KR20190139759A - System and Method for Transmitting and Receiving Safety Information in Wireless - Google Patents

Abstract

The present invention relates to a wireless safety information transmission/reception system capable of wirelessly transmitting/receiving first safety information about an object to be controlled and second safety information representing whether an error occurs in the object to be controlled with one microprocessor; and a method thereof. According to one embodiment of the present invention, the wireless safety information transmission/reception system comprises: a first slave controller generating first and second safety information by using sensing data acquired from an object to be controlled; and a master controller receiving the first and second safety information from the first slave controller through a wireless channel. The first slave controller transmits the second safety information to a second slave controller when an error occurs in the first slave controller, and the second slave controller transmits the second safety information received from the first slave controller to the master controller.

Description

Safety information wireless transmission system and method {System and Method for Transmitting and Receiving Safety Information in Wireless}

The present specification relates to a method and a system for transmitting and receiving safety information.

In a system requiring safety, a control device including a slave controller and a master controller is used for stable control of a control object. The slave controller obtains safety information from the control target through sensing or monitoring the control target, and transmits the obtained safety information to the master controller. The master controller checks the state of the control object or generates an appropriate control command for the control object based on the safety information received from the slave controller.

When an error occurs in the slave controller in such a control device, the master controller cannot normally obtain safety information of the control target or abnormal safety information may be obtained, and thus, the master controller cannot accurately control the control target. Occurs.

In order to solve the above problems, a method of designing a slave controller to have two or more microprocessors has been proposed. In the case of a slave controller including two or more microprocessors, even if an error occurs in any one of the microprocessors, the safety information can be transmitted to the master controller through another microprocessor, thereby allowing the master controller to accurately control the control target. .

However, when two or more microprocessors are mounted in the slave controller, not only the design complexity inside the slave controller increases but also the control cost of the controller increases due to the increase in the number of microprocessors.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problem, and wireless transmission / reception of safety information capable of generating first safety information on a control target and second safety information indicating whether an error occurs on a control target using one microprocessor It is a technical problem to provide a system and a method.

Another object of the present invention is to provide a wireless transmission / reception system and method for safety information capable of wirelessly transmitting and receiving safety information.

Another object of the present invention is to provide a wireless transmission / reception system and method capable of transmitting and receiving safety information of a first slave controller using a second slave controller when an error occurs in the first slave controller.

According to an embodiment of the present disclosure, a wireless transmission / reception system of safety information may include: a first slave controller configured to generate first safety information and second safety information by using sensing data obtained from a control object; And a master controller configured to receive the first safety information and the second safety information from the first slave controller through a wireless channel, wherein the first slave controller includes the second safety information when an error of the first slave controller occurs. It is characterized in that the second slave controller, and the second slave controller transmits the second safety information received from the first slave controller to the master controller.

Wireless transmission and reception method of the safety information according to an embodiment of the present disclosure, the first slave controller to obtain the first and second sensing data from the control object; Generating, by the first slave controller, first safety information by converting the first sensing data into digital data, and generating second safety information by comparing the second sensing data with a predetermined reference range; And the first slave controller transmits the first and second safety information to the master controller through a wireless channel in a normal operation of the first slave controller, and transmits the second safety information when an error occurs in the first slave controller. And transmitting to the master controller through the two slave controllers.

According to the present invention, only one microprocessor can generate not only the first safety information for the control object but also the second safety information indicating whether the control object has an error, thereby reducing manufacturing cost and system design complexity. have.

Further, according to the present invention, since safety information can be transmitted / received in a wireless manner, a configuration such as a data bus required for transmitting safety information in a wired manner can be omitted, thereby further reducing system design complexity. .

In addition, according to the present invention, by mounting the first slave controller and the second slave controller on one board to transmit the safety information of the first slave controller wirelessly to the master controller through the second slave controller in the event of an error of the first slave controller. As a result, the system design complexity and manufacturing cost can be maximized and system safety can be improved.

1 is a block diagram showing a schematic configuration of a safety information wired transmission and reception system according to an embodiment of the present invention.
2 is a block diagram schematically illustrating a configuration of a slave controller according to an embodiment of the present invention.
3 is a diagram illustrating an example of generating second safety information.
4 is a diagram illustrating another example of generating second safety information.
5 is a diagram illustrating an example in which the safety information wired transmission / reception system illustrated in FIG. 1 is applied to a battery management system.
6 is a diagram illustrating an example in which the slave controller illustrated in FIG. 2 is applied to a battery management system.
7 is a block diagram showing the configuration of a safety information wireless transmission and reception system according to an embodiment of the present invention.
FIG. 8 is a block diagram schematically illustrating a configuration of the master controller shown in FIG. 6.
FIG. 9 is a block diagram schematically illustrating a configuration of a slave controller shown in FIG. 6.
FIG. 10 is a diagram illustrating an example in which the safety information wireless transmission / reception system illustrated in FIG. 7 is applied to a battery management system.
FIG. 11 is a diagram illustrating an example in which the slave controller shown in FIG. 9 is applied to a battery management system.
12 is a diagram illustrating a schematic configuration of an electric vehicle to which the safety information wireless transmission / reception system illustrated in FIG. 7 is applied.
FIG. 13 is a diagram illustrating a configuration of a battery management system when the safety information wireless transmission / reception system illustrated in FIG. 7 is applied to an electric vehicle.
14 is a flowchart illustrating a method of wirelessly transmitting and receiving safety information according to an embodiment of the present invention.

Like numbers refer to like elements throughout. In the following description, detailed descriptions of configurations and functions known in the art and not related to the core configuration of the present invention may be omitted. The meaning of the terms described herein will be understood as follows.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in various forms, and only the present embodiments are intended to complete the disclosure of the present invention, and the general knowledge in the art to which the present invention pertains. It is provided to fully convey the scope of the invention to those skilled in the art, and the present invention is defined only by the scope of the claims.

Shapes, sizes, ratios, angles, numbers, and the like disclosed in the drawings for describing the embodiments of the present invention are exemplary, and the present invention is not limited to the illustrated items. Like reference numerals refer to like elements throughout. In addition, in describing the present invention, if it is determined that the detailed description of the related known technology may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

In the case where 'comprises', 'haves', 'consists of' and the like mentioned in the present specification are used, other parts may be added unless 'only' is used. In the case where the component is expressed in the singular, the plural includes the plural unless specifically stated otherwise.

In interpreting a component, it is interpreted to include an error range even if there is no separate description.

In the case of the description of the positional relationship, for example, if the positional relationship of the two parts is described as 'on', 'upon', 'lower', 'next to', etc. Alternatively, one or more other parts may be located between the two parts unless 'direct' is used.

In the case of a description of a temporal relationship, for example, if the temporal after-term relationship is described as 'after', 'following', 'after', 'before', etc. This may include cases that are not continuous unless used.

The first, second, etc. are used to describe various components, but these components are not limited by these terms. These terms are only used to distinguish one component from another. Therefore, the first component mentioned below may be a second component within the technical spirit of the present invention.

The "X-axis direction", "Y-axis direction" and "Z-axis direction" are not to be interpreted only as a geometric relationship in which the relationship between each other is perpendicular, and is wider than the range in which the configuration of the present invention can function. It may mean having directionality.

The term "at least one" should be understood to include all combinations which can be presented from one or more related items. For example, the meaning of "at least one of the first item, the second item, and the third item" means not only the first item, the second item, or the third item, but also two of the first item, the second item, and the third item, respectively. It can mean a combination of all items that can be presented from more than one.

The features of each of the various embodiments of the invention may be combined or combined with one another, in whole or in part, and various interlocking and driving technically may be possible, and each of the embodiments may be independently implemented with respect to each other or may be implemented in association with each other. It may be.

Hereinafter, embodiments of the present disclosure will be described in detail with reference to the accompanying drawings.

First, a brief description will be given of a system for transmitting and receiving safety information by wire before explaining the wireless transmission / reception system of safety information according to the present invention. 1 is a block diagram showing a schematic configuration of a safety information wired transmission and reception system according to an embodiment of the present invention.

As shown in FIG. 1, the safety information wired transmission / reception system 100 includes a master controller (MC) 110 and a slave controller (SC) 120. In one embodiment, the slave controller 120 may be composed of N (SC # 1 ~ SC # N, N is a natural number of two or more).

The master controller 110 is connected to the first to Nth slave controllers SC # 1 to SC # N through the first communication channel 130. In an embodiment, the first communication channel 130 may be a communication channel of a controller area network (CAN) method, a universal asynchronous receiver / transmitter (UART) method, or a serial peripheral interface (SPI) method. The master controller 110 may be connected in parallel to the first to Nth slave controllers SC # 1 to SC # N through the first communication channel 130.

When the first communication channel 130 is CAN, the master controller 110 communicates with the first to Nth slave controllers SC # 1 to SC # N through a bus line through CAN communication. .

The master controller 110 receives the first through Nth slave controllers SC # 1 through SC # N from the first through Nth slave controllers SC # 1 through SC # N through the first communication channel 130. Receive respective first safety information. In one embodiment, the first safety information is used for the safety of the control target 140 obtained from the control target CT 140 by the first to Nth slate controllers SC # 1 to SC # N. May include relevant information. For example, the first safety information may include a voltage, current, temperature, pressure, volume, length, time, etc. of the control object 140.

Meanwhile, the master controller 110 may be connected to the first to Nth slave controllers SC # 1 to SC # N through the second communication channel 150 that is physically separated from the first communication channel 130. Can be. In one embodiment, the master controller 110 may be connected in series with the first to Nth slave controllers SC # 1 to SC # N in a daisy chain manner. That is, the master controller 110 may be connected to the first to Nth slave controllers SC # 1 to SC # N in a ring structure as shown in FIG. 1.

The master controller 110 may receive fault information via the first through Nth slave controllers SC # 1 through SC # N through the second communication channel 150. The fault information means information indicating whether an error occurs in the control object 140. As described above, according to the present invention, the master controller 110 has an error in the first to Nth slave controllers SC # 1 to SC # N, and thus the first safety from the slave controllers SC # 1 to SC # N. Even if the information is not received, it is possible to check whether an error occurs in the control object 140 using fault information received through the second communication channel 150.

In one embodiment, the master controller 110 may determine that the control object 140 is operating normally when the first fault information is received through the second communication channel 150, and when the second fault information is received. It may be determined that the control target 140 is not operating normally.

Accordingly, when the master controller 110 does not receive the first safety information through the first communication channel 130 and receives the first fault information through the second communication channel 150, the control object 140 operates normally. However, it may be determined that an error has occurred in the first to Nth slave controllers SC # 1 to SC # N.

In addition, when the first safety information is received through the first communication channel 130 but the second fault information is received through the second communication channel 150, the master controller 110 indicates that an error occurs in the control object 140. You can judge. In this case, the master controller 110 has an error in any control object 140 among the control objects 140 connected to the first to Nth slave controllers SC # 1 to SC # N based on the first safety information. It can be further determined whether or not.

In addition, if the first safety information is not received through the first communication channel 130 and the second fault information is received through the second communication channel 150, the master controller 110 controls the control object 140 and the first through the first to the second communication information. It may be determined that an error has occurred in the Nth slave controllers SC # 1 to SC # N.

The first to Nth slave controllers SC # 1 to SC # N transfer first safety information to the master controller 110 through the first communication channel 130, and fault through the second communication channel 150. The information is transmitted to the master controller 110.

Hereinafter, a slave controller according to an exemplary embodiment of the present invention will be described in more detail with reference to FIG. 2.

2 is a block diagram schematically illustrating a configuration of a slave controller according to an embodiment of the present invention. Since the first to Nth slave controllers SC # 1 to SC # N shown in FIG. 1 all have the same configuration as shown in FIG. 2, the first to Nth slave controllers SC will be described below for convenience of description. A configuration of the slave controller will be described based on the first slave controller SC # 1 among # 1 to SC # N.

Referring to FIG. 2, the first slave controller SC # 1 includes a microcontroller 2110 and a sensing unit 2120. In FIG. 2, the first slave controller SC # 1 includes only the microcontroller 2110 and the sensing unit 2120, but this clearly clarifies the function of the first slave controller SC # 1. Only for illustrative purposes, the first slave controller SC # 1 may further include other general components for controlling the control target CT1.

In addition, although the first slave controller SC # 1 has been described as including the sensing unit 2120 in FIG. 2, in the modified embodiment, the sensing unit 2120 is separate from the first slave controller SC # 1. It may be configured. Hereinafter, for the convenience of description, the configuration of the first slave controller SC # 1 will be described based on the fact that the first slave controller SC # 1 includes the sensing unit 2120.

The microcontroller 2110 receives first sensing data and second sensing data from the sensing unit 2120, respectively. The microcontroller 2110 generates first safety information based on the first sensing data and transmits the first safety information to the master controller 110 through the first communication channel 130.

In addition, the microcontroller 2110 generates second safety information based on the second sensing data, and generates the second safety information from a reference signal received from the master controller 110 through the second communication channel 150. Fault information is generated by comparison. The microcontroller 2110 transmits fault information to the second slave controller SC # 2.

To this end, the microcontroller 2110 uses the processing unit 2111, the communication module 2112, the analog-to-digital converter 2113, the comparator 2115, and the fault information generator 2116 as shown in FIG. 2. It may include.

The analog-to-digital converter 2113 converts the first sensing data received from the sensing unit 2120 into digital data and outputs the digital data to the processing unit 2111, which is processed by the analog-to-digital converter 2113. The first sensing data, which is converted into, is converted into a communication packet suitable for the first communication channel 130 to generate first safety information. The processing unit 2111 sends the first safety information to the communication module 2112.

The processing unit 2111 receives control information received from the master controller 110 through the communication module 2112, and controls the first control target CT1 according to the input control information. For example, when the first control target CT1 is a battery and control information for battery balancing is received from the communication module 2112, the processing unit 2111 may charge or discharge the battery based on the control information for battery balancing. By controlling, the balancing between the batteries can be maintained.

The communication module 2112 transmits first safety information received from the processing unit 2111 to the master controller 110 through the first communication channel 130.

In the above-described embodiment, the processing unit 2111 converts the format of the first safety information to generate the first safety information. However, in the modified embodiment, the processing unit 2111 is converted into digital data. When the first sensing data is transmitted to the communication module 2112, the communication module 2112 converts the first sensing data converted into digital data into a communication packet suitable for the first communication channel 130 to generate first safety information. You can do it.

The comparator 2115 receives the second sensing data from the sensing unit 2120, compares the second sensing data with the reference range, and transmits the comparison result to the fault information generation unit 2116.

The fault information generator 2116 generates second safety information based on the comparison result of the comparator 2115. In detail, the fault information generator 2116 generates the second safety information of the first level when the second sensing data is determined by the comparator 2115 to be within the reference range, and the second sensing by the comparator 2115. If it is determined that the data is out of the reference range, the second safety information of the second level is generated.

For example, when the first control target CT1 is a battery, the second sensing data may be a battery voltage, a battery current, or a battery temperature, and the predetermined reference range may be a normal voltage range, a normal current range, or a normal temperature range. Can be.

For example, when the second sensing data is the battery voltage and the predetermined reference range is the normal voltage range, when it is determined by the comparator 2115 that the second sensing data is within the predetermined reference range, the fault information generator 2116 may determine the first information. The second safety information of the first level is generated by determining that the voltage of the battery, which is the control target CT, is normal.

However, if it is determined by the comparator 2115 that the second sensing data is smaller than the lower limit of the predetermined reference range, the fault information generator 2116 determines that the battery, which is the first control target CT, is over discharged. Generates two levels of second safety information. In addition, when it is determined by the comparator 2115 that the second sensing data is larger than an upper limit of the predetermined reference range, the fault information generator 2116 determines that the battery, which is the first control target CT, is overcharged to a second level. Generates 2 safety information.

Meanwhile, when the second safety information is generated, the fault information generator 2116 generates fault information by using the generated second safety information and a reference signal output from the master controller 110. In this case, the reference signal is generated by the master controller 110 and may be the same value as the second safety information of the first level indicating fault occurrence or may be fault information generated by another slave controller.

In one embodiment, the fault information generator 2116 outputs the first fault information when both the level of the second safety information and the reference signal are the first level, and the level of any one of the second safety information and the reference signal is increased. If the second level, the second fault information is output. In this case, the first fault information may have the same form as the second safety information of the first level, and the second fault information may have the same form as the safety information of the second level.

For example, as illustrated in FIGS. 3A and 3B, if the reference signal and the second safety information are both at the first level V1 indicating the occurrence of a fault, the fault information generator 2116 may use FIG. 3. As shown in (c), first fault information having a first level V1 indicating fault occurrence is generated.

As another example, as shown in FIG. 4A, the reference signal is a first level V1 indicating non-occurrence of a fault, but as shown in FIG. 4B, the second safety information is a second level indicating fault occurrence. If it is (V2), the fault information generation unit 2116 generates second fault information having a second level V2 indicating fault occurrence as shown in Fig. 4C.

Referring to FIG. 2 again, the sensing unit 2120 may include a first sensing unit 2121 and a second sensing unit 2122. Each of the first and second sensing units 2121 and 2122 obtains first and second sensing data from the first control target CT.

The first sensing unit 2121 obtains first sensing data from the first control target CT1 and transmits the first sensing data to the analog-to-digital converter 2113. In an embodiment, the first sensing unit 2121 may transmit the first sensing data to the analog-to-digital converter 2113 in the form of a differential signal using two signal lines.

The second sensing unit 2122 obtains second sensing data from the first control target CT1 and transmits the second sensing data to the comparator 2115. In an embodiment, the second sensing unit 2122 may transmit the second sensing data to the comparator 2115 using one signal line.

In this case, the first sensing data and the second sensing data may be the same value obtained from the first control target CT1. For example, when the first control target CT1 is a battery, the first and second sensing data may be voltage values or temperatures of the battery.

As described above, the first sensing data is converted into first safety information by the microcontroller 2110 and transmitted to the master controller 110 through the first communication channel 130, and the second sensing data is compared with the comparator 2115. And the fault information generation unit 2116 is converted into fault information and transmitted to the second slave controller SC # 2.

In the present invention, the first sensing data is transmitted in the form of a differential signal using two signal lines and the second sensing data is transmitted using one signal line. In the case of the first sensing data, the master controller 110 This value is used to analyze characteristics of the first control target CT1 (eg, cell balancing, state of charge (SoC), life state (SoH), and safety information, etc.), so it must be transmitted accurately compared to the second sensing data. Because.

As described above, in the present invention, the first sensing data is transmitted to the analog-to-digital converter 2113 in the form of a differential signal by using two signal lines, so that the first sensing data can be transmitted at an accurate value than when transmitted to one signal line. The system reliability can be improved, and the second sensing data can be transmitted using one signal line, thereby simultaneously reducing circuit complexity and reducing costs.

As described above, in the present invention, the master controller 110 communicates with a plurality of slave controllers SC # 1 to SC # N and a plurality of communication channels, for example, a first communication channel 130 and a second communication. Communicate using channel 150. In particular, the present invention utilizes the first communication channel 130 as a main communication channel for transmitting and receiving digital data such as first safety information, and the second communication channel 150 to determine whether an error of the control object 140 occurs. It is used as a sub communication channel for receiving fault information for transmission.

In particular, the present invention provides a comparator 2115 without having to add a separate microcontroller to transmit fault information to each of the first to Nth slave controllers SC # 1 to SC # N through the second communication channel 150. ) And only a simple component such as the fault information generator 2116 can minimize the increase in manufacturing cost and increase the safety of the system.

In one embodiment, the safety information wired transmission / reception system 100 according to the present invention may be applied to a battery management system (BMS) as shown in FIGS. 5 and 6.

When the safety information transceiving system 100 according to the present invention is applied to a BMS, the first to Nth slave controllers SC # 1 to SC # N generate the voltage or temperature of the battery as safety information, and the voltage or temperature Is determined whether or not is included in the reference range can generate the fault information.

5 and 6, the AFE represents the sensing unit 2120, the MCU represents the microcontroller 2110, the CVD1 and CVD2 represent the first sensing unit 2121 and the second sensing unit 2122, and the ADC, The CPU and CAN represent the analog digital conversion unit 2113, the processing unit 2111, and the communication module 2112, respectively, and the CVTC and the CFSC represent the comparator 2115 and the fault information generation unit 2116, respectively. In particular, the BMS to which the safety information wired transmission / reception system 100 according to the present invention may be applied may be a BMS for an electric vehicle.

1 to 6 have described the safety information wired transmission and reception system according to the present invention. Hereinafter, a safety information wireless transmission / reception system capable of wirelessly transmitting safety information will be described with reference to FIGS. 7 to 11.

7 is a diagram illustrating a configuration of a safety information wireless transmission / reception system 700 according to an embodiment of the present invention. As shown in FIG. 7, the safety information wireless transmission / reception system 700 includes a master controller (MC) 710 and a slave controller (SC) 720. In one embodiment, the slave controller 720 may be composed of N (SC # 1 ~ SC # N, N is a natural number of two or more).

The master controller 710 is configured to control each of the first to Nth slave controllers SC # 1 to SC # N from the first to Nth slave controllers SC # 1 to SC # N through the wireless channel 730. Receive first safety information and second safety information.

In one embodiment, the first safety information may include information related to the safety of the control target 740 obtained from the control target 740 by the first to Nth slave controllers SC # 1 to SC # N. Can be. For example, the first safety information may include a voltage, a current, a temperature, a pressure, a volume, a length, a time, and the like of the control target 740. In addition, the second safety information may include information indicating whether an error occurs in the control object 740. For example, the second safety information may include information on whether the voltage or temperature of the control target 740 is out of the reference range.

In one embodiment, the master controller 710 according to the present invention is another slave controller for which no error occurs when an error occurs in any one of the first to Nth slave controllers SC # 1 to SC # N. Through the second safety information of the slave controller having an error can be received. To this end, in the first to Nth slave controllers SC # 1 to SC # N according to the present invention, a plurality of slave controllers (for example, two) may be mounted on one board.

As described above, according to the present invention, even if an error occurs in any one of the first to Nth slave controllers SC # 1 to SC # N, the master controller 710 receives the second safety information of the slave controller in which the error occurs. Since it can be wirelessly received through another slave controller mounted on the same board as the slave controller in which the error occurs, it is possible to check whether an error has occurred in the control target 740.

Hereinafter, the configuration of the master controller 710 according to the present invention will be described in detail with reference to FIG. 8.

8 is a block diagram schematically illustrating a configuration of a master controller according to an embodiment of the present invention. As shown in FIG. 8, the master controller 710 according to an embodiment of the present invention includes a transceiver 810, a controller 820, and a command generator 830.

The transceiver 810 receives the first safety information and the second safety information from the N slave controllers SC # 1 to SC # N through the wireless channel 730, and transmits the first safety information and the second safety information to the controller 820. In addition, the transceiver 810 receives control information from the controller 820 and transmits the control information to the N slave controllers SC # 1 to SC # N.

Particularly, when a command for requesting transmission of the second safety information of the slave controller in which an error occurs is received from the command generator 830, the transceiver 810 according to the present invention transmits the received command to the same board as the slave controller in which the error occurs. Transfers to other slave controller mounted in.

The controller 820 analyzes the characteristics of the control target 740 based on the first safety information received through the transceiver 810. In detail, the controller 820 monitors the state of the control target 740 such as voltage or temperature based on the first safety information, such as characteristics of the control target 740 (eg, cell balancing, state of charge (SoC), and lifespan). State (SoH), safety information, etc.).

In addition, the controller 820 determines whether an error occurs in the first to Nth slave controllers SC # 1 to SC # N or the control target 740 based on the second safety information received through the transceiver 810. You can judge. In detail, if the second safety information is not received from the first to Nth slave controllers SC # 1 to SC # N in a predetermined cycle, the controller 820 may fail to the slave controller that has not transmitted the second safety information. It is determined that has occurred.

According to this embodiment, the control unit 820 notifies the command generation unit 830 of the result so that the command generation unit 830 generates a command for obtaining second safety information of the slave controller in which an error has occurred. . As described above, according to the present invention, the second safety information is not received from the first to Nth slave controllers SC # 1 to SC # N because an error occurs in the first to Nth slave controllers SC # 1 to SC # N. If not, it is possible to determine whether an error has occurred in the control object 140 based on the second safety information received through another slave controller that does not generate an error, thereby improving the stability of the system.

On the other hand, when the second safety information of the second level indicating the fault occurrence of the control target 740 is received from the slave controllers SC # 1 to SC # N, the controller 820 corresponds to the control target corresponding to the second safety information. If it is determined that an error has occurred at 740, and second safety information of a first level indicating fault occurrence does not occur, it is determined that the control target 740 corresponding to the second safety information is operating normally.

In addition, the controller 820 generates control information for controlling the control target 740 based on the first safety information, and transmits the generated control information to each slave controller SC # 1 to SC through the transceiver 820. #N).

If it is determined by the controller 820 that there is a slave controller that does not transmit the second safety information, the command generator 830 may obtain second safety information of the slave controller so as to obtain second safety information of the slave controller. Generates a command to obtain the signal and transmits it to the transceiver 810.

According to an embodiment, the command for acquiring the second safety information of the slave controller may include a request for information on another slave controller mounted on the same board as the slave controller and a request for transmission of the second safety information of the slave controller. have. According to such an embodiment, the transceiver 810 may accurately transmit a command for obtaining second safety information of the corresponding slave controller to another slave controller based on the information of the other slave controller.

Referring back to FIG. 7, each of the first to Nth slave controllers SC # 1 to SC # N generates first safety information and second safety information to generate a mast controller 710 through a wireless channel 730. To send.

Particularly, in the safety information wireless transmission / reception system 700 according to the present invention, when an error occurs in any one of the first to Nth slave controllers SC # 1 to SC # N, the slave controller does not generate an error. Is transmitted to the master controller 710 in place of the second safety information of the generated slave controller.

Hereinafter, the configuration of the slave controller according to the present invention will be described in more detail with reference to FIG. 9.

9 is a block diagram illustrating a configuration of a slave controller according to an embodiment of the present invention. As shown in FIG. 9, in the slave controllers SC # 1 to SC # N according to the present invention, a plurality of slave controllers SC # 1 and SC # 2 are connected to one board 910. It is mounted together.

For example, as shown in FIG. 9, when the first slave controller SC # 1 and the second slave controller SC # 2 are mounted together on one board 910, the first slave controller SC # 1 is mounted. Error occurs, the second slave controller SC # 2 transmits the second safety information of the first slave controller SC # 1 instead of the master controller 710, and the second slave controller SC # 2. If an error occurs, the first slave controller SC # 1 transfers the second safety information of the second slave controller SC # 2 to the master controller 710 instead.

Since the functions of the first slave controller SC # 1 and the second slave controller SC # 2 are the same, the following description will focus on the functions of the first slave controller SC # 1 for convenience of description.

The first slave controller SC # 1 includes a microcontroller 8110 and a sensing unit 8120. In FIG. 9, although the first slave controller SC # 1 includes only the microcontroller 8110 and the sensing unit 8120, this clearly clarifies the function of the first slave controller SC # 1. Only for illustrative purposes, the first slave controller SC # 1 may further include other general components for controlling the control target CT1.

In addition, although the first slave controller SC # 1 has been described as including the sensing unit 8120 in FIG. 9, in the modified embodiment, the sensing unit 8120 may be separate from the first slave controller SC # 1. It may be configured.

The microcontroller 8110 receives the first sensing data and the second sensing data from the first sensing unit 2120, respectively. The microcontroller 8110 generates first safety information based on the first sensing data and transmits the first safety information to the master controller 710 through the wireless channel 730.

In addition, the microcontroller 8110 generates second safety information based on the second sensing data. In particular, the microcontroller 8110 according to the present invention requests to transmit the second safety information of the first slave controller SC # 1 from the second slave controller SC # 2 when an error occurs in the first slave controller SC # 1. When received, the second safety information is transmitted to the master controller 710 through the second slave controller SC # 2 by transmitting the second safety information to the second slave controller SC # 2.

The micro controller 8110 may transmit the second safety information to the second slave controller SC # 2 when the second safety information transmission request of the second slave controller SC # 2 is received from the master controller 710. A second safety information of the second slave controller (SC # 2) is obtained from the second slave controller (SC # 2) and transmitted to the master controller (710) through the wireless channel (730).

As illustrated in FIG. 8, the microcontroller 8110 may include a processing unit 8111, an analog-digital converter 8113, a first communication module 8112, a comparator 8215, a second safety information generator 8216, and the like. And a second communication module 8217.

The analog-to-digital converter 8113 converts the first sensing data received from the sensing unit 8120 into digital data and transmits it to the processing unit 8111, and the processing unit 8111 is a digital input from the analog-digital converter 8113. The first sensing data converted into data is converted into a communication packet suitable for the wireless channel 730 to generate first safety information. The processing unit 8111 sends the first safety information to the first communication module 8112.

The processing unit 8111 receives control information received from the master controller 710 through the first communication module 8112, and controls the first control target CT1 according to the input control information. For example, when the first control target CT1 is a battery and control information for battery balancing is received from the first communication module 8112, the processing unit 8111 may charge the battery based on the control information data for battery balancing. Alternatively, by controlling the discharge, balancing between the batteries can be maintained.

In particular, the processing unit 8111 according to the present invention receives a second safety information transmission request of the second slave controller SC # 2 from the master controller 710, and transmits the second safety information to the second slave controller SC # 2. The second safety information of the slave controller SC # 2 is requested and the second safety information of the second slave controller SC # 2 is received from the second slave controller SC # 2. The processing unit 8111 converts the second safety information of the second slave controller SC # 2 into a communication packet suitable for the wireless channel 730 and transmits the converted safety packet to the first communication module 8112.

In an embodiment, the processing unit 8111 and the second slave controller SC # 2 of the first slave controller SC # 1 may be connected through the wired channel 850. For example, the processing unit 8111 and the second slave controller SC # 2 of the first slave controller SC # 1 are configured of a serial data line (SDA) line and a serial clock (SCL) line. It may be connected to each other through an I2C (Inter Integrated Circuit) bus 920. In this case, the processing unit 8111 of the first slave controller SC # 1 operates as the I2C master and the second slave controller SC # 2 operates as the I2C slave.

In the above-described embodiment, the processing unit 8111 and the second slave controller SC # 2 have been described as being connected by a 2-wire I2C bus. However, this is only one example. The slave controller SC # 2 may be connected by a 1 wire interface method.

The first communication module 8112 transmits the first safety information received from the processing unit 8111 or the second safety information of the second slave controller SC # 2 to the master controller 710 through the wireless channel 730. do. In addition, the first communication module 8112 outputs the control information transmitted from the master controller 710 to the processing unit 8111.

In the above-described embodiment, although the processing unit 8111 has been described as converting the first sensing data into a format of the radio channel, the first safety information is generated, but in the modified embodiment, the processing unit 8111 is digital data. When the first sensing data converted into the first sensing module 8112 is transmitted to the first communication module 8112, the first communication module 8112 converts the first sensing data converted into digital data into a communication packet suitable for the wireless channel 730. You might want to create one safety information.

The comparator 8215 receives the second sensing data from the sensing unit 8120, compares the second sensing data with a predetermined reference range, and transmits the comparison result to the second safety information generator 8216.

The second safety information generator 8216 generates second safety information based on the comparison result by the comparator 8215. In detail, when the second safety information generator 8216 determines that the second sensing data is within the reference range by the comparator 8215, the second safety information generator 8216 generates second safety information of the first level, and by the comparator 8215. When the second sensing data is determined to be out of the reference range, the second safety information of the second level is generated.

For example, when the first control target CT1 is a battery, the second sensing data may be a battery voltage, a battery current, or a battery temperature, and the predetermined reference range may be a normal voltage range, a normal current range, or a normal temperature range. Can be.

For example, when the second sensing data is the battery voltage and the predetermined reference range is the normal voltage range, when the second sensing data is determined to be within the predetermined reference range by the comparator 8151, the second safety information generator 8216 It is determined that the voltage of the battery is normal to generate second safety information of the first level.

However, when it is determined by the comparator 8215 that the second sensing data is smaller than the lower limit of the predetermined reference range, the second safety information generator 8216 determines that the battery is over discharged and thus the second safety of the second level. Generate information. In addition, when it is determined by the comparator 8215 that the second sensing data is larger than an upper limit of a predetermined reference range, the second safety information generator 8216 determines that the battery is overcharged and generates second safety information of the second level. do.

Although not shown in the drawing, the second safety information generator 8216 provides the generated second safety information to the first communication module 8112 so that the second safety information is transmitted to the master controller 710 through the wireless channel 730. Can be sent. In this case, the second safety information generator 8216 may convert the second safety information into a form suitable for the wireless channel 730 and transmit it to the first communication module 710.

As another example, the second safety information generator 8216 transmits the generated second safety information to the processing unit 8111 so that the processing unit 8111 converts the second safety information into a form suitable for the wireless channel 730. The first communication module 710 may be transmitted.

As another example, the second safety information generator 8216 may provide the generated second safety information to the first communication module 8112, and the first communication module 8112 may transmit the second safety information to the wireless channel 730. It may be converted to a form suitable for the transmission to the master controller 710.

On the other hand, when it is determined that an error has occurred in the first slave controller SC # 1, for example, when it is determined that an error has occurred in the first communication module 8112, the first slave controller SC # 1 has a first appearance. Safety information and second safety information may not be transmitted to the master controller 710.

In order to prepare for such a case, the microcontroller 8110 according to the present invention includes a second communication module 8217 to transmit at least the second safety information to the master controller 710.

In detail, the second communication module 8217 is connected to the second slave controller SC # 2, more specifically, the processing unit 9111 of the second slave controller SC # 2 through the wired channel 960. For example, the second communication module 8217 is connected to each other through an I2C bus 930 composed of a processing unit 9111 of the second slave controller SC # 2 and a serial data (SDA) line and a serial clock (SCL) line. do. In this case, the second communication module 9171 of the first slave controller SC # 1 operates as an I2C slave and the processing unit 9111 of the second slave controller SC # 2 operates as an I2C master.

First, the second communication module 8217 may request for transmission of the second safety information of the first slave controller SC # 1 from the processing unit 9111 of the second slave controller SC # 2 through the I2C bus 930. When received, the second safety information of the first slave controller SC # 1 is transferred to the processing unit 9111 of the second slate controller SC # 2 through the I2C bus 930.

In the above-described embodiment, the second communication module 8217 and the processing unit 9111 of the second slave controller (SC # 2) have been described as being connected by a 2-wire I2C bus, but this is only one example. The second communication module 8217 and the processing unit 9111 of the second slave controller SC # 2 may be connected by a 1 wire interface method.

As described above, the present invention is connected to the first slave controller (SC # 1) and the second slave controller (SC # 2) by wire through the second communication module (8117), of the first slave controller (SC # 1) When an error occurs, since the second safety information of the first slave controller SC # 1 may be transmitted to the master controller 710 through the second slave controller SC # 2, the master controller 710 may control the first control target CT1. ) Can be checked regardless of whether an error of the first slave controller (SC # 1) occurs.

Referring back to FIG. 9, the sensing unit 8120 may include a first sensing unit 8121 and a second sensing unit 8122. Each of the first and second sensing units 8121 and 8122 obtains first and second sensing data from the first control object CT1.

The first sensing unit 8121 obtains first sensing data from the first control target CT1 and transmits the first sensing data to the analog-to-digital converter 8113. In an embodiment, the first sensing unit 8121 may transmit the first sensing data to the analog-to-digital converter 8113 in the form of a differential signal using two signal lines.

The second sensing unit 8122 obtains the second sensing data from the first control target CT1 and transmits the second sensing data to the comparator 8215. In an embodiment, the second sensing unit 8122 may transmit the second sensing data to the comparator 8215 using one signal line.

In this case, the first sensing data and the second sensing data may be the same value obtained from the first control target CT1. For example, when the first control target CT1 is a battery, the first and second sensing data may be voltage values of the battery.

In the present invention, the first sensing data is transmitted in the form of a differential signal using two signal lines, and the second sensing data is transmitted using one signal line, in the case of the first sensing data in the master controller 710. This value is used to analyze characteristics of the first control target CT1 (eg, cell balancing, state of charge (SoC), life state (SoH), and safety information, etc.), so it must be transmitted accurately compared to the second sensing data. Because.

As described above, in the present invention, the first sensing data is transmitted to the analog-to-digital converter 8313 in the form of a differential signal by using two signal lines, so that the first sensing data can be transmitted to an accurate value than when transmitted to one signal line. The system reliability can be improved, and the second sensing data can be transmitted using one signal line, thereby simultaneously reducing circuit complexity and reducing costs.

As described above, one embodiment of the present specification provides a first control target CT1 even with a simple configuration such as a simple comparator 8215 and a second safety information generator 8216 without having an additional microprocessor in the slave controller. Secondary safety information can be generated to check whether an error has occurred, thereby minimizing cost increase and design complexity and increasing system safety. In particular, in the present invention, not only the first safety information but also the second safety information can be transmitted in a wireless manner, so that a configuration such as a bus line required in a wired communication can be omitted, further increasing costs and increasing design complexity. You can do it.

In an embodiment, the safety information wireless transmission / reception system 700 according to the present invention may also be applied to a battery management system (BMS) in the same manner as the wired transmission / reception system 100 of safety information illustrated in FIG. 1. . When the wireless transmission / reception system 700 of safety information according to the present invention is applied to a BMS, the plurality of slave controllers SC # 1 to SC # N may control the voltage or temperature of the battery to be controlled 740 as the first safety. The second safety information may be generated by generating the information and determining whether the voltage or the temperature is within the reference range. 10 and 11 illustrate an example in which the safety information wireless transmission / reception system 700 according to the present invention is applied to a battery management system.

10 and 11, the AFE corresponds to the sensing unit 8120, the MCU corresponds to the microcontroller 8110, and CVD1 and CVD2 represent the first sensing unit 8121 and the second sensing unit 8122, respectively. , ADC, CPU, RF represent analog-to-digital converter 8113, processing unit 8111, and first communication module 8112, respectively, CVTC, CFSC, I2C are comparators 8215, second safety information generation, respectively A part 8216 and a second communication module 8217 are shown.

In particular, the BMS to which the safety information wireless transmission / reception system 700 according to the present invention is applied may be a BMS for an electric vehicle. A schematic configuration of an electric vehicle to which the safety information wireless transmission / reception system 700 according to the present invention is shown is shown in FIG. 12, and a configuration of a BMS for an electric vehicle to which the safety information wireless transmission / reception system according to the present invention is applied is shown in FIG. 13. As shown in.

Hereinafter, a safety information wireless transmission and reception method according to the present invention will be described. 14 is a flowchart illustrating a method of wirelessly transmitting and receiving safety information according to an embodiment of the present invention.

The safety information wireless transmission / reception method illustrated in FIG. 14 may be performed by the safety information wireless transmission / reception system as illustrated in FIG. 7. Hereinafter, for the convenience of description, the operation of the slave controllers SC # 1 to SC # N will be described based on the operation of the first slave controller SC # 1.

First, the first slave controller SC # 1 obtains first and second sensing data from the first control target CT1 (S1400). In one embodiment, when the first control target CT1 is a battery, the first and second sensing data may be an output voltage, an output current, or a temperature of the battery.

Thereafter, the first slave controller SC # 1 generates first and second safety information based on the first and second sensing data in operation S1410. In detail, the first slave controller SC # 1 generates first safety information based on the first sensing data and generates second safety information based on the second sensing data.

Since the method of generating the first safety information based on the first sensing data of the first slave controller (SC # 1) and the method of generating the second safety information based on the second sensing data has been described with reference to FIG. 9. Detailed description will be omitted.

Thereafter, the first slave controller SC # 1 transmits the first and second sensing data to the master controller 710 through the wireless channel (S1420).

Thereafter, the master controller 710 determines whether an error of the first slave controller SC # 1 occurs (S1425). In one embodiment, the master controller 710 fails the first slave controller SC # 1 if the first sensing data or the second sensing data is not received from the first slave controller SC # 1 at a predetermined period. Can be determined to have occurred.

When the master controller 710 determines that an error occurs in the first slave controller SC # 1, the master controller 710 returns a second slave controller SC # 2 mounted on the same board as the first slave controller SC # 1. 1 Request for transmission of second safety information from slave controller SC # 1 (S1427).

Thereafter, the second slave controller SC # 2 requests to transmit second safety information to the first slave controller SC # 2 through the wired channel (S1430). In one embodiment, the wired channel may be an I2C bus consisting of a serial data (SDA) line and a serial clock (SCL) line.

Subsequently, the first slave controller SC # 1 transmits its second safety information to the second slave controller SC # 2 through a wired channel (S1440), and the second slave controller SC # 2 has a second slave information. 1, the second safety information of the slave controller SC # 1 is transmitted to the master controller 710 through the wireless channel (S1450).

Although not shown in FIG. 14, when it is determined that an error has occurred in the second slave controller SC # 1, the master controller 710 is the second slave controller SC # 2 as the first slave controller SC # 1. Request the transmission of the second safety information. In this case, the first slave controller SC # 1 requests the transmission of the second safety information to the second slave controller SC # 2 through the wired channel, and the second safety information from the second slave controller SC # 2. When S is transmitted, the second safety information of the second slave controller SC # 2 is transmitted to the master controller 710 through a wireless channel.

Those skilled in the art to which the present invention pertains will understand that the above-described present invention can be implemented in other specific forms without changing the technical spirit or essential features.

Therefore, it is to be understood that the embodiments described above are exemplary in all respects and not restrictive. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalent concepts should be construed as being included in the scope of the present invention. do.

8110: microcontroller 8120: sensing unit
8113: analog-to-digital converter 8111: processing unit
8112: first communication module 8115: comparator
8116: second safety information generator 8117: second communication module

Claims (18)

A first slave controller generating first safety information and second safety information by using sensing data obtained from a control object; And
A master controller configured to receive the first safety information and the second safety information from the first slave controller through a wireless channel,
The first slave controller transmits the second safety information to a second slave controller when an error of the first slave controller occurs, and the second slave controller transmits the second safety information received from the first slave controller to the master. Wireless transmission and reception system of safety information, characterized in that the transmission to the controller. The method of claim 1,
The first slave controller,
A first sensing unit connected to the control object to obtain first sensing data;
A second sensing unit connected to the control object to obtain second sensing data;
And converting the first sensing data into digital data to generate the first safety information, and comparing the second sensing data with a predetermined reference range to generate the second safety information. Wireless transmission and reception system of safety information. The method of claim 2,
The first sensing unit transmits the first sensing data to the microcontroller in the form of a differential signal using a plurality of signal lines,
And the second sensing unit transmits the second sensing data to the micro controller using one signal line. The method of claim 2,
The microcontroller
An analog to digital converter converting the first sensing data into the digital data;
A processing unit for converting the digital data into a communication packet according to the wireless channel to generate the first safety information;
If the second sensing data is within the reference range, the second safety information of the first level indicating fault occurrence is generated. If the second sensing data is out of the reference range, the second level of the second level indicating fault occurrence is generated. A second safety information generator for generating safety information; And
And a first communication module configured to transmit the first safety information and the second safety information to the master controller through the wireless channel. The method of claim 4, wherein
The microcontroller,
And a second communication module configured to transfer the second safety information to the second slave controller through a wired channel when an error of the first slave controller occurs. The method of claim 5,
The second communication module and the second slave controller are connected through a first inter integrated circuit (I2C) bus including a first serial data line (SDA) line and a first serial clock (SCL) line. Become,
And the second slave controller receives second safety information of the first slave controller through the first I2C bus and transmits the second safety information to the master controller through the wireless channel. The method of claim 4, wherein
The processing unit is connected through a second I2C bus including a controller of the second slave, a second serial data line, and a second serial clock line, and in response to the second slave controller to the second slave controller when the second slave controller fails A request for transmission of second safety information of a slave controller, and when second safety information of the second slave controller is received through the second I2C bus, the second safety information of the second slave controller is transmitted according to the wireless channel. Convert to,
And the first communication module transmits second safety information of the second slave controller to the master controller through the wireless channel. The method of claim 1,
The master controller,
If the first safety information or the second safety information is not received from the first slave controller in a predetermined period, request that the second slave controller transmit the second safety information of the first slave controller instead.
And determining whether an error of a control object connected to the first slave controller is determined by using second safety information of the first slave controller received through the second slave controller. The method of claim 1,
The control target is a battery, and the sensing data wireless transmission and reception system of the safety information, characterized in that at least one of the output voltage and temperature of the battery. The method of claim 1,
And the first slave controller receives second safety information of the second slave controller from the second slave controller and transmits the second safety information to the master controller when an error occurs in the second slave controller. The method of claim 1,
And the first and second slave controllers are mounted on a single board. Acquiring, by the first slave controller, first and second sensing data from a control object;
Generating, by the first slave controller, first safety information by converting the first sensing data into digital data, and generating second safety information by comparing the second sensing data with a predetermined reference range; And
The first slave controller transmits the first and second safety information to the master controller through a wireless channel in a normal operation of the first slave controller, and transmits the second safety information to the second controller when an error occurs in the first slave controller. And transmitting the safety information to the master controller via a slave controller. The method of claim 12,
The second slave controller is mounted on one board with the first slave controller, and the first and second slave controllers are configured with a serial data line (SDA) line and a serial clock (SCL) line. Connected via an Inter Integrated Circuit (I2C) bus,
In the transmitting, the first slave controller is a wireless transmission and reception method of the safety information, characterized in that for transmitting the second safety information to the second slave controller via the I2C bus. The method of claim 12,
In the transmitting step,
When a request for transmission of the second safety information is requested from the second slave controller when an error occurs in the first slave controller, the first slave controller transmits the second safety information to the second slave controller through a wired channel, And a second slave controller transmits the second safety information to the master controller through the wireless channel. The method of claim 12,
The master controller,
If the first safety information or the second safety information is not received from the first slave controller in a predetermined period, request that the second slave controller transmit the second safety information of the first slave controller instead.
And determining whether an error of a control object connected to the first slave controller is determined by using second safety information of the first slave controller received through the second slave controller. The method of claim 12,
Receiving, by the first slave controller, a second safety information transmission request of the second slave controller from the master controller when an error of the second slave controller occurs;
Requesting, by the first slave controller, to transmit the second safety information of the second slave controller to the second slave controller;
Receiving, by the first slave controller, second safety information of the second slave controller from the second slave controller through a wired channel; And
And transmitting, by the first slave controller, the second safety information of the second slave controller to the master controller through the wireless channel. The method of claim 12,
In the generating step,
The first slave controller generates second safety information of a first level indicating fault occurrence when the second sensing data is within the reference range, and indicates fault occurrence when the second sensing data is out of the reference range. A second method of transmitting and receiving safety information, characterized by generating a second level of safety information. The method of claim 12,
The control target is a battery, and the first and second sensing data wireless transmission and reception method of the safety information, characterized in that it comprises at least one of the output voltage and temperature of the battery.

Images