in the locked state, as well as the timestamp and locking reason corresponding to the locked state; The storage unit is used to send the lock feedback information to the authorized management object associated with the battery management system, and to store the target status flag associated with the lock feedback information in a preset non-volatile memory.

7. The battery management system according to claim 6, characterized in that, The determining module further includes: The detection unit is used to detect whether the target cell that caused the battery management system to enter the locked state exists when the lock release command of the authorized management object is received. The verification unit is used to perform security verification on the lock release command when the target cell is not present, and to determine whether to clear the target status flag bit in the preset non-volatile memory based on the verification result. The notification unit is used to send a target notification message prohibiting unlocking to the authorized management object when the target battery cell is present.

8. The battery management system according to claim 7, characterized in that, The verification unit is further configured to, when the verification result indicates that the lock release command has passed the security verification, clear the target status flag bit in the preset non-volatile memory and control the battery management system to restart; when the verification result indicates that the lock release command has passed the security verification, prohibit the clearing of the target status flag bit and generate an alarm message indicating verification failure.

9. The battery management system according to claim 1, characterized in that, The controller is further configured to adjust the sub-weight of the target key parameter matching the alarm information to a preset value when the target value in the alarm information cannot be read; and to generate abnormal information of the battery pack when the number of occurrences of the target key parameter is greater than the preset number, and to send the abnormal information to the user of the battery pack.

10. A management method for a battery management system, characterized in that, include: Given multiple key parameters of different battery cells, calculate the difference between the actual value of the multiple key parameters and the preset parameter threshold to obtain multiple differences; wherein, the multiple key parameters include at least one of the following: battery cell operating voltage, battery cell operating temperature, total voltage of the battery cluster in which the battery cell is located, total current of the battery cluster in which the battery cell is located, and insulation resistance of the battery cluster in which the battery cell is located. Based on the multiple differences, alarm information corresponding to different key parameters is determined, and the alarm information is comprehensively processed through multi-dimensional judgment logic to obtain the total weight value. The overall weight is used to control and manage the operation of the battery management system.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored program, wherein the program, when executed, performs the management method of the battery management system of claim 10.

12. An electronic device comprising a memory and a processor, characterized in that, The memory stores a computer program, and the processor is configured to execute the management method of the battery management system of claim 10 through the computer program.

13. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the management method of the battery management system according to claim 10.

Images