Systems and methods for redundant control of active fuses for battery pack safety

1. An apparatus for redundant control of active fuses for battery pack safety, comprising:

a battery;

an electrical load coupled to the battery via a fuse, the fuse configured to disconnect the electrical load from the battery after being activated by an electrical signal;

a sensor configured to sense a short circuit condition at the electrical load and output an analog sensor signal;

an analog-to-digital converter configured to sample the analog sensor signal and output a digital sensor signal;

a microcontroller configured to detect the short circuit condition at the electrical load based on the digital sensor signal, and, during normal operation, to output a first electrical signal to activate the fuse after detecting the short circuit condition at the electrical load; and

an analog circuit configured to operate independently of the microcontroller to receive the analog sensor signal and output a second electrical signal to activate the fuse after receiving the analog sensor signal.

2. The apparatus of claim 1 , wherein the fuse is configured to be activated by the first electrical signal or the second electrical signal.

3. The apparatus of claim 1 , where the fuse is configured to be activated only after the microcontroller outputs the first electrical signal and the analog circuit outputs the second electrical signal.

4. The apparatus of claim 1 , wherein the fuse is selected from a list consisting of: a pyrofuse; a disconnect switch; a field effect transistor; a contactor; and a relay.

5. The apparatus of claim 1 , wherein the analog circuit is configured to output the second electrical signal to activate the fuse after the microcontroller does not output the first electrical signal to activate the fuse.

6. The apparatus of claim 1 , wherein the sensor is a current sensor.

7. The apparatus of claim 6 , wherein the sensor is a Hall effect sensor.

8. The apparatus of claim 6 , wherein the sensor is a shunt current sensor.

9. The apparatus of claim 1 , wherein the analog circuit is housed on a board separate from the microcontroller.

10. The apparatus of claim 1 , wherein the analog circuit is housed on a board with the microcontroller.

11. The apparatus of claim 1 ,

wherein the microcontroller is configured to, during normal operation, output the first electrical signal to activate the fuse if the digital sensor signal exceeds a first threshold value over a first time period;

wherein the analog circuit is configured to output the second electrical signal to activate the fuse if the analog sensor signal exceeds a second threshold value over a second time period; and

wherein the second threshold value is greater than the first threshold value.

12. The apparatus of claim 11 , wherein the first threshold value is variable.

13. The apparatus of claim 12 , further comprising a memory configured to store the first threshold value, wherein the memory is configured so that the first threshold value is capable of being updated.

14. The apparatus of claim 12 , wherein the first threshold value is configurable based on an operating temperature.

15. The apparatus of claim 1 ,

wherein the microcontroller is configured to, during normal operation, output the first electrical signal to activate the fuse if the digital sensor signal exceeds a first threshold value over a first time period;

wherein the analog circuit is configured to output the second electrical signal to activate the fuse if the analog sensor signal exceeds a second threshold value over a second time period; and

wherein the first threshold value is greater than the second threshold value.

16. The apparatus of claim 15 , wherein the first threshold value is variable.

17. The apparatus of claim 16 , further comprising a memory configured to store the first threshold value, wherein the memory is configured so that the first threshold value is capable of being updated.

18. The apparatus of claim 16 , wherein the first threshold value is configurable based on an operating temperature.

19. The apparatus of claim 1 , further comprising:

a first power supply system configured, during normal operation, to supply electrical power to the microcontroller and the analog circuit;

a second power supply system configured to supply electrical power to the microcontroller and the analog circuit;

wherein the second power supply system is configured to supply electrical power to the microcontroller or the analog circuit if the first power supply system does not supply electrical power to the microcontroller or the analog circuit.

20. The apparatus of claim 19 , wherein the first power supply system and the second power supply system both receive electrical power from the battery.

21. The apparatus of claim 19 , wherein only one of the first power supply system and the second power supply system receives electrical power from the battery.

22. The apparatus of claim 19 , wherein the first power supply system and the second power supply system neither receives electrical power from the battery.

23. The apparatus of claim 1 , wherein the battery outputs a voltage greater than 60V.

24. The apparatus of claim 1 , wherein the battery outputs a voltage less than or equal to 60V.

25. The apparatus of claim 1 , wherein the battery is installed in an aircraft.

26. The apparatus of claim 1 , wherein the battery is installed in an electric vehicle.

27. The apparatus of claim 1 , wherein the battery is installed in a vertical takeoff-and-landing aircraft.

28. The apparatus of claim 1 , wherein the battery is installed in an electric vertical takeoff-and-landing aircraft.

29. The apparatus of claim 1 , wherein the battery is configured to be installed in an aircraft.

30. The apparatus of claim 1 , wherein the electrical load is a system installed in an aircraft.