Redundant battery management system architecture

Patent metadata

Field	Value
Publication number	US-10960776-B2
Application number	US-201816104310-A
Country	US
Kind code	B2
Filing date	Aug 17, 2018
Priority date	Aug 17, 2018
Publication date	Mar 30, 2021
Grant date	Mar 30, 2021

Abstract

A vehicle can include a battery architecture configured to provide electrical power to motors, accessories, and other components of the vehicle. The architecture can include a controller coupled to multiple battery units. Each battery unit can include a battery and a battery management system. Additionally, each battery unit can be coupled to a controller and to other battery units. Through the use of redundant coupling and redundant data transmitted to and from the controller, battery units, and other components, the architecture can detect a fault and continue to operate while providing an indication of the fault.

First claim

What is claimed is:

1. A system comprising:
a first battery unit comprising a first battery and a first battery management system (BMS);
a second battery unit comprising a second battery and a second BMS; and
a controller communicatively coupled with the first BMS and the second BMS, wherein the controller is configured to perform operations comprising:
receiving first battery data and first aggregate limit data from the first BMS, wherein the first battery data comprises a first current limit or a first power limit associated with the first battery;
receiving second battery data and second aggregate limit data from the second BMS, wherein the second battery data comprises a second current limit or a second power limit associated with the second battery;
determining, based at least in part on the first aggregate limit data and the second aggregate limit data, an operational limit;
determining, based at least in part on the operational limit, a torque value of an electric motor; and
controlling the electric motor based at least in part on the torque value.

2. The system of claim 1 , wherein the first BMS is communicatively coupled with the second BMS, and wherein the operations further comprise:
transmitting the first battery data from the first BMS to the second BMS; and
transmitting the second battery data from the second BMS to the first BMS,
wherein the first aggregate limit data is determined by the first BMS and based, at least in part, on the first battery data and the second battery data, and
wherein the second aggregate limit data is determined by the second BMS and based, at least in part, on the first battery data and the second battery data.

3. The system of claim 1 , wherein determining the operational limit comprises:
comparing, as a comparison, the first aggregate limit data and the second aggregate limit data; and
selecting, based at least in part on the comparison, a lower aggregate limit as the operational limit.

4. The system of claim 1 , wherein the first aggregate limit data or the second aggregate limit data comprise at least one of:
a combination of the first current limit and the second current limit;
a lookup-table entry based at least in part on the first current limit and the second current limit; or
a dynamic limit based on observed characteristics of the first battery or the second battery, the observed characteristics comprising at least one of an impedance, a slew rate, or an overshoot.

5. The system of claim 1 , wherein the operations further comprise:
determining that an observed operating condition is within a range associated with the operational limit, wherein the observed operating condition comprises at least one of a power use, current use, or a voltage use; and
determining that a fault condition has occurred, the fault condition indicating that at least one of the first battery unit or the second battery unit is malfunctioning.

6. A method comprising:
receiving first battery data and first aggregate limit data from a first battery unit;
receiving second battery data and second aggregate limit data from a second battery unit;
determining, based at least in part on the first aggregate limit data and the second aggregate limit data, a lower aggregate limit;
determining, based at least in part on the lower aggregate limit, an operational limit;
determining, based at least in part on the operational limit, a load value; and
controlling, based at least in part on the load value, an electric device.

7. The method of claim 6 , wherein the electric device is a motor, further comprising:
determining that the operational limit does not meet or exceed a threshold value;
determining that a fault condition has occurred; and
controlling the motor to execute a safe stop trajectory for a vehicle.

8. The method of claim 7 , wherein the vehicle comprises an autonomous vehicle.

9. The method of claim 6 , further comprising:
determining that the first aggregate limit data does not meet or exceed a threshold limit; and
determining that the first battery unit is malfunctioning.

10. The method of claim 6 , further comprising:
transmitting a portion of the first battery data to the second battery unit.

11. The method of claim 6 , wherein the first battery data comprises at least one of:
current limit data;
power limit data;
voltage limit data;
temperature data;
connection data;
a battery operational state;
a system operational state; or
a battery status.

12. The method of claim 6 , wherein:
the electric device is a motor; and
the load value is a torque value associated with the motor.

13. One or more non-transitory computer-readable media storing instructions executable by one or more processors, wherein the instructions, when executed, cause the one or more processors to perform operations comprising:
receiving, at a controller, first battery data from a first battery unit;
receiving, at the controller, second battery data from a second battery unit;
determining, based at least in part on the first battery data and the second battery data, an aggregate battery limit;
determining, based at least in part on the first battery data and the second battery data, an operational limit;
determining, based at least in part on the operational limit, a load value of an electric component; and
controlling, based at least in part on the load value, the electric component.

14. The one or more non-transitory computer-readable media of claim 13 , wherein the instructions, when executed, further cause the one or more processors to perform operations comprising:
receiving, at the controller, a first aggregate limit data from the first battery unit and a second aggregate limit data from the second battery unit;
determining, based at least in part on the first aggregate limit data and the second aggregate limit data, a lower aggregate battery limit; and
determining, as the aggregate battery limit, the lower aggregate battery limit.

15. The one or more non-transitory computer-readable media of claim 14 , wherein the aggregate battery limit comprises at least one of:
a combination of the first aggregate limit data and the second aggregate limit data;
a lookup-table entry based at least in part on the first aggregate limit data and the second aggregate limit data; or
a dynamic limit based at least in part on observed characteristics of the first battery unit or the second battery unit, the observed characteristics comprising at least one of an impedance, a slew rate, or an overshoot.

16. The one or more non-transitory computer-readable media of claim 14 , wherein the first battery data comprises a first current limit or a first power limit associated with the first battery.

17. The one or more non-transitory computer-readable media of claim 14 , wherein the electric component is a motor associated with a vehicle.

18. The one or more non-transitory computer-readable media of claim 13 , wherein the instructions, when executed, further cause the one or more processors to perform operations comprising:
receiving, at the controller, first aggregate limit data from the first battery unit and second aggregate limit data from the second battery unit;
determining that a difference between the first aggregate limit data and the second aggregate limit data meets or exceeds a difference threshold; and
determining a failure of a first coupling between the first battery unit and the controller or a second coupling between the second battery unit and the controller.

Assignees

• Zoox Inc

Inventors

• Foley Kyle Matthew
• Ng Robert Alan
• Boecker Moritz
• Tao Chong Zhang
• Tannahill Vincent Richard
• Cabebe Efren Alonzo
• Redfern Derek

Classifications

• Y02T10/64

  Electric machine technologies in electromobility · CPC title

• Y02T10/72

  Electric energy management in electromobility · CPC title

• B60L2240/549

  Current · CPC title

• B60L2240/545

  Temperature · CPC title

• B60L2240/423

  Torque · CPC title