
Definition of battery BMS failure level
Before the power battery energy management system handles the fault, it first analyzes the fault to identify what kind of fault it is and the fault level that occurs. For fault identification, fault condition thresholds must be designed in advance. Generally, the state range of parameters or components within a certain period of time is specified, and the failure level is set according to the threat of the failure to components and personnel. If the parameters are outside the threshold range within the specified time, for example, if the voltage of the Tycorun Lithium Battery cell is more than 4.3V for more than 500ms, the BMS determines that the fault is that the cell voltage is higher than the upper limit value, and immediately disconnects the main relay and reports a fault warning. According to the severity of the fault, the fault level is defined as follows:
①Fault level 0: No fault.
②Fault level 1: Power reduction mode, the maximum charging power available for the battery is halved, and the discharging power is not affected.
③Fault level 2: Immediately disconnect the charging circuit relay, and do not specifically limit the charging and discharging power.
④Failure level 3: Serious failure mode, the maximum charging power is 0kW; if the vehicle speed is higher than 10km/h, the maximum discharge power is 0kW; if the vehicle speed is lower than 10km/h, the maximum discharge power is set to 10kW travel power.
⑤Failure level 4: Serious failure mode, disconnect the main relay immediately.
⑥Fault level 5: Dangerous fault mode, but do not automatically power off (if there are other level 4 faults at the same time, it should first report a level 4 fault for 1s to trigger a high-voltage power failure, and then continue to report a level 5 fault).
The power battery energy management system has safety protection functions, and corresponding measures should be taken in case of failure:
(1) Overvoltage protection. When it is detected that the highest cell voltage of the battery pack exceeds the level 2 fault threshold, the maximum available charging power of the battery drops to 0 within 2s; when the highest cell voltage exceeds the level 3 fault threshold, the BMS requests the VCU to disconnect the high-voltage relay. Get a timely response, and after 2s, the BMS will cut off the high-voltage relay by itself, and the high-voltage will be powered off.
(2) Low voltage protection. When it is detected that the highest cell voltage of the battery pack is lower than the level 2 fault threshold, the maximum available discharge power of the battery drops to 5kW within 2s; when the lowest cell voltage exceeds the level 3 fault, the BMS requests the VCU to disconnect the high-voltage relay. Respond in time. After 2s, the BMS automatically cuts off the high-voltage relay and powers off the high-voltage.
(3) Discharge overcurrent protection. When it is detected that the discharge current of the battery pack is greater than the level 2 fault threshold, the maximum available discharge power of the battery is reduced to 5kW within 2s.
(4) Charge overcurrent protection. When it is detected that the charging current of the battery pack is greater than the level 2 fault threshold, the available maximum charging power of the battery drops to 0kW within 2s.
(5) High temperature protection. When it is detected that the temperature of the power battery pack is higher than the level 2 fault threshold, the maximum available discharge power of the battery is reduced to 5kW within 2s; when it is detected that the temperature of the battery pack is higher than the level 2 fault threshold, the BMS requests the VCU to disconnect the high-voltage relay. Get a timely response, and after 2s, the BMS will cut off the high-voltage relay by itself, and the high-voltage will be powered off.
(6) Emergency power off. When the VCU sends a power-off command or the insulation resistance is low, the BMS sends a level 4 fault to the VCU. When the vehicle speed is not zero, the relay continues to be closed, and the main relay cannot be closed until the key off/on is again.
(7) High Voltage Interlock (HVIL). The HVIL of all high voltage connectors, MSD or cover switch (if any) must be connected in series to the vehicle HVIL circuit. The battery system BMS should be able to monitor the HVIL state, and when the HVIL state is abnormal, the battery system should be able to immediately disconnect the high-voltage circuit.
(8) Collision protection. When a collision occurs, the BMS can detect the collision signal, and should cut off the high-voltage output in time to ensure the safety of personnel.