Pack BMS (Master) Assembly

Overview

The pack BMS master is the brain of the HV Battery Pack. Where each Module BMS Slave Board measures the cells in one module, the master aggregates data from every slave, runs the pack-level algorithms, controls the high-voltage contactors, talks to the rest of the Electric Car over CAN, and enforces the safety limits that keep a lithium-ion pack from being over-charged, over-discharged, over-heated, or short-circuited. It is the one component in the pack that is simultaneously a measurement system, a real-time controller, and a safety device.

Functionally the master answers three questions continuously: how much energy is left (state of charge), how healthy is the pack (state of health), and how much current may flow right now without violating any cell, thermal, or isolation limit (state of power). It publishes these to the vehicle and opens the HV Contactor set whenever a limit is breached.

Construction / how it's built

The master is a printed-circuit assembly built on a Bare PCB populated with an automotive Microcontroller as the main processor, often paired with a second monitoring controller for redundancy. The MCU runs the control firmware, the safety state machine, and the communication stacks. A high-side current sensor — either a shunt with a precision amplifier or a Current Sensor of the Hall/fluxgate type — feeds pack current into the controller through a dedicated channel.

Communication to the slaves uses an isolated daisy chain (isoSPI) or a separate isolated CAN segment, so the low-voltage master never shares a ground with the high-voltage stack. A CAN Transceiver handles the vehicle-side CAN-FD bus. The board carries contactor pre-drivers that switch the coils of the main HV Contactor, the pre-charge contactor, and sometimes a fast-acting pyro fuse. An isolation-monitoring circuit injects a small signal between HV+ and chassis to measure insulation resistance. Power for all of this comes from the 12 V vehicle supply, conditioned by on-board regulators and protected against load dump and reverse polarity. Dozens of SMD Passive (R/C/L) set filter cutoffs, reference voltages, and gate-drive timing.

Key specifications explained

Voltage accuracy (±2 mV). Cell voltage is the primary input to state-of-charge estimation on flat-curve chemistries. On an LFP cell the open-circuit-voltage curve is so flat through the mid-range that a few millivolts of error translate into large SOC error, which is why automotive masters specify single-digit-millivolt accuracy and depend on equally accurate slaves.

Current range (±1000 A) and integration. The master integrates measured current over time (coulomb counting) to track charge in and out. Wide range matters because a performance EV can pull 1000+ A during acceleration yet rest at milliamps when parked; the sensor and its amplifier must resolve both.

SOC accuracy (±3 %). Real-world SOC blends coulomb counting (good short-term, drifts over time) with voltage-based correction (good at rest, poor under load). The quoted accuracy is the combined result and directly sets how much usable range the vehicle can confidently advertise.

Isolation monitor (>500 kΩ). Safety standards require the resistance between the live HV bus and the chassis to stay high. The master continuously measures it and raises an alarm — and eventually opens contactors — if insulation degrades, catching coolant leaks, chafed HV Wiring Harness insulation, or water ingress before they become a shock hazard.

Functional safety (ASIL-C/D). Because a BMS fault can cause thermal runaway, the master is developed to a high automotive safety integrity level, with redundant measurement paths, watchdogs, and a defined safe state (open contactors).

Manufacturing & assembly

The master is produced as a sealed automotive ECU. The Bare PCB is populated by SMT pick-and-place, reflow-soldered, then conformal-coated to survive humidity and temperature cycling. Boards are programmed with bootloader and application firmware, calibrated against reference voltages and a known current source, and end-of-line tested for measurement accuracy, contactor-driver function, and CAN communication. The assembly is housed in a sealed enclosure with an automotive connector and either mounted on top of the Pack Enclosure or integrated into a junction box alongside the HV Contactor and Manual Service Disconnect.

Role in the pack

At key-on, the master runs an insulation check, then closes the pre-charge path to softly charge the inverter's DC-link capacitors before closing the main HV Contactor — closing into a discharged capacitor without pre-charge would weld the contacts. During operation it polls every Module BMS Slave Board for cell voltages and temperatures, computes the lowest and highest cell, and broadcasts charge and discharge current limits to the inverter and charger so they never push a cell past its limits. It commands the slaves to balance cells, manages thermal requests to the cooling system that feeds the Cooling Plate, and logs faults. On any critical fault — over-voltage, over-temperature, isolation loss, loss of communication — it drives the pack to its safe state by opening the contactors.

Variants & alternatives

Architectures split into centralized, modular/distributed, and wireless. The centralized master with wired slaves described here is the mainstream approach. Distributed designs push more intelligence into each Module BMS Slave Board, reducing the master to a coordinator. Wireless BMS replaces the isoSPI daisy chain with short-range radio, removing the sense HV Wiring Harness between modules at the cost of RF reliability concerns.

Masters differ in current sensing (shunt vs Hall Current Sensor), in whether they integrate the contactor box or sit separate from it, and in safety architecture (single MCU with internal lockstep vs dual-MCU). Lower-cost or lower-voltage applications may collapse master and slave into one board when the whole pack has few enough cells for a single Analog Front-End IC to monitor directly.

Masters also diverge in how much of the thermal and charging logic they own. In some vehicles the BMS master only reports states and limits, leaving a separate vehicle controller to decide pump speed, valve positions, and charge current; in others the master directly commands the heater and the pump that pushes coolant through the Cooling Plate, and negotiates DC fast-charge current with the off-board charger over the charging communication link. The trend in newer platforms is to fold more of these functions into the master so the pack arrives as a self-contained, sealed assembly that needs only a 12 V supply, a coolant connection, and a CAN link to drop into the Electric Car. Whichever split a manufacturer chooses, the master remains the single component that holds the authority to open the HV Contactor, which is why its firmware, its watchdogs, and its measurement chain receive the most rigorous validation of anything in the pack. Field updates to that firmware are delivered over the air or at service, and every change is re-validated against the same safety goals, because a regression here can turn a healthy pack into a hazard.