A battery module level shutdown bms system
The BMS system, which uses battery module-level shutdown, employs solid-state switches and electronic fast shutdown devices to isolate faulty modules within microseconds, thus mitigating the risk of thermal runaway propagation and reducing system downtime and maintenance costs.
Patent Information
- Application Number
- CN202522041520.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2025-09-23
- Publication Date
- 2026-08-25
- Estimated Expiration
- 2035-09-23
AI Technical Summary
Existing battery management systems cannot effectively prevent heat caused by internal faults in battery modules from spreading to adjacent modules, posing a risk of thermal runaway. Traditional protection measures are slow to respond and cannot isolate heat transfer between modules.
Design a battery module-level shutdown BMS system that uses a power MOSFET-based solid-state switch to disconnect the electrical connection between the faulty module and other modules in microseconds, and achieves recoverable module isolation through an electronic fast shutdown device.
It enables the isolation of faulty modules within microseconds, reducing system downtime and energy loss, lowering maintenance costs, and ensuring that healthy modules continue to operate.
Smart Images

Figure CN224683860U_ABST
Abstract
Description
Technical Field
[0001] This utility model relates to the field of batteries, and in particular to a battery module-level shutdown BMS system. Background Technology
[0002] Rapid Development and Safety Challenges of Energy Storage Systems: With the popularization of renewable energy and the surge in grid peak-shaving demand, the scale and application scope of electrochemical energy storage systems (especially lithium-ion battery energy storage systems) are constantly expanding. Large-scale energy storage systems typically consist of multiple battery packs, each containing dozens or even hundreds of battery modules connected in series or parallel. However, battery systems, especially high-energy-density lithium-ion batteries, are subject to thermal runaway risks. Once a short circuit, overcharge, over-discharge, mechanical damage, or thermal abuse occurs within a single battery cell or module, it can trigger thermal runaway and generate a large amount of heat and flammable gases. If the heat and flames cannot be quickly isolated, they can spread like dominoes to adjacent modules, packs, and even the entire energy storage system, causing catastrophic accidents (fires, explosions).
[0003] Limitations of existing protection methods: Traditional battery management system (BMS) safety protection measures are mainly concentrated at the pack level or system level: 1. Pack-level relays / contaminators: When the BMS detects a serious pack-level fault (such as total voltage overvoltage / undervoltage, total current overcurrent, or overall pack temperature overheating), it disconnects the pack from the external circuit (positive and negative main circuits). Disadvantages: The response is relatively slow (milliseconds), and once disconnected, the entire pack stops working, even if the fault originates from only one module. More importantly, disconnecting the pack-level contactor cannot prevent the heat generated by the faulty module inside the pack from spreading to adjacent healthy modules, and the risk of thermal runaway propagation remains high; 2. Fuses: Commonly used for overcurrent protection. Disadvantages: Fuses are one-time use and need to be replaced; fuse blowing takes a certain amount of time (usually milliseconds or longer), and the operating characteristics are affected by factors such as ambient temperature and aging; after blowing, the entire circuit (which may contain multiple modules) is also de-energized; it also cannot isolate heat transfer between modules.
[0004] Therefore, in order to solve the above problems, how to design a battery module-level shutdown BMS system is a technical problem that the industry urgently needs to solve. Utility Model Content
[0005] The purpose of this invention is to provide a battery module-level shutdown BMS system to solve the problem mentioned in the background art of heat generated by a faulty module inside the pack spreading to adjacent healthy modules and the risk of thermal runaway propagation.
[0006] To achieve the above objectives, this utility model provides the following technical solution: A battery module-level shutdown BMS system includes a BMS-master controller, which is electrically connected to a manual button, a cloud platform, a warning signal module, and a fire alarm module. The BMS-master controller is also electrically connected to a first loop module, which performs a loop shutdown operation according to the control command output by the BMS-master controller.
[0007] Preferably, the first loop module includes a protection circuit module, a PCS, and several sets of BMS slave controllers. The protection circuit module has port one and port two, and the BMS slave controllers include port three and port four. Adjacent BMS slave controllers are connected in series to achieve electrical connection and signal interaction. The positive terminal of port three of the frontmost BMS slave controller is electrically connected to the positive terminal of port one of the protection circuit module, and the negative terminal of port one of the protection circuit module is electrically connected to the negative terminal of port three of the rearmost BMS slave controller. The positive and negative terminals of port two of the protection circuit module are respectively connected to the positive and negative terminals of the PCS.
[0008] Preferably, the BMS master controller is connected to the frontmost BMS slave controller, protection circuit module, and PCS via electrical signals.
[0009] Preferably, the first circuit module is connected to several battery packs, and the positive and negative terminals of the battery packs are connected to the positive and negative terminals of the BMS-slave control port four respectively, and the battery packs correspond one-to-one with the BMS-slave control.
[0010] Preferably, the BMS-slave controller includes a circuit module and an electrical signal module, and the BMS-slave controller is provided with a data acquisition harness.
[0011] Preferably, the circuit module one includes an electronic power device, a bypass module, and a detection module. The electronic power device is connected in series between port three and port four. The electronic power device and port four are connected in parallel to the detection module. Adjacent electronic power devices are connected in series, and adjacent electronic power devices are connected in parallel to the bypass module.
[0012] Preferably, the electrical signal module includes an acquisition module, a detection module, an equalization module, an MCU, electronic power devices, an auxiliary power supply module, and a communication module. The MCU is electrically connected to the acquisition module, the detection module, the equalization module, the electronic power devices, the auxiliary power supply module, and the communication module, respectively. The acquisition harness is electrically connected to the acquisition module and the equalization module, respectively.
[0013] The beneficial effects of this utility model are: 1. Integrate a protection circuit module (such as a solid-state switch based on power MOSFET) at the positive and / or negative terminals of each battery pack. When a fault is detected in the module itself (such as abnormal voltage, current, temperature, internal short circuit indication, etc. within the battery pack) or when a shutdown command is received from the BMS-master controller, the electrical connection between the module and other modules in the battery pack can be quickly cut off within microseconds (µs).
[0014] 2. By isolating a faulty battery pack, other healthy battery packs within the same pack can continue to operate (although the total voltage / capacity of the battery pack is reduced). The system can operate at a derating rate instead of completely shutting down. This significantly reduces downtime and energy loss to the entire battery pack or system due to a single battery pack failure.
[0015] 3. The protection circuit module employs an electronic fast-shutdown device, which is a resettable switching device. Once the fault is cleared (or confirmed to be a false alarm), the shut-off device can be remotely or automatically reset via BMS-slave control commands to restore the module's connection. This eliminates the need for manual on-site replacement of components (such as fuses), greatly simplifying operation and maintenance and reducing maintenance costs. Attached Figure Description
[0016] Figure 1 This is a system diagram of an embodiment of the present utility model; Figure 2 This is an embodiment of the present utility model. Figure 1 Schematic diagram of BMS-slave control deployment. Detailed Implementation
[0017] The technical solutions of the present utility model will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of the present utility model, and not all embodiments. Based on the embodiments of the present utility model, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the protection scope of the present utility model.
[0018] See Figures 1-2 This utility model provides a battery module-level shutdown BMS system, including a BMS-main controller. The BMS-main controller is electrically connected to a manual button, a cloud platform, a warning signal module, and a fire alarm module. The BMS-main controller is electrically connected to a first loop module, and the first loop module performs a loop shutdown operation according to the control command output by the BMS-main controller.
[0019] The BMS master controller is responsible for performing SOC calculations on the battery-related information transmitted from the BMS slave controller module and uploading it to the EMS system on the cloud platform in real time via RS485 bus. It also communicates with the low-voltage charger via CAN2 to achieve battery cluster management.
[0020] The fire protection module is equipped with various detectors to monitor parameters such as temperature, smoke, and combustible gas inside the energy storage facility in real time. Once an abnormality is detected, the system will immediately issue an alarm and initiate corresponding fire extinguishing measures to minimize the loss of life and property caused by the fire.
[0021] The warning signal module uses an alarm light and an alarm bell.
[0022] The manual button is mainly for deducting from the sample.
[0023] The cloud platform uses an EMS system.
[0024] See Figure 1 Specifically, the first loop module includes a protection circuit module, a PCS, and several sets of BMS slave controllers. The protection circuit module has port one and port two, and the BMS slave controllers include port three and port four. Adjacent BMS slave controllers are connected in series to achieve electrical connection and signal interaction. The positive terminal of port three of the frontmost BMS slave controller is electrically connected to the positive terminal of port one of the protection circuit module, and the negative terminal of port one of the protection circuit module is electrically connected to the negative terminal of port three of the rearmost BMS slave controller. The positive and negative terminals of port two of the protection circuit module are respectively connected to the positive and negative terminals of the PCS.
[0025] The PCS is responsible for controlling the charging and discharging of the battery.
[0026] The protection circuit module employs an electronic fast shutdown device.
[0027] See Figure 1 Specifically, the BMS master controller is connected to the BMS slave controller, protection circuit module and PCS at the front end via electrical signals.
[0028] See Figure 1 Specifically, the first circuit module is connected to several battery packs, and the positive and negative terminals of the battery packs are connected to the positive and negative terminals of the BMS-slave control port four respectively. The battery packs correspond one-to-one with the BMS-slave control.
[0029] See Figures 1-2 Specifically, the BMS-slave controller includes a circuit module and an electrical signal module, and the BMS-slave controller is equipped with a data acquisition harness.
[0030] See Figures 1-2 Specifically, the circuit module one includes an electronic power device, a bypass module, and a detection module. The electronic power device is connected in series between port three and port four. The electronic power device and port four are connected in parallel to the detection module. Adjacent electronic power devices are connected in series, and adjacent electronic power devices are connected in parallel to the bypass module.
[0031] The electronic power device is used for circuit equalization.
[0032] The bypass module ensures the normal operation of the entire BMS system when the battery pack is short-circuited.
[0033] The detection module is used to detect open circuits in the battery.
[0034] See Figures 1-2 Specifically, the electrical signal module includes an acquisition module, a detection module, an equalization module, an MCU, electronic power devices, an auxiliary power supply module, and a communication module. The MCU is electrically connected to the acquisition module, the detection module, the equalization module, the electronic power devices, the auxiliary power supply module, and the communication module, respectively. The acquisition harness is electrically connected to the acquisition module and the equalization module, respectively.
[0035] Among them, the equalization module and the equalization circuit unit charge the lowest voltage individual cell.
[0036] The data acquisition module collects the voltage and temperature of individual battery cells.
[0037] The communication module communicates with the BMS master controller.
[0038] The auxiliary power module is used to supply power to the MCU and the equalization circuit.
[0039] Working principle of this utility model: Automatic shutdown: When the BMS slave controller detects abnormal parameters such as voltage, current, and temperature of the cells inside the battery pack, it will implement different controls according to internally set control requirements. If a specific threshold is reached, the BMS slave controller will initiate automatic shutdown and switch to the bypass module. At this time, the abnormal battery pack is open-circuited, and all other battery packs in the series circuit can continue to operate. Because power devices are used to achieve shutdown, the time is on the order of microseconds, protecting the safety of the entire circuit while ensuring the normal operation of the entire system.
[0040] Linked shutdown: When the BMS master controller receives an abnormality from the protection circuit, PCS, or warning signal module, it will actively send a fast shutdown command to the BMS slave device, which will then control the shutdown.
[0041] Remote shutdown: Operators can remotely control the shutdown of the BMS slave from the app or web interface.
[0042] Shutdown and recovery: In the case of automatic shutdown, the system will automatically shut down and resume operation after the battery parameters are detected to be normal. If automatic shutdown due to malfunction occurs 5 times in a day, manual forced recovery is required.
[0043] In the event of a shutdown, a recovery command needs to be issued by the BMS master control device to restore the shutdown. After detecting the recovery of each abnormal state, the BMS master control device issues a recovery command to the BMS slave control device.
[0044] In the event of a remote shutdown, the operator needs to issue a recovery command through the app or web interface for the system to fully recover.
[0045] The above description is only a preferred embodiment of the present utility model and is not intended to limit the present utility model. Any modifications, equivalent substitutions or improvements made within the spirit and principles of the present utility model should be included within the protection scope of the present utility model.
Claims
1. A battery module-level shutdown BMS system, comprising a BMS-main controller, characterized in that: The BMS-main controller is electrically connected to the manual button, cloud platform, warning signal module and fire protection module respectively. The BMS-main controller is also electrically connected to the first loop module, which performs loop shutdown operation according to the control command output by the BMS-main controller.
2. The BMS system for battery module-level shutdown according to claim 1, characterized in that: The first loop module includes a protection circuit module, a PCS, and several sets of BMS slave controllers. The protection circuit module has port one and port two. The BMS slave controllers include port three and port four. Adjacent BMS slave controllers are connected in series to achieve electrical connection and signal interaction. The positive terminal of port three of the frontmost BMS slave controller is electrically connected to the positive terminal of port one of the protection circuit module. The negative terminal of port one of the protection circuit module is electrically connected to the negative terminal of port three of the rearmost BMS slave controller. The positive and negative terminals of port two of the protection circuit module are respectively connected to the positive and negative terminals of the PCS.
3. The BMS system for battery module-level shutdown according to claim 2, characterized in that: The BMS master controller is connected to the BMS slave controller, protection circuit module and PCS at the front end via electrical signals.
4. The BMS system for battery module-level shutdown according to claim 2, characterized in that: The first circuit module is connected to several battery packs, and the positive and negative terminals of the battery packs are connected to the positive and negative terminals of the BMS-slave control port four respectively. The battery packs correspond one-to-one with the BMS-slave control.
5. A battery module-level shutdown BMS system according to claim 3, characterized in that: The BMS-slave controller includes a circuit module and an electrical signal module, and the BMS-slave controller is equipped with a data acquisition harness.
6. The BMS system for battery module-level shutdown according to claim 5, characterized in that: The circuit module one includes an electronic power device, a bypass module, and a detection module. The electronic power device is connected in series at ports three and four. The electronic power device and port four are connected in parallel to the detection module. Adjacent electronic power devices are connected in series, and adjacent electronic power devices are connected in parallel to the bypass module.
7. A battery module-level shutdown BMS system according to claim 6, characterized in that: The electrical signal module includes an acquisition module, a detection module, an equalization module, an MCU, electronic power devices, an auxiliary power supply module, and a communication module. The MCU is electrically connected to the acquisition module, the detection module, the equalization module, the electronic power devices, the auxiliary power supply module, and the communication module, respectively. The acquisition harness is electrically connected to the acquisition module and the equalization module, respectively.