Abstract: A control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode is provided. A microcontroller performs a first scheduled task including executing first and second applications. The task deadline monitoring application sets a task deadline flag to a first fault value when a time interval associated with performing the first scheduled task is greater than a threshold time interval. The hardware abstraction layer inhibits operation of a disable pin of a watchdog IC when the task deadline flag is equal to the first fault value, which induces the watchdog IC to transition the DC-DC voltage converter to the safe operational mode.

Abstract: A self-diagnosing battery cell monitoring system having a battery cell voltage monitoring IC with a digital voltage substrate, an analog differential voltage substrate, and an analog voltage substrate is provided. The first diagnostic handler application commands a digital input-output device to generate control signals to transition a contactor to an open operational state if the first diagnostic flag associated with the digital voltage substrate is equal to the first encoded fault value, or the second diagnostic flag associated with the analog differential voltage substrate is equal to the second encoded fault value, or the third diagnostic flag associated with the analog voltage substrate is equal to the third encoded fault value.

Abstract: A self-diagnosing watchdog monitoring system having a watchdog IC and a microcontroller is provided. The microcontroller has a microprocessor, and a digital input/output device with an enable pin and a disable pin. An enable application in the microcontroller monitors the disable pin of the digital input-output device, and if the disable pin does not have a low logic state within a predetermined amount of time after a first time indicating that the disable application is malfunctioning, then the enable application generates a control message.

Abstract: A diagnostic system having first and second applications is provided. The first application multiplies a first voltage value associated with a voltage regulator by a first correction value to obtain a first corrected voltage value. The first application receives a second corrected voltage value from the second application. The first application sets a first voltage regulator status flag equal to a first fault value when a difference between the first and second corrected voltage values is greater than a threshold difference value. The first diagnostic handler application generates control signals if the first voltage regulator status flag is equal to the first fault value.

Abstract: A self-diagnosing microcontroller includes a microprocessor having first and second applications, and a hardware abstraction layer. The microprocessor is operably coupled to an analog-to-digital converter. The hardware abstraction layer sequentially sets a first pre-check indicator to a first fault value for each encoded channel number of a second plurality of encoded channel numbers that does not have an identical and corresponding encoded channel number in a first plurality of encoded channel numbers indicating an incorrect channel was read from the analog-to-digital converter, and sends the first pre-check indicator to the first application.

Abstract: A watchdog monitoring system having a watchdog integrated circuit and a microcontroller is provided. The microcontroller has a microprocessor, and a digital input/output device with an enable pin and a disable pin. A disable application in the microcontroller monitors the enable pin of the digital input-output device, and if the enable pin does not have a high logic state within a predetermined amount of time after a first time indicating that the microcontroller is malfunctioning, then the disable application generates a control message.

Abstract: A diagnostic system for a vehicle electrical system having first and second voltage regulators outputting first and second voltages, respectively, is provided. The diagnostic system includes a microcontroller having an analog-to-digital converter, a first application, and a first diagnostic handler application. The first application sets a first analog-to-digital converter status flag equal to a first fault value when a difference between a first corrected voltage value and a second corrected voltage value is greater than a threshold difference value indicating that the analog-to-digital converter is malfunctioning. The first diagnostic handler application commanding a digital input-output device to generate control signals if the first analog-to-digital converter status flag is equal to the first fault value.

Abstract: A diagnostic system includes a microcontroller having a first A/D converter, first and second applications, and a first analog multiplexer electrically between a first voltage regulator and the first A/D converter. The first application sets a first overvoltage diagnostic flag to a first fault value if a first voltage of the first voltage regulator that is measured by the first A/D converter is greater than a first voltage, and in response further transitions a contactor to an open operational state. The second application sets a second overvoltage diagnostic flag to a second fault value if a second voltage of the first voltage regulator that is measured by the first A/D converter is greater than a second voltage, and in response further transitions the contactor to the open operational state.

Abstract: A battery cell management system includes a microcontroller having first and second applications and first and second memory buffers. The first and second memory buffers have first and second overvoltage fault bits, respectively, associated with a first battery cell. The first application sets a first encoded overvoltage fault indicator equal to a first fault value if the first overvoltage fault bit of the first memory buffer is equal to a first binary value. The first application receives a second encoded overvoltage fault indicator from the second application. The first application commands a digital input-output device to generate control signals to transition a contactor to an open operational state if either the first encoded overvoltage fault indicator is equal to the first fault value or the second encoded overvoltage fault indicator is equal to a second fault value.

Abstract: A battery management system includes a microcontroller having first and second applications. The first application transitions a contactor to an open operational position if a first CRC diagnostic flag is equal to a first encoded fault value. The second application transitions the contactor to the open operational position if a second CRC diagnostic flag is equal to a second encoded fault value.

Abstract: A voltage monitoring system having a microcontroller with first and second monitoring applications and a hardware abstraction layer is provided. The hardware abstraction layer sends a second encoded channel number and a first measured voltage value to the first monitoring application. The first monitoring application sends the second encoded channel number to the second monitoring application. The hardware abstraction layer sends a fourth encoded channel number and a second measured voltage value to the second monitoring application. The second monitoring application stores the second measured voltage value in the memory device if the fourth encoded channel number is equal to a first expected encoded channel number, and the second encoded channel number is equal to a second expected encoded channel number.

Abstract: A voltage monitoring system having a microcontroller with first and second monitoring applications and a hardware abstraction layer is provided. The hardware abstraction layer obtains a first measured voltage value associated with a first channel number. The hardware abstraction layer determines a second encoded channel number based on the first channel number. The hardware abstraction layer sends a first response message having the second encoded channel number and a first measured voltage value therein to the first monitoring application.

Abstract: A voltage monitoring system having a microcontroller with an analog-to-digital converter with a first channel, and a memory device is provided. The microcontroller includes a monitoring application and a hardware abstraction layer. The monitoring application sends a first encoded channel number to the hardware abstraction layer. The hardware abstraction layer determines a first channel number based on the first encoded channel number, and obtains a measured voltage value associated with the first channel number. The hardware abstraction layer sends a second encoded channel number and the measured voltage value therein to the monitoring application. If the first encoded channel number is equal to the second encoded channel number, then the monitoring application stores the measured voltage value in the memory device.

Abstract: A diagnostic system for a DC-DC voltage converter is provided. An analog to digital converter measures a first low voltage level at a low voltage terminal of a DC-DC voltage converter and generates a first low voltage value based on the first low voltage level. A first buck mode monitoring application sets a first buck mode status flag equal to a first fault value when the first low voltage value is greater than a first maximum voltage value. A first buck mode diagnostic handler application transitions each of the high voltage switch and the low voltage switch to an open operational state when the first buck mode status flag is equal to the first fault value.

Abstract: A system for controlling operation of a contactor is provided. The system stops outputting a control signal to open the contactor, and then measures a low side sense signal from a low side sense circuit electrically coupled to a low side end of a contactor coil, or a high side sense signal from a high side sense circuit that is electrically coupled to a high side end of the contactor coil, to determine whether the contactor has a closed operational position, and if not, the system stops outputting another control signal to open the contactor.

Abstract: A control system for a DC-DC voltage converter includes a microcontroller having first and second applications. The first application commands the microcontroller to generate a first signal that is received at a first pin on a high side integrated circuit to transition a first plurality of FET switches to an open operational state, and that is received at a first pin on the low side integrated circuit to transition a second plurality of FET switches to the open operational state. The second application commands the microcontroller to generate a second signal that is received at a second pin on the high side integrated circuit to transition the first plurality of FET switches to the open operational state, and that is received at a second pin on the low side integrated circuit to transition the second plurality of FET switches to the open operational state.

Abstract: A control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode is provided. The DC-DC voltage converter has a DC-DC voltage converter control circuit with a high side integrated circuit and a low side integrated circuit. The high side integrated circuit has a first plurality of FET switches therein. The low side integrated circuit has a second plurality of FET switches therein. The control system includes a microcontroller having a digital input-output device, first and second applications, and a hardware abstraction layer. The first application sends a first command value to the hardware abstraction layer in order to transition the first and second plurality of FET switches to the open operational state.

Abstract: A diagnostic system for a battery system having a battery module electrically coupled to a contactor is provided. The battery module has first, second, and third battery cells. The diagnostic system includes a first microcontroller that transitions the contactor to an open operational state if the first battery cell analog overvoltage flag is equal to the first battery cell analog overvoltage flag value. The first microcontroller further transitions the contactor to the open operational state if the first battery cell comparator overvoltage flag is equal to the first battery cell comparator overvoltage flag value.

Abstract: A diagnostic system for a DC-DC voltage converter having a low voltage bi-directional MOSFET switch is provided. The low voltage bi-directional MOSFET switch has first and second nodes. The microcontroller samples a first voltage at the first node at a first sampling rate utilizing a first common channel in a first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first voltage is less than a first threshold voltage. The microcontroller sets a first voltage diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples indicating a voltage out of range low fault condition for the analog-to-digital converter.

Abstract: A diagnostic system for a vehicle electrical system having a first and second diagnostic application is provided. The first diagnostic application commands a high side driver circuit and a low side driver circuit to transition a contactor to an open operational position when a first difference value is greater than a first threshold difference value indicating that at least one of the first and second analog multiplexers is malfunctioning. The second diagnostic application commanding the high side driver circuit and the low side driver circuit to transition the contactor to the open operational position when a second difference value is greater than the first threshold difference value indicating that at least one of the first and second analog multiplexers is malfunctioning.