A terminal control method and related product

Abstract

A terminal control method and related products, which relate to the technical field of intelligent terminals, the method comprises: obtaining a sensing result obtained by a sensor system. A control device determines whether to perform a protection operation for a first energy supply device based on the sensing result and a first threshold value, the first threshold value being used to indicate a threshold value corresponding to sensing data sensed by a plurality of sensors respectively, the first threshold value being related to a state of the first energy supply device and / or an environment in which the first energy supply device is located. The method reduces the problem of high false detection rate of a single sensor by fusing the sensing data sensed by the plurality of sensors, and improves the accuracy of detecting abnormal conditions of the first energy supply device. In addition, the control device determines the protection operation according to the first threshold value related to the state of the first energy supply device and / or the environment in which the first energy supply device is located, so that the first threshold value can dynamically adapt to different working conditions of the first energy supply device, avoiding missing detection or false detection caused by a fixed threshold value, thereby improving the accuracy and robustness of detection.

Description

Technical Field

[0001] This application relates to the field of smart terminal technology, and in particular to a terminal control method and related products. Background Technology

[0002] In the current market environment, to meet market demand, an increasing number of energy supply methods are coming into focus. Taking the vehicle sector as an example, electric vehicles, gasoline-powered vehicles, and hydrogen fuel cell vehicles have already emerged, with even more energy supply methods expected in the future. In this sector, the purchase volume of electric vehicles, which primarily use electricity, has approached or even surpassed that of gasoline-powered vehicles. However, electric vehicles still face a growing demand for longer driving ranges, leading to continuous improvements in the energy density of their power batteries. However, while high energy density brings advantages in driving range, it also poses certain safety challenges. If the battery encounters a collision, scrape, or other mechanical impact during vehicle operation or parking, causing damage to the internal structure of the battery pack, it can easily lead to thermal runaway, or even serious safety accidents such as fire or explosion.

[0003] To address this risk, existing management systems, such as power battery management systems, primarily perform monitoring duties, but their functions have limitations. For example, traditional power battery management systems focus on monitoring electrochemical parameters such as voltage, current, and temperature. However, for instantaneous mechanical impact events, such as collisions, their response is often delayed, making it difficult to accurately identify and handle the situation immediately after a collision. This results in problems such as low detection accuracy and poor adaptability. Summary of the Invention

[0004] This application provides a terminal control method and related products that can quickly and accurately identify abnormal conditions of the terminal's power supply equipment.

[0005] In a first aspect, embodiments of this application provide a terminal control method applied to a terminal, the terminal including a sensor system and a first power supply device, the sensor system being used to sense the first power supply device. This method can be executed, for example, by a computing device or computing system within the terminal, or by a module within the computing device or computing system, where the module may include software modules and / or hardware modules. Exemplarily, the computing device or computing system includes a controller, such as a mobile data center (MDC) (or autonomous driving domain controller), a domain controller (DC), an electronic control unit (ECU), etc., where the DC may include a motion domain controller (MDC), a vehicle domain controller (VDC), etc., or may include components within the controller, such as a chip. For ease of explanation, a control device is used as the execution subject here. This terminal control method includes, but is not limited to, the following steps: The control device acquires the sensing results obtained by the sensor system, which include sensing data from multiple sensors in the sensor system. Based on the sensing results and a first threshold, the control device determines whether to perform a protective operation for the first power supply device. The first threshold indicates the threshold corresponding to the sensing data from the multiple sensors, and is related to the state of the first power supply device and / or the environment in which the first power supply device is located. In the above embodiment, the control device reduces the high false detection rate of a single sensor by fusing sensing data from multiple sensors, thereby improving the accuracy of detecting abnormal conditions of the first power supply device. Furthermore, the control device determines the protective operation based on the first threshold related to the state of the first power supply device and / or the environment in which the first power supply device is located, allowing the first threshold to dynamically adapt to different operating conditions of the first power supply device, avoiding missed or false detections due to a fixed threshold, thus improving the accuracy and robustness of the detection.

[0006] The aforementioned terminals generally refer to equipment systems equipped with power supply devices and possessing a certain degree of mobility or independent operation capability, such as electric vehicles, electric ships, aircraft, energy storage containers, and also include special equipment such as mobile charging robots.

[0007] The first energy supply device refers to a device in the terminal that performs the function of energy storage and / or release. For example, the first energy supply device includes, but is not limited to, power battery packs, battery modules, cell arrays, fuel cell stacks, or supercapacitor packs.

[0008] The sensor system may include various sensing devices mounted on the terminal for collecting information on the status of the first power supply device itself and the surrounding environment. For example, the sensor system includes, but is not limited to, accelerometers, pressure membrane sensors, temperature sensors, gas sensors, and collision sensors. The sensing results output by the sensor system can be either raw physical quantities directly provided by each sensor (such as acceleration values, voltage values, temperature values, gas concentration values, etc.) or intermediate processing results after filtering, normalization, or feature extraction.

[0009] In one possible implementation, the sensor system includes an accelerometer and / or a pressure film sensor. The accelerometer detects whether a collision has occurred at the terminal, and the pressure film sensor is installed on the outer surface of the first power supply device to detect whether the first power supply device has been bumped. In the above implementation, the control device can detect overall collision events at the terminal using the accelerometer and detect localized bumps to the body of the first power supply device using the pressure film sensor installed on the outer surface of the first power supply device. The two sensors are complementary in terms of sensing range and response characteristics. By combining the sensing data from both, the control device can effectively distinguish between overall terminal collisions and isolated bumps to the bottom of the first power supply device, avoiding misjudging collisions occurring only at the terminal that do not involve the power supply device as damage to the power supply device, thus improving the accuracy and specificity of collision detection.

[0010] Optionally, the accelerometer is primarily used to sense motion changes at the overall terminal level. The accelerometer can be installed on the surface of the housing of the first power supply device, the terminal chassis, or a rigid structural component of the terminal, thereby capturing acceleration-related events such as collision deceleration and severe impacts encountered during the terminal's operation.

[0011] Optionally, the primary power supply device is a battery pack, and a pressure film sensor is installed on the surface of the lower housing of the battery pack or on the outer surface of the bottom protective plate of the battery pack. When an external object squeezes or impacts the bottom of the primary power supply device, the deformation sensed by the sensor is converted into a voltage signal output, thereby achieving high-sensitivity detection of localized impact events. The combined use of these two sensors can effectively distinguish between a vehicle-wide collision where the battery pack is not directly impacted and a separate impact to the bottom of the battery pack—two distinct events.

[0012] Based on the aforementioned acceleration sensor and / or pressure film sensor, the terminal may also be equipped with sensors for monitoring the internal operating conditions of the first power supply device, to further perceive the state of the first power supply device in the event of an accident. In one possible implementation, the sensor system further includes a detection sensor for detecting the state of the first power supply device. Exemplarily, the detection sensor includes a temperature sensor and / or a gas sensor. The temperature sensor and / or gas sensor may be disposed within the first power supply device. The combination of the temperature sensor and the gas sensor can effectively identify whether the first power supply device has suffered internal cell damage or thermal runaway precursors (such as temperature rise accompanied by carbon monoxide gas release) due to impact, providing a basis for subsequent risk assessment and protective operation decisions, and improving the control device's early warning capability for secondary accidents such as thermal runaway.

[0013] The temperature sensor measures the temperature distribution inside the first power supply device. For example, the temperature sensor can be a negative temperature coefficient (NTC) thermistor or thermocouple. Exemplarily, the temperature sensor can be placed at locations such as the cell terminals, busbars, and module housing of the first power supply device to obtain representative temperature data. The gas sensor detects the concentration of characteristic gases inside the first power supply device. For example, it can be an electrochemical carbon monoxide sensor, a metal oxide semiconductor hydrogen sensor, or a non-dispersive infrared carbon dioxide sensor to monitor the characteristic gas components released by the cell in the early stages of thermal runaway. Also located inside the first power supply device, it can sense changes in the cell's state, providing a basis for subsequent risk assessment. Especially in the application scenario of ternary lithium batteries, the decomposition of the separator during a micro-short circuit in the cell releases carbon monoxide. By monitoring the combined changes in concentration and temperature, early signs of thermal runaway can be identified earlier.

[0014] For the sensors in the above example, the acquisition of the sensing results obtained by the sensor system includes, but is not limited to, the following operations: The control device acquires first sensing data obtained by the accelerometer and / or pressure film sensor, the first sensing data being used to indicate whether a collision has occurred to the terminal and / or the first power supply device. When the first sensing data indicates that a collision has occurred to the terminal and / or the first power supply device, the control device acquires second sensing data obtained by the detection sensor. The control device employs a tiered wake-up strategy to acquire sensing data: the second sensing data from the detection sensor is acquired only when the first sensing data indicates a collision event. This method effectively reduces the overhead of acquiring and processing invalid data from the detection sensor, lowers the computational load and power consumption of the control device, and ensures that the internal status information of the first power supply device can be acquired promptly after a collision event for subsequent risk analysis.

[0015] Optionally, the first sensing data includes, but is not limited to, information such as acceleration amplitude, acceleration direction, and voltage pulse signal output by the pressure film sensor.

[0016] Optionally, the control device continuously or at a higher frequency monitors the first sensing data. Once the first sensing data indicates that a collision event has indeed occurred at the terminal and / or the first power supply equipment, the control device then triggers the collection of the second sensing data.

[0017] Optionally, the aforementioned detection sensors refer to sensors used to sense changes in the internal state of the first power supply device. Besides the temperature sensor and gas sensor mentioned above, these may also include voltage sensors, internal resistance detection circuits, etc. Correspondingly, the second sensing data refers to data obtained from these detection sensors that reflects the internal state of the first power supply device, such as the temperature value of each battery cell, carbon monoxide concentration value, hydrogen concentration value, and individual cell voltage value. Through this method of first coarse judgment and then fine inspection, the detection sensors do not need to be in a high-frequency sampling state continuously; they are only awakened to work when necessary, thereby effectively reducing the overall power consumption of the system.

[0018] To achieve precise location of the impact point, in one possible implementation, the sensor system includes multiple collision sensors, and the analysis results also include the impact area of ​​the first power supply device. In this implementation, the sensor system deploys multiple collision sensors in different areas of the first power supply device, and the control device can determine the impact area of ​​the first power supply device based on the response of each collision sensor. This impact area information not only helps users or after-sales personnel quickly locate the damaged part, but can also be used to guide precise handling of specific areas during protective operations (such as stopping only the power supply components within the impact area), avoiding accidental intervention in undamaged areas, improving the accuracy of protective operations and protecting the availability of the first power supply device.

[0019] The aforementioned collision sensor is used to indicate whether a local area of ​​the first power supply device has been impacted by an external force. For example, the collision sensor may be a contact vibration switch, an accelerometer array, a partition electrode of a pressure film sensor, or a strain gauge array.

[0020] The aforementioned collision area can be obtained based on the mapping relationship of the collision sensors or calculated based on the sensing data of the collision sensors.

[0021] In the above embodiments, the first threshold can be understood as a series of judgment thresholds used to compare with the sensed data to determine whether to initiate protective operations. For different types of sensors, corresponding threshold values ​​can be set separately. These thresholds can be specific numerical values, numerical ranges, or some kind of functional relationship. It should be noted that the first threshold in this embodiment is not a fixed constant, but a variable related to the state of the first power supply device and the environment in which the first power supply device is located. The state of the first power supply device includes various parameters reflecting its current operating condition, such as State of Charge (SOC), State of Health (SOH), current output power, current voltage, current internal resistance, and cumulative charge-discharge cycles. The environment in which the first power supply device is located refers to the physical conditions of the environment in which the device is located when mounted on the terminal, such as ambient temperature, ambient humidity, altitude, road surface smoothness, and the density of traffic participants around the terminal. By incorporating these dynamic factors into the threshold setting, subsequent protective decisions can better align with actual operating conditions.

[0022] In one possible implementation, the method further includes the following steps: the control device obtains environmental information about the environment in which the first power supply device is located based on the sensing results. When the environmental information indicates that the environment in which the first power supply device is located is a high-risk environment, the control device updates a first threshold based on the environmental information. In this implementation, the control device identifies the environment in which the first power supply device is located through the sensing results and actively updates the first threshold in high-risk environments, ensuring that the threshold sensitivity matches the level of environmental risk. For example, in bumpy road conditions or high-temperature exposure environments, the threshold of the corresponding sensor can be promptly increased or the triggering conditions adjusted to avoid false alarms caused by environmental interference, further improving the accuracy and scene adaptability of anomaly detection for the first power supply device.

[0023] Optionally, environmental information is a type of parameter or category label used to indicate the characteristics of the external conditions in which the first power supply device is located. The control device can acquire environmental information from various data sources, such as sensors in a sensor system or external sensing devices. For example, environmental information includes, but is not limited to, the type of the current road, traffic flow information, weather conditions, and road surface roughness index.

[0024] The aforementioned high-risk environment indicates an environment that is likely to cause non-collision-related abnormal fluctuations in the sensing data of the first power supply device, or that increases the probability of collision damage to the terminal or the first power supply device. When the control device determines that the first power supply device is currently in such a high-risk environment, it adaptively updates and adjusts the first threshold to match the judgment threshold with the current environment. For example, a preset score is given to the current environment, and the first threshold is adjusted based on the score. The more severe the environment, the higher the score, and correspondingly, the more sensitive the setting of the first threshold becomes.

[0025] In one possible implementation, a high-risk environment includes one or more of the following: the number of traffic participants in the environment exceeds a first quantity threshold; the environment road belongs to a target road type; and the environment weather is of the target weather type. For example, the target road type includes, but is not limited to, slippery surfaces, off-road surfaces, special road sections with continuously distributed speed bumps, and congested road sections. The target weather type includes, but is not limited to, hot summer weather, rainy or snowy weather, etc.

[0026] For example, when the target weather type includes high temperatures, the control device can increase a threshold related to the temperature within the first power supply device. For instance, the sensor system includes a temperature sensor located within the first power supply device. When the temperature in the environment where the terminal is located exceeds a certain threshold, the control device can increase the threshold related to this temperature sensor. Taking a vehicle as an example, after a vehicle has been parked in the open during summer, the surface temperature of the battery pack casing may reach 60°C or even higher, but the actual temperature of the internal battery cells may still be within the normal safe operating range. In this scenario, using a fixed threshold might trigger false alarms due to normal temperature rise caused by heat dissipation. Similarly, after a vehicle has been driven for a long time, the temperature within the first power supply device may also rise, and the temperature-related first threshold can also be adjusted.

[0027] For another example, still taking a vehicle as the terminal, when the target road type includes off-road surfaces, the control device can appropriately lower the impact judgment threshold of the acceleration sensor in the sensor system to make the vehicle more sensitive to impacts. Alternatively, the control device can lower the threshold related to the pressure film sensor in the sensor system to detect abnormal impact events that may cause the bottom of the battery to hit earlier. Or, it can raise the threshold related to the pressure film sensor in the sensor system to reduce unnecessary interference to the user and improve the accuracy of protective operations and user experience.

[0028] In one possible implementation, the first threshold includes second thresholds corresponding to sensing data obtained by a first sensor and at least one second sensor among a plurality of sensors, and a third threshold corresponding to the sensing data obtained by the first sensor. Based on the sensing results and the first threshold, it is determined whether to perform a protective operation for the first power supply device, including but not limited to the following operations: the control device determines whether to perform a protective operation for the first power supply device based on the sensing data obtained by the first sensor and at least one second sensor and the second threshold; or, the control device determines whether to perform a protective operation for the first power supply device based on the sensing data obtained by the first sensor and the third threshold. The third threshold is greater than or equal to the second threshold.

[0029] In the above embodiments, the control device achieves graded triggering by setting a second threshold for joint triggering by multiple sensors and a third threshold for independent triggering by a single sensor. A lower second threshold is used for joint triggering by multiple sensors, allowing for more sensitive detection of early abnormal signs of the first power supply device and reducing the risk of missed detections. A higher third threshold is used for independent triggering by a single sensor, enabling rapid response when a single sensor's data significantly exceeds the limit, while suppressing false triggering caused by transient interference from a single sensor. By distinguishing different triggering conditions, detection sensitivity and anti-interference capability are balanced, further improving the accuracy of identification and response efficiency to abnormal conditions of the first power supply device.

[0030] In one possible implementation, the first power supply device includes at least one battery cell, and the first threshold is also related to the battery cell's chemical system. For example, different battery cell chemical systems exhibit different temperature thresholds and characteristic gas release thresholds during thermal runaway. For instance, for ternary lithium-ion cells, the membrane decomposition initiation temperature is lower, while for lithium iron phosphate cells, the thermal stability is higher, and the corresponding temperature threshold and gas concentration threshold can be higher than those of ternary lithium-ion cells. The control device can determine the chemical system of the currently installed battery cell by reading the factory configuration information of the first power supply device or parameters stored in the battery management unit, and select the corresponding first threshold configuration group accordingly.

[0031] In one possible implementation, based on the sensing results and a first threshold, it is determined whether to perform protective operations for the first power supply device, including but not limited to the following operations: the control device obtains analysis results based on the sensing results and the first threshold, the analysis results including risk type and / or risk level. Based on the analysis results, the control device determines whether to perform protective operations for the first power supply device.

[0032] In the above implementation, the control device first performs a comprehensive analysis of the sensing results and the first threshold to obtain an analysis result that includes the risk type and / or risk level, and then makes a decision on protective actions based on this result. This approach divides the mapping process from sensing data to protective actions into two stages: risk assessment and decision-making. This ensures that the type and intensity of the protective action match the risk level of the analysis result, avoiding unnecessary restrictions or insufficient response caused by a one-size-fits-all approach. It achieves graded and refined safety handling, and improves the intelligence and robustness of the control device.

[0033] Optionally, the analysis results are structured information. For example, the analysis results may include fields such as risk type and / or risk level. Among them, the risk type is used to indicate the category of safety threat faced by the primary power supply equipment, which may include different categories such as bottom impact without damage, gas leakage due to seal failure, micro-short circuit of battery cell, precursor to thermal runaway, and thermal runaway that has occurred.

[0034] Risk level is used to indicate the severity of a security threat and is a quantitative expression. Risk level can be represented by levels such as no risk, minor warning, moderate warning, and severe warning, or by a value between 0 and 1, with higher values ​​indicating higher risk. After obtaining the analysis results, the control device further determines whether to perform protective actions, and if so, what level and type of protective action to perform, based on the risk type and / or risk level indicated in the analysis results.

[0035] To further improve the accuracy and intelligence of risk analysis, in one possible implementation, analysis results are obtained based on perception results and a first threshold, including but not limited to the following operations: the control device obtains time-series data based on the perception results. The control device inputs the time-series data into a first artificial intelligence model to obtain analysis results, wherein the first artificial intelligence model is a pre-trained model.

[0036] In the above embodiments, the control device can extract the correlation features of the perception data in the time dimension (such as the peak value, kurtosis and evolution trend of the impact signal) by constructing the perception results into time-series data and inputting it into a pre-trained first artificial intelligence model, thereby improving the accuracy of identifying information such as collision type, collision degree and probability of thermal runaway risk.

[0037] The first artificial intelligence model can be a Long Short-Term Memory (LSTM) network, a Gated Recurrent Unit (GRU) network, a Temporal Convolutional Network (TCN) or a Transformer time series model, etc. This type of model has a certain fitting ability for nonlinear time series patterns, and can extract the peak value, kurtosis and their trend characteristics of the impact signal over time, thereby distinguishing between sharp impacts and road bump noise, and suppressing misjudgments caused by environmental interference.

[0038] Furthermore, the first artificial intelligence model can be further subdivided structurally. For example, it can be a composite model consisting of at least two sub-models: one sub-model is specifically responsible for dynamically adjusting the first threshold based on the status and / or environmental information of the first power supply device, and passing the adjusted first threshold as an input parameter to another sub-model; the other sub-model infers based on time-series data and the dynamically adjusted first threshold, and outputs the final analysis result. Through this division of labor and collaboration within the model, end-to-end learning of threshold optimization and risk assessment can be achieved, continuously improving the real-time performance, accuracy, and scenario adaptability of the analysis.

[0039] In one possible implementation, the terminal includes a cooling system for cooling the first power supply device. Protective operations include one or more of the following: limiting the terminal's movement speed to above a first speed threshold; limiting power replenishment operations exceeding a first power threshold, including replenishing power to the first power supply device; activating the cooling system; stopping the operation of power supply components in a first area of ​​the first power supply device, the first area being the area in the first power supply device corresponding to the collision area; and limiting the power and / or voltage of the first power supply device. These various protective operations can be performed individually or in combination, matching the level of risk, achieving a safety upgrade from passive alarm to active intervention, and improving the safety and reliability of the first power supply device after a collision.

[0040] In one possible implementation, the terminal also includes a fire extinguishing device. The analysis results include the risk level, and if the risk level exceeds a first risk threshold, the protective action further includes activating the fire extinguishing device. In the above implementation, the control device activates the fire extinguishing device for proactive fire intervention when the analysis results indicate that the risk level exceeds the first risk threshold (e.g., it is determined that thermal runaway is unavoidable). This measure can promptly suppress fires before or in the early stages of ignition in the primary power supply equipment, minimizing the risk of personal injury and property damage.

[0041] In one possible implementation, the method further includes the following steps: when the control device performs a protective operation on the first power supply device, it outputs a first prompt message, which is used to alert the first power supply device. The control device outputs the first prompt message during the protective operation to indicate that the first power supply device is in an abnormal state. Through the first prompt message, the user can promptly learn of a risk event occurring with the first power supply device and take appropriate measures (such as pulling over or moving away from the vehicle), thereby improving the user's awareness of the terminal's security status and their proactive response.

[0042] In one possible implementation, the method further includes the step of: the control device outputting a second prompt message, which is used to prompt for protective operations. By outputting the second prompt message, the control device reduces user confusion or panic caused by sudden limitations in terminal performance, enhances user understanding and trust in the terminal's autonomous security behavior, and improves the overall user experience.

[0043] In one possible implementation, the method further includes the step of: the control device outputting a third prompt message, which is used to indicate the collision area of ​​the first power supply device. In this implementation, the third prompt message helps to quickly locate the damaged area of ​​the power supply device, facilitating subsequent inspection and maintenance, shortening troubleshooting time, and improving the response efficiency and repair accuracy of after-sales service.

[0044] In one possible implementation, the terminal further includes a safety restraint system. When the analysis results indicate that the first power supply device has experienced thermal runaway or is at risk of fire, the control device sends a trigger signal to the safety restraint system to control the safety restraint system to perform a safety restraint operation.

[0045] For example, the safety restraint system includes one or more of the following: a door unlocking system, a window control system, and a hazard warning light system. Safety restraint operations include at least one of the following: automatically unlocking all doors, automatically lowering or opening windows, and automatically activating the hazard warning lights.

[0046] In one possible implementation, the method further includes the following steps: the control device generates a health report corresponding to the first power supply device based on analysis results, collision location, and sensing results, and uploads the health report to a cloud server or sends it to maintenance personnel for specific cause analysis and problem localization. Furthermore, the cloud server can generate a maintenance work order based on the health report and contact the terminal driver.

[0047] Secondly, this application provides a control device, including a communication module and a processing module. The communication module is used to communicate with other devices or modules. The processing module is used to perform one or more of the aforementioned operations such as determining, obtaining, analyzing, using data to obtain, solving, and optimizing. The device also includes a control module, which can be used to control a terminal, a display device in the terminal, or a projection module or other terminal-related modules. The control device is used to implement the method described in the first aspect or any possible embodiment of the first aspect.

[0048] As exemplarily illustrated, the device includes a processing module and a communication module.

[0049] The communication module is used to acquire the perception results obtained by the sensor system, which include the perception data perceived by multiple sensors in the sensor system. The processing module is used to determine whether to perform protective operations for the first power supply device based on the sensing results and a first threshold. The first threshold is used to indicate the threshold corresponding to the sensing data sensed by multiple sensors, and the first threshold is related to the state of the first power supply device and / or the environment in which the first power supply device is located.

[0050] In one possible implementation, environmental information of the environment in which the first power supply device is located is obtained based on the sensing results; if the environmental information indicates that the environment in which the first power supply device is located is a high-risk environment, the first threshold is updated based on the environmental information.

[0051] In one possible implementation, a high-risk environment includes one or more of the following: the number of traffic participants in the environment exceeds a first quantity threshold; the environment road belongs to the target road type; and the environment weather is the target weather type.

[0052] In one possible implementation, the first threshold includes a second threshold corresponding to the sensing data obtained by the first sensor and at least one second sensor among a plurality of sensors, and a third threshold corresponding to the sensing data obtained by the first sensor.

[0053] The processing module is also used to determine whether to perform protective operations for the first power supply device based on the sensing data obtained by the first sensor, at least one second sensor, and a second threshold; or, based on the sensing data obtained by the first sensor and a third threshold, to determine whether to perform protective operations for the first power supply device; wherein the third threshold is greater than or equal to the second threshold.

[0054] In one possible implementation, the sensor system includes an accelerometer and / or a pressure diaphragm sensor, the accelerometer being used to detect whether a collision has occurred at the terminal, and the pressure diaphragm sensor being laid on the outer surface of the first power supply device to detect whether the first power supply device has been bumped or knocked.

[0055] In one possible implementation, the sensor system further includes a detection sensor for detecting the state of the first power supply device.

[0056] The communication module is also used to acquire first sensing data obtained by the acceleration sensor and / or pressure membrane sensor, the first sensing data being used to indicate whether the terminal and / or the first power supply device has been bumped or knocked. The communication module is also used to acquire second sensing data obtained by the detection sensor when the first sensing data indicates that the terminal and / or the first power supply device has been bumped.

[0057] In one possible implementation, the detection sensor includes a temperature sensor and / or a gas sensor; the temperature sensor and / or gas sensor are disposed within the first power supply device.

[0058] In one possible implementation, the communication module is further configured to: obtain analysis results based on the sensing results and a first threshold, the analysis results including risk type and / or risk level; and determine, based on the analysis results, whether to perform protective operations for the first power supply device.

[0059] In one possible implementation, the sensor system includes multiple collision sensors, and the analysis results also include the collision area of ​​the first power supply device.

[0060] In one possible implementation, the terminal includes a cooling system for cooling the first power supply device; the protective operation includes one or more of the following: limiting the terminal's movement speed to a first speed threshold; limiting the execution of a power replenishment operation with a power exceeding a first power threshold, the power replenishment operation including an operation to replenish power to the first power supply device; activating the cooling system; stopping the operation of power supply components included in a first region of the first power supply device, the first region being the region in the first power supply device corresponding to the collision region; and limiting the power and / or voltage of the first power supply device.

[0061] In one possible implementation, the terminal also includes a fire extinguishing device, and the analysis results include the risk level. If the risk level exceeds a first risk threshold, the protective operation also includes activating the fire extinguishing device.

[0062] In one possible implementation, the communication module is further configured to output a first prompt message when performing a protective operation for the first power supply device, the first prompt message being used to prompt the first power supply device.

[0063] In one possible implementation, the communication module is further configured to output a second prompt message, which is used to prompt for protection operations.

[0064] In one possible implementation, the communication module is also used to output a third prompt message, which is used to indicate the collision area of ​​the first power supply device.

[0065] Thirdly, this application provides a control device including at least one processor and a memory. The memory is used to store a computer program, and the at least one processor is used to invoke the computer program to implement the method described in the first aspect or any possible embodiment of the first aspect.

[0066] Fourthly, this application provides a chip system including at least one processor and a communication interface. The communication interface is used for inputting and / or outputting data, and the at least one processor is used for invoking computer instructions to implement the method described in the first aspect or any possible embodiment of the first aspect.

[0067] Fifthly, this application provides a terminal including a sensor system and a first power supply device, the sensor system being used to sense the first power supply device, and a control device as described in the second aspect, or including the control device described in the third aspect, or including the chip system described in the fourth aspect.

[0068] In a sixth aspect, embodiments of this application provide a computer-readable storage medium for storing a computer program (also referred to as code or instructions); when the computer program is run on a computer, the methods described in the first aspect and any possible implementation are implemented.

[0069] In a seventh aspect, embodiments of this application provide a computer program product, the computer program product comprising: a computer program (also referred to as code or instructions); and, when the computer program is run, causing a computer to perform the methods described in the first aspect and any possible implementation thereof.

[0070] Furthermore, in the process of performing the method described in the first aspect and any possible implementation above, the processes related to sending and / or receiving information in the above methods can be understood as the process of the processor outputting information, and / or the process of the processor receiving input information. When outputting information, the processor can output the information to a transceiver (or communication interface, or transmitting module) so that the transceiver can transmit it. After the information is output by the processor, it may need to undergo other processing before reaching the transceiver. Similarly, when the processor receives input information, the transceiver (or communication interface, or transmitting module) receives the information and inputs it to the processor. Furthermore, after the transceiver receives the information, the information may need to undergo other processing before being input to the processor.

[0071] Based on the above principles, for example, the information sent mentioned in the aforementioned method can be understood as information output by the processor. Similarly, the information received can be understood as information received by the processor from input.

[0072] Optionally, unless otherwise specified, or unless they contradict their actual function or internal logic in the relevant description, the operations of the processor, such as transmitting, sending, and receiving, can be more generally understood as processor output and receiving, input, and other operations.

[0073] Optionally, in performing the methods described in the first aspect and any possible implementation above, the processor may be a processor specifically designed to perform these methods, or it may be a processor that performs these methods by executing computer instructions stored in memory, such as a general-purpose processor. The memory may be a non-transitory memory, such as read-only memory (ROM), which may be integrated with the processor on the same chip or disposed on different chips. This application does not limit the type of memory or the arrangement of the memory and processor.

[0074] In one possible implementation, at least one of the aforementioned memories is located outside the device.

[0075] In yet another possible implementation, at least one of the aforementioned memories is located within the device.

[0076] In another possible implementation, a portion of the memory of the at least one memory is located inside the device, while another portion is located outside the device.

[0077] In this application, the processor and memory may also be integrated into a single device, that is, the processor and memory can be integrated together.

[0078] The beneficial effects of the technical solutions in the second to seventh aspects of this application can be understood by referring to the beneficial effects of the technical solutions in the first aspect. Attached Figure Description

[0079] The accompanying drawings used in the description of the embodiments will be briefly introduced below.

[0080] Figure 1 This is a functional block diagram of a terminal provided in an embodiment of this application; Figure 2 This is a structural diagram of the terminal provided in the embodiments of this application; Figure 3 This is a flowchart illustrating a terminal control method provided in an embodiment of this application; Figure 4A schematic diagram illustrating the calculation of collision location coordinates based on the time difference of arrival, provided in an embodiment of this application; Figure 5 A schematic diagram of the architecture of a first artificial intelligence model provided in an embodiment of this application; Figure 6 This is a schematic diagram of a prompting information interface provided in an embodiment of this application; Figure 7 This is a schematic diagram of the structure of a control device provided in an embodiment of this application; Figure 8 This is a schematic diagram of another control device provided in an embodiment of this application. Detailed Implementation

[0081] The embodiments of this application will now be described in further detail with reference to the accompanying drawings.

[0082] For ease of understanding, the architecture and business scenarios of the terminal provided in the embodiments of this application are described below. It should be noted that the system architecture and business scenarios described in this application are for the purpose of more clearly illustrating the technical solutions of this application. As system architectures evolve and new business scenarios emerge, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

[0083] Please see Figure 1 and Figure 2 , Figure 1 This is a functional block diagram of a terminal provided in an embodiment of this application. Figure 2 This is a structural diagram of a terminal provided in an embodiment of this application. The terminal 10 includes a first power supply device 12, a sensor system 13, and a control device 14. Wherein: The first energy supply device 12 is a device in the terminal 10 that performs energy storage and / or release functions, providing energy for the movement, operation, or other functions of the terminal 10. The specific implementation of the first energy supply device 12 varies depending on the type of the terminal 10. For example, when the terminal 10 is an electric vehicle, the first energy supply device 12 can be a power battery pack, typically installed under the vehicle chassis or under the vehicle floor, composed of multiple battery modules connected in series or parallel, each battery module containing several cells. Alternatively, when the terminal 10 is an energy storage container, the first energy supply device 12 can be a cell array or battery cluster. Furthermore, when the terminal 10 is an aircraft, the first energy supply device 12 can be a high-energy-density fuel cell stack or a lightweight battery pack. This application does not limit the specific chemical system and structural form of the first energy supply device 12; for example, the first energy supply device 12 can be a ternary lithium battery pack, a lithium iron phosphate battery pack, a solid-state battery pack, a fuel cell stack, or a supercapacitor bank, etc.

[0084] In a possible implementation, the first energy supply device 12 includes a housing and at least one energy supply component disposed within the housing. An energy supply component refers to the smallest management unit in the first energy supply device 12 that undertakes the functions of energy storage and / or output. Taking a power battery pack as an example, the energy supply component can be a single battery cell, a battery module composed of multiple battery cells connected in series and / or in parallel, or a battery pack under the jurisdiction of a battery management unit. The housing of the first energy supply device 12 is used to provide physical protection, sealing, and heat dissipation support for the internal energy supply components, and the housing is usually made of a metal material (such as aluminum alloy, steel plate) or a composite material.

[0085] In a possible implementation, the terminal 10 further includes a cooling system and / or a fire extinguishing device that are compatible with the first energy supply device 12. The cooling system is used to cool down the first energy supply device 12 to maintain its operating temperature range. Exemplarily, the cooling system can be a liquid cooling circulation system, an air cooling fan system, or a direct refrigerant cooling system. The fire extinguishing device is used to perform active fire fighting intervention when the first energy supply device 12 undergoes thermal runaway. Exemplarily, the fire extinguishing device can be an aerosol automatic fire extinguishing device or a dry powder fire extinguishing agent release device, and is usually installed inside the housing of the first energy supply device 12 or in its vicinity.

[0086] The sensor system 13 can be used to sense the terminal and / or the first energy supply device 12. The sensor system 13 can include several sensors. The sensors can measure information and convert the measured information into electrical signals or other required forms of information for output. As Figure 1 shown, the sensor system 13 of the terminal 10 includes but is not limited to the following devices: an acceleration sensor 130, a pressure film sensor 131, a temperature sensor 132, a gas sensor 133, or a collision sensor 134, etc. Some of the sensors are introduced below by way of example: The acceleration sensor 130 can be used to detect whether the terminal 10 has collided. The acceleration sensor 130 is mainly used to sense the movement changes of the terminal 10. In terms of the installation position, the acceleration sensor 130 can be disposed on the surface of the housing of the first energy supply device 12, the chassis of the terminal 10, or the body rigid structure part of the terminal 10, so as to capture in real time acceleration-related events such as collision deceleration and severe impact encountered by the terminal 10 during driving or movement. The sensed data output by the acceleration sensor 130 includes information such as the acceleration amplitude and the acceleration direction. The acceleration sensor 130 can be an inertial sensor.

[0087] A pressure film sensor 131 is used to detect whether the first power supply device 12 has been impacted, and can be installed on the outer surface of the first power supply device 12. The pressure film sensor 131 is a flexible sensing element, such as a pressure film sensor. Taking the first power supply device 12 as a power battery pack as an example, the pressure film sensor 131 can be installed on the surface of the lower housing of the battery pack or on the outer surface of the bottom protective plate of the battery pack. When an external object squeezes or impacts the bottom of the first power supply device 12, the deformation sensed by the pressure film sensor 131 is converted into a voltage signal output, thereby realizing the detection of local impact events. The pressure film sensor 131 is highly sensitive to local deformation and high-frequency vibration of the outer shell of the first power supply device 12, complementing the acceleration sensor 130 in terms of sensing range and response characteristics.

[0088] A temperature sensor 132 is disposed within the first power supply device 12 to measure the internal temperature conditions, such as temperature elevation or temperature distribution. The temperature sensor 132 can be positioned at locations such as the battery cell terminals, busbars, or module housing within the first power supply device 12 to obtain representative temperature data. In some implementations, multiple temperature sensors 132 can be disposed within the first power supply device 12, each corresponding to a different battery cell or module area.

[0089] A gas sensor 133 is disposed within the first power supply device 12 to detect characteristic gas information inside the first power supply device 12, such as gas type, gas concentration, or gas pressure. For example, the gas sensor 133 can be a carbon monoxide sensor, a hydrogen sensor, or a carbon dioxide sensor. In practical applications, the gas sensor 133 can be a combination of one or more types to meet the characteristic gas detection needs of different battery cell chemical systems. The combination of the temperature sensor 132 and the gas sensor 133 can effectively identify whether the first power supply device 12 has suffered internal battery cell damage or thermal runaway precursors (e.g., temperature rise accompanied by carbon monoxide gas release) due to impact, providing a sensing basis for subsequent risk assessment and protective operation decisions.

[0090] The collision sensor 134 is used to detect whether a local area of ​​the first power supply device 12 has been impacted by an external force. The collision sensor 134 can be implemented as a contact vibration switch, an accelerometer array, a partitioned electrode of a pressure thin film sensor, or a strain gauge array, etc.

[0091] It should be noted that the types and number of sensors included in the sensor system 13 described above are merely illustrative examples. In practical applications, the sensor system 13 may also include other types of sensors, such as a voltage sensor for detecting the voltage of the first power supply device 12, an internal resistance detection circuit for detecting the internal resistance of the first power supply device 12, and a pressure sensor for detecting the internal air pressure of the first power supply device 12. This application does not exhaustively limit the scope of these examples.

[0092] The control device 14 is a device with computing and control capabilities, capable of controlling the terminal 10. Specifically, it can control the operating parameters of one or more components within the terminal 10. For example, the control device 14 can generate control commands for components in the terminal 10 (such as the drive system, braking system, cooling system, fire extinguishing device, interactive device, etc.). Furthermore, the control device 14 can generate information for controlling the components of the terminal 10, such as information for triggering the generation of a user interface, or information on the target quantity for controlling protective operations.

[0093] The control device 14 may include one or more processors, which can be used to execute programs or instructions corresponding to programs to achieve corresponding functions. In one implementation, the processor may include circuits with instruction read and execute capabilities, such as an arithmetic logic unit (ALU), processor core, central processing unit (CPU), microprocessor, microcontroller unit, graphics processing unit (GPU), or digital signal processor (DSP). In another implementation, the processor can implement certain functions through the logic of hardware circuits, where the logic of the hardware circuits is fixed or reconfigurable. For example, the processor may be a hardware circuit implemented as an application-specific integrated circuit (ASIC) or a programmable logic device (PLC), such as a field-programmable gate array (FPGA). In reconfigurable hardware circuits, the process of the processor loading a configuration document and configuring the hardware circuit can be understood as the process of the processor loading instructions to achieve corresponding functions. Furthermore, the processor may also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processor, tensor processor, deep learning processor, etc. In some implementations, the control device 14 includes at least one processor integrated as a system-on-a-chip (SoC). The SoC may include at least one processor; when the SoC includes multiple processors, the types of processors may be different, such as CPU, MCU, and NPU.

[0094] For example, the control device 14 includes a controller, a domain controller, an electronic control unit, etc., wherein the domain controller includes, for example, a motion domain controller, a vehicle domain controller, a cockpit domain controller, etc. In some solutions, some functions of the control device 14 may not be located in the terminal 10, for example, they may be located in a cloud server, roadside equipment, or a data center.

[0095] In some cases, terminal 10 may also include one or more of the following devices: a drive system, an interactive control device, an interactive device 16, a communication system, etc. The following is a brief description of each of these components: The drive system provides power to the terminal 10, enabling it to move. For example, the drive system includes one or more of an engine, a power battery, and a transmission system. The first power supply device 12 can be part of the drive system or a component of the drive system. In the case of an electric vehicle, the drive system includes a motor system responsible for converting the electrical energy provided by the first power supply device 12 into mechanical energy, driving the terminal 10 forward. In some embodiments, the control device 14 can limit the output power of the first power supply device 12 or limit the speed of the terminal 10 by sending commands to the drive system.

[0096] The interactive device 16 is a device for interacting with humans and may include several components, such as one or more of a display device, a projection system, and a voice system. The display device is a device capable of presenting information and enabling human-machine interaction, including but not limited to a central control screen, passenger-side screen, rear-seat screen, streaming media rearview mirror, dashboard, head-up display, light field screen, or touchscreen. The voice system is used to collect and / or output sound, and may include, for example, a microphone and a speaker. In this embodiment, the control device 14 can output prompt information related to the first power supply device 12 through the interactive device 16. For example, the control device 14 can output a first prompt message, a second prompt message, or a third prompt message through the interactive device 16. The specific content and output method of the prompt information will be described in detail in subsequent method embodiments.

[0097] The communication system is used to establish communication connections between terminal 10 and external devices. For example, the communication system may include a T-box (vehicle-mounted telematics terminal), a V2X communication module, a cellular communication module, etc. In this embodiment, the control device 14 can report information such as perception results, analysis results, the collision area of ​​the first power supply device 12, the status of the first power supply device 12, and the type of protective operation to the cloud server through the communication system. It can also receive instructions or updated data from the cloud server through the communication system, such as updated parameters of the first artificial intelligence model and updated configuration parameters of the first threshold.

[0098] In some embodiments, terminal 10 also includes a memory for providing storage space. For example, the memory may include volatile memory, such as random access memory (RAM). Alternatively, the memory may include non-volatile memory, such as read-only memory (ROM), flash memory, hard disk drive (HDD), or solid-state drive (SSD). The memory may also include combinations of the above types of memory. Optionally, the memory may also store information such as the factory configuration information of the first power supply device 12, the chemical system parameters of the battery cell, the first threshold configuration group, the parameters of the first artificial intelligence model, and the position coordinates of the collision sensor.

[0099] It should be noted that the above Figure 1This is merely a schematic diagram of one possible functional framework for terminal 10. In practical applications, terminal 10 may include more or fewer systems or components, which is not limited here.

[0100] The method of this application embodiment will be described below based on the system architecture described above. Please refer to... Figure 3 , Figure 3 This is a flowchart illustrating a terminal control method provided in an embodiment of this application. This terminal control method is applied to a terminal. For example, it is applied to the aforementioned... Figure 1 or Figure 2 The terminal is shown. Optionally, the terminal control method is executed by a control device in the terminal. Exemplarily, the control device may be a controller in a vehicle, such as ADAS, ADS, MDC, BDC, or CDC, or a component within the controller, such as a chip. More exemplaryly, the control device may be such as... Figure 3 A schematic diagram of the control device. For ease of understanding, the control device will be used as the subject of the following method.

[0101] like Figure 3 The terminal control method shown may include one or more steps from S301 to S302. It should be understood that, for ease of description, the method is described in the order of S301 to S302, and this embodiment also applies to other execution orders or multiple executions of a single step. S301 to S302 are as follows: S301, the control device acquires the sensing results obtained by the sensor system.

[0102] The sensor system may include various sensing devices mounted on the terminal for collecting information on the status of the first power supply device and its surrounding environment. For example, the sensor system includes, but is not limited to, accelerometers, pressure film sensors, temperature sensors, gas sensors, and collision sensors. Specific examples can be found in the foregoing. Figure 1 and Figure 2 This diagram illustrates the sensor system and describes each sensor. Information such as the type of sensor is not described in detail here; the application process will be explained later.

[0103] The perception results obtained by the sensor system include the perception data sensed by multiple sensors in the sensor system. For example, if the sensor system includes three sensors, the perception results may include the data sensed by each of the three sensors. Of course, the embodiments of this application do not impose many limitations on the types and sources of data in the perception results. In some scenarios, only one sensor in the sensor system may be operating, and the perception results may only include the data sensed by that single sensor.

[0104] Optionally, the sensing results output by the sensor system can be either the raw physical quantities directly given by each sensor (such as acceleration values, voltage values, temperature values, gas concentration values, etc.) or intermediate processing results after filtering, normalization, or feature extraction.

[0105] Considering the diverse situations that the first power supply device may face in practical applications, such as being directly subjected to force due to flying stones, obstacles, etc., posing a safety risk, or being affected by risky scenarios such as terminal collisions, this application provides various sensor combinations to detect the scenarios and actual conditions faced by the first power supply device, as detailed below: Combination 1 includes an accelerometer and a pressure diaphragm sensor. In the corresponding scenario, the sensor system includes an accelerometer and a pressure diaphragm sensor. The accelerometer is used to detect whether the terminal has been involved in a collision, and the pressure diaphragm sensor is laid on the outer surface of the first power supply device to detect whether the first power supply device has been bumped or knocked.

[0106] In Assembly 1, the accelerometer is primarily used to sense motion changes at the overall terminal level. The accelerometer can be installed on the surface of the first power supply device's housing, the terminal chassis, or a rigid structural component of the terminal to capture acceleration-related events such as collision deceleration and severe impacts encountered during the terminal's operation. The pressure film sensor is installed on the exposed surface of the first power supply device or its ground-facing surface. When an external object squeezes or impacts the bottom of the first power supply device, the deformation sensed by the sensor is converted into a voltage signal output, thus achieving high-sensitivity detection of localized impact events. Using these two sensors together, it is possible to effectively distinguish between a vehicle-wide collision where the battery pack is not directly impacted and a separate impact to the bottom of the battery pack—two distinct events.

[0107] To facilitate understanding, the following two scenarios will be used to explain the collaborative working method of the two types of sensors.

[0108] Scenario 1: A vehicle-to-everything (V2X) collision occurs at the terminal, but the primary power supply device is not directly impacted. For example, the terminal is a vehicle that is rear-ended while in motion. In this situation, the acceleration sensor installed on the terminal's chassis or a rigid structure of the vehicle body will capture a significant impact acceleration signal (e.g., peak value exceeding 20g), while the pressure film sensor located at the bottom of the primary power supply device will only output a weak or unchanging voltage signal. Based on the strong acceleration sensor signal and the weak pressure film sensor signal, the control device can determine that the current event is a V2X collision rather than a battery bottom impact, thus avoiding unnecessary protective actions on the primary power supply device.

[0109] Conversely, if the pressure membrane sensor outputs a significant voltage signal, it can be determined that although the current event is a vehicle collision, the battery has still been impacted, which can trigger subsequent steps.

[0110] Scenario 2: The bottom of the first power supply device is subjected to an impact. For example, if the terminal is a vehicle, and it is passing over a speed bump or road protrusion at low speed, the bottom of the first power supply device may be scraped or squeezed by a foreign object. In this case, the impact at the vehicle level sensed by the acceleration sensor may be relatively limited (e.g., peak value less than 10g), but the pressure film sensor will generate a significant voltage signal due to local deformation. Based on the characteristic that the pressure signal is strong while the acceleration signal is weak, the control device can determine that the current event is an impact to the bottom of the first power supply device and trigger subsequent steps.

[0111] Based on the above combination 1, the terminal may also be equipped with sensors or sensor combinations for monitoring the internal working conditions of the first power supply equipment, so as to further perceive the state of the first power supply equipment when an accident occurs, such as the following combination 2.

[0112] Assembly 2 includes a temperature sensor and a gas sensor. The temperature sensor and / or gas sensor may be disposed within the first power supply device to detect the conditions inside the first power supply device.

[0113] Among them, the temperature sensor is used to measure the temperature distribution inside the first power supply device, and the gas sensor is used to detect the concentration or composition of characteristic gases inside the first power supply device. Especially in the application scenario of ternary lithium batteries, the decomposition of the separator during a micro-short circuit in the cell will release carbon monoxide. By monitoring the combined changes in concentration and temperature, early signs of thermal runaway can be identified earlier.

[0114] It should be noted that combination 2 is mainly for monitoring inside the first power supply equipment, and the temperature sensor and gas sensor mentioned above can be replaced with other detection sensors.

[0115] Regarding the sensors and sensor combinations in the above example, the control device acquires first sensing data obtained by sensor combination 1, which indicates whether a collision has occurred with the terminal and / or the first power supply device. If the first sensing data indicates that a collision has occurred with the terminal and / or the first power supply device, the control device acquires second sensing data obtained by the detection sensor. In this embodiment, the control device acquires the second sensing data from the detection sensor only when the first sensing data indicates that a collision event has occurred.

[0116] For example, the first sensing data includes, but is not limited to, information such as acceleration amplitude, acceleration direction, and voltage pulse signal output by the pressure film sensor.

[0117] The specific triggering conditions for the second sensing data can be further refined based on different combinations of the first sensing data. Several judgment scenarios are given below as examples.

[0118] In scenario one, if the acceleration signal continuously monitored by the accelerometer exceeds a preset impact acceleration threshold (e.g., 15g) at a certain moment, and the direction indication is perpendicular to the bottom of the first power supply device (hereinafter referred to as Z direction), then the control device determines that the first power supply device may be impacted and wakes up the detection sensor to collect the second sensing data.

[0119] In scenario two, if the voltage signal output by the pressure diaphragm sensor exceeds the preset impact voltage threshold (e.g., 0.3V) and the pulse width matches the impact characteristics, the control device determines that the first power supply device may be impacted and wakes up the detection sensor.

[0120] In scenario three, if the acceleration signal exceeds the aforementioned impact acceleration threshold and the pressure membrane sensor signal simultaneously exceeds the impact voltage threshold, the control device determines that the first power supply device has experienced a severe impact and immediately wakes up the detection sensor (or combination 2) to monitor the internal condition of the first power supply device in real time.

[0121] By using the above-mentioned classification and combination judgment, we can avoid frequently waking up the detection sensors under normal driving vibration, and also ensure that subsequent status monitoring is not missed when a real collision event occurs.

[0122] It should be noted that the aforementioned combination 2 or detection sensors, in addition to the temperature sensor and gas sensor mentioned above, may also include voltage sensors, internal resistance detection circuits, etc. Correspondingly, the second sensing data refers to data obtained from these detection sensors that reflects the internal state of the first power supply device, such as the temperature value of each battery cell, carbon monoxide concentration value, hydrogen concentration value, and individual cell voltage value. Through this method of first coarse judgment and then fine inspection, the detection sensors do not need to be in a high-frequency sampling state continuously; they are only awakened to work when necessary, thereby effectively reducing the overall power consumption of the system.

[0123] To achieve precise location of the impact point, in one possible implementation, the sensor system includes multiple impact sensors, and the analysis results also include the impact area of ​​the first power supply device. The aforementioned impact sensors are used to indicate sensing elements capable of detecting whether a local area of ​​the first power supply device has been impacted by an external force. For example, the impact sensors can be contact vibration switches, accelerometer arrays, partitioned electrodes of pressure film sensors, or strain gauge arrays, etc.

[0124] The physical layout of the collision sensors is illustrated below. If the first power supply device is divided into several modular areas along its length and width (e.g., 8 modular areas, numbered in a 2x4 grid), and at least one collision sensor is installed in each area, when a collision occurs in a certain area, the collision sensor in that area will be the first to respond and output an abnormal signal. The control device can then determine the collision area based on this signal. For example, the information related to the abnormal signal / collision area can be the module number (e.g., module 3), coordinate range (e.g., X: 10-30cm, Y: 20-40cm), or an easily understandable location description (e.g., bottom left front of the battery pack). This collision area information not only helps users or after-sales personnel quickly locate the damaged area but also provides a basis for subsequent precise protective operations.

[0125] The aforementioned collision area can be obtained based on the mapping relationship of the collision sensors or calculated based on the sensing data of the collision sensors. For example, the collision area is obtained based on the mapping relationship of the collision sensors. Multiple collision sensors installed on the first power supply device are distributed in different areas, with each area corresponding to one collision sensor. The aforementioned mapping relationship is a mapping between the collision sensors and the area distribution of the first power supply device. Triggering a collision sensor can determine that a collision / bump has occurred in the corresponding area.

[0126] As another example, the collision area is calculated based on the sensing data from the collision sensors. In one possible implementation, the control device determines the collision area based on the sensing data obtained from the plurality of collision sensors. Optionally, the control device acquires the arrival times of signals from at least three of the plurality of collision sensors in response to the same collision event; determines the location of the collision event using a time-of-arrival (TOA) positioning algorithm based on the position coordinates of the at least three collision sensors and their corresponding signal arrival times; and maps the location of the collision event to the area division of the first power supply device to obtain the collision area.

[0127] For example, the plurality of collision sensors are arranged in an array inside the housing or on the surface of the first power supply device, and the position coordinates of each collision sensor are pre-calibrated and stored in the control device. When the stress generated by the collision event propagates in the structure of the first power supply device, the collision sensor closest to the collision point responds first, while the response of sensors farther away is delayed. By solving a system of nonlinear equations based on the time difference of arrival, the spatial coordinates of the collision point can be deduced.

[0128] The following describes the method for determining the collision region through two specific implementation methods.

[0129] Implementation 1: Determining the region through the mapping relationship between collision sensors and areas. For example, the first power supply device is divided into 8 physical areas, and each area is independently equipped with a collision sensor (such as a vibration switch or pressure electrode). When a collision sensor outputs a trigger signal, the control device directly maps to the corresponding area according to the sensor's preset identifier, such as "Area 3" or "Lower left front".

[0130] Implementation Two: Locating the Collision Area Based on the Time Difference of Arrival Information Related to Collision. Multiple (e.g., at least two) collision sensors are arrayed on the surface or inside the first power supply device. When a stress wave is generated by a collision, the response times of each sensor differ slightly due to the varying distances from the collision point. The control device acquires the arrival times of these sensors' signals, combines this with the known sensor coordinates, and calculates the spatial coordinates (x, y) of the collision point by solving for the time difference of arrival. Based on this, the coordinates are compared with a preset area division boundary to determine the corresponding collision area or a more precise collision point. The positioning accuracy is higher than Implementation One and is suitable for scenarios requiring precise positioning down to the cell level or even smaller areas. See also Figure 4 , Figure 4 This is a schematic diagram illustrating a method for calculating collision location coordinates based on the time difference of arrival, as provided in an embodiment of this application. Figure 4 In this method, the first power supply unit is evenly divided into eight physical regions, each equipped with three collision sensors (S1, S2, and S3). Upon a collision, the impact source generates a stress wave that propagates to collision sensors S1, S2, and S3. Due to the varying distances between the collision sensors and the impact source, the sensors detect the stress wave at different times. The collision sensors then send time-inclusive information to the control device or relevant upstream equipment, allowing the control device to determine the precise location of the impact source based on this time-inclusive information. This method requires fewer sensors and offers high computational accuracy.

[0131] S302, the control device determines whether to perform protective operations for the first power supply device based on the sensing results and the first threshold.

[0132] The first threshold is used to indicate the threshold corresponding to the sensing data sensed by the multiple sensors, and the first threshold is related to the state of the first power supply device and / or the environment in which the first power supply device is located.

[0133] The first threshold can be understood as a series of judgment thresholds used to compare with sensed data to determine whether to initiate protective operations. For different types of sensors, corresponding threshold values ​​can be set separately. These thresholds can be specific numerical values, a numerical range, or a certain functional relationship. For example, the sensor system includes a temperature sensor, a gas sensor, an acceleration sensor, and a pressure film sensor. The first threshold may include thresholds corresponding to the temperature sensor, gas sensor, acceleration sensor, and pressure film sensor, respectively. For example, the threshold corresponding to the temperature sensor is 50°C. If the temperature inside the first power supply device detected by the temperature sensor exceeds 50°C, the corresponding protective operation is triggered. As another example, the aforementioned impact acceleration threshold (e.g., 15g) and impact voltage threshold (e.g., 0.3V) can also be the first threshold or a portion of the first threshold.

[0134] In this embodiment, the first threshold is not a fixed constant, but a variable related to the state of the first power supply device and the environment in which it is located. The state of the first power supply device includes various parameters reflecting its current operating conditions, such as SOC, SOH, current output power, current voltage, current internal resistance, and cumulative charge-discharge cycle count.

[0135] The environment in which the first power supply device is located refers to the physical conditions of the environment in which the device is located when it is mounted on the terminal, such as ambient temperature, ambient humidity, altitude, road surface smoothness of the road where the terminal is located, and density of traffic participants around the terminal.

[0136] In one possible implementation, the value of the first threshold differs depending on the environment. The following explanation uses a high-risk environment as an example to illustrate the updating process of the first threshold.

[0137] Optionally, the control device obtains environmental information about the environment in which the first power supply device is located based on the sensing results. If the environmental information indicates that the environment in which the first power supply device is located is a high-risk environment, the control device updates the first threshold based on the environmental information.

[0138] Environmental information refers to parameters or category labels used to indicate the characteristics of external conditions in which the first power supply device is located. The control device can acquire environmental information from various data sources, such as sensors in the sensor system or external sensing devices. For example, environmental information includes, but is not limited to, the type of the current road, traffic flow information, weather conditions, and road surface roughness index.

[0139] The aforementioned high-risk environment indicates an environment that is likely to cause non-collision-related abnormal fluctuations in the sensing data of the first power supply device, or that increases the probability of collision damage to the terminal or the first power supply device. When the control device determines that the first power supply device is currently in such a high-risk environment, it adaptively updates and adjusts the first threshold to match the judgment threshold with the current environment. For example, a preset score is given to the current environment, and the first threshold is adjusted based on the score. The more severe the environment, the higher the score, and correspondingly, the more sensitive the setting of the first threshold becomes.

[0140] The following examples illustrate the dynamic adjustment process of this threshold in actual driving scenarios. Please see Scenario 3 and Scenario 4 below for details.

[0141] Scenario 3: High temperature and direct sunlight environment.

[0142] The terminal is an electric vehicle parked in an open-air parking lot at midday in summer. The ambient temperature is close to 40°C, and the surface temperature of the battery pack casing rises to around 60°C after direct sunlight. However, the internal cell temperature monitored by the battery management system is only around 45°C, which is within the normal range. If the control device fails to recognize the environment and still uses the preset first-level temperature warning threshold of 50°C for judgment, the temperature sensor on the outer surface of the casing will continuously trigger false alarms. Therefore, the control device identifies the current high-risk environment of high temperature exposure through environmental information (such as external temperature sensors and high-temperature warnings obtained from weather service interfaces) and proactively raises the first threshold of the temperature sensor from the usual 50°C to 65°C, thereby avoiding false alarms due to normal temperature rise caused by heat dissipation.

[0143] Scene 4: Continuously bumpy off-road terrain.

[0144] The control unit senses that the vehicle is traveling on an unpaved off-road surface, where the vehicle body is continuously subjected to high-frequency, small-amplitude impacts from the road surface, via an inertial measurement unit or suspension height sensor. In this situation, if the impact threshold of the pressure diaphragm sensor under conventional road conditions is still used, it may lead to frequent triggering of impact events, or even erroneously activating the detection sensor and initiating protective operations. Therefore, after identifying a high-risk environment, the control unit can appropriately increase the first threshold corresponding to the pressure diaphragm sensor (for example, increasing the voltage threshold from 0.2V to 0.4V) to filter out normal vibration signals caused by road bumps, retaining only the strong impact signals that could potentially cause bottom damage, thus ensuring safety while minimizing interference with the user.

[0145] In one possible implementation, a high-risk environment includes one or more of the following: the number of traffic participants in the environment exceeds a first quantity threshold; the environment road belongs to a target road type; and the environment weather is of the target weather type. For example, the target road type includes, but is not limited to, slippery surfaces, off-road surfaces, special road sections with continuously distributed speed bumps, and congested road sections. The target weather type includes, but is not limited to, hot summer weather, rainy or snowy weather, etc.

[0146] Traffic participants can be understood as various dynamic objects within the terminal's perception range during operation, including other motor vehicles, non-motor vehicles, pedestrians, and animals. The first quantity threshold is used to define whether the density of traffic participants reaches a high-risk level; for example, it can be set as more than 10 traffic participants existing simultaneously within a fan-shaped field of view 100 meters in front of the terminal.

[0147] The target road type refers to the road category that is likely to induce severe vibration of the vehicle body or accidental bumps to the bottom, such as unpaved gravel roads, off-road vehicle ruts, severely damaged cement roads, sections with continuous speed bumps, and railway crossings.

[0148] The target weather type refers to special weather that may affect the operating temperature range of the primary power supply equipment or interfere with the normal performance of the sensors, such as high temperature weather under orange or red high temperature warnings, rainstorm weather, hail weather, sandstorm weather, etc.

[0149] The above-mentioned high-risk environments can be used individually or in combination as a basis for judgment.

[0150] In one possible implementation, the first threshold includes second thresholds corresponding to sensing data obtained by a first sensor and at least one second sensor among a plurality of sensors, and a third threshold corresponding to the sensing data obtained by the first sensor. Based on the sensing results and the first threshold, it is determined whether to perform a protective operation for the first power supply device, including but not limited to the following operations: the control device determines whether to perform a protective operation for the first power supply device based on the sensing data obtained by the first sensor and at least one second sensor and the second threshold; or, the control device determines whether to perform a protective operation for the first power supply device based on the sensing data obtained by the first sensor and the third threshold. The third threshold is greater than or equal to the second threshold.

[0151] This embodiment primarily illustrates a hierarchical threshold mechanism combining multi-sensor joint triggering and single-sensor independent triggering. For ease of description, a certain type of sensor in the sensor system is referred to as the first sensor, which can be any one of a temperature sensor, acceleration sensor, pressure film sensor, or gas sensor; while other sensors of different types are collectively referred to as the second sensor. Correspondingly, the first threshold includes two different types of judgment thresholds, as detailed below: The first type, the second threshold, corresponds to a scenario where the protective operation is triggered only when the sensing data from the first sensor and at least one second sensor simultaneously meet their respective thresholds.

[0152] For example, when the first sensor is a temperature sensor and the second sensor is a gas sensor, the trigger condition for the second threshold can be set to the simultaneous occurrence of a temperature T ≥ 50℃ and a carbon monoxide concentration CO ≥ 50ppm, neither of which can be omitted.

[0153] The second type, the third threshold, corresponds to the scenario where the protection operation is triggered solely by exceeding the limit based on the sensing data of the first sensor. For example, the temperature sensor reading T≥60℃ can trigger the protection operation independently.

[0154] It is worth noting that the value of the third threshold is usually greater than or equal to the value corresponding to the second threshold for the same sensor (e.g., 60℃ is greater than 50℃ in the example above). This design is mainly because a single sensor lacks cross-validation with other sensors. Only by setting a higher trigger threshold can the risk of false triggering caused by instantaneous interference from the sensor itself or environmental noise be effectively suppressed. In practical applications, the control device can further combine the number of sensors whose sensing data exceeds the threshold to comprehensively assess the level of risk. For example, the more sensors that exceed the threshold, the higher the risk level often is, and subsequent protective measures can be upgraded accordingly.

[0155] In one possible implementation, the control device obtains an analysis result based on the sensing results and a first threshold. The analysis result includes the risk type and / or risk level. Based on the analysis result, the control device determines whether to perform protective operations for the first power supply device.

[0156] Optionally, the analysis results are structured information. For example, the analysis results may include fields such as risk type and / or risk level. Among them, the risk type is used to indicate the category of safety threat faced by the primary power supply equipment, which may include different categories such as bottom impact without damage, gas leakage due to seal failure, micro-short circuit of battery cell, precursor to thermal runaway, and thermal runaway that has occurred.

[0157] Risk level is used to indicate the severity of a security threat and is a quantitative expression. Risk level can be represented by levels such as no risk, minor warning, moderate warning, and severe warning, or by a value between 0 and 1, with higher values ​​indicating higher risk. After obtaining the analysis results, the control device further determines whether to perform protective actions, and if so, what level and type of protective action to perform, based on the risk type and / or risk level indicated in the analysis results.

[0158] The following examples illustrate the combinations of protective actions corresponding to different levels of risk.

[0159] When the risk level in the analysis results is a minor warning, the control device may perform operations including but not limited to: outputting a second prompt message to indicate the status of the first power supply device; limiting the power of the charging operation to a level higher than a first power threshold, such as limiting the DC fast charging power to below 20kW, but retaining the driving function.

[0160] When the risk level is a moderate warning, in addition to performing all the operations for a minor warning, the control device can also: limit the terminal's movement speed to a first speed threshold; activate the cooling system to actively cool the first power supply device; and simultaneously report the perception and analysis results to the cloud server via the communication module, so that the cloud can notify after-sales personnel.

[0161] When the risk level reaches a severe warning level, the control device executes the highest level of protective operations, such as stopping the operation of the power supply components corresponding to the collision area; and limiting the output power of the first power supply device to 50% or less of its rated value. If the terminal is equipped with a fire extinguishing device, the fire extinguishing device will be activated when the risk level exceeds the first risk threshold. At the same time, a signal is sent to the safety restraint system to automatically unlock the doors, lower the windows, and activate the hazard warning lights.

[0162] To facilitate a clear understanding of the application of the aforementioned different graded threshold mechanisms, risk levels, and risk types in actual working conditions, the following example of a terminal being bumped from the bottom illustrates several possible scenarios, demonstrating the application scenarios of the first and second threshold judgments and their corresponding risk levels or risk types.

[0163] It is understandable that the number of second sensors can be one or more. When there are multiple second sensors, the sensing data from all of them must meet their respective second thresholds for the joint triggering condition to be satisfied. For example, a three-element combination judgment logic can be set for an accelerometer, a pressure film sensor, and a temperature sensor; the corresponding warning is triggered only when all three exceed their respective thresholds simultaneously.

[0164] Scenario 4: The temperature inside the primary power supply device rises slightly, with no gas release. The bottom of the primary power supply device experiences slight pressure, and the temperature sensor detects a local temperature increase from the normal 35°C to 48°C, but the gas sensor does not detect carbon monoxide (CO concentration is close to 0 ppm). In this case, the temperature has not reached the third threshold of 60°C, and the combination of temperature and gas does not meet the second threshold (e.g., T ≥ 50°C and CO ≥ 50 ppm), classifying it as low-risk or no-risk. Therefore, the control device does not trigger protective measures but only continues monitoring.

[0165] Scenario 5: The temperature and gas levels within the first power supply device simultaneously exceed limits, but not to a severe degree. After a bottom impact, a component in the first power supply device, such as a battery cell, experiences a micro-short circuit. The temperature sensor detects a temperature rise to 55°C, while the gas sensor detects a CO concentration of 70 ppm. This combination meets the conditions for the second threshold (e.g., T ≥ 50°C and CO ≥ 50 ppm), but the individual temperature indicator does not meet the third threshold of 60°C. Based on this, the control device determines the risk type as a battery cell micro-short circuit and / or the risk level as a minor warning, and initiates corresponding protective operations, such as limiting fast charging power.

[0166] Scenario Six: Single Sensor Exceeds Standards. For example, the bottom of the primary power supply equipment is punctured by a sharp object, causing the temperature in a certain area to suddenly rise to 105°C. However, the gas sensor, either due to a recent reaction or its location, has not yet detected a high concentration or specific type of gas. In this case, although the combination of temperature and gas may not simultaneously meet the second threshold, the temperature alone far exceeds the third threshold of 60°C, or even exceeds the independent trigger threshold for a severe warning (such as 100°C). The control device determines the risk level to be a severe warning and executes the highest level of protective operations, including cutting off high voltage and activating fire extinguishing devices.

[0167] Scenario 7: Simultaneous triggering of the pressure diaphragm sensor and accelerometer. For example, while the vehicle is in motion, the bottom of the primary power supply device experiences a strong instantaneous impact. The accelerometer records a peak value of 45g, while the pressure diaphragm sensor outputs a voltage of 1.8V, meeting the conditions for the second threshold (e.g., a≥25g and U≥1V), but the acceleration does not reach the third threshold of 50g for independent triggering. Based on this, the control device determines the risk type as a collision, the risk level as a moderate warning, and executes protective operations such as limiting vehicle speed and activating active cooling.

[0168] The thresholds (such as the first threshold, the second threshold, or the third threshold) in the examples of cases four through seven above are merely examples. In practical applications, there are many more possible threshold settings. Please refer to Table 1 below, which provides threshold settings for various sensor combinations or single sensors according to embodiments of this application.

[0169]

[0170] Table 1 In Table 1 above, T represents the threshold corresponding to the temperature sensor, CO represents the threshold corresponding to the carbon monoxide-related gas sensor, such as CO ≥ 50 ppm in the second row and second column belonging to the second threshold, and CO ≥ 250 ppm in the second row and fourth column belonging to the third threshold. a represents the threshold corresponding to the accelerometer sensor, and U represents the threshold corresponding to the pressure membrane sensor.

[0171] The combinations listed in Table 1 above are merely examples. In actual implementation, the combination of the first and second sensors can be flexibly configured according to calibration. For example, an acceleration sensor can be used as the first sensor, and a temperature sensor as the second sensor, with the protection operation triggered only when both the acceleration and temperature signals exceed the limit, to suit specific scenarios.

[0172] In one possible implementation, the first power supply device includes at least one battery cell, and the first threshold is also related to the battery cell's chemical system. For example, different battery cell chemical systems exhibit different temperature thresholds and characteristic gas release thresholds during thermal runaway. For instance, for ternary lithium-ion cells, the membrane decomposition initiation temperature is lower, while for lithium iron phosphate cells, the thermal stability is higher, and the corresponding temperature threshold and gas concentration threshold can be higher than those of ternary lithium-ion cells. The control device can determine the chemical system of the currently installed battery cell by reading the factory configuration information of the first power supply device or parameters stored in the battery management unit, and select the corresponding first threshold configuration group accordingly.

[0173] To further improve the accuracy and intelligence of risk analysis, in one possible implementation, the control device obtains time-series data based on the perception results. The control device inputs the time-series data into a first artificial intelligence model to obtain the analysis results; the first artificial intelligence model is a pre-trained model.

[0174] In this embodiment, the first artificial intelligence model (e.g., a deep learning model) has the ability to fit nonlinear time-series patterns, effectively distinguishing between sharp impacts and road surface noise, and suppressing misjudgments caused by environmental interference. Furthermore, the first artificial intelligence model may include a sub-model for dynamically adjusting a first threshold. This sub-model can adaptively adjust the first threshold based on the real-time status of the first power supply device and environmental information, continuously improving the real-time performance, accuracy, and scene adaptability of the analysis results.

[0175] The first artificial intelligence model can be a Long Short-Term Memory (LSTM) network, a Gated Recurrent Unit (GRU) network, a Temporal Convolutional Network (TCN), or a Transformer time series model, etc. These models have a certain fitting ability for nonlinear time series patterns and can extract the peak value, kurtosis, and their trend characteristics over time of impact signals, thereby distinguishing between sharp impacts and road surface noise and suppressing misjudgments caused by environmental interference. The training of this model can be completed in the cloud or offline environment, and after training, it can be deployed to the terminal control device for operation.

[0176] Specifically, the control device first constructs time-series data based on the sensing results. This time-series data can be a sequence of sensing data arranged in chronological order. In practice, a fixed-length sliding window (e.g., window length N=100 sampling points) can be used to extract data segments from the continuous sampling streams of sensors such as accelerometers, pressure film sensors, and temperature sensors. Each segment contains a sequence of sampling values ​​from each sensor within that time period. The control device inputs this time-series data into a first artificial intelligence model, which then outputs the analysis results.

[0177] Furthermore, the first artificial intelligence model can be further subdivided in structure. For example, it can be a composite model consisting of at least two sub-models: one sub-model is specifically responsible for dynamically adjusting the first threshold based on the status and / or environmental information of the first power supply device, and passing the adjusted first threshold as an input parameter to another sub-model; the other sub-model infers based on time-series data and the dynamically adjusted first threshold, and outputs the final analysis result.

[0178] The following section details the construction and operation of the first artificial intelligence model. See [link / reference]. Figure 5 , Figure 5This is a schematic diagram of the architecture of a first artificial intelligence model provided in an embodiment of this application. In this example, the first artificial intelligence model includes a threshold prediction sub-network and a risk analysis main network. The threshold prediction sub-network receives the current SOC, SOH, and ambient temperature of the first power supply device as input, and outputs an adjusted first threshold, which may include a temperature-related second threshold, a CO-related second threshold, etc. The risk analysis main network receives time-series window data (such as acceleration time-series data, temperature time-series data, pressure time-series data, and gas time-series data) composed of sensors such as acceleration, pressure, and temperature, as well as the adjusted threshold output by the threshold prediction sub-network. These are used as joint inputs in the splicing layer, and after the time-series features are extracted by the LSTM layer, the probability distribution of risk type and risk level is output through the fully connected layer. For example, given sensor window data for a period of impact, the model output is {risk type: micro-short circuit of battery cell, risk level: 0.75 (high risk)}.

[0179] The following provides examples illustrating the protective operations involved in the embodiments of this application.

[0180] After obtaining the analysis results, the control device can initiate corresponding protective operations based on the risk level, forming a tiered proactive intervention measure. This embodiment lists several types of protective operations that can be selected or used in combination.

[0181] Operation 1: Limit the terminal's movement speed to a first speed threshold. Limiting the terminal's movement speed reduces secondary damage to the damaged primary power supply equipment caused by vibration and load from continuous travel. For example, the first speed threshold can be set to 30 km / h.

[0182] Operation 2 restricts power replenishment operations exceeding a first power threshold. Power replenishment operations include replenishing power to the primary power supply device. Restricting high-power power replenishment operations prevents thermal runaway induced by high-current charging. Operation 2 is a protective measure for charging scenarios. Here, "power replenishment operation" broadly refers to various methods of supplying electrical energy from an external energy source to the primary power supply device, including DC fast charging, AC slow charging, battery swapping, and wireless charging. The first power threshold is a safety limit for restricting power replenishment, for example, it can be set to 20kW. When the protective operation is triggered, the power of DC fast charging will be limited below this value, or fast charging will be directly disabled, retaining only AC slow charging functionality, to avoid thermal runaway induced by high-current charging.

[0183] Operation 3: Activate the cooling system. The terminal includes a cooling system used to cool the primary power supply equipment. The cooling system refers to the device installed on the terminal for heat exchange and cooling of the primary power supply equipment, such as a liquid cooling circulation system (including a coolant pump, radiator, and cooling pipes), an air-cooled fan system, or a refrigerant direct cooling system. When the analysis results indicate a risk of abnormal temperature rise in the primary power supply equipment, the control device can actively activate the cooling system for forced cooling.

[0184] Optionally, the protective actions include one or more of the following: Activating the cooling system can actively suppress abnormal temperature rises.

[0185] Operation 4: Stop the operation of the power supply components within the first region of the first power supply equipment. The first region is the area within the first power supply equipment corresponding to the collision area. "Power supply component" refers to the smallest management unit in the first power supply equipment that performs energy storage and / or output functions, such as a single battery cell, a battery module composed of multiple cells connected in series and parallel, or a battery pack managed by the BMU. Stopping the operation of the power supply components corresponding to the collision area can prevent the local fault from spreading to the entire first power supply equipment.

[0186] Operation 5: Limit the power and / or voltage of the first power supply device. For example, limit the maximum discharge power to 50% of the rated value. Limiting the power and / or voltage of the first power supply device can reduce the risk of thermal runaway.

[0187] The aforementioned protective measures can be performed individually or in combination, matching the level of risk, to achieve a safety upgrade from passive alarm to active intervention, and to improve the safety and reliability of the primary power supply equipment after a collision.

[0188] In one possible implementation, the terminal also includes a fire extinguishing device. The analysis results include the risk level. If the risk level exceeds a first risk threshold, the protective operation further includes operation 6: activating the fire extinguishing device. For extreme scenarios where the risk level has reached an extremely high level and thermal runaway is unavoidable, this implementation introduces active fire intervention as the highest level of protective operation.

[0189] Optionally, the first risk threshold is the risk level threshold that triggers the highest level of protection operation. For example, the first risk threshold can be corresponding to a severe warning level. When the risk level of the analysis results reaches a severe warning level (e.g., one of the following conditions is met: temperature ≥80℃ and carbon monoxide concentration ≥500ppm, or temperature ≥100℃, or carbon monoxide concentration ≥1000ppm), the control device will activate the fire extinguishing device for active fire intervention while outputting emergency warning information.

[0190] To ensure users are promptly aware of any abnormalities in the primary power supply equipment, the control device, while performing protective operations, also outputs an initial alert through the terminal's human-machine interface. This initial alert informs the user of any malfunction in the primary power supply equipment. For example, it could be a text message popping up on the dashboard (e.g., "Battery pack malfunction, please drive with caution"), a brightly flashing battery icon on the central control screen, a voice prompt, or a steering wheel vibration alert. Through this initial alert, users are immediately aware of a potential risk event in the primary power supply equipment and can proactively take appropriate measures, such as pulling over to the side of the road or moving away from the vehicle as soon as possible.

[0191] In addition to indicating the abnormal status itself, the control device can further control the output of a second prompt message to explain to the user what specific protective operations have been performed. For example, the central control screen may display text notifications such as "Battery pack collision, maximum vehicle speed limited to 30km / h", "Battery temperature abnormal, liquid cooling system activated", or "Charging power limited".

[0192] In one possible implementation, the control device outputs a third prompt message to indicate the collision area of ​​the first power supply device. For example, the third prompt message may be a marker on the battery pack model diagram displayed on the central control screen, indicating the location of the damaged module by highlighting, flashing, or changing color (e.g., "Module 3 area damaged"), or it may directly output a text prompt, such as "Battery pack front left bottom collision, please proceed to the station for inspection."

[0193] See Figure 6 , Figure 6 This is a schematic diagram of an interface providing a prompt message, as illustrated in an embodiment of this application. Figure 6 In the center console, the collision area is indicated by overlaying a model diagram of the battery pack with a highlighted area. At the same time, the text "Battery pack left front bottom collision, the system has limited fast charging power" pops up, accompanied by a voice prompt "Battery pack abnormal, please drive with caution". The voice prompt is broadcast synchronously as shown in the figure, so as to achieve the parallel output of the first, second and third prompt information.

[0194] In one possible implementation, the terminal further includes a safety restraint system. When the analysis results indicate that the first power supply device has experienced thermal runaway or poses a fire risk, the control device sends a trigger signal to the safety restraint system to control the system to perform a safety restraint operation. Exemplarily, the safety restraint system includes one or more of the following: a door unlocking system, a window control system, and a hazard warning light system. Safety restraint operations include at least one of: automatically unlocking all doors, automatically lowering or opening windows, and automatically activating the hazard warning lights.

[0195] In one possible implementation, the control device generates a health report corresponding to the first power supply device based on analysis results, collision location, and sensing results. This health report is then uploaded to a cloud server or sent to maintenance personnel for specific cause analysis and problem localization. Furthermore, the cloud server can generate a maintenance work order based on the health report and contact the terminal driver. In one implementation of health report generation and cloud collaboration, the data encapsulated by the control device includes, but is not limited to: the timestamp of the collision, the collision area (e.g., area 3), the peak acceleration and direction at the time of the collision, the maximum voltage value of the pressure film sensor, the time-series data of the temperature sensor and gas sensor within 5 minutes after the collision, the final analysis results (risk type and risk level), and a list of executed protective operations.

[0196] Optionally, the report is uploaded to the cloud via the cellular network through the terminal's T-box communication module. After the cloud server parses the report, if the risk level is "moderate warning" or above, it automatically creates a repair order in the after-sales system, pushes the collision area and key sensor data to the repair technician, and sends a notification to the owner's mobile application, recommending that the vehicle be brought in for inspection as soon as possible.

[0197] Furthermore, the cloud can send corresponding secondary alerts during protective operations. Optionally, the push notification method is related to the risk level. For example, for low-risk levels, the alert may only be displayed on the relevant application, such as "Battery pack left front bottom collision, system has limited fast charging power." For medium-risk levels, in addition to the alert displayed on the application, the system may contact the vehicle owner via SMS or other means. For high-risk levels, in addition to the aforementioned low-risk and medium-risk push notifications, the system may call for roadside assistance or notify the user via phone.

[0198] In the above embodiments, the control device reduces the high false detection rate of a single sensor by fusing sensing data from multiple sensors, thereby improving the accuracy of detecting abnormal conditions in the first power supply device. Furthermore, the control device determines protective operations based on a first threshold related to the state of the first power supply device and / or its environment, enabling the first threshold to dynamically adapt to different operating conditions of the first power supply device. This avoids missed or false detections due to a fixed threshold, thus improving the accuracy and robustness of the detection.

[0199] The methods of the embodiments of this application have been described in detail above. The apparatus of the embodiments of this application is provided below.

[0200] It should be understood that the division of units in the apparatus provided in the embodiments of this application is only a logical functional division. In actual implementation, they can be fully or partially integrated into a single physical entity, or they can be physically separated. Furthermore, the units in the apparatus can be implemented by a processor calling software. For example, the apparatus includes a processor connected to a memory, which stores instructions. The processor calls the instructions stored in the memory to implement any of the above methods or to implement the functions of each unit of the apparatus. The processor is, for example, a general-purpose processor, such as a CPU or MPU, and the memory is either internal or external to the apparatus.

[0201] Alternatively, the units in the device can be implemented as hardware circuits. The functionality of some or all of the units can be achieved through the design of these hardware circuits, which can be understood as one or more processors. For example, in one implementation, the hardware circuit is an ASIC, and the functionality of some or all of the above units is achieved through the design of the logical relationships between the components within the circuit. In another implementation, the hardware circuit can be implemented using a PLD (Programmable Logic Controller). Taking an FPGA as an example, it can include a large number of logic gates, and the connection relationships between these logic gates are configured through configuration files to achieve the functionality of some or all of the above units.

[0202] In the embodiments of this application, each unit in the device may be one or more processors (or processing circuits) configured to implement the above methods, such as: CPU, GPU, NPU, TPU, DPU, MPU, digital signal processor (DSP), ASIC, FPGA, or a combination of at least two of these processor forms.

[0203] Furthermore, the units in the above devices can be integrated in whole or in part, or they can be implemented independently. In one implementation, these units are integrated together and implemented in the form of a System-on-Chip (SoC). The SoC may include at least one processor for implementing any of the above methods or implementing the functions of the units in the device. The at least one processor may be of different types, such as including a CPU and an FPGA, or including a CPU and an MCU, or including a CPU and a GPU, etc.

[0204] Several possible devices are listed below.

[0205] Please see Figure 7 , Figure 7 This is a schematic diagram of the structure of a control device provided in an embodiment of this application.

[0206] like Figure 7As shown, the control device 14 may include a communication module 701 and a processing module 702. The communication module 701 and the processing module 702 may be software, hardware, or a combination of both. The communication module 701 may implement sending and / or receiving functions, and may also be described as a transceiver unit. Alternatively, the control device 14 may further include a sending module for implementing sending functions.

[0207] In one possible design, the control device 14 may include functions for performing the above. Figure 3 The unit in the method embodiment shown is the one whose operation is performed by the control device, and each unit in the control device 14 is respectively for implementing the above-mentioned... Figure 3 The operations performed by the control device in the method embodiment shown.

[0208] Regarding the technical effects of this design and any possible implementation, please refer to the corresponding... Figure 3 The technical effects of the corresponding implementation methods are also described.

[0209] Optionally, in the above Figure 7 In any possible design of the control device 14 shown: In one implementation, the first vehicle and / or control device is a communication device. When the first vehicle and / or control device is a communication device, the communication module 701 can be a transceiver, or an input / output interface; optionally, the input / output interface can be an input / output circuit.

[0210] In another implementation, the first vehicle and / or control device is a chip (system) or circuit used in a communication device. When the control device is a chip (system) or circuit used in a communication device, the communication module 701 may be a communication interface (input / output interface), interface circuit, output circuit, input circuit, pins, or related circuits on the chip (system) or circuit; the processing module 702 may be at least one processor, processing circuit, or logic circuit.

[0211] According to the embodiments of this application, Figure 7The various units in the illustrated device can be individually or entirely combined into one or more other units, or some of the units can be further divided into multiple functionally smaller units. This achieves the same operation without affecting the technical effects of the embodiments of this application. The above-mentioned units are based on logical function division. In practical applications, the function of one unit can also be implemented by multiple units, or the function of multiple units can be implemented by one unit. In other embodiments of this application, the first vehicle and / or control device may also include other units. In practical applications, these functions can also be implemented with the assistance of other units, and can be implemented collaboratively by multiple units.

[0212] It should be noted that the implementation of each unit can also refer to the above. Figure 3 The corresponding description of the method embodiments shown.

[0213] Please see Figure 8 , Figure 8 This is a schematic diagram of another control device provided in an embodiment of this application.

[0214] It should be understood that Figure 8 The control device 14 shown is merely an example. The control device 14 in this embodiment may also include other components, or include components related to... Figure 8 Components with similar functions, or not necessarily including Figure 8 All components.

[0215] The control device 14 includes a communication interface 801 and at least one processor 802.

[0216] The communication interface 801 is used to send and receive signals, and at least one processor 802 executes program instructions to enable the control device 14 to implement the corresponding process of the method executed by the corresponding device in the above method embodiment.

[0217] In one possible design, the control device 14 may correspond to the above. Figure 3 The control device shown in the method embodiment may include components for performing the operations executed by the control device in the above method embodiment. Specific operations will not be described in detail here.

[0218] If the control device 14 can be a chip or a chip system, the chip includes a processor and an interface. There can be one or more processors, and multiple interfaces. It should be noted that the functions of the processor and interface can be implemented through hardware design, software design, or a combination of both; no restrictions are placed here.

[0219] Optionally, the chip may also include a memory for storing necessary program instructions and data.

[0220] In this application, the processor can be used to call an implementation program of the vehicle control method provided in one or more embodiments of this application from memory and execute the instructions contained in the program. The interface can be used to output the processor's execution results. Specifically, in this application, the interface can be used to output various messages or information from the processor.

[0221] For vehicle control methods provided in one or more embodiments of this application, please refer to the foregoing. Figure 3 The various embodiments shown are not described in detail here.

[0222] The processor in this application embodiment can be a Central Processing Unit (CPU), but it can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor.

[0223] The memory in this application embodiment is used to provide storage space, in which data such as operating system and computer programs can be stored. The memory includes, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), or compact disc read-only memory (CD-ROM).

[0224] According to the method provided in the embodiments of this application, the embodiments of this application also provide a computer-readable storage medium storing a computer program. When the computer program is run on one or more processors, it can implement the above-mentioned... Figure 4 The method shown.

[0225] According to the method provided in the embodiments of this application, the embodiments of this application also provide a computer program product, which includes a computer program. When the computer program runs on a processor, it can achieve the above-mentioned... Figure 3 The method shown.

[0226] This application embodiment also provides a vehicle terminal, which includes at least one control device 14 as described above, for performing the above-described... Figure 3 The steps performed by the corresponding device in any embodiment.

[0227] This application also provides a processing apparatus, including a processor and an interface; the processor is used to execute the method in any of the above method embodiments.

[0228] It should be understood that the aforementioned processing device can be a chip. For example, the processing device can be a field-programmable gate array (FPGA), a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, a system on-chip (SoC), a central processing unit (CPU), a network processor (NP), a digital signal processor (DSP), a microcontroller unit (MCU), a programmable logic device (PLD), or other integrated chips. It can implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software module can reside in a mature storage medium in the field, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, or registers. This storage medium is located in memory, and the processor reads information from the memory and, in conjunction with its hardware, completes the steps of the above method.

[0229] It is understood that the memory in the embodiments of this application can be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. The volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous linked dynamic random access memory (SLDRAM), and direct rambus RAM (DR RAM). It should be noted that the memory used in the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0230] The terms "first" and "second," etc., used in the specification, claims, and drawings of this application are used to distinguish different objects, not to describe a specific order. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products, or apparatuses.

[0231] The term "embodiment" as used herein means that a specific feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art will explicitly and implicitly understand that, unless otherwise specified or logically conflicting, the terminology and / or descriptions between the various embodiments of this application are consistent and can be mutually referenced, and technical features in different embodiments can be combined to form new embodiments based on their inherent logical relationships.

[0232] It should be understood that in this application, "at least one (item)" means one or more, "more than one" means two or more, "at least two (items)" means two or three or more, and "and / or" is used to describe the relationship between related objects, indicating that there can be three relationships. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the related objects before and after are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0233] It should be noted that, in this application, "instruction" can include direct instruction, indirect instruction, explicit instruction, and implicit instruction. When describing a certain instruction information for the purpose of instructing A, it can be understood that the instruction information carries A, directly instructs A, or indirectly instructs A.

[0234] In this application, the information indicated by the instruction information is called the information to be instructed. In specific implementations, there are many ways to indicate the information to be instructed, such as, but not limited to, directly indicating the information to be instructed, such as the information to be instructed itself or its index. It can also indirectly indicate the information to be instructed by indicating other information, where there is a correlation between the other information and the information to be instructed. It can also indicate only a part of the information to be instructed, while the other parts are known or pre-agreed upon. For example, the instruction of specific information can be achieved by using a pre-agreed (e.g., protocol-defined) arrangement of various information, thereby reducing instruction overhead to some extent. The information to be instructed can be sent as a whole or divided into multiple sub-information units, and the sending period and / or timing of these sub-information units can be the same or different. This application does not limit the specific sending method. The sending period and / or timing of these sub-information units can be predefined, for example, according to a protocol, or configured by the transmitting device by sending configuration information to the receiving device.

[0235] It should be noted that in this application, "send" can be understood as "output" and "receive" can be understood as "input". "Send information to A", where "to A" simply indicates the direction of information transmission, and A is the destination, does not limit "send information to A" to a direct transmission over the air interface. "Send information to A" includes sending information directly to A, as well as sending information indirectly to A through a transmitter. Therefore, "send information to A" can also be understood as "outputting information destined for A". Similarly, "receive information from A" indicates that the source of the information is A, including receiving information directly from A, as well as receiving information indirectly from A through a receiver. Therefore, "receive information from A" can also be understood as "inputting information from A".

[0236] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer or a data storage device such as a server or data center that integrates one or more available media. The available media may be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., high-density digital video discs (DVDs)), or semiconductor media (e.g., solid-state disks (SSDs)).

[0237] The units in the above-described device embodiments and the terminal devices in the method embodiments completely correspond to each other, with corresponding modules or units executing corresponding steps. For example, the communication unit (transceiver) executes the receiving or sending steps in the method embodiments, while other steps besides sending and receiving can be executed by the processing unit (processor). The specific functions of the units can be found in the corresponding method embodiments. There can be one or more processors.

[0238] It is understood that in the embodiments of this application, the terminal device may execute some or all of the steps in the embodiments of this application. These steps or operations are merely examples, and the embodiments of this application may also execute other operations or variations thereof. Furthermore, the steps may be executed in different orders as presented in the embodiments of this application, and it is not necessary to execute all the operations in the embodiments of this application.

[0239] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0240] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0241] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0242] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0243] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0244] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the contributing part, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0245] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application.

Claims

1. A terminal control method, characterized in that, The method is applied to a terminal, the terminal including a sensor system and a first power supply device, the sensor system being used to sense the first power supply device, and the method comprising: The sensor system obtains the perception results, which include the perception data obtained by multiple sensors in the sensor system. Based on the sensing results and the first threshold, it is determined whether to perform protective operations for the first power supply device. The first threshold is used to indicate the threshold corresponding to the sensing data sensed by the plurality of sensors respectively. The first threshold is related to the state of the first power supply device and / or the environment in which the first power supply device is located.

2. The method according to claim 1, characterized in that, The method further includes: Based on the sensing results, environmental information of the environment in which the first power supply device is located is obtained; If the environmental information indicates that the environment in which the first power supply device is located is a high-risk environment, the first threshold is updated based on the environmental information.

3. The method according to claim 2, characterized in that, The high-risk environment includes one or more of the following: The number of traffic participants in the environment exceeds the first quantity threshold; Environmental roads belong to the road type within the target road category; The ambient weather is the type of weather that is the target weather.

4. The method according to any one of claims 1-3, characterized in that, The first threshold includes second thresholds corresponding to the sensing data obtained by the first sensor and at least one second sensor among the plurality of sensors, and a third threshold corresponding to the sensing data obtained by the first sensor. The step of determining whether to perform protective operations for the first power supply device based on the sensing result and the first threshold includes: Based on the sensing data obtained from the first sensor and the at least one second sensor, and the second threshold, it is determined whether to perform a protective operation for the first power supply device, or... Based on the sensing data perceived by the first sensor and the third threshold, determine whether to perform protective operations for the first power supply device; The third threshold is greater than or equal to the second threshold.

5. The method according to any one of claims 1-4, characterized in that, The sensor system includes an accelerometer and / or a pressure film sensor. The acceleration sensor is used to detect whether the terminal has been involved in a collision, and the pressure film sensor is laid on the outer surface of the first power supply device to detect whether the first power supply device has been bumped or knocked.

6. The method according to claim 5, characterized in that, The sensor system also includes a detection sensor for detecting the status of the first power supply device. The acquisition of the sensing results obtained by the sensor system includes: Acquire first sensing data obtained by the acceleration sensor and / or pressure film sensor, the first sensing data being used to indicate whether the terminal and / or the first power supply device has been bumped or collided; When the first sensing data indicates that the terminal and / or the first power supply device has been bumped or knocked, the second sensing data obtained by the detection sensor is acquired.

7. The method according to claim 6, characterized in that, The detection sensor includes a temperature sensor and / or a gas sensor; The temperature sensor and / or the gas sensor are disposed within the first power supply device.

8. The method according to any one of claims 1-7, characterized in that, The step of determining whether to perform protective operations for the first power supply device based on the sensing result and the first threshold includes: Based on the perceived results and the first threshold, the analysis results are obtained, including the risk type and / or risk level; Based on the analysis results, it is determined whether to perform protective operations on the first power supply device.

9. The method according to claim 8, characterized in that, The sensor system includes multiple collision sensors, and the analysis results also include the collision area of ​​the first power supply device.

10. The method according to any one of claims 1-9, characterized in that, The terminal includes a cooling system for cooling the first power supply device. The protective operation includes one or more of the following: Limit the terminal's movement speed to a first speed threshold; Restricting the execution of power replenishment operations that exceed a first power threshold, the power replenishment operations including the operation of replenishing power to the first power supply device; Start the cooling system; Stop operating the power supply components included in the first area of ​​the first power supply device, where the first area is the area in the first power supply device corresponding to the collision area; Limit the power and / or voltage of the first power supply device.

11. The method according to claim 8, characterized in that, The terminal also includes a fire extinguishing device, and the analysis results include a risk level. If the risk level exceeds a first risk threshold, the protective operation also includes activating the fire extinguishing device.

12. The method according to any one of claims 1-11, characterized in that, The method further includes: When performing protective operations on the first power supply device, a first prompt message is output, which is used to prompt the first power supply device.

13. The method according to any one of claims 1-12, characterized in that, The method further includes: Output a second prompt message, which is used to prompt the protection operation.

14. The method according to any one of claims 1-13, characterized in that, The method further includes: Output a third prompt message, which is used to indicate the collision area of ​​the first power supply device.

15. A control device, characterized in that, Includes units for performing the method as described in any one of claims 1 to 14.

16. A control device, characterized in that, Includes a processor for performing the method as described in any one of claims 1 to 14.

17. A chip, characterized in that, It includes logic circuits and interfaces, wherein the logic circuits and the interfaces are coupled; The interface is used for inputting and / or outputting information, and the logic circuit is used for performing the method as described in any one of claims 1 to 14.

18. A terminal, characterized in that, The terminal includes a sensor system and a first power supply device, the sensor system being used to sense the first power supply device, and a control device as described in claim 15, or the control device as described in claim 16, or the chip as described in claim 17.

19. A computer-readable storage medium, characterized in that, The computer-readable storage medium is used to store a computer program, which, when executed, performs the method as described in any one of claims 1 to 14.

20. A computer program product, characterized in that, The computer program product includes a computer program, which, when executed, performs the method as described in any one of claims 1 to 14.

Images