KR101570475B1 - Vehicle battery management system considering functional safety and controlling method of the same, and computer-readable recording medium for the same - Google Patents

Abstract

The present invention relates to a vehicle battery control technique that achieves functional safety of a vehicle battery by performing voltage monitoring, task monitoring, and watchdog monitoring by combining a main processor, a monitoring processor, and a watchdog processor. According to the present invention, it is possible to prevent breakage of the electronic device due to fluctuation of the current or voltage of the vehicle battery, to prevent malfunction that may be caused by a task sequence error or execution delay of the electronic control unit and an algorithm execution error of the electronic control unit And the function safety of the vehicle battery can be assured. Further, according to the present invention, when the possibility of malfunction is detected through the voltage monitoring, the system can be operated without being permanently interrupted by resetting the battery management system.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a vehicle battery management system and a control method thereof, and a computer readable recording medium therefor. [0002]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention generally relates to a control technology of a vehicle battery, and more particularly, to achieve functional safety of a vehicle battery by performing voltage monitoring, task monitoring, and watchdog monitoring by combining a main processor, The present invention relates to a vehicle battery control technique.

Generally, the vehicle is equipped with a battery. Such a vehicle battery is basically for driving an engine, but recently it is also used for supplying power to various electronic devices. BACKGROUND ART [0002] In recent years, various electronic devices including an electronic control unit have been applied to vehicles, and batteries are becoming more important. In addition, as hybrid and electric vehicles appear, the importance of vehicle battery management becomes more important.

The performance of the battery greatly affects the performance of the vehicle. Furthermore, since the battery is also an important factor for safety, it is important not only to keep the quality of the battery itself good by changing the battery in a timely manner, The importance of battery management systems that can be used is increasing.

Accordingly, an object of the present invention is to provide a vehicle battery control technology capable of ensuring functional safety for a vehicle battery by performing voltage monitoring, task monitoring, and watchdog monitoring by combining a main processor, a monitoring processor, and a watchdog processor .

It is another object of the present invention to provide a battery management system capable of preventing breakage of an electronic device due to variation of a current or voltage value inputted from a battery for a vehicle and preventing malfunction of a battery management system due to a task order error or execution delay of the battery management system And to provide a battery control technology for a vehicle.

It is another object of the present invention to provide a vehicle battery control technique that can prevent a malfunction of a battery management system that may occur due to an algorithm execution error in an electronic control unit.

According to another aspect of the present invention, there is provided a battery management system for a vehicle, comprising: a battery sensor unit for measuring an output current and a temperature of a vehicle battery; The battery state information is used to duplicate a preset operation for managing the state of charge (SOC) and the state of health (SOH) of the vehicle battery, and the charging state and the health state of the vehicle battery are managed according to the calculation result A micro controller 320 for checking the execution result of the redundant execution of the above operation and the execution status of the task and storing the result of the check in a memory; And a watchdog processor 310 for resetting the microcontroller when it is determined that the output voltage of the vehicle battery deviates from a predetermined reference value range and the test result is repeatedly determined to be abnormal. And a battery cooler 210 for performing temperature control of the vehicle battery in response to a cooling control signal according to the calculation result of the main processor.

At this time, the microcontroller 320 duplicates and stores a preset operation for managing the state of charge (SOC) and health state (SOH) of the battery using the information obtained from the battery sensor unit, A main processor (326) for performing a maintenance operation of a state of charge and a state of health of the battery; A monitoring processor (323) for increasing an error counter when an error occurs in the operation order of the main processor, when the operation time of the main processor exceeds a preset time, or when the result of the redundant operation is different; And a memory 324 for storing the operation sequence and the operation time of the main processor and the result of the redundant operation, and the watchdog processor 310 is configured to, when the error counter value stored in the memory is equal to or greater than a preset threshold value, Lt; / RTI >

The watchdog processor 310 may include an A / D converter for detecting the output voltage of the vehicle battery, and may check whether the output voltage of the vehicle battery is out of a preset reference value range whenever a clock is generated.

Meanwhile, a method for controlling a battery for a vehicle, which considers functional safety according to the present invention, includes the steps of: acquiring an output current and temperature information of a vehicle battery; The microcontroller repeatedly executing a preset operation for managing a state of charge (SOC) and a state of health (SOH) of the battery using output current and temperature information of the vehicle battery; The microcontroller storing duplicate execution results and inspection results of task execution states according to the calculation results; And resetting the microcontroller if the watchdog processor checks the output voltage of the vehicle battery and falls outside a preset reference value range.

At this time, the method according to the present invention includes the steps of increasing an error counter when an error occurs in the operation sequence of the task, when the operation time of the task exceeds a preset time, or when results of redundancy execution are different from each other; And resetting the microcontroller if the watchdog processor checks the error counter and is greater than or equal to a preset threshold value.

On the other hand, a computer-readable recording medium according to the present invention records a vehicle battery control program for executing a vehicle battery control method in consideration of functional safety as described above.

According to the vehicle battery management system of the present invention, it is possible to prevent breakage of the electronic device due to a change in current or voltage of the vehicle battery and to prevent malfunction due to a task sequence error or execution delay of the electronic control unit, Can be guaranteed.

Further, according to the vehicle battery management system of the present invention, it is possible to prevent a malfunction that may be caused due to an algorithm execution error of the electronic control unit, thereby assuring the function safety of the vehicle battery.

Further, according to the vehicle battery management system of the present invention, when the possibility of malfunction is detected through the voltage monitoring, the system can be operated without being permanently interrupted by resetting the battery management system.

1 is a diagram showing a general configuration for managing a battery for a vehicle,
2 is a conceptual diagram illustrating an operation structure of a battery management system for a vehicle according to the present invention,
3 is an internal block diagram of the electronic control unit in the present invention,
4 is a control flowchart for battery management in the main processor of the present invention,
5 is a control flowchart for monitoring the operation of the main processor in the monitoring processor of the present invention,
6 is a control flow diagram for resetting a microcontroller in the watchdog processor of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the drawings, the same components are denoted by the same reference numerals whenever possible. The drawings attached hereto are provided for the purpose of helping understanding of the present invention, and the scope of right of the present invention is not limited by the form or arrangement shown in the drawings. In the following description, only parts necessary for understanding the operation according to various embodiments of the present invention will be described, and descriptions of other parts may be omitted so as not to disturb the gist of the present invention.

1 is a diagram showing a general configuration for managing a vehicle battery 2. The BMS 1 includes a BMS 1, a current sensor 3, a cooling fan 4, a fuse 5, a main switch 6, A unit 7, an inverter 8, and a motor generator 9.

First, the battery 2 is generally constructed by connecting the battery cells in series, and a safety switch may be provided in the middle. At this time, the safety switch is a switch which can be manually turned on / off for the safety of the operator when the battery is replaced. The output of both ends of the battery 2 is connected to the inverter 8.

The current sensor 3 measures the output current of the battery 2 and outputs it to the sensor unit 10 of the BMS 1. The cooling fan 4 is operated by the control signal of the BMS 1 to cool the battery 2 to prevent deterioration of the battery or deterioration of charge / discharge efficiency. The fuse 5 prevents an overcurrent from flowing to the battery 2. The main switch SW1 is used to turn on / off the entire system. When the abnormality such as overvoltage, overcurrent, or high temperature occurs, the main switch SW1 turns off the battery 2 based on the control signals of the BMS 1 or the vehicle ECU 7. [ do.

The battery management system 1 includes a sensor unit 10, an MCU 20, an internal power supply unit 30, a cell balancing unit 40, a storage unit 50, a communication unit 60, a protection circuit unit 70, A power-on reset unit 80, and an external interface 90.

The sensor unit 10 measures the battery current, the battery voltage, and the battery temperature, and transmits the battery current to the MCU 20. The MCU 20 controls the battery 2 such as a state of charge (SOC), a state of health (SOH), and the like of the battery 2 based on information received from the sensor unit 10. [ And transmits the generated state information to the vehicle ECU 7. Accordingly, the vehicle ECU 7 carries out charge / discharge control of the battery 2 based on the SOC and the SOH transmitted from the MCU 20 of the BMS 1.

The internal power supply unit 30 is a device that supplies power to the BMS 1 using an auxiliary battery. The cell balancing unit 40 balances the charging states of the cells by discharging cells having a relatively high charging state and charging cells having a relatively low charging state. The storage unit 50 stores data such as SOC and SOH when the operation power is turned off. The communication unit 60 performs communication with the ECU 7. The protection circuit unit 70 protects the battery 2 from an external shock, an overcurrent, a low voltage, or the like. The power-on reset unit 80 resets the entire system when the operation power is turned on. The external interface 90 connects auxiliary devices such as the cooling fan 4, the main switch 6 and the like to the MCU 20.

The vehicle ECU 7 determines a torque value based on information such as an accelerator, a brake, a vehicle speed, and the like, and controls the output of the motor generator 9 to match the torque value. The ECU 7 receives the SOC of the battery 2 transmitted from the MCU 20 and controls the SOC of the battery 2 to be a target value (for example, 55%).

The inverter 8 controls the battery 2 to be charged or discharged based on the control signal of the ECU 7 and the motor generator 9 is transmitted from the ECU 7 using the electric energy of the battery 2 Drive the vehicle according to the torque value.

In the vehicle battery management system having the above-described configuration, the following problems may occur.

First, the voltages applied to the microcontroller (MCU) and the electronic control unit (ECU) constituting the battery management system (BMS) may deviate from a predetermined range. In this case, the microcontroller and the electronic control unit controlling the battery management system may be damaged or stopped.

Second, the order of tasks of the battery management system may be incorrect or the execution of the task may be delayed, resulting in malfunction of the battery management system.

Third, a malfunction may occur in the battery management system due to an error in the algorithm result.

When such a problem occurs, the battery temperature, the charging state, the health state, etc. can not be controlled or the wrong control command is output. As a result, the life of the battery is shortened, the efficiency is deteriorated, the explosion occurs, and the vehicle can not provide the necessary electric power.

Therefore, the present invention provides a battery management technology considering functional safety so that such concerns can be solved. The overall configuration of the battery management system according to the present invention will now be described with reference to FIG.

FIG. 2 is a conceptual diagram illustrating an operation structure of a battery management system for a vehicle according to the present invention. Referring to FIG. 2, a vehicle battery management system according to the present invention includes a battery sensor unit 200, a battery cooler 210, and an electronic control unit 300 for controlling the battery 100.

The battery cooler 210 may be configured in various forms such as an air-cooling type using a fan, a liquid or gaseous refrigerant, or the like for cooling the battery 100.

The battery sensor unit 200 includes a current measuring unit 201 and a temperature measuring unit 202. The current measuring unit 201 measures the output current of the battery 100 and provides current information to the electronic control unit 300. [ The temperature measuring unit 202 measures the temperature of the battery 100 and provides temperature information to the electronic control unit 300. The output voltage of the battery 100 may be directly transmitted to the electronic control unit 300. [

The electronic control unit 300 can check the state of the battery 100 using the current and voltage information provided through the battery sensor unit 200 and perform cooling control. That is, the electronic control unit 300 controls the temperature of the battery 100 through the battery cooler 210 based on the battery condition information measured in real time and the battery control information stored in advance, and controls the charging and discharging of the battery 100 Can be controlled. The battery charging and discharging control performed by the electronic control unit 300 can be generally known technology. The electronic control unit 300 may include an analog-to-digital converter (ADC) module to measure the voltage of the battery 100. Also, the electronic control unit 300 can control the temperature of the battery 100 by controlling the battery cooler 210 according to the battery temperature measured in real time. In addition, the electronic control unit 300 can determine the state of charge (SOC) and the state of health (SOH) of the battery 100 according to the current, voltage, and temperature measured in real time.

3 is an internal block diagram of the electronic control unit 300 in the vehicle battery management system according to the present invention. In the present invention, the electronic control unit 300 includes a microcontroller 320 and a watchdog processor 310 as a configuration for assuring functional safety. At this time, the watchdog processor 310 is a module for monitoring the operation of the microcontroller 320.

The electronic control unit 300 performs a battery management function by an organic cooperative operation of the main processor 326, the monitoring processor 323, and the watchdog processor 310. The electronic control unit 300 according to the present invention performs voltage monitoring, task monitoring, and watchdog monitoring to ensure functional safety. Watchdog monitoring is to perform Algorithm Result Comparison.

The watchdog processor 310 includes a first communication unit 311 for communicating with the microcontroller 320 and a first AD converter 312 for converting the output voltage of the battery 100 into a digital value. For each clock, the watchdog processor 310 monitors the output voltage of the battery 100 and performs a reset of the microcontroller 320 when the voltage is out of a predetermined reference range.

The watchdog processor 310 also monitors the results of the battery management operations performed by the monitoring processor 323 from the memory 324 and monitors them. The watchdog processor 310 also performs a reset of the microcontroller 320 according to the monitoring result performed by the monitoring processor 323, if necessary. At this time, the error counter value can be used to determine whether or not to reset. The operation of the watchdog processor 310 will be described in more detail with reference to the flowcharts described below.

The watchdog processor 310 and the microcontroller 320 can communicate with each other through the first communication unit 311 and the second communication unit 321, for example, SPI (Serial Peripheral Interface). Here, the SPI communication is a full-duplex synchronous serial interface that uses four wires to connect to peripheral devices. It is composed of two data lines and two control lines. It is connected to the master out slave in (MOSI), the master in slave out And performs the same kind of communication. At this time, it is preferable that the communication between the first communication unit 311 and the second communication unit 321 is interrupted while the microprocessor 320 is being reset by the watchdog processor 310.

Next, the configuration of the microcontroller 320 will be described. The microcontroller 320 includes a second communication unit 321 for communicating with the watchdog processor 310 and includes a second AD converter 322 for converting the output voltage of the battery 100 to a digital value . The microcontroller 320 also includes a main processor 326, a monitoring processor 323, and a memory 324. The microcontroller 320 acquires status information (temperature, voltage, current) of the battery 100, and these status information is provided to the main processor 326.

The main processor 326 executes an operation for managing the battery 100 and stores the execution result in the memory 324. [ For example, the main processor 326 may perform tasks for managing the battery 100, such as a state of charge (SOC) and a state of health (SOH), and store the results in the memory 324. [ At this time, in the present invention, the main processor 326 repeats the algorithm for battery management twice. For example, if an algorithm for managing the state of charge (SOC) of the battery 100 is performed, the algorithm is repeated twice, and the execution result is stored in the memory 324. This makes it possible to check the reliability of the algorithm execution result of the task.

The monitoring processor 323 monitors the task execution order and execution time for battery management such as the state of charge (SOC) and health state (SOH) executed by the main processor 326. Also, the monitoring processor 323 may monitor the error counter 325 stored in the memory 324 if the respective tasks are not executed in a preset predetermined order that was intended by the algorithm, or if the execution time of each task exceeds the preset threshold time ). The monitoring processor 323 also reads the algorithm execution results stored in the memory 324 and compares them to increase the error counter 325 when they are different from each other or an error is found in any of them.

The monitoring processor 323 increases the error counter 325 and stores the error counter 325 in the memory 324 when an error occurs during the execution of the tasks for battery management. Accordingly, the watchdog processor 310 reads the error counter 325 from the memory 324 and executes a reset to the microcontroller 320 if the preset threshold is exceeded. At this time, the watchdog processor 310 and the microcontroller 320 are preferably configured in such a manner as to share the memory 324. The shared memory 324 may serve as a buffer necessary for communication.

As described above, the microcontroller 320 and the watchdog processor 310 have a communication path such as SPI through the first communication unit 311 and the second communication unit 321. This allows the watchdog processor 310 to access the memory 324 of the microcontroller 320 and the main processor 326 to control the watchdog processor 310. For example, the main processor 326 may perform control operations such as correcting the voltage reference value of the watchdog processor 310 and the like.

4 is a diagram showing an operation performed by the main processor 326 in the vehicle battery management system of the present invention.

The main processor 326 may perform a specific task (e.g., engine control, brake control) in step S400 or may be in a standby state.

The main processor 326 proceeds to step S402 and determines whether a preset battery management point has arrived. The management point of time of the battery 100 may manage the battery in a predetermined cycle or may be determined based on the information provided from the battery sensor unit 200 and may be stored in the state of charge SOC and health state SOH according to the current, It may be checked whether or not a process is required.

If it is determined in step S402 that the management of the battery 100 is required, the main processor 326 proceeds to step S404 and executes an operation according to a predetermined algorithm twice for managing the battery 100 successively. At this time, it is preferable that the battery management algorithm manages the battery 100 based on the information obtained from the battery sensor unit 200. For example, if it is determined that the temperature control is necessary, the battery management algorithm performs the cooling control algorithm, If it is judged, the battery charge / discharge control algorithm is performed. In step S404, the battery management algorithm is duplicated twice (duplicated execution) so that comparison can be made thereafter, thereby ensuring reliability. In the present invention, the number of times of execution is not limited to two, and should be interpreted to be performed a plurality of times.

Then, the main processor 326 proceeds to step S406 and stores the values calculated twice in corresponding areas of the memory 324, respectively. At this time, it is desirable to store the time required for the calculation, the calculation order, and the like in the memory 324.

In step S408, the main processor 326 controls the battery 100 according to an algorithm operation result. At this time, the first operation result may be used or the second operation result may be used. Basically, since the same operation is repeated twice, the battery control result is the same regardless of the result of any operation in the normal state. However, if an operation error exists, the result of double operation may be different. According to the present invention, if the calculation result is different, the monitoring processor 323 and the watchdog processor 310 perform a corresponding operation to increase the reliability.

At this time, steps S406 and S408 may be performed at the same time or may be performed in the reverse order of [FIG. 4]. For example, step S408 may be performed first, and step S406 may be performed later.

5 is a diagram showing an operation performed by the monitoring processor 323 in the vehicle battery management system of the present invention.

The monitoring processor 323 maintains the standby state in step S500.

The monitoring processor 323 may proceed to step S502 to check whether the operation order inspection time of the main processor 326 has arrived. If it is determined in step S502 that the time for checking the operation order of the main processor 326 is reached, the process proceeds to step S504, and if not, the process proceeds to step S510.

First, in step S504, the monitoring processor 323 compares the charging operation state (SOC) and the health state (SOH) of the battery 100 according to the current, voltage, and temperature performed by the main processor 326, The time spent for the task can be read from the memory 324 and inspected. In the flowchart of FIG. 4, the main processor 326 may check the operation order and the operation time information by using a value stored in a predetermined area of the memory 324 when the main processor 326 performs a specific operation.

The monitoring processor 323 proceeds to step S506 to check whether the calculation order is in the normal order and whether the required time is within the normal range. If the check result in step S506 is YES, the process proceeds to step S500. Otherwise, the process proceeds to step S508 to increase the error counter 325. The error counter 325 is utilized by the watchdog processor 310.

On the other hand, in step S510, the monitoring processor 323 checks whether or not the inspection time for the double execution result has arrived. If the inspection point has arrived, the monitoring processor 323 proceeds to step S512 to check whether the data stored in the memory 324 are duplicated. This corresponds to an operation of comparing the results of performing the same operation twice (plural times) when the main processor 326 performs an operation for battery management in the example of FIG. 4 described above.

The monitoring processor 323 may proceed to step S506 to determine whether the result of the double operation is the same to determine whether it is normal. If the result of the check in step S506 is normal, the monitoring processor 323 proceeds to step S500 and enters the standby state again. If the result is abnormal, the process proceeds to step S508 to increase the error counter 325. The error counter 325 is utilized by the watchdog processor 310.

6 is a diagram illustrating a process performed by the watchdog processor 310 in the vehicle battery management system of the present invention, in particular, a process of resetting the microcontroller 320 by an error count 325. FIG.

The watchdog processor 310 maintains the standby state in step S600.

The watchdog processor 310 proceeds to step S602 to check whether a clock is input. It is preferable that the watchdog processor 310 checks the output voltage of the battery 100 every clock. If the voltage check clock is input, the process proceeds to step S604. In step S604, the watchdog processor 310 checks whether the output voltage of the battery 100 is within a predetermined reference value using the first AD converter 312. The vehicle battery generally has a voltage of 12 [V], so that in step S606 the reference value can be a predetermined range such as ± 1 [V] or ± 0.5 [V]. If it is determined in step S606 that the voltage of the battery is within the preset reference value, the watchdog processor 310 determines that the battery is normal and the process proceeds to step S600. Otherwise, the process proceeds to step S614.

In step S614, the watchdog processor 310 generates a reset signal to the microcontroller 320 so that the microcontroller 320 is reset. If an abnormal voltage is output from the battery 100, the main processor 326 may not be able to perform a normal operation. Accordingly, by resetting the microcontroller 320, the battery 100 can be normally controlled.

On the other hand, if the voltage check clock is not inputted, the watchdog processor 310 proceeds to step S608 and checks whether the time of the error counter check has arrived. The watchdog processor 310 must continually check the error counter 325 because the microcontroller 320 has repeatedly performed an abnormal operation when an error occurs in the error counter 325 above a preset value Because.

When the time of the error counter inspection comes, the flow advances to step S610 to acquire the error counter 325 from the memory 324 of the microcontroller 320 through the SPI communication through the first communication unit 311. [ The watchdog processor 310 then proceeds to step S612 where it checks whether the error counter 325 exceeds a predetermined threshold, at which time the threshold may be set to 3 or 7, and so on. Since the maximum value of 2 bits in the binary bit is 3 and the maximum value of 3 bits is 7, it is arbitrarily presented and can be set differently.

If the error counter 325 is within the threshold value in step S612, the watchdog processor 310 first proceeds to step S600. If the error counter 325 reaches the threshold value, the microcomputer 320 is reset in step S614.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. Therefore, it is intended that the present invention covers the modifications and variations of this invention provided they come within the scope of the appended claims and their equivalents.

The present invention can also be embodied in the form of computer readable code on a computer readable recording medium. At this time, the computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage, and the like, and may be implemented in the form of a carrier wave . The computer-readable recording medium can also be stored and executed by a computer-readable code in a distributed manner on a networked computer system. And functional programs, codes, and code segments for implementing the present invention can be easily deduced by programmers skilled in the art to which the present invention belongs.

As described above, the embodiments of the present invention have been disclosed in the present specification and drawings, and although specific terms have been used, they have been used only in a general sense to easily describe the technical contents of the present invention and to facilitate understanding of the invention. And is not intended to limit the scope of the invention. It will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention are possible in addition to the embodiments disclosed herein.

100: Battery
200: Battery sensor unit
201: current measuring unit
202: Temperature measuring unit
210: Battery cooler
300: Electronic control unit
310: Watchdog Processor
311:
312: first AD converter
320: Microcontroller
321:
322: a second AD converter
323: Monitoring Processor
324: Memory
325: Error counter
326: main processor

Claims (8)

A battery sensor unit 200 for measuring the output current and temperature of the vehicle battery;
(SOC) and a health state (SOH) of the vehicle battery using the information acquired by the battery sensor unit, and the charging state and the health state of the vehicle battery A microcontroller (320) for checking the execution result of the duplicate execution of the operation and the execution state of the task and storing the result of the check;
A watchdog processor (310) for resetting the microcontroller when the output voltage of the vehicle battery deviates from a preset reference value range and when it is determined that the test result repeatedly appears abnormally;
And,
The microcontroller (320)
(SOC) and a health state (SOH) using the information obtained from the battery sensor unit, and stores the charged state and the health state of the vehicle battery in accordance with the calculation result, A main processor 326 for performing a status management operation;
A monitoring processor (323) for increasing an error counter when an error occurs in the operation sequence of the main processor, when the operation time of the main processor exceeds a preset time, or when the result of the redundant operation is different;
A memory (324) for storing the operation order and operation time of the main processor, and the result of the redundant operation;
And,
Wherein the watchdog processor (310) resets the microcontroller when the error counter value stored in the memory is equal to or greater than a predetermined threshold value.
delete The method according to claim 1,
A battery cooler 210 for performing temperature control of the vehicle battery in response to a cooling control signal according to the calculation result of the main processor;
The battery management system comprising: a battery;
The method according to claim 1,
The watchdog processor 310 includes an analog-to-digital converter for detecting the output voltage of the vehicle battery. The watchdog processor 310 checks whether the output voltage of the vehicle battery deviates from a preset reference value range whenever a clock is generated A battery management system for vehicles that takes safety into consideration.
There is provided a method of controlling a vehicle battery in consideration of function safety through a microcontroller for managing a state of charge and a state of health of a vehicle battery and a watchdog processor for monitoring the microcontroller,
The microcontroller obtaining the output current and temperature information of the vehicle battery;
The microcontroller repeatedly executing a preset operation for managing a state of charge (SOC) and a state of health (SOH) of the battery using output current and temperature information of the vehicle battery;
The microcontroller storing the result of the duplicate execution and the result of the examination of the task execution state according to the calculation result;
Resetting the microcontroller when the watchdog processor checks an output voltage of the vehicle battery and is out of a preset reference value range;
Increasing an error counter when the microcontroller has an error in the operation sequence of the task or when the operation time of the task exceeds a predetermined time or the results of the duplicated execution are different from each other;
The watchdog processor checking the error counter and resetting the microcontroller if the error counter is greater than a predetermined threshold;
And a control unit for controlling the battery.
delete A computer-readable recording medium storing a vehicle battery control program for causing a computer to execute a vehicle battery control method in consideration of function safety according to claim 5. delete

Images