| # | Task | Completed ? | Comments |
|---|---|---|---|
| 1 | Writing SMBus driver for BMS | ✓ | |
| 2 | Testing the code before push | ✓ | |
| 3 | Push the SMBus driver for BMS to the public | ✓ | |
| 4 | Documenting my work on GitHub | ✓ | |
| 5 | Integrating BQ24725 Smart Charger | ✗ |
In this repository, I will talk about how I got any Smart Battery Data Specification (SBS) compliant laptop batteries working with TIVAC TM4C123G LaunchPad™, also I will talk about how to configure the project to work fine with you.
I want to thank Texas Instruments for supporting me. They supported me with these kits:
- EV2400. This kit is a USB-based PC Interface Board for battery management systems. It has extensive software that controls the BMS, and it will help you configure your BMS. This tool is really helpful if you want to recycle the laptop BMSs.
- BQ24725AEVM-710. This is a smart Lithium battery charger that could be controlled using the BMS (the BMS tells the smart charger the value of the charging voltage and current). I will talk about the BQ24725 later.
Now we have some serious work to do. :D
I want to thank all my close friends:
-
I want to thank Osama Ragab Mazidi for his kindness and his continuous support. Without him, I couldn't have done anything.
-
Dr. Mohamed El-Dakroury.
for their support and help.
I noticed that many lithium battery recyclers throw the BMS boards in the garbage, although they are important and could be recycled also. I have noticed that you will find little information about how to reuse the laptop BMS on the internet (because it needs experience, and it could bring lots of money !), so I am doing this to encourage the community to share their experience and help each other. This repository is the result of studying the laptop BMS for 2 years.
The BMS is an electronic system that manages a rechargeble battery (cell or battery pack), such as by protecting the battery and monitoring its state, balancing each individual cell, and making sure that it operates within the safe operating area.
01- Reports the appropriate charging current needed for constant current charging and the appropriate charging voltage needed for constant voltage charging to a smart charger using SMBus broadcasts. These values can be sent to the BQ24725 smart charger.
02- Determines the chemical state of charge of each battery cell using Impedance Track™ and can reduce the charge difference of the battery cells in fully charged state of the battery pack gradually using cell balancing algorithm during charging. This prevents fully charged cells from overcharging and causing excessive degradation and also increases the usable pack energy by preventing premature charge termination.
03- Supports pre-charging/zero-volt charging.
04- Support fast charging.
05- Supports charge inhibit and charge suspend if battery pack temperature is out of temperature range.
06- Reports charging fault and also indicate charge status via charge and discharge alarms.
The BMS might also have a communication protocol that enables controlling it using any embedded system. The embedded system could also read many internal registers inside the BMS, such as:
01- The voltage for each individual cell.
02- The voltage of the pattery pack
03- The current (Positive value for charging, Negative for discharging, and zero for idle).
04- The temperature of the battery pack.
05- Estimated time to full (when charging).
06- Estimated Time to empty (when discharging).
07- Full charge capacity.
08- Remaining capacity.
09- Cycle count.
10- Absolute/Relative state of charge.
11- Charging voltage.
12- Charging current.
14- Battery status flags.
15- Mosfets status.
16- Charging status.
and more ....
The Laptop BMS is controlled using the System Management Bus (SMBus) protocol. It is a special type of I²C bus with a low frequency speed of 10KHz and might require a low value pull-up resistor such as 1.2 KOhm for both the clock and data lines. This protocol is used by all the computers to control the BMS and to read its basic information. This communication bus follows a standard which will be discussed further later.
We can do lots of projects using the BMS such as:
01- DIY power walls (using lithium batteries for storing solar energy) and monitoring each battery pack.
02- DIY electric scooters.
03- DIY electric cars and robots.
04- Battery backuped devices, power banks, and UPSs.
05- DIY power bank for Raspberry Pi and controlling it from Raspberry Pi.
So many applications ..
Once the battery is used too many times, its life degrades by usage, and once the BMS detects that one of the cells is damaged, it locks down the battery and prevents any further charging/discharging process.
There is good news. All the batteries connected to the laptop should follow some standards, such as:
- SMBus specifications version 1.1, kindly see System Management Bus (SMBus) Specification, version 1.1. for more details. This standard clarifies all the requirements for the SMBus protocol.
- Smart Battery Data Specifications (SBS), kindly see Smart Battery Data Specification for more details.
Both of the two PDF files that are mentioned above here are adequate for our work, and any laptop BMS should work with us fine.
Warning: Laptop batteries are so dangerous because they contain high energy and could explode if you make any mistake with them. It could even damage any device that is connected to it. I am not responsible for any damage or injuries that occur to anyone. Don't try this at home. You are doing this at your own risk.
When working with lithium batteries, you must keep them in a clean environment (keep the batteries away from any metal objects). Keep the batteries in well-protected boxes; keep them far from any liquids; use proper safety tools for handling and containing lithium fires; keep the batteries far from children; and use proper tools for protecting your own computer, such as:
1- Using USB isolators for isolating the computer from the microcontroller that connected to the battery. If the high-voltage wires touch any signal wires, this could fry your computer and everything connected with it.
2- Make sure to fasten all your wires and keeping them intact.
3- Keep the communication wires away from the high-voltage wires.
A while a go, I have started tinkering with an old BQ20z70 BMs (recycled from old laptop battery) and it was my lucky day that the BMS was locked using the default security key from TI, here is my experiment Reverse Engineering BQ20z70 Laptop BMS and I have talked about Understanding the BQ20z70 Security and how the authentication works. Finally, I have resetted the permanent failure flags and the BMS has another life.
This repository assumes that you have a working laptop battery with no permanent failure flags.
I am currently using a recycled laptop battery with BQ4050. Any working BMS will work.
The real reason for using TIVAC is that Texas Instruments has the best support for the SMBus and they have integrated the SMBus drivers into the TivaWare™ for C Series SDK. Here is the example that I have used in my code TM4C123GH6PM: Interface Tiva C to BQ78350R1 using SMbus over I2C. Also, they make awesome battery management systems kits and tools.
Also, the TIVAC TM4C123G LaunchPad™ is affordable, found everywhere in our country, and used a lot with students, which makes it the preferred kit.
This image shows the connections of the BMS. I have soldered a pin header to help me with experimenting. The connections are illustrated in the following table:
| BMS Board | Explanation |
|---|---|
| P+ | Pack's positive pin (High Voltage - High Current) 11.1V nominal voltage , this pin can be used for charging/discharging the battery pack |
| P+ | Pack's positive pin (High Voltage - High Current) 11.1V nominal voltage , this pin can be used for charging/discharging the battery pack |
| C | SMBus-Clock (Communication) |
| D | SMBus-Data (Communication) |
| T | This pin should be connected to the thermistor with a label (RT) which is integrated into the battery (it enables the laptop to measure the internal temperature of the battery pack). The Chinese manufacturer connected a fixed 10KOhm resistor :D !!!! |
| P- | Pack's negative pin, which is shared with the communication protocol device and the load |
| P- | Pack's negative pin, which is shared with the communication protocol device and the load |
Here is the connection diagram for the BMS:
| BMS Board | TIVAC TM4C123G LaunchPad™ |
|---|---|
| P+ | Not Connected |
| P+ | Not Connected |
| C | PB2 |
| D | PB3 |
| T | Not Connected |
| P- | Connected To GND |
| P- | Not Connected |
Here is how the BMS is interfaced with the TIVAC:
The R1, R2 are pull-up resistors for the SMBus protocol. The 3.3V supply is used for the SMBus pull up resistors.
Here are images for the connection implementation:
I bought a MCP2551 CAN-BUS Shield For TIVA-C TM4C123 ARM Board shield and used it for my connections. Here is a top view image:
| Wire Color | Function | Connection with BMS |
|---|---|---|
| Red | 3.3V | None |
| Yellow | PB2 (SMBus Clock) | C |
| Orange | PB3 (SMBus Data) | D |
| Green | GND (P-) | P- |
The Junction PCB:
Top view:
This PCB has 3 sockets:
-
2 X KF2510 2.54 mm connector 4 Pins. One of these connectors used for connecting BMS with the TIVAC. there is also another one used for connecting EV2300 or EV2400 kit with both of the BMS and the TIVAC, the EV2300 and EV2400 are used for further debugging using the Battery Management Studio software.
-
1 X 4 Pins 2.54mm male pin header. This connector used for connecting the Logic Analyzer with the SMBus for more further debugging (This is optional).
Bottom view:
The image down below shows the connectors for the BMS:
Connecting the BMS with TIVAC:
Adding Logic Analyzer (Optional) for further SMBus debugging:
Logic Analyzer Connection with SMBus:
| Logic Analyzer Wire Color | Function | Connection with SMBus |
|---|---|---|
| Yellow | Channel 0 | SMBus Clock |
| Green | Channel 1 | SMBus Data |
| Blue | GND (P-) | P- |
Adding EV2300 or EV2400 for comparing both the rests from TIVAC and Battery Management Studio:
You need to use USB isolator for anything connected to the USB, I have used my own one, but you can use USB isolators from Adafruit.
I have used one USB isolator for each one of the following USB interfaces:
- Logic Analyzer.
- TivaC.
- EV2400.
Now the connection is ready.
Here in this folder TIVAC_SMBUS_BMS, you will find the TIVAC firmware for the BMS.
You will need to install the following prerequisites:
This video will help you:
In order to link the project with the TIVAWare, you will need to do the following steps:
- How to Add TivaWare to an Existing CCS Project, see pages from 23 to 27 in this file Getting Started with TivaWare™ for C Series.
If you done the steps right, the project settings should look like this:
You will need to add the smbus.c file to the project, this file will be found in the path "C:\ti\TivaWare_C_Series-2.0\utils\smbus.c". Follow the steps here:
- Linking Files and Libraries into a TivaWare Project in Code Composer Studio, see pages from 13 to 17 in this file Getting Started with TivaWare™ for C Series.
After this steps, you are ready to test the firmware with the BMS.
After connecting the TIVAC, a USB to serial device will show in the device manager:
After connecting the serial terminal with the COM3, we will see the output from the TIVAC.
BQ4050 SBS Commands Example
Manufacturer Access: 0x7181
Remaining Capacity Alarm: 300 mAh
Battery Mode: 0x4101
At Rate: 0 mA
At Rate Time To Full: 65535 minute(s)
At Rate Time To Empty: 65535 minute(s)
At Rate OK: 1
Temperature: 33 Degree C
Voltage: 12507 mV
Current: 0 mA
Average Current: 0 mA
Max Error: 100 %
Relative State Of Charge: 81 %
Absolute State Of Charge: 76 %
Remaining Capacity: 3342 mAh
Full Charge Capacity: 4144 mAh
Run Time To Empty: 65535 min
Average Time To Empty: 65535 min
Average Time To Full: 65535 min
Battery Status: 0x48c0
Cycle Count: 0
Design Capacity: 4400 mAh
Design Voltage: 11100 mV
Manufacture Date: 21\03\2019
Serial Number: 0x0001
Comparing the result with the data from Battery Management Studio:
We will see that the data matches with the Battery Management Studio.
After connecting the serial terminal with the COM3, we will see the output from the TIVAC.
BQ30z55 SBS Commands Example
Manufacturer Access: 0x0000
Remaining Capacity Alarm: 271 mAh
Battery Mode: 0x6001
At Rate: 500 mA
At Rate Time To Full: 24 minute(s)
At Rate Time To Empty: 65535 minute(s)
At Rate OK: 1
Temperature: 33 Degree C
Voltage: 16277 mV
Current: 0 mA
Average Current: 0 mA
Max Error: 1 %
Relative State Of Charge: 95 %
Absolute State Of Charge: 71 %
Remaining Capacity: 1911 mAh
Full Charge Capacity: 2032 mAh
Run Time To Empty: 65535 min
Average Time To Empty: 65535 min
Average Time To Full: 65535 min
Battery Status: 0x00c0
Cycle Count: 1
Design Capacity: 2710 mAh
Design Voltage: 14800 mV
Manufacture Date: 30\04\2015
Serial Number: 0xd8b1
Comparing the result with the data from Battery Management Studio:
Flags:
Static Data:
We will see that the data matches with the Battery Management Studio.
- SMBus Compatibility With an I²C Device.
- Implementing SMBus Using MSP430™ Hardware I²C.
- Enhanced I²C and SMBus Master Interface Reference Design With PRU-ICSS.
- Understanding the I²C Bus.
- SMBus Made Simple.
- BQ2085: Firmware help for Smbus.
- TM4C123GH6PM: Does the TM4C123G microcontroller have pre-written library for Smart Battery API.
- TM4C123GH6PM: Interface Tiva C to BQ78350R1 using SMbus over I2C
-
Interfacing BQ24725 smart charger with TM4C123G.
-
Controlling both of the BMS and BQ24725 with CAN Bus.
-
Making a battery pack with more than one BMS connected together and controlling the battery pack using CAN BUS.
This repository required a lot of work in many fields:
- Hardware reverse engineering.
- Battery management systems.
- Embedded Systems.
- Communication Protocols Reverse Engineering.
- Security.
- Soldering. So, please consider that my work might not be perfect. This work could be done with a whole team and took around 2 years of non-continuous work by myself only.
This repository needs a lot of work in order to get better code that works efficiently with no mistakes, and this will require lots of testing and maintaining the code.
All contributions are available to anyone who wants to make this work better. Thank you all for your support.
If you have seen my work and it helped you, please support me on LinkedIn by endorsing my skills. It will be appreciated 😀.
It would be a pleasure if you supported me on any of the following platforms; it will help finish this work and getting new tools.
- Buy Me A Cofee.
- You can visit my Patreon page and become a Patreon.
- You can do a one-time donation via PayPal at Donate Using Paypal.
Thank you for your support.