CN116298948A

CN116298948A - Method and device for monitoring safety of vehicle power battery function and storage medium

Info

Publication number: CN116298948A
Application number: CN202310302909.1A
Authority: CN
Inventors: 马腾翔; 荣常如; 王君君; 张頔; 张兴瑞; 牛春静; 于春洋; 范广冲; 侯典坤; 杨庆敖
Original assignee: FAW Group Corp
Current assignee: FAW Group Corp
Priority date: 2023-03-24
Filing date: 2023-03-24
Publication date: 2023-06-23

Abstract

The invention discloses a vehicle power battery function safety monitoring method, a device and a storage medium. Wherein the method comprises the following steps: collecting target parameter information of a target vehicle, wherein the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to a power battery; performing functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition faults or transmission faults occur in the target parameter information; responding to the verification result to display that the target parameter information passes the functional safety verification, and carrying out fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state or not; and determining a safety management strategy corresponding to the power battery based on the analysis result. The invention solves the technical problem of lower safety of the power battery caused by the difficulty in effectively managing the power battery in the related technology.

Description

Method and device for monitoring safety of vehicle power battery function and storage medium

Technical Field

The invention relates to the field of vehicles, in particular to a vehicle power battery function safety monitoring method, a device and a storage medium.

Background

In the field of vehicles, since the voltage, current and temperature of the power battery may exceed the design values, a large amount of heat is released inside the battery at this time, thermal runaway is easily generated, and thus the battery sprays harmful gas, the battery catches fire or explodes, which poses a great threat to the safety of vehicles and personnel.

The thermal runaway early warning method generally adopted in the related art is to judge whether the power battery is in thermal runaway or not by monitoring the voltage, current, temperature, sampling communication and other data of the power battery in real time. However, the random failure rate of hardware and the diagnostic coverage are difficult to meet the safety requirements of the functions of the power battery management system, so that the information for predicting the failure cannot be received, the safety of the power battery is low, and further the damage to the vehicle and personnel caused by the thermal runaway of the power battery of the vehicle cannot be avoided.

In view of the above problems, no effective solution has been proposed at present.

Disclosure of Invention

The embodiment of the invention provides a vehicle power battery function safety monitoring method, a vehicle power battery function safety monitoring device and a storage medium, which at least solve the technical problem of low power battery safety caused by the fact that the power battery is difficult to effectively manage in the related technology.

According to one embodiment of the present invention, there is provided a vehicle power battery function safety monitoring method including: collecting target parameter information of a target vehicle, wherein the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to a power battery; performing functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition faults or transmission faults occur in the target parameter information; responding to the verification result to display that the target parameter information passes the functional safety verification, and carrying out fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state or not; and determining a safety management strategy corresponding to the power battery based on the analysis result.

Optionally, the plurality of security monitoring parameters includes: battery voltage, battery temperature, battery pressure, battery insulation resistance, and communication parameters.

Optionally, performing functional security verification on the target parameter information includes: the following checks are made on the battery voltage: total voltage monitoring, cell voltage monitoring, battery voltage rationality monitoring, cell voltage invalidity monitoring, cell overvoltage monitoring, and cell undervoltage monitoring; the following checks were made for battery temperature: monitoring the temperature of a monomer, monitoring the effectiveness and rationality of the temperature of the monomer, monitoring the overtemperature of the monomer, monitoring the inlet temperature of cooling liquid and monitoring the rationality of the temperature of the cooling liquid at the inlet and the outlet; the following checks were made on the cell pressure: cell pressure monitoring, pressure change rate monitoring, and relative pressure change monitoring.

Optionally, performing fault analysis on the power battery by using the target parameter information, and obtaining an analysis result includes: determining fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information, wherein the fault information is used for determining whether the safety monitoring parameters have faults or not; and determining that the power battery is in a thermal runaway state in response to determining that at least two safety monitoring parameters fail based on the failure information.

Optionally, determining fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information includes: determining fault information corresponding to the battery voltage based on any one of the following data: a voltage lower limit value and a connection state of the cell voltage sampling line; determining fault information corresponding to the battery temperature based on any one of the following data: temperature difference, upper limit value of temperature and temperature rise rate of the battery; determining fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate; determining fault information corresponding to the battery insulation resistance value based on the following data: real-time battery insulation resistance; determining fault information corresponding to the communication parameters based on the following data: communication off time.

Optionally, after collecting the target parameter information of the target vehicle, the vehicle power battery function safety monitoring method further comprises: communication monitoring is carried out on the target transmission link to obtain a monitoring result, wherein the target transmission link comprises at least one of the following: a daisy chain communication link, CAN communication link; and executing data transmission protection operation based on the monitoring result.

Optionally, determining the safety management policy corresponding to the power battery based on the analysis result includes: in response to the power battery being in a thermal runaway state, pushing first prompt information to a target user by utilizing an audio component and/or a display component, and sending first control information to a high-voltage contactor of a target vehicle, wherein the first prompt information is used for carrying out safety prompt on the target user, and the first control information is used for controlling the high-voltage contactor to continuously keep in an open state; and in response to the power battery not being in a thermal runaway state, pushing second prompt information to the target user by utilizing the audio component and/or the display component, wherein the second prompt information is used for prompting the target user for faults.

According to one embodiment of the present invention, there is provided a vehicle power battery function safety monitoring device including: the system comprises an acquisition module, a control module and a control module, wherein the acquisition module is used for acquiring target parameter information of a target vehicle, and the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to a power battery; the verification module is used for carrying out functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition failure or transmission failure occurs in the target parameter information; the analysis module is used for responding to the verification result to display that the target parameter information passes the functional safety verification, and performing fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state or not; and the determining module is used for determining a safety management strategy corresponding to the power battery based on the analysis result.

Optionally, the verification module is further configured to verify the battery voltage by: total voltage monitoring, cell voltage monitoring, battery voltage rationality monitoring, cell voltage invalidity monitoring, cell overvoltage monitoring, and cell undervoltage monitoring; the following checks were made for battery temperature: monitoring the temperature of a monomer, monitoring the effectiveness and rationality of the temperature of the monomer, monitoring the overtemperature of the monomer, monitoring the inlet temperature of cooling liquid and monitoring the rationality of the temperature of the cooling liquid at the inlet and the outlet; the following checks were made on the cell pressure: cell pressure monitoring, pressure change rate monitoring, and relative pressure change monitoring.

Optionally, the analysis module is further configured to determine fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information, where the fault information is used to determine whether the safety monitoring parameters are faulty; and determining that the power battery is in a thermal runaway state in response to determining that at least two safety monitoring parameters fail based on the failure information.

Optionally, the analysis module is further configured to determine fault information corresponding to the battery voltage based on any one of the following data: a voltage lower limit value and a connection state of the cell voltage sampling line; determining fault information corresponding to the battery temperature based on any one of the following data: temperature difference, upper limit value of temperature and temperature rise rate of the battery; determining fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate; determining fault information corresponding to the battery insulation resistance value based on the following data: real-time battery insulation resistance; determining fault information corresponding to the communication parameters based on the following data: communication off time.

Optionally, the vehicle power battery function safety monitoring device further includes: the detection module is used for carrying out communication monitoring on the target transmission link to obtain a monitoring result, and the target transmission link comprises at least one of the following: a daisy chain communication link, CAN communication link; and executing data transmission protection operation based on the monitoring result.

Optionally, the determining module is further configured to push, by using the audio component and/or the display component, first prompt information to a target user in response to the power battery being in a thermal runaway state, and send first control information to a high-voltage contactor of the target vehicle, where the first prompt information is used to perform a safety prompt to the target user, and the first control information is used to control the high-voltage contactor to continuously maintain an open state; and in response to the power battery not being in a thermal runaway state, pushing second prompt information to the target user by utilizing the audio component and/or the display component, wherein the second prompt information is used for prompting the target user for faults.

According to one embodiment of the present invention, there is also provided a non-volatile storage medium in which a computer program is stored, wherein the computer program is configured to perform the vehicle power battery function safety monitoring method of any one of the above when run.

According to one embodiment of the present invention, there is also provided a processor for running a program, wherein the program is configured to execute the vehicle power battery function safety monitoring method in any one of the above-described claims when running.

According to one embodiment of the present invention, there is also provided an electronic device including a memory having a computer program stored therein and a processor configured to run the computer program to perform the vehicle power battery function safety monitoring method of any one of the above.

In the embodiment of the invention, the target parameter information of the target vehicle is acquired, the functional safety verification is further carried out on the target parameter information, a verification result is obtained, then the target parameter information is displayed in response to the verification result, the functional safety verification is carried out on the target parameter information, the power battery is subjected to fault analysis to obtain an analysis result, and finally the corresponding safety management strategy of the power battery is determined based on the analysis result, so that the purpose of effectively managing the power battery is achieved, the technical effect of improving the safety of the power battery is achieved, and the technical problem of lower safety of the power battery caused by the difficulty in effectively managing the power battery in the related technology is solved.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiments of the invention and together with the description serve to explain the invention and do not constitute a limitation on the invention. In the drawings:

FIG. 1 is a flow chart of a method for monitoring the functional safety of a vehicle power battery according to one embodiment of the present invention;

FIG. 2 is a schematic diagram of a method for monitoring the functional safety of a vehicle power battery according to one embodiment of the present invention;

FIG. 3 is a schematic illustration of another vehicle power battery functional safety monitoring method according to one embodiment of the present invention;

fig. 4 is a block diagram of a vehicle power battery functional safety monitoring device according to one embodiment of the present invention.

Detailed Description

In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.

It should be noted that the terms "first," "second," and the like in the description and the claims of the present invention and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

According to an embodiment of the present invention, there is provided a vehicle power battery function safety monitoring method, it being noted that the steps shown in the flowchart of the drawings may be performed in a computer system such as a set of computer executable instructions, and that although a logical sequence is shown in the flowchart, in some cases the steps shown or described may be performed in a different order than what is shown herein.

The method embodiments may be performed in an electronic device or similar computing device that includes a memory and a processor. Taking an example of operation on a vehicle terminal, the vehicle terminal may include one or more processors (the processors may include, but are not limited to, central processing units (Central Processing Unit, CPU), graphics processing units (Graphics Processing Unit, GPU), digital signal processing (Digital Signal Processing, DSP) chips, microprocessors (Micro Controller Unit, MCU), programmable logic devices (Field Programmable Gate Array, FPGA), neural-network processors (Neural-network Processor Unit, NPU), tensor processors (Tensor Processing Unit, TPU), artificial intelligence (Artificial Intelligence, AI) type processors, and the like processing means for storing data. Alternatively, the vehicle terminal may further include a transmission device, an input-output device, and a display device for a communication function. It will be appreciated by those skilled in the art that the above description of the structure is merely illustrative and is not intended to limit the structure of the vehicle terminal. For example, the vehicle terminal may also include more or fewer components than the above structural description, or have a different configuration than the above structural description.

The memory may be used to store a computer program, for example, a software program of application software and a module, such as a computer program corresponding to the vehicle power battery function safety monitoring method in the embodiment of the present invention, and the processor executes various function applications and data processing by running the computer program stored in the memory, that is, implements the vehicle power battery function safety monitoring method described above. The memory may include high speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory. In some examples, the memory may further include memory remotely located with respect to the processor, the remote memory being connectable to the mobile terminal through a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission means is used for receiving or transmitting data via a network. Specific examples of the network described above may include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission means comprises a network adapter (Network Interface Controller, simply referred to as NIC) that can be connected to other network devices via a base station to communicate with the internet. In one example, the transmission device may be a Radio Frequency (RF) module, which is used to communicate with the internet wirelessly.

Display devices may be, for example, touch screen type liquid crystal displays (Liquid Crustal Display, LCDs) and touch displays (also referred to as "touch screens" or "touch display screens"). The liquid crystal display may enable a user to interact with a user interface of the mobile terminal. In some embodiments, the mobile terminal has a graphical user interface (Graphical User Interface, GUI) with which a user can interact with the GUI by touching finger contacts and/or gestures on the touch-sensitive surface, where the human-machine interaction functionality optionally includes the following interactions: executable instructions for performing the above-described human-machine interaction functions, such as creating web pages, drawing, word processing, making electronic documents, games, video conferencing, instant messaging, sending and receiving electronic mail, talking interfaces, playing digital video, playing digital music, and/or web browsing, are configured/stored in a computer program product or readable storage medium executable by one or more processors.

Fig. 1 is a flowchart of a method for monitoring the safety of a vehicle power battery function according to one embodiment of the present invention, as shown in fig. 1, the method includes the steps of:

step S12, collecting target parameter information of a target vehicle, wherein the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to the power battery.

In the step S12, target parameter information of the target vehicle may be collected, where the target parameter information is used to represent a plurality of safety monitoring parameters corresponding to the power battery, and specifically, the plurality of safety monitoring parameters may be used to determine whether the vehicle is in thermal runaway.

And S14, performing functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition failure or transmission failure occurs in the target parameter information.

In the step S14, after the target parameter information of the target vehicle is collected, functional security verification may be performed on the target parameter information to obtain a verification result, so as to determine whether the collection failure or the transmission failure occurs in the target parameter information.

For example, functional safety verification is performed on the battery voltage and the communication parameters, and it can be determined that the collection of the battery voltage fails according to the verification result, so that a prompt can be sent to a user.

And S16, displaying the target parameter information to pass the functional safety verification in response to the verification result, and performing fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state.

In the step S16, when the verification result shows that the target parameter information passes the functional safety verification, the power battery may be subjected to fault analysis by using the target parameter information to obtain an analysis result, where the analysis result is used to determine whether the power battery is in a thermal runaway state.

Specifically, when the target parameter information does not have acquisition failure or transmission failure, the power battery can be subjected to failure analysis by using the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance value and the communication parameters of the vehicle, so that whether the power battery is in a thermal runaway state can be judged.

And S18, determining a safety management strategy corresponding to the power battery based on the analysis result.

In the step S18, after the power battery is subjected to fault analysis by using the target parameter information, the analysis result is obtained, and then the safety management policy corresponding to the power battery may be determined based on the analysis result.

Specifically, the safety management strategy corresponding to the power battery may include prompting the driver of a failure, prompting the user to move away from the vehicle, and simultaneously opening the high voltage contactor.

Based on the steps S12 to S18, the target parameter information of the target vehicle is collected, the function safety verification is further carried out on the target parameter information, a verification result is obtained, then the target parameter information is displayed in response to the verification result, the function safety verification is carried out on the target parameter information, the power battery is subjected to fault analysis to obtain an analysis result, and finally the safety management strategy corresponding to the power battery is determined based on the analysis result, so that the purpose of effectively managing the power battery is achieved, the technical effect of improving the safety of the power battery is achieved, and the technical problem that the safety of the power battery is low due to the fact that the power battery is difficult to effectively manage in the related art is solved.

Optionally, in step S14, performing functional security verification on the target parameter information includes:

Step S141, the following checks are performed on the battery voltage: total voltage monitoring, cell voltage monitoring, battery voltage rationality monitoring, cell voltage invalidity monitoring, cell overvoltage monitoring, and cell undervoltage monitoring.

Step S142, the following checks are performed on the battery temperature: monitoring the temperature of a monomer, monitoring the effectiveness and rationality of the temperature of the monomer, monitoring the overtemperature of the monomer, monitoring the inlet temperature of cooling liquid and monitoring the rationality of the temperature of the cooling liquid at the inlet and the outlet.

Step S143, the following checks are performed on the battery pressure: cell pressure monitoring, pressure change rate monitoring, and relative pressure change monitoring.

In an alternative embodiment, at least one of the following checks may also be made on the battery current: hall sensor monitoring, shunt monitoring, battery current rationality monitoring, shunt temperature monitoring, and battery discharge overcurrent monitoring.

In an alternative embodiment, at least one of the following checks may also be made on the communication parameters: daisy chain communication monitoring, CAN input converter protection monitoring, end-to-End (E2E) protection monitoring of CAN output communication, read-Only Memory (ROM) data protection monitoring, (Random Access Memory, RAM) data protection monitoring, microprocessor software execution protection monitoring, hardware failure index monitoring.

Based on the above steps S141 to S143, by checking the battery voltage, the battery temperature, and the battery pressure, it can be determined whether the acquisition failure or the transmission failure occurs in the target parameter information.

Optionally, in step S16, fault analysis is performed on the power battery by using the target parameter information, and the analysis result includes:

step S161, determining fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information, where the fault information is used to determine whether the safety monitoring parameters are faulty.

In the step S161, when the power battery is subjected to fault analysis by using the target parameter information, fault information corresponding to the plurality of safety monitoring parameters may be determined based on the target parameter information, where the fault information is used to determine whether the safety monitoring parameters are faulty.

Specifically, when the power battery is subjected to fault analysis by using the target information parameter, fault information corresponding to the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance and the communication parameter can be determined based on the target parameter information, so that whether the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance and the communication parameter have faults or not can be determined.

Step S162, determining that the power cell is in a thermal runaway state in response to determining that at least two safety monitoring parameters fail based on the failure information.

In the above step S162, when it is determined that at least two safety monitoring parameters fail based on the failure information, it may be determined that the power battery is in a thermal runaway state.

Specifically, when at least two safety detection parameters of the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance and the communication parameters are failed, it may be determined that the power battery is in a thermal runaway state.

Based on the steps S161 to S162, by determining the fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information, and further determining that at least two safety monitoring parameters are faulty based on the fault information, it is determined that the power battery is in a thermal runaway state, the thermal runaway monitoring of the power battery can be performed from a plurality of dimensions, so that the power battery can be effectively managed, and the safety of the power battery can be improved.

Optionally, in step S161, determining fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information includes:

step S1611, determining fault information corresponding to the battery voltage based on any one of the following data: voltage lower limit value, connection state of cell voltage sampling line.

In the above step S1611, the fault information corresponding to the battery voltage may be determined based on the voltage lower limit value or the connection state of the cell voltage sampling line.

Specifically, the lower voltage limit value is the minimum voltage of the power battery, and the connection state of the cell voltage sampling line may include that the cell voltage sampling line is turned on and the cell voltage sampling line is turned off.

For example, when the minimum voltage of the power battery is less than the preset threshold, it may be determined that the battery voltage is faulty, and the fault information is "the minimum voltage of the power battery is less than the preset threshold"; when the cell voltage sampling line is disconnected, the battery voltage can be determined to be faulty, and the fault information is "the cell voltage sampling line is disconnected".

In an alternative embodiment, the total voltage and the single voltage of the power battery can be obtained, fault diagnosis can be performed, and the rationality and the validity of the total voltage and the single voltage can be checked.

The high-voltage Analog-to-digital converter (ADC) module can be used for periodically collecting and monitoring the total voltage of the power battery and the voltages at the front end and the rear end of the contactor, and meeting the precision requirement, diagnosing whether the high-voltage ADC module has faults or not, and diagnosing whether the contactor has normally open and normally closed faults or not through the voltages at the front end and the rear end of the contactor.

The high voltage ADC module hardware design meets the automotive safety integrity level (Automotive Safety Integrity Level, asid) hardware index and is selected to have a low PMHF failure rate, which can meet the system safety hardware random failure probability metric (Probabilistic Metric of for random Hardware Failures, PMHF) objective.

The voltage of all the single units of the power battery can be acquired from the controller, the precision requirement is met, and the hardware components related to the single unit voltage sampling meet the hardware index and the failure rate in the ASILD.

The single cell voltage sampling fault is reported when any single cell voltage is below a first preset threshold, e.g., any single cell voltage is below 0.5V, or any single cell voltage is above a second preset threshold, e.g., any single cell voltage is above 4.8V, or the battery is open, or the battery is shorted, or a low dropout linear regulator (Low Dropout Regulator, LDO) 5V reference error occurs.

When the total voltage sampling and the single voltage sampling are not failed, the total voltage of the power battery is checked, the single voltage and the difference value are checked, if the total voltage exceeds a preset threshold value, the power battery voltage is reported to check the failure, and the contactor is disconnected. If the power cell total voltage verification signal is "inactive", the battery management system (Battery Management System, BMS) opens the contactors.

The overvoltage and undervoltage of the single voltage can be monitored in three stages. When the overvoltage and the undervoltage of the single voltage exceed the first fault threshold for a certain time, the power limiting use is carried out, when the overvoltage and the undervoltage of the single voltage exceed the second fault threshold for a certain time, the BMS requests to disconnect the contactor, and when the overvoltage and the undervoltage of the single voltage exceed the third threshold for a certain time, the BMS directly disconnects the contactor.

Step S1612, determining fault information corresponding to the battery temperature based on any one of the following data: temperature difference, upper limit value of temperature and temperature rising rate of the battery.

In the above step S1612, the fault information corresponding to the battery temperature may be determined based on the battery temperature difference or the temperature upper limit value or the temperature increase rate.

For example, when the battery temperature difference is greater than a preset threshold, it may be determined that the battery temperature is faulty, and the fault information is "the battery temperature difference is greater than the preset threshold"; when the upper limit value of the temperature of the battery, namely the highest temperature of the battery, is larger than a preset threshold value, the temperature of the battery can be determined to be faulty, and the fault information is that the upper limit value of the temperature of the battery is larger than the preset threshold value; when the temperature rise rate of the battery is greater than the preset threshold, the battery temperature can be determined to be faulty, and the fault information is that the temperature rise rate of the battery is greater than the preset threshold.

In an alternative embodiment, the temperature of the power cell may be collected, fault diagnosed, and the validity and rationality of the temperature checked. And collecting the temperature of the cooling liquid water inlet, performing fault diagnosis, and checking the rationality of the temperature of the water inlet.

The position where the temperature sensor is arranged is selected through thermal simulation, the highest temperature point and the lowest temperature point are needed to be contained, and the temperature sensor meets the precision requirement. The hardware components associated with the battery temperature measurement should be selected to be consistent with the failure rate of the asid.

The main controller needs to perform fault detection on all the temperature sensors respectively, including but not limited to: the temperature is lower than a third preset threshold value, the temperature is higher than a fourth preset threshold value, the temperature sensor is open-circuited, short-circuited and LDO 5V reference voltage is wrong. When the temperature sensor fails, the corresponding temperature sensor failure signal is set as invalid.

All temperature measurements are periodically collected, the highest and lowest battery temperatures are determined, and the average battery temperature is calculated.

If the BMS sleep time has exceeded the preset time and there is no temperature sensor failure, the BMS sets the battery temperature rationality check signal to be inactive by detecting that the temperature of any temperature sensor and the temperature difference of the adjacent temperature sensor exceed the preset threshold.

When detecting that the battery temperature sensor fails or the battery temperature rationality check signal is invalid, the BMS sets the battery temperature check as invalid, limits the allowable charge and discharge power, and sequentially opens the contactors after a period of time.

And carrying out three-stage monitoring on the temperature overtemperature. The battery temperature verification signal indicates that the battery temperature is effective and the maximum battery temperature exceeds a fourth fault threshold for a certain time, and power limiting use is carried out; the BMS requests the opening of the contactor when the maximum battery temperature exceeds the fifth failure threshold for a certain time; the maximum battery temperature exceeds the sixth fault threshold for a certain time, and the BMS directly opens the contactor.

When the battery is in a direct-current charging state or an alternating-current charging state, the battery temperature verification signal indicates that the battery is effective, the lowest battery temperature is lower than a preset threshold value, the battery current verification state indicates that the battery is effective, the battery charging current is larger than the preset threshold value, the BMS limits allowable charging and discharging power, and the contactor is sequentially opened after a period of time is delayed.

Periodically collecting the water inlet temperature and performing fault detection on the water inlet temperature sensor, including but not limited to: the water inlet temperature sensor is short-circuited to ground, short-circuited to a storage battery, open-circuited, power failure and out-of-range in value. When the water inlet temperature sensor fails, the BMS sends the failure to the whole vehicle controller.

Step S1613, determining fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate.

In step S1613 described above, the fault information corresponding to the battery pressure may be determined based on the absolute pressure change value or the historical boost rate.

Specifically, the historical boost rate is a pressure rise slope, and the absolute pressure change value and the historical boost rate can be obtained from the pressure sensor, so that whether the battery pressure fails or not can be determined based on the absolute pressure change value or the historical boost rate.

For example, when the absolute pressure change value is greater than the preset threshold, it may be determined that the battery pressure fails, and the failure information is "the absolute pressure change value is greater than the preset threshold"; when the historical boost rate is greater than the preset threshold in both sampling periods, it may be determined that the battery pressure is malfunctioning, and the malfunction information is "the historical boost rate is greater than the preset threshold in both sampling periods".

Step S1614, determining fault information corresponding to the battery insulation resistance value based on the following data: and the insulation resistance value of the battery is real-time.

In the step S1614, fault information corresponding to the battery insulation resistance value may be determined based on the real-time battery insulation resistance value.

For example, when the real-time battery insulation resistance is smaller than the preset threshold, it may be determined that the battery insulation resistance is faulty, and the fault information is "the battery insulation resistance is faulty"; when the real-time battery insulation resistance values of three continuous periods are smaller than the preset threshold value of the previous period, the battery insulation resistance value can be determined to be faulty, and the fault information is that the real-time battery insulation resistance values of three continuous periods are smaller than the preset threshold value of the previous period.

Step S1615, determining fault information corresponding to the communication parameters based on the following data: communication off time.

In the step S1615, fault information corresponding to the communication parameter may be determined based on the communication disconnection time.

For example, when the communication short-circuit time is greater than the preset threshold, it may be determined that the communication parameter fails, and the failure information is "the communication short-circuit time is greater than the preset threshold".

In an alternative embodiment, fault information corresponding to the battery pressure may also be determined based on the pressure value. Specifically, the pressure value may be obtained by a pressure sensor for monitoring the internal air pressure of the power cell.

The pressure sensor is in CAN communication with the main controller and performs E2E reliability protection. When the main controller is in a working state, the main controller can monitor the pressure of the power battery according to the pressure value reported by the pressure sensor. When the main controller is in a dormant state, if the pressure sensor monitors that the pressure value is abnormal, the main controller can be awakened through a hard wire and the pressure value is sent to the main controller, and the main controller can recognize and early warn the dangerous state after awakening.

The main controller needs to perform fault detection on the pressure sensor, including but not limited to: the method comprises the steps of waking up hardware interface faults, CAN to ground short circuit, CAN to power short circuit, power supply errors of the pressure sensor and exceeding the working range of the pressure sensor. And when the pressure sensor fails, the main controller reports the pressure sensor failure and stops utilizing the pressure related information to carry out thermal runaway judgment.

When the pressure sensor does not fail, the main controller reports a harmful gas leakage warning when the pressure value from the pressure sensor exceeds a preset threshold or the pressure change rate exceeds a preset threshold, and carries out thermal runaway judgment on other thermal runaway dimension parameters, including battery voltage, battery temperature, battery insulation resistance and communication parameters.

Based on the above steps S1611 to S1615, the fault information corresponding to the battery voltage is determined by based on any one of the following data: the voltage lower limit value and the connection state of the battery cell voltage sampling line are used for determining fault information corresponding to the battery temperature based on any one of the following data: the battery temperature difference, the upper temperature limit value and the temperature rise rate are used for determining fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate, fault information corresponding to battery insulation resistance value is determined based on the following data: real-time battery insulation resistance value, and fault information corresponding to communication parameters is determined based on the following data: communication break time can carry out power battery thermal runaway control from a plurality of dimensions to can effectively manage power battery, and then can improve power battery's security.

In an alternative embodiment, the safety protection may be achieved by periodically monitoring the power battery, and by monitoring the above-mentioned safety monitoring parameters to determine whether thermal runaway of the power battery has occurred. Wherein the periodic monitoring may include, but is not limited to: the method comprises the following steps of monomer low-temperature charging monitoring, vehicle-mounted charger control monitoring, direct-current charging current and stopping condition monitoring, alternating-current charging current and stopping condition monitoring, monomer internal short circuit monitoring, charging and discharging power monitoring, degradation mode monitoring, over-the-Air (OTA) upgrading monitoring and power-off state thermal runaway monitoring.

In an alternative embodiment, a determination may be made as to whether to implement a safety mechanism such as degradation, warning, and disconnection of the loop based on thermal runaway monitoring results, which may include, but is not limited to: BMS contactor status detection, contactor open current detection, contactor hardware error monitoring, contactor timing monitoring, contactor precharge current monitoring, high voltage contactor adhesion monitoring, contactor life monitoring, high voltage contactor hardware shutdown path checking.

Optionally, after collecting the target parameter information of the target vehicle, the vehicle power battery function safety monitoring method further comprises:

Step S131, performing communication monitoring on a target transmission link to obtain a monitoring result, wherein the target transmission link comprises at least one of the following: daisy chain communication links, CAN communication links.

In the step S131, after the target parameter information of the target vehicle is collected, the communication monitoring may be performed on the target transmission link, so as to obtain a monitoring result.

Specifically, the target transmission link may include at least one of: daisy chain communication links, CAN communication links, wherein the daisy chain communication link monitoring is mainly monitoring communication failures between master and slave controllers.

In an alternative embodiment, daisy-chain communication cyclic redundancy check (Cyclic Redundancy Check, CRC) failures, serial peripheral interface (Serial Peripheral Interface, SPI) communication failures, slave controller configuration incorrect download failures, slave controller internal communication failures, slave controller chip temperatures exceeding a preset threshold, slave controller power failures may be diagnosed periodically. When the above-described failure is detected, the daisy chain communication link verification signal is set to "invalid",

all signals between the master controller and the slave controllers can be also CRC protected, a hardware circuit is used for checking CRC information of daisy chain communication link signals between the slave controllers, and if the hardware detects that a message from the last slave controller to the slave controller has CRC checking errors, the slave controller sets a slave controller internal communication error mark and sends the error mark to the master controller.

In the hardware design phase, the use of a low failure rate communication chip is considered to meet the ASIL D PMHF goal. CAN communication monitoring is used for E2E protection of CAN signals with functional security levels, including but not limited to: CRC check of data, addition of a cyclic sequence counting signal in each message, checking whether the counting value is correct or not by a message receiving end, overtime detection of the message, and detection of a message identifier (Identity document, ID).

Step S132, performing a data transmission protection operation based on the monitoring result.

In step S132, after the communication monitoring is performed on the target transmission link, the data transmission protection operation may be performed based on the monitoring result.

Specifically, the data transmission can be protected according to the communication monitoring result of the target transmission link.

Based on the steps S131 to S132, the monitoring result is obtained by performing communication monitoring on the target transmission link, and further, the data transmission protection operation is performed based on the monitoring result, so that the data transmission can be protected by monitoring the communication link.

Optionally, in step S18, determining, based on the analysis result, a safety management policy corresponding to the power battery includes:

Step S181, in response to the power battery being in a thermal runaway state, pushing first prompt information to a target user by utilizing the audio component and/or the display component, and sending first control information to a high-voltage contactor of the target vehicle, wherein the first prompt information is used for carrying out safety prompt on the target user, and the first control information is used for controlling the high-voltage contactor to continuously keep an open state.

In the step S181, when the power battery is in a thermal runaway state, the audio component and/or the display component is used to push the first prompt information to the target user, and send the first control information to the high-voltage contactor of the target vehicle, where the first prompt information is used to perform a safety prompt to the target user, and the first control information is used to control the high-voltage contactor to continuously maintain the disconnection state.

Specifically, when the power battery is in a thermal runaway state, a loudspeaker can be utilized to play voice or an instrument and a display screen to display prompt information, so that the user can be timely far away from the vehicle, and personnel injury is avoided. The high voltage contactor may also be controlled to remain open continuously when the power cell is in a thermal runaway condition and no longer respond to a closing request.

In step S182, in response to the power battery not being in the thermal runaway state, a second prompt message is pushed to the target user by using the audio component and/or the display component, where the second prompt message is used for performing fault prompt on the target user.

In the step S182, when the power battery is not in the thermal runaway state, the speaker may be used to play the voice or the instrument and the display screen to display the prompt information, so as to prompt the user that the power battery fails.

Based on the above steps S181 to S182, by pushing the first prompt information to the target user by using the audio component and/or the display component in response to the power battery being in the thermal runaway state, and sending the first control information to the high-voltage contactor of the target vehicle, and pushing the second prompt information to the target user by using the audio component and/or the display component in response to the power battery not being in the thermal runaway state, the state of the power battery can be prompted to the user in time, so that the user can be timely far away from the vehicle, and personnel injury is avoided.

In an alternative embodiment, the management system of the power battery may be composed of a master controller, a slave controller, a current sensor, a pressure sensor, a high-voltage contactor and a daisy chain, wherein the master controller is composed of a multi-core microprocessor, a permanent memory (ROM), an operation data memory (RAM), a high-voltage sampling chip, a high-voltage contactor driver and a CAN communication interface. The main controller is responsible for collecting the total voltage of the power battery and the front and rear end voltage of the contactor, receiving the current value reported by the current sensor and the pressure value reported by the pressure sensor, receiving the control CAN signal of the whole vehicle controller to the high-voltage contactor, driving the high-voltage contactor, and also carrying out voltage monitoring, current monitoring, temperature monitoring, daisy chain communication monitoring, contactor monitoring, charging control monitoring, harmful gas injection monitoring, single internal short circuit monitoring, hardware communication, data and execution protection. The main controller adopts two-way power supply redundancy power supply, ensures power supply safety, and the slave controller is placed in the power battery to collect voltage and temperature signals of battery cells in the power battery.

The management system of the power battery can acquire the voltage of the power battery and monitor the rationality of the battery voltage, the ineffectiveness of the single voltage, the overvoltage and undervoltage of the single body; the temperature of the power battery can be obtained, the effectiveness and rationality of the temperature are checked, and the over-temperature monitoring is performed; the internal pressure value of the power battery CAN be obtained, and fault diagnosis of the pressure sensor, namely the wake-up hardware interface fault, CAN communication fault, power supply error of the pressure sensor and fault diagnosis of the pressure sensor exceeding the working range CAN be carried out; the insulation resistance value of the power battery can be obtained and insulation fault diagnosis can be carried out.

The main controller and the slave controllers of the management system of the power battery are in daisy chain communication, CAN communication is carried out between the main controller and other controllers and sensors, and communication is monitored and E2E protection is carried out.

Fig. 2 is a schematic diagram of a method for monitoring the functional safety of a vehicle power battery according to one embodiment of the present invention. As shown in fig. 2, the vehicle power battery function safety monitoring method mainly includes the following steps:

step S201, collecting target parameter information of a target vehicle;

the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to the power battery;

Step S202, carrying out communication monitoring on a target transmission link to obtain a monitoring result;

wherein the target transmission link comprises at least one of: a daisy chain communication link, CAN communication link;

step S203, data transmission protection operation is executed based on the monitoring result;

step S204, performing functional safety verification on the target parameter information to obtain a verification result;

the verification result is used for determining whether acquisition faults or transmission faults occur in the target parameter information;

step S205, the target parameter information is displayed to pass the functional safety verification in response to the verification result, and fault information corresponding to a plurality of safety monitoring parameters is determined based on the target parameter information;

the fault information is used for determining whether the safety monitoring parameters are faulty or not;

step S206, determining fault information corresponding to the battery voltage based on any one of the following data: a voltage lower limit value and a connection state of the cell voltage sampling line;

step S207, determining fault information corresponding to the battery temperature based on any one of the following data: temperature difference, upper limit value of temperature and temperature rise rate of the battery;

step S208, determining fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate;

Step S209, determining fault information corresponding to the battery insulation resistance value based on the following data: real-time battery insulation resistance;

step S210, determining fault information corresponding to the communication parameters based on the following data: communication off time;

step S211, determining that the power battery is in a thermal runaway state in response to determining that at least two safety monitoring parameters fail based on the failure information;

step S212, judging whether the power battery is in a thermal runaway state or not;

step S213, in response to the power battery being in a thermal runaway state, pushing first prompt information to a target user by utilizing the audio component and/or the display component, and sending first control information to a high-voltage contactor of the target vehicle;

the first prompt information is used for carrying out safety prompt on a target user, and the first control information is used for controlling the high-voltage contactor to continuously keep in an open state;

step S214, in response to the power battery not being in a thermal runaway state, pushing second prompt information to the target user by utilizing the audio component and/or the display component;

the second prompt information is used for prompting the fault of the target user.

In the workflow of the vehicle power battery function safety monitoring method, the target parameter information of the target vehicle is collected, then the function safety verification is carried out on the target parameter information, a verification result is obtained, then the target parameter information is displayed in response to the verification result, the function safety verification is carried out on the target parameter information, the power battery is subjected to fault analysis to obtain an analysis result, and finally the safety management strategy corresponding to the power battery is determined based on the analysis result, so that the purpose of effectively managing the power battery is achieved, the technical effect of improving the safety of the power battery is achieved, and the technical problem that the safety of the power battery is low due to the fact that the power battery is difficult to effectively manage in the related technology is solved.

The following describes the workflow of the above-mentioned vehicle power battery function safety monitoring method in detail by way of example:

firstly, battery voltage, battery temperature, battery pressure, battery insulation resistance and communication parameters of a vehicle power battery are collected, and daisy chain communication and CAN communication links are monitored, so that whether communication has faults or not CAN be judged, and data transmission CAN be protected.

Furthermore, the target parameter information of the power battery of the vehicle is used for representing the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance and the communication parameters of the power battery to carry out functional safety verification, so that a verification result is obtained, and whether the target parameter information has acquisition faults or transmission faults can be determined; when the verification result shows that the target parameter information passes the functional safety verification, the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance value and the fault information corresponding to the communication parameter of the power battery can be determined based on the target parameter information so as to determine whether the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance value and the communication parameter of the power battery have faults.

Then, determining whether the battery voltage has faults or not and fault information corresponding to the battery voltage based on the voltage lower limit value or the connection state of the battery cell voltage sampling line; determining whether the battery temperature has faults or not based on the battery temperature difference, the temperature upper limit value and the temperature rise rate, and determining fault information corresponding to the battery temperature; determining whether there is a fault in the battery pressure or not based on the absolute pressure change value or the historical boost rate, and fault information corresponding to the battery pressure; determining whether the battery insulation has faults or not based on the real-time battery insulation resistance value, and determining fault information corresponding to the battery insulation; it may be determined whether there is a failure in the communication based on the communication disconnection time, and failure information corresponding to the communication parameters. When at least two of the battery voltage, the battery temperature, the battery pressure, the battery insulation resistance, and the communication parameter fail, it may be determined that the power battery is in a thermal runaway state.

Finally, whether the power battery is in a thermal runaway state can be judged; when the power battery is in a thermal runaway state, a loudspeaker can be used for playing voice or an instrument and a display screen for displaying prompt information, so that a user is prompted that the power battery is in the thermal runaway state currently, and the user can be timely far away from the vehicle, and personnel injury is avoided; the high voltage contactor may also be controlled to remain open continuously when the power cell is in a thermal runaway condition and no longer respond to a closing request. When the power battery is not in a thermal runaway state, a loudspeaker can be used for playing voice or an instrument and a display screen are used for displaying prompt information to prompt a user that the power battery fails.

FIG. 3 is a schematic diagram of another method for monitoring the safety of the function of a vehicle power battery according to an embodiment of the invention, as shown in FIG. 3, after the system is started, the state of the system, which may include the state of hardware, is monitored, whether the system has a fault is judged, when the system has the fault, the fault is timely indicated to a driver, and when the system does not have the fault, signal acquisition is performed, which may include acquisition of the voltage, the temperature, the pressure and the insulation resistance of the battery; judging whether the signal acquisition fails or not, reminding a driver of the failure in time when the signal acquisition fails, and protecting data transmission when the signal acquisition does not fail; and finally judging whether the system data is wrong, when the system data is wrong, reminding the driver of the error in time, when the system data is not wrong, judging whether any two safety monitoring parameters are wrong, when any two safety monitoring parameters are wrong, reminding a user to be far away from the vehicle through an instrument and a buzzer in time, and simultaneously disconnecting all high-voltage contactors, and when only one safety monitoring parameter is wrong or no safety monitoring parameter is wrong, continuing to monitor the state of the system.

From the description of the above embodiments, it will be clear to a person skilled in the art that the method according to the above embodiments may be implemented by means of software plus the necessary general hardware platform, but of course also by means of hardware, but in many cases the former is a preferred embodiment. Based on such understanding, the technical solution of the present invention may be embodied essentially or in a part contributing to the prior art in the form of a software product stored in a storage medium (e.g. ROM/RAM, magnetic disk, optical disk) comprising instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the method according to the embodiments of the present invention.

The embodiment of the invention also provides a device for monitoring the safety of the vehicle power battery function, which is used for realizing the embodiment and the preferred implementation mode, and the description is omitted. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. While the means described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

Fig. 4 is a block diagram of a vehicle power battery function safety monitoring device according to an embodiment of the present invention, as shown in fig. 4, including: the acquisition module 401 is configured to acquire target parameter information of a target vehicle, where the target parameter information is used to represent a plurality of safety monitoring parameters corresponding to the power battery; the verification module 402 is configured to perform functional security verification on the target parameter information to obtain a verification result, where the verification result is used to determine whether the target parameter information has an acquisition failure or a transmission failure; the analysis module 403 is configured to display, in response to the verification result, that the target parameter information passes the functional safety verification, and perform fault analysis on the power battery by using the target parameter information to obtain an analysis result, where the analysis result is used to determine whether the power battery is in a thermal runaway state; and the determining module 404 is configured to determine a safety management policy corresponding to the power battery based on the analysis result.

Optionally, the verification module 402 is further configured to verify the battery voltage by: total voltage monitoring, cell voltage monitoring, battery voltage rationality monitoring, cell voltage invalidity monitoring, cell overvoltage monitoring, and cell undervoltage monitoring; the following checks were made for battery temperature: monitoring the temperature of a monomer, monitoring the effectiveness and rationality of the temperature of the monomer, monitoring the overtemperature of the monomer, monitoring the inlet temperature of cooling liquid and monitoring the rationality of the temperature of the cooling liquid at the inlet and the outlet; the following checks were made on the cell pressure: cell pressure monitoring, pressure change rate monitoring, and relative pressure change monitoring.

Optionally, the analysis module 403 is further configured to determine fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information, where the fault information is used to determine whether the safety monitoring parameters are faulty; and determining that the power battery is in a thermal runaway state in response to determining that at least two safety monitoring parameters fail based on the failure information.

Optionally, the analysis module 403 is further configured to determine fault information corresponding to the battery voltage based on any one of the following data: a voltage lower limit value and a connection state of the cell voltage sampling line; determining fault information corresponding to the battery temperature based on any one of the following data: temperature difference, upper limit value of temperature and temperature rise rate of the battery; determining fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate; determining fault information corresponding to the battery insulation resistance value based on the following data: real-time battery insulation resistance; determining fault information corresponding to the communication parameters based on the following data: communication off time.

Optionally, the vehicle power battery function safety monitoring device further includes: the detection module 405 is configured to monitor the communication of the target transmission link, and obtain a monitoring result, where the target transmission link includes at least one of the following: a daisy chain communication link, CAN communication link; and executing data transmission protection operation based on the monitoring result.

Optionally, the determining module 404 is further configured to, in response to the power battery being in a thermal runaway state, push, with the audio component and/or the display component, first prompt information to the target user, and send first control information to the high-voltage contactor of the target vehicle, where the first prompt information is used to perform a safety prompt to the target user, and the first control information is used to control the high-voltage contactor to continuously maintain an open state; and in response to the power battery not being in a thermal runaway state, pushing second prompt information to the target user by utilizing the audio component and/or the display component, wherein the second prompt information is used for prompting the target user for faults.

It should be noted that each of the above modules may be implemented by software or hardware, and for the latter, it may be implemented by, but not limited to: the modules are all located in the same processor; alternatively, the above modules may be located in different processors in any combination.

According to one embodiment of the present invention, there is also provided a non-volatile storage medium having a computer program stored therein, wherein the computer program is arranged to perform the steps of any of the method embodiments described above when run.

Alternatively, in the present embodiment, the above-described storage medium may be configured to store a computer program for performing the steps of:

s1, acquiring target parameter information of a target vehicle, wherein the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to a power battery;

s2, performing functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition failure or transmission failure occurs in the target parameter information;

s3, displaying target parameter information to pass functional safety verification in response to the verification result, and performing fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state;

s4, determining a safety management strategy corresponding to the power battery based on the analysis result.

Alternatively, in the present embodiment, the storage medium may include, but is not limited to: a usb disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a removable hard disk, a magnetic disk, or an optical disk, or other various media capable of storing a computer program.

According to one embodiment of the present invention, there is also provided a processor for running a program, wherein the program is arranged to execute the steps of any of the method embodiments described above when run.

Alternatively, in the present embodiment, the above-described processor may be configured to execute the following steps by a computer program:

According to one embodiment of the present invention, there is also provided an electronic device comprising a memory having a computer program stored therein and a processor arranged to run the computer program to perform the steps of any of the method embodiments described above.

Alternatively, specific examples in this embodiment may refer to examples described in the foregoing embodiments and optional implementations, and this embodiment is not described herein.

The foregoing embodiment numbers of the present invention are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.

In the foregoing embodiments of the present invention, the descriptions of the embodiments are emphasized, and for a portion of this disclosure that is not described in detail in this embodiment, reference is made to the related descriptions of other embodiments.

In the several embodiments provided in the present application, it should be understood that the disclosed technology content may be implemented in other manners. The above-described embodiments of the apparatus are merely exemplary, and the division of the units, for example, may be a logic function division, and may be implemented in another manner, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be through some interfaces, units or modules, or may be in electrical or other forms.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.

The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied essentially or in part or all of the technical solution or in part in the form of a software product stored in a storage medium, including instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a removable hard disk, a magnetic disk, or an optical disk, or other various media capable of storing program codes.

The foregoing is merely a preferred embodiment of the present invention and it should be noted that modifications and adaptations to those skilled in the art may be made without departing from the principles of the present invention, which are intended to be comprehended within the scope of the present invention.

Claims

1. A vehicle power battery functional safety monitoring method, characterized by comprising:

collecting target parameter information of a target vehicle, wherein the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to a power battery;

performing functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition faults or transmission faults occur in the target parameter information;

responding to the verification result to display that the target parameter information passes the functional safety verification, and performing fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state or not;

and determining a safety management strategy corresponding to the power battery based on the analysis result.

2. The vehicle power battery functional safety monitoring method of claim 1, wherein the plurality of safety monitoring parameters comprises: battery voltage, battery temperature, battery pressure, battery insulation resistance, and communication parameters.

3. The vehicle power battery function safety monitoring method according to claim 2, wherein the function safety verification of the target parameter information includes:

the following checks are performed on the battery voltage: total voltage monitoring, cell voltage monitoring, battery voltage rationality monitoring, cell voltage invalidity monitoring, cell overvoltage monitoring, and cell undervoltage monitoring;

the following checks are made for the battery temperature: monitoring the temperature of a monomer, monitoring the effectiveness and rationality of the temperature of the monomer, monitoring the overtemperature of the monomer, monitoring the inlet temperature of cooling liquid and monitoring the rationality of the temperature of the cooling liquid at the inlet and the outlet;

the following checks were made for the cell pressure: cell pressure monitoring, pressure change rate monitoring, and relative pressure change monitoring.

4. The vehicle power battery function safety monitoring method according to claim 2, wherein performing a failure analysis on the power battery using the target parameter information, the analysis result including:

determining fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information, wherein the fault information is used for determining whether the safety monitoring parameters have faults or not;

And determining that the power battery is in a thermal runaway state in response to determining that at least two of the safety monitoring parameters fail based on the failure information.

5. The vehicle power battery function safety monitoring method according to claim 4, wherein determining the fault information corresponding to the plurality of safety monitoring parameters based on the target parameter information includes:

determining the fault information corresponding to the battery voltage based on any one of the following data: a voltage lower limit value and a connection state of the cell voltage sampling line;

determining the fault information corresponding to the battery temperature based on any one of the following data: temperature difference, upper limit value of temperature and temperature rise rate of the battery;

determining the fault information corresponding to the battery pressure based on any one of the following data: absolute pressure change value, historical boost rate;

determining the fault information corresponding to the battery insulation resistance value based on the following data: real-time battery insulation resistance;

determining the fault information corresponding to the communication parameters based on the following data: communication off time.

6. The vehicle power battery function safety monitoring method according to claim 1, characterized in that after collecting the target parameter information of a target vehicle, the method further comprises:

Performing communication monitoring on a target transmission link to obtain a monitoring result, wherein the target transmission link comprises at least one of the following: a daisy chain communication link, CAN communication link;

and executing data transmission protection operation based on the monitoring result.

7. The vehicle power battery function safety monitoring method according to claim 1, wherein determining the safety management strategy corresponding to the power battery based on the analysis result includes:

in response to the power battery being in the thermal runaway state, pushing first prompt information to a target user by utilizing an audio component and/or a display component, and sending first control information to a high-voltage contactor of the target vehicle, wherein the first prompt information is used for carrying out safety prompt on the target user, and the first control information is used for controlling the high-voltage contactor to continuously keep an off state;

and in response to the power battery not being in the thermal runaway state, pushing second prompt information to the target user by utilizing the audio component and/or the display component, wherein the second prompt information is used for prompting the target user for faults.

8. A vehicle power battery functional safety monitoring device, comprising:

The system comprises an acquisition module, a control module and a control module, wherein the acquisition module is used for acquiring target parameter information of a target vehicle, and the target parameter information is used for representing a plurality of safety monitoring parameters corresponding to a power battery;

the verification module is used for carrying out functional safety verification on the target parameter information to obtain a verification result, wherein the verification result is used for determining whether acquisition faults or transmission faults occur in the target parameter information;

the analysis module is used for responding to the verification result to display that the target parameter information passes the functional safety verification, and carrying out fault analysis on the power battery by utilizing the target parameter information to obtain an analysis result, wherein the analysis result is used for determining whether the power battery is in a thermal runaway state or not;

and the determining module is used for determining a safety management strategy corresponding to the power battery based on the analysis result.

9. A non-volatile storage medium, characterized in that a computer program is stored in the storage medium, wherein the computer program is arranged to execute the vehicle power battery function safety monitoring method as claimed in any one of claims 1 to 7 when run.

10. An electronic device comprising a memory and a processor, wherein the memory has stored therein a computer program, the processor being arranged to run the computer program to perform the vehicle power battery function safety monitoring method of any one of claims 1 to 7.