BMS-07 — Battery Electrical Architecture

1. No Single Component Is Enough

A high-voltage architecture is built from five layers: energy storage (cells), switching (contactors), protection (fuse, pyro fuse), measurement (current/voltage), and safety (HVIL, isolation). Each layer handles a different failure mode — no single element covers them all.

ASSUMPTION — The component names and division of responsibilities described in this lesson reflect general industry practice; they are not a real vehicle’s concrete architecture, part number, or circuit diagram.

The positive and negative main contactors connect/disconnect the pack from the HV bus (BMS-06). Being able to open both poles independently guarantees safe isolation even under a single fault.

2. Two Fuses, Two Different Jobs

	Main Fuse	Pyro Fuse
Trigger	Passive — trips on its own based on a current-time curve	Active — cut pyrotechnically by a signal (from the BMS or crash detection)
Role	Reactive: last line of defense against a slowly developing overcurrent/short circuit	Preventive: cuts HV at a trigger event (like a crash), before a short circuit even forms
Control needed	None — it only reacts to physical current	Yes — it needs an external signal

The two don’t replace each other — they’re complementary.

3. The Current Sensor

The current sensor (shunt/Hall/fluxgate — BMS-05) usually sits in the HV path, close to the contactors, and feeds current data to the BMS.

4. HVIL: The Loop That Watches Access

HVIL is an extra, low-voltage (LV, harmless) signal wire that runs through every HV connector. The BMS applies a small current to this loop and monitors its continuity. If a connector is disconnected, the loop physically opens — letting the BMS know, indirectly but reliably, that HV has become accessible to a person, without measuring HV itself, and disconnect it.

HVIL and isolation resistance monitoring are not the same thing. HVIL answers “has a connector been physically opened?” Isolation resistance monitoring answers “is there an unwanted leakage path between the HV circuit and the chassis?” They cover different failure modes (physical access vs. insulation breakdown) and don’t substitute for each other. Isolation resistance can drop over time from moisture, contamination, mechanical damage, or material aging; the BMS measures it periodically and disconnects HV if it falls below a safe threshold (BMS-13).

A service disconnect is a manual disconnection point that electrically splits the pack during maintenance — usually tied to HVIL as well, so pulling it safely splits the HV circuit.

5. Charging and Power Interfaces

• AC charging (on-board charger): converts AC to DC to charge the pack.
• DC fast charging: the charging station supplies DC directly to the pack, under contactor and BMS control.
• Inverter: converts the pack’s DC to AC for the motor (and the reverse during regenerative braking).
• DC/DC converter: generates 12V from HV to power the vehicle’s low-voltage electronics.

The BMS manages the safe connection conditions for each of these interfaces, positioning contactors appropriately for charge or drive mode (state machine, BMS-14).

6. When Things Go Wrong

HVIL open, low isolation resistance, a blown fuse, a triggered pyro fuse — each of these requires the BMS to disconnect HV either immediately or gradually, depending on the fault’s severity (BMS-13).

7. How It’s Verified in Production

HVIL continuity and isolation resistance measurement accuracy are verified in a controlled way during EOL testing — for example, by injecting a known leakage resistance and checking whether the BMS reacts at the correct threshold. HIL testing simulates scenarios like HVIL opening, isolation faults, and fuse/pyro fuse triggering (BMS-19, BMS-20).

8. How It Connects to Other Systems

The electrical architecture is directly linked to contactor control (BMS-06) and the state machine (BMS-14), is monitored by fault management (BMS-13), and forms the hardware realization of the functional safety concept (BMS-17).

Summary

• Contactors switch, the fuse/pyro fuse protect, HVIL watches access points.
• Isolation resistance monitoring is a separate protection layer, independent of HVIL.
• The service disconnect provides maintenance safety.
• The BMS manages charging, inverter, and DC/DC interfaces through a safe state machine.

Sources

• UNECE R100 — HV safety.
• ISO 26262 — electrical architecture safety context.