Hydrogen production power supply redundant system control method

Abstract

The invention relates to the field of hydrogen production power supplies, in particular to a hydrogen production power supply redundant system control method which comprises a main board, a slave board and a power component. And the main board is set to carry out system closed-loop control, a driving signal is generated according to the control signal and output data acquired by the data acquisition interface to control the output of the power component, and the slave board corresponding to the main board operates along with the main board based on the data acquired by the communication interface and outputs the same driving signal to the power component. When the main board subjected to closed-loop control fails, the slave board is switched to immediately and automatically, and the system closed-loop control is carried out by the slave board; when communication between the main board and the slave board fails, if the main board does not fail, the output of the main board is kept unchanged, and the slave board does not output; and if the main board has a fault, the main board is stopped, and the slave board continues output independent operation when a communication fault occurs. According to the invention, the two control panels simultaneously output the same driving signal to control the power part, so that the disturbance problem caused by system switching when the control panels fail can be effectively reduced.

Description

Technical Field

[0001] The invention relates to the field of hydrogen production power supply, and in particular to a control method for a hydrogen production power supply redundant system. Background Art

[0002] At present, in the field of hydrogen power generation, in order to avoid unexpected situations such as control board damage during the use of power, which may affect the power output, two control boards are often used for control. When one control board fails, the other control board starts to operate. This control scheme will more or less cause output jitter or disturbance when the system is switched, affecting the normal operation of the power system.

[0003] For example, the Chinese invention patent application with publication number CN111564993A discloses a redundant control system for a dual-winding brushless DC motor. This patent implements multiple communication and fault detection functions between dual-winding motor control systems; when a fault occurs in the main control system, it can realize synchronous switching from the main control system to the backup control system in the fault state to ensure the normal operation of the system. However, if the first main control chip and the first drive chip in the control system are both normal, a latch latch control signal is issued to enable the first signal latch and disable the second signal latch at the same time. At this time, the main control system works, the first motor winding works, and the DC brushless motor runs. That is, the two do not output drive signals at the same time, nor do they switch immediately, but there is a switching gap, that is, when any of the main / auxiliary units fails, the other control unit takes over the entire control system, and it still has the disadvantage of switching disturbance or flicker.

[0004] Therefore, it is necessary to provide a redundant system that outputs the same driving signal at the same time to achieve disturbance-free or low-disturbance switching, so as to effectively reduce the impact of system switching on the power supply system. Summary of the invention

[0005] The present invention proposes a control method for a redundant system of hydrogen production power supply, which realizes disturbance-free or low-disturbance switching of the control system in case of failure, and continued operation after failure recovery.

[0006] In order to achieve the above objectives, the following technical solutions are proposed: A control method for a hydrogen production power supply redundant system, comprising a main board, a slave board and a power component; The main board and the slave board are both provided with a control signal interface, a data acquisition interface, a drive signal output interface, and a communication interface connected to each other; The control signal interface and the data acquisition interface are respectively externally connected to the same control end and output end, the drive signal output interface is respectively connected to the power component, and the communication interface is used for data exchange and switching control; The main board is set to perform closed-loop control of the system, and generates a driving signal to control the output of the power component according to the control signal and the output data obtained by the data acquisition interface. The slave board corresponding to the main board follows the main board based on the data obtained by the communication interface and outputs the same driving signal to the power component; The slave board is set to perform closed-loop control of the system, and generates a drive signal to control the output of the power component according to the control signal and the output data obtained by the data acquisition interface. The main board corresponding to the slave board follows the operation of the slave board based on the data obtained by the communication interface, and outputs the same drive signal to the power component; During system operation, when the main board for closed-loop control of the system fails, it will automatically switch to the slave board immediately. When the main board failure is eliminated, the main board will follow the slave board to run. When the drive signals output by the two are consistent, they will switch back to the main board for closed-loop control of the system. When a slave board for closed-loop control of the system fails, it will automatically switch to the main board immediately. When the failure of the slave board is eliminated, the slave board will follow the main board to run. When the drive signals output by the two are consistent, they will switch back to the main board for closed-loop control of the system. When the communication between the main board and the slave board fails, if the main board for system closed-loop control is not faulty, the output of the main board remains unchanged and the slave board does not output; if the slave board for system closed-loop control is not faulty, the output of the slave board remains unchanged and the main board does not output; If the main board performing the closed-loop control of the system fails, the main board will shut down, and the following slave board will continue the system closed-loop control with the output at the time of the communication failure, so as to achieve uninterrupted low-disturbance operation; if the slave board performing the closed-loop control of the system fails, the slave board will shut down, and the following main board will continue the system closed-loop control with the output at the time of the communication failure, so as to achieve uninterrupted low-disturbance operation.

[0007] Preferably, the mainboard is set to perform system closed-loop control. The mainboard outputs a drive signal to perform system closed-loop control based on the control signal received by the control signal interface and the output data obtained by the data acquisition interface. The operation of the system is controlled by the mainboard. At the same time, the slave board receives the mainboard data based on the communication interface and follows the mainboard to output the same drive signal without performing closed-loop control.

[0008] The aforementioned output end refers to the output end of the power component, or the output end of the power assembly composed of the power component, or the output end of the hydrogen production power supply composed of the power component. The aforementioned drive signal output interface is respectively connected to the power component, which means that the drive signal output interface of the main board and the drive signal output interface of the slave board are directly or indirectly connected to the same power component.

[0009] Preferably, after the main board performs closed-loop control of the system, the main board transmits data to the slave board via the communication interface in real time. When the main board fails, it outputs a fault signal to the slave board. The slave board continues to output a drive signal based on the data received when the main board fails, and switches to closed-loop control at the same time, and the operation of the system is controlled by the slave board.

[0010] Preferably, after the main board recovers from the fault, the signal indicating its recovery to normal is transmitted to the slave board via the communication interface, and the slave board transmits its current data to the main board. The main board follows the operation of the slave board and outputs the same drive signal. When the drive signals output by the two are consistent, the main board is switched to closed-loop control, and the main board controls the operation of the system. At the same time, the slave board follows the main board to output the same drive signal without closed-loop control.

[0011] Preferably, when there is a communication failure between the main board and the slave board, if the main board is not faulty, the main board output remains unchanged and the slave board does not output; if the main board is faulty, the main board shuts down and the following slave board continues the output during the communication failure to perform closed-loop control of the system.

[0012] The aforementioned slave board does not output, which means blocking the drive signal and not outputting the drive signal to the power component. Similarly, the slave board can also be set to perform system closed-loop control according to actual needs. The slave board outputs the drive signal according to the control signal received by the control signal interface and the output data obtained by the data acquisition interface to perform system closed-loop control. The slave board controls the operation of the system, while the main board receives the slave board data based on the communication interface, and follows the slave board to output the same drive signal without performing closed-loop control.

[0013] Preferably, the slave board is set to perform system closed-loop control, and the slave board outputs a drive signal to perform system closed-loop control based on the control signal received by the control signal interface and the output data obtained by the data acquisition interface. The operation of the system is controlled by the slave board, and the main board receives the slave board data based on the communication interface, and follows the slave board to output the same drive signal without performing closed-loop control.

[0014] Preferably, after the slave board performs closed-loop control of the system, the slave board transmits its data to the slave board via the communication interface in real time. When the slave board fails, it outputs a fault signal to the main board. The main board continues to output a drive signal based on the data received when the slave board fails, and switches to closed-loop control at the same time, and the operation of the system is controlled by the main board.

[0015] Preferably, after the communication fault between the main board and the slave board is eliminated, if the main board that performs closed-loop control of the system before the communication fault has no fault, the operation of the system continues to be controlled by the main board; if the slave board that performs closed-loop control of the system before the communication fault has no fault, the operation of the system continues to be controlled by the slave board; If the main board that performs closed-loop control of the system before the communication failure fails, it will follow the slave board when it returns to normal. When the drive signals output by the two are consistent, they will switch back to the main board before the communication failure to perform closed-loop control and control the operation of the system. If the slave board that performs closed-loop control of the system before the communication failure fails, it will follow the main board after it returns to normal. When the drive signals output by the two are consistent, the slave board before the communication failure will be switched back to perform closed-loop control and control the operation of the system.

[0016] Preferably, the communication interface includes a CAN communication interface and a fault signal interface. When the main board fails, the fault signal is transmitted to the corresponding slave board through the CAN communication interface or the fault signal interface; when the slave board fails, the fault signal is transmitted to the corresponding main board through the CAN communication interface or the fault signal interface; the control signal interface is a TCP or RS485 interface, and the TCP or RS485 interface is respectively connected to a PLC or a touch screen or a host computer to receive external control signals.

[0017] The fault signal interface is mainly used to transmit fault information, for example, when the mainboard is normal, a low level signal is transmitted, and when the mainboard fails, a high level signal is transmitted.

[0018] The aforementioned power component refers to a component for power regulation of the hydrogen production power supply, which includes at least one power tube. Preferably, the power component includes an inverter circuit or a controllable rectifier circuit composed of multiple power tubes, wherein the controllable rectifier circuit includes a three-phase bridge-type fully-controlled rectifier circuit. For example, the drive signal output interface of the main board and the slave board can be connected to the trigger end of each power tube in the inverter circuit or the three-phase bridge-type fully-controlled rectifier circuit to control its output.

[0019] Preferably, the power component includes an inverter circuit or a controlled rectifier circuit composed of multiple power tubes; the main board and the slave board operate simultaneously, outputting the same drive signal to the same power tube in the power component, and the power tube is SCR or IGBT or MOSFET; when the power tube is SCR, the main board and the slave board are also provided with a synchronization signal interface, which are respectively connected to the same power grid or the same power supply to output drive signals of the same phase.

[0020] Compared with the prior art, the beneficial effects of the present invention are: when the main board is set to perform closed-loop control of the system, the slave board follows and outputs the same drive signal to the power component; when the slave board is set to perform closed-loop control of the system, the main board follows and outputs the same drive signal to the power component. When the main board performing closed-loop control of the system fails, it can automatically switch to the slave board immediately and continuously output the drive signal to maintain the normal operation of the system. The same applies when the slave board performing closed-loop control of the system fails. When the failure of the main board is eliminated, the main board follows the operation of the slave board, and when the drive signals output by the two are consistent, it switches back to the main board to perform closed-loop control of the system. The same applies when the failure of the slave board is eliminated. Since the drive signal of the control unit that follows is the same as the drive signal of the control unit of the closed-loop control, low-disturbance or disturbance-free switching can be achieved, which can effectively reduce the disturbance problem caused by system switching when the control board fails. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 It is a block diagram schematic diagram of a hydrogen production power supply redundant system control related to the present invention; Figure 2 This is a schematic diagram of switching output after a motherboard failure in the prior art; Figure 3 This is a schematic diagram of switching output after a mainboard failure of the present invention; Figure 4 This is a schematic diagram of continuous output after the mainboard fails in Example 1; Figure 5 This is a schematic diagram of continuous output after the mainboard in Example 1 recovers from a fault; Figure 6 It is a schematic diagram of the application of the present invention to a thyristor-controlled hydrogen power source. DETAILED DESCRIPTION

[0022] The present invention is further described in detail below in conjunction with test examples and specific implementation methods. However, this should not be understood as the scope of the above subject matter of the present invention being limited to the following embodiments, and all technologies realized based on the content of the present invention belong to the scope of the present invention.

[0023] Although the main board and the slave board in the prior art work together on the same power component, they do not have follow-up output or simultaneous output of driving signals; their control principle is that when the main board fails, the slave board starts up and then outputs. Figure 2 As shown, from t0 onwards, the main board controls the output in a closed loop and the system runs stably. At t1, the main board fails and stops outputting. The slave board starts immediately (starting from zero output) and controls the output in a closed loop. There is a switching disturbance and an obvious output drop.

[0024] Example 1 A method for controlling a hydrogen production power supply redundant system, wherein the control system is as follows: Figure 1 As shown, it includes a main board, a slave board and a power component; The main board and the slave board are both provided with a control signal interface, a data acquisition interface, a drive signal output interface, and a communication interface connected to each other; The control signal interface and the data acquisition interface are respectively externally connected to the same control end and output end, the drive signal output interface is respectively connected to the power component, and the communication interface is used for data exchange and switching control; The main board is set to perform closed-loop control of the system, and generates a driving signal to control the output of the power component according to the control signal and the output data obtained by the data acquisition interface. The slave board corresponding to the main board follows the main board based on the data obtained by the communication interface and outputs the same driving signal to the power component; The slave board is set to perform closed-loop control of the system, and generates a drive signal to control the output of the power component according to the control signal and the output data obtained by the data acquisition interface. The main board corresponding to the slave board follows the operation of the slave board based on the data obtained by the communication interface, and outputs the same drive signal to the power component; During system operation, when the main board for closed-loop control of the system fails, it will automatically switch to the slave board immediately. When the main board failure is eliminated, the main board will follow the slave board to run. When the drive signals output by the two are consistent, they will switch back to the main board for closed-loop control of the system. When a slave board for closed-loop control of the system fails, it will automatically switch to the main board immediately. When the failure of the slave board is eliminated, the slave board will follow the main board to run. When the drive signals output by the two are consistent, they will switch back to the main board for closed-loop control of the system. When the communication between the main board and the slave board fails, if the main board for system closed-loop control is not faulty, the output of the main board remains unchanged and the slave board does not output; if the slave board for system closed-loop control is not faulty, the output of the slave board remains unchanged and the main board does not output; If the main board performing the closed-loop control of the system fails, the main board will shut down, and the following slave board will continue the system closed-loop control with the output at the time of the communication failure, so as to achieve uninterrupted low-disturbance operation; if the slave board performing the closed-loop control of the system fails, the slave board will shut down, and the following main board will continue the system closed-loop control with the output at the time of the communication failure, so as to achieve uninterrupted low-disturbance operation.

[0025] As needed, the main board is set to perform closed-loop control of the system. The main board outputs a drive signal to perform closed-loop control of the system based on the control signal received by the control signal interface and the output data obtained by the data acquisition interface. The operation of the system is controlled by the main board. At the same time, the slave board receives the main board data based on the communication interface and follows the main board to output the same drive signal without performing closed-loop control.

[0026] Recombination Figure 3As shown, the present invention starts from t0 by closed-loop control of the main board output, and at the same time, the slave board follows the main board to output the same drive signal to control the output of the power component, and the system runs stably; at time t1, the main board fails and stops outputting, and immediately and automatically switches to continuous output from the slave board, and the output is closed-loop controlled by the slave board to achieve disturbance-free or low-disturbance switching.

[0027] like Figure 4 As shown in the figure, the first row of sawtooth wave signals from top to bottom are output voltage waveforms, the second row of square wave signals are slave board drive signals, the third row of square wave signals are main board drive signals, and the fourth row of high and low level signals are main board fault signals (low level is normal, high level is fault). After the main board of the present invention performs closed-loop control of the system, the main board transmits its data to the slave board via the communication interface in real time, the main board and the slave board output the same drive signal, the fault signal interface outputs a low level, and the system runs stably. When the main board fails, it outputs a fault signal to the slave board (the fault signal interface outputs a high level), the main board stops outputting the drive signal, and the slave board continues to output the drive signal based on the data received when the main board fails, and switches to closed-loop control at the same time, and the operation of the system is controlled by the slave board. Since the slave board follows the main board to output the same drive signal, when the main board stops outputting the drive signal due to a fault, the continuous output of the slave board can realize the disturbance-free or low-disturbance switching of the hydrogen production power supply redundant system.

[0028] like Figure 5 As shown (the definition of each row of signals in the figure is the same as above Figure 4 The same), after the mainboard fault is restored to normal, the signal of its restoration to normal is transmitted to the slave board through the communication interface, and the slave board transmits its current data to the mainboard, and the mainboard follows the slave board to run and output the same drive signal. When the drive signals output by the two are consistent, the mainboard is switched to closed-loop control, and the operation of the system is controlled by the mainboard. At the same time, the slave board follows the mainboard to output the same drive signal, and no closed-loop control is performed. Preferably, when the restored mainboard is consistent with the drive signal output by the slave board that was previously performing closed-loop control, the fault signal interface outputs a low level.

[0029] During the operation of the system, when there is a communication failure between the main board and the slave board, if the main board is not faulty, the main board output remains unchanged and the slave board does not output; if the main board is faulty, the main board shuts down and the following slave board continues the output at the time of the communication failure to perform closed-loop control of the system.

[0030] Example 2 The difference between Example 2 and Example 1 is that Example 2 sets the slave board to perform closed-loop control of the system, and the slave board outputs a drive signal according to the control signal received by the control signal interface and the output data obtained by the data acquisition interface to perform closed-loop control of the system, and the operation of the system is controlled by the slave board, while the main board receives the slave board data based on the communication interface, and follows the slave board to output the same drive signal, and does not perform closed-loop control. When the main board or the slave board fails, and the communication between the main board and the slave board fails, the control method is the same as that of Example 1.

[0031] Example 3 As a specific application, Figure 6 As shown, a hydrogen production power supply redundancy system based on thyristor rectification includes a main board, a slave board, a control end (PLC / touch screen / host computer), and a power component, wherein the power component includes at least one set of three-phase bridge full-controlled rectifier circuits ( Figure 6 Only one group is shown in the figure. When there are two groups, the driving signals output by the main board and the slave board are connected to the two groups respectively). The three-phase bridge full-controlled rectifier circuit includes 6 thyristors (SCR) for outputting DC, and its output is connected to the load.

[0032] The three-phase bridge fully controlled rectifier circuit is connected to the power grid via a transformer or directly ( Figure 6 The transformer is not shown in the figure, but a transformer may be used in actual use); the driving signals output by the main board and the slave board are connected to each thyristor together, and the two are mutually backed up. When one of them fails, the other continues to output; the control signal interface of the main board and the slave board is connected to the control end (PLC / touch screen / host computer), the communication interfaces on the main board and the slave board are connected accordingly, the fault signal interface is connected accordingly, and the data acquisition interface is connected to the output end of the power supply. The main board and the slave board are also provided with a synchronization signal interface, which is respectively connected to the same power grid or the same power supply to realize the output of the same phase driving signal. In specific application, the control end sends a control signal, and the control signal interface of the main board and the slave board receives the control signal of the control end, combined with the output data of the power output end obtained by the data acquisition interface, to generate a driving signal to control the output of the three-phase bridge full-controlled rectifier circuit. When the main board fails, it automatically switches to the slave board for continuous output, and finally meets the demand for stable output of the hydrogen production power supply.

[0033] It should be supplemented that the output end refers to the output end of the power component or the output end of the hydrogen production power supply, which can be selected according to the actual situation; a separate fault signal interface is set up to identify the status of the main board and the slave board by transmitting high-level and low-level signals, which is more convenient than integrating the fault signal into the CAN communication. The drive signal output by the main board and the same drive signal output by the slave board to the same power component can make the two drive signals act on the same power component at the same time in actual application, and can also be processed by AND gate or OR gate according to the needs, and finally output a drive signal to act on the same power component; the preferred solution is to use AND gate and then output a drive signal to act on the same power component.

[0034] The present invention realizes disturbance-free or low-disturbance switching of system control in case of failure by controlling the mutual following and automatic switching of the main board and the slave board, thereby ensuring the stability of the system output.

[0035] Finally, it should be noted that the embodiments described in detail above are only the best practices of the invention and cannot be used to limit the scope of rights of the invention. Equivalent replacement of the technical solutions recorded in the aforementioned embodiments does not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the invention, and they should all be included in the scope of the claims and description of the invention.

Claims

1. A method for controlling a hydrogen production power supply redundancy system, characterized in that: Includes main board, slave board and power components; The main board and the slave board are both provided with a control signal interface, a data acquisition interface, a drive signal output interface, and a communication interface connected to each other; The control signal interface and the data acquisition interface are respectively externally connected to the same control end and output end, the drive signal output interface is respectively connected to the power component, and the communication interface is used for data exchange and switching control; The main board is set to perform closed-loop control of the system, and generates a driving signal to control the output of the power component according to the control signal and the output data obtained by the data acquisition interface. The slave board corresponding to the main board follows the main board based on the data obtained by the communication interface and outputs the same driving signal to the power component; The slave board is set to perform closed-loop control of the system, and generates a drive signal to control the output of the power component according to the control signal and the output data obtained by the data acquisition interface. The main board corresponding to the slave board follows the operation of the slave board based on the data obtained by the communication interface, and outputs the same drive signal to the power component; During system operation, when the main board for closed-loop control of the system fails, it will automatically switch to the slave board immediately. When the main board failure is eliminated, the main board will follow the slave board to run. When the drive signals output by the two are consistent, they will switch back to the main board for closed-loop control of the system. When a slave board for closed-loop control of the system fails, it will automatically switch to the main board immediately. When the failure of the slave board is eliminated, the slave board will follow the main board to run. When the drive signals output by the two are consistent, they will switch back to the main board for closed-loop control of the system. When the communication between the main board and the slave board fails, if the main board for system closed-loop control is not faulty, the output of the main board remains unchanged and the slave board does not output; if the slave board for system closed-loop control is not faulty, the output of the slave board remains unchanged and the main board does not output; If the main board performing the closed-loop control of the system fails, the main board will shut down, and the following slave board will continue the system closed-loop control with the output at the time of the communication failure, so as to achieve uninterrupted low-disturbance operation; if the slave board performing the closed-loop control of the system fails, the slave board will shut down, and the following main board will continue the system closed-loop control with the output at the time of the communication failure, so as to achieve uninterrupted low-disturbance operation.

2. A method for controlling a hydrogen production power supply redundant system according to claim 1, characterized in that: The mainboard is set to perform closed-loop control of the system. The mainboard outputs a drive signal to perform closed-loop control of the system according to the control signal received by the control signal interface and the output data obtained by the data acquisition interface. The operation of the system is controlled by the mainboard. At the same time, the slave board receives the mainboard data based on the communication interface and follows the mainboard to output the same drive signal without performing closed-loop control.

3. A method for controlling a hydrogen production power supply redundant system according to claim 2, characterized in that: After the main board performs closed-loop control of the system, the main board transmits data to the slave board via the communication interface in real time. When the main board fails, it outputs a fault signal to the slave board. The slave board continues to output a drive signal based on the data received when the main board fails, and switches to closed-loop control at the same time, and the operation of the system is controlled by the slave board.

4. A method for controlling a hydrogen production power supply redundant system as claimed in claim 3, characterized in that: After the main board recovers from the fault, the signal of recovery is transmitted to the slave board via the communication interface, and the slave board transmits its current data to the main board. The main board follows the operation of the slave board and outputs the same drive signal. When the drive signals output by the two are consistent, the main board is switched to closed-loop control. The main board controls the operation of the system, and the slave board follows the main board to output the same drive signal without closed-loop control.

5. A method for controlling a hydrogen production power supply redundant system according to claim 2, characterized in that: When there is a communication failure between the main board and the slave board, if the main board is not faulty, the main board output remains unchanged and the slave board does not output; if the main board is faulty, the main board shuts down and the following slave board continues the output during the communication failure to perform closed-loop control of the system.

6. A method for controlling a hydrogen production power supply redundant system according to claim 1, characterized in that: The slave board is set to perform closed-loop control of the system. The slave board outputs a drive signal to perform closed-loop control of the system according to the control signal received by the control signal interface and the output data obtained by the data acquisition interface. The operation of the system is controlled by the slave board. At the same time, the main board receives the slave board data based on the communication interface, and follows the slave board to output the same drive signal without performing closed-loop control.

7. A method for controlling a hydrogen production power supply redundant system according to claim 6, characterized in that: After the slave board performs closed-loop control of the system, the slave board transmits its data to the slave board via the communication interface in real time. When the slave board fails, it outputs a fault signal to the main board. The main board continues to output a drive signal based on the data received when the slave board fails, and switches to closed-loop control at the same time, and the operation of the system is controlled by the main board.

8. A method for controlling a hydrogen production power supply redundant system according to claim 2 or 6, characterized in that: After the communication fault between the main board and the slave board is eliminated, if the main board that performs closed-loop control of the system before the communication fault has no fault, the operation of the system will continue to be controlled by the main board; if the slave board that performs closed-loop control of the system before the communication fault has no fault, the operation of the system will continue to be controlled by the slave board; If the main board that performs closed-loop control of the system before the communication failure fails, it will follow the slave board when it returns to normal. When the drive signals output by the two are consistent, they will switch back to the main board before the communication failure to perform closed-loop control and control the operation of the system. If the slave board that performs closed-loop control of the system before the communication failure fails, it will follow the main board after it returns to normal. When the drive signals output by the two are consistent, the slave board before the communication failure will be switched back to perform closed-loop control and control the operation of the system.

9. A method for controlling a hydrogen production power supply redundant system according to claim 2 or 6, characterized in that: The communication interface includes a CAN communication interface and a fault signal interface. When the main board fails, the fault signal is transmitted to the corresponding slave board through the CAN communication interface or the fault signal interface; when the slave board fails, the fault signal is transmitted to the corresponding main board through the CAN communication interface or the fault signal interface; the control signal interface is a TCP or RS485 interface, and the TCP or RS485 interface is respectively connected to a PLC or a touch screen or a host computer to receive external control signals.

10. A method for controlling a hydrogen production power supply redundant system according to claim 1, characterized in that: The power component includes an inverter circuit or a controlled rectifier circuit composed of multiple power tubes; the main board and the slave board operate simultaneously, outputting the same drive signal to the same power tube in the power component, and the power tube is SCR or IGBT or MOSFET; when the power tube is SCR, the main board and the slave board are also provided with a synchronization signal interface, which are respectively connected to the same power grid or the same power supply to output drive signals with the same phase.

Images