The specific embodiments of the present invention will be described in further detail below in conjunction with the accompanying drawings.
 The hydrogen safety control system for hydrogen fuel cell bus of the present invention is such as figure 1 Shown:
 The hydrogen system controller, fuel cell controller, and vehicle controller simultaneously monitor the safety status of the vehicle in real time; moreover, the hydrogen system controller, fuel cell controller, vehicle controller and instrumentation communicate through the CAN network. Among them, the hydrogen system controller is connected with concentration, pressure, and temperature sensors, and mainly monitors the temperature and pressure of the bottle mouth of the hydrogen storage bottle and the concentration of hydrogen in the area that is likely to cause hydrogen leakage; the output of the vehicle controller and the collision sensor is connected through a hard wire, The status signal of the proximity switch of the hydrogen refueling cabin door is connected with the instrument and the vehicle controller through a hard wire. The vehicle controller mainly monitors the serious alarm information of the vehicle itself, that is, the collision of the vehicle and the opening of the hydrogen refueling cabin door. ; The vehicle controller outputs the high-voltage power-on control signal to the high-voltage power distribution cabinet; the fuel cell controller mainly monitors the hydrogen information of the fuel cell itself and its operating status.
 One end of the "hydrogen valve" rocker switch is connected to pin 1 of the bottle mouth valve power supply control relay and the vehicle controller (the vehicle controller monitors the driving behavior of the driver operating the "hydrogen valve"), and the other end is grounded. Pin 4 of the bottle mouth valve power supply control relay is connected to the car power supply, and suitable insurance Fuse is added to the power supply line; pin 5 is connected to the positive input of the hydrogen bottle solenoid valve power supply, and the power supply of several hydrogen bottle solenoid valves is connected in series, and The output of pin 5 is connected to the vehicle controller at the same time (as a signal input for monitoring the status of the bottle opening solenoid valve); pin 2 is the control terminal. Among them, the hydrogen bottle opening solenoid valve is the main shutoff valve installed at the mouth of each hydrogen storage bottle to shut off the hydrogen supply from the hydrogen storage container to the downstream of the valve. When the power is cut off, it is automatically closed and can cut off the hydrogen. For downstream supply, hydrogen can be supplied and output normally when power is on. The bottle mouth valve power supply control relay is used to control the on and off of the hydrogen bottle mouth solenoid valve power supply circuit.
 K1 and K2 are respectively a normally open relay inside the hydrogen system controller and the fuel cell controller, which are respectively controlled by the hydrogen system controller control signal C2 and the fuel cell controller control signal C3. When C2 is high, K1 is closed, and the hydrogen system controller output signal 7 is grounded, otherwise, the signal 7 is floating; when C3 is high, K2 is closed and the fuel cell controller output signal 8 is grounded. On the contrary, signal 8 is floating. C1 is the control signal of the vehicle controller controlling the power supply control relay switch of the bottle mouth valve, and Rs is the current limiting resistor inside the vehicle controller.
 When pin 2 is high and the "hydrogen valve" rocker switch is pressed, the bottle mouth valve power supply control relay coil is powered on, and pin 4 and pin 5 are pulled together, and the hydrogen bottle mouth solenoid valve power supply circuit When the vehicle power is turned on, the hydrogen bottle port solenoid valve is powered on, and hydrogen can be supplied normally; when the "hydrogen valve" rocker switch is off, or the bottle port valve power supply control relay control terminal pin 2 is low or floating, the relay The coil will lose power, pins 4 and 5 are disconnected, the power supply circuit of the hydrogen bottle port solenoid valve is disconnected from the car power supply, and the hydrogen bottle port solenoid valve is powered off to cut off the hydrogen supply.
 The control signal connected to pin 2 is the result of the "wire AND" operation of the output signals of the three controllers (hydrogen system controller, vehicle controller and fuel cell controller) through the logic circuit. Here "line and" includes the following three situations:
 ① When C1 is high, C2 and C3 are low or floating, that is, the output signals 6 of the above three controllers are high, 7 and 8 are floating, then the control signal connected to pin 2 is high ;
 ②When C1 is high level, any one of C2 and C3 is high level, that is, at least one of signals 7 and 8 is grounded, that is, the output signal 6 of the above three controllers is high level, and at least one of 7 or 8 One is grounded, then the control signal connected to pin 2 is low level;
 ③When C1 is low level, that is, the output signal 6 is low level, no matter the state of C2 and C3 is high level or low level, the control signal connected to pin 2 will be low level.
 Only when the vehicle controller detects that the vehicle itself does not have a serious alarm message, it controls C1 to output high level, the hydrogen system controller detects that the hydrogen storage bottle is in normal state, and controls C2 to output low or floating, and the fuel cell controller detects When the fuel cell status is normal, the control C3 output low level or is suspended, and the "hydrogen valve" rocker switch is pressed, the hydrogen bottle port solenoid valve is powered on, and hydrogen can be supplied normally.
 Among them, for the hydrogenation cabin door opening signal, it is collected through the dual-mode detection method of hard-wire and CAN network. One of the modes fails, and the other can still perform the detection function, thus avoiding the vehicle line or CAN network. The detection failure caused by the cause can greatly improve the active safety of the vehicle.
 The control system also includes the hydrogen fuel filling process, that is, the process of filling the hydrogen tank with fuel. The flow chart of the vehicle control strategy for the hydrogen supply and hydrogen fuel filling process is as follows figure 2 Shown.
 If the monitoring result of the three controllers is that the vehicle safety status is normal (the hydrogenation cabin door is not opened, and there is no other emergency situation that needs to cut off the hydrogen supply, including the temperature of the hydrogen storage bottle mouth is normal, the pressure is normal, there is no hydrogen leakage, fuel If the hydrogen information inside the battery is normal, the fuel cell itself is running normally, the vehicle has not collided, etc.), the vehicle is operating normally, and hydrogen can be supplied normally according to demand, and the instrument displays the vehicle status information in real time.
 If the monitoring result of the three controllers is that the vehicle safety status is abnormal, the strategy will enter the judgment of different alarm situations and adopt corresponding processing modes.
 Determine whether the hydrogenation cabin door is open. If the hydrogenation cabin door is open (that is, the vehicle controller receives the hydrogenation cabin door hardwire signal or the hydrogenation cabin door status signal in the message data sent by the instrument is at least One is valid) and the current hydrogen bottle port solenoid valve power supply status is valid, the vehicle controller will close the solenoid valve power supply control relay (at this time, pin 2 is low, that is, the "wire AND" situation ③); otherwise, If the current hydrogen bottle port solenoid valve power supply status is invalid, the whole vehicle strategy will directly enter the judgment step of judging whether the high-voltage power-on control signal is valid:
 If the high-voltage power-on control signal has been output as valid (high-voltage power-on), the vehicle controller will set the output signal to 0 and force the high-voltage power distribution cabinet to power off. The car cannot move through its own drive system, and the meter displays " Refuel, do not drive"; if the high-voltage power-on control signal has been disabled originally, only the meter displays "Fuel, do not drive".
 If the hydrogen refueling compartment door is not opened, the whole vehicle strategy will enter the judgment mode of whether the hydrogen supply needs to be prohibited in other situations of the current vehicle. If the hydrogen supply needs to be prohibited, the alarm issuing module will execute the action of cutting off the hydrogen supply: if the alarm issuing module is yes One or two of the hydrogen system controller or the fuel cell controller, then the control signals C2 and C3 in the two controllers have at least one or two output high levels, that is, at least one of the signals 7 and 8 Connect to ground and force the relay pin 2 to be pulled down (in the case of "wire and" ②), the bottle mouth valve power supply control relay will be de-energized, and the hydrogen bottle mouth solenoid valve will be de-energized, prohibiting hydrogen supply; if the alarm is issued, the module is for vehicle control The vehicle controller will set the control signal C1 to low level, and the relay pin 2 will turn to low level (in the “wire AND” situation ③ above), the bottle mouth valve power supply control relay is de-energized, and the hydrogen bottle The solenoid valve is cut off and hydrogen supply is prohibited; at the same time, the meter displays the corresponding alarm information. If there is no need to prohibit hydrogen supply in this alarm situation, the three controllers will keep the control signal of the relay in the original state, and the meter will display the alarm information.
 The core of the present invention is to provide a hydrogen safety control method for hydrogen fuel cell buses, that is, when the vehicle controller monitors that the vehicle itself has no serious alarm information, the hydrogen system controller monitors the normal state of the hydrogen storage bottle and the fuel cell monitors the fuel cell. When the battery status is normal, unlock the operation of the solenoid valve at the hydrogen bottle port; otherwise, lock the operation of the solenoid valve at the hydrogen bottle port.
 The above-mentioned hydrogen safety control system for hydrogen fuel cell buses is a specific realization of this method. In order to implement this method, it is not limited to the circuit of the system described above, and other forms of circuits or intelligent control circuits may also be used to implement the above method.
 Where the above-mentioned circuits are changed, replaced and modified, the main idea is still to ensure the active safety of the battery vehicle system through three controllers. The technical solution formed in this way is formed by fine-tuning the above-mentioned embodiment. This technical solution It still falls within the protection scope of the present invention.