基于ISO 26262标准的BMS(ASIL C)功能安全设计  

Functional Safety Design of BMS (ASIL C) Based on ISO 26262 Standard

作　　者：刘凌飞 李小鹏[1] 徐征[1] 沈圣智 LIU Lingfei;LI Xiaopeng;XU Zheng;SHEN Shengzhi(School of Automation and Transportation,Tianjin University of Technology and Education,Tianjin 300222,China;Tianjin Dong He Xin Technology Co.,Ltd.,Tianjin 300350,China)

机构地区：[1]天津职业技术师范大学汽车与交通学院,天津300222 [2]天津动核芯科技有限公司,天津300350

出　　处：《汽车零部件》2019年第11期30-33,共4页Automobile Parts

基　　金：天津市交通运输科技发展计划项目(2018-27)

摘　　要：随着新能源汽车的发展逐步趋于电气化和智能化,其电子控制器的数量不断增加,电子控制器的功能安全成为影响新能源汽车安全性的首要问题。旨在将标准ISO 26262-3:2018的开发要求,应用到动力电池管理系统的功能安全开发中。通过对动力电池的管理系统进行功能和结构分析,结合应用场景和危险辨识分析得到系统的潜在危害,提出了电池管理系统(BMS)的安全目标及功能安全需求。根据动力电池过放危害,进行危害分析与风险评估以确定BMS的汽车完整性等级(ASIL),并提出了一种分解其ASIL以降低开发成本的方法。As the development of new energy vehicles gradually becomes electrified and intelligent, the number of electronic controllers is increasing,the functional safety of the electronic controller is the first problem to affect the safety of new energy vehicles. Aims to apply development requirements of ISO 26262-3:2018 to the functional safety development of power battery management systems. Through the functional and structural analysis of the battery management system of the power battery, combined with the scene analysis and hazard identification to derive the potential hazard of the system, the safety objectives and functional safety requirements of the battery management system(BMS)were proposed, and the hazard was based on the over-discharge of the power battery. Hazard analysis and risk assessment of over-discharge of power battery to determine the automotive safety integration level(ASIL)of BMS and propose a way to decompose its ASIL to reduce development costs.

关 键 词：新能源汽车 BMS ISO 26262标准 ASIL 

分 类 号：U469[机械工程—车辆工程]