JP6178519B2 - A battery for powering the high voltage network and the error current flowing through the battery and the high voltage terminal of the battery is limited and / or applied by the battery to the high voltage network via the high voltage terminal of the battery Battery system with at least one switching unit for limiting error voltage - Google Patents

Description

  The present invention relates to a battery system comprising a battery configured to power at least two consumer devices connected in parallel to each other in a high voltage network. Furthermore, the present invention limits the error current flowing through the battery and the high voltage terminal of the battery and / or limits the error voltage applied by the battery to the high voltage network via the high voltage terminal of the battery. Relating to the corresponding method. Furthermore, the present invention relates to a vehicle provided with the battery system mentioned above.

  In vehicles (PKW, passenger cars), a battery system including a battery capable of supplying a large voltage (high voltage) to a high voltage network is used. Therefore, the battery cells or battery modules of such batteries are usually connected in series. In that case, such a battery needs to carry only a small current even at high power. In doing so, the battery is connected to its own high voltage terminal via a high voltage line, i.e. the battery is connected to a terminal through which it transmits a high voltage to a high voltage network. Within the high voltage line, contactors are usually used at both the positive and negative high voltage terminals of the battery. With a contactor, it is possible to isolate such a battery from the vehicle's high voltage network or the rest of the high voltage system when parking or in an errored state (fault).

  A contactor 10 that can be mounted on a high voltage line of a battery is shown in FIGS. Here, the same reference numerals are used for the same components.

  FIG. 1 shows a closed contactor 10 and FIG. 2 shows an open contactor 10. The contactor 10 is configured as an electromagnetic switch 11 having a control coil 20. At that time, the electromagnetic switch 11 includes a movable contact bridge 30 and two terminals 40. The contactor 10 is closed in one state where a control current is flowing through the control coil 20 and opened in another state where no current is flowing through the control coil 20.

  When the control current is flowing through the control coil 20, the contact bridge 30 is moved toward the terminal 40 by the magnetic force and is pressed against the terminal 40. If the control current does not flow through the control coil 20, the contact bridge 30 immediately returns to its position spaced from the terminal 40.

  In order to generate a control current, it is necessary to supply electrical energy to the control coil 20, that is, to provide an appropriate supply voltage to the control coil 20.

  Such contactor 10 is normally opened and closed by supplying electric energy to the contactor 10 via the battery control device 60 by the battery control device 60 of the battery that uses the contactor 10 in its high voltage line. And done. Normally, the battery controller 60 transmits a low voltage of 12V provided by the vehicle's low voltage network used as the energy source 50 to the contactor 10 to generate a control current.

  Such a contactor 10 is normally closed by a high suction voltage. Thereafter, the control current flowing through the coil 20 is reduced by a pulse width modulation signal, by a reduced supply voltage (holding voltage) or by a power saving coil (“economizer coil”) used. Thus, the contactor 10 clearly requires less power in its closed state. Nevertheless, when the contactor 10 is driven with a relatively large electric power, the pressing force of the contact bridge 30 to the terminal 40 is easily increased. As a result, the control coil 20 is overheated after a certain amount of time and burned out. After this, the contactor 10 is opened by a spring to which a preload is applied each time the contactor 10 is closed, and is no longer operable.

  Such contactors used in the high voltage line of the battery can cut off currents of about 1 kA to 2 kA in the presence of errors. For larger currents, a safety device (fuse) is usually used.

  As shown in FIG. 3, for currents exceeding 3 kA to 10 kA, a repulsive force between the terminal 40 and the contact bridge 30 is caused by the Lorentz force 70 generated in the closed contactor 10. Current exceeding 3 kA to 10 kA can occur, for example, when a short circuit exists in the high voltage line of the battery or when a short circuit exists in an inverter electrically coupled to the battery. This phenomenon is called levitation. In that case, although the control coil 20 is in an active state in which a control current flows, a small gap is generated between the terminal 40 and the contact bridge 20. An arc discharge is formed over the gap, and the arc discharge melts the contact surface of the terminal. If the short-circuit current is subsequently interrupted by a safety device connected to the corresponding high voltage terminal, the contact bridge 30 crushes the two melted terminals 40. In so doing, the material solidifies and the contact bridge 30 is no longer opened after the control current flowing through the control coil 20 is cut off. This error is referred to as contactor welding. The two terminals 40 of the contactor 10 are electrically connected to each other and cannot be separated.

  If the contactor 10 is supplied with electrical energy by the low voltage network of the vehicle and the 12V low voltage of the low voltage network stops, the contactor 10 is immediately opened. When there is a voltage fluctuation in the low voltage network of the vehicle, there is a risk that the contactor 10 will be opened when not desired. When the contactor 10 is opened while a current is flowing through the contactor 10, an arc discharge 71 is formed when the current flowing through the contactor 10 exceeds a specific intensity, such as when floating occurs, and this arc discharge is generated. By 71, the contact surface of the terminal 40 of the contactor 10 is melted. If the 12V voltage provided by the low voltage network is completely stable again and therefore the contactor 10 can be closed again, or if the contact bridge 30 is closed again by mechanical shock, The melted contact surfaces stick together and the contactor is welded.

  The time that such a contactor 10 must be able to withstand the short-circuit current in a state where no floating occurs in the closed contactor corresponds to the contactor 10 in an ideally sized contactor 10. Always longer than the time required for the attached safety device (fuse) to cut off the short circuit current. If the contactor 10 is designed in this way, the contactor 10 is not welded by the generated floating and can be switched again after the activated safety device interrupts the short-circuit current, and the battery is It can be separated from the voltage network. This means that the battery (battery pack) must supply power to two consumer devices of the high voltage network connected in parallel to its own high voltage terminal and has a safety device located in the center It is particularly important if each consumer device is individually protected by a suitable safety device.

  FIG. 4 shows a prior art battery system 100 with a battery 101 that supplies power to two consumer devices 140, 141 connected in parallel in a high voltage network 103. The battery 101 includes a plurality of battery modules 102 connected in series for generating a battery voltage suitable for the high voltage network 103. The contactor 10 is disposed on each of the two high voltage lines 120 and 121 of the battery 101. The battery 101 can be connected to its own positive high voltage terminal 130 via one of the two contactors 10 and to its own negative high voltage terminal 131 via the other of the two contactors 10. .

  The positive high voltage terminal 130 is connected to the consumer device path 150 where the consumer device 140 is disposed, and is connected to the consumer device path 151 where the consumer device 141 is disposed. The battery 101 of the battery system (battery pack) 100 does not have a safety device arranged at the center thereof. Each consumer device 140, 141 is individually protected via the associated safety device 110, 111 of the battery system 100. The two safety devices 110 and 111 are directly connected to the high voltage terminal 130.

The above-described structure is adopted in the battery system 100, in which the total battery current is too large for the individual safety device (fuse) in the middle of the battery, that is, the life of the battery 101. There are no safeguards on the market that can meet battery current requirements over the years. The safety devices 110 and 111 arranged in the consumer device paths 150 and 151 are activated by a short circuit in one of the consumer device paths 150 and 151. Thereafter, the two contactors 10 are opened in order to disconnect the other consumer devices 140, 141 and the high-voltage network 103 of the vehicle.

  However, there are more powerful battery systems that can generate, for example, a short circuit current in excess of 12000A. In such a battery system, there is always a risk that floating and contactor welding occur in the contactor. If such a very powerful battery system has the structure shown in FIG. 4, the battery can no longer be separated from the high voltage network 103 of the vehicle when contactor welding is present on the contactor 10. . In the battery system 100 shown in FIG. 4, such a case can occur, for example, when a low impedance short circuit occurs in the consumer device path 150 of the consumer device 140 and the fuse 110 is burned out due to this short circuit. In this case, both contactors 10 are melted and stuck together. The other consumer device 141 and the high voltage network 103 connected to the consumer device 141 will continue to be energized because the fuse 111 of the associated consumer device path 151 is undamaged. . In other words, in the battery system 100 shown in FIG. 4, when the contactor 10 is welded due to a short-circuit current generated in one of the consumer devices 140 and 141, the other consumer device 140 and 141 When it is no longer disconnected from the power source and contacts the exposed portion of the other consumer device 140, 141, there is a risk of electric shock.

  Further, US 2012/0105015 discloses an overvoltage protection device for a battery. Here, the overvoltage protection device is configured to short-circuit the battery terminal of the battery when the battery is overcharged. Thereby, a large current generated by the overcharged battery flows through the safety device arranged between one of the battery terminals and the battery, and the safety device is immediately activated.

  According to the present invention, a battery system is provided comprising a battery configured to power at least two consumer devices connected in parallel to each other in a high voltage network. The battery is connected or connectable with at least two safety devices on one of its high voltage terminals. In this case, one of the at least two safety devices is associated with one of the at least two consumer devices, and is connected to or connectable with the associated consumer device. Furthermore, the battery system comprises at least one switching unit having two switching states, the at least one switching unit being associated in a state where at least two consumer devices are connected to the high voltage terminal of the battery. In the presence of the drive current flowing through the consumer device, the drive current is switched to the first switching state of the two switching states in which the drive current flows through each safety device. The at least one switching unit is in a second switching state from the first switching state to the second switching state when at least one of the at least two safety devices is operating, and at least one Two switching units interrupt the error current flowing through the battery, the high voltage terminal of the battery, and each consumer device for which the associated safety device is not activated, and / or It is provided for switching to the second switching state in which each error voltage applied to the high voltage network is switched off via a voltage terminal and a safety device that is not activated.

  The present invention further limits error current flowing through the battery configured to power at least two consumer devices connected in parallel of the high voltage network and through the high voltage terminal of the battery. And / or a method is provided for limiting the error voltage applied by the battery through the high voltage terminal of the battery to the high voltage network. The battery is connected to at least two safety devices on one of its high voltage terminals. At that time, one of the at least two safety devices is associated with one of the at least two consumer devices, and is connected to the associated consumer device. In this method, at least one switching unit having two switching states is used. The at least one switching unit is configured such that, in a state where at least two consumer devices are connected to the high voltage terminal of the battery, the drive current is passed through each safety device in the presence of a drive current flowing through the associated consumer device. It is switched to the first switching state of the two switching states of flowing through. Furthermore, the at least one switching unit is in a second switching state from the first switching state to the second switching state when one of the at least two safety devices is operating, At least one switching unit interrupts error current flowing through the battery, the high voltage terminal of the battery, and each consumer device for which the associated safety device is not activated, and / or by the battery Are provided to switch to a second switching state in which each error voltage applied to the high voltage network is switched off via a high voltage terminal and a safety device which is not activated.

  The dependent claims show preferred developments of the invention.

  Preferably, the at least one switching unit cuts off the error current directly by opening an electrical circuit through the battery, the high voltage terminal of the battery and each consumer device whose safety device is not activated. It is provided for.

  In the present invention, at least two consumer devices connected in parallel of the high voltage network can be connected to the high voltage terminal of the battery of the battery system according to the present invention. In doing so, each of the at least two consumer devices is connected or connectable in series with the associated safety device of the at least two safety devices, and is therefore connected in at least two parallel devices. During normal driving of the battery system according to the present invention in which the consumer device is connected to the high voltage terminal, the drive current is at least 2 each in the presence of the drive current flowing through each associated consumer device. Also flows into one safety device. The battery system according to the present invention includes at least one switching unit having two switching states, and the at least one switching unit switches to the first switching state during normal driving of the battery system according to the present invention. It has been. At that time, when the at least one switching unit is switched to the first switching state, the driving current generated during the normal driving of the battery system is passed through the battery and the high voltage terminal of the battery. , Configured and arranged to continue to flow without problem through at least two connected consumer devices or via an activated consumer device of at least two consumer devices. Furthermore, when the short circuit occurs in at least one of the at least two consumer devices, and the safety device associated with the consumer device is activated, the switch unit becomes the second switch unit. Switch to the switching state, shut off the error current flowing through the battery, the high voltage terminal of the battery, and each consumer device for which the associated safety device is not activated, and / or It is constructed and arranged to cut off each error voltage applied to the high voltage network via a voltage terminal and an inactivated safety device.

  In the battery system according to the invention, the battery can be connected to one of its own high-voltage terminals, preferably via at least one contactor, to which at least one contactor is electrically connected. In the switching state, the current flowing through the battery and the high voltage terminal of the battery flows. In the non-conductive switching state of the contactor, the current flowing through the battery and the high voltage terminal of the battery. Is cut off. If at least one contactor is welded due to a short circuit occurring in one of the at least two consumer devices and no longer opens, the battery, the high voltage terminal of the battery, and the associated safety device The above-described error current flows through each consumer device that is not operating. For example, if at least one consumer device whose associated safety device is not activated is shut down or destroyed as a result of an accident, no error current flows through this consumer device. However, an error voltage is applied by the battery to the high voltage network through the battery's high voltage terminal and each non-operating safety device associated with the stopped or destroyed consumer device. Therefore, each consumer device whose safety device is not activated is no longer disconnected from the power source, and there is a risk of electric shock when it comes into contact with the exposed portion of each consumer device that is not disconnected from the power source. By means of at least one switching unit switched to the second switching state, the above-mentioned error current is interrupted and / or each error voltage applied to the high voltage network is switched off. As the error current is interrupted and / or each error voltage applied to the high voltage network is turned off, each consumer device whose safety device is not operating is also disconnected from the power supply.

  Preferably, the at least one switching unit comprises a battery and a high voltage terminal of the battery by opening an electrical circuit through the battery, the high voltage terminal of the battery and each consumer device whose safety device is not activated. And each consumer device for which the associated safety device is not operating, and / or directly interrupting the error current flowing through the battery and / or the battery's high-voltage terminal and the non-operating safety device And an error voltage applied to the high-voltage network via a direct connection.

  In a particularly preferred embodiment of the invention, the battery system according to the invention comprises a switching unit configured as a pyrotechnique blocking element and a control circuit. Pyrotechnic type blocking element is a blocking element in the presence of a driving current flowing through the battery and the high voltage terminal of the battery in a state where at least two consumer devices are connected to the high voltage terminal of the battery. Has been switched to its conductive switching state flowing through. Furthermore, the blocking element switches from its conductive switching state to its non-conductive switching state when a control signal provided by the control circuit or a control voltage provided by the control circuit is present. It is provided for. In addition, the control circuit determines the voltage dropping at each of the at least two safety devices and generates a control signal and shuts off when there is a defined voltage equal to the operating voltage generated when the corresponding safety device is activated. When there is an operating voltage provided to the element or dropping at one of the at least two safety devices, the interrupting element is provided to provide a corresponding part of the operating voltage as a control voltage.

  In this embodiment of the invention, the voltage drop across each burned safety device (fuse) is used by the control circuit as a trigger for the pyrotechnical shut-off element in a very simple manner.

  Preferably, the control voltage corresponds to the operating voltage dropping at each of the at least two safety devices. In this case, a control circuit is provided to directly provide the operating voltage as a control voltage to the shut-off element when an operating voltage that drops in one of the at least two safety devices is present. Yes.

  More preferably, the control circuit is configured as an application specific integrated circuit or as a programmable integrated circuit or as a microcontroller or preferably as a semiconductor circuit comprising a transistor or a Schmitt trigger circuit.

  According to another embodiment of the present invention, two consumer devices connected in parallel can be connected to the high-voltage terminal of the battery, and the battery system according to the present invention is configured as a pyrotechnique type blocking element. Having two switching units. At that time, one of the two blocking elements is associated with one of the two consumer devices. Furthermore, each blocking element is driven in the presence of a drive current flowing through the associated consumer device of the two consumer devices in a state where the two consumer devices are connected to the high voltage terminal of the battery. The current has been switched to its conductive switching state that flows through the corresponding blocking element. In addition, each shut-off element falls into its non-conducting switching state if there is an operating voltage that is generated by a safety device associated with a consumer device that is not associated with itself and that is generated when the safety device is activated. It is provided for switching.

  According to a very advantageous embodiment of the invention, each blocking element has a terminal of a safety device associated with a consumer device that is not associated with itself and two control lines to which the terminal is connected. At that time, each blocking element has its conductive state when the voltage between its control line terminals is equal to the operating voltage of the safety device associated with the consumer device not associated with itself. Configured to switch to its non-conducting state.

  In this embodiment of the invention, each pyrotechnical type breaking element is provided to the corresponding breaking element directly via the control line in a very simple manner in which the voltage drop across the burned-out safety device is Operated passively.

  Preferably, one of the two control lines of the pyrotechnical blocking element is arranged with a resistor and / or other safety device. This allows large currents flowing through the corresponding control lines to be limited by resistors or interrupted by other safety devices (fuses) in a very simple manner.

  Preferably, at least one switching unit is activated by the activation of each inactivated safety device via the battery, the high voltage terminal of the battery, and each consumer device for which the associated safety device is not activated. It is provided to interrupt the flowing error current and / or to cut off each error voltage applied by the battery to the high voltage network via the high voltage terminal of the battery and the non-actuated safety device.

  In a very preferred embodiment of the invention, the at least one switching unit is configured as at least one closure element, in particular as at least one pyrotechnic closure element or as at least one contactor. Furthermore, the at least one closure element is switched to its non-conducting switching state in which no current flows through the at least one closure element with at least two consumer devices connected to the high voltage terminal of the battery. ing. Furthermore, the at least one closure element is in its conductive switching state when one of the at least two safety devices is activated, in order to activate each safety device that is not activated, An error current generated by the battery is connected via the high voltage terminal of the battery and the consumer device with which the associated safety device is activated, at least one closure element, and each safety device that is not activated. It is provided to switch to the conductive switching state that flows through the current path that passes through.

  The error current occurs, for example, when the battery is connected to at least one of its high voltage terminals, preferably via a contactor that is welded by the short circuit and no longer opens.

  When there is a safety device activated by a short circuit occurring in one of the at least two consumer devices, such an error current is caused by at least one switching unit switched to the second switching state, A current path that passes through each consumer device that does not operate the safety device is diverted to a current path that passes through each consumer device that operates the safety device and each safety device that does not operate. In this case, such an error current is short-circuited by each consumer device whose safety device is not activated by the consumer device whose safety device is activated by at least one switching unit switched to the second switching state. It is detoured by being made. For example, if at least one consumer device for which the associated safety device is not activated is stopped or destroyed as a result of an accident, the at least one consumer device is also switched to the second switching state. Using at least one switching unit, it is short-circuited by the consumer device in which the short-circuit has occurred. In this case, each of the operable consumer devices in which the safety device is not activated, the consumer device in which the safety device is activated, and each of the activated devices from the current path passing through each activated consumer device. The error current is diverted to the current path through the non-safety device. In any case, if there is a safety device activated by a short circuit that occurred in one of the at least two consumer devices, the error current generated by the battery is passed through the high voltage terminal of the battery. In addition, it flows via a current path through the consumer that activated the safety device, the at least one switching unit switched to the second switching state, and each safety device that is not activated.

  As a result of a short circuit occurring in one of the at least two consumer devices, the resistance of the consumer device in which the short circuit has occurred is significantly reduced. Each other consumer device that is not short-circuited is short-circuited by the consumer device that is short-circuited. This error current causes each non-operating safety device to be activated after a certain period of time. Thus, in this case as well, the error current is interrupted and / or each error voltage applied to the high voltage network by the battery via the high voltage terminal of the battery and the non-operating safety device is cut off, In particular, the error voltage applied by the battery to the high-voltage network via the high-voltage terminal of the battery and the non-operating safety device associated with the stopped or destroyed consumer device is cut off, thereby Each consumer device whose safety device has not yet been activated due to the short circuit is also connected from the power source.

  Preferably, the at least one closure element is in its conductive switching state from its non-conductive switching state in the presence of at least one control signal provided by a battery control device arranged in the battery system. It is provided to switch to. Furthermore, the battery control device preferably detects the presence of an activated safety device by an evaluation of the voltage dropping at each of the at least two safety devices, and when there is an activated safety device, at least one A control signal is provided for generating and providing to at least one closure element.

  Preferably, the method according to the invention comprises the functional features of the battery system according to the invention either individually or in combination.

  Another aspect of the present invention relates to a vehicle including the battery system according to the present invention.

  A substantial advantage of the present invention is a battery that can be connected to at least one of its own high voltage terminals via a contactor, and a plurality of parallels of a high voltage network, each protected by an associated safety device. In the battery system according to the present invention, in which the consumer device connected to the battery device includes the battery that can be connected to its own high-voltage terminal, when there is a short circuit that causes contactor welding with at least one contactor. The main electrical circuit passing through the battery and the high voltage terminal of the battery can be separated from the high voltage network in a very simple manner by the use of at least one switching unit according to the invention. This improves the safety of the battery system (battery pack) according to the present invention and ensures that the battery system (battery pack) according to the present invention functions perfectly.

  Therefore, emergency personnel can safely touch the accident vehicle equipped with the battery system according to the present invention.

In the following, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The same symbols are used for the same components.
1 shows a contactor known in the prior art in a closed state. 2 shows the contactor shown in FIG. 1 in an open state. FIG. 2 shows the contactor shown in FIG. A battery system known in the prior art comprising a battery configured to power a high voltage network, wherein the battery is connected to at least one of its high voltage terminals via the contactor shown in FIGS. The battery system which can be connected with one side is shown. 1 is a battery system according to a first embodiment of the present invention, wherein the battery system includes the switching unit according to the present invention configured as a pyrotechnic type blocking element. FIG. 6 shows a battery system according to a second embodiment of the present invention, wherein the battery system comprises two switching units according to the present invention configured as pyrotechnic blocking elements. It is a battery system which concerns on the 3rd Embodiment of this invention, Comprising: A battery system shows the said battery system provided with the closure element which concerns on this invention. The equalization circuit diagram of the battery system which concerns on the 3rd Embodiment of this invention is shown. A battery system closure element according to a third embodiment of the present invention configured as a pyrotechnic closure element, wherein the pyrotechnic charge of the pyrotechnic closure element is shown ignited by an ignition signal. The closed element is shown. Fig. 10 shows the pyrotechnic closure element shown in Fig. 9, which is shown as it occurs immediately after pyrotechnic charge ignition. FIG. 11 shows the pyrotechnical closure element shown in FIG. 10, which is shown in a further alternative state immediately after pyrotechnic charge ignition.

  FIG. 5 shows the battery system 100 according to the first embodiment of the present invention. The battery system 100 includes a battery 101, which supplies power to two consumer devices 140, 141 of the high voltage network 103 connected in parallel to its own high voltage battery terminals 130, 131. The battery 101 includes a plurality of battery modules 102 connected in series for generating a battery voltage suitable for the high voltage network 103. The contactor 10 is disposed on each of the two high voltage lines 120 and 121 of the battery 101. The battery 101 can be connected to its positive high voltage terminal 130 via one of the two contactors 10 and can be connected to its negative high voltage terminal 131 via the other of the two contactors 10.

  The positive high voltage terminal 130 is connected to the consumer device path 150 where the consumer device 140 is disposed, and is connected to the consumer device path 151 where the consumer device 141 is disposed. Safety devices 110 and 111 associated with the corresponding consumer devices 140 and 141 are arranged in the consumer device paths 150 and 151, respectively. The two safety devices 110 and 111 are directly connected to the high voltage terminal 130.

  When one of the consumer device paths 150 and 151 is short-circuited, the safety devices 110 and 111 arranged in the consumer device paths 150 and 151 are operated. After this, both contactors 10 are opened to turn off the high-voltage network 103 of the vehicle and the other consumer devices 140, 141.

  In such a battery system according to the present invention, for example, a short-circuit current exceeding 12000 A can be generated. When such a large short-circuit current exists, there is always a risk of floating in the contactor 10 and accompanying contactor welding. Such a large short-circuit current is generated, for example, when a low impedance short circuit occurs in the consumer device path 150 of the consumer device 140 and the fuse 110 is burned out. In this case, both contactors melt and stick together. The other consumer device 141 and the high voltage network 103 connected to the consumer device 141 will continue to be energized because the fuse 111 of the associated consumer device path 151 is undamaged. Nevertheless, since the battery 101 can be separated from the high voltage terminals 130 and 131 in such a case, the battery system 100 according to the first embodiment of the present invention uses the pyrotechnical blocking element 155. The pyrotechnique type breaking element 155 is disposed in the main current circuit (main current path) 104 of the battery 101 that passes through the battery 101, the contactor 10, and the high voltage terminals 130 and 131.

  In the battery system 100 according to the first embodiment of the present invention, the voltage drop in the burned-out safety devices (fuses) 110 and 111 is used as a trigger for the pyrotechnic type breaking element (pyrotechnic type breaking device) 155. . Thus, intelligent and intelligent control of the pyrotechnic blocking element 155 is achieved. In doing so, the voltage drops U1, U2 at the two safety devices (fuses) 110, 111 are connected to the battery by two conductors 162, 163, 164, 165 respectively connected before and after the corresponding safety device 110, 111. The information is transmitted to a control circuit (control electronic circuit) 160 arranged in the system 100, for example, configured as a control device. In this case, the pyrotechnic blocking element 155 can be controlled by the control circuit 160 via, for example, the control line 161.

  When one of the safety devices 110 and 111 burns out, a large voltage drop occurs in the safety devices 110 and 111 at that moment. This voltage drop initiates further ignition of the pyrotechnic blocking element 155 in the control circuit 160, either electrically or electronically. After the pyrotechnical blocking element 155 disconnects the main current circuit 104 of the battery 101, the battery 101 is disconnected from the high voltage network 103, for example the high voltage network of the vehicle. In this case, there will be no electricity in such a vehicle.

  At that time, the control circuit 160 responds to changes in the voltage drops U1 and U2 in the safety devices 110 and 111. For example, when a short circuit occurs in the consumer device 140, the short circuit current in the consumer device path 150 of the consumer device 140 is interrupted by the operation of the safety device 110 after a predetermined time. At the moment when the short-circuit current is interrupted, in the safety device 110, the voltage U1 substantially corresponding to the battery voltage (battery pack voltage) drops while the external short-circuit continues. At that time, the voltage drop at other contact resistances in this current circuit passing through the battery 101, the high voltage terminals 130 and 131, and the consumer devices 140 and 141 may be ignored.

  The voltage drop U1 generated at the safety device 110, which is 0V before the short circuit and overshoots the operating voltage at about the battery voltage level after the corresponding safety device 110 is burned out, makes the pyrotechnic shut-off element 155 preferably and directly Actuated.

  Alternatively, the control circuit 160 is configured as a hardware-oriented circuit. In doing so, the control circuit 160 includes an ASIC module (not separately shown) or an FPGA module (not separately shown), which is the voltage drop U1, When U2 is directly read and one of the safety devices 110 and 111 is burned out, a control signal (trigger pulse or ignition signal) for operating the pyrotechnical shut-off element 155 is generated. The advantage of using such a hardware-oriented circuit is that the response time of this module is very fast compared to the response time of a normal microcontroller and the voltage drops U1, U2 as described above are directly The reliability is improved for proper use.

  Preferably, the control circuit 160 may comprise a microcontroller (not separately shown) that reads and evaluates the voltage drops U1, U2 and one of the safety devices 110, 111 is burned out. In this case, a control signal (trigger pulse or ignition signal) for operating the pyrotechnic type blocking element 155 is generated.

  Optionally, the control circuit 160 is composed of a pure semiconductor circuit. The semiconductor circuit comprises a voltage divider (not shown separately), which divides the voltages U1, U2 dropping at the safety devices 110, 111. Preferably, the voltage divider is connected to a transistor (not shown separately), for example configured as a field effect transistor or a bipolar transistor. The transistor connects a control voltage (supply voltage) after a certain threshold voltage to the actuating device of the pyrotechnic blocking element 155. In addition, components such as a Schmitt trigger (not separately shown) may be preferably utilized at the single transistor location to generate a saber edge.

  FIG. 6 shows a battery system 100 according to the second embodiment of the present invention. Unlike the battery system 100 according to the first embodiment of the present invention shown in FIG. 5, the battery system 100 according to the second embodiment of the present invention includes one individual pyrotechnic-type blocking element 155 and Instead of the control circuit 160, there are two individual pyrotechnic blocking elements 170, 180. Again, each consumer device 140, 141 can be configured as an inverter.

  Each Pyrotechnic-type blocking element (Pyrotechnic-type safety switch) 170, 180 is disposed in the consumer device path 150, 151 associated with each. In so doing, each pyrotechnic blocking element 170, 180 has four terminals. Two of the four terminals are configured as the main terminal (main contact) of each pyrotechnic blocking element 170, 180, and the other two of each pyrotechnic blocking element 170, 1804 are: It is configured as a control terminal (sub contact). The two main terminals of each pyrotechnic-type blocking element 170, 1804 are incorporated in the associated consumption paths 150, 151, respectively. When a predetermined voltage or a predetermined current is applied to the two control terminals of each pyrotechnic type blocking element 170, 180, an initiator (not shown individually) disposed in the corresponding blocking element 170, 180 is used. ) Builds up pressure in the chamber of the corresponding blocking element 170, 180, and thereby passes through the main terminals of the corresponding blocking element 170, 180 and the current path (individually) existing in the corresponding blocking element 170, 180. (Not shown in the figure). By mechanical disconnection of the internal current path existing inside each blocking element 170, 180, the consumer device path 150, 151 in which the corresponding pyrotechnic blocking element 170, 180 exists is also disconnected.

  In a second embodiment of the invention, each pyrotechnic blocking element 170, 180 is passively actuated. That is, the two control lines 171 and 172 connected to the control terminal of the pyrotechnic type blocking element 170 existing in the consumer device path 150 are arranged on both sides of the safety device 111 present in the consumer device path 151. The two control lines 181 and 182 connected to the control terminal of the pyrotechnic type blocking element 180 existing in the consumer device path 151 are arranged on both sides of the safety device 110 existing in the consumer device path 150.

  For example, a short circuit may occur in a consumer device 140 configured, for example, as an inverter, so that the contactors 10 do not open or open in a timely manner, for example due to contactor welding occurring in each contactor 10. When the safety device 110 is activated at the same time, the voltage U1 having the magnitude of the total battery voltage (battery pack voltage) drops in the safety device 110. This voltage drop U1 in the activated safety device 110 causes a current flow in the control lines 181 and 182 of the pyrotechnic blocking element 180 present in the consumer device path 151 of the consumer device 141 that is not short-circuited. This current flow activates the corresponding pyrotechnic blocking element 180, which in the activated state interrupts the consumer device path 151 of the consumer device 141. Thereby, the power supply of the consumer equipment 141 is cut off (becomes a state in which no electricity is coming).

  For example, a short circuit occurs in a consumer device 141 configured, for example, as an inverter, so that the contactors 10 do not open or open in time due to contactor welding occurring in each contactor 10, for example. When the other safety device 111 is activated, the voltage U2 having the magnitude of the total battery voltage (battery pack voltage) drops in the safety device 111. Due to the voltage drop U2 at this activated safety device 111, the current flow in the control lines 171, 172 of the pyrotechnical shut-off element 170 present in this case in the consumer device path 150 of the consumer device 140 that is not short-circuited. Is caused. This current flow activates the corresponding pyrotechnic blocking element 170, which in the activated state interrupts the consumer device path 150 of the consumer device 140. As a result, the power source of the consumer device 140 is turned off (no electricity is coming).

  In the battery system 100 according to the second embodiment of the present invention, the voltage drops U1 and U2 at the burned-out safety devices 110 and 111 ignite corresponding ones of the two pyrotechnic type breaking elements 170 and 180. To be used. When the safety device 110 is burned out, the burned safety device 110 is short-circuited via the control lines 181 and 182 of the pyrotechnic type breaking element 180. When the other safety device 111 is burned out, the other burned safety device 111 is short-circuited via the control lines 171 and 172 of the pyrotechnical shut-off element 170.

  Preferably, an ohmic resistor (not separately shown) or alternatively a safety device (not separately shown) is used to limit the current flowing through the control lines 171, 172 when the safety device 111 burns out. ) Is incorporated in the control lines 171 and 172. By using an ohmic resistor or a safety device (fuse) in the control lines 171 and 172, it is possible to prevent an excessively strong thermal load from being applied to the control lines 171 and 172, respectively. As a result, a dangerous voltage is controlled after ignition of the pyrotechnical shut-off element 170 even though the safety device 111 existing in the consumer device path 151 of the consumer device 141 burns out and disconnects the consumer device path 151. Transmission to the consumer device 141 via the lines 171 and 172 and further transmission to the high voltage network 103 which is the high voltage network 103 of the vehicle, for example, are similarly prevented.

  More preferably, an ohmic resistor (not separately illustrated) or alternatively a safety device (not separately illustrated) is used to limit the current flowing through the control lines 181, 182 when the safety device 110 burns out. Are incorporated in the control lines 181 and 182. By using an ohmic resistor or a safety device (fuse) in the control lines 181 and 182, it is possible to prevent the control lines 181 and 182 from being subjected to excessive thermal loads. As a result, a dangerous voltage is controlled after ignition of the pyrotechnical shut-off element 180 even though the safety device 110 existing in the consumer device path 150 of the consumer device 140 is burned out and disconnected. It is also transmitted to the consumer device 140 via the lines 181 and 182 and further prevented from being transmitted to the high voltage network 103 which is the high voltage network 103 of the vehicle, for example.

  Such a Pyrotechnic-type blocking element has already been implemented in series in a low-voltage network (12V network) of a vehicle for a long time. It is activated via the control device. The disadvantage of this is that the pyrotechnical blocking element implemented in this way can only block small currents at high voltages.

  FIG. 7 shows a battery system 100 according to the third embodiment of the present invention. Unlike the battery system 100 according to the second embodiment of the present invention shown in FIG. 5, the battery system 100 according to the third embodiment of the present invention includes one pyrotechnical shut-off element 155 and a control circuit. Instead of 160, it has a single closure element 190, which is open when not activated, cannot guide current and is closed when activated. The current can be guided. In FIG. 7, the closure element 190 is shown in an unactivated state, i.e. in the open state. At that time, the closing element 190 is directly connected to the consumer device 140 arranged in the consumer device path 150, one of the two terminals being a terminal of the safety device 110 arranged in the consumer device 150. And the other of the two terminals is a terminal of the safety device 111 arranged in the other consumer device path 151, and the consumer device path 151 It is connected to the terminal of the safety device 111 that is directly connected to the other consumer device 141 arranged inside.

  When a battery system 100 according to a third embodiment of the invention for powering a high voltage network 103 of a vehicle (not shown) is used, the closure element 190 has two consumer device paths 150, The safety devices 110 and 111 of 151 are preferably arranged on the vehicle side. This closing element 190 is normally open. Preferably, the closing element 190 is activated when a short circuit occurs in the consumer device 140 and thereby the safety device 110 associated with the consumer device 140 is activated. If the contactor 10 is welded due to the short circuit, the current is safety associated with the activated closure element 190, the consumer device 140 with the short circuit, and the consumer device 141 without the short circuit. Flows until the safety device 111 is activated. Thereby, the power source of the current circuit of the consumer device 141 in which the short circuit does not occur or the consumer device 141 in which the short circuit does not occur is cut off.

More preferably, the closing element 190 is also activated when a short circuit occurs in the other consumer device 141, and the safety device 111 associated with the other consumer device 141 is activated by the short circuit. When the contactor 10 is welded due to the short circuit, the current is associated with the activated closure element 190, the other consumer device 141 with the short circuit, and the consumer device 140 with no short circuit. Flow through the safety device 110 until the safety device 110 is activated. Thereby, the power supply of the current circuit of the consumer device 140 in which the short circuit does not occur or the consumer device 140 in which the short circuit does not occur is cut off. As a whole, for example, when the exposed components (parts) of the consumer devices 140 and 141 that are not short-circuited contact with the exposed components (parts) to which a dangerously high voltage is applied. It is possible to eliminate any dangers that occur through the electrical circuits of the consumer devices 140, 141 that are not short-circuited due to overcharging of the battery. Battery 10 1, short-circuit is overcharged through the electric circuit of the consumers 140 and 141 that do not occur, when the battery cells of the battery 101 has moved to a very dangerous exothermic reaction, a dangerous situation may occur. Similarly, it is possible that the constituent elements of the consumer devices 140 and 141 that are not short-circuited may be damaged by an accident and exposed. In that case, there is a possibility of electric shock when contacting such a component.

  When a short circuit occurs in the consumer devices 140 and 141, and a short circuit current that is normally greater than 3 kA to 7 kA is generated, the contactor 10 may be welded. When a short circuit occurs in the consumer devices 140 and 141, and thus a short circuit current that is normally greater than 3 kA to 7 kA is generated, the corresponding safety device 110 or 111 is activated within a few milliseconds immediately thereafter. . In FIG. 7, the voltage dropping at the safety device 110 is represented by U1, and the voltage dropping at the safety device 111 is represented by U2.

  Preferably, the presence of an activated safety device 110, 111 and / or at least one welded contactor 10 is detected by a battery controller (not separately shown) of the battery system 100. More preferably, the battery control device activates the closure element (closing unit) 190 according to the invention when the activated safety device 110, 111 and / or at least one welded contactor 10 is present. .

  The closure element can basically be configured as a normal switch. The fact that commercially available switches do not pass such short-circuit currents up to 10 kA provides a special structural form for the closure element 190 according to the invention. The closure element according to the invention is preferably a contactor that is open in the non-activated state (normally open), to the activated state in which the contactor is closed. The contactor can be switched by applying a control voltage. The closure element 190 according to the present invention is preferably configured as a conventional pyrotechnical closure element, in which a bolt is mounted in a pyrotechnic manner. The two busbars are short-circuited by the bolt pushed forward by the medicine and thus pushed forward.

  FIG. 8 shows an equalization circuit diagram of the battery system 100 of the present invention according to the third embodiment of the present invention. In FIG. 8, when a short circuit occurs in the consumer device 140 (which causes the safety device 110 associated with the consumer device 140 to operate and the contactor 10 of the battery system 100 is welded), the closure element 190 The current flow that occurs in the battery system 100 after is activated is indicated by a plurality of arrows. In this case, the current flows to the battery 101, the high voltage terminals 130, 131 of the battery 101, the activated closure element 190, the consumer device 140 in which a short circuit has occurred, and the consumer device 141 in which a short circuit has not occurred. It flows through the associated safety device 111 until the safety device 111 is activated.

  FIGS. 9-11 show a closure element 190 according to the present invention configured as a pyrotechnic closure element (PCD) 191.

In FIG. 9, the pyrotechnic closure element 191 is shown with the pyrotechnic charge 210 of the pyrotechnic closure element 191 ignited by the ignition signal 200. FIG. 9 also shows the buses 230, 231 of the pyrotechnic closure element 191, which have not yet been short-circuited by the bolts 220 of the pyrotechnic closure element 191.

  In FIG. 10, the pyrotechnic closure element 191 is shown in a condition that occurs immediately after the ignition of the pyrotechnic charge 210, in which the bolt 220 is pushed by the pyrotechnic charge 210. The buses 230, 231 are not yet short-circuited by the bolts 220 of the pyrotechnic closure element 191.

  In FIG. 11, the pyrotechnic closure element 191 is shown in yet another state that occurs immediately after ignition of the pyrotechnic charge 210, where it has been pushed by the pyrotechnic charge 210. A bolt 220 short-circuits the buses 230 and 231.

  As above, the description of FIGS. 5 to 11 is supplementarily referred to for further disclosure of the present invention, along with the disclosure described above.

Claims (18)

A battery system (100) comprising a battery (101) configured to supply power to at least two consumer devices (140, 141) connected in parallel to a high voltage network (103), the battery (101) ), while the high-voltage terminal of itself (130, 131), Ri Contact is connected via at least two cutouts (110, 111) and contactor (10), said at least two cutouts (110 , 1 turn, each of the 111), wherein associated with one of at least two consumers (140, 141), Ri Contact is connected to the consuming device associated (140, 141), a battery system (100 )
Characterized in that it comprises at least one switching unit (155, 170, 180, 190) having two switching states, ie
In the state where the at least two consumer devices (140, 141) are connected to the high voltage terminals (130, 131) of the battery (101), the associated consumer devices (140, 141) are used. Has been switched to the first switching state of the two switching states in which the driving current flows through each safety device (110, 111) in the presence of the flowing driving current; and
When one of the at least two safety devices (110, 111) is operating, the first switching state is the second switching state of the two switching states, and At least one switching unit (155, 170, 180, 190) includes the battery (101), the high voltage terminal (130, 131) of the battery (101), and the associated safety device (110, 111). ) Shuts off the error current flowing through each consumer device (140, 141) that is not operating and / or the high voltage terminal (130, 131) of the battery (101) by the battery (101). ) And the non-operating safety device (110, 111), before turning off each error voltage applied to the high voltage network (103) Is provided to switch to the second switching state, characterized in that it comprises said at least one switching unit (155,170,180,190), a battery system (100). The at least one switching unit (155, 170, 180) includes the battery (101), the high voltage terminal (130, 131) of the battery (101), and an associated safety device (110, 111). Is provided to directly cut off the error current and / or directly cut off the error voltage by opening an electrical circuit through each consumer device (140, 141) that is not activated. Or
The at least one switching unit (190) is provided for interrupting the error current and / or turning off the error voltage by activation of each safety device (110, 111) that is not activated. The battery system (100) of claim 1. The battery system (100) includes:
One switching unit configured as a pyrotechnic blocking element (155);
A control circuit (160),
The pyrotechnic-type blocking element (155) is configured such that the battery (101) is in a state where the at least two consumer devices (140, 141) are connected to the high voltage terminals (130, 131) of the battery (101). ) And the high voltage terminals (130, 131) in the presence of a drive current flowing through the blocking element (155) in the presence of the drive current flowing through the blocking element (155), and When there is a control signal provided by the control circuit (160) or a control voltage provided by the control circuit (160), from its conductive switching state to its non-conductive switching state. Provided to switch,
The control circuit (160) determines a voltage (U1, U2) that drops in each of the at least two safety devices (110, 111), and an operation voltage generated when the corresponding safety device (110, 111) is operated. When equal defined voltages (U1, U2) are present, the control signal is generated and provided to the shut-off element (155) or one of the at least two safety devices (110, 111). 3. The device according to claim 1, wherein, in the presence of an operating voltage that falls at, the blocking element is provided to provide a corresponding part of the operating voltage as a control voltage. A battery system (100) according to claim 1.   The control voltage corresponds to the operating voltage dropping at each of the at least two safety devices (110, 111), and the control circuit (160) is one of the at least two safety devices (110, 111). 4. The battery system (100) according to claim 3, provided for providing the operating voltage directly as a control voltage to the shut-off element (155) when there is an operating voltage that drops in one. ).   The control circuit (160) is configured as an application specific integrated circuit, as a programmable integrated circuit, as a microcontroller, or as a semiconductor circuit with a transistor or Schmitt trigger circuit. The battery system (100) described. Two consumer devices (140, 141) connected in parallel can be connected to the high-voltage terminals (130, 131) of the battery (101), and the battery system (100) has a pyrotechnique type cutoff. Two switching units each configured as an element (170, 180), one blocking element of the two blocking elements (170, 180) being respectively one of the two consumer devices (140, 141) Associated with consumer devices,
Each blocking element (170, 180) includes the two consumer devices (140, 141) in a state in which the two consumer devices (140, 141) are connected to the high voltage terminals (130, 131) of the battery (101). 140, 141) in the presence of the drive current flowing through the associated consumer device, the drive current flows into its electrically switched state through the corresponding blocking element (170, 180). Has been switched, and
When there is an operating voltage generated when the safety device (110, 111) associated with the consumer device (140, 141) not associated with itself is lowered and the safety device (110, 111) is activated. The battery system (100) according to claim 1 or 2, wherein the battery system (100) is provided for switching to its non-conductive switching state.   Each shut-off element (170, 180) has two controls in which the terminal of the safety device (110, 111) associated with the consumer device (140, 141) not associated with the terminal is connected to the terminal. Line (171, 172, 181, 182), each blocking element (170, 180) has a voltage (U1, U2) between the terminals of its own control line (171, 172, 181, 182), When the operating voltage of the safety device (110, 111) associated with the consumer device (140, 141) not associated with itself is equal to the operating voltage, from the conductive state to the non-conductive state The battery system (100) of claim 6, wherein the battery system (100) is configured to switch to   A resistor and / or other safety device is arranged on one of the two control lines (171, 172, 181, 182) of each pyrotechnic blocking element (170, 180). The battery system (100) of claim 7.   The at least one switching unit is configured as at least one closure element (190), wherein the at least one closure element (190) is configured such that the at least two consumer devices (140, 141) are connected to the battery (101). In the state connected to the high voltage terminals (130, 131), it has been switched to its non-conductive switching state in which no current flows through the at least one closure element (190), and the at least 2 When one of the two safety devices (110, 111) is in operation, in order to activate each safety device (110, 111) that is in its conductive switching state and is not active, The error current generated by the battery (101) causes the high voltage terminals (130, 131) of the battery (101) to Furthermore, the consumer device (140, 141) in which the associated safety device (110, 111) is activated, the at least one closing element (190), and each safety device (110) that is not activated. 111) and the battery system (100) according to any one of the preceding claims, provided for switching to the electrically switched state that flows through a current path through.   The battery system (100) according to claim 9, wherein the at least one switching unit is configured as at least one pyrotechnic closure element (190) or as at least one contactor. The at least one closure element (190) is moved from its non-conductive switching state in the presence of at least one control signal provided by a battery controller disposed in the battery system (100). Provided to switch to a conductive switching state,
The battery control device, the presence of actuated safety device (110, 111), detected by the evaluation of the at least two cutouts each drop to that voltage at (110, 111) (U1, U2), operating 10. or 9 provided to generate the at least one control signal and to provide it to the at least one closure element (190) when a safety device (110, 111) is present. 10. The battery system (100) according to 10. Via the battery (101) configured to supply power to at least two consumer devices (140, 141) connected in parallel to each other of the high voltage network (103) and the high voltage terminal (130) of the battery (101) 131) and / or by the battery (101) to the high voltage network (103) via the high voltage terminals (130, 131) of the battery (101). A method for limiting the applied error voltage,
The battery (101) is connected to at least two safety devices (110, 111) on one of its high voltage terminals (130, 131), one of the at least two safety devices (110, 111) being respectively Wherein the method is associated with one of the at least two consumer devices (140, 141) and connected to the associated consumer device (140, 141),
At least one switching unit (155, 170, 180, 190) having two switching states is used,
In the at least one switching unit (155, 170, 180, 190), the at least two consumer devices (140, 141) are connected to the high voltage terminals (130, 131) of the battery (101). In the second switching state, the driving current flows through each safety device (110, 111) in the presence of the driving current flowing through the associated consumer device (140, 141). Has been switched to 1 switching state,
The at least one switching unit (155, 170, 180, 190) is in the first switching state when the one of the at least two safety devices (110, 111) is in operation. The second switching state of the two switching states, wherein the at least one switching unit (155, 170, 180, 190) includes the battery (101) and the high voltage terminal of the battery (101). (130, 131) and the consumer device (140, 141) in which the associated safety device (110, 111) is not activated, and / or the battery ( 101) through the high voltage terminals (130, 131) of the battery (101) and the safety devices (110, 111) that are not activated. Characterized in that it is switched to the second switching state of turning off the respective error voltage applied to the high voltage network (103) Te method. The battery (101), the high voltage terminal (130, 131) of the battery (101), and the safety device (110, 111) thereof are operated by the at least one switching unit (155, 170, 180). The error current is cut off directly and / or the error voltage is turned off directly by opening an electrical circuit through each non-consuming device (140, 141), or
13. The method according to claim 12, wherein activation of each non-actuated safety device (110, 111) by the at least one switching unit (190) interrupts the error current and / or turns off the error voltage. . A switching unit configured as a pyrotechnic blocking element (155) and a control circuit (160) are utilized, the pyrotechnic blocking element (155) being connected to the at least two consumer devices (140, 141). ) Flows through the battery (101) and the high voltage terminal (130, 131) of the battery (101) in a state where it is connected to the high voltage terminal (130, 131) of the battery (101). In the presence of a drive current, the drive current is switched to its conductive switching state that flows through the blocking element (155) and there is a control signal or control voltage provided by the control circuit (160). In that case, it is switched from its conductive switching state to its non-conductive switching state,
The control circuit (160) determines a voltage (U1, U2) that drops in each of the at least two safety devices (110, 111), and an operating voltage generated when the corresponding safety device (110, 111) is operated. When a defined voltage (U1, U2) equal to is present, the control signal is generated and provided to the blocking element (155), or by the control circuit (160), the at least two 14. When there is an operating voltage dropping at one of the safety devices (110, 111), the interrupting element (155) is provided with a corresponding part of the operating voltage as a control voltage. The method described in 1.   Two consumer devices (140, 141) connected in parallel are connected to the high-voltage terminals (130, 131) of the battery (101), which are respectively configured as pyrotechnic-type blocking elements (170, 180). Two switching units are used, and one blocking element of the two blocking elements (170, 180) is associated with one consumer device of the two consumer devices (140, 141). (170, 180) is the associated consumer device (140) in a state where the two consumer devices (140, 141) are connected to the high voltage terminals (130, 131) of the battery (101). 141) in the presence of a drive current through the corresponding switching element (170, 180) in its conductive switching state. Is generated when the safety device (110, 111) is actuated by descending at the safety device (110, 111) associated with the consumer device (140, 141) not associated with itself. 14. A method according to claim 12 or 13, wherein when an operating voltage is present, it is switched to its non-conductive switching state.   At least one switching unit configured as at least one pyrotechnic closure element (190) is utilized, wherein the at least one closure element (190) includes the at least two consumer devices (140, 141) connected to the battery ( 101) in its connected state to the high-voltage terminal (130, 131) has been switched to its non-conductive switching state in which no current flows through the at least one closing element (190); , When one of the at least two safety devices (110, 111) is in operation, each safety device (110, 111) that is in an electrically switched state and is not in operation is activated. Therefore, the error current generated by the battery (101) is converted into the high voltage terminal of the battery (101). 130, 131) and the associated safety device (110, 111) activated, the consumer device (140, 141) activated and the at least one closure element (190) deactivated 14. The method according to claim 12, wherein each of the safety devices (110, 111) is switched to the conductive switching state flowing through a current path through the safety device (110, 111). In the presence of at least one control signal provided by a battery controller, the at least one closure element (190) is switched from its non-conductive switching state to its conductive switching state, and the battery by the control device, the presence of the actuated safety device (110, 111) comprises is detected by evaluation of that voltage to drop respectively (U1, U2) at least two cutouts (110, 111), was operated 17. The method of claim 16, wherein in the presence of a safety device (110, 111), the at least one control signal is generated and provided to the at least one closure element (190).   A vehicle comprising the battery system (100) according to any one of claims 1 to 11.

Images