Tank system for storing fluids

Abstract

The present invention relates to a tank system (100) for storing fluid, wherein the tank system (100) - Includes multiple tanks (101), Each of these multiple tanks (101) includes a tank valve (103), and The above tank system - Includes a computing unit (105), This computing unit (105) is configured to set the tank system (100) to a safe mode, in which the output of error messages is blocked, and in which the opening of the tank valve (103) of the tank system (100) is blocked, and This computing unit (105) is also configured to disable the safety mode to enable the opening of the tank valve (103) only when the computing unit (105) detects a predetermined release condition.

Description

Technology Field

[0001] The present invention relates to a tank system for storing fluid, a method for starting the tank system, and a program product. Background Technology

[0002] In the case of hydrogen tank systems, the tanks are shipped from the manufacturer pre-filled with nitrogen at a pressure of up to 2 bar. This condition is maintained until the end of the production line. As a result, during the first commissioning or first startup of the tank system, the pressure inside individual tanks is allowed to be lower than in normal operation. This allowable condition results in the application software and functional safety software generating error entries and, if necessary, turning off the tank system's control unit.

[0003] In the context of the present invention as described, a tank system, a method for starting the tank system, and a program product are introduced. Further features and details of the present invention will become apparent from the individual dependent claims, the detailed description, and the drawings. In this case, the features and details described in relation to the method according to the present invention are naturally also applied in relation to the tank system or the program product according to the present invention, and vice versa, so that cross-references are always made or may be made in relation to the disclosures of individual embodiments of the invention.

[0004] The present invention is used, in particular, to provide the possibility for an error-free and safe start of a tank system during commissioning.

[0005] Thus, according to the first embodiment of the present invention, a tank system for storing fluid is introduced.

[0006] The introduced tank system comprises a plurality of tanks, wherein each of the plurality of tanks comprises a tank valve, and the introduced tank system comprises a computing unit, wherein the computing unit is configured to set the tank system to a safe mode, wherein the output of error messages is blocked in this safe mode, and wherein the opening of the tank valve of the tank system is blocked in this safe mode, and the computing unit is also configured to disable the safe mode to enable the opening of the tank valve only when the computing unit detects a predetermined release condition.

[0007] In the context of the present invention, a computing unit may be understood as a computer, a processor, a control unit, or each other another programmable circuit.

[0008] The present invention is based on a safety mode activated, for example, during the manufacturing process of a tank system, to prevent normal operation of the tank system that may cause a situation where an error message is output due to operating conditions present during the manufacturing process, or to replace it with a safety mode.

[0009] When a safety mode provided according to the present invention is activated or set within the computing unit of the tank system to which it is introduced, it causes a situation in which the opening of the tank valve of the tank system is blocked, thereby consequently rendering the tank system inoperable. Accordingly, the safety mode for the normal operation of the tank system, which supplies fluid to a user device, is inevitably deactivated.

[0010] In addition, by blocking the output of error messages in the safety mode, the tank system can consequently be switched to a state in which the output of error messages can be induced without being provided in normal operation or visible to the end user. Accordingly, the tank system can also be started during the manufacturing process without the output of error messages or interruption of the starting process when a pressure of 2 bar is applied to individual tanks.

[0011] Release conditions are provided to disable safety mode, and these release conditions include, for example, manual intervention by a user or technician and / or specific operating conditions in the form of pressure or pressure profiles within individual tanks of the tank system.

[0012] Only when the release condition is met can the safety mode be deactivated and the normal operation of the tank system be activated.

[0013] It may be proposed that, in the case of the first startup of the tank system, the computing unit be configured to store the activation condition for activating the safety mode in the non-volatile memory of the tank system and to edit the activation condition only when the computing unit detects the release condition.

[0014] The activation conditions for enabling safe mode can be edited simply and quickly to set safe mode—in other words, to enable or disable it.

[0015] By storing the activation conditions in non-volatile memory, the activation conditions cannot be bypassed, particularly by a reset of the computing unit; consequently, the safe mode is particularly safe against manipulation, and the tank system protects the tank system from unauthorized or unwanted startup during normal operation.

[0016] For example, activation conditions can be stored in volatile memory prior to the first commissioning of the computing unit of the introduced tank system. For this purpose, an additional computing unit that is not part of the tank system may be used, for example.

[0017] To ensure the editing of activation conditions for deactivating safety mode, a mismatch check may be performed before deactivating safety mode. Accordingly, for example, if the mismatch check indicates that the activation conditions have been successfully edited, the normal operation of the tank system, particularly the diagnostic system, may be activated.

[0018] Alternatively, the computing unit of the tank system can be used to store activation conditions in non-volatile memory during the first commissioning.

[0019] In addition, it may be proposed that the release condition include a release command provided to the tank system through a communication interface by an authorized user.

[0020] For example, by providing a release command to the tank system through a communication interface such as a diagnostic interface, a user or technician can manually provide release conditions and thereby disable the safety mode.

[0021] In addition, it may be suggested that the computing unit be configured to authenticate an authorization code provided by the user and to disable safe mode only when this authorization code is valid.

[0022] To prevent unauthorized provision of release commands, an authorization code, such as a security identifier, may be provided, for example, which must be provided by a user or technician before safe mode is disabled. For this purpose, the computing unit may read out a safety identifier or a key for authenticating this safety identifier from the tank system's memory to authenticate the security identifier provided by the user.

[0023] In addition, it may be proposed to include a release condition in which the pressure inside each of the multiple tanks is greater than a predetermined threshold.

[0024] As soon as the pressure inside each of the multiple tanks exceeds a predetermined threshold, normal operating conditions exist within the tank system, and the tank system can switch to normal operation without outputting an error message.

[0025] Accordingly, if a pressure greater than a predetermined threshold exists within each of the multiple tanks, the safety mode may be automatically deactivated and normal operation may be automatically activated.

[0026] Optionally, a query for the user's security identifier may be provided to prevent unauthorized commissioning of the tank system even when a pressure greater than a predetermined threshold exists within each of the multiple tanks.

[0027] In addition, it may be proposed to further include a release condition in which the pressure within each of the multiple tanks continuously increases until it exceeds a predetermined threshold value.

[0028] For example, to prevent an unexpected pressure rise caused by particularly high temperatures in the surrounding environment as a release condition, it may be proposed that a pressure profile be evaluated, and that a release condition is considered to exist only when the pressure within each of the multiple tanks continuously increases until it exceeds a predetermined threshold value, so that the tank system can be expected to be filled or filled.

[0029] In addition, it can be proposed that the tank system is a hydrogen tank system for storing hydrogen.

[0030] Since tank systems for storing hydrogen are particularly cost-intensive and must meet special safety regulations, the tank system introduced is particularly desirablely suitable as a hydrogen tank system.

[0031] According to a second aspect, the present invention relates to a method for starting a tank system. The method for starting a tank system has the same advantages as those described in detail for a tank system according to a first aspect of the present invention.

[0032] The present method comprises a step of setting a safety mode within a tank system, wherein the output of error messages and the opening of the tank valve of the tank system are blocked in the safety mode, and a step of deactivating the safety mode to enable the opening of the tank valve only when a predetermined release condition is satisfied.

[0033] The introduced method is used particularly to operate or safely protect the introduced tank system.

[0034] It may be proposed that a release condition be included in a release command provided to the tank system through a communication interface by an authorized user, and / or that a release condition be included in the pressure within each of the multiple tanks being greater than a predetermined threshold.

[0035] According to a third aspect, the present invention relates to a program product having program code means, wherein the program code means configures the computing unit to carry out a possible embodiment of the method introduced when the program code means is executed on the computing unit.

[0036] Further advantages, features, and details of the present invention will become apparent from the following detailed description, in which embodiments of the present invention are described in detail with reference to the drawings. In this case, the features mentioned in the claims and the detailed description may each be essential to the present invention individually, alone, or in any combination. Brief explanation of the drawing

[0037] FIG. 1 is a schematic diagram of a possible embodiment of the introduced tank system. FIG. 2 is a schematic diagram of a possible embodiment of the introduced method. Specific details for implementing the invention

[0038] Figure 1 shows a tank system (100) for storing fluid.

[0039] The tank system (100) includes a tank (101) having a tank valve (103), a computing unit (105), and a non-volatile memory (107) in the form of an EEPROM.

[0040] A computing unit (105) in the form of a control device is configured to set the tank system (100) to a safety mode, in which case the output of error messages and the opening of the tank valve (103) are blocked in the safety mode.

[0041] Additionally, the computing unit (105) is configured to disable the safety mode to enable the opening of the tank valve (103) only when the computing unit (105) detects a predetermined release condition, such as, for example, an increase in pressure within the tank (101) exceeding a predetermined threshold and / or input of a release command by the user.

[0042] For example, it may be suggested that an algorithm for the first start be stored in non-volatile memory (107) when the tank system is released. This algorithm prevents the full start of the tank system (100) into normal operation and causes the tank system (100) to start into a safe mode.

[0043] When a release condition is detected during safety mode by the computing unit (105), for example, the pressure monitor is started as an initialization process and the algorithm is edited within the non-volatile memory (107), so that, as a result, this algorithm enables the full start of the tank system (100) into normal operation.

[0044] Figure 2 illustrates a method (200) for starting a tank system.

[0045] The method (200) includes an activation step “201” in which a safety mode is activated within the tank system, and in the safety mode, the output of an error message is blocked by the opening of the tank valve of the tank system.

[0046] Additionally, the method (200) includes a deactivation step “203” in which the safety mode is deactivated and the tank system is started to fully normal operation in order to enable the opening of the tank valve.

[0047] In this case, the deactivation step "203" is executed only when a predetermined release condition is met.

Claims

Claim 1 A tank system (100) for storing fluid, wherein the tank system (100) comprises a plurality of tanks (101), each of the plurality of tanks (101) comprises a tank valve (103), and the tank system comprises a computing unit (105), wherein the computing unit (105) is configured to set the tank system (100) to a safe mode, wherein the output of error messages is blocked in the safe mode, and wherein the opening of the tank valve (103) of the tank system (100) is blocked in the safe mode, and wherein the computing unit (105) is also configured to disable the safe mode to enable the opening of the tank valve (103) only when the computing unit (105) detects a predetermined release condition. Claim 2 A tank system (100) for storing fluid, characterized in that, in the first instance, the computing unit (105) is configured to store an activation condition that activates a safety mode in the non-volatile memory (107) of the tank system (100) and to edit the activation condition only when the computing unit (105) detects a release condition. Claim 3 A tank system (100) for storing fluid, wherein, in claim 1 or 2, the release condition comprises a release command provided to the tank system (100) through a communication interface by an authorized user. Claim 4 A tank system (100) for storing fluid, characterized in that, in paragraph 3, the computing unit (105) is configured to authenticate an authorization code provided by a user and to disable the safety mode only when said authorization code is valid. Claim 5 A tank system (100) for storing fluid, wherein, in any one of claims 1 to 4, the release condition comprises that the pressure in each of the plurality of tanks (101) is greater than a predetermined threshold value. Claim 6 A tank system (100) for storing fluid, wherein, in paragraph 5, the above release condition further comprises the pressure continuously increasing until the pressure in each of the plurality of tanks (101) is greater than a predetermined threshold value. Claim 7 A tank system (100) for storing fluid, characterized in that, in any one of claims 1 to 6, the tank system (100) is a hydrogen tank system for storing hydrogen. Claim 8 A method (200) for starting a tank system (100), wherein the method (200) comprises the step (201) of setting a safety mode within the tank system (100), wherein the output of an error message and the opening of the tank valve (103) of the tank system (100) are blocked in the safety mode, and the method comprises the step (203) of deactivating the safety mode to enable the opening of the tank valve (103) only when a predetermined release condition is satisfied. Claim 9 A method (200) for starting a tank system, wherein, in claim 8, the release condition comprises a release command provided to the tank system (100) through a communication interface by an authorized user, and / or the release condition comprises the pressure within each of the plurality of tanks (101) being greater than a predetermined threshold value. Claim 10 A program product having program code means, wherein the program code means configures the computing unit (105) to perform the method (200) according to claim 8 or 9 when the program code means is executed on the computing unit (105).

Images