Serial communication safety controller

Patent metadata

Field	Value
Publication number	US-9592738-B1
Application number	US-201615157258-A
Country	US
Kind code	B1
Filing date	May 17, 2016
Priority date	Oct 30, 2015
Publication date	Mar 14, 2017
Grant date	Mar 14, 2017

Abstract

Serial communication verification and safety control is disclosed. A multi-part system such as a battery management system can include distributed or subsidiary components for determining status of various parts of the system with the components in serial or point-to-point communication with a collective main controller. A safety controller can be implemented to passively be coupled to the serial or point-to-point communication between the main controller and the subsidiary units. The safety controller can monitor and verify the communication between the main controller and the subsidiary units and send a safety command or verification indicator in another line of communication separate from the communication bus between the main controller and the subsidiary units.

First claim

What is claimed is:

1. An electric vehicle comprising:
a motor coupled to one or more wheels of the electric vehicle;
an inverter coupled to the motor;
at least a first power bus coupled to the inverter;
at least a first battery string comprising a plurality of battery modules, wherein the first battery string has an output that is coupled to the first power bus through a switch;
at least a first battery string controller coupled to the first battery string;
a plurality of battery module monitors coupled to respective ones of the plurality of battery modules, wherein the first battery string controller and at least a first battery module monitor communicate through a data bus; and
at least a first safety controller associated with the battery string controller, wherein the first safety controller is connected to the data bus separately from the first battery string controller and the at least first battery module monitor, and wherein the first safety controller is configured to evaluate communications between the first battery string controller and the first battery module monitor.

2. The electric vehicle of claim 1 , wherein the first safety controller is configured to receive data communicated between the battery string controller and at least a first battery module monitor using a serial peripheral interface (SPI) port.

3. The electric vehicle of claim 1 , wherein the first safety controller is configured to output a safety signal through a connection other than the data bus.

4. The electric vehicle of claim 3 , wherein the first battery string controller is configured to send a control signal to the first battery module monitor based in part on the safety signal.

5. The electric vehicle of claim 1 , wherein at least a first battery module monitor is configured to send status data of at least a first battery module to the first battery string controller, and wherein the first safety controller is configured to receive the status data.

6. The electric vehicle of claim 5 , wherein the first safety controller is configured to determine whether the status data matches an expected sequence or is within an expected range.

7. The electric vehicle of claim 5 , wherein the status data of the first battery module comprise voltage data or temperature data of the first battery module.

8. The electric vehicle of claim 1 , wherein the first safety controller is configured to evaluate communications between the first battery string controller and all of the plurality of battery modules.

9. The electric vehicle of claim 1 , wherein the data bus is a serial peripheral interface (SPI), and wherein the first battery string controller and at least a first battery module monitor are in communication using a SPI protocol.

10. The electric vehicle of claim 2 , wherein the first safety controller is further configured to receive data or commands communicated from the battery string controller to the at least first battery module monitor through a first master-out-slave-in (MOSI) pin of the first safety controller, and receive data or commands communicated from the at least first battery module monitor to the battery string controller through a second MOSI pin of the safety controller.

Assignees

• Faraday&Future Inc

Inventors

• Paryani Anil
• Velev Omourtag Alexandrov

Classifications

• G06F11/07

  Responding to the occurrence of a fault, e.g. fault tolerance · CPC title

• B60L3/12 Primary

  Recording operating variables {; Monitoring of operating variables} · CPC title

• G06F13/364 Primary

  using independent requests or grants, e.g. using separated request and grant lines · CPC title

• G06F13/4282

  on a serial bus, e.g. I2C bus, SPI bus (on daisy chain buses G06F13/4247) · CPC title

• B60L3/0092

  with use of redundant elements for safety purposes · CPC title