Battery Controller Redundancy for MCU Failover Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Battery systems face interruptions due to sudden unavailability of electricity, which is a growing concern as battery usage becomes more widespread, highlighting the need for a reliable and fault-tolerant management system to ensure steady electrical delivery.
Innovation Solution
A fault-tolerant battery management system with active-standby topology, utilizing multiple Application Front End (AFE) devices, gauges, and micro control units (MCUs) connected via a communication bus, where one MCU is active and the other is in standby mode, enabling seamless switching and continuous operation even if a component fails.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single MCU is used to control the battery management system, then the device complexity is reduced, but the reliability deteriorates due to single-point failure risk
Solution Approach 1:
The patent implements a standby MCU that performs preliminary self-check and readiness preparation before being needed. The standby controller is pre-configured and monitored, ready to take over immediately if the active MCU fails, thus preventing system outage before it occurs.
Solution Approach 2:
The patent provides a backup MCU as a cushion against potential failures. This redundant controller acts as a safety buffer, ensuring that if the primary MCU fails, the system can switch to the backup without interruption, cushioning against the harmful effect of single-point failure.
2Reliability
If multiple MCUs are used with active-standby topology, then the reliability is improved through redundancy, but the device complexity increases
Solution Approach 1:
The patent divides the control function into two separate MCU units with distinct roles (active and standby). This segmentation allows each unit to be independently designed, tested, and maintained, simplifying the overall system architecture despite the presence of redundancy.
Solution Approach 2:
The standby MCU is designed with universal capabilities to perform both monitoring functions and primary control functions. This multi-functionality ensures that the backup unit can seamlessly assume the role of the active unit without requiring additional specialized components, thereby limiting the increase in complexity.
3Reliability
If self-check and ID-based activation is implemented during boot-up, then the reliability is improved through automatic failover capability, but the initialization time increases
Solution Approach 1:
The standby MCU performs self-check and readiness verification during the boot-up process in advance, before system operation begins. This preliminary action ensures that the backup controller is validated and ready to take over immediately if needed, enabling automatic failover without delay during actual operation.
Solution Approach 2:
The MCUs automatically perform self-check and determine active/standby status through their own internal logic and ID comparison during initialization. This self-service mechanism eliminates the need for external configuration or manual intervention, reducing the time overhead despite the additional validation steps.
Data Source
AI summary
A battery management system and method for enabling a battery system to overcome single point failure in its control system and to deliver electrical charges steadily through redundancy implementation. The battery management system has redundant hardware devices, including multiple microcontrollers (MCU) connected to multiple controller area (CAN) network buses. An active MCU periodically checks health information from a standby MCU.