JP2010200552A - Battery controller for electric automobile and battery system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a runaway supervisory circuit which can supervise the operation of a microcomputer with high reliability in a simple structure. <P>SOLUTION: A battery controller for an electric automobile includes a microcomputer 13 which can output signals for monitoring at a constant cycle during normal operation, and a runaway supervisory circuit 14 which supervises the operation of the microcomputer 13 by receiving the signal for monitoring from the microcomputer 13 and monitoring it. The runaway supervisory circuit 14 outputs a reset signal for a fixed period to the microcomputer 13 when the signal for monitoring is not received from the microcomputer 13 at a constant cycle during supervisory operation. The microcomputer 13 performs reset operation upon receiving the reset signal, outputs the signal for monitoring to the runaway supervisory circuit 14 during normal operation, and resumes output of the signal for monitoring to the runaway supervisory circuit 14 after completing a predetermined operation during maintenance operation. After outputting the reset signal, the runaway supervisory circuit 14 enters standby state until the signal for monitoring is received from the microcomputer 13, and resumes the supervisory operation when the signal for monitoring is received. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an apparatus and a battery system that control a battery of an electric vehicle, and more particularly to a battery control apparatus and a battery system that detect a runaway of a battery ECU that manages the battery and controls a main relay.

  In an electric vehicle such as a hybrid car, a battery that manages a driving motor is managed by a battery ECU. The battery ECU calculates the remaining capacity from the battery charge / discharge current and battery voltage to prevent overcharge and overdischarge, and controls the charge / discharge current and fan operation so that the battery temperature does not rise above the set temperature. is doing. The battery ECU outputs battery information such as the detected remaining capacity to the vehicle ECU. The vehicle ECU controls the inverter that controls charging / discharging of the battery from the signal input from the accelerator and the brake and the battery information input from the battery ECU, and controls the output of the engine and the traveling motor to drive the vehicle. Or brake with regenerative brake. That is, the vehicle ECU controls the output of the travel motor and the engine to drive the vehicle while managing the battery state with the signal from the battery ECU, in other words, protecting the battery from overcharge and overdischarge.

  For example, when an automobile is accelerated, electric power is supplied from the battery to the traveling motor, and the automobile is accelerated by the output of the motor. When the battery is discharged and the remaining capacity of the battery is less than the set capacity range, the inverter is controlled to charge the battery, and when the remaining capacity of the battery is greater than the set capacity range, the inverter is controlled. Stop charging the battery.

  The battery ECU has a built-in microcomputer that calculates the remaining capacity of the battery. If this microcomputer runs away due to noise or the like, the remaining battery capacity cannot be calculated accurately. If the remaining capacity cannot be calculated accurately, it cannot be calculated correctly whether the remaining capacity of the battery is within the set capacity range, and as a result, the battery is overcharged or overdischarged without correct charge and discharge control. May be. When the battery is overcharged or overdischarged, the electrical characteristics are rapidly reduced. In order to avoid such an adverse effect, the conventional electric vehicle is provided with a runaway monitoring circuit for detecting runaway of the microcomputer of the battery ECU. When the runaway monitoring circuit detects the runaway of the microcomputer, the battery output side, that is, the main relay connected between the battery and the inverter is turned off to stop the charging / discharging of the battery.

  An example of a battery system provided with such a runaway monitoring circuit is shown in FIG. The battery system 700 shown in this figure includes a battery 701, a main relay 705 that switches activation / stop of the battery 701, and a battery ECU 702 that includes a microcomputer 713 that controls the operation of the battery 701. The battery ECU 702 further includes a runaway monitoring circuit 714 for monitoring the operation of the microcomputer 713. The runaway monitoring circuit 714 receives a monitoring signal from the microcomputer 713 and sends a reset signal to the microcomputer 713. Furthermore, the microcomputer 713 can rewrite software that defines the operation. When rewriting the software of the microcomputer 713, the software writing device SW is connected to the microcomputer 713. The software writing device SW transmits a write signal to the microcomputer 713 side and executes a write operation.

  A monitoring operation using such a runaway monitoring circuit 714 is shown in FIG. As shown in this figure, the microcomputer 713 continues to output a rectangular wave output at a constant cycle as a monitoring signal to the runaway monitoring circuit 714. When this monitoring signal is not detected, the runaway monitoring circuit 714 It was judged as 713 runaway. The runaway monitoring circuit 714 continues to output a reset signal to the microcomputer 713 when the monitoring signal is no longer detected. When the microcomputer 713 receives the reset signal, it is reset once, and if it is normal, the output of the monitoring signal is resumed. If it is abnormal, the output of the monitoring signal is not resumed, so that it is determined as abnormal.

  However, this method has a problem that it is not easy to set an operation when it is desired to temporarily stop the monitoring operation by the runaway monitoring circuit 714. For example, when the battery is activated, a monitoring signal cannot be output until the microcomputer 713 is activated. Therefore, it is necessary to temporarily stop the operation of the runaway monitoring circuit 714 during this period, that is, to mask the operation. Similarly, when rewriting the software of the microcomputer 713 during maintenance, the output of the monitoring signal from the microcomputer 713 is also temporarily interrupted, so that a mask operation during this time is necessary.

  Conventionally, at the time of software rewriting, as shown in FIG. 9, a mask signal for masking the operation of the runaway monitoring circuit is supplied from the software writing device or the like to the runaway monitoring circuit, and the runaway monitoring circuit is installed during a necessary period. I was resting. However, this method requires a hardware configuration such as providing a terminal for receiving a mask signal in the runaway monitoring circuit, which causes an increase in cost.

  Conventionally, the microcomputer itself supplies a mask signal for masking the operation of the runaway monitoring circuit, and the runaway monitoring circuit is suspended during a necessary period. However, this method has a problem that if the microcomputer runs out of control while the runaway monitoring circuit is paused, the runaway monitoring circuit does not operate and cannot be normally restored.

  Furthermore, a method of setting a mask time by a timer is also conceivable. For example, at start-up, until the microcomputer can output a monitoring signal, the operation of the runaway monitoring circuit is delayed by a timer. However, this method also requires an extra timer member, has a troublesome setting of the delay time of the timer, and has a problem that the delay time is not constant. For example, if the delay time is set in accordance with the system start-up, the rewriting end time is long in software rewriting, and there is a problem that masking cannot be performed only by the delay operation.

JP 2004-215366 A

  The present invention has been made to solve such a conventional problem, and its main purpose is for an electric vehicle equipped with a runaway monitoring circuit capable of monitoring the operation of a microcomputer with a simple configuration and high reliability. A battery control device and a battery system are provided.

Means for Solving the Problems and Effects of the Invention

  In order to achieve the above object, according to the battery control device for an electric vehicle of the present invention, the electric state or temperature state of the battery 1 capable of supplying electric power to the traveling motor 4 of the electric vehicle is managed and the normal operation is performed. For an electric vehicle equipped with a microcomputer 13 that sometimes outputs a monitoring signal at a fixed period and a runaway monitoring circuit 14 that receives the monitoring signal from the microcomputer 13 and monitors the operation of the microcomputer 13 by monitoring the monitoring signal. In the battery control device, the runaway monitoring circuit 14 outputs a reset signal to the microcomputer 13 for a certain period when the monitoring signal from the microcomputer 13 is not received at a certain period during the monitoring operation. When a reset signal is received, 13 performs a reset operation. During normal operation, the monitor signal is sent to the runaway monitoring circuit 14. In the maintenance operation, after the predetermined operation is completed, the monitoring signal output to the runaway monitoring circuit 14 is resumed, and the runaway monitoring circuit 14 receives the monitoring signal from the microcomputer 13 after outputting the reset signal. The monitoring operation can be resumed when a monitoring signal is received. As a result, the runaway monitoring circuit can be shifted to a mask operation in which the monitoring is interrupted and put into a standby state after the reset signal is output. In addition, since such a transition operation can be performed independently of the microcomputer, it is possible to improve the stable operation and reliability of the microcomputer monitoring operation by the runaway monitoring circuit.

  According to the second electric vehicle battery control apparatus, the runaway monitoring circuit 14 can be configured to output a reset signal to the microcomputer 13 when the battery system is activated. As a result, the runaway monitoring circuit can be appropriately placed in a standby state until the monitoring signal is output from the microcomputer when the battery system is activated.

  Furthermore, according to the third electric vehicle battery control device, the runaway monitoring circuit 14 further includes a timer circuit 19 for setting a delay time until the monitoring operation is started when the electric vehicle battery control device is activated. it can. Thereby, at the time of starting of an apparatus, the waiting time until a microcomputer outputs the signal for a monitoring stably can be set with a timer.

  Furthermore, according to the fourth battery control device for an electric vehicle, the maintenance operation time can include a software update operation for the microcomputer 13.

  Furthermore, according to the fifth electric vehicle battery system, the battery 1 capable of supplying electric power to the traveling motor 4 of the electric vehicle, and the electrical state or temperature state of the battery 1 are managed, and at regular intervals during normal operation. A battery ECU 2 comprising: a microcomputer 13 capable of outputting a monitoring signal at the same time; and a runaway monitoring circuit 14 that receives the monitoring signal from the microcomputer 13 and monitors the operation of the microcomputer 13 by monitoring the monitoring signal; 1, and a main relay 5 that is controlled to be turned on / off by the battery ECU 2 and supplies or cuts off the electric power of the battery 1 to the traveling motor 4. If the monitoring signal from the microcomputer 13 is not received at a constant period during the monitoring operation, the monitoring circuit 14 When the microcomputer 13 receives a reset signal, the microcomputer 13 performs a reset operation and outputs a monitoring signal to the runaway monitoring circuit 14 during normal operation. In the maintenance operation, after the predetermined operation is completed, the monitoring signal output to the runaway monitoring circuit 14 is resumed, and the runaway monitoring circuit 14 waits until the monitoring signal is received from the microcomputer 13 after the reset signal is output. The monitoring operation can be resumed when the monitoring signal is received. As a result, the runaway monitoring circuit can be shifted to a mask operation in which the monitoring is interrupted and put into a standby state after the reset signal is output. In addition, since such a transition operation can be performed independently of the microcomputer, it is possible to improve the stable operation and reliability of the microcomputer monitoring operation by the runaway monitoring circuit.

It is a block diagram which shows the battery system for electric vehicles which concerns on Embodiment 1 of this invention. It is a detailed block diagram of the battery control apparatus for electric vehicles shown in FIG. It is a timing chart figure of the battery control apparatus for electric vehicles shown in FIG. 1 is a block diagram showing a battery control device for an electric vehicle according to Embodiment 1. FIG. 6 is a block diagram showing a battery control device for an electric vehicle according to Embodiment 2. FIG. It is a timing chart figure of the battery control apparatus for electric vehicles shown in FIG. It is a block diagram which shows an example of a battery system provided with a runaway monitoring circuit. It is a timing chart which shows the monitoring operation | movement using the runaway monitoring circuit of FIG. It is a timing chart which shows the operation | movement at the time of software rewriting.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, the embodiment described below exemplifies a battery control device and battery system for an electric vehicle for embodying the technical idea of the present invention, and the present invention is a battery control device and battery system for an electric vehicle. Is not specified as below. Moreover, the member shown by the claim is not what specifies the member of embodiment. Note that the size, positional relationship, and the like of the members shown in each drawing may be exaggerated for clarity of explanation. Furthermore, in the following description, the same name and symbol indicate the same or the same members, and detailed description thereof will be omitted as appropriate. Furthermore, each element constituting the present invention may be configured such that a plurality of elements are constituted by the same member and the plurality of elements are shared by one member, and conversely, the function of one member is constituted by a plurality of members. It can also be realized by sharing.
(Embodiment 1)

  The battery control device for an electric vehicle according to Embodiment 1 of the present invention detects a runaway of a microcomputer of a battery ECU that manages a battery of the electric vehicle, and controls a main relay that supplies electric power from the battery to the traveling motor. In this specification, an electric vehicle is used in a broad sense including a hybrid car that travels using both an engine and a travel motor, and an electric vehicle that travels using only the travel motor. Furthermore, the battery which supplies electric power to a traveling motor can use the chargeable secondary battery or a fuel cell. Hereinafter, an electric vehicle which is a hybrid car will be described as an embodiment of the present invention.

  FIG. 1 shows a block diagram of a battery system 100 mounted on a hybrid car, and FIG. 2 shows a block diagram of this battery control device. The hybrid car shown in these drawings is connected to a vehicle ECU 3, a battery ECU 2 that is a battery control device that supplies battery information to the vehicle ECU 3, a battery 1 that drives the traveling motor 4, and an output side of the battery 1. A main relay 5, an inverter 6 connected to the battery 1 via the main relay 5, a traveling motor 4 and a generator 7 connected to the inverter 6, an engine 8 controlled by the vehicle ECU 3, A power transmission mechanism 9 that transmits the driving force of the engine 8 and the traveling motor 4 to the wheels 10 is provided.

  The hybrid car shown in the drawing travels while the vehicle ECU 3 controls the engine 8 and the travel motor 4. The traveling pattern of the hybrid car includes (1) a state where the engine 8 travels only; (2) a state where the traveling motor 4 alone travels; (3) a state where both the engine 8 and the traveling motor 4 travel. Alternatively, the hybrid car may be configured to travel only in the states (1) and (3). Outputs of the engine 8 and the traveling motor 4 are transmitted to the wheels 10 via the power transmission mechanism 9.

  Furthermore, the hybrid car travels while charging / discharging the battery 1 so that the remaining capacity of the battery 1 falls within a set range. When the remaining capacity of the battery 1 becomes smaller than the set capacity, the generator 7 is driven by the engine 8 to charge the battery 1. The battery 1 is also charged by a regenerative brake when the brake 11 is stepped on and the vehicle is decelerated. In the regenerative brake, the wheel 10 drives the generator 7 to charge the battery 1. The hybrid car includes a generator 7 that charges the battery 1. However, the generator 7 may be provided separately from the traveling motor 4, or the traveling motor may be used in combination with the generator.

  Battery ECU 2 detects the state of battery 1 and outputs battery information to vehicle ECU 3. The vehicle ECU 3 controls the output of the travel motor 4 via the inverter 6 while considering the battery information, that is, determining whether or not the battery 1 is in a dischargeable state. Further, in consideration of the battery information, the traveling motor 4 and the generator 7 are controlled via the inverter 6 so that the remaining capacity of the battery 1 falls within the set range. For example, when the accelerator 12 is stepped on and the automobile is accelerated, the vehicle ECU 3 drives the travel motor 4 and drives the wheels 10 by both the engine 8 and the travel motor 4. At this time, it is confirmed whether or not the battery 1 can be discharged from the battery information. When the battery 1 can be discharged, the inverter 6 is controlled to drive the traveling motor 4 and the wheels 10 are driven by the outputs of both the battery 1 and the traveling motor 4. When the remaining capacity of the battery 1 is less than the set capacity and cannot be discharged, the traveling motor 4 is stopped. Thereafter, the battery 1 is charged to the set capacity range. Further, when the microcomputer 13 of the battery ECU 2 runs away and limits the discharge current, the traveling motor 4 is driven while limiting the discharge current.

  The vehicle ECU 3 controls the output of the engine 8 and the charging / discharging of the battery 1 from the battery information supplied from the battery ECU 2 and the signals input from the accelerator 12 and the brake 11. The remaining capacity of the battery 1 is controlled within a set range.

  A battery ECU 2 shown in FIG. 2 calculates a remaining capacity of the battery 1 and communicates with the vehicle ECU 3, a runaway monitoring circuit 14 that detects the runaway of the microcomputer 13, and a battery that detects the voltage and temperature of the battery 1. A sensor 15, a pulse circuit 16 that changes the frequency of a pulse output by an input signal from the microcomputer 13 and the battery sensor 15, and outputs the pulse circuit 16 to the vehicle ECU 3, and a relay control circuit 17 that controls the main relay 5 on and off.

  The microcomputer 13 calculates the remaining capacity by integrating the charge / discharge of the battery 1. Further, the microcomputer 13 can also correct the remaining capacity with the battery voltage input from the battery sensor 15. The calculated remaining capacity of the battery 1 is output to the vehicle ECU 3 as battery information. The microcomputer 13 detects the state of the battery 1 and outputs it to the vehicle ECU 3 as battery information. The battery information output from the battery information to the vehicle ECU 3 is not specified as the remaining capacity. For example, the battery ECU 2 can output information indicating that the battery temperature is higher than the set temperature or lower than the set temperature to the vehicle ECU 3 as battery information. When the microcomputer 13 operates normally, it outputs a monitoring signal as shown in FIG. Here, the monitoring signal is a normal microcomputer pulse which is a pulse signal of a specific frequency. In FIG. 3, the normal pulse is set to 10 Hz. If the microcomputer 13 runs out of control, the microcomputer normal pulse is not output. Therefore, the microcomputer 13 can detect the microcomputer normal pulse and detect the runaway of the microcomputer 13. However, the runaway of the microcomputer 13 can be detected by detecting that the response signal is not output by inputting a specific signal to the microcomputer 13 without detecting the microcomputer normal pulse. Therefore, the method for detecting the runaway of the microcomputer 13 is not limited to the microcomputer normal pulse.

  The vehicle ECU 3 receives a pulse signal input from the pulse circuit 16 to determine whether the microcomputer 13 has runaway, whether the microcomputer 13 has runaway, is in a state where the battery 1 can be charged / discharged, or the microcomputer 13 has runaway and the battery 1 has runaway. Is determined to be in a state where charging and discharging cannot be performed. The vehicle ECU 3 charges the battery 1 while limiting the maximum current that the battery 1 charges and discharges without switching the main relay 5 off when the battery 1 is in a state in which the battery 1 can be charged and discharged even if the microcomputer 13 runs away. Discharge. For example, the battery 1 is charged / discharged while limiting the current for charging / discharging the battery 1 to 30 A or less. The vehicle ECU 3 detects whether or not the battery 1 can be charged / discharged with the microcomputer 13 running out of control with a microcomputer normal pulse.

  As described above, when the microcomputer 13 runs out of control, it is determined whether or not the battery 1 is in a state in which the battery 1 can be charged / discharged. Even in this state, since the battery 1 can travel, there is a feature that it can travel safely. However, when the microcomputer 13 runs away, the main relay 5 can be switched off to prevent the battery 1 from being charged or discharged even when the battery 1 can be charged or discharged.

  A hybrid car that travels while limiting the charge / discharge current of the battery 1 after confirming that the microcomputer 13 has runaway and is in a state where the battery 1 can be charged / discharged is designed to reduce the change in the remaining battery capacity. Controls charging and discharging of If it does in this way, overcharge and overdischarge of battery 1 can be prevented, and deterioration of battery 1 can be prevented. Since the remaining capacity of the battery 1 is calculated by the integrated value of the charging current and the discharging current, the inverter 6 is controlled so that the integrated value of the charging current and the discharging current becomes substantially equal to reduce the change in the remaining battery capacity. To do.

  The runaway monitoring circuit 14 detects the runaway of the microcomputer 13 and the abnormality of the battery 1, and outputs this. The runaway monitoring circuit 14 detects whether the microcomputer 13 has runaway from the signal input from the microcomputer 13 and outputs an abnormal signal to the relay control circuit 17 when the runaway of the microcomputer 13 is detected. Further, the runaway monitoring circuit 14 is in a state where the battery 1 can be charged / discharged in a state where the microcomputer 13 runs away from the pulse signal input from the pulse circuit 16, or the microcomputer 13 runs away and cannot charge / discharge the battery 1. It is also possible to detect whether the microcomputer 13 has runaway and the battery 1 cannot be charged or discharged.

Next, the mask operation of the battery control device for an electric vehicle will be described based on the block diagram of FIG. 4 and the timing chart showing the operation at the time of start-up and software rewriting in FIG. The battery control device for an electric vehicle shown in FIG. 4 shows a battery 1, a main relay 5 that switches start / stop of the battery system, and a battery ECU 2. The battery ECU 2 includes a microcomputer 13 that controls the operation of the battery system, and a runaway monitoring circuit 14 that monitors the operation of the microcomputer 13. The runaway monitoring circuit 14 receives a monitoring signal from the microcomputer 13 and sends a reset signal to the microcomputer 13. Furthermore, the microcomputer 13 can rewrite software that defines its operation. When the software of the microcomputer 13 is rewritten, the software writing device SW is externally connected to the battery system, and the software writing device SW is rewritten to the microcomputer 13. I do. As a result, it is possible to electrically perform bug correction and update of the software. The rewritable software and program are held in a rewritable storage element (for example, a flash ROM). The software writing device SW transmits a write signal to the microcomputer 13 side to execute a write operation.
(Runaway monitoring circuit 14)

  After the reset signal is output, the runaway monitoring circuit 14 enters a mask operation mode in which the monitoring operation is not performed until the monitoring signal is received from the microcomputer 13 and the standby state is established. When the microcomputer 13 starts normal operation and starts outputting the monitoring signal, the runaway monitoring circuit 14 that has received this shifts to a monitoring operation mode in which the monitoring operation is started. As the monitoring signal, a microcomputer normal pulse such as a rectangular wave output at a predetermined cycle can be suitably used. Such a runaway monitoring circuit 14 that monitors the normal pulse of the microcomputer monitors the operation of the microcomputer 13 constantly or at a constant period in a monitoring operation mode by a so-called type of operation called a watchdog timer. The operation of the runaway monitoring circuit 14 will be specifically described with reference to FIG.

  First, when the battery system is activated, the main relay 5 is turned on, and a reset signal is given from the runaway monitoring circuit 14 to the microcomputer 13. After outputting the reset signal, the runaway monitoring circuit 14 automatically shifts to the mask operation mode and enters a standby state until receiving a monitoring signal from the microcomputer 13. As described above, the runaway monitoring circuit 14 is configured to automatically output a reset signal when in the ON state to be in the mask operation mode, so that the mask operation during a period in which the monitoring signal cannot be obtained from the microcomputer 13 at the start-up is performed. Appropriately realized.

  When the microcomputer 13 is properly activated and a monitoring signal is output, the runaway monitoring circuit 14 shifts from the mask operation mode to the monitoring operation mode. In this monitoring operation mode, when the microcomputer 13 stops outputting a monitoring signal for some reason such as malfunctioning, the runaway monitoring circuit 14 detects the absence of the monitoring signal and outputs a reset signal to the microcomputer 13 side. As a result, when the microcomputer 13 side is normal, the reset microcomputer 13 is activated again and the output of the monitoring signal is resumed. On the other hand, if the microcomputer 13 does not operate normally even after resetting, not only the monitoring signal is output, but also the operation of other members is stopped, and accordingly, an error in the system is detected.

  Next, the mask operation of the runaway monitoring circuit 14 when rewriting software will be described. During the rewriting operation, since the software is not operated normally, the output of the monitoring signal is also stopped. Since there is no abnormality during this period, it is necessary to stop the monitoring operation of the runaway monitoring circuit 14. In order to realize such an operation, in this embodiment, when a write signal is sent from the software writing device SW to the battery ECU 2, the runaway monitoring circuit 14 sends a reset signal to the microcomputer 13 based on this write signal. It is configured to do. For example, the microcomputer 13 that has received the write signal instructs the runaway monitoring circuit 14 to output a reset signal based on the signal. A signal line for this purpose may be separately provided between the microcomputer 13 and the runaway monitoring circuit 14, or may be shared with a signal line for a monitoring signal. In this case, there is no need to provide a terminal for receiving a mask signal in the runaway monitoring circuit 14, and an advantage that the hardware configuration can be simplified without increasing the number of signal lines can be obtained. On the other hand, since the runaway monitoring circuit 14 that should monitor the operation of the microcomputer 13 is controlled by the signal supplied from the microcomputer 13, it is not preferable from the viewpoint of the reliability of the monitoring operation.

  Alternatively, the software writing device SW may send an instruction so as to directly output a reset signal to the runaway monitoring circuit 14. In this case, a signal line for connecting the software writing device SW and the runaway monitoring circuit 14 is required.

By outputting the reset signal from the runaway monitoring circuit 14 in this way, the runaway monitoring circuit 14 can be shifted to the mask operation mode. When the software update is completed, the monitoring signal can be output from the microcomputer 13, so that the runaway monitoring circuit 14 can automatically resume the monitoring operation mode.
(Embodiment 2)

  In addition, a mask operation using a timer can be realized. This will be described based on the block diagram of FIG. 5 and the timing chart of FIG. In the electric vehicle battery system 200 of FIG. 5, the runaway monitoring circuit 14 is provided with a timer circuit 19. Other constituent members are substantially the same as those in FIG. 2, and the same members are denoted by the same reference numerals and detailed description thereof is omitted. The timer circuit 19 operates to delay the operation of the preset time delay and runaway monitoring circuit 14. For example, when the battery system is started, the operation of the runaway monitoring circuit 14 is masked by the timer circuit 19 for a predetermined time as shown in FIG. The mask operation mode is automatically canceled when the monitoring signal is input to the runaway monitoring circuit 14, and the monitoring operation mode is started. At the time of software writing, a reset signal is generated in response to the software write signal and is given to the microcomputer 13 side, while the runaway monitoring circuit 14 shifts to the mask operation mode. When the software writing operation is completed and the output of the monitoring signal from the microcomputer 13 is resumed, the runaway monitoring circuit 14 that has received this automatically ends the mask operation mode and shifts to the monitoring operation mode. Also by this method, the mask operation of the runaway monitoring circuit 14 is appropriately realized.

  As described above, the runaway monitoring circuit operates in the mask operation mode in which the monitoring operation is not performed until the monitoring signal is received after receiving the reset signal from the microcomputer 13 and starts the monitoring operation after receiving the monitoring signal. Transition to monitoring operation mode.

  The battery control device and battery system for an electric vehicle according to the present invention can be suitably used as an in-vehicle battery system.

100, 200 ... battery system 1 ... battery 2 ... battery ECU
3 ... Vehicle ECU
4 ... travel motor 5 ... main relay 6 ... inverter 7 ... generator 8 ... engine 9 ... power transmission mechanism 10 ... wheel 11 ... brake 12 ... accelerator 13 ... microcomputer 14 ... runaway monitoring circuit 15 ... battery sensor 16 ... pulse circuit 17 ... Relay control circuit 19 ... Timer circuit 700 ... Battery system 702 ... Battery ECU
701 ... Battery 705 ... Main relay 713 ... Microcomputer 714 ... Runaway monitoring circuit SW ... Software writing device

Claims (5)

A microcomputer (13) capable of managing the electrical state or temperature state of the battery (1) capable of supplying power to the traveling motor (4) of the electric vehicle, and outputting a monitoring signal at a constant cycle during normal operation,
A runaway monitoring circuit (14) that monitors the operation of the microcomputer (13) by receiving a monitoring signal from the microcomputer (13) and monitoring it, and
An electric vehicle battery control device comprising:
The runaway monitoring circuit (14) outputs a reset signal for a certain period to the microcomputer (13) when the monitoring signal from the microcomputer (13) is not received at a certain period during the monitoring operation.
When receiving the reset signal, the microcomputer (13) performs a reset operation,
During normal operation, a monitoring signal is output to the runaway monitoring circuit (14),
At the time of the maintenance operation, after the predetermined operation ends, the monitoring signal output to the runaway monitoring circuit (14) is resumed,
The runaway monitoring circuit (14) is in a standby state until a monitoring signal is received from the microcomputer (13) after the reset signal is output, and the monitoring operation is resumed when the monitoring signal is received. Control device. The battery control device for an electric vehicle according to claim 1,
The battery control device for an electric vehicle, wherein the runaway monitoring circuit (14) is configured to output a reset signal to the microcomputer (13) when the battery system is activated. The battery control device for an electric vehicle according to claim 1, further comprising:
An electric vehicle battery control device comprising a timer circuit (19) for setting a delay time until the runaway monitoring circuit (14) starts a monitoring operation when the electric vehicle battery control device is activated. The battery control device for an electric vehicle according to claim 1,
The battery control device for an electric vehicle, wherein the maintenance operation includes a software update operation to the microcomputer (13). A battery (1) capable of supplying electric power to the electric motor (4) of the electric vehicle;
While managing the electrical state or temperature state of the battery (1), a microcomputer (13) capable of outputting a monitoring signal at a constant cycle during normal operation,
A runaway monitoring circuit (14) that monitors the operation of the microcomputer (13) by receiving a monitoring signal from the microcomputer (13) and monitoring it, and
A battery ECU (2) comprising:
A main relay (5) connected to the output side of the battery (1) and controlled to be turned on / off by the battery ECU (2) to supply or cut off the electric power of the battery (1) to the travel motor (4);
An electric vehicle battery system comprising:
The runaway monitoring circuit (14) outputs a reset signal for a certain period to the microcomputer (13) when the monitoring signal from the microcomputer (13) is not received at a certain period during the monitoring operation.
When receiving the reset signal, the microcomputer (13) performs a reset operation,
During normal operation, a monitoring signal is output to the runaway monitoring circuit (14),
At the time of the maintenance operation, after the predetermined operation ends, the monitoring signal output to the runaway monitoring circuit (14) is resumed,
The runaway monitoring circuit (14) is in a standby state until a monitoring signal is received from the microcomputer (13) after the reset signal is output, and the monitoring operation is resumed when the monitoring signal is received. system.

Images