Safety system for electromobility

Abstract

Described is a safety system (5) for installation between a vehicle traction battery (4) and at least one electrical component (2, 7, 6) to be protected or a battery management system (6) of a vehicle (1) equipped with an electric drive motor (2), comprising: at least one current sensor (8), in particular comprising a shunt configured to measure at least one value (12) of an electric current (I) flowing through the safety system; a configuration module (9) with electronic memory (10) configured to store at least one configurable current threshold (13); an evaluation logic (11) configured to generate a control signal (14, 14', 14") based on the at least one current value and the at least one current threshold;at least a mechanism (15) configured to limit the electrical current flowing through the safety system based on the control signal according to the threshold value relating to at least one configurable current.

Description

Field of invention

[0001] The present application relates to a safety system for installation between a vehicle traction battery and at least one electrical component to be protected or a battery management system of a vehicle equipped with an electric drive motor. Furthermore, the present invention relates to a power supply system for a vehicle equipped with an electric drive motor, further relates to a vehicle, and further relates to a method for protecting at least one electrical component to be protected of a vehicle equipped with an electric drive motor. State of the art

[0002] Current vehicle manufacturing focuses primarily on the further development of vehicles equipped with electric drive motors, such as electric vehicles or hybrid vehicles. These electric drive motors are powered by a vehicle battery operating at high voltage. During the development of products or components in the field of high-voltage drive technology, an increased safety risk exists in the early stages of development, both for vehicle components and for users or developers. This risk can arise from the assembly of various components with varying levels of development maturity. Batteries still under development, which do not yet possess final load-bearing capacity or meet safety criteria, can also pose risks to components, developers, or users.Especially when these components are operated within a system, for example a vehicle, particularly a test vehicle, the risk of a component malfunctioning or overloading can be high.

[0003] Malfunctions can, for example, result in a short circuit of the battery and a battery fire.

[0004] There is therefore a need for a safety system in the field of high-voltage drive technology, particularly suitable for development work, that provides greater safety when developing, handling, or using components in this field. Furthermore, there is a corresponding need for a power supply system for high-voltage drive technology that also provides enhanced safety. Finally, there is a need for a suitably equipped vehicle and a method for protecting at least one electrical component of a vehicle. Summary of the invention

[0005] The need is met by the subject matter of the independent claims. Dependent claims specify particular embodiments of the present invention.

[0006] According to one embodiment of the present invention, a safety system for installation between a vehicle traction battery and at least one electrical component to be protected or a battery management system of a vehicle equipped with an electric drive motor is provided, comprising: at least one current sensor, in particular comprising a shunt, which is configured to measure at least one value of an electric current flowing through the safety system; a configuration module with electronic memory, which is configured to store at least one configurable current-related threshold value; an evaluation logic, which is configured to generate a control signal based on the at least one value of the current and the at least one current-related threshold value;at least one mechanism designed to limit the electrical current flowing through the safety system, based on the control signal, according to at least one configurable current-related threshold. In addition to configurable absolute values ​​for current monitoring, gradient monitoring (also configurable) of the current may also be possible.

[0007] Exceeding the configured absolute values / gradients can cause the safety box to establish a safe system state (disconnection, either reversibly via contactor / contactor or irreversibly via pyro-fuse), either independently or via an emergency stop switch; see also below. The safety system can be implemented in hardware and / or software, preferably purely in hardware. The safety system can be used in high-voltage drive technology, particularly during the development of components for a vehicle equipped with an electric drive motor.

[0008] The vehicle traction battery may include an accumulator, making the battery rechargeable. The vehicle traction battery may provide a high voltage, in particular, for example, between 300 V and 900 V, in particular, for example, essentially 400 V, or essentially 800 V.

[0009] The electrical component to be protected can be, for example, the vehicle's traction battery itself, and / or the battery management system, and / or any electrical component of the vehicle that is powered, or intended to be powered, by the vehicle's traction battery. In particular, the safety system can prevent any component to be protected from being subjected to an excessive electrical current that would exceed the component's current-carrying capacity. The electrical component can also include, for example, the electric drive motor, which can be subjected to significant electrical currents during operation, especially during acceleration or deceleration.

[0010] Depending on the stage of development, the battery itself can be the component to be protected. The system can be used not only in vehicles, but also on system test benches.

[0011] The battery management system, if present, may include monitoring and / or safety functionality for the battery and / or a battery network, at least in a fully developed stage. For example, the battery management system may monitor the state of charge of the vehicle's traction battery and / or monitor currents and / or voltages supplied, delivered, or received by the vehicle's traction battery. If the battery management system is not yet fully developed and is still under development, safety and / or monitoring functionalities may not yet be reliably available or functioning.

[0012] The safety system is specifically designed to provide safety functionalities, particularly those redundant to or in addition to those of the battery management system. For example, the safety system can ensure that currents flowing into a protected electrical component, such as the vehicle's traction battery, a stator of an electric drive motor, an inverter or converter of the electric drive motor, or other components, are limited in magnitude, restricted, or completely shut off if their current would exceed the load-carrying capacity of the protected component(s).

[0013] The safety system incorporates a current sensor to measure the current flowing through it (for example, from the battery through the safety system to a component to be protected, or from a vehicle component through the safety system back into the battery, for example, for charging). The current sensor might include an electrical resistor through which the current flows, and the voltage drop across the resistor is measured. The current can then be calculated using Ohm's law from the voltage drop and the resistance.

[0014] The shunt can also be described as a shunt resistor or parallel resistor and can be installed in the conductor carrying the current being measured. A measuring voltage across the shunt can be tapped in a four-wire connection via two additional voltage clamps (also called Kelvin clamps or Kelvin contacts) located between the current terminals, in order to reduce or eliminate the uncertainty caused by contact resistances at the current terminals.

[0015] The safety system can, for example, be connected to one pole of the vehicle traction battery, such as the positive or negative pole, and on another side to a pole of the battery management system or to one or more components to be protected, in particular to a vehicle traction battery network.

[0016] The configuration module allows the safety system to be configured according to which electrical characteristics of the currents trigger specific safety functionalities or measures. For example, the configuration module can be designed to define under which electrical conditions which safeguards or safety measures are taken. The configuration module can, for example, be designed to store between one and 100 current-related threshold values, particularly together with associated time interval thresholds, to specify a time threshold over which a certain current is maximally tolerable.

[0017] The evaluation logic can access the configuration module's electronic memory to read at least one or more current-related threshold values. The measured electrical current value can be evaluated with regard to its magnitude and / or its temporal profile. Based on the at least one current-related threshold value, the evaluation logic applies criteria that can result in limiting or shutting off the current. The evaluation logic can, for example, perform arithmetic / logical functions, taking as input at least one value of the electrical current flowing through the safety system and at least one current-related threshold value.

[0018] The mechanism for limiting the current flowing through the safety system can comprise one or more (mechanical and / or electronic), in particular controllable, switches (e.g., transistors) or other electronic components and / or circuits, in order to interrupt an electrical connection or to limit the current flowing through the uninterrupted electrical connection according to the current-related threshold. This ensures electrical safety through the redundant or additional safety system, even if other components are not yet fully developed, at least with regard to safety functionalities.

[0019] According to one embodiment of the present invention, the security system is configured such that the configuration module is set up to grant user-dependent access rights, in particular write rights, to the electronic storage, and / or wherein an administrator user has unrestricted access rights to the electronic storage, wherein a non-administrator user has restricted access rights to the electronic storage, in particular no write rights but read rights, and / or wherein the security system has a display to show the at least one configurable current-related threshold to a user.

[0020] For example, an administrator user can write or save one or more threshold values ​​to the electronic memory, preventing non-administrator users from changing these threshold values. The administrator user can, for instance, set the threshold values ​​based on the vehicle's components in such a way that the least resilient component is protected from overload.

[0021] Performance-limited components may include (but are not limited to): - Contactor of a BMS (current carrying capacity is limited, for example, by current (A) and time (sec.). (e.g., 1000 A for max. 10 sec. / or 500 A for max. 2000 sec.) - Cables and busbars (e.g., high-voltage connection cables between energy storage and BMS or power lines within a BMS) - Limit values ​​similar to above, depending on the cable cross-section - High-voltage cable connectors - Battery cells (current values ​​as above, duration in the approx. 100-200ms range when exceeding the normal operating range - e.g. ~2000 A) - In the event of a high-voltage short circuit, significantly shorter times apply due to the very high current gradients and the associated arcs (roughly on the order of magnitude >7000 A for max. 2-3 ms). - Current BEV vehicles (“Battery Electric Vehicle”) typically have a maximum normal current flow of approximately 2000 A.

[0022] This prevents threshold values ​​from being changed incorrectly, which could compromise safety. The components to be protected can include, for example, battery (cells) and / or inverter / power electronics and / or contactors and / or busbar (battery junction box) and / or electric motor. Current and gradient limits should always be designed for the weakest link in the chain, taking into account the duration of the respective load. Typical currents can range from ±2000 A. Very short peaks above these values ​​are possible and may be permissible. During load changes, gradients greater than 10 kA / s can occur (for a few milliseconds). The values ​​above can be used for tolerable levels, limit values, maximum values, or extreme values ​​of current or current gradient (current threshold, current gradient threshold).

[0023] For example, a user can be shown that the security system is performing a shutdown or limitation function during a certain period of time, which can be advantageous for further development, troubleshooting, or error correction.

[0024] According to one embodiment of the present invention, the safety system is designed such that the configurable current-related threshold comprises at least one of the following: a configurable current threshold, in particular with an associated time interval threshold; a configurable current gradient threshold or current rate of change threshold, in particular with an associated time interval threshold; a configurable threshold for a current time integral or power time integral or a current time sum or power time sum.

[0025] For example, if the current threshold is exceeded for longer than the assigned time interval threshold, the safety system can initiate a current limitation or interruption. Similarly, if the current gradient remains above the current gradient threshold for longer than the assigned time interval threshold, the safety system can initiate a limitation or shutdown function. Various criteria for triggering limitation or shutdown functions can be logically combined using "and" or "or" to create complex decision trees that can be adapted to the specific application, particularly the vehicle design and components used.

[0026] According to one embodiment of the present invention, the evaluation logic is configured to generate an interrupt signal as a control signal if at least one current value is incompatible with the configurable current threshold. The mechanism is configured to reversibly or irreversibly interrupt the electrical current flowing through the safety system or to disconnect a connection if it receives the interrupt signal. The mechanism comprises, in particular, a relay, especially a contactor, and / or, in particular, a pyrofuse. The pyrofuse can be integrated into the safety system in a way that is as isolated as possible (and / or suitablely housed and / or spatially separated) so that it can be replaced with minimal effort and does not lead to the destruction of the entire safety system when triggered.

[0027] The safety system can, for example, include an interruption function and / or a limiting function as a safeguard or safety feature. For each type of safety function, such as interruption or limiting, one or more current-related threshold values ​​can be defined, as explained above. The interruption function allows the current flowing through the safety system, and thus to or from the protected component, to be completely interrupted, i.e., reduced to 0 A, thereby protecting the component against damage. If the current is interrupted reversibly, the interruption can be terminated, for example, once a fault has been rectified, and the current can once again flow through the safety system and into or from the component.If the current is irreversibly interrupted, it is no longer possible to resume the current flow and one or more elements or components of the safety system must be replaced or the entire safety system must be replaced.

[0028] A contactor is a high-voltage relay that interrupts an electrical connection. A pyrotechnic fuse, when activated, can blast sections of electrical connecting cables to the high-voltage battery. Small explosions can drive a wedge through the high-voltage cable between the battery unit and the power electronics, severing the connection and thus de-energizing the vehicle, eliminating the risk of fire or electric shock. A pyrotechnic fuse can therefore irreversibly interrupt the electrical current.

[0029] According to one embodiment of the present invention, the evaluation logic is configured to generate a limiting signal as a control signal if at least one value of the current is not compatible with the configurable current threshold, wherein the mechanism is configured to reduce the electric current flowing through the safety system according to the configurable current threshold if it receives the limiting signal.

[0030] In this embodiment, the current is therefore not completely interrupted, but reduced to a tolerable value, i.e., limited.

[0031] According to one embodiment of the present invention, the at least one configurable current-related threshold is specifically provided for, and / or determined taking into account, a component with the highest current limit. For example, the configurable current-related threshold can be provided depending on whether the mechanism relates to a contactor or a pyrofuse.

[0032] More than two different safety functionalities can be provided in the safety system, which are triggered under various criteria relating to the electrical current flowing through the system. If one or more threshold mechanisms can be specifically provided, the flexibility of the safety system can be increased, and it can respond individually to specific faults or load cases through appropriate measures.

[0033] According to one embodiment of the present invention, the safety system further comprises a driver circuit configured to drive the mechanism based on the control signal; and / or a triggering mechanism configured to trigger the mechanism based on the control signal; and / or a control input, in particular a CAN interface, into which an external control signal can be input to function as an interrupt signal and / or as a limit signal.

[0034] The driver circuit allows the evaluation logic to be implemented separately from the specific control requirements of the mechanism, thus simplifying implementation. The driver circuit can be designed for one or more mechanisms and control each specific mechanism appropriately. This provides various implementation alternatives.

[0035] The control input can advantageously allow one or more safety functionalities to be triggered or activated by an externally applied signal. For example, an emergency shutdown switch can be provided for a user, such as a test driver or a developer, which is connected to the safety system. This allows the safety system to be triggered or controlled manually.

[0036] According to one embodiment of the present invention, the vehicle traction battery is designed to supply energy to the electric drive motor during vehicle operation, and / or the vehicle is configured as an electric or hybrid vehicle; and / or the vehicle traction battery is configured to provide a voltage between 300 V and 900 V; and / or the system is implemented purely by electronic components, in particular without software; and / or the safety system is powered via a 12 V vehicle electrical system. This allows for the support of conventionally available systems.

[0037] According to one embodiment of the present invention, an energy supply system for a vehicle equipped with an electric drive motor is provided, particularly in the development stage, comprising: a vehicle traction battery; at least one electrical component of the vehicle to be protected and / or a battery management system; a safety system according to one of the preceding embodiments, which is electrically connected, particularly in series, between the vehicle traction battery and the component to be protected or the battery management system.

[0038] This allows for the provision of an intelligent energy supply system that offers increased security compared to the state of the art, especially for components still under development.

[0039] According to one embodiment of the present invention, the battery management system and / or the vehicle traction battery is in a state of development, in particular without mature safety functionality; and / or wherein the safety system provides redundant or additional safety functionality.

[0040] According to one embodiment of the present invention, a vehicle, in particular a test vehicle, is provided comprising: an electric drive motor; an energy supply system according to a preceding embodiment, wherein the electric drive motor can be supplied with energy from the vehicle drive battery via the safety system.

[0041] Features that are mentioned, described, explained and provided individually or in any combination in connection with a safety system or with a power supply system may likewise be applied or provided individually or in any combination to a vehicle or to a method of protecting at least one electrical component to be protected.

[0042] According to one embodiment of the present invention, a method for protecting at least one electrical component to be protected of a vehicle equipped with an electric drive motor is provided, the method comprising: measuring, by means of at least one current sensor of a safety system installed between a vehicle traction battery and the electrical component to be protected or a battery management system, at least one value of an electric current flowing through the safety system; accessing an electronic memory of a configuration module of the safety system in which at least one current-related threshold value is stored; generating, by means of an evaluation logic of the safety system, a control signal based on the at least one value of the current and the at least one current-related threshold value;and limit, based on the control signal, the electrical current flowing through the safety system according to the threshold value relating to at least one configurable current.

[0043] The method can be implemented in software and / or hardware, in particular purely in hardware. The method can be carried out with a safety system according to another embodiment.

[0044] According to one embodiment of the present invention, the method is carried out on a test bench, in particular HIL, and / or during a test drive, while at least one electrical component, in particular a battery management system and / or the vehicle traction battery, is in a development stage.

[0045] Further advantages and features of the present invention will become apparent from the following exemplary description of preferred embodiments. Brief description of the drawings The figure schematically shows a vehicle according to an embodiment of the present invention, which includes a power supply system according to an embodiment of the present invention. Detailed description of embodiments

[0046] It should be noted that the embodiments described below represent only a limited selection of possible embodiments of the invention.

[0047] The vehicle 1, schematically depicted in the figure, comprises an electric drive motor 2 designed to drive the drive wheels (not shown). The vehicle 1 further comprises a power supply system 3 according to an embodiment of the present invention. The power supply system 3 includes a vehicle battery 4 and a battery management system 6, as well as at least one component to be protected, wherein the component to be protected comprises, for example, the electric motor 2 or other control, display, and operating components 7. The power supply system 3 further comprises a safety system 5, which is electrically connected between the vehicle drive battery 4 and the component to be protected, for example, the battery management system 6, components 7, or the electric motor 2. The electric drive motor 2 can be supplied with energy from the vehicle drive battery 4 via the safety system 5.

[0048] The safety system 5 comprises at least one current sensor 8 configured to measure at least one value 12 of an electric current I flowing through the safety system 5. The safety system 5 further comprises a configuration module 9 with an electronic memory 10 configured to store at least one configurable current threshold. The safety system 5 further comprises an evaluation logic 11 configured to generate a control signal 14 based on the at least one value 12 of the current measured by the current sensor 8 (for example, represented by measurement signal 12) and the at least one current threshold (for example, represented by signal 13, which is read from the memory 10).

[0049] The safety system 5 further comprises a mechanism 15 which is designed, based on the control signal 14 generated by the evaluation logic 11, to limit the electric current I flowing through the safety system according to the threshold value relating to at least one configurable current (for example 13).

[0050] The security system 5 can include a user interface 16 (e.g., with a display 16" and / or keyboard 16"), through which a user can, for example, configure the security system 5. For this purpose, the user interface 16 can be connected to the configuration module 9. An administrator user can, for example, write to the electronic memory 10 of the configuration module 9 to set and save one or more current-related threshold values.

[0051] The control signal 14 generated by the evaluation logic can, for example, include an interrupt signal 14', and the mechanism 15 can, for example, include a relay 17 and / or a fuse to interrupt the current I reversibly or irreversibly. Additionally or alternatively, the evaluation logic can also generate a limiting signal 14" which is fed to a current limiting module 18 to reduce the current I according to the current-related threshold.

[0052] To control mechanisms 17 and 18 accordingly, a driver circuit (not illustrated) or a triggering mechanism may be provided. The vehicle traction battery 4 is intended to supply energy to the drive motor 2 while the vehicle 1 is being driven. The vehicle traction battery can, for example, provide a voltage of between 300 and 900 V between terminals 19 and 20, which supply a DC voltage. Terminal 19 (for example, positive or negative terminal) of battery 4 is connected to the battery management system 6 via the safety system 5, while terminal 20 (for example, negative or positive terminal) of battery 4 is directly connected to the battery management system 6.

[0053] Beyond the battery management system, electrical connections, which are actually DC connections, are represented by simple wires. The vehicle 1 also includes a 12 V battery 21, which supplies the safety system 5 with electrical energy. Thus, the operation of the safety system 5 is independent of the functionality, in particular the integrity, of the vehicle traction battery 4.

[0054] The safety system 5 further includes a control input 22 into which an external control signal 23 can be input to function as an interrupt signal and / or a limit signal. For example, the control signal 23 can be generated by an emergency stop switch 24, which can be manually operated by a user, such as a developer or driver.

[0055] The following can be achieved by an additional autonomous shutdown and / or limiting device (for example, safety system 5) installed in series after the vehicle battery (for example, battery 4): • To disconnect high-voltage connections autonomously, with reaction thresholds (current threshold, current gradient threshold) adapted to the installed components, or to limit the currents and gradients with thresholds adapted to the system. • Connection can be manually disconnected by the developer using an emergency stop switch (When disconnecting via the emergency stop switch, it must be ensured that the contactor does not melt) • To limit the resulting currents and current gradients in the assembled system so that the system can be operated safely even at an early stage of development. • The separation can be reversible, achieved through a contactor or an E-fuse, or irreversible, for example through a pyrofuse. • To enable battery disconnection after a delay period, for example, through an external request from the BMS (double welder, ISO monitoring).

[0056] The shutdown and limiting device (for example, safety system 5) can be fully realized or implemented in electronics, i.e., in hardware, as an additional control unit, which is installed, for example, directly in series behind the vehicle battery to the next component.

[0057] For external triggering (for example via control input 22), a CAN bus may be available to react to external software variables (for example, a reaction in the case of a “double welder” or an error in ISO monitoring).

[0058] It can be used on a HIL test bench (hardware-in-the-loop test bench) and / or on a system test bench (high current, high voltage) and in the vehicle. By using the component (for example, safety system 5), it is also possible to carry out tests on the components under development much earlier and without risk.

[0059] Since the component (for example, safety system 5) is adapted to the "overall system", for example, vehicle 1, test vehicles can also be used within their capabilities without danger. Reference sign 1 vehicle 2 electric drive motors 3 Energy supply system 4. Traction vehicle battery 5 Security system 6 Battery Management System 7 vehicle components 8 Current sensor 9 Configuration system 10 electronic storage devices 11 Evaluation Logic 12 Measurement signal 13 Signal from the configuration module 14, 14', 14" control signal 15 Mechanism 16 User interface 16' Display 16" keyboard 17 Interruption mechanism 18 Limitation mechanism 19, 20 poles of the vehicle traction battery 21 12V battery 22 external control input 23 external signal 24 emergency stop switches

Claims

[1] Safety system (5) for installation between a vehicle traction battery (4) and at least one electrical component (2,7,6) to be protected or a battery management system (6) of a vehicle (1) equipped with an electric drive motor (2), comprising: at least a current sensor (8), in particular comprising a shunt, which is configured to measure at least one value (12) of an electric current (I) flowing through the safety system; a configuration module (9) with electronic storage (10) configured to store at least one configurable current-related threshold value (13); an evaluation logic (11) which is designed to generate a control signal (14, 14', 14") based on the at least one value of the current and the at least one threshold value relating to the current; at least one, in particular electronic and / or mechanical, mechanism (15) which is configured, based on the control signal, to limit the electrical current flowing through the safety system in accordance with the threshold relating to at least one configurable current. [2] Security system according to the preceding claim, wherein the configuration module (9) is set up to grant user-dependent access rights, in particular write rights, for the electronic storage (10), and / or wherein an administrator user has unrestricted access rights to the electronic storage (10), wherein a non-administrator user has restricted access rights to the electronic storage, in particular no write rights but read rights, and / or wherein the security system has a display (16') to show a user the threshold value (13) relating to at least one configurable current. [3] Safety system according to one of the preceding claims, wherein the configurable current-related threshold (13) comprises at least one of the following: a configurable current threshold, in particular with an associated time interval threshold; a configurable current gradient threshold or current rate change threshold, in particular with an associated time interval threshold; a configurable threshold for a current time integral or power time integral or current time sum or power time sum. [4] Security system according to any one of the preceding claims, wherein the evaluation logic (11) is configured to generate an interrupt signal (14') as a control signal if at least one value of the current is not compatible with the configurable threshold value relating to the current, wherein the mechanism (15) is configured to reversibly or irreversibly interrupt the electrical current flowing through the safety system or to disconnect a connection if it receives the interruption signal, wherein the mechanism in particular comprises a relay (17), in particular a contactor, and / or in particular a pyrofuse. [5] Security system according to any one of the preceding claims, wherein the evaluation logic (11) is configured to generate a limiting signal (14") as a control signal if at least one value of the current is not compatible with the configurable threshold value relating to the current, wherein the mechanism (15) is configured to reduce the electric current flowing through the safety system according to the configurable current threshold if it receives the limiting signal. [6] Safety system according to one of the preceding claims, wherein the at least one configurable current-related threshold (13) is specifically provided for in particular by the mechanism and / or is determined taking into account a most current-limiting component. [7] Security system according to one of the preceding claims, further comprising: a driver circuit designed to drive the mechanism based on the control signal; and / or a triggering mechanism designed to trigger the mechanism based on the control signal; and / or a control input (22), in particular a CAN interface, into which an external control signal (23) can be input to function as an interrupt signal (14') and / or as a limit signal (14"). [8] Security system according to any one of the preceding claims, wherein the vehicle traction battery (4) is intended to supply energy to the electric drive motor (2) during the propulsion of the vehicle, and / or wherein the vehicle (1) is designed as an electric vehicle or a hybrid vehicle; and / or wherein the vehicle traction battery (4) is configured to provide a voltage between 300 V and 900 V; and / or where the system is implemented purely through electronic components, in particular without software; and / or the safety system is powered via a 12V vehicle electrical system (21). [9] Energy supply system (3) for a vehicle (1) equipped with an electric drive motor (2), particularly in the development stage, comprising: a vehicle traction battery (4); at least one electrical component (2,7,6,4) of the vehicle that needs protection and / or a battery management system (6); a safety system (5) according to one of the preceding claims, which is electrically connected, in particular in series, between the vehicle traction battery (4) and the component (2,7) to be protected or the battery management system (6). [10] Energy supply system according to the preceding claim, wherein the battery management system (6) and / or the vehicle traction battery (4) is at a stage of development, in particular without mature safety functionality; and / or wherein the security system (5) provides redundant or additional security functionality. [11] Vehicle (1), in particular test vehicle, comprising: an electric drive motor (2); an energy supply system (3) according to the preceding claim, wherein the electric drive motor can be supplied with energy from the vehicle drive battery via the safety system. [12] Method of protecting at least one electrical component (2,7,6,4) to be protected of a vehicle (1) equipped with an electric drive motor (2), wherein the method comprises: Measuring, by means of at least one current sensor (8) of a safety system (5) installed between a vehicle traction battery and the electrical component (2,7,6) to be protected or a battery management system (6), at least one value (12) of an electric current (I) flowing through the safety system; Accessing an electronic memory (10) of a configuration module (9) of the security system in which at least one current-related threshold (13) is stored; Generating, by means of an evaluation logic (11) of the safety system (5), a control signal (14) based on at least one value of the current and at least one threshold value relating to the current; and Limit, based on the control signal, the electrical current (I) flowing through the safety system according to at least one configurable current-related threshold (13). [13] Method according to the preceding claim, which is carried out on a test bench, in particular HIL, and / or during a test drive, while at least one electrical component, in particular a battery management system and / or the vehicle traction battery, is in a development stage.

Images