Fuel cell control device and fault handling method thereof

Abstract

The present invention provides a fuel cell control device, wherein the fuel cell control device has two processors which can synchronize real-time operation data with each other to serve as backup for each other.

Description

Technical Field

[0001] The present invention relates to a fuel cell, and in particular to a fuel cell control device for a fuel cell, wherein the fuel cell control device of the present invention comprises at least two processors working in coordination with each other, so that when one processor of the fuel cell control device fails, another processor of the fuel cell control device can assist the normal operation of the fuel cell. Background Art

[0002] With the advancement of technology and people's attention to environmental protection, fuel cell technology has also been increasingly valued and widely used. Fuel cell systems or fuel cells are different from existing batteries, such as lithium batteries. Their normal power supply requires the normal operation of the entire system. Therefore, when fuel cells are used, people need to ensure their normal operation to avoid affecting people's production and life. For example, when fuel cells are used in motor vehicles, such as cars, manufacturers need to ensure the stable operation of fuel cells to avoid interrupting the normal driving of the car. However, due to the variety of equipment or machines powered by fuel cells and the different places of use, the working environment faced by fuel cells is also diverse. For example, when fuel cells are used in cars, fuel cell manufacturers cannot predict the environment in which the car is driving. The car may encounter severe weather conditions, or drive through areas with severe electromagnetic interference, or a certain area may highlight the driving power that requires excessive load on the fuel cell, etc. These harsh working environments may cause the fuel cell processor to crash due to a fault, and it needs to be restarted or even replaced before it can operate normally. The existing fuel cell control device uses a single processor to control the fuel cell. Under normal circumstances, one processor can meet the control of the fuel cell. However, when encountering the above-mentioned harsh working environment or other sudden or unexpected events, a single processor of the fuel cell control device may not be able to work normally and control the fuel cell due to reasons such as freezing. At this time, the entire fuel cell will be at risk of losing control. In addition, severe weather conditions may also have an impact on the processor of the fuel cell control device. When the fuel cell fails to work properly, it is likely to put equipment or machines using fuel cells, such as fuel cell drones or fuel cell vehicles, in danger. In addition, the freezing and restart of the processor may result in data loss, and may also affect the fuel cell control device's control of the fuel cell and the normal operation of the fuel cell.

[0003] Therefore, people need corresponding methods or means to improve the reliability of fuel cells and avoid the paralysis of fuel cells when encountering emergencies. Summary of the invention

[0004] The main purpose of the present invention is to provide a fuel cell control device, wherein the fuel cell control device includes at least two processors working in coordination.

[0005] Another object of the present invention is to provide a fuel cell control device, wherein the fuel cell control device includes at least two processors working in cooperation, wherein one processor is configured as a main processor and the other processor is configured as an auxiliary processor. Preferably, the auxiliary processor of the fuel cell control device is configured to back up the real-time operation data of the main processor.

[0006] Another object of the present invention is to provide a fuel cell control device, wherein the fuel cell control device includes at least two processors, and the data of the two processors are synchronized in real time. In other words, the main processor is configured to synchronize its real-time operation data to the auxiliary processor, and the auxiliary processor is configured to synchronize its real-time operation data to the main processor.

[0007] Another object of the present invention is to provide a fuel cell control device, wherein when a main processor of the fuel cell control device fails, the main processor is set or configured to self-restart the main processor according to a main restart instruction.

[0008] Another object of the present invention is to provide a fuel cell control device, wherein when an auxiliary processor of the fuel cell control device fails, the auxiliary processor is configured to self-restart the auxiliary processor according to an auxiliary restart instruction.

[0009] Another object of the present invention is to provide a fuel cell control device, wherein when the main processor of the fuel cell control device fails, such as when it crashes, the main processor can be restarted and the backup data of the main processor synchronized in real time can be obtained from the auxiliary processor. On the other hand, when the auxiliary processor of the fuel cell control device fails, such as when it crashes, the auxiliary processor can be restarted and the real-time operation data of the auxiliary processor synchronized in real time can be obtained from the main processor. In other words, the main processor and the auxiliary processor of the fuel cell control device can back up each other.

[0010] Another object of the present invention is to provide a fuel cell control device, wherein the fuel cell control device further comprises a storage module, wherein the storage module is configured to store the initialization data of the auxiliary processor. Preferably, the main processor is configured to obtain the initialization data of the auxiliary processor stored in the storage module and send it to the auxiliary processor, so that the auxiliary processor can configure itself according to the initialization data.

[0011] Another object of the present invention is to provide a fuel cell control device, wherein the real-time operating data of the main processor and the auxiliary processor of the fuel cell control device are synchronized to the auxiliary processor and the main processor in a timely or periodic manner.

[0012] Another object of the present invention is to provide a fuel cell control device, wherein the real-time operating data of the main processor and the auxiliary processor of the fuel cell control device are synchronized to the storage module regularly or periodically and marked.

[0013] Other objects and features of the present invention will be more fully apparent from the following detailed description and may be achieved by means of the combination of means and devices particularly pointed out in the appended claims.

[0014] According to the present invention, a fuel cell control device of the present invention capable of achieving the aforementioned objects and other objects and advantages comprises:

[0015] a main processor; and

[0016] A secondary processor, wherein the main processor and the secondary processor are communicatively connected to each other, wherein the main processor and the secondary processor are configured so that the main processor can synchronize the real-time operation data of the main processor to the secondary processor.

[0017] Furthermore, the main processor and the auxiliary processor are further configured to enable the auxiliary processor to synchronize the real-time operation data of the auxiliary processor to the main processor.

[0018] Furthermore, the auxiliary processor is further configured to overwrite the real-time operation data of the main processor that was synchronized from the main processor to the auxiliary processor last time with the real-time operation data of the main processor that is synchronized from the main processor to the auxiliary processor this time.

[0019] Furthermore, the main processor is further configured to overwrite the real-time operation data of the auxiliary processor that was synchronized to the main processor last time by the real-time operation data of the auxiliary processor that is synchronized to the main processor this time.

[0020] Furthermore, the auxiliary processor is further configured to send the real-time operation data of the main processor that was most recently synchronized to the auxiliary processor to the main processor when the auxiliary processor receives a main synchronization request from the main processor.

[0021] Furthermore, the main processor is further configured to configure the main processor according to the real-time operation data of the main processor that was last synchronized to the auxiliary processor and sent to the main processor by the auxiliary processor.

[0022] Furthermore, the main processor is further configured to send the real-time operation data of the auxiliary processor that was most recently synchronized to the main processor to the auxiliary processor when the main processor receives an auxiliary synchronization request from the auxiliary processor.

[0023] Furthermore, the auxiliary processor is further configured to configure the auxiliary processor according to the real-time operation data of the auxiliary processor which is sent by the main processor to the auxiliary processor and is the last time the auxiliary processor was synchronized to the main processor.

[0024] Furthermore, the fuel cell control device of the present invention further includes a storage module, wherein the storage module is communicatively connected to the main processor, wherein the main processor and the storage module are configured so that the main processor can obtain initialization data stored in the storage module from the storage module and transmit the initialization data to the auxiliary processor.

[0025] Furthermore, the main processor is further configured to enable the main processor to give a tag to the real-time operation data of the main processor synchronized to the auxiliary processor. Preferably, the tag includes at least a data source and a timing.

[0026] According to another aspect of the present invention, the present invention further provides a fuel cell control device, comprising:

[0027] a main processor; and

[0028] A secondary processor, wherein the main processor and the secondary processor are communicatively connected to each other, wherein the main processor and the secondary processor are configured so that the secondary processor can synchronize the real-time operation data of the secondary processor to the main processor.

[0029] According to another aspect of the present invention, the present invention further provides a fault handling method for a fuel cell control device, which comprises the following steps:

[0030] (a) configuring at least one processor of the fuel cell control device as its main processor and at least another processor as its auxiliary processor; and

[0031] (b) further configuring the main processor and the auxiliary processor so that the main processor can synchronize the real-time operation data of the main processor to the auxiliary processor.

[0032] Preferably, the fault handling method for a fuel cell control device of the present invention further comprises the following steps:

[0033] (c) further configuring the main processor and the auxiliary processor so that the auxiliary processor can synchronize the real-time operation data of the auxiliary processor to the main processor.

[0034] Preferably, the fault handling method for a fuel cell control device of the present invention further comprises the following steps:

[0035] (d) When the auxiliary processor receives a main synchronization request from the main processor, the real-time operation data of the main processor that was most recently synchronized to the auxiliary processor is sent to the main processor.

[0036] Preferably, the fault handling method for a fuel cell control device of the present invention further comprises the following steps:

[0037] (e) The main processor is further configured to send a main synchronization request to the auxiliary processor after completing the self-restart, so that the auxiliary processor can send the real-time operation data of the main processor most recently received from the main processor to the main processor.

[0038] Preferably, the fault handling method for a fuel cell control device of the present invention further comprises the following steps:

[0039] (f) The auxiliary processor is further configured to send an auxiliary synchronization request to the main processor after completing the self-restart, so that the main processor can send the real-time operation data of the auxiliary processor most recently received from the auxiliary processor to the auxiliary processor.

[0040] Preferably, the fault handling method for a fuel cell control device of the present invention further comprises the following steps:

[0041] (e) further configuring the main processor and the auxiliary processor so that the main processor can send an initialization data to the auxiliary processor when the auxiliary processor fails, so that the auxiliary processor can configure the auxiliary processor according to the initialization data after completing self-restart. In other words, the auxiliary processor is configured to initialize and configure itself with the initialization information of the auxiliary processor received from the main processor.

[0042] Further objects and purposes of the present invention will become more fully apparent through an understanding of the ensuing description and drawings.

[0043] These and other objects, features and purposes of the present invention will be more fully understood from the following detailed description, drawings and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 It is a schematic structural diagram of an exemplary fuel cell according to a preferred embodiment of the present invention.

[0045] Figure 2 It is a structural schematic diagram of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention.

[0046] Figure 3A The figure shows the data transmission between the main controller and the auxiliary controller of the fuel cell control device when the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention operates normally.

[0047] Figure 3B The figure shows the data transmission between the main controller and the auxiliary controller of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention after the main controller of the fuel cell control device is restarted.

[0048] Figure 3C The figure shows the data transmission between the main controller and the auxiliary controller of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention after the auxiliary controller of the fuel cell control device is restarted.

[0049] Figure 4 The figure shows the operation control of the main controller and the auxiliary controller by the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention when the fuel cell control device operates normally.

[0050] Figure 5 The figure shows the fault handling flow of the main processor when a fault occurs in the operation of the main processor of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention.

[0051] Figure 6 The figure shows the fault handling flow of the auxiliary processor when a fault occurs in the operation of the auxiliary processor of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention.

[0052] Figure 7 Shown is an optional implementation of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention.

[0053] Figure 8 Shown is another fault handling flow of the fuel cell control device when a fault occurs in the operation of the fuel cell control device of the fuel cell according to the preferred embodiment of the present invention. DETAILED DESCRIPTION

[0054] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art can think of other obvious variations. The basic principles of the present invention defined in the following description can be applied to other embodiments, variations, improvements, equivalents, and other technical solutions that do not deviate from the spirit and scope of the present invention.

[0055] Those skilled in the art should understand that, in the disclosure of the present invention, the orientation or position relationship indicated by the terms "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc. are based on the orientation or position relationship shown in the drawings, which are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation. Therefore, the above terms should not be understood as limiting the present invention.

[0056] It is to be understood that the term "one" should be understood as "at least one" or "one or more", that is, in one embodiment, the number of an element may be one, while in another embodiment, the number of the element may be multiple, and the term "one" should not be understood as a limitation on the quantity.

[0057] Reference to the attached drawings of the specification Figures 1 to 6 According to a preferred embodiment of the present invention, an exemplary fuel cell (or fuel cell system) is illustrated, which is configured to convert chemical energy into electrical energy through an electrochemical reaction, wherein the fuel cell control device 1 of the fuel cell is configured to control the operation of the fuel cell.

[0058] As shown in the attached picture Figures 2 to 3C As shown, the fuel cell control device 1 of the exemplary fuel cell according to the preferred embodiment of the present invention includes at least two processors, wherein at least one processor of the fuel cell control device is configured as its main processor 10, and at least another processor is configured as its auxiliary processor 20. Further, the main processor 10 and the auxiliary processor 20 of the fuel cell control device are communicably connected to each other.

[0059] As shown in the attached picture Figures 1 to 3C As shown, the main processor 10 and the auxiliary processor 20 of the fuel cell control device 1 of the exemplary fuel cell of the preferred embodiment of the present invention are respectively arranged to be communicably (or electrically) connected to each component and / or element of the fuel cell so as to be able to receive corresponding signals and / or send corresponding control instructions thereto. The main controller 10 is arranged to control the operation of the entire fuel cell. Therefore, the main controller 10 is arranged to be communicably connected to many key components or elements of the exemplary fuel cell of the present invention. Generally, the main controller 10 is involved in the control of fuel (such as hydrogen) supply, thermal management, electrical management, etc. of the exemplary fuel cell of the present invention. For example, the main controller 10 is arranged to be connected to multiple sensors of the exemplary fuel cell of the present invention, such as a temperature sensor for detecting the temperature of the air exhaust of the fuel cell stack of the fuel cell, a pressure sensor for detecting the ambient air pressure of the fuel cell, a pressure sensor for detecting the pressure in the fuel tank of the fuel cell, such as a hydrogen cylinder, and the like. As shown in the accompanying drawings Figures 1 to 3C As shown, the auxiliary controller 20 of the fuel cell control device 1 of the exemplary fuel cell of the present invention is configured to be communicatively connected with a plurality of components or elements related to the normal operation of the fuel cell. For example, the auxiliary controller 20 of the fuel cell control device 1 is configured to be communicatively connected with a pressure sensor for detecting the water pressure of the air compressor of the fuel cell, a temperature sensor for detecting the ambient temperature of the fuel cell, and / or a cooling fan speed tester, etc. of the exemplary fuel cell of the present invention. Accordingly, the main processor 10 and the auxiliary processor 20 of the fuel cell control device 1 according to the preferred embodiment of the present invention are configured to work together to control the operation of the fuel cell.

[0060] As shown in the attached picture Figures 1 to 6 As shown in the figure, the fuel cell control device 1 according to the preferred embodiment of the present invention is configured to control the operation of the exemplary fuel cell of the present invention. Figure 1 As shown, an exemplary fuel cell according to a preferred embodiment of the present invention includes a fuel cell stack 11, at least one air supply device 13 and at least one fuel supply device 12. The fuel supply device 12 is configured to supply fuel, such as hydrogen, to the fuel cell stack 11. The air supply device 13 is configured to supply air to the fuel cell stack 11. The fuel supplied by the fuel supply device 12 and the air supplied by the air supply device 13 pass through the fuel cell stack 11, undergo an electrochemical reaction, and generate electrical energy. It can be understood that the exemplary fuel cell according to a preferred embodiment of the present invention further includes at least one cooling device 14, wherein the cooling device 14 is configured to cool the fuel cell stack 11 to ensure that the operating temperature of the fuel cell stack 11 is not higher than a preset temperature.

[0061] It is worth noting that the main processor 10 and / or the auxiliary processor 20 of the fuel cell control device of the present invention can be communicatively connected to the fuel cell stack 11, the air supply device 13, the fuel supply device 12, the cooling device 14 and / or other components or elements of the fuel cell, such as various sensors. The two processors of the fuel cell control device of the present invention work together to control the air supply device 13 and the fuel supply device 12 to supply air and fuel to the fuel cell stack 11, so that the air and the fuel undergo an electrochemical reaction in the fuel cell to generate electrical energy.

[0062] As shown in the attached picture Figures 1 to 6As shown, the two processors of the fuel cell control device 1 according to the preferred embodiment of the present invention are respectively communicably connected to the fuel cell stack 11, the fuel supply device 12, the cooling device 14 and / or other components or elements of the fuel cell, such as various sensors, to respectively obtain the fuel supply data from the fuel supply device 12, the cooling data from the cooling device 14, the fuel supply data from the fuel supply device 12, and the status or real-time operation data of the fuel cell from various sensors, so that the main processor 10 of the fuel cell control device 1 respectively adjusts the speed of the fuel supply device 12 providing fuel and the speed of the air supply device 13 providing air according to the fuel supply data, the air supply data, the cooling data, and the status of the fuel cell, so as to control the fuel and air to be provided at a suitable supply speed. It can be understood that the main processor 10 of the fuel cell control device 1 is configured to control the normal operation of the fuel cell by controlling other components or elements of the fuel cell.

[0063] As shown in the attached picture Figures 1 to 6As shown, the main processor 10 and the auxiliary processor 20 of the fuel cell control device 1 according to the preferred embodiment of the present invention are configured so that the main processor 10 can synchronize the real-time operation data of the main processor 10 to the auxiliary processor 20. In other words, the main processor 10 and the auxiliary processor 20 of the fuel cell control device 1 are configured so that when the main processor 10 and the auxiliary processor 20 are both operating normally, the main processor 10 can synchronize the real-time operation data of the main processor 10 to the auxiliary processor 20. The main processor 10 and the auxiliary processor 20 of the fuel cell control device 1 are configured in this way to ensure that the entire fuel cell can always be in a good operating state. In particular, to ensure that when the main processor 10 or the auxiliary processor 20 of the fuel cell control device 1 fails and is restarted, the entire fuel cell can always be in a good operating state. In order to ensure the operation of the fuel cell, the fuel cell control device 1 needs to adjust the real-time operation data (or operation parameters) of the entire fuel cell according to the different environments in which the fuel cell is located. For example, when the external load increases, the fuel cell control device 1 needs to increase the supply of fuel and air; when the ambient temperature or the temperature inside the fuel cell stack increases, the fuel cell control device 1 needs to strengthen the heat dissipation of the fuel cell, etc. However, when the main processor 10 or the auxiliary processor 20 of the fuel cell control device 1 fails and is restarted, the main processor 10 is reinitialized and cannot control the operation of the fuel cell according to the current operation of the fuel cell. At this time, in order to ensure that the fuel cell can always be in a good operating state, the main processor 10 of the fuel cell control device 1 after restarting controls the operation of the fuel cell according to the current environment of the fuel cell when necessary. However, considering that the restart and initialization time of the main processor 10 (or its auxiliary processor 20) of the fuel cell control device 1 is very short. Therefore, the configuration of the main processor 10 of the fuel cell control device 1 can be configured by using the real-time operation data of the main processor 10 of the fuel cell control device 1 before the restart of the main processor 10 of the fuel cell control device 1. However, in order to obtain the real-time operation data of the main processor 10 before the restart from the auxiliary processor 20 and configure the main processor 10, the main processor 10 needs to synchronize its real-time operation data to the auxiliary processor 20. Therefore, the main processor 10 and the auxiliary processor 20 of the fuel cell control device 1 are configured so that the main processor 10 can synchronize the real-time operation data of the main processor 10 to the auxiliary processor 20 at a certain frequency or within a preset time period. Further, the auxiliary processor 20 is further configured to overwrite the real-time operation data of the main processor 10 synchronized to the auxiliary processor 20 by the real-time operation data of the main processor 10 synchronized to the auxiliary processor 20 last time.In other words, in order to ensure that the operation of the main processor 10 configured after restart is more suitable or more matched to the current operation of the fuel cell, the auxiliary processor 20 may only save the real-time operation data of the main processor 10 that was synchronized to the auxiliary processor 20 the most recently (or the most recent time since the main processor 10 was restarted). Accordingly, the auxiliary processor 20 is further configured to enable the auxiliary processor 20 to send the real-time operation data of the main processor 10 that was synchronized to the auxiliary processor 20 the most recently when receiving a main synchronization request, so that the auxiliary processor 20 can configure itself based on the real-time operation data of the main processor 10 that was synchronized to the auxiliary processor 20 the most recently. In addition, in order to ensure that the real-time operating data of the main processor 10 sent to or synchronized with the main processor 10 when the auxiliary processor 20 receives a main synchronization request is the real-time operating data of the main processor 10 that the main processor 10 synchronized with the auxiliary processor 20 the most recently, the main processor 10 is further configured to give a tag to the real-time operating data of the main processor 10 synchronized with the auxiliary processor 20. Preferably, the tag includes at least a data source and a timing. Similarly, the main processor 10 and the auxiliary processor 20 can be further configured to enable the auxiliary processor 20 to synchronize the real-time operating data of the auxiliary processor 20 to the main processor 10. Furthermore, the main processor 10 is further configured to overwrite the real-time operation data of the auxiliary processor 20 that the auxiliary processor 20 synchronized to the main processor 10 last time with the real-time operation data of the auxiliary processor 20 that the auxiliary processor 20 synchronized to the main processor 10 this time, so that the auxiliary processor 20 can configure the auxiliary processor 20 according to the real-time operation data of the auxiliary processor 20 that the auxiliary processor 20 synchronized to the main processor 10 last time. Preferably, the main processor 10 is further configured to send the real-time operation data of the auxiliary processor 20 that the auxiliary processor 20 synchronized to the main processor 10 last time to the auxiliary processor 20 when the main processor 10 receives a secondary synchronization request from the auxiliary processor 20. In addition, in order to ensure that the real-time operation data of the auxiliary processor 20 sent to or synchronized to the auxiliary processor 20 when the main processor 10 receives an auxiliary synchronization request is the real-time operation data of the auxiliary processor 20 that the auxiliary processor 20 synchronized to the main processor 10 the most recently, the auxiliary processor 20 is further configured to give a mark to the real-time operation data of the auxiliary processor 20 synchronized to the main processor 10. Preferably, the mark includes at least a data source and a timing. It can be understood that the real-time operation data of the main processor 10 can be stored in the storage area of ​​the main processor 10, and the real-time operation data of the auxiliary processor 20 is stored in the storage area of ​​the auxiliary processor 20.Further, the real-time operation data of the main processor 10 synchronized to the auxiliary processor 20 is stored in the storage area of ​​the auxiliary processor 20, and the real-time operation data of the auxiliary processor 20 synchronized to the main processor 10 is stored in the storage area of ​​the main processor 10. Preferably, the storage area of ​​the main processor 10 also stores the initialization data of the main processor 10 and the initialization data of the auxiliary processor 20, and the storage area of ​​the auxiliary processor 20 also stores the initialization data of the auxiliary processor 20.

[0064] As shown in the attached picture Figure 4 As shown, after the fuel cell is started, the fuel cell control device 1 according to the preferred embodiment of the present invention is powered on, and its main processor 10 and auxiliary processor 20 are started and run. When the fuel cell control device 1 is in normal operation, the main processor 10 synchronizes its real-time operation data to the auxiliary processor 20 at a certain frequency, and the auxiliary processor 20 synchronizes its real-time operation data to the main processor 10 at a certain frequency. Figure 5 As shown, during the startup and operation process, the fuel cell control device 1 according to the preferred embodiment of the present invention detects the operation of the main processor 10 and the auxiliary processor 20 according to a certain rule or frequency set. When it is detected that the main processor 10 fails, the main processor 10 is restarted, and the restarted main processor 10 is configured according to the real-time operation data of the main processor 10 synchronized to the auxiliary processor 20. Preferably, the main processor 10 is further initialized based on the initialization data of the main processor 10 during or after the restart process. Generally, the initialization data of the main processor 10 is stored in the storage area of ​​the main processor 10. As shown in the accompanying drawings Figure 6 As shown, during the startup and operation process of the fuel cell control device 1 according to the preferred embodiment of the present invention, when the auxiliary processor 20 is detected to be failed, the auxiliary processor 20 is restarted, and the restarted auxiliary processor 20 is configured according to the real-time operation data of the auxiliary processor 20 synchronized to the main processor 10. Preferably, the auxiliary processor 20 is further initialized based on the initialization data of the auxiliary processor 20 during or after the restart process. Generally, the initialization data of the auxiliary processor 20 can be stored in the storage area of ​​the auxiliary processor 20, and can also be stored in other storage areas, such as the storage area of ​​the main processor 10.

[0065] As shown in the attached picture Figures 3A to 6As shown, the failure restart of the main processor 10 of the fuel cell control device 1 according to the preferred embodiment of the present invention is preferably a self-restart. In other words, the main processor 10 is configured to detect its own operation and self-restart when it fails, such as when it freezes or shuts down. More preferably, when the main processor 10 fails, the main processor 10 generates a main restart instruction, and the main processor 10 self-restarts according to the main restart instruction. Optionally, the auxiliary processor 20 is configured to detect the operation of the main processor 10, and when it fails, the main restart instruction is generated and sent to the main processor 10. Similarly, the auxiliary processor 20 is configured to detect its own operation and self-restart when it fails, such as when it freezes or shuts down. More preferably, when the auxiliary processor 20 fails, the auxiliary processor 20 generates an auxiliary restart instruction, and the auxiliary processor 20 self-restarts according to the auxiliary restart instruction. Optionally, the main processor 10 is configured to detect the operation of the auxiliary processor 20 and generate the auxiliary restart instruction when the auxiliary processor 20 fails and send it to the auxiliary processor 20.

[0066] Attached pictures Figure 7 and Figure 8 The figure shows an optional implementation of a fuel cell control device 1 according to a preferred embodiment of the present invention, wherein the fuel cell control device 1A includes a main processor 10, an auxiliary processor 20 and a storage module 30, wherein the storage module 30 is communicatively connected to the main processor 10, wherein the main processor 10 and the storage module 30 are configured so that the main processor 10 can obtain the initialization data of the auxiliary processor 20 stored in the storage module 30 from the storage module 30, and transmit the initialization data to the auxiliary processor 20. However, the initialization data of the auxiliary processor 20 can also be stored in the main processor 10 and / or the auxiliary processor 20, and when the auxiliary processor 20 is restarted or after restarting, the initialization data is obtained from the main processor 10 or the auxiliary processor 20 to initialize itself. Optionally, the storage module 30 is communicatively connected to the auxiliary processor 20, wherein the auxiliary processor 20 and the storage module 30 are configured so that the auxiliary processor 20 can obtain the initialization data of the auxiliary processor 20 stored in the storage module 30 from the storage module 30.

[0067] Those skilled in the art should understand that the embodiments of the present invention described above and shown in the accompanying drawings are only for illustrative purposes and are not intended to limit the present invention.

[0068] The purpose of the present invention has been completely and effectively achieved. The functional and structural principles of the present invention have been demonstrated and explained in the embodiments, and the embodiments of the present invention may be deformed or modified in any way without departing from the principles.

Claims

1. A fuel cell control device, characterized in that: include: A main processor; and A secondary processor, wherein the main processor and the secondary processor are communicatively connected to each other, wherein the main processor and the secondary processor are configured so that the main processor can synchronize the real-time operation data of the main processor to the secondary processor at a certain frequency, the secondary processor is further configured to overwrite the real-time operation data of the main processor that was synchronized to the secondary processor last time with the real-time operation data of the main processor that is synchronized to the secondary processor this time, the main processor is further configured to restart itself according to the main restart instruction when receiving a main restart instruction, the secondary processor is further configured so that when the secondary processor receives a main synchronization request from the main processor, the real-time operation data of the main processor that was synchronized to the secondary processor last time is sent to the main processor, and the main processor is further configured to configure the main processor according to the real-time operation data of the main processor that was synchronized to the secondary processor last time sent to the main processor by the secondary processor.

2. The fuel cell control device according to claim 1, characterized in that: The main processor and the auxiliary processor are further configured to enable the auxiliary processor to synchronize the real-time operation data of the auxiliary processor to the main processor.

3. The fuel cell control device according to claim 2, characterized in that: The main processor is further configured to overwrite the real-time operation data of the auxiliary processor that was synchronized to the main processor last time by the real-time operation data of the auxiliary processor that was synchronized to the main processor this time.

4. The fuel cell control device according to claim 2, characterized in that: The main processor is further configured to send the real-time operation data of the auxiliary processor that was most recently synchronized to the main processor to the auxiliary processor when the main processor receives an auxiliary synchronization request from the auxiliary processor.

5. The fuel cell control device according to claim 4, characterized in that: The auxiliary processor is further configured to configure the auxiliary processor according to the real-time operation data of the auxiliary processor which is sent to the auxiliary processor by the main processor and is the last time the auxiliary processor synchronized with the main processor.

6. The fuel cell control device according to claim 1, characterized in that: The auxiliary processor is further configured to self-restart according to the auxiliary restart instruction upon receiving an auxiliary restart instruction.

7. The fuel cell control device according to claim 1, characterized in that: The main processor is further configured to enable the main processor to give a tag to the real-time operation data of the main processor synchronized to the slave processor.

8. The fuel cell control device according to claim 7, characterized in that: The tag includes at least a data source and a time sequence.

9. The fuel cell control device according to claim 2, characterized in that: The auxiliary processor is further configured to enable the auxiliary processor to give a tag to the real-time operation data of the auxiliary processor synchronized to the main processor.

10. The fuel cell control device according to claim 9, characterized in that: The tag includes at least a data source and a time sequence.

11. The fuel cell control device according to claim 1, characterized in that: Further includes a storage module, wherein the storage module is communicatively connected to the main processor, wherein the main processor and the storage module are configured so that the main processor can obtain the initialization data of the auxiliary processor stored in the storage module from the storage module and transmit the initialization data to the auxiliary processor.

12. The fuel cell control device according to claim 5, characterized in that: Further comprising a storage module, wherein the storage module is communicatively connected to the main processor, wherein the main processor and the storage module are configured so that the main processor can obtain initialization data stored in the storage module from the storage module and transmit the initialization data to the auxiliary processor.

13. A fault handling method for a fuel cell control device, characterized in that: The following steps are involved: configuring at least one processor of the fuel cell control device as its main processor and at least another processor as its auxiliary processor; Further configuring the main processor and the auxiliary processor so that the main processor can synchronize the real-time operation data of the main processor to the auxiliary processor; Controlling the operation of the fuel cell by the main processor; Synchronize the real-time operation data of the main processor to the auxiliary processor at a certain frequency; Detecting whether the main processor fails; If the main processor fails, a main restart instruction is generated, and the main processor restarts itself according to the main restart instruction; The auxiliary processor, upon receiving a main synchronization request, sends to the main processor the real-time operation data of the main processor that was most recently synchronized to the auxiliary processor; The main processor configures the main processor according to the real-time operation data of the main processor that was most recently synchronized to the auxiliary processor and sent to the main processor by the auxiliary processor.

Images