CONTROL METHOD FOR BI-STABLE CONTACTORS WITH FULL COMPONENT REDUNDANCY

Abstract

The invention comprises a method and a circuit design to control a bi-stable contactor in such a way that contactor coils can be energized in the event of sudden and unexpected loss of battery power. The invention also includes a component redundancy scheme designed to survive any single component failure SHORT or OPEN as required by industry safety standards UL1973 and UL991.

Claims

1. A battery management system circuit in which the flow of current from the battery to the load is determined by the state of a bi-stable contractor. The circuit comprising: a. A battery powering an MCU and providing power to the load. The flow of current being controlled with bi-stable contractor comprising of switch, a Set (Closed) and Reset (Open) coil. Each of the coils connected to the MCU through a high side and low side integrated FET power switches which can be driven directly by signals from the MCU. b. A set of two, parallel, capacitors, each charged through a Schottky diode. Each capacitor storing enough energy to change the bi-stable contractor state at least two times in the absence of power and preceding the upside contactor switches in the circuit. Each capacitor having a PCT fuse. c. Each capacitor circuit powers 2 sets of parallel switches operating the Reset coil these switches are normally active. Each have a parallel pull up resistor. d. Two parallel switches for the Set Coil set to open when power is lost. Each of these switches has a parallel pull down resistor.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0012] With reference to FIG. 1 of the drawing, there is illustrated a schematic circuit diagram of the invention. The current flows from the battery 1 to the load 23. Large electrolytic capacitors 6 and 7 are used to store electric energy to energize contactor coils 24 and 25. Each capacitor is charged from the battery 1 thru a Schottky diode 4 and 5 to prevent bleeding off the energy from the capacitor back into the battery with minimal voltage losses due to diode's forward voltage drop. Contactor coils 24 and 25 are operated by brief pulses of energy to change the state of the bi-stable contractor 18, to turn the power relay on or off 26. Electronic switch circuits are employed to energize those coils by software commands from the microcontroller 3 (MCU) which is powered by battery through a switch 2 connected to a driver pin on the MCU 3. To provide required redundancy both high side and low side switches are used, and each switch has a parallel redundant switch. High side and low side switches provide FAIL-SHORT redundancy, allowing control of the circuit if any single switch fails short. Parallel switches provide FAIL-OPEN redundancy, allowing control of the circuit if any single switch fails open. Each switch is controlled by dedicated MCU pin, allowing control of the circuit if any single MCU pin fails short or open, or fails short to ground or short to supply voltage. To protect from component failure in the capacitor circuit, two capacitor circuits are used, each with their own diodes. Each capacitor circuit also has series connected PTC fuse, 8 and 9, protecting the circuit from capacitor failing short. Each capacitor circuit powers one set of parallel switches, thus providing redundant power path for the coil. Switches used for RESET coil are designed to be normally active, depicted here by use of pull-up resistors. In this way when MCU fails or power is lost unexpectedly, all 4 switches for RESET coil will activate and engage the RESET coil, resulting in open battery circuit, which is desired safety outcome for BMS operation.

[0013] FIG. 1 is functional electric diagram of the invention. However, the invention can be housed in a separate container or incorporated as a part of a larger construct. It is operated by the flow of energy from the battery 1 and control signals from the MCU 3.

[0014] Electrolytic capacitors 6 and 7 are charged from the battery 1 through a pair of Schottky diodes 4 and 5 to prevent backflow of current in case of sudden loss of battery power. PTC fuses 8 and 9 protect from possible shorts circuits inside the capacitors. 6 and 7 are large electrolytic capacitors, each storing enough energy to change contactor 18 state at least two times in absence of battery power.

[0015] 14, 15, 16, 17, 20, and 22 are high side and low side integrated FET power switches, which can be driven directly by CMOS signals from the MCU pins.

[0016] 10, 12, 13, 14 are pull-ups. Their respective switches are normally active. These switches are closed when driver pin is disconnected or MCU power is lost. MCU control is required to keep the switches open during normal operation. In this scheme, the RESET coil 24 would immediately activate from energy stored in capacitors 6 and 7 in case battery power is lost unexpectedly.

[0017] 19 and 21 are pull-downs. Their respective switches are normally inactive. These switches are open when driver pin is disconnected or MCU power is lost. This ensures SET coil 25 would not engage without MCU control.

[0018] All of the switches are connected to pins on the MCU. To switch the contactor to the on position MCU pins for switches 14, 15, 20, and 22 are briefly activated by the MCU software to energize SET coil. To switch the contactor into the off position MCU pins 14, 15, 16, and 17 are bristly activated by the MCU software to energize RESET coil 24.

[0019] This control scheme has redundant components in every circuit and can survive any single component failing SHORT or OPEN.

SEQUENCE LISTING, IF ON PAPER (SEE 1.821 THROUGH 1.825)

[0020] Not Applicable