Battery control method and device, computer equipment and readable storage medium

Abstract

The invention relates to a battery control method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a target parameter value of each sensor, and determining an operation state of each sensor based on each target parameter value; determining a comprehensive operation result corresponding to each sensor under the sensor type based on each operation state corresponding to each sensor type; and determining a control value of the proton exchange membrane fuel cell according to each comprehensive operation result, the operation state of each sensor and each target parameter value. By adopting the method, the safety of the aircraft can be improved.

Description

Technical Field

[0001] The present application relates to the technical field of fuel cell systems, and in particular to a battery control method, device, computer equipment, computer-readable storage medium, and computer program product. Background Art

[0002] In aviation scenarios, fuel cell systems based on proton exchange membrane fuel cells will provide power support for the flight of aircraft (such as airplanes or drones). In complex high-altitude environments, the fuel cell system will control the proton exchange membrane fuel cell through the battery control method and the control value provided by the sensor in the fuel cell system to ensure stable power output.

[0003] In the current battery control method, the fuel cell system contains multiple types of sensors and there is only one sensor of each type. The fuel cell system collects the measured value of the proton exchange membrane fuel cell under the operating state through each sensor. The measured value is used as the control value, and based on the size relationship between the control value and the control threshold, it is determined whether the operating state of the proton exchange membrane fuel cell is abnormal. If the operating state is abnormal, the fuel cell system controls the proton exchange membrane fuel cell to stop operating.

[0004] However, in the field of aircraft, the current battery control method will cause the aircraft to lose control when the fuel cell stops running, which will lead to a flight accident and reduce the safety of the aircraft. Summary of the invention

[0005] Based on this, it is necessary to provide a battery control method, device, computer equipment, computer readable storage medium and computer program product to address the above technical problems.

[0006] In a first aspect, the present application provides a battery control method, the method being applied to a fuel cell system including a proton exchange membrane fuel cell, wherein each sensor type in the fuel cell system includes at least two sensors, the method comprising:

[0007] Acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value;

[0008] Determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type;

[0009] The control value of the proton exchange membrane fuel cell is determined according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

[0010] In one embodiment, the target parameter value includes a voltage value and a measurement value, and obtaining the target parameter value of each sensor and determining the operating state of each sensor based on each target parameter value includes:

[0011] Acquire the analog signal of each sensor according to a preset time period;

[0012] Convert the analog signal into the voltage value, and convert the voltage value into a measurement value corresponding to the sensor;

[0013] An initial operating state of the sensor is determined according to the voltage value and the measurement value, and a historical operating state of the sensor is updated based on the initial operating state to obtain the operating state of the sensor.

[0014] In one embodiment, determining the initial operating state of the sensor according to the voltage value and the measurement value includes:

[0015] Determining whether the sensor meets a preset voltage obstacle condition and a preset physical obstacle condition based on the voltage value, and obtaining a first determination result;

[0016] Determining whether the sensor meets a preset static unreasonable fault condition based on the measurement value and a preset standard measurement value, and obtaining a second judgment result;

[0017] Each fault type of the sensor and a fault identifier corresponding to each fault type are determined based on the first judgment result and the second judgment result, and an initial operating state of the sensor is constructed according to each fault identifier and each fault type.

[0018] In one embodiment, the initial operating state includes each fault type and a fault identifier corresponding to each fault type, and updating the historical operating state of the sensor based on the initial operating state to obtain the operating state of the sensor includes:

[0019] For each of the fault types, determining a target anti-jitter counter corresponding to the fault type in the historical operating state corresponding to the sensor;

[0020] Updating the value of the target anti-jitter counter according to the fault identifier;

[0021] A proportional operation is performed on the value of the target anti-jitter counter and a preset counting threshold to obtain a counting ratio, and the operating state of the sensor is determined according to the counting ratio.

[0022] In one embodiment, determining the comprehensive operation result corresponding to each sensor under the sensor type based on each operation state corresponding to each sensor type includes:

[0023] For each sensor type, determining whether the operating status of all sensors of the sensor type is a complete failure;

[0024] If the operating states of all sensors are completely faulty, determining that the comprehensive operating results corresponding to each sensor under the sensor type are faulty;

[0025] If the operating status of all sensors is a non-complete fault, it is determined that the comprehensive operating result corresponding to each sensor under the sensor type is normal.

[0026] In one embodiment, the target parameter value includes a measured value; and determining the control value of the proton exchange membrane fuel cell according to each of the comprehensive operation results, the operation state of each of the sensors and each of the target parameter values ​​comprises:

[0027] For each of the sensor types, if the comprehensive operation result corresponding to each sensor under the sensor type is normal, determine the control value corresponding to the sensor type based on the operation state of each sensor and each measurement value;

[0028] If the comprehensive operation result is a fault, obtaining a fault replacement value corresponding to the sensor type, and determining a control value corresponding to the sensor type by using the fault replacement value;

[0029] The control value of the proton exchange membrane fuel cell is constructed according to the control value corresponding to each sensor type.

[0030] In one of the embodiments, determining the control value corresponding to the sensor type based on the operating state of each sensor and each measurement value includes:

[0031] Determine, among the sensors, an initial target sensor whose operating state is not a complete failure;

[0032] An initial target sensor with the highest priority among the initial target sensors is determined as the target sensor, and a measurement value of the target sensor is determined as a control value corresponding to the sensor type.

[0033] In a second aspect, the present application further provides a battery control device, comprising:

[0034] An acquisition module, used to acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value;

[0035] A first determination module, configured to determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type;

[0036] The second determination module is used to determine the control value of the proton exchange membrane fuel cell according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

[0037] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0038] Acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value;

[0039] Determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type;

[0040] The control value of the proton exchange membrane fuel cell is determined according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

[0041] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0042] Acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value;

[0043] Determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type;

[0044] The control value of the proton exchange membrane fuel cell is determined according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

[0045] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0046] Acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value;

[0047] Determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type;

[0048] The control value of the proton exchange membrane fuel cell is determined according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

[0049] The battery control method, device, computer equipment, computer-readable storage medium and computer program product described above obtain the target parameter value of each sensor, and determine the operating state of each sensor based on each target parameter value; determine the comprehensive operating results corresponding to each sensor under the sensor type based on each operating state corresponding to each sensor type; and determine the control value of the proton exchange membrane fuel cell according to each comprehensive operating result, the operating state of each sensor type and each target parameter value. With this method, the operating state of the sensor is determined by the target parameter value, and the comprehensive operating result of the sensor type is determined based on each operating state corresponding to each sensor type, so as to clarify whether all sensors under the sensor type are completely faulty. Then, the control value is determined by each comprehensive operating result, each operating state and each target parameter value, and the control value collected by the normal sensor is obtained, so as to avoid the situation where the proton exchange membrane fuel cell stops operating due to the complete failure of the sensor, thereby improving the safety of the aircraft. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0051] Figure 1 An application environment diagram of a battery control method in an embodiment;

[0052] Figure 2 A schematic diagram of a fuel cell system configuration in one embodiment;

[0053] Figure 3 is a flow chart of a battery control method in one embodiment;

[0054] Figure 4 A schematic diagram of a process for determining an operating state in an embodiment;

[0055] Figure 5 A schematic diagram of a process for determining an initial operating state in an embodiment;

[0056] Figure 6 is a schematic diagram of a fault monitoring module in one embodiment;

[0057] Figure 7 is a circuit diagram of sensor limit fault identification in an exemplary embodiment;

[0058] Figure 8 is a circuit diagram of a sensor physical fault identification in an exemplary embodiment;

[0059] Fig. 9 is a circuit diagram of sensor rationality fault identification in an exemplary embodiment;

[0060] Fig.10 A schematic diagram of a flow chart for determining an operating state of a sensor in an embodiment;

[0061] Fig.11 is a schematic diagram of the association between the fault degree and the fault state in one embodiment;

[0062] Fig.12 is a schematic diagram of the transformation of the operating state in one embodiment;

[0063] Fig.13 A schematic diagram of a fault reporting module storing operating status and related information in one embodiment;

[0064] Fig.14 A schematic diagram of a process for determining a comprehensive operation result in one embodiment;

[0065] Fig.15 A schematic diagram of a process for determining a control value of a proton exchange membrane fuel cell in one embodiment;

[0066] Fig.16 A schematic diagram of a process for determining a control value corresponding to a sensor type in one embodiment;

[0067] Fig.17 is a framework diagram of a battery control module in one embodiment;

[0068] Fig.18 is a structural block diagram of a battery control device in one embodiment;

[0069] FIG. 19 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0070] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0071] The battery control method provided in the embodiment of the present application can be applied to Figure 1In the fuel cell system 100 shown. The fuel cell system 100 includes a proton exchange membrane fuel cell 110, a sensor 120 of various sensor types, and a controller 130. Among them, the proton exchange membrane fuel cell 110 is used to provide electrical energy for the aircraft. The sensor 120 is used to collect the target parameter value of the proton exchange membrane fuel cell 110. The controller 130 executes a battery control method based on the target parameter value to control the proton exchange membrane fuel cell 110. The full name of the controller 130 is the Fuel Cell Control Unit, or FCU for short. Each type of sensor includes two or more sensors.

[0072] In an exemplary embodiment, Figure 2 Figure 1 is a schematic diagram of the fuel cell system configuration. Figure 2 As shown, the fuel cell system (excluding the controller) includes two parts: the cathode subsystem and the anode subsystem. The cathode subsystem includes an air flow meter (F-201 and F-202), an air compressor, an intercooler, an air inlet temperature and pressure sensor (PT-201), an air outlet temperature and pressure sensor (PT-202), an air back pressure valve, etc. The air flow meter is a sensor used to measure the air flow entering the stack. The air compressor is used to pump the air flow and pressurize the air. The temperature of the pressurized gas increases, and the gas is cooled by the water-to-air intercooler and flows into the stack. PT-201 monitors the pressure and temperature of the air flowing into the stack. After the gas reacts in the stack, the remaining gas flows out of the stack. PT-202 monitors the gas pressure and temperature at the outlet of the stack. Finally, after adjusting the air pressure of the air path through the back pressure valve, the remaining air and reaction water are discharged from the stack. The air inlet temperature and pressure sensor and the air outlet temperature and pressure sensor are the same type of sensor, namely the air temperature and pressure sensor.

[0073] The anode subsystem includes a hydrogen medium-pressure pressure sensor (P-101), a hydrogen inlet proportional valve, an ejector, a hydrogen inlet temperature and pressure sensor (PT-101), a hydrogen outlet temperature and pressure sensor (PT-102), a hydrogen tail valve, etc. The hydrogen in the high-pressure gas cylinder is reduced in pressure by the pressure reducing valve and then flows into the hydrogen inlet proportional valve. The proportional valve controls the pressure of the hydrogen entering the fuel cell by adjusting the opening. The sensor P-101 monitors the medium-pressure pressure of the gas cylinder after decompression, and the sensor PT-101 monitors the pressure and temperature of the hydrogen entering the fuel cell. After the hydrogen enters the fuel cell, it reacts with the air under the action of the catalyst. The remaining hydrogen in the reaction circulates into the hydrogen inlet through the ejector and participates in the reaction again. The water generated by the reaction is discharged from the fuel cell through the tail valve.

[0074] Optional, Figure 2The two air temperature and pressure sensors of the air temperature and pressure sensor type are respectively arranged at the inlet and outlet of the fuel cell stack. The two hydrogen temperature and pressure sensors of the hydrogen temperature and pressure sensor type are also arranged at the inlet and outlet of the fuel cell stack. The temperature and pressure sensor located at the inlet (air inlet temperature and pressure sensor or hydrogen inlet temperature and pressure sensor) is the main sensor, and the temperature and pressure sensor located at the outlet (air outlet temperature and pressure sensor or hydrogen outlet temperature and pressure sensor) is the auxiliary sensor. The pressure difference between the inlet and outlet of the fuel cell stack can be measured by the main sensor and the auxiliary sensor, and the value of the auxiliary sensor is generally lower than that of the main sensor. If the main sensor fails, the value of the auxiliary sensor is directly used as a substitute. If the pressure difference of the fuel cell stack itself is too large, the controller adds a certain value to the auxiliary sensor as a substitute for the value of the main sensor. If the fuel cell system does not need to measure the pressure difference of the fuel cell stack, the main sensor and the auxiliary sensor can be deployed in sequence at the inlet of the fuel cell stack, and the embodiment of the present application does not limit the position of the auxiliary sensor.

[0075] It should be made clear that the control quantities of the fuel cell system include intake pressure and intake flow. The intake pressure is monitored by pressure sensors (including air temperature and pressure sensors and hydrogen temperature and pressure sensors), and the intake flow is monitored by air flow meters. Intake control mainly consists of four parts, namely sensor signal acquisition, target value calculation, feedforward value calculation, and feedback value calculation. The controller will collect the flow, pressure, temperature and other signals of the intake path in real time through sensors, and convert the signal into a measurement value for actual control, and participate in subsequent closed-loop control.

[0076] In the traditional battery control method, the fuel cell system contains multiple types of sensors and there is only one sensor of each type. The fuel cell system collects the measured value of the proton exchange membrane fuel cell under the operating state through each sensor. The measured value is used as the control value, and based on the size relationship between the control value and the control threshold, it is determined whether the operating state of the proton exchange membrane fuel cell is abnormal. If the operating state is abnormal, the fuel cell system controls the proton exchange membrane fuel cell to stop operating.

[0077] However, sensor acquisition is the core unit throughout the entire battery control process. Failure in sensor signal acquisition will directly lead to failure of pressure and flow control. That is, when the sensor fails or the acquisition is inaccurate, the control value will exceed the control threshold, which will cause the fuel cell system to determine that the operating state of the proton exchange membrane fuel cell is abnormal and control the proton exchange membrane fuel cell to stop operating. In the field of aircraft, when the proton exchange membrane fuel cell stops operating, it will cause the aircraft to lose control, which will lead to a flight accident of the aircraft, making the aircraft less safe.

[0078] Based on the above-mentioned traditional battery control method, the embodiment of the present application provides a battery control method, which determines the operating state of the sensor through the target parameter value, and determines the comprehensive operating result of the sensor type based on the operating state corresponding to each sensor type, and clarifies whether all sensors of the sensor type are completely faulty. Then, the control value is determined through each comprehensive operating result, each operating state and each target parameter value, and the control value collected by the normal sensor is obtained, which avoids the situation where the proton exchange membrane fuel cell stops operating due to complete sensor failure, and improves the safety of the aircraft.

[0079] In an exemplary embodiment, Figure 3 As shown, a battery control method is provided, which is applied to Figure 1 The controller 130 (hereinafter referred to as the controller) in FIG. 1 is taken as an example to illustrate the method, which includes the following steps 302 to 306. Among them:

[0080] Step 302: Obtain target parameter values ​​of each sensor, and determine the operating status of each sensor based on each target parameter value.

[0081] The target parameter value includes a voltage value and a measurement value.

[0082] In implementation, the controller acquires the analog signal of each sensor and converts the analog signal into a voltage value. Then, the controller converts the voltage value into a measurement value. The controller determines the operating state of the sensor based on the voltage value and the measurement value.

[0083] Specifically, the controller monitors and collects analog signals of the proton exchange membrane fuel cell through sensors. The controller obtains the analog signals of each sensor according to a preset time period. Then, the controller converts the analog signals into voltage values, and converts the voltage values ​​into measurement values. The controller determines the initial operating state of the sensor within the time period based on the voltage values ​​and the measurement values, and updates the historical operating state of the sensor according to the initial operating state to obtain the operating state of the sensor.

[0084] Step 304 : determining the comprehensive operation results corresponding to each sensor under the sensor type based on each operation state corresponding to each sensor type.

[0085] In implementation, the controller determines, for each sensor type, the comprehensive operating result corresponding to each sensor of the sensor type according to the operating status of all sensors of the sensor type.

[0086] Specifically, the controller determines for each sensor type whether the operating status of all sensors under the sensor type is a complete failure, and obtains an operating status judgment result. The controller determines the comprehensive operating result corresponding to each sensor under the sensor type according to the operating status judgment result.

[0087] Step 306 , determining a control value of the proton exchange membrane fuel cell according to the comprehensive operation results, the operation status of each sensor and the target parameter value.

[0088] In implementation, the controller determines the control value corresponding to each sensor type according to the comprehensive operation result corresponding to each sensor type, the operation state of each sensor under the sensor type, and each target parameter value. Then, the controller constructs the control value of the proton exchange membrane fuel cell according to the control value corresponding to each sensor type.

[0089] In the above battery control method, the operating state of the sensor is determined by the target parameter value, and the comprehensive operating result of the sensor type is determined based on the operating states corresponding to each sensor type, which clarifies whether all sensors of the sensor type are completely faulty. Then, the control value is determined by each comprehensive operating result, each operating state and each target parameter value, and the control value collected by the normal sensor is obtained, which avoids the situation where the proton exchange membrane fuel cell stops operating due to complete sensor failure, thereby improving the safety of the aircraft.

[0090] In an exemplary embodiment, the target parameter value includes a voltage value and a measurement value, such as Figure 4 As shown, the specific processing process of step 302 includes steps 402 to 406. Among them:

[0091] Step 402: Acquire the analog signal of each sensor according to a preset time period.

[0092] In implementation, a time period is preset in the controller, and the controller acquires the analog signal of each sensor according to the preset time period.

[0093] Specifically, the controller calls the underlying conversion module interface according to a preset time period to obtain the original AD (Analog-to-Digital) signal of the sensor.

[0094] In an exemplary embodiment, the fuel cell includes sensors of three sensor types, namely, an air flow meter, a hydrogen temperature and pressure sensor, and an air temperature and pressure sensor. Each of the above three sensor types includes two sensors. Specifically, a first air flow meter, a second air flow meter, a first hydrogen temperature and pressure sensor, a second hydrogen temperature and pressure sensor, a first air temperature and pressure sensor, and a second air temperature and pressure sensor. The controller obtains analog signals of the first air flow meter, the second air flow meter, the first hydrogen temperature and pressure sensor, the second hydrogen temperature and pressure sensor, the first air temperature and pressure sensor, and the second air temperature and pressure sensor.

[0095] Optionally, the time period can be set to, but is not limited to, 1 second or 1 millisecond, determined according to battery control requirements. The embodiment of the present application does not limit the time period.

[0096] Step 404: convert the analog signal into a voltage value, and convert the voltage value into a measurement value corresponding to the sensor.

[0097] In implementation, the controller converts the analog signal collected by the sensor to obtain a voltage value corresponding to the analog signal to determine whether the voltage of the sensor is faulty. Then, the controller converts the voltage value into a measurement value corresponding to the sensor to determine whether the sensor measurement is accurate.

[0098] In an exemplary embodiment, if the sensor is an air flow meter, the controller converts the voltage value into a measurement value, which is a flow measurement value, and the flow measurement value represents the flow of the proton exchange membrane fuel cell measured by the sensor within a time period. If the sensor is an air temperature and pressure sensor, the controller converts the voltage value into a measurement value, which includes a temperature measurement value and a pressure measurement value. The temperature measurement value represents the temperature of the proton exchange membrane fuel cell measured by the sensor within a time period, and the pressure measurement value represents the pressure of the proton exchange membrane fuel cell measured by the sensor within a time period.

[0099] Step 406 , determining the initial operating state of the sensor according to the voltage value and the measurement value, and updating the historical operating state of the sensor based on the initial operating state to obtain the operating state of the sensor.

[0100] In implementation, the controller determines whether the sensor meets the preset voltage obstacle condition based on the voltage value, and determines whether the sensor meets the physical obstacle condition based on the voltage value, and obtains a first judgment result. Then, when the proton exchange membrane fuel cell is in a static state, the controller determines whether the sensor meets the preset static unreasonable condition based on the measured value and the preset standard measured value, and obtains a second judgment result. The second judgment result indicates whether the sensor measurement is accurate. The controller determines the initial operating state of the sensor based on the first judgment result and the second judgment result, and updates the historical operating state of the sensor based on the initial operating state to obtain the operating state of the sensor.

[0101] In this embodiment, the analog signal of the sensor is converted into a voltage value and a measurement value, and the initial operating state of the sensor is determined based on the voltage value and the measurement value. The initial operating state of the sensor is determined by adding the voltage value as an influencing factor, thereby improving the accuracy of the initial operating state and thereby improving the accuracy of the operating state.

[0102] In an exemplary embodiment, Figure 5As shown, the specific processing process of determining the initial operating state of the sensor according to the voltage value and the measurement value in step 406 includes steps 502 to 506. Among them:

[0103] Step 502: determine whether the sensor meets a preset voltage obstacle condition and a preset physical obstacle condition based on the voltage value, and obtain a first determination result.

[0104] Among them, the voltage obstacle condition is that the voltage value exceeds the preset voltage value range. The voltage value range is constructed by the voltage upper limit value and the voltage lower limit value. The physical obstacle condition is that the voltage value does not exceed the voltage value range but exceeds the physical voltage value range. The physical voltage value range is constructed by the physical voltage upper limit value and the physical voltage lower limit value. The physical voltage value range is smaller than the voltage value range.

[0105] In implementation, a voltage value range and a physical voltage value range are pre-set in the controller. The controller determines whether the sensor meets the voltage barrier condition according to the magnitude relationship between the voltage upper limit value, the voltage lower limit value, and the voltage value. At the same time, the controller determines whether the sensor meets the voltage barrier condition according to the magnitude relationship between the voltage upper limit value, the voltage lower limit value, the physical voltage upper limit value, the physical voltage lower limit value, and the voltage value, and obtains a first judgment result.

[0106] Specifically, the controller is pre-set with an upper voltage limit, a lower voltage limit, a physical upper voltage limit, and a physical lower voltage limit. The controller determines whether the voltage value exceeds the preset upper voltage limit, and determines whether the voltage value is less than the preset lower voltage limit, and obtains a voltage barrier result, thereby determining whether the sensor meets the voltage barrier condition. If the voltage value exceeds the upper voltage limit or the voltage value is less than the lower voltage limit, the controller determines that the sensor meets the preset voltage barrier condition. When the sensor meets the voltage barrier condition, it indicates that there is a problem with the voltage (or circuit) near the sensor within a time period, that is, the sensor has a limiting fault.

[0107] At the same time, the controller determines whether the voltage value is between the voltage upper limit and the physical voltage upper limit, and determines whether the voltage value is between the voltage lower limit and the physical voltage lower limit to determine whether the sensor meets the physical obstacle condition, thereby obtaining a physical obstacle result. The physical obstacle result characterizes that the sensor has an unreasonable physical value failure. There are two reasons why the sensor meets the physical obstacle condition. One is that the sensor itself fails, causing the collected voltage value to exceed the physical voltage value range but not exceed the voltage value range. The second is that there is a problem with the operation of the proton exchange membrane fuel cell, causing the collected voltage value to exceed the physical voltage value range but not exceed the voltage value range. The controller constructs a first judgment result based on the voltage obstacle result and the physical obstacle result.

[0108] In an exemplary embodiment, if the voltage value exceeds the voltage upper limit value, the controller determines that the sensor generates a high upper limit value fault within the time period, and constructs the voltage barrier result according to the high upper limit value and the fault type limit fault corresponding to the high upper limit value. If the voltage value is less than the voltage lower limit value, the controller determines that the sensor generates a low lower limit value fault within the time period, and constructs the voltage barrier result according to the low lower limit value and the fault type limit fault corresponding to the low lower limit value. If the voltage value does not exceed the voltage upper limit value and the voltage value exceeds the physical voltage upper limit value, the controller determines that the sensor generates a high physical value fault within the time period, and constructs the physical barrier result according to the high physical value and the fault type physical value unreasonable fault corresponding to the high physical value. If the voltage value exceeds the voltage lower limit value and the voltage value is less than the physical voltage lower limit value, the controller determines that the sensor generates a low physical value fault within the time period, and constructs the physical barrier result according to the low physical value and the fault type physical value unreasonable fault corresponding to the low physical value. Then, the controller constructs a first judgment result according to the physical barrier result and the voltage barrier result.

[0109] Optionally, the voltage upper limit value, the voltage lower limit value, the physical voltage upper limit value, and the physical voltage lower limit value are related to the properties of the sensor and the properties of the proton exchange membrane fuel cell. If the properties of the two sensors are the same, the voltage upper limit value, the voltage lower limit value, the physical voltage upper limit value, and the physical voltage lower limit value of the two sensors are the same. If the properties of the two sensors are different, the voltage upper limit value, the voltage lower limit value, the physical voltage upper limit value, and the physical voltage lower limit value of the two sensors are different. The embodiment of the present application does not limit the voltage upper limit value, the voltage lower limit value, the physical voltage upper limit value, and the physical voltage lower limit value.

[0110] Step 504: determine whether the sensor meets a preset static unreasonable fault condition based on the measured value and the preset standard measured value to obtain a second determination result.

[0111] In implementation, a standard measurement value and a measurement difference threshold are pre-set in the controller. The controller performs a difference calculation between the measurement value and the preset standard measurement value to obtain a measurement difference. The controller determines whether the sensor meets a preset static unreasonable fault condition based on the size relationship between the measurement difference and the preset measurement difference threshold, and obtains a second judgment result. When the sensor meets the static unreasonable fault condition, it indicates that the sensor has an inaccurate measurement problem.

[0112] Specifically, the standard measurement value is the pressure when the sensor is in a normal environment. The standard measurement value will be marked on the sensor when the sensor leaves the factory. The target object can input the standard measurement value on the sensor into the controller so that the controller stores the standard measurement value. When the fuel cell system is in a standby state, the proton exchange membrane fuel cell is in a static state. When the proton exchange membrane fuel cell is in a static state, the controller makes a rationality judgment on the sensor pressure. Specifically, when the proton exchange membrane fuel cell is in a static state, the controller obtains the measurement value of the sensor, and performs a difference calculation between the measurement value and the standard measurement value to obtain a measurement difference. The controller judges whether the measurement difference exceeds the measurement difference threshold. If the measurement difference is greater than the measurement difference threshold, the controller determines that the sensor meets the preset static unreasonable fault condition, and determines that the sensor generates a static unreasonable fault within a time period. Then, the controller determines the static unreasonable fault as the second judgment result. If the measurement difference does not exceed the measurement difference threshold, the controller determines that the sensor does not generate a static unreasonable fault within a time period, and determines that the sensor does not generate a static unreasonable fault within a time period as the second judgment result.

[0113] In an exemplary embodiment, the controller includes a fault monitoring state module. The fault monitoring module is used to obtain the target parameter value of each sensor based on a preset time period, and determine the initial operating state of each sensor based on each target parameter value. The fault monitoring module will perform five fault state diagnoses on the sensor: high voltage upper limit value, low voltage lower limit value, high physical value, low physical value and static unreasonable fault. Figure 6 Figure 1 is a schematic diagram of the fault monitoring module. Figure 6 As shown in the figure, the fault monitoring module includes a raw signal acquisition module and a sensor signal calculation module. The raw signal acquisition module obtains the raw AD signal of each sensor, SenSor_AD, by calling the underlying conversion module interface, and converts it into the corresponding voltage value SenSor_uRaw, and converts it into a measured value (also a physical value) SenSor_phy by calculating the sensor signal. The sensor signal calculation module determines whether the sensor has a fault within a time period based on the voltage value and the measured value, obtains the initial operating state, and notifies the initial operating state to the fault reporting module DFC.

[0114] Figure 7 FIG. 1 is a circuit diagram of a sensor limit fault recognition in an exemplary embodiment. Figure 7As shown, SenSor_uRaw is the voltage value, SenSor_uSrcMax is the voltage upper limit value, and SenSor_uSrcMin is the voltage lower limit value. If SenSor_uRaw is greater than SenSor_uSrcMax, the fault monitoring status module reports an upper limit high fault SRCHiErr. If SenSor_uRaw is less than SenSor_uSrcMin, the fault monitoring status module reports a lower limit low fault SRCLoErr. If the fault monitoring status module reports an SRC high fault SRCHiErr or a lower limit low fault SRCLoErr, the controller determines that the sensor has a limit fault.

[0115] Figure 8 FIG. 1 is a circuit diagram of a sensor physical fault identification in an exemplary embodiment. Figure 8 In, SenSor_uRaw is the voltage value, SenSor_uPhyMax is the physical voltage upper limit value, and SenSor_uSrcMax is the voltage upper limit value. SenSor_uPhyMin is the physical voltage lower limit value. SenSor_uSrcMin is the voltage lower limit value. If SenSor_uRaw is greater than SenSor_uPhyMax and less than SenSor_uSrcMax, the fault monitoring status module reports a sensor physical value high fault PHYHiErr. If SenSor_uRaw exceeds SenSor_uSrcMin and is less than SenSor_uPhyMin, the fault monitoring status module reports a sensor physical value low fault PHYLoErr. If the fault monitoring status module reports a physical value high fault or a physical value low fault, the controller determines that the sensor has an unreasonable physical value fault.

[0116] Fig. 9 Schematic diagram of a circuit for sensor rationality fault identification in an exemplary embodiment. The measurement value includes a pressure measurement value and a temperature measurement value, and the standard measurement value includes a pressure standard measurement value and an environmental standard measurement value. The measurement difference threshold includes a pressure measurement difference threshold and a temperature measurement difference threshold. Fig. 9In, SenSor_Pact is the pressure measurement value, EPS_Pact is the pressure standard measurement value, and SenSor_dpPlaus is the pressure measurement difference threshold. SenSor_tAct is the temperature measurement value, EPS_tAct is the temperature standard measurement value, and SenSor_dtPlaus is the temperature measurement difference threshold. ABS is an absolute value. If the absolute value of the difference between the pressure measurement value SenSor_Pact and the pressure standard measurement value EPS_Pact is greater than the pressure measurement difference threshold SenSor_dpPlaus, the fault monitoring status module reports the sensor's static value unreasonable fault DPlausErr. If the absolute value of the difference between the temperature measurement value SenSor_tAct and the temperature standard measurement value EPS_tAct is greater than the temperature measurement difference threshold SenSor_dtPlaus, the fault monitoring status module reports the sensor's static value unreasonable fault DTPlausErr.

[0117] Optionally, the measurement difference threshold is determined according to the properties of the sensor and the properties of the proton exchange membrane fuel cell. The embodiment of the present application does not limit the measurement difference threshold.

[0118] Step 506 , determining each fault type of the sensor and a fault identifier corresponding to each fault type based on the first judgment result and the second judgment result, and constructing an initial operating state of the sensor according to each fault identifier and each fault type.

[0119] The first judgment result includes a voltage obstacle result and a physical obstacle result.

[0120] In implementation, the controller determines each fault type generated by the sensor within a time period and a fault identifier corresponding to each fault type according to the voltage obstacle result, the physical obstacle result and the second judgment result. Then, the controller constructs an initial operating state of the sensor within the time period according to each fault type and the fault identifier corresponding to each fault type.

[0121] Specifically, according to the magnitude relationship between the voltage value and the voltage upper limit value and the voltage lower limit value, there are three different possibilities for the voltage barrier result, namely, the voltage barrier result includes a high upper limit value and a limit fault, the voltage barrier result includes a low lower limit value and a limit fault, or the voltage barrier result includes a sensor non-existent limit barrier fault. For the voltage barrier result, if the voltage barrier result includes a limit fault, the controller determines that the fault type of the sensor within the time period is a limit fault, and determines that the fault identifier corresponding to the limit fault is a fault. If the voltage barrier result includes a sensor non-existent limit fault, the controller does not process the voltage fault result.

[0122] There are also three different possibilities for physical obstacle results, namely, the physical obstacle result includes high physical value and unreasonable physical value obstacles, the physical obstacle result includes low physical value and unreasonable physical value obstacles, and the physical obstacle result includes no physical obstacle of the sensor. For the physical obstacle result, if the physical obstacle result includes unreasonable physical value fault, the controller determines that the fault type of the sensor within the time period is unreasonable physical value fault, and determines that the fault identifier corresponding to the unreasonable physical value fault is fault. If the voltage obstacle result includes the sensor does not exist limit fault, the controller does not process the physical fault result.

[0123] There are two possibilities for the second judgment result. The first possibility is that the second judgment result is a static unreasonable fault, and the second possibility is that the second judgment result is that the sensor does not produce a static unreasonable fault within the time period. For the second judgment result, if the second judgment result is a static unreasonable fault, the controller determines that the fault type of the sensor within the time period is a static unreasonable fault, and determines that the fault identifier corresponding to the static unreasonable fault is a fault. Then, the controller constructs an initial operating state according to each fault type and the fault identifier corresponding to each fault type.

[0124] In an optional embodiment, if the voltage state result includes a high upper limit value and a limiting fault, the controller determines that the fault type is a high voltage value, and determines the fault identifier corresponding to the high voltage value as a fault. If the voltage state result includes a low lower limit value and a limiting fault, the controller determines that the fault type is a low voltage value, and determines the fault identifier corresponding to the low voltage value as a fault. If the physical state result includes a high physical value and an unreasonable physical value fault, the controller determines that the fault type is a high physical value, and determines the fault identifier corresponding to the high physical value as a fault. If the physical state result includes a low physical value and an unreasonable physical value fault, the controller determines that the fault type is a low physical value, and determines the fault identifier corresponding to the low physical value as a fault.

[0125] In an exemplary embodiment, each fault type and an initial fault identifier corresponding to each fault type are pre-set in the controller. The controller updates each initial fault identifier according to the voltage fault result, the physical fault result and the second judgment result to obtain each fault identifier. Then, the controller constructs an initial operating state of the sensor according to each fault type and the fault identifier corresponding to each fault type.

[0126] Specifically, the fault types include high voltage value, low voltage value, high physical value, low physical value and static unreasonable fault. The controller updates the initial fault identification corresponding to the high voltage value and the initial fault identification corresponding to the low voltage value according to the voltage fault result. The controller updates the initial fault identification corresponding to the high physical value and the initial fault identification corresponding to the low physical value according to the physical fault result. The controller updates the initial fault identification corresponding to the static unreasonable fault according to the second judgment result.

[0127] For example, if the voltage fault result includes a high voltage value and a limit fault, the controller updates the initial fault identifier corresponding to the high voltage value to a fault, and updates the initial fault identifier corresponding to the low voltage value to normal. If the voltage fault result includes a low voltage value and a limit fault, the controller updates the initial fault identifier corresponding to the high voltage value to normal, and updates the initial fault identifier corresponding to the low voltage value to a fault. If the voltage fault result is that the sensor does not have a limit obstacle fault, the controller updates the initial fault identifier corresponding to the high voltage value to normal, and updates the initial fault identifier corresponding to the low voltage value to normal. If the physical fault result includes a high physical value and an unreasonable physical value fault, the controller updates the initial fault identifier corresponding to the high physical value to a fault, and updates the initial fault identifier corresponding to the low physical value to normal. If the physical fault result includes a low physical value and an unreasonable physical value fault, the controller updates the initial fault identifier corresponding to the high physical value to normal, and updates the initial fault identifier corresponding to the low physical value to a fault. If the physical fault result is that the sensor does not have an unreasonable physical value fault, the controller updates the initial fault identifier corresponding to the high physical value to normal, and updates the initial fault identifier corresponding to the low physical value to normal. If the second judgment result is a static unreasonable fault, the controller updates the fault identification corresponding to the static unreasonable fault to fault. If the second judgment result is that the sensor does not generate a static unreasonable fault within the time period, the controller updates the fault identification corresponding to the static unreasonable fault to normal.

[0128] In this embodiment, whether the sensor meets the voltage obstacle condition and the physical obstacle condition is judged based on the voltage value, and whether the sensor meets the static unreasonable fault condition is judged based on the measurement value, thereby realizing the identification of multiple fault types, improving the accuracy of sensor fault identification, and further improving the accuracy of the initial operating state.

[0129] In an exemplary embodiment, Fig.10 As shown, the initial operation state includes each fault type and the fault identifier corresponding to each fault type, and the specific processing process of updating the historical operation state of the sensor based on the initial operation state in step 406 to obtain the operation state of the sensor includes steps 1002 to 1006. Among them:

[0130] Step 1002: for each fault type, determine a target anti-jitter counter corresponding to the fault type in the historical operating state corresponding to the sensor.

[0131] In implementation, in the controller, each fault type is provided with an independent anti-jitter counter. The anti-jitter counter is used to record the accumulated faults of the sensor under the fault type to determine the operating state of the sensor. For each fault type, the controller determines the target anti-jitter counter corresponding to the fault type in the historical operating state corresponding to the sensor.

[0132] Specifically, the fault types include limit faults, unreasonable physical value faults and unreasonable static faults. For limit faults, the controller determines a limit fault anti-jitter counter corresponding to the limit fault in the historical operating state corresponding to the sensor. For unreasonable physical value faults, the controller determines a unreasonable physical value fault anti-jitter counter corresponding to the unreasonable physical value fault in the historical operating state corresponding to the sensor. For unreasonable static faults, the controller determines a unreasonable static fault anti-jitter counter corresponding to the unreasonable static fault in the historical operating state corresponding to the sensor.

[0133] In an exemplary embodiment, the controller subdivides the limit fault and the unreasonable physical value fault to obtain the high voltage value fault and the low voltage value fault under the limit fault and the high physical value fault and the low physical value fault under the unreasonable physical value fault. For each fault type, the controller determines the high voltage value fault anti-jitter counter corresponding to the high voltage value fault, the low voltage value fault anti-jitter counter corresponding to the low voltage value fault, the high physical value fault anti-jitter counter corresponding to the high physical value fault, the low physical value fault anti-jitter counter corresponding to the low physical value fault, and the static unreasonable fault anti-jitter counter corresponding to the static unreasonable fault in the historical operating state corresponding to the sensor.

[0134] Step 1004: Update the value of the target anti-jitter counter according to the fault identifier.

[0135] The fault identification includes fault and normal.

[0136] In implementation, if the fault is identified as a fault, the controller adds the value of the current target anti-jitter counter to 1 to obtain the updated value of the target anti-jitter counter. If the fault is identified as normal, the controller subtracts the value of the current target anti-jitter counter from 1 to obtain the updated value of the target anti-jitter counter. The higher the value of the target anti-jitter counter, the more serious the fault of the sensor; if the value of the target anti-jitter counter is lower, the less serious the fault of the sensor.

[0137] Step 1006, performing a proportional operation on the value of the target anti-jitter counter and a preset counting threshold to obtain a counting ratio, and determining the operating state of the sensor according to the counting ratio.

[0138] The count threshold is the anti-bounce confirmation limit. If the value of the target anti-bounce counter reaches the count threshold, it indicates that the operating state of the sensor is a complete failure.

[0139] In implementation, a count threshold is preset in the controller. The controller performs a proportional operation on the value of the target anti-bounce counter and the count threshold to obtain a count ratio. The controller determines a target count range where the count ratio is located, and determines the operating state of the sensor according to the target count range and the historical operating state.

[0140] Specifically, the operating state includes completely normal, partially faulty, completely faulty, and partially normal. The range of the counting ratio is [0%, 100%]. The target counting range includes 0%, (0%, 100%), and 100%. If the counting ratio is 0%, the controller determines that the target counting range corresponding to the counting ratio is 0%, and determines that the operating state of the sensor in the fault type corresponding to the target anti-bounce counter is completely normal. If the counting ratio is 25%, the controller determines that the target counting range corresponding to the counting ratio is (0%, 100%). If the historical operating state of the sensor in the fault type corresponding to the target anti-bounce counter is completely normal, the controller determines that the operating state of the sensor in the fault type corresponding to the target anti-bounce counter is partially faulty. If the historical operating state of the sensor in the fault type corresponding to the target anti-bounce counter is completely faulty, the controller determines that the operating state of the sensor in the fault type corresponding to the target anti-bounce counter is partially normal. If the counting ratio is 100%, the controller determines that the target counting range corresponding to the counting ratio is 100%, and determines that the operating state of the sensor in the fault type corresponding to the target anti-bounce counter is completely faulty. The controller determines the operating state of the sensor according to the operating state of the sensor in each fault type.

[0141] In an exemplary embodiment, if there is a complete fault in the operating state of each fault type of the sensor, the controller determines that the operating state of the sensor is a complete fault. If the operating states of each fault type of the sensor are all completely normal, the controller determines that the operating state of the sensor is completely normal. If there is no complete fault in the operating state of each fault type of the sensor, and the operating states of each fault type of the sensor are not all completely normal, the controller determines that the operating state of the sensor is a partial fault.

[0142] In an exemplary embodiment, the controller includes a fault preprocessing module, a fault reporting module and a fault information storage module.

[0143] The fault preprocessing module is used to obtain the initial operating state of the sensor and update the anti-jitter counter according to the initial operating state. The fault preprocessing module accumulates faults according to the fault type and confirms whether the fault appears or disappears. Then, the fault preprocessing module reports the updated value of the anti-jitter counter to the fault reporting module, so that the fault reporting module determines the operating state of the sensor according to the value of the anti-jitter counter. Specifically, each fault type of each sensor in the controller is provided with a corresponding anti-jitter counter. The anti-jitter counter is used to record the accumulated faults of the sensor under this fault type. For each anti-jitter counter, the fault preprocessing module updates the value of the anti-jitter counter according to the initial operating state. If there is an anti-jitter counter value accumulated to a preset anti-jitter confirmation limit, the fault preprocessing module reports the signal that the value of the anti-jitter counter reaches the anti-jitter confirmation limit to the fault reporting module. When the fault identifier in the initial operating state indicates that the sensor has not generated a fault, the anti-jitter counter accumulates the same anti-jitter operation type. When the counter accumulates to the preset unblocking limit, the fault preprocessing module reports the signal that the value of the anti-jitter counter reaches the unblocking limit to the fault reporting module, and the state of the fault check item re-enters the state of no fault. If the value of the anti-jitter counter does not reach the unblocking limit or the anti-jitter confirmation limit, the fault preprocessing module reports the count ratio of the value of the anti-jitter counter and the anti-jitter confirmation limit to the fault reporting module. Fig.11 FIG. 1 is a schematic diagram showing the association between the fault degree and the fault state in one embodiment. Fig.11 As shown in the figure, the fault degree changes with time. When the fault degree reaches 100%, the fault state also changes from 0 to 1.

[0144] The fault preprocessing module will report the fault condition of each fault type. The fault reporting module determines the operating state of the sensor according to the fault condition of each fault type reported by the fault preprocessing module and the historical operating state, and updates the fault information storage module and the fault event processing module in real time. Fig.12 is a schematic diagram of the transformation of the operating state. Fig.12 As shown, the operating status of the sensor includes four states: "completely normal", "partially faulty", "completely faulty" and "partially normal". After the operating status is confirmed, the fault reporting module transmits the operating status to the fault information storage module to store the fault.

[0145] The fault storage module is used to save the operating status of the sensor in the memory. While the fault storage module stores the operating status of the sensor, it also stores information related to the operating status, including the identification of each fault type, the value of the anti-jitter counter corresponding to each fault type, and the operating status under each fault type. Fig.13 A schematic diagram showing the fault reporting module storing the operating status and related information. Fig.13As shown, if the identification of the fault type is new (the identification of the fault type that has not appeared before), that is, there is no corresponding record in the fault record, then the fault check item state machine in the fault storage module will look for an idle fault record or a fault record that can be replaced according to the priority of the operating state of the fault type to save the operating state and the value of the anti-jitter counter, etc. The priority of the operating state consists of a static priority and a dynamic priority. The static priority is the priority of the fault type, and the dynamic priority is the priority of the operating state. The static priority is pre-set in the controller, and the dynamic priority is that the more serious the fault represented by the operating state, the higher the priority of the operating state. If the fault check state machine detects that the operating state of the fault type has changed, the fault record is updated according to certain rules.

[0146] In this embodiment, the anti-jitter counter is updated through the initial operating status, so that the operating status of the sensor is determined according to the essence of the anti-jitter counter, thereby avoiding the problem of inaccurate operating status caused by occasional failures of the sensor, ensuring that the failure is a real failure, avoiding false alarms of the failure, improving the accuracy of the operating status, and further improving the accuracy of the battery operation method.

[0147] In an exemplary embodiment, Fig.14 As shown, the specific processing process of step 304 includes steps 1402 to 1406. Among them:

[0148] Step 1402: for each sensor type, determine whether the operating status of all sensors of the sensor type is a complete failure.

[0149] In implementation, the controller determines, for each sensor type, whether the operating status of all sensors of the sensor type is a complete failure.

[0150] Specifically, the controller determines, for each sensor type, whether the operating state of each sensor under the sensor type is a complete failure. If the operating state of each sensor under the sensor type is a complete failure, the controller determines that the operating states of all sensors under the sensor type are complete failures. If the operating state of a sensor under the sensor type is a non-complete failure, the controller determines that the operating states of all sensors are not complete failures.

[0151] Step 1404 , if the operating status of all sensors is completely faulty, determine that the comprehensive operating result corresponding to each sensor under the sensor type is faulty.

[0152] In implementation, if the operating status of all sensors is completely faulty, the controller determines that the measurement values ​​collected by all sensors under this sensor type are unavailable, and determines that the comprehensive operating results of each sensor under this sensor type are faulty.

[0153] Step 1406 , if any of the operating states of all sensors is in a non-complete failure, it is determined that the comprehensive operating result corresponding to each sensor under the sensor type is normal.

[0154] In implementation, if the operating status of a sensor among the operating statuses of all sensors is a non-complete failure, the controller determines that a sensor of this sensor type is available, and determines that the comprehensive operating results corresponding to each sensor of this sensor type are normal.

[0155] Specifically, the operating status of the sensor includes complete failure, complete normality and partial failure. If the operating status of a sensor in the operating status of all sensors is complete normality or partial failure, the controller determines that a sensor of the sensor type is available for use, and sets the comprehensive operating result corresponding to each sensor of the sensor type as normal.

[0156] In this embodiment, by determining the comprehensive operation results of each sensor under the sensor type, it is determined whether there are still available sensors under the sensor type, thereby providing a basis for subsequent determination of the control value.

[0157] In an exemplary embodiment, the target parameter value comprises a measured value; Fig.15 As shown, the specific processing process of step 306 includes steps 1502 to 1506. Among them:

[0158] Step 1502 : for each sensor type, if the comprehensive operation result corresponding to each sensor under the sensor type is normal, determine the control value corresponding to the sensor type based on the operation status of each sensor and each measurement value.

[0159] In implementation, for each sensor type, if the comprehensive operating result corresponding to each sensor under the sensor type is normal, the controller determines the target sensor according to the operating status and priority of each sensor, and determines the measurement value corresponding to the target sensor as the control value corresponding to the sensor type.

[0160] Specifically, for each sensor type, if the comprehensive operation result corresponding to each sensor under the sensor type is normal, the controller determines the initial target sensor among the sensors according to the operation status of each sensor, and determines the target sensor among the initial target sensors. Then, the controller determines the measurement value of the target sensor as the control value corresponding to the sensor type.

[0161] Step 1504: If the comprehensive operation result is a fault, a fault replacement value corresponding to the sensor type is obtained, and the fault replacement value is used to determine the control value corresponding to the sensor type.

[0162] Among them, the fault replacement value represents the normal operation of the proton exchange membrane fuel cell.

[0163] In implementation, if the comprehensive operation result is a fault, the controller obtains a fault replacement value corresponding to the sensor type, and then determines the fault replacement value as the control value corresponding to the sensor type.

[0164] Specifically, the controller is pre-set with a fault replacement value corresponding to each sensor type. If the comprehensive operation result corresponding to the sensor type is a fault, the controller determines the fault replacement value corresponding to the sensor type from each fault replacement value. Then, the controller determines the fault replacement value as the control value corresponding to the sensor type.

[0165] In an optional embodiment, if the comprehensive operation result corresponding to the sensor type is a fault, the controller determines the measurement value at the moment before the fault occurs (when no fault occurs) as the fault replacement value corresponding to the sensor type according to the sensor type. Then, the controller determines the fault replacement value as the control value corresponding to the sensor type.

[0166] Step 1506: construct a control value for the proton exchange membrane fuel cell according to the control value corresponding to each sensor type.

[0167] In implementation, the controller constructs the control value corresponding to each sensor type as the control value of the proton exchange membrane fuel cell, and controls the operation of the proton exchange membrane fuel cell according to the control value of the proton exchange membrane fuel cell.

[0168] In an exemplary embodiment, the controller includes a fault execution operation module. The fault execution operation module is used to determine the control value of the proton exchange membrane fuel cell. Each sensor type in the fuel cell system includes two sensors, namely a main sensor and an auxiliary sensor. The controller determines the control value corresponding to each sensor type according to the comprehensive operation results, the operating status of the main and auxiliary sensors, and each measurement value. As shown in Table 1 below. Table 1 shows the correlation between the fault replacement value, the operating status of the auxiliary sensor, each measurement value, and the control value.

[0169] Table 1

[0170]

[0171] As shown in Table 1 above, when the operating states of the main sensor and the auxiliary sensor are both non-complete faults, the controller determines the control value to be the value (measured value) of the main sensor. When the operating state of the main sensor is non-complete fault and the operating state of the auxiliary sensor is complete fault, the controller determines the control value to be the value (measured value) of the main sensor. When the operating state of the main sensor is complete fault and the operating state of the auxiliary sensor is non-complete fault, the controller determines the control value to be the value (measured value) of the auxiliary sensor. When the operating states of the main sensor and the auxiliary sensor are both complete faults, the controller determines the control value to be the fault replacement value.

[0172] like Figure 2 As shown, the two flow sensors set in the air intake subsystem in the fuel cell system are the main sensor F-201 and the auxiliary sensor F-202. When one of the flow sensors fails, the controller will switch the control value to another normal flow sensor. In pressure control, air temperature and pressure sensors PT-201 and PT-202 are arranged at the inlet and outlet of the stack respectively. PT-201 and PT-202 are the main sensor and auxiliary sensor respectively. PT-201 and PT-202 are used to monitor the air inlet pressure and outlet pressure. When PT-201 fails, the controller will switch the control value to PT-202 to ensure the stability of pressure control. In the hydrogen subsystem, two hydrogen temperature and pressure sensors PT-101 and PT-102 are set. PT-101 and PT-102 are the main sensor and auxiliary sensor respectively. PT-101 and PT-102 are used to monitor the hydrogen inlet pressure and outlet pressure. When PT-101 fails, the controller will switch the control value to PT-102 to ensure the stability of pressure control.

[0173] In this embodiment, if the comprehensive operating result is a fault, the control value corresponding to the sensor type is determined by the fault replacement value, thereby avoiding the problem of abnormal control value due to complete sensor failure, ensuring that the proton exchange membrane fuel cell represented by the control value of the sensor is in a normal state, thereby ensuring the normal flight of the aircraft and improving the safety of the aircraft.

[0174] In an exemplary embodiment, Fig.16 As shown, the specific processing process of determining the control value corresponding to the sensor type based on the operating status of each sensor and each measurement value in step 1502 includes steps 1602 to 1604. Among them:

[0175] Step 1602: Determine an initial target sensor whose operating status is not a complete failure among the sensors.

[0176] In implementation, the controller determines, among the sensors, a sensor whose operating status is not a complete failure as the initial target sensor.

[0177] Specifically, the operating status of the sensor includes complete failure, partial failure and complete normality. The controller determines the sensors whose operating status are partial failure and complete normality as the initial target sensors among the sensors.

[0178] Step 1604: Determine the initial target sensor with the highest priority among the initial target sensors as the target sensor, and determine the measurement value of the target sensor as the control value corresponding to the sensor type.

[0179] In implementation, the controller determines the initial target sensor with the highest priority among the initial target sensors as the target sensor according to the priority of each initial target sensor. Then, the controller determines the control value corresponding to the sensor type according to the measurement value of the target sensor.

[0180] In an exemplary embodiment, the initial target sensor includes a main sensor and an auxiliary sensor. The main sensor has a higher priority than the auxiliary sensor. The controller determines the main sensor with the highest priority among the main sensor and the auxiliary sensor as the target sensor, and determines the measurement value of the main sensor as the control value corresponding to the sensor type.

[0181] In the present embodiment, when the comprehensive operating result is normal, a target sensor whose operating status is not a complete failure is determined among each sensor, and a target sensor that can be used normally is obtained. Then, the measured value of the target sensor is determined as the control value, thereby avoiding the situation where the proton exchange membrane fuel cell stops operating due to a complete failure of the sensor, thereby improving the safety of the aircraft.

[0182] In an exemplary embodiment, a battery control module is provided in the controller to execute the battery control method. Fig.17 Figure 1 is the framework diagram of the battery control module. Fig.17 As shown, the battery control module consists of two parts: a sensor fault identification module and a sensor fault diagnosis module. The sensor fault identification module includes a fault state monitoring module and a fault state execution module. The sensor fault diagnosis module includes a fault preprocessing module, a fault reporting module, a fault information storage module, and a fault event processing module. Among them, the fault preprocessing module, the fault reporting module, and the fault information storage module in the sensor fault identification module and the sensor fault diagnosis module have been described in detail in the above embodiments, and the embodiments of this application will not be repeated here. The fault event processing module is described in detail below.

[0183] The fault event processing module is used to adjust various parameters of the proton exchange membrane fuel cell when the sensor is not in a completely normal state, so as to ensure the normal operation of the proton exchange membrane fuel cell, thereby restoring the sensor to be completely normal to a certain extent. The fault event processing module can enable or disable certain functions and related functions according to the fault type and the fault identifier of the fault type. These functions have independent function identification numbers, and the enablement / disablement of some functions depends on the fault state of one or several fault check items. This correlation is represented by a correlation matrix. In the fault event processing module, according to each fault type and each fault identifier corresponding to each fault type, it is determined whether these functions are in an enablement / disablement state. When the fault identifier corresponding to a certain fault type represents the sensor fault, the fault event processing module first determines the abnormal level of the fault type and whether the fault level reaches the limit value related to enabling or disabling through the calibration matrix. The abnormal level is obtained by a battery abnormality control method similar to the battery control method. The difference between the battery abnormality control method and the battery control method is only that the voltage value range, the physical voltage value range and the measurement difference threshold are different. The limits of the abnormal level and fault level are expressed as percentages, which can be 0%, 50% and 100% respectively, as shown in Table 2. Only when both the abnormal level and the fault level reach the limit, the corresponding FID (function) will be disabled, otherwise the FID will be enabled. Table 2 shows the relationship between the abnormal level, fault level and status code.

[0184] Table 2

[0185]

[0186] In the above Table 2, Def is the abnormality level and Deb is the fault level. Def0 is 0 for the abnormality level and Deb0 is 0 for the fault level. Def50 is 50% for the abnormality level and Deb50 is 50% for the fault level. Def100 is 100% for the abnormality level and Deb100 is 100% for the fault level.

[0187] Optionally, the abnormal level and the fault level may be divided into more detailed levels according to the battery control requirements, such as 25%, 75%, etc. The embodiment of the present application does not limit the division of the abnormal level and the fault level.

[0188] By reporting the fault type and the fault identifier corresponding to the fault type, and dividing the operating status into four different levels, the severity of the sensor fault can be distinguished. The fault is divided into two paths, one of which is transmitted to the fault information storage, and updated and recorded or even frozen to facilitate the storage and analysis of the fault. The other path uploads the operating status to the fault event processing module, so that the fault event processing module determines whether to use redundant sensors or fault replacement values ​​to participate in control, and realizes the closed loop of sensor fault identification and sensor fault diagnosis.

[0189] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0190] Based on the same inventive concept, the embodiment of the present application also provides a battery control device for implementing the battery control method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more battery control device embodiments provided below can refer to the limitations of the battery control method above, and will not be repeated here.

[0191] In an exemplary embodiment, Fig.18 As shown, a battery control device 1800 is provided, including: an acquisition module 1801, a first determination module 1802 and a second determination module 1803, wherein:

[0192] The acquisition module 1801 is used to acquire the target parameter value of each sensor and determine the operating state of each sensor based on the target parameter value.

[0193] The first determination module 1802 is used to determine the comprehensive operation results corresponding to each sensor under the sensor type based on each operation state corresponding to each sensor type.

[0194] The second determination module 1803 is used to determine the control value of the proton exchange membrane fuel cell according to the comprehensive operation results, the operation status of each sensor and the target parameter value.

[0195] In an exemplary embodiment, the target parameter value includes a voltage value and a measurement value, and the acquisition module 1801 includes:

[0196] The first acquisition submodule is used to acquire the analog signal of each sensor according to a preset time period.

[0197] The first conversion submodule is used to convert the analog signal into a voltage value, and then convert the voltage value into a measurement value corresponding to the sensor.

[0198] The first updating submodule is used to determine the initial operating state of the sensor according to the voltage value and the measurement value, and update the historical operating state of the sensor based on the initial operating state to obtain the operating state of the sensor.

[0199] In an exemplary embodiment, the first updating submodule includes a first determining submodule and a second updating submodule. The first determining submodule includes:

[0200] The first judgment submodule is used to judge whether the sensor meets a preset voltage obstacle condition and a preset physical obstacle condition based on the voltage value, and obtain a first judgment result.

[0201] The second judgment submodule is used to judge whether the sensor meets the preset static unreasonable fault condition based on the measured value and the preset standard measured value, and obtain a second judgment result.

[0202] The second determination submodule is used to determine each fault type of the sensor and a fault identifier corresponding to each fault type based on the first judgment result and the second judgment result, and to construct an initial operating state of the sensor according to each fault identifier and each fault type.

[0203] In an exemplary embodiment, the initial operation state includes various fault types and fault identifiers corresponding to the fault types, and the first updating submodule includes a first determining submodule and a second updating submodule. The second updating submodule includes:

[0204] The third determination submodule is used to determine, for each fault type, a target anti-jitter counter corresponding to the fault type in the historical operating state corresponding to the sensor.

[0205] The third updating submodule is used to update the value of the target anti-jitter counter according to the fault identifier.

[0206] The fourth determination submodule is used to perform a proportional operation on the value of the target anti-jitter counter and a preset counting threshold to obtain a counting ratio, and determine the operating state of the sensor according to the counting ratio.

[0207] In an exemplary embodiment, the first determining module 1802 includes:

[0208] The third judgment submodule is used to judge, for each sensor type, whether the operating status of all sensors under the sensor type is a complete failure.

[0209] The fifth determination submodule is used to determine that the comprehensive operation result corresponding to each sensor under the sensor type is a failure if the operation status of all sensors is a complete failure.

[0210] The sixth determination submodule is used to determine that the comprehensive operation result corresponding to each sensor under the sensor type is normal if there is an operation state of incomplete failure among the operation states of all sensors.

[0211] In an exemplary embodiment, the target parameter value includes a measurement value; the second determination module 1803 includes:

[0212] The sixth determination submodule is used to determine, for each sensor type, a control value corresponding to the sensor type based on the operating state of each sensor and each measurement value if the comprehensive operating result corresponding to each sensor under the sensor type is normal.

[0213] The sixth determination submodule is used to obtain a fault replacement value corresponding to the sensor type if the comprehensive operation result is a fault, and determine the control value corresponding to the sensor type with the fault replacement value.

[0214] The first construction submodule is used to construct the control value of the proton exchange membrane fuel cell according to the control value corresponding to each sensor type.

[0215] In an exemplary embodiment, the fifth determining submodule includes:

[0216] The seventh determination submodule is used to determine, among the sensors, an initial target sensor whose operating status is not a complete failure.

[0217] The eighth determination submodule is configured to determine, among the initial target sensors, an initial target sensor with the highest priority as the target sensor, and determine a measurement value of the target sensor as a control value corresponding to the sensor type.

[0218] Each module in the above-mentioned battery control device can be implemented in whole or in part by software, hardware or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0219] In an exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG19. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner may be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a battery control method is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0220] Those skilled in the art will understand that the structure shown in FIG. 19 is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0221] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0222] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0223] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0224] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0225] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0226] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A battery control method, characterized in that: The method is applied to a fuel cell system including a proton exchange membrane fuel cell, wherein each sensor type in the fuel cell system includes at least two sensors, and the method comprises: Acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value; Determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type; The control value of the proton exchange membrane fuel cell is determined according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

2. The method according to claim 1, characterized in that The target parameter value includes a voltage value and a measurement value, and the step of acquiring the target parameter value of each sensor and determining the operating state of each sensor based on each target parameter value includes: Acquire the analog signal of each sensor according to a preset time period; Convert the analog signal into the voltage value, and convert the voltage value into a measurement value corresponding to the sensor; An initial operating state of the sensor is determined according to the voltage value and the measurement value, and a historical operating state of the sensor is updated based on the initial operating state to obtain the operating state of the sensor.

3. The method according to claim 2, characterized in that The determining the initial operating state of the sensor according to the voltage value and the measurement value includes: Determining whether the sensor meets a preset voltage obstacle condition and a preset physical obstacle condition based on the voltage value, and obtaining a first determination result; Determining whether the sensor meets a preset static unreasonable fault condition based on the measurement value and a preset standard measurement value, and obtaining a second judgment result; Each fault type of the sensor and a fault identifier corresponding to each fault type are determined based on the first judgment result and the second judgment result, and an initial operating state of the sensor is constructed according to each fault identifier and each fault type.

4. The method according to claim 2, characterized in that: The initial operation state includes each fault type and a fault identifier corresponding to each fault type, and the updating of the historical operation state of the sensor based on the initial operation state to obtain the operation state of the sensor includes: For each of the fault types, determining a target anti-jitter counter corresponding to the fault type in the historical operating state corresponding to the sensor; Updating the value of the target anti-jitter counter according to the fault identifier; A proportional operation is performed on the value of the target anti-jitter counter and a preset counting threshold to obtain a counting ratio, and the operating state of the sensor is determined according to the counting ratio.

5. The method according to claim 1, characterized in that The determining, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type includes: For each sensor type, determining whether the operating status of all sensors of the sensor type is a complete failure; If the operating states of all sensors are completely faulty, determining that the comprehensive operating results corresponding to each sensor under the sensor type are faulty; If the operating status of all sensors is a non-complete fault, it is determined that the comprehensive operating result corresponding to each sensor under the sensor type is normal.

6. The method according to claim 1, characterized in that The target parameter value includes a measured value; and determining the control value of the proton exchange membrane fuel cell according to each of the comprehensive operation results, the operation state of each of the sensors and each of the target parameter values ​​includes: For each of the sensor types, if the comprehensive operation result corresponding to each sensor under the sensor type is normal, determine the control value corresponding to the sensor type based on the operation status of each sensor and each measurement value; If the comprehensive operation result is a fault, obtaining a fault replacement value corresponding to the sensor type, and determining a control value corresponding to the sensor type by using the fault replacement value; The control value of the proton exchange membrane fuel cell is constructed according to the control value corresponding to each sensor type.

7. The method according to claim 6, characterized in that The determining the control value corresponding to the sensor type based on the operating state of each sensor and each measurement value includes: Determine, among the sensors, an initial target sensor whose operating state is not a complete failure; An initial target sensor with the highest priority among the initial target sensors is determined as the target sensor, and a measurement value of the target sensor is determined as a control value corresponding to the sensor type.

8. A battery control device, characterized in that: The device comprises: An acquisition module, used to acquire a target parameter value of each sensor, and determine an operating state of each sensor based on each target parameter value; A first determination module, configured to determine, based on each operating state corresponding to each sensor type, a comprehensive operating result corresponding to each sensor under the sensor type; The second determination module is used to determine the control value of the proton exchange membrane fuel cell according to each of the comprehensive operation results, the operation status of each of the sensors and each of the target parameter values.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images