In brief: preventing thermal-runaway propagation requires both compliant abuse testing and a pack architecture that contains heat, flame, pressure, and gases from a failed cell. For aerospace applications, RTCA DO-311A is a central reference; other sectors commonly apply standards such as UL 2580, IEC 62619, UL 9540A, and sector-specific vehicle or industrial requirements. No single standard universally applies—the required standard depends on the battery’s application, chemistry, installation, and jurisdiction.
The essential design objective is not merely to prevent the first cell failure; it is to stop that failure from becoming a pack-level event. This requires cell-level protection, thermal isolation, controlled gas venting, fire-resistant structures, electrical fault interruption, and validated abuse testing.
What the Design Must Prevent
Cell-to-cell heat transfer
A failed cell can transfer heat through direct conduction, hot gases, flames, and radiative heating. The pack must therefore limit heat flow into adjacent cells and prevent neighboring cells from reaching their own runaway thresholds.
Effective measures include thermal barriers, controlled spacing, low-conductivity structural materials, and localized insulation around the most vulnerable cell interfaces. The design must be validated using the actual cell format, spacing, compression, cooling arrangement, and enclosure materials.
Flame and hot-particle spread
A pack enclosure should resist ignition and prevent flames or incandescent particles from directly contacting adjacent cells, wiring, insulation, or combustible structural components.
Designs commonly use flame-retardant or fire-resistant housings, internal barriers, protected busbars, and compartmentalized modules. Material selection alone is insufficient if vent openings, seams, cable penetrations, or fasteners provide an uncontrolled path for flame propagation.
Pressure and gas management
Thermal runaway can generate large quantities of hot, flammable, and sometimes toxic gas. A sealed enclosure can convert this gas generation into a pressure-driven rupture.
The assembly should include designated degassing channels, pressure-relief features, and exhaust paths that direct gases away from people, critical electronics, neighboring cells, and vehicle or aircraft structures. Vent paths must not unintentionally redirect flames or hot gases into another module.
Electrical fault escalation
Electrical faults can create the heat that initiates runaway or intensify an already-failed cell. The pack therefore requires coordinated protection at the cell, module, and system levels.
Typical measures include cell fuses, current interrupt devices, PTC elements, redundant circuit paths, contactors, electronic overcurrent protection, and continuous voltage and temperature monitoring. The BMS should not be treated as the sole barrier because a runaway event may damage sensors, wiring, or control electronics.
Structural Design Features Required
Cell-level isolation
Each cell should have a defined thermal and electrical protection strategy. This may include separators, PTC devices, current interrupt devices, fuses, vent interfaces, and local thermal barriers.
The design must account for the specific failure mode of the cell format. Cylindrical, pouch, and prismatic cells release heat and gases differently, so a barrier or vent design validated for one format cannot automatically be transferred to another.
Module-level compartmentalization
Modules should limit the number of cells exposed to a single-cell failure. Physical partitions, fire-resistant barriers, and controlled clearances can slow propagation and preserve isolation between electrical sections.
A modular structure also helps prevent a localized event from disabling the entire pack. However, partitions must be compatible with cooling paths, service access, assembly tolerances, and pressure relief.
Thermal management
Cooling systems should maintain cells within their normal operating range and reduce temperature gradients across the pack. Liquid cooling, forced-air cooling, heat spreaders, and thermal interface materials may be used depending on the application.
Cooling is a prevention measure, not a complete propagation-control measure. It may not remove runaway heat quickly enough after an internal short has occurred, so dedicated barriers and vent management remain necessary.
Enclosure integrity
The outer enclosure must withstand the mechanical and thermal loads associated with the defined abuse scenarios. It should prevent hazardous ejection of fragments, protect adjacent equipment, and maintain safe separation from occupants.
The enclosure must also accommodate expansion, pressure relief, thermal cycling, vibration, crash loads, ingress protection, and manufacturing variation. A rigid enclosure that lacks a controlled pressure-relief strategy can increase hazard rather than reduce it.
Safe separation of critical systems
High-voltage conductors, low-voltage controls, cooling lines, sensors, and communication wiring should be routed so that a single-cell event does not disable all protective functions.
Critical sensing and interruption functions may require physical separation, redundancy, or fail-safe behavior. The goal is to preserve the ability to isolate the pack even if one region has suffered heat, smoke, flame, or mechanical damage.
Which Testing Standards and Methods Matter
RTCA DO-311A for aerospace batteries
RTCA DO-311A addresses rechargeable lithium battery and battery-system safety in aircraft applications. It is particularly relevant where a battery failure must not create an unacceptable aircraft hazard.
The standard’s safety approach includes evaluation of abnormal electrical, thermal, mechanical, and environmental conditions. Aerospace programs should use the applicable aircraft-level certification basis together with DO-311A rather than treating DO-311A as a universal requirement for every lithium-ion pack.
UL 9540A for propagation and fire characterization
UL 9540A is a test method for evaluating thermal-runaway fire propagation in battery energy-storage systems. It characterizes behavior at multiple levels, typically progressing from cell to module, unit, and installation-scale evaluation as applicable.
It is valuable for determining whether gases, heat, flame, and pressure from one failed cell can cause propagation. It is a test method, not by itself a complete product certification standard.
UL 2580 for electric-vehicle battery packs
UL 2580 is widely used for batteries intended for electric vehicles. It evaluates hazards associated with electrical, mechanical, thermal, and abuse conditions, including battery-system construction and protective functions.
The exact test program depends on the product configuration and certification pathway. Vehicle manufacturers may also require additional tests for crash, vibration, water exposure, charging faults, and post-crash electrical isolation.
IEC 62619 for industrial lithium batteries
IEC 62619 addresses safety requirements for secondary lithium cells and batteries used in industrial applications. It is relevant to stationary, motive, robotics, and other industrial battery systems, subject to the product’s intended use.
It should be applied alongside regional regulations and installation requirements. Industrial packs may have different propagation, enclosure, access, and fire-response requirements than vehicle or aircraft batteries.
UN 38.3 for transport qualification
UN 38.3 is primarily a transport-testing requirement. It addresses hazards associated with shipping lithium cells and batteries, including altitude simulation, thermal cycling, vibration, shock, external short circuit, impact or crush, overcharge where applicable, and forced discharge where applicable.
It is important, but it does not demonstrate that a high-density pack will prevent thermal-runaway propagation during operation. Transport compliance cannot substitute for pack-level abuse and propagation testing.
Application-specific mechanical and electrical tests
Additional standards may apply depending on the product. Examples include vehicle, aerospace, stationary-storage, marine, medical, and consumer-electronics requirements.
The test plan should cover external short circuit, overcharge, over-discharge, forced discharge, crush, nail penetration or internal-short simulation, impact, vibration, thermal cycling, cooling failure, sensor failure, and charger or BMS faults where relevant to the risk assessment.
How Propagation Testing Should Be Conducted
Start with cell characterization
Before pack testing, determine the cell’s thermal and electrical failure behavior. Accelerating Rate Calorimetry and Differential Scanning Calorimetry can help measure self-heating, heat release, reaction onset, and thermal transitions.
Testing should use representative production cells, not only ideal laboratory samples. Chemistry, state of charge, aging, manufacturing variation, and cell impedance can materially affect the result.
Test the worst credible cell location
A single-cell trigger should be placed in locations most likely to cause propagation. These may include the center of a tightly packed module, a cell adjacent to a vent path, a cell near combustible materials, or a cell with the least effective cooling.
Testing only the easiest-to-cool or most accessible cell can produce misleading conclusions. The selected trigger location should be justified through thermal modeling, hazard analysis, and physical inspection of the pack.
Measure more than temperature
Temperature is necessary but insufficient. Testing should record cell voltage, current, surface and internal temperatures where practical, pressure, gas release, flame, smoke, vent direction, structural deformation, and electrical isolation.
The test should establish whether adjacent cells remain stable, whether protective devices interrupt fault current, and whether the enclosure safely contains or redirects the event.
Verify the full system configuration
Propagation results depend on the complete assembly. The test article should include the production-intent cells, busbars, fuses, BMS, cooling system, enclosure, barriers, fasteners, seals, vent paths, and representative state of charge.
A barrier tested independently may perform differently after compression, aging, coolant exposure, vibration, or integration into a confined module. Component-level testing is useful for development, but it cannot replace representative pack testing.
Understanding the Trade-offs
More insulation can reduce cooling performance
Thermal barriers can slow propagation, but they can also trap heat during normal operation. A design that is highly insulated may develop larger temperature gradients or require more cooling capacity.
The correct solution is usually selective isolation: provide strong protection between cells or modules while maintaining a deliberate normal-operation heat path to the cooling system.
Sealing the pack can increase pressure risk
A sealed housing may improve ingress protection and containment, but it can also allow pressure to build rapidly during venting. Pressure relief must be engineered rather than left to accidental rupture at a seam or cover.
Vent outlets should be evaluated for flame, gas toxicity, re-ignition, and direction of discharge—not only for pressure capacity.
Lower-risk chemistry does not eliminate propagation risk
Chemistries such as LFP generally exhibit greater thermal stability than some high-energy metal-oxide chemistries, but no lithium-ion chemistry should be assumed propagation-proof.
Pack density, state of charge, cell construction, mechanical damage, charging faults, and enclosure design can still produce hazardous events.
Temperature limits are not sufficient protection
Normal operating temperatures should be controlled conservatively, but temperature alone is not an adequate primary charge-control or fault-detection method. Internal shorts and rapid heating may develop faster than a distributed sensor can detect.
Protection should combine voltage monitoring, current measurement, multi-threshold overcurrent logic, thermal sensing, and independent interruption devices.
Laboratory abuse tests are not automatic certification
Crush, nail penetration, ARC, DSC, and overcharge tests are powerful engineering tools. They help identify failure thresholds and compare designs, but certification still depends on the applicable standard, test method, accredited laboratory, configuration, and authority having jurisdiction.
Making the Right Choice for Your Goal
The required design and test basis should be established through a formal hazard analysis and mapped to the intended market and installation.
- If your primary focus is aerospace certification: Use RTCA DO-311A with the applicable aircraft certification basis, and demonstrate controlled venting, thermal isolation, electrical protection, and safe behavior after representative cell and pack faults.
- If your primary focus is electric vehicles: Use the applicable vehicle battery requirements, commonly including UL 2580 or regional equivalents, with crash, vibration, electrical abuse, cooling-failure, and propagation testing.
- If your primary focus is stationary energy storage: Use UL 9540A to characterize propagation and fire behavior, together with the applicable system and installation certification requirements.
- If your primary focus is industrial equipment: Evaluate IEC 62619 and relevant regional requirements, while tailoring mechanical, environmental, and propagation tests to the equipment’s operating hazards.
- If your primary focus is transport: Complete UN 38.3, but do not treat transport qualification as evidence of operational thermal-runaway containment.
- If your primary focus is product development: Combine cell calorimetry, crush and penetration testing, electrical abuse testing, and representative module or pack propagation tests before finalizing barriers, vent paths, and BMS protections.
A defensible high-density battery design is one in which the first cell failure is detected, electrically isolated, thermally contained, and safely vented before it can become a pack-level failure.
Summary Table:
| Design Feature | Purpose | Example Measures |
|---|---|---|
| Cell-level isolation | Prevent heat transfer to adjacent cells | Thermal barriers, spacing, insulation |
| Module compartmentalization | Limit failure spread within pack | Fire-resistant partitions, clearances |
| Thermal management | Maintain normal temps, reduce gradients | Liquid cooling, heat spreaders |
| Enclosure integrity | Contain flame/pressure, protect surroundings | Pressure relief, flame-retardant housing |
| Safe separation | Protect critical systems from damage | Redundant sensors, isolated wiring |
| Testing Standard | Application | Key Focus |
|---|---|---|
| RTCA DO-311A | Aerospace | System safety, abnormal conditions |
| UL 9540A | Stationary storage | Propagation & fire characterization |
| UL 2580 | Electric vehicles | Electrical/mechanical/thermal abuse |
| IEC 62619 | Industrial | Safety for industrial Li-ion |
| UN 38.3 | Transport | Shipping safety, not propagation |
Need to ensure your battery pack meets the highest safety standards?
At KINTEK, we provide advanced testing and processing equipment to help you validate your designs against thermal runaway propagation. From precision cell fabrication tools to comprehensive testing systems, our solutions are tailored for battery R&D and materials science. Contact our experts today to optimize your pack design and comply with RTCA DO-311A, UL 9540A, and other critical standards. Get in touch now!