# US 2021/0242508 A1 · Functional safety in a battery management system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0242508 A1 - Document ID: US20210242508A1 - Status: Published application - Kind: A1 - Application number: 16/776,706 - Filed: 2020-01-30 - Published: 2021-08-05 - Earliest claimed: 2020-01-30 - Assignees: Sensata Technologies, Inc. - Applicants: Sensata Technologies, Inc. - Inventors: STEPHEN MILLEN; LUIS ESPAILLAT; JONATHAN M. RIGELSFORD; JING DENG - Web page: https://patentgrep.com/patent/US20210242508A1 ## CPC - H01M 10/48: Accumulators combined with arrangements for measuring, testing or indicating the condition of cells, e.g. the level or density of the electrolyte (constructional details of current conducting connections for detecting conditions inside cells or batteries, e.g. details of voltage sensing terminals, H01M50/569) - H04W 4/38: for collecting sensor information - B60L 50/64: Constructional details of batteries specially adapted for electric vehicles - H04L 63/123: {received data contents, e.g. message integrity} - H04W 12/106: Packet or message integrity - H01M 2010/4271: {Battery management systems including electronic circuits, e.g. control of current or voltage to keep battery in healthy state, cell balancing} - H01M 2010/4278: {Systems for data transfer from batteries, e.g. transfer of battery parameters to a controller, data transferred between battery controller and main controller} - H01M 2220/20: Batteries in motive systems, e.g. vehicle, ship, plane - H01M: PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - B60L: PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES (arrangements or mounting of electrical propulsion units or of plural diverse prime-movers for mutual or common propulsion in vehicles B60K1/00, B60K6/20; arrangements or mounting of electrical gearing in vehicles B60K17/12, B60K17/14; preventing wheel slip by reducing power in rail vehicles B61C15/08; dynamo-electric machines H02K; control or regulation of electric motors H02P); SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES (electric coupling devices combined with mechanical couplings of vehicles B60D1/64; electric heating for vehicles B60H1/00); ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL (control or regulation of electric motors H02P); MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract In a particular embodiment, a method of functional safety in a battery management system is disclosed that includes: generating, by a module monitoring system of the battery management system, battery sensor data; generating, by the module monitoring system, based on the battery sensor data, integrity data; sending, by the module monitoring system, via a wireless black communication channel to a wireless network controller of the battery management system, the battery sensor data and the integrity data; and sending, by the wireless network controller, to a vehicle control system, the battery sensor data. ## Claims ### Claim 1 A method for functional safety in a battery management system, the method comprising: generating, by a module monitoring system of the battery management system, battery sensor data; generating, by the module monitoring system, based on the battery sensor data, integrity data; sending, by the module monitoring system, via a wireless black communication channel to a wireless network controller of the battery management system, the battery sensor data and the integrity data; and sending, by the wireless network controller, to a vehicle control system, the battery sensor data. ### Claim 2 (depends on 1) The method of claim 1: wherein the module monitoring system is one of a plurality of module monitoring systems each configured to monitor a corresponding battery module of a plurality of battery modules; and wherein the wireless network controller is configured to receive respective battery sensor data from each battery module of the plurality of battery modules. ### Claim 3 (depends on 1) The method of claim 1, further comprising: validating, by the wireless network controller, based on the integrity data, the battery sensor data; and wherein sending, to the vehicle control system, the battery sensor data is performed in response to validating the battery sensor data. ### Claim 4 (depends on 3) The method of claim 3, wherein generating the integrity data comprises generating, based on the battery sensor data, one or more of an error detection code or a message authentication code. ### Claim 5 (depends on 3) The method of claim 3, wherein generating the integrity data comprises generating an identifier associated with the module monitoring system. ### Claim 6 (depends on 5) The method of claim 5: wherein the identifier comprises a memory address of the module monitoring system associated with the sensor data; and wherein validating the battery sensor data comprises validating, based on the memory address and a data type of the battery sensor data, the battery sensor data. ### Claim 7 (depends on 3) The method of claim 3: wherein sending, by the module monitoring system, via the wireless black communication channel to the wireless network controller, the battery sensor data and the integrity data comprises sending the battery sensor data and the integrity data based on a data type of the battery sensor data and an ordering of data type transmissions; and wherein validating the battery sensor data comprises validating, based on the data type of the battery sensor data conforming to the ordering of data type transmission, the battery sensor data. ### Claim 8 (depends on 3) The method of claim 3, wherein generating the integrity data comprises generating one or more of a sequence identifier or a time stamp for the battery sensor data. ### Claim 9 (depends on 1) The method of claim 1, further comprising: determining, based on the integrity data, that the battery sensor data is invalid; and requesting, by the wireless network controller from the module monitoring system, a resending of the battery sensor data. ### Claim 10 (depends on 9) The method of claim 9 further comprising sending, by the module monitoring system, via another communication channel to the wireless network controller, the battery sensor data and the integrity data. ### Claim 11 (depends on 10) The method of claim 10, wherein the other communication channel comprises another wireless black communication channel associated with a different frequency than the wireless black communication channel. ### Claim 12 A battery management system comprising: a plurality of module management systems each configured to monitor a corresponding battery module of a plurality of battery modules; a wireless network controller; and wherein the battery management system is configured to perform steps comprising: generating, by a module monitoring system of the plurality of battery management systems, battery sensor data; generating, by the module monitoring system, based on the battery sensor data, integrity data; sending, by the module monitoring system, via a wireless black communication channel to a wireless network controller of the battery management system, the battery sensor data and the integrity data; and sending, by the wireless network controller, to a vehicle control system, the battery sensor data. ### Claim 13 (depends on 12) The battery management system of claim 12, wherein the steps further comprise: validating, by the wireless network controller, based on the integrity data, the battery sensor data; and wherein sending, to the vehicle control system, the battery sensor data is performed in response to validating the battery sensor data. ### Claim 14 (depends on 13) The battery management system of claim 13, wherein generating the integrity data comprises generating, based on the battery sensor data, one or more of an error detection code or a message authentication code. ### Claim 15 (depends on 13) The battery management system of claim 13, wherein generating the integrity data comprises generating an identifier associated with the module monitoring system. ### Claim 16 (depends on 15) The battery management system of claim 15: wherein the identifier comprises a memory address of the module monitoring system associated with the sensor data; and wherein validating the battery sensor data comprises validating, based on the memory address and a data type of the battery sensor data, the battery sensor data. ### Claim 17 (depends on 13) The battery management system of claim 13: wherein sending, by the module monitoring system, via the wireless black communication channel to the wireless network controller, the battery sensor data and the integrity data comprises sending the battery sensor data and the integrity data based on a data type of the battery sensor data and an ordering of data type transmissions; and wherein validating the battery sensor data comprises validating, based on the data type of the battery sensor data conforming to the ordering of data type transmission, the battery sensor data. ### Claim 18 (depends on 13) The battery management system of claim 13, wherein generating the integrity data comprises generating one or more of a sequence identifier or a time stamp for the battery sensor data. ### Claim 19 (depends on 12) The battery management system of claim 12, wherein the steps further comprise: determining, based on the integrity data, that the battery sensor data is invalid; and requesting, by the wireless network controller from the module monitoring system, a resending of the battery sensor data. ### Claim 20 (depends on 19) The battery management system of claim 19, wherein the steps further comprise: sending, by the module monitoring system, via another communication channel to the wireless network controller, the battery sensor data and the integrity data.