锂离子电池储能系统BMS的功能安全分析与设计

doi:10.19799/j.cnki.2095-4239.2019.0177

摘要/Abstract

摘要：

近两年，中国储能产业迎来爆发式增长。相较于其他储能技术，由于生产技术的快速进步、制造成本的逐步下降等因素，锂离子电池具备更显著的竞争力，在储能领域的市场渗透率越来越高。作为对电池进行监控和管理的电子装置，电池管理系统(battery management system，BMS)是储能系统的核心部件之一，其功能安全关系到整个锂离子储能电站的安全稳定运行。为了正确高效地实现储能系统的电池管理系统功能安全设计和验证，针对锂电池储能系统BMS的产品特点，本工作从系统的危险识别和风险分析、整体安全要求确定和安全功能分配、安全完整性实现及验证3 个主要分析步骤，参照IEC 61508、IEC 60730-1等相关参考标准梳理了电池储能系统BMS功能安全的分析与设计过程。分析结果表明，选择失效模式影响和诊断分析(FMEDA)以及风险矩阵法(RM)，可靠性框图法(RBD)，适合于储能系统电池管理系统BMS的功能安全分析和设计。依照IEC 61508、IEC 60730-1等相关标准，结合储能系统产品的特点，选择正确的分析设计路径，可以确保储能系统BMS的功能安全完整性等级(SIL)有效达成，为储能电站设计开发者提供参考。

关键词: 电池储能系统, 电池管理系统, 功能安全, 功能安全完整性等级

Abstract:

During the previous two years, China’s energy storage industry has witnessed explosive growth. Compared with other energy storage technologies, lithium-ion batteries are more competitive due to rapid advances in production technology and a gradual decline in manufacturing costs, and the market penetration rate in the field of energy storage is continuously increasing. As an electronic device for monitoring and managing a battery, the battery management system (BMS) is the core component of an energy storage system. Its functional safety is related to the safe and stable operation of an entire lithium-ion battery power station. To accurately and efficiently implement the design and verification of function safety in the BMS of the energy storage system, the analysis and design of a BMS to achieve functional safety, which is primarily described through system hazard identification and risk analysis, overall safety requirements and safety function allocation, and safety integrity verification, are outlined by incorporating the characteristics of a lithium-ion battery energy storage system BMS according to IEC 61508, GB/T 20438, and other related reference standards. The analysis shows that the failure mode effects and diagnostic analysis, the risk matrix, and the reliability block diagram are suitable for the functional safety analysis and design of the BMS of the energy storage system. Based on the IEC 61508 and IEC 60730-1 standards, combined with the characteristics of the energy storage system, an accurate analysis design ensures that the functional safety integrity level of the energy storage system BMS is effectively achieved. These provide a reference for the design and development of the energy storage power stations.

Key words: battery energy storage system, battery management system, functional safety, functional safety integrity level

中图分类号:

X 956

朱伟杰, 史尤杰, 雷博. 锂离子电池储能系统BMS的功能安全分析与设计[J]. 储能科学与技术, 2020, 9(1): 271-278.

ZHU Weijie, SHI Youjie, LEI Bo. Functional safety analysis and design of BMS for lithium-ion battery energy storage system[J]. Energy Storage Science and Technology, 2020, 9(1): 271-278.

图/表 7

图1

表1

表 2

图 2

表 3

表 4

图 3

参考文献 22

1	中国能源研究会储能专委会, 中关村储能产业技术联盟 . 储能产业研究白皮书2019[R]. 北京, 2019: 20.
2	北极星储能网 . 电池不背锅!针对储能电站事故原因韩国提出四大改善措施(附报告) [EB/OL]. [2019-6-13]. http: //chuneng. bjx. com. cn/news/ 20190613/985892. shtml.
3	彭忆强, 芦文峰, 邓鹏毅, 等 . 新能源汽车“三电”系统功能安全技术现状分析[J]. 西华大学学报(自然科学版), 2018, 37(1): 54-61.
	PENG Yiqiang , LU Wenfeng , DENG Pengyi , et al . Analysis of state of the art for new energy vehicle functional safety technologies[J]. Journal of Xihua University (Natural Science Edition), 2018, 37(1): 54-61
4	汪斌, 刘宁, 王家雁, 等 . 纯电动车锂电池管理系统的应用浅析[J]. 汽车实用技术, 2014(1): 52-55.
	WANG Bin , LIU Ning , WANG Jiayan , et al . Application analysis of lithium battery management system of pure EV[J]. Automobile Applied Technology, 2014(1): 52-55.
5	苏志高 . 插电式混合动力汽车电池管理系统的设计与实现[D]. 成都: 电子科技大学, 2015.
	SU Zhigao . Design and implementation of plug-in hybrid electric vehicle battery management system[D]. Chengdu: University of Electronic Science and Technology of China, 2015.
6	SAGAR S T . Compliance of ISO 26262 safety standard for lithium ion battery and its battery management system in hybrid electric vehicle[C]//2017 IEEE Transportation Electrification Conference (ITEC-India), Pune, 2017: 1-5.
7	JIHAS K . ISO 26262 system level functional safety validation for battery management systems in automobiles[C]//2017 Innovations in Power and Advanced Computing Technologies (i-PACT), Vellore, 2017: 1-5.
8	WANG Yang , LI Yanwen , LI Chunshu , et al . Analysis and application of functional safety based on modified FMEA method[C]//2017 2nd Asia-Pacific Conference on Intelligent Robot Systems (ACIRS), Wuhan, 2017: 98-103.
9	International Electrotechnical Commission . Secondary cells and batteries containing alkaline or other non-acid electrolytes-Safety requirements for secondary lithium cells and batteries, for use in industrial applications: IEC 62619[S]. 2017.
10	American National Standards Institute, Standards Council of Canada . Batteries for use in stationary, vehicle auxiliary power and light electric rail (LER) applications: ANSI/CAN/UL-1973[S]. 2018.
11	BUREAU VERITAS COLOMBIA . Functional and safety guide for battery management system (BMS) assessment and certification[EB/OL]. [2019-08-25]. http: //.
12	International Electrotechnical Commission . Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 4: Definitions and abbreviations: IEC 61508-4[S]. 2010.
13	International Electrotechnical Commission . Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 1: General requirements: IEC 61508-1[S]. 2010.
14	International Electrotechnical Commission . Failure modes and effects analysis (FMEA and FMECA): IEC 60812[S]. 2018.
15	Department of Defense, United States of America . Military handbook - reliability prediction of electronic equipment: MIL-HDBK-217F[R]. 1991.
16	Telcordia Technologies Special Report . Reliability prediction procedure for electronic equipment: Telcordia SR 332 issue 3[R]. 2011.
17	International Electrotechnical Commission . Electric components-Reliability-Reference conditions for failure rates and stress models for conversion: IEC 61709[S]. 2017.
18	International Electrotechnical Commission . Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 5: Examples of methods for the determination of safety integrity levels: IEC 61508-5[S]. 2010.
19	International Electrotechnical Commission . Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 3: Software requirements: IEC 61508-3[S]. 2010.
20	International Electrotechnical Commission . Automatic electrical controls —Part 1: General requirements: IEC 60730-1[S]. 2013.
21	International Electrotechnical Commission . Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 2: Requirements for electrical/electronic/programmable electronic safety-related systems: IEC 61508-2[S]. 2010.
22	International Electrotechnical Commission . Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 6: Guidelines on the application of IEC 61508-2 and IEC 61508-3: IEC 61508-6[S]. 2010.

序号	危险事件名称	来源	相关安全功能
1	释放可燃、有毒或爆炸性气体	电池化学反应	有害气体监测功能报警功能通风控制功能
2	流出可燃、有毒或腐蚀性液体	电池化学反应	流出液体监测报警功能
3	热失控	电池化学反应	通过结构设计进行防护
4	电芯着火或爆炸	电池化学反应	消防启动功能
5	电芯过热	电池化学反应	过温保护功能
6	电池内短路	电池	电流监测功能
7	电池内阻超出	电池	在线内阻监测功能报警功能

序号	危险事件名称	来源	相关安全功能
8	外短路	PCS或线缆	过流保护 +熔断器(不属于功能安全)
9	地震事件	外部环境	固定、机械强度(不属于功能安全)
10	外部火灾	外部环境	外壳防护(不属于功能安全)
11	滴水	外部环境	外壳防护(不属于功能安全)
12	跌落	外部环境/人为	外壳防护(不属于功能安全)
13	电池由于电池架倒塌受到挤压	外部环境或人为因素	固定(不属于功能安全)
14	操作人员失误	人员	输入防错功能
15	其他人为故意行为	人员	输入安全密码控制功能
16	失去温度控制	BMS	过温保护功能
17	失去电池电压控制功能	BMS	过压保护功能
18	由于失去控制功能或接地故障发生的过放电	BMS	绝缘故障检测功能状态监测功能主接触器控制功能
19	由于失去控制功能或数据漂移或软件错误发生的过充电	BMS	状态监测功能主接触器控制
20	过放后充电	外部指令或人为误操作	状态监测功能主接触器控制功能
21	BMS控制线故障	BMS/外部环境	状态监测功能主接触器控制功能
22	BMS通信中断、错误	BMS/EMS	通讯监测功能
23	电击	外部环境/绝缘故障	接地保护绝缘故障监测功能报警功能

安全完整性等级(SIL)	安全功能的每小时危险失效平均频率(PFH)
4	≥10^-9且<10^-8
3	≥10^-8且<10^-7
2	≥10^-7且<10^-6
1	≥10^-6且<10^-5

组件安全失效分数	硬件裕度
组件安全失效分数	0	1	2
<60%	不允许	SIL1	SIL2
60%~<90%	SIL1	SIL2	SIL3
90%~<99%	SIL2	SIL3	SIL4
>99%	SIL3	SIL4	SIL4

[1]	田峰, 程志江, 杨涵棣, 杨天翔. 模块化多电平复合变换器电池储能系统容错控制策略[J]. 储能科学与技术, 2022, 11(5): 1583-1591.
[2]	范馥麟, 李军徽, 严干贵, 李翠萍. 储能友好型频率响应服务市场：英国视角[J]. 储能科学与技术, 2022, 11(4): 1278-1288.
[3]	刘春辉, 任宏斌. 基于SOC的动力电池组主动均衡研究[J]. 储能科学与技术, 2022, 11(2): 667-672.
[4]	田凯, 陈堃, 陈满, 凌志斌. 基于载波移相调制的模块化多电平电池储能系统直流侧建模[J]. 储能科学与技术, 2020, 9(6): 1982-1990.
[5]	梁新成, 张　勉, 黄国钧. 基于BMS的锂离子电池建模方法综述[J]. 储能科学与技术, 2020, 9(6): 1933-1939.
[6]	罗勇, 赵小帅, 祁朋伟, 刘增玥, 邓涛, 李沛然. 车用动力电池二阶RC建模及参数辨识[J]. 储能科学与技术, 2019, 8(4): 738-744.
[7]	林俊豪，古雄文，马丽. 基于优化调度的用户侧电池储能配置及控制方法[J]. 储能科学与技术, 2018, 7(1): 90-.
[8]	陈诗璇，金鹏. LTC6803在镍氢电池储能管理系统中的应用[J]. 储能科学与技术, 2017, 6(S1): 31-.
[9]	罗红斌，邓林旺，冯天宇，吕纯. LiFePO4锂离子动力电池内阻与放电倍率关系研究[J]. 储能科学与技术, 2017, 6(4): 799-805.
[10]	张建1，郭慰问1,2，邹海曙3，邵光杰2，娄豫皖1，夏保佳1. 100 kW/200 kW·h氢镍电池储能系统[J]. 储能科学与技术, 2016, 5(4): 596-601.
[11]	许守平, 侯朝勇, 杨水丽. 一种适用于大容量储能技术的锂离子电池管理系统[J]. 储能科学与技术, 2016, 5(1): 69-77.
[12]	周友, 吴峂, 牛建娜, 赵璐璐, 范玉建. 应用于煤矿井下应急电源的电池电子标准模块设计[J]. 储能科学与技术, 2016, 5(1): 91-100.
[13]	李军徽, 高天宇, 赵冰, 严干贵, 焦健. 抑制风电功率波动的电池储能系统自适应控制策略设计[J]. 储能科学与技术, 2015, 4(3): 278-283.
[14]	裴丽娜, 黄哲, 董德鑫. 一种分层式储能电池管理系统[J]. 储能科学与技术, 2014, 3(4): 416-422.
[15]	靳文涛, 李蓓, 谢志佳. 电池储能系统在跟踪风电计划出力中的需求分析[J]. 储能科学与技术, 2013, 2(3): 294-299.