The BMS Handshake: Pre-Fire Shutdown
In battery storage, off-gas sensors tell the BMS to shut a failing stack down within 2–30 minutes. On a car deck the ship can't reach the vehicle's BMS.
In stationary battery energy storage, off-gas detection is wired into the battery management system: when a sensor sees a cell venting, the BMS shuts down the affected stack before thermal runaway spreads. Vendors of these systems quote between 2 and 30 minutes of warning. A vehicle carrier cannot close the same loop, because every vehicle has its own BMS and the ship has no connection to any of them. The warning has to come from outside the car.
How does the handshake work in energy storage?
Detect off-gas, then cut the energy. In a battery energy storage system, a failing cell releases electrolyte vapour and gases before it smokes; sensors such as Honeywell's Li-ion Tamer detect them at parts-per-million levels, without touching the cells. The system then signals the BMS, which disconnects the affected rack or stack. Removing charge and current from a cell in the early off-gas stage can stop it reaching runaway and prevent spread to its neighbours. Fire codes for these installations, such as NFPA 855, have made gas detection a standard part of the design.
Why can't a car carrier do the same?
Because the ship cannot talk to the car. Each vehicle has its own BMS, built by its manufacturer, with no standard interface to anything outside the vehicle, and a parked car on a ship is switched off with its battery isolated as far as the driver's controls allow. The vehicle's own warning, which UN GTR 20 requires to alert occupants five minutes before a thermal event becomes hazardous, goes to an empty cabin. A carrier also has no authority to command a customer's vehicle, even if an interface existed.
Where could a marine handshake work?
Where one party controls both the data and the vehicles. A carmaker shipping its own vehicles on its own ships, as BYD and SAIC now do, has one BMS family, one data format and the right to act on it. Pre-loading yards are another candidate: vehicles are still under terminal or manufacturer control, and battery data such as state of charge can be read before loading. The EU battery passport, carrying state-of-health data from 2027, points the same way, although it was built for recyclers rather than the loading ramp.
- Carmaker-owned fleets: one BMS profile, one owner, a contractual right to act.
- Pre-loading yards: battery data readable while vehicles are still under shore control.
- Battery passports: state-of-health data, once it is available at the ramp.
What should a ship do in the meantime?
Detect from outside the vehicle and act with the ship's own systems. Without a link to the BMS, the ship's options are to detect the venting and heating itself, locate the vehicle and respond with isolation, boundary cooling and fixed suppression. The off-gas principle still applies; only the actuator changes, from a BMS command to a crew decision.
How RoRoSAFE helps
A marine BMS handshake is hard because the ship cannot talk to the vehicle's battery management system. RoRoSAFE works from outside the vehicle instead: per-vehicle thermal and vent-gas sensing gives the crew the pre-fire signal that the BMS keeps to itself, with an alert that names the bay. No connection to the car is needed.
Pilot: one deck · installed alongside the berth · no drydock · 6 months of dashboard access
Sources
- 1. Honeywell — Li-ion Tamer off-gas detection: ppm-level detection of cell off-gas, typically 2–30 minutes' warning before thermal runaway, automatic communication with the BESS battery management system to shut down affected stacks.
- 2. NFPA 855, Standard for the Installation of Stationary Energy Storage Systems — gas detection and explosion control provisions.
- 3. UN Global Technical Regulation No. 20 (Electric Vehicle Safety) — occupant warning five minutes before hazardous conditions from a thermal event. As analysed in 'Does the Off-Gas Ever Leave the Battery Pack?'.
- 4. EU Battery Regulation — battery passport with state-of-health data from 2027. As analysed in 'Can Battery Passports Screen EV Fire Risk?'.
Questions, answered
What is a BMS handshake in battery safety?+
In stationary battery storage, off-gas sensors detect a cell venting and signal the battery management system, which shuts down the affected stack before thermal runaway spreads. Vendors quote 2 to 30 minutes of warning. It closes the loop between detection and action automatically.
Can a ship shut down a vehicle's battery if it detects a fault?+
Not today. Each vehicle has its own manufacturer-specific BMS with no standard interface to the ship, and the carrier has no authority to command a customer's vehicle. The vehicle's own thermal warning is designed for occupants and goes to an empty cabin on a parked car.
Where could battery data be used before or during shipping?+
Where one party controls both vehicles and data: carmaker-owned fleets with a single BMS family, and pre-loading yards where vehicles are still under shore control and state of charge can be read. The EU battery passport's state-of-health data, from 2027, may help once it reaches the loading ramp.
What should a car carrier rely on instead of the vehicle's BMS?+
Detection from outside the vehicle: sensing venting gas and heat, locating the vehicle and responding with the ship's own isolation, boundary cooling and fixed suppression. The early-warning principle is the same as in energy storage; the action is a crew decision rather than a BMS command.
Continue the thread
Multi-Modal Fusion: Heat, Gas, and Smoke
Each sensor modality has different blind spots. Multi-modal fusion is not a buzzword — it is the only architecture that survives the marine failure modes.
Gas Sensing for Li-Ion Runaway: Bench vs Sea
Gas sensors catch Li-ion runaway early on a bench; at sea, airflow and background gas erode the lead. Which gases, where to mount, why it is a backup.
Detecting EV Faults in the Yard, Not at Sea
Four shore-side pilots — OEM yard, port terminal, BMS-pull, battery warehouse — show detection catching EV faults before the cargo reaches a deck.