Modular system comprising at least one electrical energy storage device and method for producing a modular system

Abstract

The invention relates to a modular system (10) comprising at least one electrical energy storage device (12), a first control unit (14) for providing a first control function (16) for the electrical energy storage device (12), and at least a second control unit (18) for providing a second control function (20) for the electrical energy storage device (12), wherein the first control unit (14) and the second control unit (18) are configured to be arranged on the electrical energy storage device (12), and wherein at least the second control unit (18) has an identification marker (22). The invention further relates to a method for producing a modular system (10).

Description

[0001] Mercedes-Benz Group AG

[0002] Modular system with at least one electrical energy storage device and method for manufacturing a modular system

[0003] The following invention relates to a modular system comprising at least one electrical energy storage device and a first control unit for providing a first control function for the electrical energy storage device. The invention further relates to a method for manufacturing a modular system.

[0004] It is currently known that a new regulation of the European Union is being considered which should allow an economic operator to install its own software on control units for electrical energy storage devices in order to be able to use them for second life applications outside of a motor vehicle, for example.

[0005] However, this requirement is diametrically opposed to the security requirements, which are intended to prevent the installation of third-party software, or which view it as a threat, because security mechanisms are demonstrably only implemented with the released original software.

[0006] As part of the revised European regulations, it is now required that any software be allowed to be installed on the control unit of the electrical energy storage system, also known as the battery management system (BMS). However, this could lead to the use of insecure software in the vehicle context. While the regulations stipulate that liability transfers from the original battery manufacturer to the economic operator, in practice this can lead to difficulties in proving wrongdoing in a worst-case scenario. Should a worst-case scenario occur, such as a battery fire, it is often impossible to prove tampering with the control unit, as the high temperatures, for example, exceeding 1,400 °C, can cause mechanical and electrical damage to the control unit over several hours.These defects can make it impossible to read the software, so it cannot be proven whether the security mechanisms of the original manufacturer's software or the software of the economic operator were active. Accordingly, the original manufacturer or the economic operator would potentially be liable.

[0007] From the original manufacturer's perspective, however, there is a so-called reset function that unlocks the battery control unit for unrestricted programming. In the worst-case scenario, this programmability could also be exploited by third parties who simply want to bypass the original battery's protective mechanisms. This would allow previously damaged batteries to be used illegally in vehicles.

[0008] DE 10 2022 003 502 Al relates to a method for carrying out the decommissioning of an electrical energy storage device of a motor vehicle by means of a system, comprising the steps of: requesting a change to a control program on an electronic computing device of the electrical energy storage device to another electronic computing device of the system, confirming the request by the other electronic computing device and storing the request in a storage device of the other electronic computing device, deleting security certificates on the electronic computing device after receipt of the confirmation and releasing the control program for a change and decommissioning of the electrical energy storage device.

[0009] DE 10 2012 222720 A1 relates to a control circuit for monitoring and controlling the operation of a rechargeable battery, in particular a lithium-ion battery, with a plurality of interconnected battery cells, which are electrically decoupled from at least one terminal of the battery by at least one switching element, wherein the control circuit has at least one first cell monitoring device and at least one second cell monitoring device, each configured to detect operating parameters of at least one battery cell and transmit them to a control unit, and wherein the at least one first cell monitoring device is connected to a first control unit via a first interface and the at least one second cell monitoring device is connected to a second control unit via a second interface, wherein the first control unit is configuredto determine battery properties by evaluating received operating parameters, and wherein the second control device is designed to control at least one switching element.

[0010] The object of the present invention is to provide a modular system and a method by which the disadvantages of the prior art are overcome. In particular, it is an object of the present invention to provide a modular system and a method by which a corresponding control unit can be reliably identified.

[0011] This problem is solved by a modular system and by a method according to the independent claims. Advantageous embodiments are specified in the dependent claims.

[0012] One aspect of the invention relates to a modular system with at least one electrical energy storage device and with a first control unit for providing a first control function for the electrical energy storage device and with at least one second control unit for providing a second control function for the electrical energy storage device, wherein the first control unit and the second control unit are designed for placement on the electrical energy storage device and wherein at least the second control unit has an identification marker.

[0013] In particular, to prevent simple manipulation and maintain control over the so-called reset process, a control unit exchange can be implemented as a solution by, for example, the manufacturer of the electrical energy storage system. Replacing the control unit allows for the insertion of additional markers. These markers indicate that the control unit is a replacement and does not contain vehicle-certified software. This makes it possible to demonstrably deny any liability in the event of an incident, such as a fire, especially with so-called binary markers. With coding markers, it is possible to pinpoint a specific economic actor, i.e., to identify the actor. Thus, in the simplest case, a binary marker can be used to prove the presence or absence of the identification marker.Simple indicators, such as spheres or small plates, can be attached to the control unit with stickers or other fasteners, or even loosely. If a vehicle-related incident has occurred, the rest of the vehicle can be searched for the binary marker. Should the marker be found, liability, particularly product and manufacturer liability, can be denied because a replacement control unit containing unauthorized vehicle software was present in the vehicle.

[0014] In particular, the transfer of liability according to EU directives can be proven by embedding the marker in the second control unit. By embedding the identification marker, it is now possible to provide evidence even after an incident, such as a battery fire. A binary marker facilitates the legal denial of liability. A coding marker, on the other hand, enables traceability to a specific economic operator, so that a connection between the physical product and, for example, a database can be established even after the product has suffered electrical / mechanical failure.

[0015] One advantageous design provides that the first control unit is supplied without an identification marker. In other words, the identification marker is located only in the second control unit. Thus, finding the identification marker can be a clear indication that it is the second control unit and not the first.

[0016] It is further advantageous if at least the first control unit is designed for operating a partially or fully electric vehicle. For example, the electrical energy storage device, together with the first control unit, can then essentially function as a traction battery for a partially or fully electric vehicle. Thus, in a first-life application of the electrical energy storage device, the first control unit can provide electrical energy for operating a vehicle. In a further advantageous embodiment, the second control unit is designed for a second-life application of the electrical energy storage device.A so-called second-life application of electrical energy storage devices from motor vehicles refers to the use of used electrical energy storage devices, particularly from electric vehicles, for other purposes after they no longer possess the required power and capacity for use in vehicle operation. Electric vehicles, in particular, are typically equipped with high-performance lithium-ion batteries, which are expensive and resource-intensive to manufacture. Therefore, it makes economic and environmental sense to reuse these batteries after their service life in vehicle operation. In second-life applications, used electric vehicle batteries are repurposed as energy storage devices for various purposes, such as powering buildings and infrastructure, e-mobility infrastructure, smart grids and virtual power plants, as well as industrial applications.Second-life use of electric vehicle batteries can conserve resources, reduce costs and improve the sustainability of electromobility.

[0017] It is also advantageous if the identification marker is an optical marker. For example, the optical marker can be in the form of a washer or a screw. Additional information can be incorporated into the marker as a so-called coding marker, so that, for example, defects generate a code. This coding can be simple or multi-coding, for example, through multiple defects. Multi-coding allows for the representation of more states and thus greater flexibility.

[0018] It is also advantageous if the identification marker is a chemical and / or radioactive marker. Magnetic markers can also be used. These markers can then be identified, for example, by their chemical composition or decay products / rate. In many cases, they can therefore also contribute to the identification of the second control unit.

[0019] In a further advantageous embodiment, the identification marker is designed as an engraving and / or a printed serial number. In particular, serial numbers and codes such as numbers, barcodes, QR codes, or similar can be engraved, or electronic tags, such as an RFID tag, can be integrated into the second control unit.

[0020] In a further advantageous embodiment, the identification marker is assigned to a supplier of the second control unit via a database. In particular, a coding marker, in conjunction with the database, allows for so-called "fingerpointing." This enables the identification of the corresponding contractual partner to whom a replacement control unit—in other words, the second control unit—was delivered. The database can contain additional information from battery series production, such as REEESS codes, serial numbers of sensors and actuators, the battery serial number, and the like. This increases the probability of finding and assigning relevant information in the event of a defective battery.The database can be updated with additional information from economic operators, and the coding and, for example, the marker can be entered accordingly with each control unit replacement.

[0021] In another advantageous embodiment, the identification marker is arranged on the second control unit in a way that is not visually visible. For example, it can be covered by stickers or similar materials, or integrated into the housing of the control unit. This prevents tampering with the identification marker.

[0022] Another aspect of the invention relates to a method for manufacturing a modular system according to the preceding aspect with at least one electrical energy storage device comprising the steps of: arranging the first control unit on the electrical energy storage device, in particular for a first-life application, and providing a second control unit with the identification marker for a second-life application.

[0023] Advantageous embodiments of the modular system are to be regarded as advantageous embodiments of the method. The modular system has, in particular, tangible features to enable the corresponding manufacturing process to be provided. Further advantages, features, and details of the invention will become apparent from the following description of a preferred embodiment and from the drawings. The features and combinations of features mentioned above in the description, as well as those mentioned below in the figure description and / or shown in the figures alone, can be used not only in the combinations specified, but also in other combinations or individually, without departing from the scope of the invention.

[0024] This shows:

[0025] Fig. 1 shows a schematic block diagram according to one embodiment of a

[0026] Modular system;

[0027] Fig. 2 is a schematic top view of an embodiment of a

[0028] Identification marker;

[0029] Fig. 3 shows a schematic side view of an embodiment of a

[0030] Identification marker;

[0031] Fig. 4 shows a schematic flowchart according to one embodiment of a

[0032] Procedure;

[0033] Fig. 5 shows another schematic flowchart according to one embodiment of the

[0034] Procedure; and

[0035] Fig. 6 shows another schematic flowchart according to a

[0036] Implementation of the method.

[0037] In the figures, identical or functionally equivalent elements are provided with the same reference symbols.

[0038] Fig. 1 shows a schematic block diagram according to an embodiment of a modular system 10. The modular system 10 comprises at least one electrical energy storage device 12. The electrical energy storage device 12 can, for example, comprise a plurality of battery cells connected in series and / or parallel. The modular system 10 comprises at least one first control unit 14 for providing a first control function 16. Furthermore, at least one second control unit 18 is provided, wherein the second control unit 18 has at least one second control function 20. The first control unit 14 and the second control unit 18 are designed for mounting on the electrical energy storage device 12. The second control unit 18 has at least one identification marker 22 for identifying the second control unit 18.

[0039] The first control unit 14 is provided without an identification marker. Furthermore, the first control unit 14 is designed, for example, for the operation of a motor vehicle that is at least partially electrically powered. In particular, a first-life application can be provided in combination with the first control unit 14 and the electrical energy storage device 12, whereby the modular system 10, in the form of the first control unit 14 with the electrical energy storage device 12, can then be provided as the traction battery of the motor vehicle.

[0040] The second control unit 18 is specifically designed for a so-called second-life application of the electrical energy storage device 12.

[0041] The identification marker 22 is arranged on the second control unit 18 in a way that is not visually visible, for example concealed under a sticker.

[0042] In particular, it is thus provided that a corresponding exchange of control units for the electrical energy storage device 12 is permitted, whereby at least one additional identification marker 22 is incorporated into the second control unit 18. This identification marker 22 indicates that it is an exchange unit and does not contain vehicle-certified software. This makes it possible to demonstrably deny any liability in the event of an incident, such as a fire, particularly with the so-called binary marker, and with coding markers, to pinpoint a specific economic operator. Materials particularly suitable as identification markers 22 are those that exhibit high temperature stability, for example, above 1,400 °C, over a longer period, especially four hours. Typical materials can be, for example, aluminum oxide ceramic, zinc oxide, or zirconium oxide.

[0043] In the simplest case, particularly with the binary marker, proof of the presence or absence of the identification marker 22 can be provided. Simple indicators can, for example, be spherical or disc-shaped and attached to the second control unit 18 under stickers or inserted into the housing. A concealed approach can incorporate the identification marker 22 in the form of a washer, as shown in Fig. 2, or a screw, as shown, for example, in Fig. 3. This allows the identification marker 22 to be integrated into the typical structure of the second control unit 18 and is therefore not easily removable or detectable.

[0044] For the method according to the invention, the control unit 1 can be used without a marker. If a marker is installed on the control unit 1, then it must be clearly distinguishable from the marker of the control unit 2.

[0045] Fig. 2 again shows an embodiment of a washer 24 as the identification marker 22. In particular, four partial sides A, B, C, and D are shown. In area A, for example, a corresponding defect 26 can be formed. In the present embodiment, a further coding 28 is provided in area C. In particular, to introduce additional information into the identification marker 22 and thus make it available as a coding marker, it is possible to generate a coding by means of the introduced defect 26. This coding can be simple or multi-coding, for example, by means of several defects 26. Fig. 2 shows in particular the coding for a washer 24.

[0046] Figure 3 again shows a multi-coding system in the form of a screw 30. In particular, a screw head 32 and a screw body 34 are shown. The screw head 32 can also have corresponding coded corners. The corresponding thread can have a number of threads, which can also be coded accordingly. Thus, for example, further codes 28 can be provided at different locations, both relative to the screw head 32 and to the number of threads. In particular, multi-coding allows for the representation of more states and thus greater flexibility.

[0047] Alternatively, serial numbers and codes such as numbers, barcodes, QR codes, or similar can be engraved, or additional electronic (e.g., RFID technology), magnetic, chemical, or radioactive elements can be incorporated, which can then be identified by their chemical composition or decay products / rate. Even if these additional markings are not necessarily fireproof, they can still contribute to identification in many cases.

[0048] Figure 4 again shows a schematic flowchart for the identification of a binary marker. In a first step S1, for example, the vehicle-related event is recorded. In the second step S2, the identification marker 22 is located. In the third step S3, liability can now be denied based on the discovery of the identification marker 22. In particular, Figure 4 thus describes that in the case of a vehicle-related event, for example, the remaining vehicle components can be searched for the binary marker. Should the identification marker 22 be found, liability can be denied because a replacement control unit, in particular the second control unit 18, was present in the vehicle context and does not contain authorized vehicle software.

[0049] Figure 5 shows another schematic flowchart according to an embodiment of the method. In particular, Figure 5 shows data fields in a database 36 and the time of data creation. For example, in series production, a battery serial number 38, REESS codes 40, and a control unit identification number 42 can be provided. In a corresponding production run for the second control unit 18, the corresponding identification marker 22 can be generated. For a contractual partner 44, the name, address, and the like can then be stored in the database 36. In particular, a coding marker, in conjunction with the database 36, can thus provide corresponding fingerprinting. This allows the identification of the contractual partner to whom a second control unit 18 was delivered.Database 36 can contain additional information from battery series production, such as REESS codes 40, the battery serial number 38, and further serial numbers of sensors and actuators. This increases the likelihood of finding and assigning relevant information in, for example, a defective vehicle. Economic operators can then add further information to database 36, and the coding of the identification marker 22 can be entered each time the control unit is replaced.

[0050] Fig. 6 shows another schematic flowchart according to one embodiment of the method. Fig. 6 specifically illustrates the detection of a coding marker. In a fourth step S4, a corresponding event of the motor vehicle is identified. In a fifth step S5, the coding marker is located. In the sixth step S6, the coding marker is decoded. In the seventh step S7, the database 36 can be queried with the original contractual partner. In an eighth step S8, the reference regarding liability is made to the corresponding contractual partner.

[0051] Generally speaking, control units 1 and 2 can be the same hardware with different software and a different marker.

Claims

Mercedes-Benz Group AG Patent claims 1. Modular system (10) comprising at least one electrical energy storage device (12) and a first control unit (14) for providing a first control function (16) for the electrical energy storage device (12) and a second control unit (18) for providing a second control function (20) for the electrical energy storage device (12), wherein the first control unit (14) and the second control unit (18) are designed for arrangement on the electrical energy storage device (12), and wherein at least the second control unit (18) has an identification marker (22), and wherein the identification marker (22) is incorporated into the second control unit (18).

2. Modular system (10) according to claim 1, characterized in that the first control unit (14) is provided without an identification marker or with a clearly distinguishable marker to the second control unit (18).

3. Modular system (10) according to claim 1 or 2, characterized in that at least the first control unit (14) is designed for the operation of a motor vehicle that is at least partially electrically powered.

4. Modular system (10) according to claim 3, characterized in that the second control unit (18) is designed for a second-life application of the electrical energy storage device (12).

5. Modular system (10) according to one of the preceding claims, characterized in that the identification marker (22) is an optical identification marker (22).

6. Modular system (10) according to one of the preceding claims, characterized in that the identification marker (22) is a chemical marker and / or a radioactive marker.

7. Modular system (10) according to one of the preceding claims, characterized in that the identification marker (22) is designed as an engraving and / or as a printed serial number.

8. Modular system (10) according to one of the preceding claims, characterized in that the identification marker (22) is assigned to a supplier of the second control unit (18) via a database (36).

9. Modular system (10) according to one of the preceding claims, characterized in that the identification marker (22) is arranged on the second control unit (18) in a way that is not optically visible.

10. Method for manufacturing a modular system (10) according to one of claims 1 to 9 with at least one electrical energy storage device (12), comprising the steps: - Arranging the first control unit (14) on the electrical energy storage device (12); and - Providing the second control unit (18) with the identification marker (22).

Images