123 Main Street, New York, NY 10001

Thermal Runaway and Off-Gassing Sensing for ESS Batteries

← Back to: Energy & Energy Storage Systems

This page shows how to design a practical off-gassing sensing node for battery ESS, UPS and EV packs: how to pick gas, pressure and optical sensors, build a low-power MCU node with robust power and isolation, place it in racks and containers, and integrate alarms, diagnostics and testing hooks safely into BMS, EMS and fire systems.

What this page solves

Lithium-ion battery packs in ESS, UPS and EV applications rarely jump from normal operation to open flame in a single step. Before full thermal runaway, cells often release gas, deform enclosures and raise internal pressure in cabinets or containers, sometimes accompanied by odour or haze. These early indicators create a narrow but valuable detection window.

Traditional battery management systems focus on voltage, current and temperature measurements. For early thermal-runaway detection, these channels tend to react late, after the underlying chemistry has already accelerated. This page concentrates on off-gassing sensing nodes: gas, pressure and optical front-ends combined with low-power MCUs and robust alarm outputs that sit between the BMS and fire-protection layers.

  • Focuses on gas, pressure and optical signals related to early off-gassing, and how they are converted, filtered and evaluated by dedicated sensing nodes.
  • Describes low-power MCU architectures, alarm paths (buzzer, relay and digital outputs) and interfaces towards BMS, EMS and site gateways.
  • Does not cover coolant-loop design, thermal-mechanical countermeasures or detailed fire-suppression systems, which are handled by battery thermal management and fire-safety pages.
  • Does not attempt to replace system-level safety concepts; instead, it defines the last electronic early-warning layer within the broader Energy & Energy Storage Systems safety stack.
Off-gassing sensing node in the battery safety stack Block-style diagram showing a battery rack feeding an off-gassing sensing node, which in turn connects to alarm outputs and system controllers in the overall safety chain. Off-gassing sensing as an early-warning layer Battery rack Off-gas sensing node AFE MCU Buzzer · Relay · Digital alarm Safety & system layer BMS / EMS Fire I/F Off-gassing sensing bridges the gap between cell telemetry and fire-protection actions.

Failure modes and early indicators

Thermal runaway is driven by electrochemical and thermal feedback inside individual cells, but from a system perspective it can be simplified into a series of observable stages. Each stage exposes different physical quantities, which can be probed by pressure, gas, optical and temperature sensors with very different reaction times.

  1. Normal operation: the pack stays within its designed voltage, current and temperature windows; internal gas generation is negligible and enclosure pressure remains close to ambient.
  2. Degradation and local hotspots: internal resistance rises or local defects create higher heat generation. Temperature at the cell surface begins to climb, but cabinet-level pressure and gas levels may still appear normal.
  3. Off-gassing and enclosure swelling: decomposition of electrolyte and materials produces gas, leading to swelling of pouch cells or module housings and a measurable increase in internal cabinet or container pressure.
  4. Visible smoke and dense vapour: fine particles and vapour escape into ducts, plenums or open cabinet volumes where optical and smoke-sensing AFEs respond strongly.
  5. Open flame and venting with fire: the event escalates to a fire scenario, at which point fire-detection and suppression systems become the primary actors rather than early-warning sensors.

Different sensing modalities see different parts of this timeline. Pressure and gas channels can respond during the off-gassing stage, often tens of seconds to several minutes before external temperature sensors or smoke detection reach trip thresholds, depending on enclosure design and airflow. Optical and smoke channels tend to react later but provide strong confirmation that vapour and particles have escaped into shared volumes.

Measured quantity Typical sensing approach
Cabinet or module pressure / ΔP MEMS absolute or differential pressure sensor with bridge or digital AFE, referenced to ambient or a known baseline.
Gas composition (VOC, CO, CO₂, H₂) Integrated gas or air-quality SoCs, electrochemical or NDIR sensors with temperature-compensated read-out and built-in diagnostics.
Smoke, haze and particles Optical smoke-sensing AFEs or particle counters placed in ducts, exhaust paths or cabinet heads, tuned for low ambient dust levels.
Surface temperature NTCs, RTDs or integrated temperature sensors routed into BMS ADC channels; useful as a redundant indicator but often slower than pressure or gas for early warning.
Thermal runaway stages and sensing windows Horizontal timeline from normal operation to flame, with rows showing where pressure, gas, optical and temperature sensors are most responsive. Stages of thermal runaway and sensing windows Normal Healthy cells Degradation Local hotspots Off-gassing Swelling & ΔP rise Smoke Vapour & particles Flame Fire event Pressure Gas Optical Temperature Pressure and gas channels can react during off-gassing, before smoke and external temperature alarms.

Sensing modalities and IC categories

Early detection of battery off-gassing relies on the choice of sensing modality. Gas, pressure and optical channels each see a different part of the thermal-runaway timeline and carry very different trade-offs in response time, false-alarm behaviour and implementation cost. Selecting a primary sensing path and deciding which modalities remain auxiliary is more effective than attempting to deploy every option everywhere.

This section groups off-gassing sensing options into three practical categories: gas and air-quality SoCs, differential or absolute pressure sensors, and optical or smoke-sensing AFEs. For each category, the design needs to consider response window, typical sources of noise and drift, environmental constraints and interface choices before committing to specific IC families.

Gas and air-quality sensors

  • Response and sensitivity: gas and IAQ SoCs respond directly to VOCs, CO, CO₂ or H₂ released during electrolyte decomposition and venting. Many devices require warm-up and stabilisation, so they act as strong indicators of sustained off-gassing rather than sub-second transients.
  • False-alarm mechanisms: cleaning chemicals, sealants, fuel residues and other indoor pollutants can perturb readings. Long-term drift and sensitivity loss demand periodic calibration or baseline-tracking strategies.
  • Environmental constraints: most IAQ sensors are designed for cabinet heads, ducts or room volumes with moderate humidity and dust levels, not for direct exposure to condensing vapour or electrolyte spray inside modules.
  • Typical interfaces and IC functions: modern gas sensors favour I²C or SPI interfaces with built-in temperature compensation, calibration constants and diagnostics registers; legacy electrochemical heads use analogue front-ends with transimpedance or instrumentation amplifiers and external ADCs.

Differential and absolute pressure sensors

  • Response and sensitivity: MEMS pressure sensors can pick up slow but meaningful pressure increases inside racks, cabinets or containers as cells swell and off-gas. This channel often reacts earlier than external temperature or smoke sensing when enclosures are reasonably tight.
  • False-alarm mechanisms: ambient barometric changes, temperature gradients and door or fan activity can all shift measured pressure. Algorithms must distinguish these slow variations from monotonic pressure build-up linked to off-gassing.
  • Environmental constraints: the transducer should see representative internal pressure without sitting directly in high-velocity airflow. Protection against condensation, vibration and mechanical stress is important if the sensor is mounted on modules or rack walls.
  • Typical interfaces and IC functions: bridge-type MEMS devices use analogue AFEs, while fully compensated digital pressure sensors present I²C or SPI ports with factory calibration, temperature compensation, programmable filtering and built-in fault flags.

Optical, smoke and particle-sensing AFEs

  • Response and sensitivity: optical smoke and particle sensors respond strongly when vapour and aerosols escape into shared volumes such as ducts and room spaces. They typically sit closer to the visible smoke phase than to the very first off-gassing events.
  • False-alarm mechanisms: dust accumulation, insects and stray light can all trigger or bias readings. Robust housings and periodic cleaning are required, particularly in industrial sites.
  • Environmental constraints: these sensors are best placed in exhaust channels, cabinet heads or dedicated sampling lines rather than deep inside modules where flow is poorly defined and contamination is severe.
  • Typical interfaces and IC functions: integrated AFEs often combine LED drivers, photodiode amplifiers, modulation and demodulation blocks, threshold comparators and self-test modes; digital particle counters expose UART or I²C outputs with processed metrics.

Comparing the three options side by side helps narrow the primary sensing path for a given application. Pressure channels are well suited as early indicators in relatively sealed cabinets and containers, gas channels strengthen correlation to electrochemical events, and optical channels provide strong confirmation once vapour enters shared air volumes.

Design aspect Gas sensors Pressure sensors Optical / smoke AFEs
Response window Strong response once sustained off-gassing reaches sampling points in ducts or cabinet heads. Often the earliest cabinet-level indicator when enclosures are reasonably sealed and stiff. Typically reacts later, closer to the visible smoke phase or venting into shared spaces.
False-alarm risk Sensitive to ambient VOCs, cleaning agents and process gases; requires baseline and context. Responds to barometric changes, temperature drift and door or fan operations if not filtered. Susceptible to dust, insects and stray light unless housings and optics are well maintained.
Power profile Many IAQ SoCs draw milliamps continuously; duty-cycling and warm-up compromises may be required. Digital pressure sensors can operate at very low average current with sparse polling. Optical AFEs consume power for LEDs and photodiodes; duty-cycling can reduce but not remove this cost.
Installed cost Sensor heads and filters add cost; routing sampling tubing further increases complexity. Moderate component cost, often offset by simple mechanical integration and wiring. Costs include AFEs, optical components, housings and maintenance operations.
Installation difficulty Requires thought about airflow and representative sampling points in cabinets or containers. Straightforward mechanical mounting; more effort goes into signal conditioning and calibration. Dependent on duct geometry and reachability for periodic cleaning and functional checks.

In many ESS cabinets and rack-level UPS systems, pressure sensing often becomes the primary early indicator, with gas sensors used for chemical confirmation and optical sensing reserved for shared-volume or room-level confirmation where smoke is expected to travel.

Off-gassing sensing options and trade-offs Block-style comparison of gas, pressure and optical sensing modalities, showing early-warning capability, false-alarm risk and power demand for each option. Comparing off-gassing sensing options Early-warning strength False-alarm pressure Power demand Gas Pressure Optical Early-warning strength False-alarm pressure Power demand Early-warning strength False-alarm pressure Power demand Early-warning strength False-alarm pressure Power demand Pressure sensing is often used as the primary early indicator, with gas and optical channels adding context and confirmation.

Off-gassing sensing node architecture

An off-gassing sensing node is more than a single sensor; it is a compact, low-power safety module that combines sensors and front-ends, a microcontroller, alarm drivers and system interfaces on one board. The node must run continuously with microamp-level average current, perform thresholding and diagnostics locally, and present clear alarm states to both local operators and higher-level controllers.

Sensor front-end

  1. Multi-sensor combinations: a practical node often combines one primary modality (for example, cabinet pressure) with one or more auxiliary channels such as gas or optical sensing. The architecture should reserve at least one spare analogue or digital input to accommodate future upgrades or redundancy.
  2. Analogue and digital front-ends: bridge-type pressure transducers feed instrumentation amplifiers and ADCs, while modern gas and pressure SoCs attach directly to the MCU via I²C or SPI. Optical AFEs can present analogue outputs or integrated digital read-out; the node aggregates these signals into a consistent internal representation.
  3. Temperature as an auxiliary input: temperature channels support compensation and act as a redundant indicator, but they are not treated as the primary trigger for early off-gassing alarms within this architecture.

MCU and firmware hooks

  1. Low-power duty cycling: a small MCU (for example, Cortex-M0+ or compact RISC-V) runs timed wake-ups to sample sensor data, execute filtering and threshold checks, and then return to deep sleep. Sampling intervals of seconds allow average current to remain in the tens of microamps when supply and sensor choices permit.
  2. Thresholds and alarm levels: the firmware implements at least two alarm bands, such as pre-warning and critical. These bands map to different relay contacts, GPIO states or message fields without encoding detailed system reactions, which are defined in BMS, EMS or fire interface logic.
  3. Self-test and diagnostics: the MCU periodically polls sensor status registers, monitors supply rails and runs basic memory and watchdog checks. Fault conditions are reported separately from off-gassing alarms so that wiring issues or sensor failures do not masquerade as thermal events.

Alarm and interface options

  1. Local alarm paths: the node usually drives at least one relay output and may include a buzzer or status LEDs. Relay contacts are wired into safety chains such as fire panels, HV disconnect units or hardwired interlocks, while visual and audible indicators support on-site diagnostics and maintenance.
  2. System interfaces: CAN or CAN FD links carry detailed event and trend data into BMS and EMS controllers, while RS-485 and UART interfaces support legacy systems or rack-level gateways. Digital inputs and outputs provide a simple alternative where only discrete alarm states are required.
  3. Separation of roles: the node is responsible for reliable detection, local signal conditioning and clear state reporting. Higher-level controllers orchestrate shutdown, reconfiguration and fire-response actions using the node’s alarms as one of several safety inputs.
Off-gassing sensing node architecture Block diagram showing sensors and front-ends feeding a low-power MCU, with local alarms, system interfaces and power and backup functions completing the sensing node. Off-gassing sensing node building blocks Sensors Gas ΔP Opt. Temp Front-end & ADC Bridge, TIA, ΔΣ, digital sensor links Low-power MCU Sampling & filtering Thresholds & levels Self-test & diagnostics Local alarms Buzzer · Relay · LEDs System interfaces CAN · RS-485 · UART · I/O Power and backup DC/DC · LDO eFuse · switches Supercap backup Sensors and AFEs feed a low-power MCU, which drives alarms and interfaces while shared power and backup keep the node active during critical events.

Deployment topologies in ESS, UPS and EV applications

Off-gassing sensing nodes are only effective when placed where gas, pressure and vapour changes actually appear. Different system form factors demand different deployment strategies: rack-based ESS systems, containerised battery sites and smaller UPS or EV packs all require distinct node counts, placements and wiring approaches.

The following patterns summarise typical node placement in three representative scenarios. Each pattern describes preferred sensor locations, how nodes connect to BMS, EMS and fire interfaces, and common wiring topologies such as daisy-chained field buses or star-wired relay loops.

Rack-level ESS

  • Typical node count and placement: one off-gassing node per battery rack is common, usually mounted near the upper part of the cabinet where warm gases accumulate. High-criticality systems may add a second node at the opposite end or rear of the rack for redundancy.
  • Interfaces to BMS, EMS and fire systems: each node shares a CAN or RS-485 bus with the rack BMS or site gateway and exposes a relay output into the fire or interlock wiring harness, allowing both detailed status messages and a simple hardwired alarm contact.
  • Wiring topology: communication ports are often daisy-chained from rack to rack along an aisle, while relay contacts are wired in a star pattern back to a fire or trip interface panel for clear zoning.

Container-level ESS

  • Typical node count and placement: container systems combine battery racks, PCS and auxiliary equipment. One or more nodes monitor the container headspace, additional nodes guard specific battery aisles or compartments, and optional optical nodes sit in exhaust ducts or roof vents.
  • Interfaces to EMS and gateways: all nodes within a container report over CAN or RS-485 to a local EMS or site gateway, which then aggregates alarms for station-level control and monitoring.
  • Wiring topology: internal communication lines form a short daisy-chain between nodes inside the container, while critical relay outputs are taken directly from selected nodes to the container’s fire or trip interface to avoid dependence on a single controller.

UPS, small cabinets and EV packs

  • UPS and small cabinets: small UPS battery enclosures or distribution cabinets often use a single off-gassing node mounted near the top of the enclosure or at an exhaust vent. This node provides a relay contact into the UPS alarm terminals and, where available, a serial interface for richer diagnostics.
  • EV battery packs: automotive battery packs are space-constrained and handle harsh vibration. Designs tend to rely on integrated pressure or deformation sensing within the pack enclosure and route those signals into the traction BMS, rather than installing separate cabinet-style off-gas nodes.
  • Wiring considerations: UPS and small cabinets favour star-wired connections back to a central controller, while EV packs treat off-gassing-related measurements as internal signals within the vehicle’s powertrain network.
Scenario Typical node count Preferred placement Interfaces
Rack-level ESS One node per rack, optional second node for redundancy Upper cabinet sections above modules, near warm air pockets CAN or RS-485 to rack BMS or gateway, relay to fire or trip interface
Container ESS Several nodes per container, covering headspace and key compartments Container headspace, battery aisles, exhaust ducts and vents Shared bus to EMS or site gateway, selected relays into container fire interface
UPS / small cabinet / EV pack Single node per cabinet; integrated sensing within EV packs Cabinet tops or vents; internal pack surfaces or housings in EV Alarm contacts and serial links to UPS; internal wiring to vehicle BMS
Off-gassing sensor placement in racks, containers and EV packs Diagram showing typical off-gassing sensing node placement in rack-level ESS cabinets, containerised ESS systems and EV battery packs. Off-gassing sensor placement examples Rack ESS Container ESS EV pack Node One node per rack near the top; optional second node for redundancy. Battery section PCS / auxiliaries Top node Duct Multiple nodes cover headspace, compartments and exhaust ducts. ΔP node Vehicle BMS Integrated pressure or deformation sensing inside the pack housing. Node placement depends on form factor: racks, containers and EV packs call for different coverage strategies.

Integration with BMS, EMS and alarm priorities

Off-gassing sensing nodes generate alarms that must be consumed by battery management systems, site energy management systems and fire or HV disconnect interfaces. The node is responsible for robust detection and clear state signalling, while higher-level controllers decide how to derate, disconnect or trigger site procedures.

To keep system design modular and maintainable, it is useful to standardise a small set of alarm states and routing paths. Hardwired relay outputs provide a fast, software-independent path into safety chains, while bus communications carry detailed measurements and event histories into BMS and EMS logic.

Alarm states from the off-gassing node

  • OK / Normal: sensors operate within expected ranges and self-tests pass. Relay contacts remain in the healthy state, and communication frames indicate normal operation.
  • Warning: early indicators such as slow pressure rise or moderate gas level shifts cross warning thresholds. BMS and EMS can use this state to increase monitoring, notify operators or gently derate power, without initiating hard shutdowns.
  • Critical: clear off-gassing signatures, rapid trends or multiple modalities in agreement push the node into a critical alarm state. The relay output changes state, and high-priority bus messages identify the node and zone that require immediate attention.
  • Fault: sensor failures, wiring issues, supply problems or failed self-tests. Fault is kept separate from Warning and Critical so that sensor problems do not masquerade as thermal events.

How BMS and EMS use off-gassing alarms

  • BMS-level reactions: battery controllers can correlate Warning and Critical states with voltage, current and temperature data. Typical actions include power derating, disabling charge in affected strings, isolating racks and requesting site-level coordination without implementing detailed fire logic in the sensing node.
  • EMS and gateway use: EMS and site gateways ingest alarms from multiple nodes and containers, then coordinate grid interaction, dispatch decisions and operator alerts. Detailed node data feeds event logs and post-incident analysis.
  • Handling faults: when a node reports Fault, higher-level controllers can treat the associated area as partially blind, tightening safety margins and scheduling maintenance, rather than immediately treating it as a confirmed thermal event.

Alarm routing and priorities

Alarm routing from the node to the rest of the system follows two complementary paths. The hardwired relay path feeds fast-acting safety interfaces, while the communications path delivers richer context into BMS and EMS software. Both paths are required to maintain safety in the presence of controller or network faults.

  • Hardwired relay path: the relay contact from each node connects into fire panels, HV disconnect controllers or safety I/O modules. Critical off-gassing alarms cause a change of contact state regardless of the status of upstream CPUs or communication links.
  • Data bus path: CAN, RS-485 or other field buses carry encoded alarm states, node identifiers, basic measurements and time stamps to BMS and EMS software, enabling graded responses, zoning decisions and complete event records.

Design guidelines:

  • Prefer relay wiring that retains a safe default state during power loss or broken wiring, so that disconnections are treated as faults rather than silently ignored.
  • Reserve the relay path for clear, critical off-gassing alarms and potentially for node-fault signalling; do not rely on software polls alone for last-resort safety actions.
  • Avoid embedding detailed fire-suppression or HV switching logic inside the sensing node. Such decisions belong in dedicated fire interface and disconnect-control functions.
Alarm routing from the off-gassing sensing node Block diagram showing an off-gassing sensing node driving a hardwired relay path to fire and HV interfaces and a data path to BMS, EMS and logging systems. Alarm routing from an off-gassing node Off-gas sensing node OK · Warning · Critical · Fault Fire & HV interface Relay input · fast safety path BMS, EMS and gateway CAN · RS-485 · diagnostics Event logs and trend analysis Relay path (Critical / Fault) Data path (states and measurements) Sensors and node inside rack, container or cabinet. Trip Log Critical off-gassing alarms travel through a hardwired relay path for fast action while detailed states and measurements follow the data bus into BMS, EMS and logging systems.

Power, isolation and safety design for off-gassing nodes

Off-gassing sensing nodes must keep running when auxiliary rails sag, remain electrically safe with respect to high-voltage battery domains and avoid becoming unwanted ignition sources. Power and isolation choices determine whether alarms are still delivered during outages and whether nodes survive real fault conditions without damaging cables or upstream supplies.

This section groups design hooks into three areas: how to feed and back up the node, how to isolate it from high-voltage and long field buses, and how to prevent the electronics from adding ignition energy into hazardous zones. The goal is to make the node predictable and safe even when the rest of the system is under stress.

Power: supply sources, backup and protection

  • Primary supply path: off-gassing nodes are usually powered from SELV-level auxiliary rails (for example 24 V or 48 V DC) or from local DC/DC converters, not directly from the high-voltage battery bus. A clearly defined input range and inrush profile simplifies rail budgeting.
  • Short-term backup: a supercapacitor on the low-voltage rail can maintain MCU, sensors and relay drive for several seconds after the main auxiliary supply is lost. This window allows the node to raise a final critical alarm and record a clean power-loss event before shutting down.
  • Protection and inrush control: an eFuse or high-side switch in the input path limits fault current, implements overvoltage and undervoltage thresholds and soft-starts the downstream DC/DC converter, protecting both the auxiliary rail and the backup capacitor.
  • Rail sequencing for graceful shutdown: backup capacity and undervoltage thresholds should be coordinated so the node transitions from normal operation to a controlled alarm and log flush, rather than collapsing directly into undefined brown-out behaviour.

Isolation: interfaces to HV domains and long buses

  • When isolation is required: any interface that crosses between battery stacks, cabinets or earthing zones should be treated as a candidate for galvanic isolation. CAN, RS-485 and other long-distance lines in particular benefit from isolated transceivers to control common-mode voltage and surge stress.
  • Isolation building blocks: typical choices include isolated CAN or RS-485 transceivers for the field bus, digital isolators for discrete status lines and isolated DC/DC modules when the node must float relative to nearby high-voltage structures.
  • Placement in the signal chain: the isolation barrier is often placed between the MCU domain and the external bus or relay interface, keeping the sensing front-end and controller on a single low-voltage reference while allowing the node to communicate safely across cabinets or battery strings.
  • Coordination with system insulation design: detailed insulation coordination, creepage and clearance are normally handled at the pack BMS or HV disconnect level. The node’s role is to respect those boundaries by choosing appropriate isolators and connector layouts.

Safety hooks: limiting ignition energy from the node

  • Current limiting and energy control: relay coils, buzzers, LEDs and other outputs should be driven through well-defined current limits so that short circuits or wiring faults do not inject uncontrolled energy into cable bundles or nearby enclosures.
  • Contact and spark management: high-energy switching actions, such as contactor drive, are better located in dedicated fire or HV interface panels. Off-gassing nodes normally handle only low-energy signalling contacts to reduce the risk of ignition-capable sparks.
  • Layout and separation: PCB layout should keep sensing and logic circuits physically separated from any higher-energy outputs, with appropriate spacing and routing to limit coupling during fault events.
  • System-level responsibilities: explosion-proof enclosures, fire zoning and suppression system design sit at system level. The node contributes by staying within its low-energy envelope and supporting safe routing of alarms into those higher-level safety functions.

Example IC categories for power and isolation:

  • Low-power step-down converters and LDOs sized for always-on sensing nodes.
  • eFuses or high-side switches with adjustable current limits and undervoltage/overvoltage thresholds.
  • Isolated CAN and RS-485 transceivers for cabinet-to-gateway communications.
  • Supercapacitor controllers and ideal-diode or OR-ing controllers for backup rails.
Power and isolation options for an off-gassing sensing node Block diagram showing auxiliary supply, eFuse, DC/DC, LDO, supercapacitor backup and an isolation barrier between the off-gassing node and external interfaces such as fire and HV interfaces or BMS and EMS. Power and isolation for an off-gassing node Aux supply 24 V / 48 V eFuse / high-side limit · OVP · UVP DC/DC to low-voltage rail LDO clean rail Off-gas sensing node sensors · AFE · MCU Supercap backup rail Ideal diode / OR-ing Isolation barrier Fire & HV interface BMS / EMS gateway Controlled power paths, backup energy and galvanic isolation keep the off-gassing node alive, safe and connected to fire interfaces and BMS or EMS controllers.

Reliability, diagnostics and false-alarm mitigation

An off-gassing sensing node that raises too many false alarms quickly loses credibility, and operators may be tempted to mute or bypass it. Robust filtering, diagnostics and event reporting are essential to keep alarm behaviour trustworthy over years of operation and across varying environmental conditions.

This section highlights typical sources of nuisance alarms, practical signal-processing and logic techniques, self-test hooks inside the node and a few considerations for operator experience so that alarms remain meaningful and easy to interpret.

Where false alarms come from

  • Environmental drift: temperature and humidity shifts can move gas and pressure sensor baselines or change sensitivity, especially as devices age or if compensation is incomplete.
  • Contamination and physical effects: dust, oil films and salt deposits on optical or gas ports alter readings. Vibration and mechanical shocks produce pressure spikes in tightly sealed enclosures.
  • Normal operational events: routine door openings, maintenance activities, fan speed changes and HVAC transients cause brief gas or pressure disturbances that should be recorded but not treated as confirmed thermal runaway.
  • Electrical and communication issues: supply dips, reference drift, line faults and corrupted frames can masquerade as alarm conditions if not clearly separated into dedicated fault states.

Signal processing and decision logic

  • Filtering and time constants: low-pass filters and sliding averages on ΔP and gas readings suppress short impulses from door openings or airflow changes. Time constants in the range of several seconds are often acceptable because off-gassing develops much slower than electrical faults.
  • Thresholds with dwell time: Warning and Critical states should be entered only when filtered values exceed thresholds for a configurable dwell time, rather than reacting to single-sample excursions.
  • Multi-signal consensus: combining evidence from ΔP, gas and optical channels significantly reduces false alarms. For example, a modest pressure rise accompanied by clear gas signatures is more credible than either indicator alone.
  • Stable state transitions: separate entry and exit criteria, including hysteresis and minimum hold times, avoid oscillation between Normal, Warning and Critical which can otherwise cause relay chattering and confusing LED behaviour.

Diagnostics and self-test hooks

  • Sensor and AFE diagnostics: many gas and pressure SoCs expose self-test modes and diagnostic flags for open or shorted elements, out-of-range signals and internal faults. Periodic polling of these flags allows the node to report a clear Fault state instead of mislabelling hardware issues as thermal events.
  • MCU integrity checks: RAM checks, Flash CRC verification, watchdog supervision and brown-out reset circuitry reduce the chance of the node running corrupted firmware or continuing operation at marginal supply voltages.
  • Communication health monitoring: error counters, timeouts and sanity checks on received commands help distinguish between real alarms and artefacts created by bus disturbances or configuration mismatches.
  • Event logging and counters: recording a short history of Warning, Critical and Fault events, including maxima and timestamps, makes it easier for site engineers to determine whether a node is unstable, misconfigured or exposed to abnormal conditions.

Operational experience and alarm presentation

  • Clear separation of states: indicators and status bits should distinguish Warning, Critical and Fault so that operations staff can see whether a problem is likely to be real off-gassing or a node malfunction.
  • Service-friendly test functions: a controlled test input or command, which briefly drives the alarm path, allows regular verification of wiring and integration without forcing operators to trigger artificial gas releases.
  • Stable visual behaviour: LED patterns and relay actions should be calm and predictable. A steady or slow-flashing indication for persistent alarms is easier to interpret than rapidly changing states that invite misinterpretation.
  • Link to design checklist: many of these measures can be captured as yes/no items in a design checklist so that teams verify filtering, diagnostics and operator feedback before approving a new node variant for deployment.
Diagnostics and filtering inside the off-gassing sensing node Block diagram showing sensors and AFE feeding filtering and thresholds, diagnostics and self-test, and event logging inside the MCU, with outputs to alarms and to BMS or EMS over the data bus. Diagnostics and filtering in an off-gassing node Sensors and AFE gas · ΔP · optical Low-power MCU Filtering and thresholds Diagnostics self-test Event log counters Alarms and indicators relay · buzzer · LEDs BMS / EMS data bus and logs Raw signals from gas, pressure and optical channels feed the MCU’s filtering and decision logic. Alarms and detailed status reach safety chains and higher-level controllers for logging and analysis. Structured filtering, diagnostics and event logging make off-gassing alarms dependable and reduce the risk of nuisance trips in ESS and UPS deployments.

Design checklist and IC mapping for off-gassing sensing nodes

This section turns the previous chapters into a practical checklist and a simple IC mapping table. The goal is to help review an off-gassing sensing node design step by step, from sensing modality choices to power, isolation, diagnostics and vendor selections.

Use the checklist to confirm that every critical design decision has been made and documented. The IC mapping table then suggests example device families and vendors for each functional block, so component research can start from a concrete baseline rather than from scratch.

Sensing strategy

  • Confirm that the primary measurable signals are defined and justified: ΔP / absolute pressure, gas (VOC / CO / H₂ / CO₂), optical / smoke and supporting temperature.
  • Check that each signal has a clear role in the thermal runaway timeline, for example which channels provide earliest warning and which confirm an event.
  • Select sensor interface types for each channel: analog bridge or current output, digital I²C or SPI, or photodiode with analog front-end.
  • Verify that the chosen sensing stack matches the target environment: rack-level ESS, container ESS, UPS room or EV pack enclosure.

Node architecture and low-power behaviour

  • Define sampling intervals, processing duty cycle and target average current so the node meets lifetime and backup energy constraints.
  • Separate always-on sensing and control domains from peripherals that can be turned off in normal operation, such as bright indicators or debug interfaces.
  • Map local states to measurements: Normal, Warning, Critical and Fault, tied back to thresholds and dwell times rather than ad-hoc conditions.
  • Confirm the dual alarm paths: hardwired relay or digital output toward safety chains, and a field bus path (CAN, RS-485 or UART) toward BMS or EMS for logging and coordination.

Power, isolation and safety

  • Ensure the node is powered from a defined auxiliary or low-voltage rail rather than directly from the high-voltage battery bus.
  • Size backup energy (supercapacitor or small battery) to keep sensing, processing and alarm outputs alive long enough to raise a final Critical alarm and log power loss.
  • Use an eFuse or high-side switch at the input for inrush control, current limiting and overvoltage and undervoltage protections, coordinated with backup behaviour.
  • Check where galvanic isolation is required for bus and I/O lines that cross cabinets, battery strings or earthing zones, and select appropriate isolated CAN or RS-485 transceivers or digital isolators.
  • Confirm that relay coils, buzzers and other loads are current-limited so faults do not inject uncontrolled energy or ignition-capable sparks into wiring.

Reliability, diagnostics and filtering

  • Apply low-pass filtering and sliding averages to ΔP and gas readings with time constants appropriate for off-gassing dynamics, not for fast electrical faults.
  • Implement dwell times and hysteresis on Warning and Critical thresholds to avoid oscillations and chattering alarms.
  • Use sensor and AFE self-test or diagnostic flags to separate hardware Fault conditions from real thermal events in status reporting.
  • Enable MCU-level integrity checks such as RAM testing, Flash CRC, watchdog supervision and brown-out reset.
  • Reserve memory for a compact event log capturing recent Warning, Critical and Fault events with timestamps and key measurement values.

Integration and maintenance

  • Verify that sensor count and placement for rack, container, UPS or EV pack deployments match the topology guidance from the placement section.
  • Keep system-level contactor logic and fire suppression control in dedicated BMS, EMS or fire interface equipment; the node should forward clear status and alarms rather than implement complex trip algorithms.
  • Provide clear local indicators, labelled terminals and a controlled test input or command so operators can verify alarm paths without artificial gas releases.
  • Align the node’s update and calibration strategy with higher-level secure update concepts, such as an ESS OTA controller or gateway, without embedding full OTA logic in this page.

IC mapping by functional block

The table below lists typical IC functions and example device families. These are indicative only and should be refined according to project requirements, qualification targets and preferred vendor policies.

Function block Typical IC features and notes Example IC families
Gas sensing SoC / IAQ sensor Integrated gas or VOC sensing with temperature compensation, on-chip calibration and I²C output. Diagnostic flags and self-test modes simplify Fault handling. Sensirion SGP40 / SGP41, Bosch BME688, Renesas ZMOD4410 / ZMOD4510 IAQ families.
ΔP / absolute pressure sensor Calibrated MEMS pressure devices used for cabinet ΔP or absolute pressure. Digital output parts reduce analog error sources and simplify layout. Honeywell TruStability HSC / SSC (for example HSCMRRN001PD2A3), TE Connectivity MS4525DO / MS5611, NXP MPXV low-pressure series.
Optical / smoke / particle front-end Photodiode plus low-noise amplifier or dedicated optical AFE to detect scattered light from smoke or particles. Configurable integration time helps reject flicker and stray light. ams OSRAM AS7331 / AS7341 optical AFEs, generic photodiodes with TI OPA320 / OPA333 or Microchip MCP6Vxx zero-drift amplifiers.
Auxiliary temperature / humidity and references Ambient temperature and humidity sensors provide context and compensation. Precision voltage references support analog AFE and ADC accuracy over lifetime. Sensirion SHT3x / SHT4x, TI HDC20xx humidity sensors; TI REF33xx, ADI ADR44x or Microchip MCP15xx reference families.
Low-power MCU Ultra-low-power Cortex-M0+/M4 or RISC-V controller with on-chip ADC, I²C, SPI, UART, watchdog and RTC. Sufficient Flash and RAM margin for future firmware updates. ST STM32L072 / STM32L452, TI MSPM0L or MSP430FR families, Renesas RA2L1 / RA4M1 low-power MCUs.
Relay / high-side driver Smart high-side switches or relay drivers with current limiting, overtemperature protection and diagnostic feedback for alarm contacts, buzzers and indicators. TI TPS27Sxx / TPS2Hxx high-side families, ST VNQ / VND smart high-sides, Infineon PROFET™ series.
Digital isolator / isolated transceiver Galvanic isolation for CAN, RS-485 and discrete status lines crossing cabinets or battery stacks. Surge and CMTI ratings should match the insulation concept. TI ISO1042 / ISO1050 isolated CAN and ISO67xx digital isolators, ADI ADM2687E / ADM3053, Silicon Labs Si86xx series.
Supercap / holdup and eFuse Supercapacitor controllers manage charge, balance and holdup timing. eFuses handle inrush control, current limiting and programmable OVP/UVP on the auxiliary input. ADI LTC3350 / LTC3351 supercapacitor managers, TI LM66100 ideal diodes and TPS2595 / TPS2660 eFuses, ON Semiconductor NIS series.
Off-gassing node design checklist overview Simple illustration showing a checklist card with grouped items for sensing, power and diagnostics to represent the design checklist concept. Off-gassing node design checklist Sensing Power & isolation Diagnostics ΔP / gas / optical channels selected Sensor interfaces and ranges defined Backup energy and eFuse settings reviewed Isolation and alarm routing confirmed Filtering, thresholds and self-test enabled Event logging and operator test path in place A concise checklist ties sensing, power, isolation and diagnostics together so off-gassing nodes can be reviewed consistently across ESS, UPS and EV projects.

Application mini-stories: off-gassing detection in the field

Early off-gassing detection is already being deployed in containerized ESS sites, UPS battery rooms and EV pack laboratories. The following mini-stories illustrate how nodes are placed, how they connect into alarm chains and what kind of results operators see during real incidents and tests.

Each example focuses on the combination of sensing, node architecture and alarm routing rather than on specific brands. Example IC stacks are included only to anchor the discussion in realistic device choices.

Application: container ESS with rack-aisle off-gassing nodes

A containerized ESS with multiple high-energy battery racks originally relied on cell voltage and temperature channels inside the pack plus ceiling smoke detectors in the container. Site operators experienced a test event where a cell vented, pressure rose inside the rack aisle and the smell of electrolyte was noticeable, but the smoke detectors responded late and alarms left little time for a controlled shutdown.

The retrofit introduced off-gassing nodes mounted near the top of each rack aisle. Each node combines a calibrated ΔP sensor monitoring enclosure pressure, a gas SoC for VOC signatures and a low-power MCU that implements filtering, thresholds and dual alarm paths. Relay outputs connect directly into the site fire and HV interface while CAN frames report detailed measurements into the ESS EMS and historian. During subsequent abuse tests, the nodes delivered Warning alarms tens of seconds after venting started and Critical alarms well before smoke detectors activated, giving operators several minutes to orderly reduce power and open contactors.

Takeaway: rack-aisle ΔP plus gas nodes can buy valuable minutes of early warning and give the EMS enough time to stage down power before smoke or temperature thresholds are crossed.

Example IC stack: Honeywell HSCMRRN001PD2A3 ΔP sensor, Sensirion SGP41 gas SoC, STM32L072 MCU, TI TPS27Sxx high-side driver and ADI LTC3351 supercapacitor manager.

Application: UPS battery room retrofit

In a legacy UPS battery room, the safety concept relied on room temperature sensors and ceiling-mounted smoke detectors. During a maintenance incident, operators observed hot strings and electrolyte odour but no visible smoke, and the building fire system did not trip. This highlighted a blind spot between thermal runaway onset and the point where conventional smoke detection becomes effective.

A small off-gassing node was added at the front of each battery string, slightly above the battery tier. Nodes use a gas and humidity sensor plus a simple optical front-end to monitor local air near the cells rather than only ceiling air. One relay contact per node ties into spare zones on the existing fire panel, while a Modbus RTU link reports measurements to the UPS controller for trend logging. In follow-up tests, off-gassing alarms consistently appeared several minutes before the ceiling smoke detectors, giving the UPS controller time to disconnect affected strings and alert staff without waiting for a full fire alarm.

Takeaway: cabinet-level off-gassing nodes complement room smoke detectors by covering the early phase of thermal runaway where heat and electrolyte vapour are present but visible smoke is not.

Example IC stack: Bosch BME688 gas and humidity sensor, photodiode plus TI OPA320 amplifier, TI MSPM0L MCU, ST VND5T smart high-side driver and TI TPS2595 eFuse.

Application: EV pack prototype lab and cycler

An EV battery developer used a multi-channel pack cycler and environmental chamber to stress-test new module designs. The team wanted quantitative data on how pressure, gas and temperature signals evolve during controlled abuse events so that BMS thresholds and early-warning logic could be set on firm evidence rather than on rules of thumb or isolated test reports.

Several off-gassing nodes were installed around the pack enclosure, including at the chamber exhaust and near service ports where vented gases are likely to appear. Nodes combined calibrated ΔP and gas sensors with a low-power MCU and isolated CAN transceiver tied into the lab data logger. During abuse cycles, synchronized traces from the cycler and the nodes showed ΔP drifting upward tens of seconds before visible venting and gas readings jumping sharply as vent valves opened. This allowed engineers to derive quantitative Warning and Critical thresholds and to validate that the combination of ΔP and gas offers more robust detection than either alone.

Takeaway: lab deployments of off-gassing nodes provide the data needed to justify thresholds and response times in production BMS and safety requirements.

Example IC stack: TE MS4525DO ΔP sensor, Renesas ZMOD4510 gas sensor, NXP K32L2A MCU and TI ISO1042 or ADI ADM3053 isolated CAN transceiver.

Examples of where off-gassing sensing nodes are used Simple illustration with three blocks representing a container ESS, a UPS battery room and an EV pack lab, each connected to an off-gassing sensing node and its alarm outputs. Where off-gassing nodes are deployed Container ESS Rack-aisle ΔP + gas UPS battery room Per-string off-gas nodes EV pack lab Abuse testing with nodes Off-gassing sensing nodes appear in containers, battery rooms and labs, always combining local sensing with robust alarm paths into existing safety systems.

Standards, testing and calibration hooks for off-gassing sensing nodes

Off-gassing sensing nodes must be supported by repeatable tests and calibration procedures. This section focuses on the node-level view: how to exercise the sensing channels in the lab, how to verify correct operation on site, and how to manage calibration constants and event data in firmware so compliance teams and investigators can rely on the node as a traceable instrument.

Full ESS or UPS certification remains the responsibility of system-level standards and fire protection designs. The goal here is to provide hooks so that cell and module abuse tests, rack exhaust trials and field inspections can directly use the capabilities of the off-gassing node without turning it into a separate safety controller.

Lab tests

In the lab, the off-gassing node is treated as a device under test alongside cells, modules and packs. Abuse tests are used to characterise timing, thresholds and failure modes of ΔP, gas, optical and temperature channels before the node design is released for field deployment.

  • In cell and module thermal runaway tests, nodes are installed at chamber exhausts or near vent points so ΔP and gas channels can be logged against voltage, current and temperature from the cycler and test stand.
  • Rack-level exhaust tests place several nodes at different heights and air paths around battery racks to compare which positions detect off-gassing earliest and how airflow and ducting affect response time and peak levels.
  • Data from these tests is used to confirm that ΔP and gas sensing provide meaningful early warning ahead of smoke detectors and bulk temperature, and to validate that thresholds and dwell times chosen in design are consistent with observed dynamics.
  • Integrators reference applicable ESS and fire standards at system level, while the node-level requirement is to expose measurable behaviour: response time, saturations, self-test reactions and fail-safe states under abuse.

On-site checks

Once installed in an ESS container, UPS room or EV lab, nodes need simple, repeatable checks that do not require reproducing thermal runaway. Commissioning procedures and periodic inspections verify wiring, alarm paths and basic measurement health under normal operating conditions.

  • Commissioning steps include verifying supply voltage and grounding, confirming relay or digital outputs are correctly landed on fire interfaces or BMS I/O, and running the node’s built-in test mode to trigger Warning and Critical alarms end-to-end.
  • Baseline measurements for ΔP, gas, optical and temperature are captured under normal ventilation and operating loads so future drift or contamination can be detected against a known reference point.
  • Periodic on-site checks repeat the functional test path, verify that fire panels, EMS and HMIs still react to node alarms, and visually inspect sensor inlets for dust, oil or mechanical damage in high-pollution areas.
  • Diagnostic flags and event statistics from the node help distinguish configuration and wiring issues from real environmental anomalies, while detailed condition monitoring and fleet analytics are handled by higher-level telemetry pages.

Firmware and data retention

Firmware and non-volatile memory turn the node into a traceable instrument rather than a black box. Calibration constants, self-test status and event history provide the context that safety engineers and auditors need when reviewing incidents or validating compliance against internal procedures.

  • Factory calibration writes gain, offset and temperature coefficients for each sensing channel into MCU Flash or EEPROM, together with production date, firmware version and hardware revision identifiers.
  • On-site self-checks use sensor self-test features and controlled baseline conditions to detect drift. Where permitted, small offset trims can be applied and tagged with timestamps rather than overwriting factory data.
  • Event logs store the last set of Warning, Critical and Fault events with timestamps and key measurements, as well as results from recent self-tests, in a circular buffer that survives power interruptions.
  • Higher-level systems periodically pull calibration metadata and event logs from nodes and archive them in a historian, allowing investigations and standards audits to reconstruct node behaviour during abnormal events.
Lab test bench and off-gassing node under test Conceptual illustration of a thermal test chamber with a battery module, an off-gassing sensing node and a lab logger, showing how timing and calibration are validated before field deployment. Testing and calibration hooks Chamber / test rig Cell / module under test Gas / pressure exhaust path Off-gas sensing node Sensors MCU & AFE Thresholds, self-test, logging Measured ΔP / gas / optical Lab logger / DAQ Time-aligned traces for ΔP, gas, optical, temperature CAN / UART Abuse tests and calibration hooks turn the off-gassing node into a traceable instrument that can be trusted in ESS and UPS safety cases.

Request a Quote

Accepted Formats

pdf, csv, xls, xlsx, zip

Attachment

Drag & drop files here or use the button below.

FAQs for off-gassing sensing node design

This FAQ gathers the most common design questions around off-gassing sensing in ESS, UPS and EV battery applications. Each answer points back to the earlier sections on sensing modalities, node architecture, power, diagnostics and integration so a complete concept can be reviewed from one place.

Use these questions as a checklist when choosing gas versus pressure or optical sensing, dimensioning the node MCU and power supply, defining alarm levels and planning testing and calibration hooks.

1. When should an off-gassing node prefer a gas sensor over a pressure sensor in ESS cabinets?
Gas sensors are most useful in relatively tight enclosures where vented electrolyte vapour can accumulate near the node, such as closed battery racks or compact UPS cabinets. Pressure sensors are more robust in large volumes and strong airflow. Many container ESS designs use gas sensing near cells and ΔP along aisles or ducts.
2. Is combining ΔP and gas sensing always better than using a single modality?
Combining ΔP and gas sensing offers stronger cross checking and often detects more scenarios, especially in container ESS or large battery rooms. However, cost, wiring and maintenance overhead also rise. For small UPS cabinets or cost constrained projects, a single well tuned modality with good thresholds and dwell times can be acceptable if test data supports it.
3. Where should off-gassing nodes be placed in racks and containers, and how many are typically used?
Nodes are usually placed near expected vent paths, such as rack tops, warm air aisles and container exhaust ducts. A common pattern is one node per rack aisle or per two racks in container ESS, and one node per string or row in UPS rooms. Final counts and locations should be validated with rack exhaust tests and airflow studies.
4. What kind of MCU is suitable for an off-gassing node, and how much Flash and RAM are really needed?
A low power Cortex M0+, small M4 or comparable RISC V MCU with ADC, I²C, SPI, UART, watchdog and RTC is usually sufficient. Many designs target 64–128 KB Flash and 16–32 KB RAM so filtering, diagnostics and event logging fit with margin. Standby current targets in the microamp range help meet backup time requirements.
5. How should Warning and Critical alarm levels be defined at node level without duplicating BMS or EMS logic?
The node should convert measurements into clear states such as Normal, Warning, Critical and Fault, not directly implement contactor or dispatch strategies. Warning typically reflects early abnormal trends, while Critical combines magnitude, rate of rise and multiple signals. Relay outputs provide fast hardware alarms, and BMS or EMS apply higher level policies using the same state codes.
6. How can false alarms from humidity, dust or maintenance activities be reduced in off-gassing detection?
False alarms are reduced by combining sensible thresholds with filtering and context. Time constants and dwell times should match off-gassing dynamics rather than short disturbances. ΔP and gas or optical readings can be cross checked, while humidity, temperature and fan status help mask known transient conditions. Sensor diagnostics and clog detection further distinguish faults from genuine thermal events.
7. What power and backup strategy is recommended so off-gassing nodes can still alarm when auxiliaries fail?
Nodes are usually powered from a low voltage auxiliary rail protected by an eFuse or high side switch, with a supercapacitor or small battery providing hold up. Backup energy should cover at least one Critical alarm and a final data frame during auxiliary loss. Brown out behaviour, reset thresholds and startup sequencing need to be verified under worst case load.
8. Do off-gassing nodes need galvanic isolation, and where should isolators or isolated transceivers be placed?
Isolation is needed whenever node interfaces cross battery strings, cabinets or grounding zones. Many designs keep sensors and MCU referenced to a local SELV domain and insert isolated CAN or RS 485 transceivers toward BMS, EMS or fire systems. Isolation barriers are best placed at boundaries that match insulation coordination and surge requirements defined for the site.
9. How should an off-gassing node interface with BMS, EMS and fire systems without taking over their roles?
A typical node exposes a hardwired alarm contact toward fire or HV disconnect interfaces and a field bus path toward BMS or EMS. The contact carries simple Warning or Critical states, while bus messages include measurements, health flags and event codes. System controllers own trip logic, suppression sequences and operating modes, using node information as one input among many.
10. How are off-gassing nodes tested and calibrated in practice, and how often should recalibration be considered?
Factory tests usually combine sensor calibration with system level checks in chambers or rigs, then store gain and offset constants in Flash or EEPROM. On site, commissioning baselines and periodic self checks are used to monitor drift. Recalibration intervals are set by the site safety and quality programme, based on drift trends, environment severity and applicable standards.
11. What diagnostics and self-test features are worth implementing to prove node health to operators and auditors?
Valuable diagnostics include sensor open or short detection, out of range checks, sensor self tests and CRC protection of calibration data. MCU watchdog, brown out reset and memory checks guard processing integrity. A test mode that exercises outputs and logs results, plus clear Fault event codes, gives operators and auditors evidence that nodes are monitored rather than assumed healthy.
12. What are typical IC choices for gas, pressure and optical sensing and for drivers in an off-gassing node?
A typical stack combines a gas or VOC SoC, a calibrated ΔP or absolute pressure sensor, and an optical front end for smoke or light scattering, plus a low power MCU, high side or relay drivers, digital isolators and a supercapacitor manager. Vendors offer families for each block, and selection should follow environmental, qualification and supply chain requirements defined for the project.