BMS carrier is the board which is responsible for monitoring and managing the main battery pack. It interfaces with the AFE (analog front end) board and the Current Sense board to get readings from the main pack.

Other Resources:
FWXIV BMS Carrier notes

BMS AFE Description

Components

• Current Sense - connected via I2C, and provides current readings and cell temperature,

• AFEs - 3 AFE boards, daisy-chained over iso-spi. These provide per-cell-unit voltage readings and Ambient temperature readings, as well as performing load balancing

• Relays + killswitch monitoring - Positive and negative relays must both be closed for the battery to be connected to the rest of the car. Killswitch monitor reads state of manual killswitch to batteries

  • HV Neg relay

  • HV Pos Relay

  • HV Solar Relay

• Fans - Used to provide cooling to batteries. Controlled via PWM and monitored for fault

Fault Conditions

These are all fault conditions which will trigger a BPS fault. They are split into Minor, in which the issue is likely to not be dangerous and the driver can take time coming to a stop, and Major in which the driver should exit the car as quickly as possible due to dangerous conditions or the potential for thermal runaway.

Note: Cell refers to individual input AFE measurements, which in reality is several physical cells. Cell group refers to an area managed by a single AFE.

AFE:

• Undervoltage - One Cell Falls < 2.5V (minor)

• Overvoltage - One cell > 4.5V (Major)

• Balance - Across entire pack, if difference between max and min cells is > 0.05V (Major)

• Temperature - if any thermistor reads > 60deg (Major)

  • Note: If thermistors read > 45deg, open solar relay to disable charging, but this is not a fault

Current Sense

• Overcurrent - reading > 58.2A (Minor)

• Temp > 60Deg (major)

Communication Errors

• If we lose communication with AFEs or Current sense, need to BPS fault

KillSwitch

• Will shutoff batteries by itself, but we will treat it as a BPS fault (minor)

Fault Enum - Bold are major faults, so they are grouped together:

BMS_FAULT_OVERVOLTAGE
BMS_FAULT_UNBALANCE
BMS_FAULT_OVERTEMP_AMBIENT
BMS_FAULT_COMMS_LOSS_AFE
BMS_FAULT_COMMS_LOSS_CURR_SENSE
BMS_FAULT_OVERTEMP_CELL
BMS_FAULT_OVERCURRENT
BMS_FAULT_UNDERVOLTAGE
BMS_FAULT_KILLSWITCH

Operation

FSM

The FSM has 3 states. RELAYS_OPEN (Off), RELAYS_CLOSED (On) and FAULT. When AUX is connected, BMS will be enabled and in Each state has a similar input function, in which all the checks for BMS are done. In the output functions of each function we will update the relay states depending on which transition is occurring.

RELAYS_OPEN:

• Input:

  • Run all BMS checks (see below)

  • If checks return non-zero (fault has occurred) transition to FAULT

  • If we have received a close relays request from PD, transition to ON_STATE

• Output

  • Relay sequence to open relays

RELAYS_CLOSED:

• Input

  • BMS checks

  • If checks return non-zero (fault has occurred) transition to FAULT

  • If we have received an open relays request from PD, transition to ON_STATE

• Output

  • Relay sequence to close relays

FAULT

• Input

  • Continue to run BMS checks. We may need to upgrade a minor fault to a major fault

  • There is not transition out of FAULT, the car must be restarted

• Output

  • Relay sequence to open relays

BMS Checks

These are the checks that are done at every cycle in each FSM state, at the highest frequency possible. They should happen as follows. If any error is detected, we should exit our check function and transition to fault immediately. We also set the requisite bit in bms_status_bms_faults signal.

• Check for CS_FAULT state set to high

• Trigger Cell Voltage conversions

  • Record start time, need to wait 10ms before reading back values

• Perform current sense read and check

• Perform AFE voltage sense and check

We also need to do an AFE Temp check, but this does not need to happen every cycle. We can reduce this to every 5 cycles.

Communication Loss: We will keep a running count of communication errors separately for AFEs and Current sense (CRC invalid, no data returned, etc). If 3 occur, we BPS fault.

Shared Memory

Readings from the AFEs and current sense should be stored into a struct shared between the BMS FSM and master task. This will allow for Fan monitor to access temp data, and any data broadcasting to happen from master task

Fan Monitor

This will be a function called from master task medium cycle which will:

• Check for fan faults based on the state of the fan fault pins

• Update fan PWM based on temp readings

Relay Sequence

These are the actions needed to achieve a certain relay state:

OFF->ON:

1. set HV_POS_RELAY_EN

2. set HV_NEG_RELAY_EN

3. set HV_SOLAR_RELAY_EN

For ON->OFF or ON->Fault, we can just open all at once (set *_EN to low)

CAN Messages

BMS Status:

• 16-bit fault bitset corresponding to ENUM above

• 8-bit relay state (OFF/ON)

• 8-bit Fan status fault bitset for Fan1 + 2

BMS Data - TBD:

The idea is to transmit data points for storage/telemetry:

• cell voltages

• cell temperatures

• avg current

• avg voltage

AFEs Additional info

The AFEs (analog front end) handle interactions with the main battery pack. There are multiple AFEs (LTC6811 chips) which handle reading cell voltages, reading thermistors to determine cell temperatures, and doing load balancing for the cells. These multiple AFE units are daisy-chained through one SPI interface. This SPI interface is interacted with the same as normal spi, but through hardware is translated to isoSPI and back to SPI for improved reliability.

AFE Configuration

The AFE operation revolves around two main data structures.

typedef struct LtcAfeSettings {
  GpioAddress cs;
  GpioAddress mosi;
  GpioAddress miso;
  GpioAddress sclk;

  const SpiPort spi_port;
  uint32_t spi_baudrate;

  LtcAfeAdcMode adc_mode;

  uint16_t cell_bitset[LTC_AFE_MAX_DEVICES];
  uint16_t aux_bitset[LTC_AFE_MAX_DEVICES];

  size_t num_devices;
  size_t num_cells;
  size_t num_thermistors;
} LtcAfeSettings;

typedef struct LtcAfeStorage {
  // Only used for storage in the FSM so we store data for the correct cells
  uint16_t aux_index;
  uint16_t retry_count;

  uint16_t cell_voltages[LTC_AFE_MAX_CELLS];
  uint16_t aux_voltages[LTC_AFE_MAX_THERMISTORS];

  uint16_t discharge_bitset[LTC_AFE_MAX_DEVICES];

  uint16_t cell_result_lookup[LTC_AFE_MAX_CELLS];
  uint16_t aux_result_lookup[LTC_AFE_MAX_THERMISTORS];
  uint16_t discharge_cell_lookup[LTC_AFE_MAX_CELLS];

  LtcAfeSettings settings;
} LtcAfeStorage;

The settings struct holds all the configuration for the hardware being used with the AFEs, including the number of AFEs, number of cells, and number of thermistors. The cell_bitset and aux_bitset indicate which of the total set of cells/thermistors we should read as inputs.

The storage struct holds the information from the settings, as well as memory for all of the readings taken.

AFE Readings

AFE readings are taken via the daisy-chain method, meaning that a read of a certain register on one AFE will be replied to with the values of all of the AFEs connected. (For example, the reading of the voltage register A of one of the AFE will be replied to with x 64 bit readings, where x is the number of AFEs connected)

Cell Sense

Essentially, we iterate through the number of voltage registers (4) and for each we read the 3 uint16_t voltages and one 16-bit Packet Error Check from each of the AFEs at this register. These results are then placed at the correct position in the cell_voltages array based on the cell_bitset and cell_result_lookup

Cell Balancing

The goal of cell balancing is to ensure that we fully utilize the capacity of our pack. It is most important while charging, since the pack stops charging when the highest cell voltage reaches the charge limit. Thus, we don’t want to stop charging when once cell reaches the limit but a bunch of other cells are far below the limit. The cells are therefore balanced by discharging cells that have voltages which are too high, allowing all cells to come up to full charge.

Under high current load, differences between the internal resistance of the cells can cause the voltages to read different values when not actually at different states of charge. Based on the above, the proposed behaviour is as follows:

• Max cell voltage < 4.0V or pack current draw > 10A

  • Balance to within 25mV

• Max cell voltage < 4.15V

  • Balance to within 10mV

• Max cell voltage > 4.15V

  • Balance to the highest possible accuracy (set to 2mV for now, can tune later)

Aux Sense

Aux sense, used for the thermistors, is done on a per-cell basis. Essentially, each read is done for an individual input thermistor. Due to the daisy-chain, this result will be the width of readings*x afes.

This reading must be initiated repeatedly for the number of thermistors connected to the afes