車輛安全一直是業界重視的議題，而車用電機/電子產品與其相關零組件的安全更是備受重視。為避免車輛因潛在危害引起安全問題，國際標準組織(International Organization for Standardization, ISO)針對車用電機/電子產品發佈ISO 26262標準，歐洲各國將來可能要求輸入他們國家的車用電機/電子產品符合該標準。在ISO 26262的內涵下，本研究以一具主動式平衡(Active Balance)之電動車用電池管理系統(Battery Management System, BMS)為主題，示範一套符合ISO 26262標準的可靠度分析流程；而本研究特別探討並比較開關電容電池平衡 (Switched Capacitor Cell Balancing, SC)架構、雙層開關電容電池平衡 (Double-Tiered Switched Capacitor Cell Balancing, DTSC)架構、單開關電容電池平衡 (Single Switched Capacitor Cell Balancing, SSC)架構三種主動式電池平衡架構，考慮時間相關電介質擊穿(Time Dependent Dielectric Breakdown, TDDB)、負偏壓溫度不穩定性(Negative Bias Temperature Instability, NBTI)、電遷移(Electromigration, EM)、熱載子注入(Hot Carrier Injection, HCI)四種電晶體失效模型，並依據其失效機制評估主動式電池平衡架構之可靠度。研究結果發現，使用SSC電池平衡架構管理系統之失效率僅為採用其他兩個架構系統之一半，而影響電晶體失效率最為嚴重之失效機制為TDDB。以ISO 26262所注重的汽車安全完整性等級(Automotive Safety Integrity Level, ASIL)而言，本研究發現所採用三種主動式電池平衡架構之電池管理系統皆符合ASIL B。

Vehicle safety is a critical issue in the automotive industry. The safety of automotive electrical/electronic products and their components are emphasized in particular in recent years. To avoid hazards caused by failures of electrical/electronic systems and/or components installed in vehicles, the International Organization for Standardization published the first edition of ISO 26262 in 2011 and has made a few revisions afterwards. ISO 26262 is a functional safety standard emphasizing “Road Vehicles-Functional Safety.” To demonstrate how ISO 26262 can be fulfilled, a battery management system (BMS) with active cell balancing to be used in an electric vehicle is studied from reliability point of view in this thesis. The active cell balancing unit may apply switched capacitor (SC), double-tiered switched capacitor (DTSC) or single switched capacitor (SSC) to equalize the battery pack. The reliabilities of the above three cell balancing techniques are studied and compared in this thesis. In particular, failure rates of the three cell balancing techniques are evaluated by taking microelectronic failure modes of time dependent dielectric breakdown (TDDB), negative bias temperature instability (NBTI), electromigration (EM) and hot carrier injection (HCI) into consideration. The result indicates the failure rate by employing SSC cell balancing technique is about half of those by employing other two techniques, and the most severe failure mechanism among all is TDDB. The result also indicates that all three cell balancing techniques employed in the studied BMS fulfill the reliability requirement of ASIL B in ISO 26262.

致謝 I
摘要 II
ABSTRACT III
目錄 IV
表目錄 VI
圖目錄 VII
第一章 緒論 1
1.1 研究動機與目的 1
1.2 文獻回顧 2
1.3 論文架構 6
第二章 相關原理介紹 7
2.1 ISO 26262的介紹 7
2.2 車用電池管理系統 16
2.3 電動車電池基本原理 19
2.3.1 二次電池的種類 19
2.3.2 電池充電方法 21
2.4 可靠度評估模型手冊 22
第三章 主動式電池平衡單元可靠度評估 24
3.1 主動式電池平衡單元(Active Cell Balancing Unit)架構 24
3.2 電子元件的可靠度模型 29
3.2.1 失效機制與失效率 29
3.2.2 MOSFET失效機制模型 30
3.3 可靠度評估 34
3.3.1 MOSFET可靠度評估 35
3.3.2 雙向開關(Bi-Directional Switch)可靠度評估 36
3.3.3 主動式電池平衡架構可靠度評估 37
第四章 其他子系統之可靠度分析 39
4.1 電子控制單元(Electrical Control Unit, ECU)可靠度 39
4.2 數據收集系統(Data Acquisition)可靠度 39
4.3 熱管理系統(Thermal Management System)可靠度 40
4.4 電池組(Battery Pack)可靠度 40
第五章 ISO 26262案例分析-以主動式電池管理系統為例 41
5.1 項目定義 41
5.2 危害與風險分析 42
5.3 功能安全概念 43
5.4 產品開發：硬體層級 44
第六章 結論與建議 48
6.1 結論 48
6.2 建議 49
參考文獻 50

[1] 林克衛，「增程式電動巴士現況與發展介紹」，車輛研測資訊，第103期，第7-11頁，2014。
[2] S. H. Jeon, J. H. Cho, Y. Jung, S. Park and T. M. Han, “Automotive Hardware Development According to ISO 26262,” Proceedings of the 13th International Conference on Advanced Communication Technology, pp. 588-592, Seoul, Korea, 2011.
[3] IEA, Global EV Outlook 2016-Beyond One Million Electric Cars, International Energy Agency, 2016.
[4] 張雍昌、黃立仁、劉興庄、楊智仁，「具錯誤回復能力之低成本車用處理器架構」，電腦與通訊，第152期，第128-133頁，2013。
[5] 呂昆龍、張國樑、黃立仁、紀坤明、張雍昌、楊智仁，「車用電子系統的功能安全需求-ISO 26262國際安全規範簡介及其應用」，電腦與通訊，第163期，第10-16頁，2015。
[6] P. Kafka, “The Automotive Standard ISO 26262, The Innovative Driver for Enhanced Safety Assessment & Technology for Motor Cars,” Proceedings of 2012 International Symposium on Safety Science and Technology, pp. 2-10, Feffernitz, Austria, 2012.
[7] 許家興、涂家政，「具主動式平衡之電動車輛電池管理系統設計」，第六屆電資科技應用與發展學術研討會論文集，萬能科技大學，台灣中壢，2011。
[8] 陳柏睿，「ISO 26262 系統功能安全設計標準之研究」，機械工業雜誌，第344期，第106-122頁，2011。
[9] A. Hauser and R. Kuhn, Advances in Battery Technologies for Electric Vehicles. A Volume in Woodhead Publishing Series in Energy, pp. 283-326, 出版機構？, 2015.

[10] ISO/FDIS 26262-1~10, Road Vehicle-Functional Safety-Part 1~10, International Organization for Standardization, 2011.
[11] Y. Xing, E. W. M. Ma, K. L. Tsui, and M. Pecht, “Battery Management Systems in Electric and Hybrid Vehicles,” Energies, Vol. 4, No. 11, pp. 1840-1857, 2011.
[12] 許家興，「電動車電池類型與電池基礎介紹」，車輛研測資訊，第72期，第13-18頁，2009。
[13] USDOD, Military Handbook: Reliability Prediction of Electronic Equipment (MIL-HDBK-217), Revision F, Notice 2, 1995.
[14] FIDES Group, Reliability Methodology for Electronic Systems (FIDES guide 2009), Edition A, FIDES, 2010.
[15] M. Daowd, M. Antoine, N. Omar, P. Lataire, P. V. D. Bossche and J. V. Mierlo, “Battery Management System—Balancing Modularization Based on a Single Switched Capacitor and Bi-Directional DC/DC Converter with the Auxiliary Battery,” Energies, Vol. 7, No. 5, pp. 2897-2937, 2014.
[16] M. Brandl, H. Gall, M. Wenger, V. Lorentz, M. Giegerich, F. Baronti, G. Fantechi, L. Fanucci, R. Roncella, R. Saletti, S. Saponara, A. Thaler, M. Cifrain and W. Prochazka, “Batteries and Battery Management Systems for Electric Vehicles,” 2012 Design, Automation & Test in Europe Conference & Exhibition (DATE), pp. 971-976, Dresden, 2012.
[17] M. Daowd, M. Antoine, N. Omar, P. V. D. Bossche and J. V. Mierlo, “Single Switched Capacitor Battery Balancing System Enhancements,” Energies, Vol. 6, No. 4, pp. 2149-2174, 2013.
[18] J. B. Bernstein, M. Gurfinkel, X. Li, J. Walters, Y. Shapira and M. Talmor, “Electronic Circuit Reliability Modeling,” Microelectronics Reliability, Vol. 46, No. 12, pp. 1957-1979, 2006.

[19] 黃伊辰，符合ISO 26262車用電池管理系統之可靠度評估，臺灣大學機械工程學研究所碩士論文，臺灣臺北，2015。
[20] 鄭星山，馬達驅動控制器之量化可靠度研究，臺灣大學機械工程學研究所碩士論文，臺灣臺北，2013。
[21] Naval Surface Warfare Center, Handbook of Reliability Prediction Procedures for Mechanical Equipment, US Naval Surface Warfare Center, 2011.
[22] Ewert Energy Systems, Thermistor Expansion Module Product Manual, Ewert Energy Systems Inc., Revision 2.1, 2015.
[23] H. A. Hansson, T. Nolte, C. Norström and S. Punnekkat, “Integrating Reliability and Timing Analysis of CAN-Based Systems,” IEEE Transactions on Industrial Electronics, Vol. 49, No. 6, pp. 1240-1250, 2002.
[24] L. Buccolini, A. Ricci, C. Scavongelli, G. D. Gentile, S. Orcioni and M. Conti, “Battery Management System (BMS) Simulation Environment for Electric Vehicles,” Proceedings of 2016 IEEE 16th International Conference on Environment and Electrical Engineering (EEEIC), pp. 1-6, Florence, Italy, 2016.
[25] W. Taylor, G. Krithivasan and J. J. Nelson, “System Safety and ISO 26262 Compliance for Automotive Lithium-Ion Batteries,” Proceedings of 2012 IEEE Symposium on Product Compliance Engineering, pp. 1-6, 2012.
[26] TEXAS Instruments, M3641 Lithium-Ion Battery Pack Protection Circuit, TEXAS Instruments, 2011.