Control device, mobile energy storage device, and protection method

The management device for power storage devices addresses CLOSE failure safety issues by discharging the device to prevent system startup, ensuring safety and user intervention for replacement.

JP2026088696APending Publication Date: 2026-05-29GS YUASA CORP

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
GS YUASA CORP
Filing Date
2024-11-19
Publication Date
2026-05-29

AI Technical Summary

Technical Problem

When a CLOSE failure of the circuit breaker occurs, power storage devices continue to supply power, posing safety risks and necessitating user intervention for repair or replacement, affecting vehicles, ships, aircraft, emergency power sources, and stationary power sources.

Method used

A management device for power storage devices includes a circuit breaker that, upon detecting a CLOSE failure, discharges the device to lower voltage, preventing system startup and ensuring safety by motivating user replacement.

Benefits of technology

The fail-safe mechanism prevents mobile systems from starting, enhancing safety and prompting users to replace the energy storage device by ensuring the system remains inoperable until repaired.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2026088696000001_ABST
    Figure 2026088696000001_ABST
Patent Text Reader

Abstract

To improve the safety of mobile units and energy storage devices in the event of a circuit breaker CLOSE failure. [Solution] The management devices 53 and 150 for the mobile energy storage device include a circuit breaker 53, and when a CLOSE fault of the circuit breaker 53 is detected, the device discharges the energy storage device 50 and lowers the voltage, thereby preventing the mobile system S from starting.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the safety of a power storage device.

Background Art

[0002] One of the protection devices for a power storage device is a circuit breaker. When an abnormality such as over-discharge or over-charging is detected, the circuit breaker is opened to cut off the current, thereby protecting the power storage device. The following Patent Document 1 discloses using a relay as the circuit breaker.

Prior Art Document

Patent Document

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] When a CLOSE failure of the circuit breaker occurs, even if the failure of the circuit breaker is notified to a higher-level device (for example, a vehicle ECU), the power storage device can supply power, so there is a risk of being used as it is unless the user repairs or replaces it. Moreover, not only power storage devices for vehicles but also power storage devices for moving bodies such as ships and aircraft have the same problem. Furthermore, emergency power sources and stationary power sources also have the same problem.

[0005] An object of the present invention is to improve the safety of a moving body and a power storage device when a CLOSE failure of a circuit breaker is detected.

Means for Solving the Problems

[0006] A management device for a power storage device for a moving body includes a circuit breaker. When a CLOSE failure of the circuit breaker is detected, the power storage device is discharged to lower the voltage, thereby making the moving body system unable to start. Here, the moving body system is a control system of the moving body and is started by being supplied with power from the power storage device for the moving body. [Effects of the Invention]

[0007] This technology prevents the mobile system from starting up if a circuit breaker CLOSE fault is detected, thereby restricting the use of the mobile system. This fail-safe function improves the safety of the mobile system and energy storage device. It also provides an incentive for users to replace the energy storage device. [Brief explanation of the drawing]

[0008] [Figure 1] Side view of a car [Figure 2] Battery disassembled perspective view [Figure 3] Plan view of the cell [Figure 4] Cross-sectional view of line AA in Figure 3 [Figure 5] Block diagram showing the electrical configuration of the battery [Figure 6] Operation flow when a CLOSE failure occurs [Figure 7] Block diagram showing the electrical configuration of the battery [Figure 8] Block diagram showing the electrical configuration of the battery [Figure 9] Vehicle system configuration diagram [Figure 10] Block diagram showing the electrical configuration of the battery [Figure 11] Block diagram showing the electrical configuration of the battery [Figure 12] Block diagram showing the electrical configuration of the battery [Modes for carrying out the invention]

[0009] This section provides an overview of the energy storage device. (1) The management device for the mobile energy storage device according to one embodiment of the present invention is equipped with a circuit breaker, and when a CLOSE fault of the circuit breaker is detected, the device discharges the energy storage device and lowers the voltage, thereby preventing the mobile system from starting. The mobile system is a control system for the mobile body and is powered and started by the mobile energy storage device.

[0010] (1) According to the configuration of (1), when a CLOSE failure of the circuit breaker occurs, the mobile system cannot be started, and the use of the mobile body can be restricted. With this fail-safe function, the safety of the mobile body and the power storage device is improved. In addition, it is possible to motivate the user to replace the power storage device.

[0011] (2) In the management device according to (1) above, when detecting a CLOSE failure of the circuit breaker, the power storage device may be discharged to lower the voltage by increasing the power consumption of the management device. According to the configuration of (2) above, the discharge of the power storage device is promoted, and the mobile system can be shifted to a state where it cannot be started in a short time.

[0012] (3) In the management device according to (1) or (2) above, when detecting a CLOSE failure of the circuit breaker, the voltage may be lowered by discharging the power storage device using a discharge circuit built in the power storage device. According to the configuration of (3) above, since the power storage device can be forcibly discharged using the discharge circuit, the voltage of the power storage device can be surely lowered.

[0013] (4) In the management device according to any one of (1) to (3) above, when detecting a CLOSE failure of the circuit breaker, the power storage device may be discharged to lower the voltage by increasing the power consumption of the mobile body. According to the configuration of (4) above, the discharge of the power storage device is promoted, and the mobile system can be shifted to a state where it cannot be started in a short time.

[0014] (5) The management device for the power storage device for a mobile body according to (5) includes a circuit breaker, the circuit breaker has two FETs connected back-to-back, and when detecting a CLOSE failure of the FET that controls charging among the two FETs, the FET that controls discharge is opened to make the mobile system in a state where it cannot be started.

[0015] The technologies described in (1) to (5) above can be applied to the power storage device for a mobile body provided with the above management device. Furthermore, it can be applied to a method for protecting a power storage device.

[0016] <Embodiment 1> 1. Description of Battery 50 As shown in FIG. 1, a vehicle (in this example, a four-wheel automobile) 10 is equipped with an engine 20 and a battery 50 used for starting the vehicle system S and starting the engine 20. The battery 50 is an example of an "electric storage device". The vehicle 10 may be equipped with an electric storage device for vehicle driving or a fuel cell. The vehicle 10 is an example of a "mobile body", and the vehicle system S is an example of a "mobile body system".

[0017] As shown in FIG. 2, the battery 50 includes an assembled battery 60, a circuit board unit 65, and a housing 71. The housing 71 includes a main body 73 made of a synthetic resin material and a lid 74. The main body 73 is a bottomed cylindrical shape and includes a bottom surface portion 75 and four side surface portions 76. An opening 77 is formed at the upper end of the main body 73 by the four side surface portions 76.

[0018] The housing 71 houses the assembled battery 60 and the circuit board unit 65. The circuit board unit 65 is a board unit on which various components (a circuit breaker 53, circuits 110 to 140 shown in FIG. 5, a control device 150, etc.) are mounted on a circuit board 100, and is arranged adjacent to, for example, above the assembled battery 60 as shown in FIG. 2. Alternatively, the circuit board unit 65 may be arranged adjacent to the side of the assembled battery 60.

[0019] The lid 74 closes the opening 77 of the main body 73. An outer peripheral wall 78 is provided around the lid 74. The lid 74 has a protruding portion 79 that is substantially T-shaped in plan view. Of the front portion of the lid 74, a positive external terminal 51 is fixed to one corner, and a negative external terminal 52 is fixed to the other corner. The circuit board unit 65 may be housed in the lid 74 (for example, inside the protruding portion 79) instead of the main body 73 of the housing 71.

[0020] The battery pack 60 is composed of multiple cells 62. As shown in Figure 4, each cell 62 houses an electrode body 83 together with a non-aqueous electrolyte within a rectangular parallelepiped (prismatic) case 82. The cell 62 is, for example, a lithium-ion secondary battery cell. The case 82 has a case body 84 and a lid 85 that closes the opening at its top.

[0021] The electrode body 83, although not shown in detail, consists of a negative electrode plate made of a copper foil substrate coated with an active material and a positive electrode plate made of an aluminum foil substrate coated with an active material, with a separator made of a porous resin film placed between them. Both are in the shape of a strip, and are wound flat so that they can be housed in the case body 84, with the negative electrode plate and positive electrode plate offset to opposite sides in the width direction relative to the separator. The electrode body 83 may be of a laminated type instead of the wound type.

[0022] A positive electrode terminal 87 is connected to the positive electrode plate via a positive electrode current collector 86, and a negative electrode terminal 89 is connected to the negative electrode plate via a negative electrode current collector 88. The positive electrode current collector 86 and the negative electrode current collector 88 each have a flat base portion 90 and legs 91 extending from the base portion 90. Through holes are formed in the base portion 90. The legs 91 are connected to the positive electrode plate or the negative electrode plate.

[0023] The positive terminal 87 and the negative terminal 89 each consist of a terminal body 92 and a shaft 93 that protrudes downward from the center of its lower surface. The terminal body 92 and shaft 93 of the positive terminal 87 are integrally molded from aluminum (a single material). In the negative terminal 89, the terminal body 92 is made of aluminum and the shaft 93 is made of copper, and these are assembled together. The terminal body 92 of the positive terminal 87 and the negative terminal 89 are positioned at both ends of the cover 85 via gaskets 94 made of insulating material, and are exposed to the outside from these gaskets 94, as shown in Figure 3.

[0024] The cover 85 has a pressure relief valve 95. The pressure relief valve 95 is located between the positive terminal 87 and the negative terminal 89. The pressure relief valve 95 is a safety valve. The pressure relief valve 95 opens when the internal pressure of the case 82 exceeds a limit, thereby reducing the internal pressure of the case 82.

[0025] Figure 5 is a block diagram showing the electrical configuration of the battery 50. The battery 50 comprises a battery pack 60, a circuit breaker 53, a current sensor 55, a temperature sensor 58, a circuit breaker control circuit 110, a circuit breaker diagnostic circuit 120, a measurement IC 140, a control device 150, and a communication IC 160. The circuit breaker 53 and the control device 150 correspond to the "management device" of the present invention.

[0026] The battery 50 is electrically connected to an electrical load 25 and a vehicle generator 27. The electrical load 25 includes the engine starter, vehicle system S, and auxiliary equipment. The vehicle system S is the control system for the vehicle 10 and consists of multiple ECUs. The vehicle system S is powered and started by the battery 50. The vehicle 10 can start its engine by starting the vehicle system S.

[0027] When the engine is running, if the amount of power generated by the vehicle generator 27 is greater than the power consumption of the electrical load 25, the battery 50 is charged by the vehicle generator 27. If the amount of power generated by the vehicle generator 27 is less than the power consumption of the electrical load 25, the battery 50 is discharged to compensate for the deficit.

[0028] While the engine 20 is stopped, the vehicle generator 27 stops generating power. While power generation is stopped, the battery 50 is not charged and only discharges to the electrical load 25.

[0029] The battery pack 60 has, for example, 12 cells 62 (see Figure 2), connected in 3 parallel and 4 series. Figure 5 shows three cells 62 connected in parallel represented by a single battery symbol. The cells are not limited to prismatic cells; they may be cylindrical cells or pouch cells with a laminated film case.

[0030] The battery pack 60, the circuit breaker 53, and the current sensor 55 are connected in series via power lines 57P and 57N. Power lines 57P and 57N can be busbars BSB (see Figure 2), which are plate-shaped conductors made of metal materials such as copper.

[0031] As shown in Figure 5, power line 57P connects the positive external terminal 51 to the positive terminal of the battery pack 60. Power line 57N connects the negative external terminal 52 to the negative terminal of the battery pack 60. External terminals 51 and 52 are terminals for connecting the battery 50 to the vehicle 10 (electrical load 25 and vehicle generator 27).

[0032] The circuit breaker 53 is located on the positive power line 57P. The circuit breaker 53 can utilize a relay, latching relay, or FET. The circuit breaker 53 is a normally closed type and is controlled to the CLOSE position under normal conditions.

[0033] The circuit breaker control circuit 110 controls the circuit breaker 53. If there is any abnormality in the battery 50, the circuit breaker control circuit 110 switches the circuit breaker 53 from CLOSE to OPEN in accordance with the command of the control device 150, thereby interrupting the current to the battery pack 60.

[0034] The circuit breaker diagnostic circuit 120 diagnoses a fault in the circuit breaker 53 using a known method. Documents disclosing fault diagnosis of the circuit breaker 53 include Japanese Patent Publication No. 5983171, Japanese Patent Publication No. 6327278, and Japanese Patent Publication No. 6729390.

[0035] The current sensor 55 is located on the negative power line 57N. The current sensor 55 may also be a metal plate resistor (shunt resistor).

[0036] The temperature sensor 58 is attached to the battery pack 60 and detects the temperature of the battery pack 60 or its surroundings.

[0037] The measurement IC 140 measures the cell voltage Vs of each cell 62 and the total voltage Vt of the battery pack 60. It also measures the current of the battery pack 60 based on the output of the current sensor 55 and measures the temperature of the battery pack 60 based on the output of the temperature sensor 58.

[0038] The control device 150 is mounted on the circuit board 100 (see Figure 2) and consists of a CPU 151, memory 153, etc., as shown in Figure 5. The control device 150 is connected to the positive terminal of the battery pack 60 via a power line (not shown) and operates using the battery pack 60 as a power source.

[0039] The control device 150 monitors the status of the battery 50 based on the output of the measurement IC 140. Specifically, it monitors the temperature, current I, total voltage Vt, and cell voltage Vs of each cell 62 of the battery pack 60.

[0040] While the vehicle 10 is parked, the control device 150 uses the circuit breaker diagnostic circuit 120 to diagnose a fault in the circuit breaker 53.

[0041] If a CLOSE fault is detected in the circuit breaker 53, the protection process described later is executed. A CLOSE fault is a fault in which the circuit breaker 53 is stuck in the CLOSE position and cannot be opened, that is, a fault in which the current path cannot be interrupted. An OPEN fault is a fault in which the circuit breaker 53 is stuck in the OPEN position and cannot be closed.

[0042] 2. Operating modes of the control device 150 The control device 150 determines whether the vehicle 10 is in motion or parked, and switches its operating mode according to the respective state, thereby ensuring the safety of the battery 50 and maximizing its usage time.

[0043] Specifically, while the vehicle is in motion, the control device 150 performs high-speed sampling to measure voltage, current, and temperature, monitors the cell status, and estimates the charge status and degradation status (first operating mode). When parked, it performs minimal status monitoring at low speed to reduce power consumption (second operating mode). The determination of whether the vehicle 10 is in motion or parked can be made from the current value of the battery 50 and the communication status with the vehicle 10.

[0044] 3. Protection process associated with CLOSE fault detection If a CLOSE failure occurs in the circuit breaker 53 while vehicle 10 is parked, the battery 50 can still supply power even if the control device 150 notifies vehicle 10 of the circuit breaker 53 failure. Therefore, unless the user repairs or replaces it, the faulty battery 50 is at risk of being used.

[0045] Therefore, if the control device 150 detects a CLOSE failure of the circuit breaker 53 while the vehicle 10 is parked, it discharges the battery 50 while the vehicle is parked, putting it into a low-voltage state, thereby preventing the vehicle system S from starting.

[0046] To explain in more detail, Figure 6 shows the operation flow when a CLOSE fault occurs. After a CLOSE fault occurs in the circuit breaker 53, when the vehicle 10 is parked, the operating mode of the control device 150 switches from the first operating mode to the second operating mode. Then, at a predetermined timing, the circuit breaker diagnostic device 120 performs a fault diagnosis and detects the CLOSE fault (S10, S20).

[0047] When the control device 150 detects a CLOSE fault, it notifies the vehicle 10 of the occurrence of the CLOSE fault via the communication IC 160 (S30).

[0048] Subsequently, the control device 150 switches the operating mode from the second operating mode to the first operating mode, regardless of whether the vehicle 10 is parked or in motion. The first operating mode consumes more power than the second operating mode. Therefore, it accelerates the discharge of the battery pack 60, and as the remaining capacity is consumed more quickly, the voltage V1 of the battery 50 decreases.

[0049] After that, when the voltage V1 of the battery 50 becomes lower than the starting voltage V2 of the vehicle system S (V1 < V2), the control device 150 switches the operation mode from the second mode to the first operation mode.

[0050] After the discharge of the battery pack 60, the voltage V1 of the battery 50 is less than the starting voltage V2 of the vehicle system S, and the parked vehicle 10 is in a state where the vehicle system S cannot be started.

[0051] 3. Explanation of Effects According to the above configuration, when a CLOSE failure of the circuit breaker 53 is detected, the vehicle system S cannot be started, and the vehicle 10 can be restricted from starting. Thereby, the safety of the vehicle 10 and the battery 50 can be ensured. In addition, it is possible to motivate the user to replace the battery. Also, according to the above configuration, since the power consumption of the control device 150 is increased by the discharge of the battery 50, the vehicle system S can be made in a state where it cannot be started without providing additional components to the battery 50.

[0052] <Embodiment 2> Embodiment 2 is different from Embodiment 1 in that a discharge circuit 130 is added. As shown in FIG. 7, the discharge circuit 130 is connected in parallel to the battery pack 60. The discharge circuit 130 is composed of a discharge resistor 131 and a switch 133. When the switch 133 is closed, the battery pack 60 can be discharged by the discharge resistor 131.

[0053] When the control device 150 detects a CLOSE failure during parking of the vehicle 10, it notifies the vehicle 10 of the occurrence of the CLOSE failure via the communication IC 160.

[0054] After that, the control device 150 sends a command to the discharge circuit 130 to switch the switch 133 from OFF to ON. Thereby, as shown in FIG. 8, the battery pack 60 discharges, and a current I flows through the discharge resistor 131.

[0055] The discharge of the battery pack 60 continues, for example, until the voltage V1 of the battery 50 becomes lower than the starting voltage V2 of the vehicle system S (V1 <V2)。

[0056] Then, when the voltage V1 of the battery 50 becomes lower than the starting voltage V2 of the vehicle system S, the control device 150 switches the switch 133 from ON to OFF.

[0057] After the battery pack 60 has discharged, similar to Embodiment 1, the voltage V1 of the battery 50 is less than the starting voltage V2 of the vehicle system S, and the parked vehicle 10 is in a state where the vehicle system S cannot be started. Therefore, the safety of the vehicle 10 and the battery 50 can be ensured.

[0058] Embodiment 2 has the advantage of being able to forcibly discharge the battery 50 using the discharge circuit 130, thereby reliably lowering the voltage V1 of the battery 50.

[0059] <Embodiment 3> In Embodiment 1, when a CLOSE failure of the circuit breaker 53 was detected while the vehicle 10 was parked, the power consumption of the control device 150 was increased to lower the voltage V1 of the battery 50. Alternatively, the power consumption of the vehicle 10 could be increased to lower the voltage V1 of the battery 50.

[0060] Figure 9 is a block diagram showing one embodiment of the vehicle system S. The vehicle system S consists of a higher-level ECU 30 and a plurality of ECUs 31 to 33. When a CLOSE failure of the circuit breaker 53 is detected while the vehicle 10 is parked, the control device 150 sends a wake-up signal Sup to the higher-level ECU 30 of the vehicle 10. This wakes up the higher-level ECU 30, which can increase the power consumption of the vehicle 10. In addition to the higher-level ECU 30, the ECUs 31 to 33 that are in sleep mode may also be woken up.

[0061] <Embodiment 4> Embodiment 4 discloses an example in which the circuit breaker 200 is composed of a first FET 210 and a second FET 220. By using FETs in the circuit breaker 200, mechanical contacts can be eliminated, which is effective in preventing abnormal noise and other issues.

[0062] As shown in Figure 11, the first FET 210 and the second FET 220 are P-channel field-effect transistors. The source S of the first FET 210 is connected to the positive terminal of the battery pack 60, and the source S of the second FET 220 is connected to the external terminal 51 of the positive terminal.

[0063] The first FET210 and the second FET220 have their drains connected to each other, forming a back-to-back connection. A back-to-back connection is when the drains of two FETs are connected to each other, or the sources are connected to each other.

[0064] The first FET 210 has a parasitic diode D1, and the second FET 220 has a parasitic diode D2. Parasitic diode D1 has a forward charging direction, and parasitic diode D2 has a forward discharging direction, so they are in opposite directions. The first FET 210 is a discharge control switch that controls the discharge of the battery 50, and the second FET 220 is a charge control switch that controls the charging of the battery 50.

[0065] <When a CLOSE fault is detected in the first FET210 that controls the discharge> If the control device 150 detects a closed fault in the first FET 210, which controls discharge, while the vehicle is parked, it opens the second FET 220, which controls charging, as shown in Figure 11. As a result, charging is rejected.

[0066] The control device 150 then discharges the battery 50 to consume power, thereby lowering the voltage V1 of the battery 50 to less than the starting voltage V2 of the vehicle system S, and preventing the vehicle 10 from starting. This ensures the safety of the vehicle 10 and the battery 50.

[0067] Furthermore, as disclosed in Embodiments 1 and 3, the voltage V1 of the battery 50 may be lowered by increasing the power consumption of the control device 150 and the vehicle 10. Also, as disclosed in Embodiment 2, the voltage V1 of the battery 50 may be lowered by forcibly discharging the battery pack 60 with the discharge circuit 130.

[0068] <When a CLOSE fault is detected in the second FET220 that controls charging> If the control device 150 detects a closed fault in the second FET 220, which controls charging, while the vehicle is parked, it opens the first FET 210, which controls discharging, as shown in Figure 12. Opening the first FET 210 causes the vehicle system S to stop, and the vehicle 10 becomes unable to start. Therefore, the safety of the vehicle 10 and the battery 50 can be ensured in the same way as described above.

[0069] <Other Embodiments> The present invention is not limited to the embodiments described above and in the drawings, and the following embodiments, for example, are also included in the technical scope of the present invention.

[0070] (1) The cell (a rechargeable energy storage cell) 62 is not limited to a lithium-ion secondary battery cell, but may also be other non-aqueous electrolyte secondary battery cells. The cell 62 may be connected in series or parallel, or it may be connected in series or as a single cell. A capacitor can also be used instead of a secondary battery cell. Secondary battery cells and capacitors are examples of cells.

[0071] (2) In embodiments 1 to 4 described above, the battery 50 was for a vehicle. The battery 50 may also be for a ship or an aircraft. The battery 50 supplies power to the control systems of ships and aircraft and starts them up. If a CLOSE fault of the circuit breaker 53 is detected, the battery 50 may be discharged to lower the voltage, thereby preventing the ship's control system or the aircraft's control system from starting up. Ships and aircraft are examples of mobile bodies, and the control systems of ships and aircraft are examples of mobile body systems.

[0072] Furthermore, this technology can be applied not only to batteries 50 for mobile devices, but also to emergency power supplies equipped with circuit breakers 53 and stationary storage batteries. For example, stationary storage batteries are used in UPS and ESS to store electrical energy. The stationary storage battery also serves as the power source for the control system of the UPS or ESS, and the control system is started by receiving power from the stationary storage battery. If a CLOSE fault of the circuit breaker 53 is detected, the stationary power supply may be discharged and the voltage reduced to prevent the control system of the UPS or ESS from starting. UPS (Uninterruptible Power Supply) and ESS (Energy Storage System) are examples of higher-level devices, and the control systems of UPS and ESS are examples of higher-level systems.

[0073] (3) In the above embodiments 1 to 4, the circuit breaker 53 is placed on the positive power line 57P and the current sensor 55 is placed on the negative power line 57N. Alternatively, the current sensor 55 may be placed on the positive power line 57P and the circuit breaker 53 may be placed on the negative power line 57N.

[0074] (4) In the above embodiment 1, when a CLOSE fault of the circuit breaker 53 was detected, the power consumption of the control device 150 was increased by changing the operating mode of the control device 150 (the discharge amount of the battery pack 60 was increased). The power consumption of the control device 150 may also be increased by raising the operating frequency of the control device 150 higher than normal. For example, if the control device 150 normally operates at 20 MHz, the power consumption of the control device 150 can be increased to about three times the normal level by operating it at 100 MHz.

[0075] (5) In the above-described Embodiments 1 to 4, when a CLOSE failure of the circuit breaker 53 is detected while the vehicle is parked, the battery 50 is discharged to lower the voltage V1, so that the vehicle system S cannot be started. If the vehicle system S is started and the vehicle 10 shifts from the parked state to the running state before the voltage V1 of the battery 50 drops to the starting voltage V2 of the vehicle system S, the failure information of the circuit breaker 53 is stored in the memory 153. When the running vehicle shifts to the parked state, the battery 50 may be discharged again. Each time the vehicle 10 shifts to the parked state, by discharging the battery 50, eventually V1 < V2, and the vehicle system S cannot be started. Therefore, the safety of the vehicle 10 and the battery 50 can be ensured.

[0076] (6) In the above-described Embodiments 1 to 4, the circuit breaker 53 was diagnosed for failure while the vehicle 10 was parked. The circuit breaker 53 may be diagnosed for failure while the vehicle is running. When a CLOSE failure of the circuit breaker 53 is detected during running, the battery 50 may be discharged during running to lower the voltage V1, or the battery 50 may be discharged after shifting to parking to lower the voltage V1.

[0077] Also, when a CLOSE failure of the circuit breaker 53 is detected, the battery 50 may be discharged while the vehicle 10 is stopped. For example, as a countermeasure for an emergency of the battery during running, leaving the power until the vehicle 10 is evacuated to the road shoulder, after the vehicle stops, the battery 50 may be forcibly discharged so that the vehicle system S cannot be started.

[0078] (7) In the above-described Embodiment 1, the voltage V1 of the battery 50 was lowered by increasing the power consumption of the control device 150. In Embodiment 2, the voltage V1 of the battery 50 was lowered by discharging the battery 50 with the discharge circuit 130. In Embodiment 3, the voltage V1 of the battery 50 was lowered by increasing the power consumption of the vehicle 10. These methods may be used alone or in combination.

[0079] (8) In the above embodiment 1, the control device 150 is built into the battery 50. The control device 150 may be located outside the battery. For example, the control device 150 may be a remote control device that remotely controls the battery 50. Alternatively, an ECU mounted on the vehicle 10 may function as the control device 150.

[0080] (9) In the above embodiment 2, the battery pack 60 was discharged by the discharge circuit 130. The battery pack 60 may also be discharged using the circuit breaker diagnostic circuit 120 and the measurement IC 140. In addition, although not shown, the battery pack 60 may also be discharged using a balancer circuit provided in the battery pack 60 or a latch relay drive circuit provided when the circuit breaker 53 is a latch relay. The circuit breaker diagnostic circuit 120 usually discharges the battery pack 60 at the timing of switching the switch state of the circuit breaker 53. The measurement IC 140 usually discharges the battery pack 60 at the timing of measuring the data of the battery pack 60. The balancer circuit usually discharges each cell 62 at the timing of eliminating the capacity variation between cells of the battery pack 60. The latch relay drive circuit usually discharges the battery pack 60 at the timing of driving the circuit breaker 53. Alternatively, these circuits may discharge the battery pack 60 and each cell 62 at all times when a closed fault of the circuit breaker 53 is detected. These circuits may discharge the battery pack 60 individually, or multiple circuits may be used in combination to discharge the battery pack 60. The balancer circuit and the latch relay circuit are examples of circuits that discharge the battery pack 60. [Explanation of Symbols]

[0081] 50. Battery (energy storage device) 53 Circuit breaker (control device) 55 Current Sensor 60 battery packs 62 cells 110 Circuit breaker control circuit 120 Circuit breaker diagnostic circuit 130 Discharge circuit 140 Measurement ICs 150 Control device (management device) S Vehicle System (Mobile System, Higher-Level System)

Claims

1. A control device for a mobile energy storage device, Equipped with a circuit breaker, A control device that, upon detecting a CLOSE fault in the circuit breaker, discharges the energy storage device and lowers the voltage, thereby preventing the mobile system from starting.

2. A control device according to claim 1, A control device that, upon detecting a CLOSE fault in the circuit breaker, increases the power consumption of the control device to discharge the energy storage device and lower the voltage.

3. A control device according to claim 1, A control device that, upon detecting a CLOSE fault in the circuit breaker, reduces the voltage by discharging the energy storage device using a discharge circuit built into the energy storage device.

4. A control device according to claim 1, A control device that, upon detecting a CLOSE fault in the circuit breaker, discharges the energy storage device by increasing the power consumption of the mobile unit to lower the voltage.

5. A control device for a mobile energy storage device, Equipped with a circuit breaker, The circuit breaker has two FETs connected back-to-back, A control device that, if it detects a CLOSE failure in the FET that controls charging among the two FETs, opens the FET that controls discharge, thereby preventing the mobile system from starting.

6. A mobile energy storage device comprising a battery pack and a control device according to any one of claims 1 to 5, wherein the circuit breaker controls the energization of the battery pack.

7. A method for protecting an energy storage device, A method for protecting an energy storage device, which, when a CLOSE fault is detected in the circuit breaker of the energy storage device, discharges the energy storage device and lowers the voltage, thereby preventing the higher-level system from starting up.