ESS security management system

Abstract

The present invention relates to an ESS security management system comprising: a monitoring device for observing the state of an ESS; the present invention relates to an ESS security management system and a security device for blocking or stopping ESS operation of other domains separate from a network switch for unauthorized access to an ESS or an abnormal state of the ESS, and more particularly, the present invention relates to an ESS security management system for security management of a system through multi-level network management to maintain ESS network security.

Description

Technical Field

[0001] The present disclosure relates to an ESS security management system, and more particularly, to an ESS security management system for performing security management on a system through multi-level network management to maintain ESS network security. Background Art

[0002] Unless otherwise indicated in the specification, what is described in this section is not prior art to the claims in this application and inclusion in this section does not constitute prior art.

[0003] Generally speaking, if an ESS is operated in a state deviating from its operating conditions, the ESS may suffer from problems such as fire or explosion.

[0004] The operating conditions of ESS include ambient temperature, battery temperature, battery voltage, and charge / discharge status. During this process, abnormalities may occur in ESS, and other abnormalities may also occur due to hacker attacks, disasters, accidents, aging, etc.

[0005] The operation of ESS is usually performed remotely via the network. However, if the operating conditions are entered incorrectly due to a network hacker attack, an accident that exceeds the operating conditions may occur.

[0006] Therefore, it is necessary to perform security management through monitoring management, etc. to solve problems caused by abnormal phenomena of ESS (especially hacker attacks or network failures).

[0007] However, safety management systems applied to ESS have not yet been properly proposed and applied. Summary of the invention

[0008] Technical tasks

[0009] The present disclosure aims to solve the above-mentioned problems so that ESS can operate safely and detect abnormalities in advance.

[0010] Therefore, an object of the present disclosure is to provide a safety management system that manages the status of an ESS at multiple levels.

[0011] Another object of the present disclosure is to provide an ESS safety management system that ensures safety by preventing or stopping the operation of an ESS network in response to unauthorized access to the ESS or an abnormal state of the ESS.

[0012] The objects of the present disclosure are not limited to the above objects, but should be understood to include all objects that can be inferred from the detailed description of the present disclosure or the configuration of the present disclosure described in the claims or all objects that can be achieved by the description or technical concept of the present disclosure.

[0013] Technical Solution

[0014] To achieve the above-mentioned object, the present disclosure provides an ESS security management system, which has a monitoring device and a security device, wherein the monitoring device is configured to observe the state of the ESS, and the security device is configured to prevent or stop the operation of the ESS in another domain separated from the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS.

[0015] In a preferred embodiment of the present disclosure, the monitoring device may include two or more monitoring levels with different monitoring ranges, the monitoring levels are connected to each other via a network communication line, and the monitoring levels have the function of transmitting and receiving signals or issuing or executing commands.

[0016] In a preferred embodiment of the present disclosure, the number of monitoring levels may be four.

[0017] In a preferred embodiment of the present disclosure, the monitoring levels may include: Level 1, which includes a module BMS directly connected to a plurality of battery cells; Level 2, which includes a battery pack BMS connected to each other by two or more module BMSs of Level 1; Level 3, which includes two or more system BMSs connected to each other by two or more battery pack BMSs of Level 2, and includes a power management system (PMS) configured to control one or more of heating and cooling and air conditioning; and Level 4, which includes one or more of Level 3 and includes a top-level energy management system (EMS) configured to control one or more of ESSs, power systems, power grids, power plants, and loads in different areas.

[0018] In a preferred embodiment of the present disclosure, Level 1 and Level 2 can regulate the battery, and in the safest state, the current can be minimized and the voltage can be fixed within the battery safety voltage range.

[0019] In a preferred embodiment of the present disclosure, the module BMS of level 1 can be configured so that 5 to 50 battery cells, more preferably 10 to 20 battery cells are connected in series with each other, and can perform the following functions: monitor the battery cell status of one or more of the battery cell voltage, current and temperature, perform cell balancing, collect and check the battery cell status information data, and transmit the collected battery cell information data to a higher level level 2.

[0020] In a preferred embodiment of the present disclosure, the battery pack BMS of level 2 may include the following functions: receiving information data about battery cells from one or more module BMSs of level 1, performing status determination and transmitting the status determination result data to a higher level level 3, and receiving a command to perform balancing on the battery cells from the system BMS of level 3 and commanding the module BMS of the lower level level 1 to execute the command.

[0021] In a preferred embodiment of the present disclosure, level 3 may include one or more system BMSs to constitute a PMS, the PMS may control one or more PCSs or communicate with one or more PCSs, and may include one or more PCSs. Each system BMS may include the following functions: analyzing information transmitted from each lower level battery pack BMS to determine whether to perform balancing of battery cells, transmitting it to each battery pack BMS of level 2 to execute a balancing command, and commanding a switch connected to the battery pack BMS to open / close.

[0022] In a preferred embodiment of the present disclosure, a level 3 PMS may include the following functions: receiving information from a PCS and one or more system BMSs, receiving information about abnormal conditions including alarm conditions and having authority to reset alarms, receiving information of each battery pack BMS closing unit belonging to the system BMS to perform activation and deactivation for maintaining a normal state of the battery system, such as for balancing, and transmitting the collected information to the EMS.

[0023] In a preferred embodiment of the present disclosure, level 4 may include an EMS including one or more PMSs, and may include functions of checking the status of cooling and heating, loads, and grids connected to the EMS, executing ESS utilization strategies, and transmitting necessary commands to lower-level PMSs connected in parallel, with each EMS transmitting commands to the PCS through multiple PMSs.

[0024] In addition, the present disclosure provides an ESS security management system, the ESS security management system having a monitoring device and a security device, the monitoring device being configured to observe the state of the ESS, the security device being configured to block or stop the operation of the ESS in another domain separated from the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS, the ESS security management system comprising:

[0025] A first battery management system configured to manage a plurality of battery cells;

[0026] a second battery management system located upstream of the first battery management system, the second battery management system being configured to provide control for the first battery management system;

[0027] a network communication line configured to provide a signal connection between the power grid, the battery, the second battery management system, and the first battery management system; and

[0028] A dual-domain switch control system connected to the network communication line, the dual-domain switch control system being configured to selectively prevent unauthorized access or abnormal operation to at least one of the first battery management system and the second battery management system.

[0029] In a preferred embodiment of the present disclosure, the first battery management system may include one or more module BMSs, and the first battery management system may include a battery pack BMS including one or more module BMSs, in addition to a system BMS including one or more battery pack BMSs, or in addition to a PMS including one or more system BMSs.

[0030] In a preferred embodiment of the present disclosure, the dual-domain switch control system may include: a network switch that operates in response to a command transmitted through a network communication line, the network switch being configured to control at least one of the first battery management system and the second battery management system; and

[0031] A physical switch configured to detect abnormal operation associated with potential unauthorized access and physically block or prevent power from being supplied to at least one of the first battery management system and the second battery management system without transmitting a command over a network communication line.

[0032] In addition, the present disclosure provides an error detection system for ESS safety management in an ESS safety management system, the ESS safety management system having a monitoring device and a safety device, the monitoring device being configured to observe a state of the ESS, the safety device being configured to block or stop the operation of the ESS in another domain separated from a network switch in response to unauthorized access to the ESS, wherein the error detection system detects measurement errors of a PCS and a BMS, comprising:

[0033] measuring and recording the voltage of each battery from a module BMS configured to manage battery cells constituting the ESS and measuring and recording the total voltage in the PCS;

[0034] Estimate the total voltage of the system by accumulating the voltage of each battery measured;

[0035] comparing the estimated total voltage of the system to the measured total voltage; and

[0036] If the difference between the two battery voltages of the comparison target reaches a certain level or more, an error signal is transmitted.

[0037] In a preferred embodiment of the present disclosure, one or more of measuring and recording the total battery voltage from the PCS and comparing the total battery voltages measured from the BMS and the PCS may also be included. The total battery voltage refers to but is not limited to the total voltage of the battery system configured in series or parallel connection with the PCS. In some embodiments, the voltages of some batteries may be regarded as the total battery voltage depending on the connection status of the battery system.

[0038] In a preferred embodiment of the present disclosure, the system can be applied as one or more of the following systems: a system for transmitting an error signal when status data of a battery including one or more of temperature and humidity measured in physical domain 1 and data measured in physical domain 2 exceed a certain level; a system for measuring the amount of current between physical domains and if the difference in the amount of current occurs rapidly within a certain period of time, detecting it as leakage and transmitting an error signal; and a system for accumulating the amount of electric power within a certain period of time and correcting it if the accumulated amount is different from the value recorded by an actual integrator.

[0039] Beneficial Effects

[0040] The present disclosure can regulate the battery, and in the safest state, the current can be minimized and the voltage can be fixed within the battery safety voltage range, whereby the ESS can operate safely.

[0041] The present disclosure can adjust the heating and cooling facilities and output, and in the safest state, the temperature can be fixed at the safest temperature for the battery, and the output can be minimized, whereby the ESS can operate economically and safely.

[0042] The present disclosure has the following effects: when a switch is operated in response to unauthorized access or an abnormal situation (especially unauthorized access) during the operation of an ESS, the switch cannot be operated through a network, and the operation of the switch can be physically blocked by applying a plurality of switches and applying an emergency identification function, thereby achieving safety maintenance and hacker attack prevention.

[0043] The effects of the present disclosure are not limited to the above-described effects, but should be understood to include all effects that can be inferred from the detailed description of the present disclosure or from the configuration of the present disclosure described in the claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1a and Figure 1b 1 is a conceptual view of an embodiment to which the ESS safety management system according to the present disclosure is applied, illustratively showing operating state management ranges in different forms when the monitoring level is composed of level 1 to level 4.

[0045] Figure 21 is an explanatory view showing an open circuit state when an abnormal state (open circuit) occurs due to loosening of the fastening structure of the bus bar in a conventional ESS system.

[0046] Figure 3 is an explanatory view showing an open circuit state including an improvement of the boost circuit according to the present disclosure, so that it is possible to check Figure 2 The error of the ESS system occurs. DETAILED DESCRIPTION

[0047] Hereinafter, the present disclosure is described in more detail as embodiments.

[0048] Herein, an ESS safety management system according to a preferred embodiment will be described in detail with reference to the accompanying drawings.

[0049] For reference, in the drawings and their descriptions, each component is omitted or schematically shown for the sake of convenience and clarity, and the size and function of each component are not intended to restrictively reflect the actual size and state of each component, but may include additional functions or may change some functions.

[0050] The present disclosure relates to an ESS safety management system that ensures stability by running safety measures against unauthorized access to the ESS or an abnormal state of the ESS, for example, by shutting down switches in other domains (e.g., physical switches) except for a network switch, or by fixing the ESS in a specified normal state to safely operate the ESS. Herein, the term "normal state" refers to a state in which the ESS is charged or discharged within a normal range, and is interpreted as including states of the same or similar degree.

[0051] The present disclosure includes an ESS security management system having a monitoring device and a security device, thereby identifying and managing the operating status of the ESS, the monitoring device being configured to observe the status of the ESS, and the security device being configured to prevent or stop the operation of the ESS in another domain separated from the network switch in response to unauthorized access to the ESS or an abnormal status of the ESS.

[0052] According to a preferred embodiment of the present disclosure, the monitoring device may include two or more monitoring levels with different monitoring ranges. Preferably, the monitoring levels may be three or more. As an example, four monitoring levels may be provided.

[0053] According to a preferred embodiment of the present disclosure, the monitoring levels can be connected to each other through a network communication line, and can include: a function of transmitting and receiving signals to each other or a function of issuing commands or a function of executing commands. The operation state can be executed remotely.

[0054] According to a preferred embodiment of the present disclosure, in addition to the network communication line, a physical switch capable of physically disconnecting the power supply may be added so that the switch disconnects the power supply under certain conditions. Here, the physical switch may include a power-off device with the same function. Therefore, the physical switch may be a switch capable of performing an on / off function through an appropriate command from the connected system.

[0055] According to a preferred embodiment of the present disclosure, the monitoring level may include four levels. Figure 1a and Figure 1b ) shows such a specific example. FIG. 1 is a conceptual view of an embodiment to which the ESS safety management system according to the present disclosure is applied, illustratively showing the operating state management range when the monitoring level is composed of level 1 to level 4. Here, the level Lv can be configured so that multiple sub-levels are connected to constitute a higher level. For example, a larger level can constitute a wider system.

[0056] According to a preferred embodiment of the present disclosure, the monitoring levels include: Level 1, which includes a module BMS directly connected to one or more battery cells; Level 2, which includes a battery pack BMS to which one or more module BMSs of Level 1 are connected to each other; Level 3, which includes a system BMS to which one or more battery pack BMSs of Level 2 are connected to each other and includes a power management system (PMS) that performs controls related to environmental control (e.g., air conditioning, heating, and cooling); and Level 4, which includes one or more of Level 3 and includes a top-level energy management system (EMS) that is configured to control one or more of ESSs, power systems, power grids, power plants, and loads in different areas.

[0057] Among them, the levels for performing more professional functions in the present disclosure may be Level 2 and Level 3. In these levels, the safety-related information data collected from the battery may be analyzed and determined to determine whether to perform the opening / closing of a physical switch as a safety device, or to perform an actual switch in response to unauthorized access or an abnormal state.

[0058] When such a monitoring level is constituted by four stages, the multi-stage level can be specifically constituted as follows. FIG1 shows such a situation.

[0059] Level 1: BMS directly connected to the battery cell, which is generally referred to as a slave BMS, node BMS, or module BMS; in the present disclosure, level 1 is the level of the module BMS connected to multiple battery cells, and includes one or more module BMSs. Generally, one module BMS can communicate with, measure, or manage 5 to 50 battery cells, more preferably 10 to 20 battery cells. Level 1 is connected to level 2 to exchange information with each other.

[0060] Level 2: A composite BMS that connects the BMSs of level 1 together, which is generally referred to as a main BMS; in the present disclosure, level 2 is the level of a battery pack BMS connected to one or more module BMSs, and includes one or more battery pack BMSs. Typically, a battery pack BMS can communicate with, measure, or manage 10 to 100 module BMSs. Level 2 to which the switch device is connected can perform communication or control, and is connected to level 3 to be described below to exchange information with each other.

[0061] Level 3: A power management system that performs control of heating and cooling, loads, power grids, etc.; In the present disclosure, level 3 is the level of a system BMS connected to multiple battery pack BMSs, and may include one or more PMSs (power management systems), each of which is connected to one or more system BMSs. Typically, the system BMS may include 1 to 20 battery pack BMSs. One or more strings (battery series connection systems) connected to each battery pack BMS are managed by one battery pack BMS and include one or more closing devices. Level 3 is connected to level 4, which will be described below, to exchange information with each other.

[0062] Level 4: The highest level energy management system (EMS) that controls ESS and power systems in different areas; in the present disclosure, Level 4 is connected to one or more PMSs corresponding to the lower level Level 3, and is electrically connected to heating and cooling, power grids, and load devices.

[0063] According to a preferred embodiment of the present disclosure, Level 1 and Level 2 can regulate the battery, and in the safest state, the current can be minimized and the voltage can be fixed within the battery safety voltage range.

[0064] Herein, expressions such as "plurality", "multiple" and "many" BMSs refer to any number of BMSs, one or more or all of which are connected to each other.

[0065] According to a preferred embodiment of the present disclosure, the module BMS of level 1 is configured so that 5 to 50 battery cells are connected in series with each other, and one or more of the voltage of the battery cell, the temperature of the module, and the cell balance as the battery cell status are monitored to collect and check the status information data of the battery cell. In addition, the module BMS can perform the function of transmitting the information data of the battery cell collected in this way to a higher level level 2.

[0066] According to a preferred embodiment of the present disclosure, level 1 is a node battery management system (n.BMS) (e.g., module BMS), which can measure the voltage, current, temperature and other states of the battery, and compare the voltage, current, temperature and other states of the battery with the recorded values. In addition, level 1 can only execute predetermined commands from the outside, such as whether to perform a predetermined command for a balancing operation, or whether to operate a fan or control an external device through a digital output terminal (e.g., a relay), and can only transmit the measured values ​​and its own operating status to level 2. If an internal error occurs, the emergency mode can be entered after the error information is output, and at this time, the emergency mode can include inter-node switching blocking, balancing blocking, and cooling fan operation. In addition, in an emergency, the balancing circuit can be forcibly started to reduce the charging of the battery.

[0067] According to a preferred embodiment of the present disclosure, at level 1, a boost circuit of FIG. 6 described below may also be constructed to maintain the minimum driving voltage at 2.5 V or higher, 3 V or higher, or the minimum driving voltage value required by the BMS or higher.

[0068] According to a preferred embodiment of the present disclosure, the battery pack BMS of level 2 may include the following functions: receiving information data about battery cells from one or more module BMSs of level 1, performing state determination and transmitting the state determination result data to the higher level level 3, and receiving a command to perform balancing on the battery cells from the system BMS of level 3, and commanding the module BMS of the lower level level 1 to execute the command. Alternatively, the battery pack BMS of level 2 may include the following functions: managing the switch device to perform opening / closing based on a command from a higher level, and performing abnormal state management (including communication or connection abnormality and alarm execution). The switch device may be connected to a power line connected to a power conversion system (PCS) and a battery module or battery pack, and the switch device may be interconnected or disconnected with the power line and the battery in response to a command from the battery pack BMS. For safety reasons, the interconnection or disconnection process may include a pre-charging process. Level 2 may only execute a predetermined command from the outside (a predetermined command whether to perform a balancing operation) and ignore other commands, whereby safe maintenance is feasible. In addition, if there is a meaningful difference between the battery data received from level 1 and its own data (current, voltage, and temperature), an error signal may be transmitted. If an internal error occurs, the emergency mode is executed after the error message is output, and at this time, the emergency mode may include inter-node switching blocking, balancing blocking, and cooling fan operation. In addition, in an emergency, level 1 may be commanded to enforce balancing operations, and SoC adjustment may be performed.

[0069] According to a preferred embodiment of the present disclosure, level 3 is connected to one or more battery pack BMSs to constitute a system BMS, and can check the SoC status including the minimum and maximum voltages of the battery cells and the location of the problem cells through the battery information received from the module BMS or the battery pack BMS, and can determine whether to perform a balancing operation according to the cell balancing state, and can command the battery pack BMS to perform a balancing operation on a specific cell. If it is determined that the battery condition is unsafe or abnormal, an emergency strategy can be executed. In addition, the total voltage, current, and temperature can be accumulated and recorded and transmitted to the PMS of level 3.

[0070] According to a preferred embodiment of the present disclosure, level 4 can be configured such that one or more system BMSs are connected to constitute a PMS, and the PMS can be connected to a PCS to communicate with or control the PCS, wherein each system BMS can include the following functions: analyzing information transmitted from each lower-level battery pack BMS to determine whether to perform balancing of the battery cells, transmitting it to each battery pack BMS of level 2 to execute a balancing command, and commanding a switch connected to the battery pack BMS to open / close.

[0071] According to the present disclosure, the conventional system directly performs switch opening / closing by checking and determining the information of the module BMS in the battery pack BMS to determine the position of the battery pack and the battery cell, thereby performing the switching operation. However, in the present disclosure, in order to solve the problems caused by the burden of execution of the battery pack BMS and the errors caused thereby, the battery pack BMS does not perform the check and determination of the abnormal state, but determines the abnormal state and determines whether to operate the switch at a higher level. The command subject of this switch operation is the PMS, which is located at a higher level (preferably level 3) compared to the battery pack BMS, and manages the system BMS so that the PMS manages the abnormal state determination and the switch operation state, and executes the actual command through the system BMS. In this process, Level 2 is only responsible for executing simple commands through the commands of the system BMS.

[0072] According to a preferred embodiment of the present disclosure, a level 3 system BMS may include the following functions: managing each battery pack BMS closing device constituting one or more strings, receiving detailed battery status reports from the battery pack BMS to perform activation and deactivation of the closing device, and receiving low-level information including abnormal status and alarms of the battery and the connection status between the PCS and the switch.

[0073] According to a preferred embodiment of the present disclosure, a level 3 PMS may include the following functions: receiving information from a PCS and multiple system BMSs, receiving information about abnormal conditions including alarm conditions and having authority to reset alarms, receiving information of each battery pack BMS closed unit belonging to the system BMS to perform activation and deactivation, and transmitting the collected information to the EMS.

[0074] According to a preferred embodiment of the present disclosure, Level 3 can adjust one or more of the heating and cooling facilities and the output, and in the safest state, the temperature can be fixed at the safest temperature for the battery, and the output can be minimized.

[0075] According to a preferred embodiment of the present disclosure, level 3 is a power management system (PMS), which can execute charging and discharging strategies based on data transmitted from level 2 or system BMS and its own measurement data, and can estimate and record the SoC of the battery. In addition, level 3 can determine whether the electrical load and air conditioner are running. Level 3 can adjust the charging and discharging current according to a predetermined algorithm and transmit it to level 4. Level 3 can only execute predetermined commands from the outside and ignore other commands to maintain safety. If there is a difference between the self-measured data and the current, voltage, temperature, etc. transmitted from level 2, an error signal can be transmitted. In addition, if an internal error occurs, an emergency mode is executed after the error message is output, wherein the emergency mode may include one or more of the following: inter-node switching blocking, balancing blocking, cooling fan operation, charging / discharging operation stop, electrical load use stop, emergency safety switch operation. In addition, in an emergency, an operation of forcing the current to return to the grid can be performed to reduce the SoC.

[0076] According to receiving information from the PCS and multiple system BMSs, receiving information about abnormal states including alarm conditions and having authority to reset alarms, receiving information about each battery pack BMS closed unit belonging to the system BMS to perform activation and deactivation, and transmitting the collected information to the EMS. A preferred embodiment of the present disclosure checks the status of the power grid and load connected to the level 4 EMS, and executes the ESS utilization strategy to transmit necessary commands to the lower-level parallel-connected PMSs, wherein each EMS can perform the function of transmitting commands to multiple PMSs. Here, the EMS may include the following functions: receiving information from one or more PMSs, receiving information about abnormal states including alarm conditions and having authority to reset alarms, receiving information about each battery pack BMS closed unit belonging to the system BMS to perform activation and deactivation, and transmitting the collected information to the EMS.

[0077] According to a preferred embodiment of the present disclosure, for example, level 4 can monitor the data transmitted from level 3 and the power situation of the power plant to control the situation, and can transmit information (e.g., expected usage) to the power plant. In addition, the power situation can be determined by transmitting the current charging state, etc., and the expected temperature / usage data considering weather information, etc. can be transmitted to the PMS. If the power plant requires usage restrictions, it can be transmitted to the PMS. If there is a meaningful difference between the self-measured data and the current, voltage, temperature, power consumption, etc. data transmitted from level 3, an emergency signal may be transmitted. In addition, external intrusions can be detected and emergency signals can be transmitted. In particular, a system for monitoring physical intrusions or security threats through communication can be provided. Therefore, if an internal abnormality is detected, the abnormality can be notified to the customer or management company. In addition, an additional supplementary device configured to detect abnormalities in the system due to natural disasters or accidents can also be provided.

[0078] The ESS safety management system according to the present disclosure may preferably have the following features.

[0079] The switchgear is connected to the battery via a power line and includes functions such as a contactor, a pre-charger and a fuse.

[0080] The linear IC can open the (mode resistor) switch upon receiving a command from the battery pack BMS.

[0081] Considering that the calculation capability of the battery pack BMS is low, the system BMS of level 3 commands a balancing operation based on data received from the battery pack BMS. Generally, the balancing operation is requested by the battery pack BMS, which causes calculation difficulties.

[0082] PMS performs temperature control. Typically, temperature-related control is performed by the system BMS or lower levels, and it is difficult to achieve a suitable control effect because it cannot be adequately monitored and cannot be controlled as a whole.

[0083] The present disclosure provides the above-mentioned features to achieve ESS security management and effective response to unauthorized access or abnormal status.

[0084] At the same time, as an embodiment, the present disclosure includes an ESS safety management system having a monitoring device and a safety device, wherein the monitoring device is configured to observe the state of the ESS, and the safety device is configured to prevent or stop the operation of the ESS in another domain separated from the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS, wherein the ESS safety management system includes a dual-domain switch control system that selectively prevents unauthorized access or abnormal operation by configuring, for example, a first battery management system and a second battery management system located upstream of the first battery management system in a two-level form to perform control.

[0085] According to a preferred embodiment of the present disclosure, an ESS safety management system may, for example, include: a first battery management system configured to manage a plurality of battery cells;

[0086] a second battery management system located upstream of the first battery management system, the second battery management system being configured to provide control for the first battery management system;

[0087] a network communication line configured to provide a signal connection between the power grid, the battery, the second battery management system, and the first battery management system; and

[0088] A dual-domain switch control system connected to the network communication line, the dual-domain switch control system being configured to selectively prevent unauthorized access or abnormal operation to at least one of the first battery management system and the second battery management system.

[0089] According to a preferred embodiment of the present disclosure, the first battery management system may include multiple module BMSs, and the first battery management system may include a battery pack BMS including multiple module BMSs, in addition to a system BMS including multiple battery pack BMSs, or in addition to a PMS including multiple system BMSs.

[0090] According to a preferred embodiment of the present disclosure, the dual-domain switch control system may include a network switch operating in response to a command transmitted through a network communication line, the network switch being configured to control at least one of the first battery management system and the second battery management system.

[0091] In addition, the dual-domain switch control system may include a physical switch configured to detect abnormal operations associated with potential unauthorized access and physically block or prevent power from being supplied to at least one of the first battery management system and the second battery management system without transmitting a command over a network communication line.

[0092] According to a preferred embodiment of the present disclosure, enabling of the physical switch may prevent enabling of the network switch, disabling of the physical switch may allow re-enabling of the network switch, or enabling of the physical switch may prevent enabling and re-enabling of the network switch.

[0093] According to a preferred embodiment of the present disclosure, at least one of the first battery management system and the second battery management system may be designed to be connected to and cooperate with a PCS configured to compare the measured total battery voltage to determine potential unauthorized access or abnormality.

[0094] According to a preferred embodiment of the present disclosure, at least one of the first battery management system and the second battery management system can be designed to further cooperate with the PCS to compare at least one of the measured ambient temperature, humidity, sudden increase in environmental factors, current power consumption within a certain period of time, and total power consumption in order to determine potential unauthorized access or abnormal operation.

[0095] According to a preferred embodiment of the present disclosure, a first battery management system, a second battery management system, a network communication line, and a dual-domain switch control system may be implemented in an ESS capable of supporting the use of vanadium-based batteries.

[0096] Conventional lithium-ion batteries (LIBs) have a voltage range of 3V to 5V, while vanadium-based batteries have a lower voltage range of 1.2V to 1.5V, more preferably 1.25V to 1.45V, and in particular, since there is an upper voltage limit but no lower voltage limit, a relatively wide voltage range (window) can be used. Therefore, vanadium-based batteries have the advantage of being able to operate at 0V or in a fully discharged state.

[0097] In addition, vanadium-based batteries have a reversible charge / discharge reaction, and thus there is no difference between the initial capacity and the later capacity. On the other hand, the load on the BMS to achieve cell balancing is large. That is, the batteries are initially connected in parallel to each other to form a module, and then the modules are connected in series to each other, and thus the system current controlled by the BMS is large, and thus the load required by the BMS is large.

[0098] Therefore, vanadium-based batteries are very suitable for applying the above-mentioned ESS safety management system.

[0099] According to a preferred embodiment of the present disclosure, in at least one of the first battery management system and the second battery management system, an open circuit voltage (OCV) may decrease as temperature increases, and the OCV may increase as temperature decreases.

[0100] According to a preferred embodiment of the present disclosure, the step of performing cell balancing by the controller can actively or passively balance the state of charge (SoC) value, and perform thermal management on the vanadium-based battery to increase the temperature of the vanadium-based battery by at least 5°C in order to observe the improvement of the battery.

[0101] According to a preferred embodiment of the present disclosure, thermal management may be performed by a controller in the vanadium-based battery cell to maintain an optimal operating efficiency temperature range of 15°C to 40°C, and in any case not exceeding 50°C.

[0102] According to a preferred embodiment of the present disclosure, a safety device applicable to the ESS safety management system as described above may set the safest state as a default state, and may operate in the default state when power is off.

[0103] Therefore, if the switch is operated in response to unauthorized access to the ESS or an abnormal state of the ESS, the ESS safety management system of the present disclosure cannot be manipulated using the network.

[0104] Therefore, it is necessary to enter the ESS space and raise the switch to operate the ESS again.

[0105] Furthermore, the dual domain may be basically composed of a network switch and a physical switch, and stability may be further increased by installing another switch that cannot be recovered via the network.

[0106] A controller recognizing an emergency situation can physically disconnect physical domains from each other by immediately lowering switches under its control, and can use nominally open switches to achieve physical blocking in the event of a power failure.

[0107] According to a preferred embodiment of the present disclosure, the system may include a detection system for detecting a measurement error between the PCS and the BMS, and detecting the measurement error between the PCS and the BMS includes:

[0108] Steps to measure the voltage of each battery from the BMS and measure and record the total voltage in the PCS;

[0109] The step of estimating a total voltage of the system by accumulating the voltage of each battery measured;

[0110] The step of comparing the estimated total voltage of the system with the measured total voltage; and

[0111] The step of transmitting an error signal if the difference between the two voltages of each battery reaches a certain level or above.

[0112] In this way, measurement errors of the PCS and BMS can be preferably detected.

[0113] The present disclosure includes an error detection system for ESS safety management including a detection system.

[0114] According to a preferred embodiment of the present disclosure, one or more of the steps of measuring and recording the total battery voltage from the PCS and comparing the total battery voltages measured from the BMS and the PCS with each other may be further included.

[0115] According to a preferred embodiment of the present disclosure, the safety devices applied in the ESS safety management system may generally be network switches and physical switches presented as dual domains, but for example, in addition to the switch devices, may also include one or more of operating fixtures and power-off devices.

[0116] Although the disclosed system has been described with emphasis on total battery voltage, the system is preferably applicable to other measurements.

[0117] As an example, according to a preferred embodiment of the present disclosure, the system can be implemented as a variety of systems, such as a system for transmitting an error signal when the data (e.g., temperature / humidity) measured in the physical domain 1 and the data measured in the physical domain 2 exceed a certain level, a system for measuring the amount of current between the physical domains and detecting it as leakage and transmitting an error signal if the difference in the amount of current appears rapidly within a certain period of time, and a system for accumulating the amount of electric power within a certain period of time and correcting it if the accumulated amount is different from the value recorded by the actual integrator. Therefore, the system can be applied as one or more of these applicable systems.

[0118] In addition, the system can be provided with a device configured to transmit an error signal, for example, when a fastening structure of a bus bar is loose and current supply is abnormal or contact resistance rises rapidly, and capable of measuring the location where the error occurs, for example, as a point where its differential value changes significantly by performing integration in sequence when a battery array is present.

[0119] According to the preferred embodiment of the present disclosure, it has been found that: Figure 2 In the case of an open circuit due to a loose fastening structure of the bus bar as shown in , the voltage input to the sensing circuit may become unknown. Therefore, due to this problem, it is recognized that if the voltage is accumulated (integrated) one by one, it is determined whether the voltage is normal or not depending on the constituent circuit. That is, in a conventional BMS, when an open circuit occurs, the voltage may float up and down, may be 0 (zero) V, or may be expressed as the maximum voltage that the IC can recognize. Therefore, it has been recognized that in this case, the accumulation of voltage may result in, for example, the battery voltage being out of range, the battery voltage fluctuating significantly; or the battery voltage being recognized as 0V.

[0120] Therefore, in a preferred embodiment of the present disclosure, taking these issues into consideration, open circuit determination is performed through logic, whereby, for example, the bus bar open circuit detection system can be designed such that when an open circuit occurs, the upper unit voltage is applied to the sensing IC to generate a high voltage and the resistance is several MΩ so as not to affect functions other than open circuit detection.

[0121] For example, this configuration can be implemented as Figure 3 The configuration including the boost circuit is shown. Here, the open circuit determination condition is that the upper cell voltage of the cell where the open circuit occurs is applied to the installed resistor, and the voltage is divided according to the resistance ratio and applied to the lower cell input line. For example, the system may include a configuration so that when resistors with the same value are installed, the lower cell operates as an open circuit at 0.1V, when the upper cell is 0.6V, the upper cell is identified as 0.7V, and when the lower cell is 0.35V (which is half the voltage of the upper cell), the lower cell is identified as an open circuit.

[0122] Furthermore, the system of the present disclosure may be applied to similar systems of small, medium or large size by modifying, adding, excluding or integrating some of the components.

[0123] According to a preferred embodiment of the present disclosure, the safety management system as described above may further include a device configured to analyze information about energy use or loss by determining a history of use or consumption of power transmitted from the ESS. The power consumption information analysis device may solve problems caused by abnormal power transmitted from the ESS and a difference between the actually used power consumed by a user using the transmitted power and the transmitted power.

[0124] According to a preferred embodiment of the present disclosure, with the rapid growth of the electric vehicle charging market and the synchronous development of technical understanding of electric vehicle users, the power consumption information analysis device can solve the problem by analyzing, detecting and warning of anomalies between transmitted power and used power.

[0125] In particular, traditionally, due to the low cost of charging electric vehicles, users tended to pay on demand without giving much thought to the charging method of the charger, but in recent years, as the use of electric vehicle charging stations with ESS has gradually increased and charging fees have risen, information about charging systems has been shared, and users have begun to realize that the amount of electricity provided by the charger may be different from the amount of electricity actually stored in the vehicle battery, which may be a suitable means to solve this problem.

[0126] Generally speaking, the power delivered from the charger of the ESS can be used for various purposes, including as power to drive the vehicle or as actual power stored in the battery of the electric vehicle, as power consumed by battery conditioning (including one or more of heating, cooling and balancing), loss between the charger and the electric vehicle, as auxiliary power when using equipment such as vehicle to load (V2L), and leakage or electrical conduction. Due to one or more of these factors, problems may arise when the user of the charger that charges the battery of the electric vehicle is charged for the used power or loss power other than the actual power used to charge the battery of the electric vehicle.

[0127] According to a preferred embodiment of the present disclosure, the power consumption information analysis device that can be further applied can be used as a system that can manage to distinguish or analyze one or more of, for example, driving power, heater power, BMS balancing power, V2L power, external leakage loss power (for example, leakage power and electrical conduction), and through these analysis results only charge the user for the pure driving power actually used for charging.

[0128] Therefore, according to a preferred embodiment of the present disclosure, the present disclosure may include a charging status information analysis device, which is configured to distinguish or analyze one or more of driving power, heater power, BMS balancing power, V2L power and external leakage power, and perform charging stop and charging status control based on these analysis results.

[0129] According to a preferred embodiment of the present disclosure, the power consumption information analyzing device can check the power consumption information and utilize or accumulate the data by installing, for example, power consumption measuring equipment, controllers, monitoring devices, sensors, etc. at necessary locations of the charger of the ESS.

[0130] According to a preferred embodiment of the present disclosure, in the event of an unexpected difference between measurement values ​​obtained from an electric power consumption measuring device or the like, the electric power consumption information analyzing apparatus can perform measures such as stopping charging or preventing electric power leakage.

[0131] In addition, according to a preferred embodiment of the present disclosure, the safety management system and power consumption information analysis device of the present disclosure can provide information such as stopping charging or continuing charging by comparing the power received by the electric vehicle with the power transmitted from the charger when the difference is equal to or greater than a set threshold within a set time period. If the difference is small, a device configured to prevent the power from being used for other purposes can also be applied.

[0132] According to a preferred embodiment of the present disclosure, in certain cases, a device configured to compare an estimated charging time to complete charging and an actual charging time based on an input value intended for charging by a user may also be applied, and information obtained from the comparison data may be used.

[0133] According to the preferred embodiments of the present disclosure, leakage detection and reasonable charging can be performed based on the comparison data.

[0134] Furthermore, according to another preferred embodiment of the present disclosure, the power (if any) of the battery heater for the ESS may be managed, for example, by using the correlation between the current air temperature and the battery temperature and issuing a warning if the usage exceeds a certain level.

[0135] Furthermore, cell balancing of the ESS may be managed, for example, by setting an expected maximum balancing power based on the maximum balancing current and issuing a warning if exceeded.

[0136] In addition, management may include issuing a warning when the difference between the sum of the amount of power used and the amount output by the charger is equal to or greater than a predetermined level. Such management may achieve safety management by checking leakage, electrical conduction, etc. in advance.

[0137] According to a preferred embodiment of the present disclosure, when various forms of warnings occur as described above, for example, after charging is stopped, information about the abnormal situation can be input to the central controller for follow-up. In another example, in order to minimize the occurrence of abnormalities, for example, a system configured to install two or more measuring devices and compare multiple information obtained therefrom can be established.

[0138] In this way, the ESS safety management system according to the present disclosure can prevent problems such as fire or explosion from occurring when the ESS deviates from operating conditions.

[0139] Furthermore, even if the ambient temperature, battery temperature, battery voltage, charging and discharging conditions, etc. are remotely managed as operating conditions of the ESS, accidents can be prevented in advance by responding to various security vulnerabilities (e.g., problems with incorrect input of operating conditions due to external factors (e.g., network hacker attacks), whereby the system can be used as a safety management system for stable operation of the ESS.

[0140] In addition, if the power consumption information analysis device is further applied to the safety management system of the present invention, power consumption, loss, leakage, electrical conduction, etc. other than the actual power consumption can be detected, so as to achieve reasonable management by adjusting the billing content or stopping charging.

Claims

1. An ESS safety management system, comprising: a monitoring device configured to observe a status of the ESS; and A security device is configured to prevent or stop the operation of the ESS in another domain separate from the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS.

2. The ESS safety management system according to claim 1, wherein: The monitoring device includes two or more monitoring levels having different monitoring ranges, the monitoring levels are connected to each other via a network communication line, and the monitoring levels have a function of transmitting and receiving signals or issuing or executing commands.

3. The ESS safety management system according to claim 2, wherein: The monitoring levels include: Level 1, which includes a module BMS directly connected to a plurality of battery cells; Level 2, which includes a battery pack BMS to which one or more module BMSs of Level 1 are connected to each other; Level 3, which includes a system BMS to which one or more battery pack BMSs of Level 2 are connected to each other, and includes a power management system (PMS) configured to control one or more of heating and cooling, loads, and a power grid; and Level 4, which includes one or more of Level 3 and includes an energy management system (EMS) configured to control one or more of ESSs and power systems in different areas.

4. The ESS safety management system according to claim 3, wherein: Level 1, Level 2 or Level 3 conditions the battery and in the safest state the current is minimized and the voltage is fixed within the battery safety voltage range.

5. The ESS safety management system according to claim 3, wherein: The module BMS of level 1 is configured so that the plurality of battery cells are connected in series with each other, and performs the following functions: monitoring the battery cell status of one or more of the voltage, current, and temperature of the battery cells, performing cell balancing, collecting and checking status information data of the battery cells, and transmitting the collected battery cell information data to a higher level level 2.

6. The ESS safety management system according to claim 3, wherein: The battery pack BMS at level 2 includes the following functions: receiving information data about the battery cells from multiple module BMSs at level 1, performing status determination and transmitting the status determination result data to the higher-level level 3, and receiving a command to perform balancing on the battery cells from the system BMS at level 3 and commanding the module BMS at the lower-level level 1 to execute the command.

7. The ESS safety management system according to claim 3, wherein: Level 3 includes multiple system BMSs to constitute a PMS, the PMS includes a PCS, and each system BMS includes the following functions: analyzing information transmitted from each lower-level battery pack BMS to determine whether to perform balancing of the battery cells, transmitting it to each battery pack BMS of level 2 to execute balancing commands, and commanding switches connected to the battery pack BMS to open / close.

8. The ESS safety management system according to claim 3, wherein: The level 3 PMS includes the following functions: receiving information from the PCS and multiple system BMSs, receiving information about abnormal conditions including alarm conditions and having authority to reset alarms, receiving information of each closed unit to perform activation and deactivation for maintaining the normal state of the battery system, such as for balancing, and transmitting the collected information to the EMS.

9. The ESS safety management system according to claim 3, wherein: Level 4 includes an EMS including a plurality of PMSs, and includes functions of checking the status of cooling and heating, loads, and a grid connected to the EMS, executing ESS utilization strategies, and transmitting necessary commands to lower-level PMSs connected in parallel, through which each EMS transmits commands to the PCS.

10. An ESS security management system having a monitoring device and a security device, wherein the monitoring device is configured to observe the status of the ESS, and the security device is configured to block or stop the operation of the ESS in another domain separated from a network switch in response to unauthorized access to the ESS, the ESS security management system comprising: A first battery management system configured to manage a plurality of battery cells; a second battery management system located upstream of the first battery management system, the second battery management system being configured to provide control for the first battery management system; A network communication line configured to provide a signal connection between a power grid, a battery, the second battery management system and the first battery management system; as well as A dual-domain switch control system connected to the network communication line, the dual-domain switch control system being configured to selectively prevent unauthorized access to at least one of the first battery management system and the second battery management system or abnormal operation of at least one of the first battery management system and the second battery management system.

11. The ESS safety management system according to claim 10, wherein: The first battery management system includes one or more module BMSs, and the first battery management system includes one or more battery pack BMSs connected to the one or more module BMSs, one or more system BMSs connected to the one or more battery pack BMSs, or a PMS connected to the one or more system BMSs.

12. The ESS safety management system according to claim 10, wherein: The dual-domain switch control system comprises: a network switch that operates in response to a command transmitted through the network communication line, the network switch being configured to control at least one of the first battery management system and the second battery management system; and A physical switch configured to detect abnormal operation associated with potential unauthorized access and physically block or prevent power from being supplied to at least one of the first battery management system and the second battery management system without transmitting a command over the network communication line.

13. The ESS safety management system according to claim 10, wherein: Activation of the physical switch prevents activation of the network switch, deactivation of the physical switch allows reactivation of the network switch, or activation of the physical switch prevents activation and reactivation of the network switch.

14. The ESS safety management system according to claim 10, wherein: At least one of the first battery management system and the second battery management system is designed to be connected to and cooperate with a PCS, and the PCS is configured to compare the measured total battery voltage to determine potential unauthorized access or anomalies.

15. The ESS safety management system according to claim 10, wherein: At least one of the first battery management system and the second battery management system is designed to further cooperate with the PCS to compare at least one of the measured ambient temperature, humidity, sudden increase in environmental factors, current power usage within a certain time period, and total power usage to determine potential unauthorized access or abnormal operation.

16. The ESS safety management system according to claim 10, wherein: The first battery management system, the second battery management system, the network communication line, and the dual-domain switch control system are implemented in an ESS capable of supporting the use of vanadium-based batteries.

17. The ESS safety management system according to claim 10, wherein: In at least one of the first battery management system and the second battery management system, an open circuit voltage (OCV) decreases as temperature increases, and the OCV increases as temperature decreases.

18. The ESS safety management system according to claim 10, wherein: The battery balancing performed by the controller includes actively or passively balancing the state of charge (SoC) value and performing thermal management on the vanadium-based battery cells to increase the temperature of the vanadium-based battery by at least 5° C. in order to observe the improvement of the battery.

19. The ESS safety management system according to claim 10, wherein: Thermal management is performed by a controller in the vanadium-based battery cells to maintain an optimal operating efficiency temperature range of 15°C to 40°C, and in any case not exceeding 50°C.

20. An error detection system for ESS safety management in an ESS safety management system, the ESS safety management system having a monitoring device and a safety device, the monitoring device being configured to observe the state of the ESS, the safety device being configured to block or stop the operation of the ESS in another domain separated from a network switch in response to unauthorized access to the ESS or an abnormal state of the ESS, wherein: The error detection system detects the measurement errors of the PCS and the BMS, including: measuring and recording a voltage of each battery from a module BMS and measuring and recording a total voltage in the PCS, the module BMS being configured to manage battery cells constituting the ESS; estimating a total voltage of the system by accumulating the measured voltage of each battery; comparing the estimated total voltage of the system to the measured total voltage; and If the difference between the two battery voltages of the comparison target reaches a certain level or more, an error signal is transmitted. 21 . The error detection system of claim 20 , further comprising one or more of measuring and recording a total battery voltage from a PCS and comparing the total battery voltages measured from the BMS and the PCS with each other.

22. The error detection system of claim 20, wherein: The system is applied as one or more of the following systems: a system for transmitting an error signal when status data of a battery including one or more of temperature and humidity measured in physical domain 1 and data measured in physical domain 2 exceed a certain level; a system for measuring the amount of current between two physical domains and if a difference in the amount of current occurs rapidly within a certain period of time, detecting it as leakage and transmitting an error signal; and a system for accumulating the amount of electric power within a certain period of time and correcting it if the accumulated amount is different from the value recorded by an actual integrator.

23. The error detection system of claim 20, wherein: The system includes a device configured to transmit an error signal in a case where a fastening structure of the bus bar is loosened and current supply is abnormal or contact resistance rises rapidly.

24. The error detection system of claim 20, wherein: When there is a battery array, the location where the error occurs is measured as the point where its differential value changes significantly by integrating sequentially.

25. The ESS safety management system according to claim 1 or 10, comprising a system designed as follows: when an open circuit occurs, the upper cell voltage or the output voltage of the boost circuit is divided according to a resistance ratio and applied to a sensing IC, and the resistance is several MΩ so as not to affect functions other than the open circuit detection of the open circuit detection system as a bus bar.

26. The ESS safety management system according to claim 25, comprising a configuration including the boost circuit.

27. The ESS safety management system according to claim 25, wherein: The open determination condition includes that an upper cell voltage of a cell where the open occurs is applied to a mounted resistor, and a voltage is distributed according to the resistance ratio and applied to a lower cell input line.

28. The ESS safety management system according to claim 25, comprising a configuration such that when resistors having the same value are installed, the lower unit operates as an open circuit at 0.1V, when the upper unit is 0.6V, the upper unit is recognized as 0.7V, and when the lower unit is 0.35V which is half the voltage of the upper unit, the lower unit is recognized as an open circuit.

29. The ESS safety management system according to claim 1 or 10, comprising a charging state information analysis device, which is configured to distinguish or analyze one or more of driving power, heater power, BMS balancing power, V2L power and external leakage power, and perform charging stop and charging state control based on the analysis result.

Images