# US 11,451,072 B2 · Battery system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,072 B2 - Document ID: US11451072B2 - Status: Granted - Kind: B2 - Application number: 16/367,015 - Filed: 2019-03-27 - Published: 2020-01-16 - Granted: 2022-09-20 - Earliest claimed: 2018-07-10 - Assignees: Samsung SDI Co., Ltd. - Applicants: Samsung SDI Co., Ltd. - Inventors: Maximilian Hofer; Markus Pretschuh; Michael Erhart - Web page: https://patentgrep.com/patent/US11451072B2 ## CPC - H02J 7/663: {using battery or load disconnect circuits (H02J9/002 takes precedence)} - G01R 31/3842: combining voltage and current measurements - H01M 10/4207: {for several batteries or cells simultaneously or sequentially} - H01M 10/425: {Structural combination with electronic components, e.g. electronic circuits integrated to the outside of the casing (printed circuits H05K1/00)} - H01M 10/441: {for several batteries or cells simultaneously or sequentially} - H01M 10/482: {for several batteries or cells simultaneously or sequentially} - H01M 10/486: {for measuring temperature} - H02J 7/62: against overcurrent - H02J 7/64: against overvoltage - H02J 7/65: against overtemperature - H02J 7/80: including monitoring or indicating arrangements - H01M 2010/4271: {Battery management systems including electronic circuits, e.g. control of current or voltage to keep battery in healthy state, cell balancing} - H01M 2010/4278: {Systems for data transfer from batteries, e.g. transfer of battery parameters to a controller, data transferred between battery controller and main controller} - H01M 2220/20: Batteries in motive systems, e.g. vehicle, ship, plane - H02J: ELECTRIC POWER NETWORKS; CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY - G01R: MEASURING ELECTRIC VARIABLES; MEASURING MAGNETIC VARIABLES (indicating correct tuning of resonant circuits H03J3/12) - H01M: PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY ## Abstract A control unit for a battery system includes a plurality of battery cells is provided. The control unit includes: an input node configured to receive a sensor signal indicative of a state of at least one of the plurality of battery cells; a microcontroller connected to the input node and configured to generate a first control signal based on the sensor signal; and a switch control circuit configured to control a power switch of the battery system by: receiving the sensor signal, the first control signal, and a fault signal indicative of an operational state of the microcontroller; generating a second control signal based on the sensor signal; and transmitting one of the first control signal and the second control signal to an output node of the control unit based on the received fault signal. ## Claims ### Claim 1 A battery system comprising: a plurality of battery cells electrically connected to each other in series between a first node and a second node; a power switch interconnected between the first node or the second node and an external load; and a control unit comprising: an input node configured to receive a sensor signal indicative of a state of at least one of the plurality of battery cells; a microcontroller connected to the input node to receive a state signal based on the sensor signal and configured to generate a first control signal based on the state signal; and a switch control circuit configured to control the power switch of the battery system by: receiving the state signal, the first control signal, and a fault signal indicative of an operational state of the microcontroller; generating a second control signal based on the state signal; and transmitting one of the first control signal and the second control signal to an output node of the control unit based on the received fault signal, wherein the output node of the control unit is connected to the power switch to control the power switch. ### Claim 2 (depends on 1) The battery system according to claim 1, wherein the switch control circuit is configured to set the power switch into a non-conductive state after a first time period (T1) elapses after receiving the fault signal indicating a malfunction of the microcontroller. ### Claim 3 (depends on 1) The battery system according to claim 1, wherein the switch control circuit is configured to generate the second control signal that causes the power switch to be set into a non-conductive state when the state signal exceeds a threshold. ### Claim 4 (depends on 1) The battery system according to claim 1, wherein the switch control circuit is configured to set the power switch into a conductive state for a second time period (T2) after receiving the fault signal indicative of a malfunction of the microcontroller. ### Claim 5 (depends on 4) The battery system according to claim 4, wherein the second time period (T2) is less than a fault tolerant interval time (FTTI) of the plurality of battery cells. ### Claim 6 (depends on 1) The battery system according to claim 1, further comprising a sensor configured to detected at least one of a current, a voltage, and a temperature of at least one of the plurality of battery cells as the sensor signal. ### Claim 7 A vehicle comprising a first electrical consumer and a battery system, the battery system comprising: a plurality of battery cells electrically connected to each other in series between a first node and a second node; a power switch interconnected between the first node or the second node and the first electrical consumer; and a control unit comprising: an input node configured to receive a sensor signal indicative of a state of at least one of the plurality of battery cells; a microcontroller connected to the input node to receive a state signal based on the sensor signal and configured to generate a first control signal based on the state signal; and a switch control circuit configured to control the power switch of the battery system by: receiving the state signal, the first control signal, and a fault signal indicative of an operational state of the microcontroller, generating a second control signal based on the state signal, and transmitting one of the first control signal and the second control signal to an output node of the control unit based on the received fault signal, wherein the output node of the control unit is connected to the power switch to control the power switch. ### Claim 8 (depends on 7) The vehicle according to claim 7, further comprising a second electrical consumer electrically connected to the battery system, wherein the control unit is configured to shut off the second electrical consumer in response to receiving the fault signal indicative of a malfunction of the microcontroller, and wherein the second electrical consumer is not security relevant to the vehicle. ### Claim 9 A method for operating a battery system, the battery system comprising a plurality of battery cells electrically connected to each other in series between a first node and a second node, a power switch interconnected between the first node or the second node and an external load, and a control unit configured to control the power switch, the method comprising: detecting, by a sensor, a sensor signal indicative of a state of at least one of the plurality of battery cells; determining, by a microcontroller of the control unit, a first control signal for controlling the power switch based on a state signal based on the sensor signal; receiving, by a switch control circuit of the control unit, the state signal, the first control signal, and a fault signal that is indicative of an operating state of the microcontroller; generating, by the switch control circuit, a second control signal based on the state signal; and transmitting, by the switch control circuit to the power switch, one of the first control signal and the second control signal based on the received fault signal. ### Claim 10 (depends on 9) The method according to claim 9, wherein the transmitting comprises: operating in a first mode for a first time period (T1) after receiving the fault signal indicative of a malfunction of the microcontroller; and setting the power switch into a non-conductive state after the first time period (T1), and wherein the step of operating in the first mode comprises: setting the power switch into a conductive state for a second time period (T2) after receiving the fault signal; and transmitting the second control signal generated based on the state signal to the power switch after the second time period (T2).