Redundant Battery Control Unit for Microcontroller Failure Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing battery systems lack sufficient redundancy to meet high safety standards, particularly in scenarios where microcontroller failures occur, leading to potential safety hazards and reduced system availability.
Innovation Solution
A battery system with a control unit that includes a first microcontroller and a DC/DC converter with a second microcontroller, where the control unit can redundantly control the DC/DC converter, ensuring continued operation even if one microcontroller fails. The system also includes a switch control circuit that can take over power switch control in case of microcontroller malfunctions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single microcontroller is used to control the battery system, then the device complexity is reduced, but the reliability decreases due to potential single points of failure
Solution Approach 1:
The patent combines the control functions for both the power switch and DC/DC converter into a single control unit with two microcontrollers. This merging approach allows redundant control paths while maintaining integrated system management, resolving the contradiction between reliability improvement and device complexity
Solution Approach 2:
The patent implements beforehand cushioning by providing redundant control paths and backup microcontrollers that can take over in case of failure. The control unit is designed with pre-established fallback mechanisms where either microcontroller can control either component, ensuring continued operation without immediate system failure
2Reliability
If redundant control paths are implemented, then the reliability is improved, but the device complexity increases
Solution Approach 1:
The patent applies universality by designing the control unit where both microcontrollers can perform both control functions (power switch control and DC/DC converter control). This multi-functional design provides redundant control paths without requiring separate dedicated controllers for each function, thereby improving reliability while limiting the increase in device complexity
Data Source
AI summary
In a control unit for a battery system, the control unit includes: an input node configured to receive a sensor signal indicating a state of at least one of a plurality of battery cells of the battery system; a first microcontroller configured to generate a first control signal based on the state of the at least one battery cell; a first communication interface configured to receive a second state signal indicating an operation state of a second microcontroller; and a switch control circuit configured to: receive the first control signal; generate a second control signal based on the state of the at least one battery cell; and transmit one of the first and second control signal to a power switch of the battery system based on at least one received state signal indicating an operation state of the first microcontroller and of an operation state of the second microcontroller.