Impact Safety Control Strategy for the Battery System of an Example Electric Bus

This paper proposes a side impact safety control strategy for the battery system, aiming at defusing the hazards of unacceptable behaviors of the battery system such as high-voltage hazards. Based on some collision identification metrics, a side impact discrimination algorithm and a side impact severity algorithm are developed for electric buses. Based on the study on the time to break for power battery, the side impact discrimination algorithm response time is about 20ms posing a great challenge to the side impact discrimination algorithm. At the same time, the reliability of the impact safety control strategy developed in this paper is evaluated for other plausible side impact signals generated by finite element analysis.The results verify that the impact safety control strategy exhibits robust performance and is able to trigger a breaking signal for power battery system promptly and accurately.


Introduction
In order to address serious concerns over energy sustainability and environmental pollution issues, governments, automotive industry, and academia are endeavoring to expedite a paradigm shift to a green transportation.Electric vehicles have been widely accepted as an integral part of such a high-efficiency system, attributing to the use of electricity that can potentially diversify the power sources of vehicles, thus reducing the excessive reliance on fossil fuels while facilitating the adoption of renewable energy [1][2][3].The battery system plays an important role in fulfilling the requirements of driving performance, as well as ensuring operation safety.However, the safety issues related to a given battery technology pose a significant challenge to ensuring the overall safety performance, especially in severe road accidents such as side impacts.It is estimated that side impacts at road intersections claim a portion of 30%-40% in vehicle-to-vehicle accidents across the world [4].However, side impacts are usually hard to evade since the response time for the drivers to take necessary actions is too short, even though it may be possible to perceive the imminent risks.Worse more, side impacts are always fatal because of the limited deformation space [5,6] to absorb impact energy.This precondition, combined with high intrusion velocities, results in a short time between the beginning of the collision and the moment when the intruding door panel contacts the power battery.In such cases, short-circuit phenomenon [7] may occur within the battery system, which can easily evolve into more serious incidents such as thermal runaway and even flaming and explosion, owing to the use of volatile materials such as lithium metal and flammable solvents [8].When working beyond the stability range of the system (in terms of temperature and voltage), a series of undesirable reactions may occur within the battery system such as electrolyte reduction [9], subsequently incurring thermal runaway [10][11][12][13] that entails significant threats such as explosion phenomenon.Generally, safety of the battery system needs to be addressed at the cell, module, pack, and ultimately vehicle levels.
In addition, high-voltage power battery pack is often leveraged to lower the power loss in electric vehicles, where the rated voltage is up to between 200 V and 500 V [14].Consequently, there is a high possibility that electrical harm would be incurred to the passengers when the high-voltage system is electrically mounted to the vehicle body under side impacts [15][16][17][18].However, there is an explicit absence of reported studies pertaining active security control for   the battery system after collision accidents in the literature.To bridge the gap, it is meaningful to carry relevant research on safety for power battery system under side impacts.
In this paper, a side impact safety control strategy is presented in an example electric bus, aiming at defusing the hazards of unacceptable behaviors of the battery system such as high-voltage hazards.A side impact discrimination algorithm is proposed to detect the side impact by considering multimetrics, that is, velocity change and integral for absolute acceleration.Once a side impact is confirmed, a severity algorithm is employed to assess the extent of the accident, which classifies the accident into three levels.In serious impacts, the side impact safety control strategy can realize the electrical segregation of different modules within the battery pack by making the DC contractors breaking their electric loops, which are duly placed between adjacent modules.This can significantly reduce the voltage level of the battery pack, thus effectively suppressing the hazards on account of the possible terminal exposure to the passengers.In order to verify the effectiveness of the proposed method, the finite element models of an example electric bus and a moving deformable barrier are established in Hyperworks to simulate the real side impact accidents.The results show that the control strategy can generate the breaking signal for power battery pack both promptly and accurately.

Breaking Strategy and Side
Impact Recognition Algorithm for Power Battery System 2.1.Breaking Strategy for Power Battery System.In order to ensure the safety of power pack during road accidents, an active safety control system is proposed as shown in Figure 1.It consists of impact detection sensors, an impact safety controller, and DC contactors.The DC contactors are deployed to make the high-voltage battery pack break into a number of low-voltage battery modules.The whole battery pack electrically decomposes into  ( ≥ 2) battery modules, making sure that open-circuit voltage of each module drops to less than 36 V that is widely adopted as a threshold voltage for safety concerns.As a result, the possible hazards to the passengers can be effectually defused in serious road collisions.
To avoid possible malfunctions (e.g., incapability of braking and steering) in serious impacts, a breaking scheme for power battery system is also put forward.The detailed schematic is shown in Figure 2. If one of battery packs detects a collision signal ( represents the battery pack), the controller functions to trigger a breaking signal to execute the corresponding DC contactor , resulting in breaking tis electrical loop.Then the DC contactor  is closed.Subsequently the battery pack  is shorted, and the closed-loop consists of other battery packs and drive motor once again.In this way, electric buses can still have the ability of braking or steering even in serious impacts due to the closed-loop for the power battery system.To ensure that contactor  and  cannot be closed simultaneously, a controllable SPDT switch is placed between them.
The preprocess of denoising for acquired acceleration signal () is done.
These metrics can be generally grouped into three categories, that is, impact force-dependent metrics, impact energy-dependent metrics, and combination metrics.Since the acceleration is proportional to the impact force, the acceleration and the jerk can be regarded as impact forcedependent variables to gauge the collision strength.The acceleration change is the difference between two consecutive acceleration values sampled at a fixed rate.In addition, since the kinetic energy of the vehicle is transformed to the elastic-plastic energy through elastic-plastic deformation of the vehicle structure during impacts, the velocity change can be reasonably selected as another impact energy-dependent   variable.Power and specify power are combination-type metrics of impact force-dependent metrics, representing in the collision strength and the collision energy absorbed.

Key Techniques for Simulation Model. FEM (finite element model
) is an effective tool for simulation analysis.Based on FEM, the acceleration signal is recorded during impact simulations.In addition to the accuracy of finite element computing method, the precision of impact simulation is also highly dependent on the fidelity of the simulation model.The main factors influencing the simulation accuracy can be attributed to three facets: model accuracy of moving deformable barrier (MDB), model accuracy of vehicle model, and battery pack model.For MDB, material invalidation and bonding technology with invalidation mode beam element are taken into consideration.Besides, solder type, material molding process, and material strain rate are also taken into account.
Finite element simulations have been conducted routinely in the past decade to evaluate and improve impact and safety designs for specific high-speed impact conditions.Knowledge of key modeling techniques had been accumulated for establishing an effective finite element model.These modeling techniques are summarized as follows.
(1) In order to obtain a smoother curve, the acceleration obtained by simulation should be filtered.Routinely, a frequency band of 300-400 Hz is always picked as the threshold [26].
(2) Material strain rate is a significant input parameter, which is closely related to the structure deformation, energy transfer, and absorption.So it is necessary to obtain dynamic stress-strain curve through a series of experiments.
(3) A full vehicle impact analysis involves interaction between all free surfaces, which includes contacts at all significant corners and edges.To this end, it is still strongly recommended that the segment-based contact search parameter should be considered when defining the contacts.
(4) The friction coefficient between the vehicle and MDB is set as 0.2.

Finite Element Model of Electric
Buses.The electric bus, BK612EV, was served as the simulation target in this study.
The specifications [27] are shown in Table 1.As to the battery pack, it consists of an outer box and an inner box with arrays of battery cells inside.The outer box is mounted on a door frame while the inner box is mechanically tied to the outer box.Since the vehicle's skeleton comprises a number of thin-walled square tubes, shell element is employed in the finite-element model.Due to the local instability of the straight beam under axial collisions, the straight beam will be collapsed.The thin wall of straight beams will wrinkle along some arc curve (radius ) [28,29], and the average of radius  approximately is where  is the cross sectional width;  is the thickness.In order to precisely depict the structure deformation in the collision, element size should be set less than half of the length of the arc.According to the equation  = 0.5, 10 mm, 50 mm, and 20 mm are selected as the element sizes for the collision zone the no-collision zone and the go-between area, respectively.
According to the technical specification of BK612EV, Q235 and 16Mn are selected as vehicle skeleton material and chassis material, respectively.Then, the door frame material of the battery pack is Q235, and MAT24 is selected as piecewise linear plastic material model; the shell material of the battery is SMC, MAT1 is selected as elastic model; battery cathode and negative material are aluminum foil and copper foil, respectively, which are prone to plastic deformation in the collision, so MAT18 is selected as cell model; the vehicle model is shown in Figure 3.
Figure 4 depicts the curve of energy variation during the side impact.It is evident that the maximum kinetic energy sees a dramatical decline to a stable level during the course of side impact, while the internal energy evolves in the opposite trend, with 76.3% of the kinetic energy converted to the internal energy.The hourglass energy remains about 1% of the total impact energy, not more than 5%.It is obvious that the energy variation is consistent with energy conservation law, thus verifying the reliability of the analysis results.
Impact speed is set as 35 km/h.Figure 5 shows the displacement contours of the vehicle at 20 ms. Figure 6 shows the displacement contours of the vehicle at 50 ms.The impact configuration is 100% side collision, and the installation site of battery pack is selected as the collision zone.So the deformation of the door frame and battery panel is great.Gradually, the kinetic energy is converted to the internal energy spreading to the other end of the bus skeleton.
Figures 7 and 8 show the displacement contours of the battery pack at 30 ms and 60 ms, respectively.Part of the kinetic energy is absorbed by the battery panel and the rest is transferred to the bus skeleton by beams.

Characteristics for Side Impact Acceleration of Electric
Bus. Figure 9 shows a curve of acceleration against different impact velocity obtained by finite element analysis (FEA).
Although the acceleration curves are different, but they share the same characteristics: the acceleration curve fluctuates violently at the begin of side collision, and then the fluctuation amplitude decreases gradually while the fluctuation frequency increases slowly; the time to reach the peak acceleration moment arrives earlier due to increasing magnitude of collision speed.
2.6.Requirements for Breaking Algorithm. 3 represents the latest time-to-break, as shown in Figure 10.According to the principle of identifying a collision signals early, Δ 1 (Δ 1 represents the response time of collision identification algorithm) should be shorter in favor of reducing highvoltage electrical injury.Therefore, the response time of identification algorithm Δ 1 should satisfy the following formula: where Δ 2 (Δ 2 represents the response time of a DC contactor) is a fixed-value for some DC contactor selected.The shorter the response time of DC contactor becomes, the longer the response time of identification algorithm becomes, which could shorten the time to judge side impacts and defuse the hazards of unacceptable behaviors of the battery system.Table 2 shows the latest time-to-break for DC contactors to break electric loops and the response time range of identification algorithm against different collision velocity obtained by employing FEA. 3 is the moment that the gap between the door frame and the rear panel reaches to the smallest distance.And the value of  3 is about 20 ms-30 ms, which obliges the collision identification algorithm to detect a collision signal within very short time.Apart from fast response, the collision identification algorithm should have high noise immunity.
Based on above study on the time-to-break for power battery pack, the response time of side impact identification algorithm is not more than 20 ms.That is to say that the controller triggers a breaking signal before the gap between the door frame and the rear panel reaches to the minimum.First of all, we must make sure that the impact discrimination algorithm should respond as soon as possible.Secondly, the side impact identification algorithm should be sensitive enough to the collision strength.It means that the identification algorithm should trigger a breaking signal earlier in severe collision than in moderate collision.Thirdly, due to severe vibration from the pavement, the identification algorithm should exhibit robust performance and is able to trigger a breaking signal for power battery pack promptly.
According to the above detailed analysis, the combination of moving window algorithm (MWA) and improved moving window algorithm (IMWA) is selected as the side impact identification algorithm for electric buses.MWA is a method of the integral operation of the value of acceleration; IMWA changes its integral mathematic object () to |()|.[ 1 ,  2 ]; then variable () is integrated within the time window [19][20][21][22][23][24]:
With  substituting the variable  2 , formula (3) can be reformulated as Actually, () is obtained at a fixed-sample frequency and is discrete.Formula (4) can be further rewritten into a discrete form: where n is the current time point,  is the number of sampling points, and  is the sampling frequency.After analysis of the above formula, the velocity change (, ) greatly differs in different window width.Then it is hard to evaluate the performance of breaking capacity against different window widths.In order to analyze sensitivity and antijamming capability against different window width (, ) should be normalized.
Taking the real-time requirement into consideration, it is inappropriate for window width to select greater value of window width.Therefore,  is selected at 2 ms, 4 ms, and 6 ms when sample time is 1 ms.Then, according to the above algorithm, the data from the same collision velocity are processed.As shown in Figure 12, the shape of the three curves has similar trend, but has a different sensitivity.If a threshold is selected at , the three curves take different times to reach to the threshold , and  6 >  4 >  2 , which means window width 6 ms could earlier identify a collision signal.So it is concluded that the slope of window width 6 ms is greater than others.The greater the slope of the curve is, the higher the sensitivity of the collision strength is.When  is 2 ms, the slope is smaller than the other two, meaning that the algorithm is not sensitive enough to detect the collision strength.Since the interval between battery door frame and the front panel of battery pack is only 25 mm, the controller has to identify the collision strength rapidly, and trigger a breaking signal within 20 ms.Therefore, the window width of 2 ms is discarded.In addition, the real-time performance of 6 ms will get worse.The reason is that the Algorithm runs 15 times with 6 ms window width and 17 times with 4 ms.Through the above analysis, the selective window width of 4 ms is employed in this paper.

Performance of MWA.
Figure 13 is a curve of moving window integration algorithm with window width 4 ms against different collision velocities, such as 20 km/h, 25 km/h, 28 km/h, and 30 km/h.In analysis of the curve, a peak value can reach 0.47 at 20 km/h.What is more, with increasing collision velocity, the peak will arrive in advance.For example, a peak value can reach 0.69 at 25 km/h.Through the above analysis of Δ 1 , 0.5 is selected as a threshold of collision recognition algorithm, namely, time-to-integral.The controller starts the recognition algorithm.

Performance of IMWA.
On high-speed collisions, the collision energy is absorbed by the body frame and the battery pack system within a very short time.This condition, combined with high intrusion velocities, results in a short time between the beginning of the collision and the moment when the intruding door panel contacts the power battery.It is very significant for identification algorithm to detect the collision strength rapidly, and then it is necessary to improve the response time of the identification algorithm.Therefore, an improved moving window algorithm is discussed fundamentally, and the integral operation of the absolute value of acceleration is selected as an optimal method.Because of IMWA changing the integral mathematic object () to |()|, its slope becomes elevated with window width 4 ms. Figure 14 shows a curve of moving window integration algorithm and improved moving window integration algorithm with window width 4 ms at 40 km/h, where  is a threshold. 1 is the moment to make the DC contactor breaking electric loops based on improved moving window algorithm,  2 is the moment to make the DC contactor breaking electric loops based on moving window algorithm.Obviously  2 >  1 .Accordingly, it could be concluded that MWA is not component to detect fierce collision strength in advance and IMWA is enough sensitive to detect the collision strength in advance.Although the improvement is not conspicuous, it is significant to detect side impact as soon as possible.
Figure 15 shows a graph of ∫ |()| at 45 km/h as well as a graph of ∫ () at 25 km/h, 45 km/h, respectively.Where   and  are two different thresholds which classify collision strength into three levels including light collision, moderate collision, and fierce collision. is the moment to make the DC contactor breaking electric loops at 45 km/h;  is the moment to make the DC contactor breaking electric loops at 25 km/h.Collision strength can be described as

Specific Implementation of Side Impact Safety Control
Strategy.Based on the above analysis of the two algorithms, this paper proposes a novel algorithm for detecting collision strength, including two parameters of   based on the integration for the absolute value of acceleration, ∫ |()|, and (, ) based on the moving window integration, ∫ ().
Figure 16 shows a schematic diagram of the algorithm.Twostage identification method to detect the collision strength is employed.START is a threshold; if (, ) > START, the controller will start impact identify algorithm.TIME is a symbol, time to integration.The details are described as follows.
(a) Real-time detection is for the impact acceleration signal.
(b) If (, ) > START, TIME is the moment to conduct integrating computation; then skip to step (c), else (c) If   > , it means that fierce collision occurs and the breaking signal is triggered simultaneously; else skip to step (d).
(d) If (, ) > , it means that moderate collision occurs and further judgments are required.The contact impact sensors make a determination whether or not the collision occurs.If does, a breaking signal is triggered simultaneously.
(e) If (, ) < , it means that light collision occurs and it not necessary to trigger a breaking signal.Since the door frame of the battery pack is closed to the body frame, the door frame could absorb more energy than the front panel of battery pack.Considering energy absorption ratio, a weight parameter  ( = 0.7) is introduced.An equivalent expression of intrusion rate is defined as :

Selection of Important Parameters
where  1 is the relative intrusion volume between the door frame of the battery pack and the front panel of the battery pack,  2 is the relative intrusion volume between the rear panel and the front panel of the battery pack,  is the equivalent interval between the door frame of the battery pack and the rear panel of the battery pack, and  = 42 mm  The parameter  is employed as a metric to indicate the damage degree to the battery pack.Figure 17 shows the selected ten different points on the door frame as measure points, recording displacement of each point.Then these ten points project to the rear panel and the front panel of the battery pack, respectively, recording the displacement of projection points.Table 3 shows intrusion volume and intrusion rate of measure points at 20 km/h and 25 km/h.Table 3 shows that the average invasion rate is 23% approximately, and the average of  1 is 14 mm.Nevertheless, the initial gap between the door frame of the battery pack and the front panel of the battery pack is 25 mm.Obviously, both of them are not contact each other.The average of  2 is 3 mm.Taking into account the gap between the battery box, insurance and other electrical components, and the front panel of battery pack, the intrusion volume does not harm these important electrical components.Although  1 increases insignificantly and  is no more than 5%, the average of  2 is 5∼6 mm and the intrusion volume of one measure point reaches 8 mm at 25 km/h.Taking the narrow gap into consideration, the peak integration of collision acceleration at 25 km/h is defined as a metric distinguishing moderate collision from light collision.
Employing moving window integration ( = 4 ms) for acceleration signal at 25 km/h, a maximum value is obtained, namely, where () is discrete acceleration signal and  is the sampling frequency.Figure 18 is the schematic diagram of the threshold AWB.Employing improved moving window integration ( = 4 ms) for acceleration signal at 45 km/h, a maximum value is obtained, namely,

Determination for Threshold ATB.
where () is discrete acceleration signal and  is the sampling frequency.Figure 15 is a schematic diagram of the threshold ATB.Obviously ta > Ta.The figure shows that the controller triggers a break signal based on IWMA sooner than that based on WMA in serious impacts.So it is concluded that the IMWA is component to detect the high-speed collision strength in advance.

Reliability Analysis of Impact Safety Control Strategy
Table 5 shows side impact simulation experiment results.Taking advantage of Hyperworks and Ls-dyna, simulation data is obtained, evaluating the performance for moving window integral algorithm and side impact discrimination algorithm.It is concluded that breaking control algorithm is superior to moving window integral algorithm.

Conclusion
In order to enhance the overall safety performance of electric vehicles in side impacts, this paper presents a side impact safety control strategy for an example electric bus, aiming at defusing the hazards of unacceptable behaviors of the battery system such as high-voltage hazards.Based on the collision detection metrics, that is, velocity change and integral for absolute acceleration, a side impact discrimination algorithm and a side impact severity algorithm have been developed to identify the impact signal as well as to assess the extent of the accident.If a collision signal is identified according to those algorithms, the controller triggers a breaking signal making the DC contactors break the electrical loops promptly, which are duly placed between adjacent modules.This can significantly reduce the voltage level of the battery pack, thus effectively suppressing the hazards on account of the possible terminal exposure to the passengers.In addition, the reliability of the side impact safety control strategy (side impact discrimination algorithm) developed in this paper is evaluated for other acceleration signals generated by simulation.The results verify that the side impact safety control strategy can trigger the breaking signal in promptly.

Disclosure
The paper has not been previously published or currently submitted for the review of any other journal and will not be submitted elsewhere before a decision is made by this journal.Its publication is approved by all authors and explicitly by the responsible authorities where the work was carried out.

Figure 1 :
Figure 1: Active security control system for battery pack.

Figure 2 :
Figure 2: Breaking scheme of power battery system.

3. 1 .
Some Principles for MWA.Figure11shows the change process of acceleration obtained by an acceleration sensor placed on the battery pack, ().TIME denotes the beginning of side collision and the figure shows time window width

4. 1 .
Determination for Threshold AWB.A battery management system, insurance, and other electrical components are arranged between the front panel and the rear panel of the battery pack.The damaged condition of electrical component is closely relevant to the relative deformation of the panel.

Figure 17 :
Figure 17: Battery pack and test points.

(
42 = 81.7 × 0.3 + 25 × 0.7).The initial gap between the rear panel and the front panel of the battery pack is 81.7 mm.The initial gap between the door frame of the battery pack and the front panel of the battery pack is 25 mm.

Table 2 :
Latest time to break and algorithms response time.

Table 3 :
Intrusion volume, rate of invasive at low-speed collision.

Table 4 :
The intrusion volume, the rate of invasive a thigh-speed collision.
"NB" means "not trigger a breaking signal"."B" means "trigger a breaking signal".