Vehicle fuel cell sensor rationality check

Abstract

The present application relates to a vehicle fuel cell sensor rationality check, in particular a vehicle fuel cell system assembly comprising:-a first fuel cell system comprising a first sensor and a first control unit adapted to control the first fuel cell system based on a value of the first sensor; -a second fuel cell system comprising a second sensor and a second control unit adapted to control the second fuel cell system based on a value of the second sensor; and a common supply of coolant, air or fuel for the first fuel cell system and the second fuel cell system, in which the vehicle fuel cell system assembly is configured to perform a sensor rationality check of the first sensor and the second sensor, and using the value of the sensor that passes the rationality check instead of the value of the sensor that does not pass the rationality check.

Description

Technical Field

[0001] The present disclosure generally relates to vehicle fuel cells. In particular aspects, the present disclosure relates to a vehicle fuel cell system configured to perform a sensor rationality check, and a method of operating a vehicle fuel cell system. The present disclosure may be applicable to heavy vehicles such as trucks, buses, and construction equipment, among other vehicle types. Although the present disclosure may be described with respect to a particular vehicle, the present disclosure is not limited to any particular vehicle. Background Art

[0002] Vehicle fuel cells typically include a plurality of fuel cell sensors for controlling and monitoring the operation of the fuel cell. Typically, a fuel cell contains a plurality of fuel cell sensors, some of which are redundant and provided for performing fuel cell sensor rationality checks. Summary of the invention

[0003] According to a first aspect of the present disclosure, there is provided a vehicle fuel cell system assembly, comprising: a first fuel cell system, comprising a first sensor and a first control unit, the first control unit being adapted to control the first fuel cell system based on a value of the first sensor; a second fuel cell system, comprising a second sensor and a second control unit, the second control unit being adapted to control the second fuel cell system based on a value of the second sensor; and a common supply source of coolant, air or fuel for the first fuel cell system and the second fuel cell system. The vehicle fuel cell system assembly is configured to perform a sensor rationality check of the first sensor and the second sensor, and to use the value of the sensor that passes the rationality check instead of the value of the sensor that fails the rationality check. Thus, in the event that the sensor fails the rationality check, operation of the first fuel cell system and the second fuel cell system is permitted.

[0004] A first aspect of the present disclosure may seek to address the problem of improving the availability or uptime of vehicle fuel cell system components. In some prior art solutions, sensor rationality checks may be based on the provision of redundant sensors in the fuel cell system. In such a solution, more fuel cell sensors may be provided than are actually required for a particular fuel cell system, so that sensor rationality checks may be performed within the same fuel cell system. The first aspect of the present disclosure may ensure high availability or uptime of vehicle fuel cell system components without the need for additional and redundant fuel cell sensors, so that the advantages relate to a less complex and more cost-effective vehicle fuel cell system. In addition, providing two or more fuel cell systems may be beneficial to the availability or uptime of vehicle fuel cell system components.

[0005] Optionally, the vehicle fuel cell system component is configured to perform a sensor rationality check of the first sensor and the second sensor based on values ​​from the first sensor and the second sensor.

[0006] Optionally, the first fuel cell system and the second fuel cell system comprise or are connected to a common cooling circuit and thus comprise a common supply of coolant.

[0007] Optionally, the first fuel cell system and the second fuel cell system include or are connected to a common media loop, such as a common coolant, air or fuel media loop. The common media loop may be included in a vehicle in which the vehicle fuel cell system assembly is arranged.

[0008] Optionally, the first sensor and the second sensor are temperature sensors and / or pressure sensors. The first sensor and the second sensor may be configured to measure the temperature and / or pressure of coolant, air or fuel.

[0009] Optionally, the vehicle fuel cell system component includes a vehicle sensor associated with the common supply source and a vehicle control unit in communication with the first control unit and the second control unit, wherein the vehicle control unit is configured to perform a sensor rationality check of the first sensor, the second sensor and the vehicle sensor based on values ​​from the first sensor, the second sensor and the vehicle sensor. Advantages include effective rationality checks on the vehicle sensors and the first and second sensors included in the corresponding fuel cell system. In addition, the sensor rationality check can be particularly reliable because the vehicle control unit can be configured to take into account operating parameters of the vehicle, the first fuel cell system and the second fuel cell system when performing the rationality check. Since there is no need to arrange direct communication between the first control unit and the second control unit, this embodiment can be relatively cost-effective. In addition, in response to a sensor failing the rationality check, the vehicle control unit is generally able to perform appropriate measures.

[0010] Optionally, the vehicle sensor is a coolant sensor, an air sensor or a fuel sensor. The vehicle sensor is generally configured to measure temperature and / or pressure.

[0011] Optionally, the first control unit and the second control unit communicate with each other, and the first control unit is configured to perform a sensor rationality check of the first sensor based on values ​​from the first sensor and the second control unit, and the second control unit is configured to perform a sensor rationality check of the second sensor based on values ​​from the second sensor and the first control unit. Optionally, the first fuel cell system includes a third sensor, and the second fuel cell system includes a fourth sensor, the first control unit and the second control unit communicate with each other, and the first control unit is configured to perform a sensor rationality check of the first sensor based on values ​​from the first sensor, the third sensor and the second control unit, and the second control unit is configured to perform a sensor rationality check of the second sensor based on values ​​from the second sensor, the fourth sensor and the first control unit. In the latter example, the first sensor and the third sensor can be arranged in the same media loop. The second sensor and the fourth sensor can be arranged in the same media loop. Advantages include that the corresponding control unit of the fuel cell system can perform the sensor rationality check. For example, the sensor rationality check does not need to involve any vehicle control unit or similar device.

[0012] Optionally, the vehicle fuel cell system assembly comprises a third fuel cell system, the third fuel cell system comprising a third sensor and a third control unit, wherein the vehicle fuel cell system assembly is configured to perform a sensor rationality check of the first sensor, the second sensor and the third sensor based on values ​​from the first sensor, the second sensor and the third sensor. Advantageously, increasing the number of fuel cell systems can ensure reliable sensor rationality checks. Furthermore, the availability of the vehicle fuel cell system assembly can be further improved, since operation can be allowed even if a plurality of sensors fail the rationality check.

[0013] Optionally, the vehicle fuel cell system assembly may include a vehicle control unit in communication with the first control unit of the first fuel cell system and the second control unit of the second fuel cell system. Advantages include that the vehicle control unit may assist in performing rationality checks, and the vehicle control unit is generally capable of performing appropriate actions in response to a sensor failing a rationality check.

[0014] Optionally, the vehicle control unit is configured to perform a sensor rationality check of the first sensor and the second sensor based on values ​​from the first sensor and the second sensor.

[0015] Optionally, the vehicle fuel cell system assembly includes a vehicle sensor associated with the common supply source.

[0016] Optionally, the vehicle fuel cell system components are connected to vehicle sensors associated with the common supply source.

[0017] Optionally, the vehicle control unit is configured to perform a sensor rationality check of the first sensor, the second sensor and the vehicle sensors based on values ​​from the first sensor, the second sensor and the vehicle sensors.

[0018] Optionally, the vehicle sensor is a temperature sensor and / or a pressure sensor.

[0019] Optionally, the first control unit and the second control unit communicate with each other, the first fuel cell system includes a third sensor, the second fuel cell system includes a fourth sensor, and the first control unit is configured to perform a sensor rationality check of the first sensor based on values ​​from the first sensor, the third sensor and the second control unit, and the second control unit is configured to perform a sensor rationality check of the second sensor based on values ​​from the second sensor, the fourth sensor and the first control unit.

[0020] Optionally, the first control unit is configured to perform a sensor rationality check of the first sensor also based on operating parameters (such as fuel cell power output or health status information of the first fuel cell system and the second fuel cell system), and the second control unit is configured to perform a sensor rationality check of the second sensor also based on operating parameters (such as fuel cell power output) or health status information of the first fuel cell system and the second fuel cell system.

[0021] Optionally, the first fuel cell system and the second fuel cell system are substantially identical. Optionally, the first fuel cell system and the second fuel cell system are different from each other, and the vehicle fuel cell system assembly is adapted to take the difference into account when performing the sensor rationality check.

[0022] According to a second aspect of the present disclosure, a vehicle including the vehicle fuel cell system assembly is provided.

[0023] Optionally, the vehicle is a heavy vehicle, such as a truck or bus. The fuel cell system assembly may be particularly useful for heavy vehicles to meet the energy needs of the vehicle, as pure battery electric heavy vehicles tend to require very large and heavy high-voltage batteries. Typically, a heavy vehicle according to the present invention includes a fuel cell system assembly and a high-voltage battery.

[0024] According to a third aspect of the present invention, a method for operating a vehicle fuel cell system component is provided, the method comprising: first, controlling a first fuel cell system through a first control unit and based on the value of a first fuel cell sensor; second, controlling a second fuel cell system through a second control unit and based on the value of a second fuel cell sensor; supplying coolant, air or fuel to the first fuel cell system and the second fuel cell system through a common supply source; performing a rationality check on the first sensor and the second sensor; and operating the first fuel cell system and the second fuel cell system using the values ​​of the sensors that passed the rationality check rather than the values ​​of the sensors that failed the rationality check.

[0025] Optionally, the plausibility check of the method is based on values ​​from the first fuel cell sensor and the second fuel cell sensor.

[0026] Optionally, the plausibility check of the method is based on values ​​from the first fuel cell sensor, the second fuel cell sensor and a vehicle sensor.

[0027] Optionally, the rationality check of the method is based on operating parameters (such as fuel cell power output) or health status information of the first fuel cell system and the second fuel cell system.

[0028] Optionally, the method includes: if the first fuel cell sensor fails the rationality check, using the value of the vehicle sensor to operate the first fuel cell system and the second fuel cell system; if the second fuel cell sensor fails the rationality check, using the value of the vehicle sensor to operate the first fuel cell system and the second fuel cell system; and if the vehicle sensor fails the rationality check, using the value of the first fuel cell sensor and / or the second fuel cell sensor to operate the first fuel cell system and the second fuel cell system.

[0029] Optionally, the plausibility check of the method comprises a control unit notifying another control unit which sensor has failed the plausibility check.

[0030] Optionally, if one or more sensors fail the rationality check, the method includes reducing fuel cell power output of the vehicle fuel cell system assembly.

[0031] Optionally, the rationality check of the method comprises generating a warning message to an operator of the vehicle fuel cell system component if a sensor fails the rationality check.

[0032] Optionally, the method is computer-implemented.

[0033] According to a fourth aspect of the present disclosure, there is provided a computer program product comprising program code for performing a computer implemented method of operating a vehicle fuel cell system component when executed by a processor device of a controller.

[0034] According to a fifth aspect of the present disclosure, there is provided a non-transitory computer-readable storage medium comprising instructions which, when executed by a processor device of a controller, cause a processing circuit to perform a computer-implemented method of operating a vehicle fuel cell system component.

[0035] The advantages and other possible features of the second to fifth aspects correspond to the advantages and other possible features of the first aspect and will not be repeated in full here.

[0036] Those skilled in the art will appreciate that the disclosed aspects, examples (including any preferred examples), and / or the accompanying claims may be appropriately combined with each other. Additional features and advantages are disclosed in the following description, claims, and drawings, and in part will be apparent to those skilled in the art or recognized by practicing the disclosure as described herein. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Examples are described in more detail below with reference to the accompanying drawings.

[0038] Figure 1 is an exemplary schematic diagram of vehicle fuel cell system components according to an example.

[0039] Figure 2 is an exemplary schematic diagram of vehicle fuel cell system components according to another example.

[0040] Figure 3 It shows the operation according to Figure 1 or Figure 2 A block diagram of a method of assembling a vehicle fuel cell system.

[0041] Figure 4 is a schematic diagram of an exemplary computer system for implementing the examples disclosed herein. DETAILED DESCRIPTION

[0042] The detailed description set forth below provides information and examples of the disclosed technology in sufficient detail to enable those skilled in the art to practice the disclosure.

[0043] Figure 1 The vehicle fuel cell system assembly 1 is shown and also a vehicle 400 is indicated, in which the vehicle fuel cell system assembly 1 may be arranged, for example to partially or fully propel the vehicle 400 . Figure 2An alternative vehicle fuel cell system assembly 1 is shown. The vehicle fuel cell system assembly may alternatively be referred to as a vehicle fuel cell system.

[0044] Figure 1 and Figure 2 The illustrated vehicle fuel cell system assembly 1 comprises a first fuel cell system 100 comprising a first sensor 110 and a first control unit 120 adapted to control the first fuel cell system 100 based on a value of the first sensor 110. The first sensor 110 may be referred to as a first fuel cell sensor 110, and the first control unit 120 may be referred to as a first fuel cell control unit 120.

[0045] The vehicle fuel cell system assembly 1 further includes a second fuel cell system 200 including a second sensor 210 and a second control unit 220 adapted to control the second fuel cell system 200 based on a value of the second sensor 210. The second sensor 210 may be referred to as a second fuel cell sensor 210, and the second control unit 220 may be referred to as a second fuel cell control unit 220.

[0046] Furthermore, in both examples, the vehicle fuel cell system assembly 1 includes a common supply source 50 of coolant, air (50') or fuel (not shown) for the first fuel cell system 100 and the second fuel cell system 200. In the context of fuel cells, this may be referred to as the first fuel cell system 100 and the second fuel cell system 200 including a common media loop (coolant or air or fuel), or the first fuel cell system 100 and the second fuel cell system 200 being connected to a common media loop. Specifically, the coolant media loop may form part of the vehicle 400 and is therefore not included in the vehicle fuel cell system assembly 1.

[0047] refer to Figure 1 In the example of FIG. 1 , the first control unit 120 and the second control unit 220 may not be configured to communicate directly with each other. Figure 1 In the example of FIG. 1 , the first control unit 120 and the second control unit 220 are not directly connected to each other.

[0048] exist Figure 1 and Figure 2 In the figure, the dashed lines represent communication, such as wired or wireless communication. Figure 1 The vehicle control unit 20 of the example can be directly connected to the first control unit 120 and directly connected to the second control unit 220. As shown in the figure, Figure 1 In the example of , the first control unit 120 and the second control unit 220 can communicate with each other through the vehicle control unit 20. Figure 1 and Figure 2 In FIG. 1 , the solid lines represent coolant flow lines or cooling circuits. The dashed lines represent cathode supply lines and cathode exhaust lines, or more generally, air flow lines.

[0049] The vehicle fuel cell system component 1 of the present embodiment is configured to perform a sensor rationality check (hereinafter also referred to as a rationality check) of the first sensor 110 and to perform a rationality check of the second sensor 210. In addition, the vehicle fuel cell system component 1 is configured to use the values ​​of the sensors 110, 210 that pass the rationality check instead of the values ​​of the sensors 110, 210 that fail the rationality check. For example, if the second sensor 210 fails the rationality check, the vehicle fuel cell system component 1 may use the value of the first sensor 110 instead of the value of the second sensor 210.

[0050] In this way, the vehicle fuel cell system assembly 1 is able or permitted to operate the first fuel cell system 100 and the second fuel cell system 200 even if the sensors 110 , 210 of said fuel cell systems 100 , 200 do not pass (ie, fail) the plausibility check.

[0051] The vehicle fuel cell system assembly 1 may be configured to perform a sensor rationality check of the first sensor 110 and the second sensor 210 based on values ​​from the first sensor 110 and the second sensor 210 .

[0052] In this example, the first fuel cell system 100 and the second fuel cell system 200 include or are connected to a common cooling circuit 60, thereby including a common supply of coolant 50. In other words, the vehicle fuel cell system assembly 1 can use a single cooling circuit 60 to provide cooling for both fuel cell systems 100, 200.

[0053] like Figure 1 and Figure 2 As shown, the cooling circuit 60 may include a single heat exchanger or radiator 62 cooled by a fan. The cooling circuit 60 may also include a pump 64 and an optional three-way valve 66, which together with a bypass coolant line allows the radiator 62 to be partially or completely bypassed, for example, during the preheating of the vehicle fuel cell system assembly 1. As shown, the cooling circuit 60 may also circulate the coolant through a heat exchanger 160, 260 in each of the first fuel cell system 100 and the second fuel cell system 200. The heat exchangers 160, 260 may preferably be connected in parallel so that the coolant flows entering the heat exchangers 160, 260 have substantially the same temperature. Typically, in this context, the heat exchangers 160, 260 are incorporated into a fuel cell stack not shown. Therefore, in an alternative, the heat exchanger may also be referred to as a fuel cell stack.

[0054] The first sensor 110 and the second sensor 210 may be temperature sensors and / or pressure sensors.

[0055] refer to Figure 1 In the example of the vehicle fuel cell system assembly 1, the vehicle fuel cell system assembly 1 may include a vehicle control unit 20, which is arranged to communicate with the first control unit 120 and communicate with the second control unit 220. The present disclosure does not exclude that the vehicle fuel cell system assembly 1 is connected to the vehicle control unit 20 instead, that is, the vehicle control unit 20 is not included in the vehicle fuel cell system assembly 1.

[0056] The vehicle fuel cell system assembly 1 may also include a vehicle sensor 10. Typically, the vehicle sensor 10 is associated with a common supply source 50. Figure 1 In the example of , one common supply source 50 may be formed by a cooling circuit 60, and the vehicle sensor 10 may be a temperature or pressure sensor arranged to measure the temperature or pressure of the cooling circuit 60. The vehicle sensor 10 may be arranged to measure the temperature or pressure at the common supply source 50. The cooling circuit 60 may be included in the vehicle fuel cell system component 1. Alternatively, the cooling circuit 60 may be included in the vehicle 400, and the vehicle fuel cell system component 1 may be connected to the cooling circuit 60. The cooling circuit 60 may be arranged to cool other components of the vehicle 400, not just the vehicle fuel cell system component 1. In some examples, the vehicle sensor 10 may be configured to measure both temperature and pressure.

[0057] In the context of the present disclosure, the vehicle control unit 20 may be a control unit 20 associated with the vehicle 400. The vehicle control unit 20 may perform a plurality of functions related to the operation of the vehicle 400. Therefore, the vehicle control unit 20 may not be primarily dedicated to the first fuel cell system 100 or the second fuel cell system 200. In other words, the vehicle control unit 20 may not be included in the first fuel cell system 100 or the second fuel cell system 200.

[0058] In the context of the present disclosure, the vehicle sensor 10 may be associated with the common supply source 50 as described above. The vehicle sensor 10 may not be primarily associated with the first fuel cell system 100 or the second fuel cell system 200. In other words, the vehicle sensor 10 may not be included in the first fuel cell system 100 or the second fuel cell system 200.

[0059] Figure 1An example may be based on the vehicle control unit 20 performing a sensor rationality check of the first sensor 110, the second sensor 210 and the vehicle sensor 10 based on values ​​from the first sensor 110, the second sensor 210 and the vehicle sensor 10. In some examples, the first sensor 110, the second sensor 210 and the vehicle sensor 10 may all be temperature sensors. Now, since all of the sensors 110, 210, 10 may be arranged to measure the temperature of the common cooling circuit 60, see Figure 1 , so the sensor rationality check can be based on the assumption that each sensor 110, 210, 10 should detect substantially the same value. Therefore, if the value detected by one of the sensors is different or significantly different from the values ​​of the other sensors, the vehicle control unit 20 can conclude that the sensor that detected the significantly different value is faulty and therefore fails the rationality check. In this example, the first sensor 110 can be referred to as the first coolant sensor 110, the second sensor 210 can be referred to as the second coolant sensor 210, and the vehicle sensor 10 can be referred to as the vehicle coolant sensor 10.

[0060] exist Figure 1 In the example of FIG. 1 , the first coolant sensor 110 , the second coolant sensor 210 , and the vehicle coolant sensor 10 are all operatively arranged immediately downstream of the radiator 62 of the cooling circuit, which can facilitate sensor rationality checks. If the first coolant sensor 110 , the second coolant sensor 210 , and the vehicle coolant sensor 10 are all arranged without a substantial heat source or heat sink therebetween, each coolant sensor 110 , 210 , 10 should detect substantially the same temperature value.

[0061] In more detail, Figure 1 In the example of FIG. 1 , the vehicle coolant sensor 10 is preferably arranged downstream of the radiator 62, the first coolant sensor 110 is arranged upstream of the heat exchanger 160 of the first fuel cell system 100, and the second coolant sensor 210 is arranged upstream of the heat exchanger 260 of the second fuel cell system 200. The radiator 62 may be referred to as a common radiator 62, the heat exchanger 160 of the first fuel cell system 100 may be referred to as a first heat exchanger 160, and the heat exchanger 260 of the second fuel cell system 200 may be referred to as a second heat exchanger 260.

[0062] Still refer to Figure 1 , the vehicle control unit 20 may be configured to perform a sensor rationality check of the first coolant sensor 110 and the second coolant sensor 210 also based on operating parameters of the first fuel cell system 100 and the second fuel cell system 200, such as fuel cell power output. Thus, for example, the first coolant sensor 110 may be arranged downstream of the first heat exchanger 160 (see Figure 2 The first fuel cell control unit 120 (e.g., knowing the power output of the first fuel cell system 100) may be configured to calculate the expected temperature value of the first coolant sensor 110.

[0063] Similarly, the vehicle control unit 20 may be configured to perform a sensor rationality check of the first coolant sensor 110 and the second coolant sensor 210 also based on the health status information of the first fuel cell system 100 and the second fuel cell system 200. For example, the first fuel cell system 100 may have a worse health status than the second fuel cell system 200, and the vehicle control unit 20 may expect, for example, that the first coolant sensor 110 detects a higher temperature in view of this.

[0064] In some examples, Figure 1 The vehicle control unit 20 can be configured to perform a sensor rationality check of the first coolant sensor 110 and the second coolant sensor 210 based on values ​​from the first coolant sensor 110, the second coolant sensor 210 and the vehicle coolant sensor 10, based on operating parameters of the first fuel cell system 100 and the second fuel cell system 200, and further based on health status information of the first fuel cell system 100 and the second fuel cell system 200.

[0065] It should be understood that reference Figure 1 For example, if the first coolant sensor 110, the second coolant sensor 210, and the vehicle coolant sensor 10 are all pressure sensors, the rationality check may be performed in a similar manner.

[0066] Refer to the above Figure 1 Description of an example, in one aspect, the present invention relates to performing a sensor rationality check on the same or corresponding sensors 110, 210 of at least two fuel cell systems 100, 200 in a multi-fuel cell system assembly 1 including at least a first and a second fuel cell system 100, 200 and a common supply source 50. It should be understood that the same or similar techniques can be applied to sensors associated with air supply (cathode supply), fuel supply (anode supply) and coolant supply.

[0067] like Figure 1 and Figure 2As shown, in the first example and the second example, the vehicle fuel cell system assembly 1 includes a common air intake or air supply source 50'. A common air filter 52 may be arranged downstream of the common air supply source 50'. In or downstream of the common air filter 52, the common supply air flow may be divided into separate air flows leading to the first fuel cell system 100 and the second fuel cell system 200. Therefore, there may be a first supply air compressor 54a and a first supply air cooler 56a and a separate second supply air compressor 54b and a second supply air cooler 56b. In addition, the first turbine 58a may be arranged to collect energy from the cathode outlet of the first fuel cell system 100, and the second turbine 58b may be arranged to collect energy from the cathode outlet of the second fuel cell system 200. There may be a coolant line that connects the first supply air cooler 56a and the second supply air cooler 56b to the cooling circuit 60, which is not shown.

[0068] Reference again Figure 1 In the example of the vehicle fuel cell system assembly 1, a vehicle sensor 10' arranged at a common air supply source 50' is provided to measure the temperature and / or pressure of the air to be supplied to the cathode of the fuel cell. Therefore, the vehicle sensor 10' can be referred to as a vehicle air sensor 10'. The first fuel cell system 100 and the second fuel cell system 200 can include a first air sensor and a second air sensor not shown. Now, Figure 1 An example of may be based on the vehicle control unit 20 performing a sensor rationality check of the first air sensor, the second air sensor, and the vehicle air sensor based on the values ​​from the first air sensor, the second air sensor, and the vehicle air sensor 10'. In this case, since a supply air compressor 54a, 54b and a supply air cooler 56a, 56b are usually arranged between the common air supply source 50' and the respective first fuel cell system 100 and the second fuel cell system 200, the vehicle control unit 20 usually needs to consider the operating parameters of the first fuel cell system 100 and the second fuel cell system 200 when performing the sensor rationality check. More precisely, the operating parameters of the supply air compressors 54a, 54b and the supply air coolers 56a, 56b associated with the first fuel cell system 100 and the second fuel cell system 200.

[0069] It should be understood that Figure 1 The example may also be applicable to sensor rationality checks of a vehicle fuel sensor not shown and a first fuel sensor and a second fuel sensor. In this case, the vehicle fuel cell system assembly 1 may include a common fuel tank (typically containing hydrogen) and a common fuel supply source for the first fuel cell system 100 and the second fuel cell system 200.

[0070] like Figure 1The dashed rectangle in the middle is shown schematically. Figure 1 The vehicle fuel cell system assembly 1 may include a third fuel cell system 300. The third fuel cell system 300 may include a third sensor and a third control unit, not shown. In this case, the vehicle fuel cell system assembly 1 may be configured to perform a sensor rationality check of the first sensor 110, the second sensor 210, and the third sensor based on values ​​from the first sensor 110, the second sensor 210, and the third sensor. The first fuel cell system, the second fuel cell system, and the third fuel cell system may include a common supply source of coolant, air, or fuel. There is no need to repeat the above Figure 1 As described in the example of , the vehicle control unit 20 may perform a sensor rationality check of the first sensor 110 , the second sensor 210 , the third sensor, and the vehicle sensor 10 based on values ​​from the first sensor 110 , the second sensor 210 , the third sensor, and the vehicle sensor 10 .

[0071] refer to Figure 2 In an alternative vehicle fuel cell system assembly 1, the vehicle fuel cell system assembly 1 may be configured to perform a sensor rationality check via the first fuel cell control unit 120 and the second fuel cell control unit 220. Figure 2 In the example shown, the sensor plausibility check is not performed by the vehicle control unit. Figure 2 The first fuel cell control unit 120 and the second fuel cell control unit 220 are shown, but no vehicle control unit. It should be understood that Figure 2 The vehicle fuel cell system assembly 1 may typically be arranged in a vehicle 400 , which comprises a vehicle control unit that communicates with the first fuel cell control unit 120 and the second fuel cell control unit 220 , but which does not participate in the sensor plausibility check.

[0072] exist Figure 2 In the example of FIG. 1 , the first control unit 120 and the second control unit 220 are configured to communicate directly with each other. In this case, the first control unit 120 and the second control unit 220 may be directly connected to each other (eg, Figure 2 as shown).

[0073] exist Figure 2 In the example of FIG. 1 , the first control unit 120 and the second control unit 220 communicate with each other, and the first control unit 120 is configured to perform a sensor rationality check of the first sensor 110 based on values ​​from the first sensor 110 and the second control unit 220. The second control unit 220 is configured to perform a sensor rationality check of the second sensor 210 based on values ​​from the second sensor 210 and the first control unit 120.

[0074] exist Figure 2 In the example of , the first (fuel cell) control unit 120 may receive values ​​from the first (fuel cell) sensor 110 and may also receive values ​​from the second (fuel cell) sensor 210 via the second (fuel cell) control unit 220. As shown, the first control unit 120 is connected to the second control unit 220. In addition, the first sensor 110 is connected to the first control unit 120 and the second sensor 210 is connected to the second control unit 220. Figure 1 , since the first fuel cell system 100 and the second fuel cell system 200 include or are connected to a common cooling circuit 60 and therefore include a common supply source 50 of coolant (or air or fuel), the sensor rationality check can be based on the assumption that the first sensor 110 and the second sensor 210 should detect substantially the same value.

[0075] like Figure 2 As shown, the first fuel cell system 100 may include a third sensor 112. In this example, the first sensor 110 of the first fuel cell system 100 is arranged upstream of the heat exchanger 160, and the third sensor 112 is arranged downstream of the heat exchanger. Therefore, the first sensor 110 and the third sensor 112 are arranged in the same medium loop (here: coolant medium loop). Similarly, the second fuel cell system 200 may include a fourth sensor 212. The second sensor 210 of the second fuel cell system 200 may be arranged upstream of the heat exchanger 260, and the fourth sensor 212 may be arranged downstream of the heat exchanger 260. Therefore, the second sensor 210 and the fourth sensor 212 are arranged in the same medium loop (here: coolant medium loop). With the help of the third sensor 112 and / or the fourth sensor 212, the sensor rationality check can be improved. The first fuel cell control unit 120 can receive values ​​from the first fuel cell sensor 110, the third fuel cell sensor 112, and can also receive values ​​from the second fuel cell sensor 210 and the fourth fuel cell sensor 212 via the second fuel cell control unit 220. The second fuel cell control unit 220 may receive values ​​from the second fuel cell sensor 210, the fourth fuel cell sensor 212, and may also receive values ​​from the first fuel cell sensor 110 and the third fuel cell sensor 112 via the first fuel cell control unit 120. The first sensor 110 and the third sensor 112 are connected to the first control unit 120, and the second sensor 210 and the fourth sensor 212 are connected to the second control unit 220.

[0076] In addition, at least one of the control units 120, 220 may be configured to calculate expected values ​​of its designated sensors (the third sensor 112 and the fourth sensor 212 in this example) based on, for example, the power output of the first fuel cell system 100 or the second fuel cell system 200. For example, the first control unit 120 may be configured to perform a sensor rationality check of the third sensor 112 based on values ​​from the first sensor 110, the third sensor 112, the calculated expected value of the third sensor 112, and values ​​from the second control unit 220 (e.g., the value of the second sensor 210). The second control unit 220 may be configured to operate in a corresponding manner.

[0077] As shown in the figure ( Figure 1 and Figure 2 ), the first fuel cell system 100 and the second fuel cell system 200 may be substantially identical. It should be understood that if the first fuel cell system 100 and the second fuel cell system 200 are not substantially identical, but are designed differently or have different power ratings, the vehicle fuel cell system assembly 1 may be adapted to account for these differences when performing sensor rationality checks.

[0078] like Figure 2 The dashed rectangle in the middle is shown schematically. Figure 2 The vehicle fuel cell system assembly 1 may include a third fuel cell system 300. The third fuel cell system 300 may include a third sensor and a third control unit, not shown. The first control unit 120 may receive a value from the first sensor 110, receive a value from the second sensor 210 via the second control unit 220, and receive a value from the third sensor via the third control unit. The sensor rationality check may be performed by the respective control unit in accordance with the reference Figure 2 The first fuel cell system, the second fuel cell system, and the third fuel cell system may, but need not, be substantially identical.

[0079] exist Figure 2 In the example of , the (fuel cell) control units may communicate with each other so that all control units know which sensors 110 (if any) have failed the rationality check. The control units of the fuel cell systems comprising sensors that have failed the rationality check may then use sensor values ​​from fuel cell systems comprising sensors that have passed the rationality check instead. If a first fuel cell system comprises a sensor that has failed the rationality check, and the first control unit communicates with a plurality of other control units comprising sensors that have passed the rationality check, the first control unit may use an average value of these sensors instead of the value of the first sensor.

[0080] Figure 2Many sensors not indicated by reference numerals are shown, such as sensors operatively arranged upstream of the first supply air compressor 54a and the second supply air compressor 54b and sensors at the outlets of the first heat exchanger 160 and the second heat exchanger 260. As shown, these sensors are arranged to communicate with the first fuel cell control unit 120 or the second fuel cell control unit 220. It should be added that Figure 2 The vehicle fuel cell system assembly 1 may be configured to perform a sensor rationality check on each of these sensors.

[0081] Figure 3 A method 500 of operating a vehicle fuel cell system assembly is shown. The method 500 includes controlling 510 the first fuel cell system 100 by the first control unit 120 and based on the value of the first fuel cell sensor 110. The control may be referred to as a first control 510 because it is related to the first fuel cell system 100.

[0082] The method 500 also includes controlling 520 the second fuel cell system 200 by the second control unit 220 and based on the value of the second fuel cell sensor 210. The control may be referred to as second control 520 because it is related to the second fuel cell system 200. The first control 510 and the second control 520 are usually performed simultaneously.

[0083] The method 500 also includes supplying 530 coolant, air, or fuel to the first fuel cell system 100 and the second fuel cell system 200 via a common supply source 50 .

[0084] The method 500 also includes performing a rationality check 540 on the first sensor 110 and the second sensor 210 .

[0085] The method 500 also includes operating 550 the first fuel cell system 100 and the second fuel cell system 200 by using the values ​​of the sensors 110 , 210 that passed the rationality check instead of the values ​​of the sensors 110 , 210 that failed the rationality check.

[0086] Method 500 may be described in, for example, Figure 1 The method 500 is performed on a vehicle fuel cell system assembly of the type described. Therefore, the components of the vehicle fuel cell system assembly will not be described again. In addition, all details of the example of the method 500 will not be described again.

[0087] As described above, the rationality check 540 is generally based on the values ​​from the first fuel cell sensor 110 and the second fuel cell sensor 210. In more detail, as shown in FIG. Figure 1As described in the example of , the rationality check 540 can be based on values ​​from the first fuel cell sensor 110, the second fuel cell sensor 210, and the vehicle sensor 10 associated with the common supply source 50. In addition, the rationality check 540 can be based on operating parameters (such as fuel cell power output) or health status information of the first fuel cell system 100 and the second fuel cell system 200.

[0088] If the first fuel cell sensor 110 fails the rationality check, the method 500 may operate 550 the first fuel cell system 100 and the second fuel cell system 200 using the value of the vehicle sensor 10 .

[0089] If the second fuel cell sensor 210 fails the rationality check, the method 500 may operate 550 the first fuel cell system 100 and the second fuel cell system 200 using the value of the vehicle sensor 10 .

[0090] If the vehicle sensor 10 fails the rationality check, the method 500 may operate 550 the first fuel cell system 100 and the second fuel cell system 200 using the values ​​of the first fuel cell sensor 110 and / or the second fuel cell sensor 210 .

[0091] The rationality check 540 may include a control unit 120, 220, 20 notifying another control unit 120, 220, 20 which sensor 110, 210, 10 failed the rationality check. The rationality check 540 may also include generating a warning message to an operator of the vehicle fuel cell system assembly. Typically, the operator may be a driver of a vehicle in which the vehicle fuel cell system assembly is arranged. The vehicle fuel cell system assembly may continue its operation, but the operator may arrange for quick or immediate maintenance. For example, the driver may arrange for vehicle maintenance or may immediately drive the vehicle to a workshop or service center.

[0092] As reference Figure 2 As described in the example of , the rationality check 540 may be performed by the first vehicle control unit 120 and the second vehicle control unit 220 based on values ​​from the first fuel cell sensor 110 and the second fuel cell sensor 210 and optionally based on values ​​from the third sensor 112 and the fourth sensor 212. In addition, the rationality check 540 may be based on operating parameters (such as fuel cell power output) or health status information of the first fuel cell system 100 and the second fuel cell system 200.

[0093] In this case, if the first fuel cell sensor 110 fails the rationality check, the method 500 may operate 550 the first fuel cell system 100 using the value of the second fuel cell sensor 210. If the second fuel cell sensor 210 fails the rationality check, the method 500 may operate 550 the second fuel cell system 200 using the value of the first fuel cell sensor 110.

[0094] According to method 500, if a sensor 110, 210, 10 fails the rationality check, method 500 may reduce 560 the fuel cell power output of the vehicle fuel cell system assembly 1. However, typically, method 500 may need to reduce the fuel cell power output of the vehicle fuel cell system assembly 1 only if more than one sensor fails the rationality check.

[0095] The first fuel cell system 100 and the second fuel cell system 200 typically each include a fuel cell stack (not shown) having bipolar plates, electrical connections, inputs and outputs for cathode gas (typically air) and anode gas (such as hydrogen). Since the present disclosure is primarily concerned with sensor rationality checks rather than the fuel cell systems themselves, the functions and features of the fuel cell systems are not described in detail.

[0096] The above methods are typically computer-implemented. Figure 4 is a schematic diagram of a computer system 900 for implementing the examples disclosed herein. The computer system 900 is suitable for executing instructions from a computer-readable medium to perform these and / or any functions or processes described herein. The computer system 900 can be connected (e.g., networked) to other machines in a LAN (local area network), a LIN (local interconnect network), an automotive network communication protocol (e.g., FlexRay), an intranet, an extranet, or the Internet. Although only a single device is shown, the computer system 900 may include any collection of devices that execute an instruction set (or multiple instruction sets) individually or jointly to perform any one or more of the methods discussed herein. Therefore, any reference to a computer system, a computing system, a computer device, a computing device, a control system, a control unit, an electronic control unit (ECU), a processor device, a processing circuit, etc. in the present disclosure and / or claims includes a reference to one or more such devices to execute an instruction set (or multiple instruction sets) individually or jointly to perform any one or more of the methods discussed herein. For example, the control system may include a single control unit or multiple control units connected to each other or otherwise communicatively coupled, so that any executed functions can be distributed between the control units as needed. Furthermore, such devices may communicate with each other or other devices through various system architectures, such as directly or via a controller area network (CAN) bus or the like.

[0097] The computer system 900 may include at least one computing device or electronic device capable of including firmware, hardware and / or executing software instructions to implement the functionality described herein. The computer system 900 may include a processing circuit 902 (e.g., a processing circuit including one or more processor devices or control units), a memory 904, and a system bus 906. The computer system 900 may include at least one computing device having a processing circuit 902. The system bus 906 provides an interface for system components including, but not limited to, the memory 904 and the processing circuit 902. The processing circuit 902 may include any number of hardware components for performing data or signal processing or for executing computer code stored in the memory 904. The processing circuit 902 may include, for example, a general-purpose processor, a special-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), a circuit containing a processing component, a group of distributed processing components, a group of distributed computers configured for processing, or other programmable logic devices designed to perform the functions described herein, discrete gate or transistor logic, discrete hardware components, or any combination thereof. The processing circuit 902 may also include computer executable code that controls the operation of the programmable device.

[0098] The system bus 906 can be any of several types of bus structures, which can be further interconnected to a memory bus (with or without a memory controller), a peripheral bus, and / or a local bus using any of a variety of bus architectures. The memory 904 can be one or more devices for storing data and / or computer code to complete or facilitate the methods described herein. The memory 904 can include a database component, an object code component, a script component, or any type of information structure for supporting various activities herein. Any distributed or local memory device can be utilized together with the system and method of the present specification. The memory 904 can be communicatively connected to the processing circuit 902 (e.g., via a circuit or any other wired, wireless, or network connection) and can include computer code for performing one or more processes described herein. The memory 904 may include nonvolatile memory 908 (e.g., read-only memory (ROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), etc.) and volatile memory 910 (e.g., random access memory (RAM)), or any other medium that can be used to carry or store desired program code in the form of machine-executable instructions or data structures and that can be accessed by a computer or other machine having the processing circuit 902. A basic input / output system (BIOS) 912 may be stored in the nonvolatile memory 908 and may include the basic routines that help to transfer information between elements within the computer system 900.

[0099] The computer system 900 may also include or be coupled to non-transitory computer-readable storage media such as storage device 914, which may include, for example, an internal or external hard disk drive (HDD) (e.g., enhanced integrated drive electronics (EIDE) or serial advanced technology attachment (SATA)), a HDD for storage (e.g., EIDE or SATA), flash memory, etc. The storage device 914 and other drives associated with computer-readable and computer-usable media may provide non-volatile storage of data, data structures, computer-executable instructions, etc.

[0100] The hard-coded or soft-coded computer code may be provided in the form of one or more modules. The module may be implemented as software and / or hard-coded in the circuit to implement the functionality described herein in whole or in part. The module may be stored in a storage device 914 and / or a volatile memory 910 that may include an operating system 916 and / or one or more program modules 918. All or part of the examples disclosed herein may be implemented as a computer program 920 stored on a temporary or non-temporary computer-usable or computer-readable storage medium (e.g., a single medium or multiple media) such as a storage device 914, which includes complex programming instructions (e.g., complex computer-readable program code) that cause the processing circuit 902 to perform the actions described herein. Therefore, the computer-readable program code of the computer program 920 may include software instructions for implementing the functionality of the examples described herein when executed by the processing circuit 902. In some examples, storage device 914 may be a computer program product (e.g., a readable storage medium) on which a computer program 920 is stored, wherein at least a portion of computer program 920 may be loadable (e.g., loaded into a processor) for implementing the functionality of the examples described herein when executed by processing circuit 902. Processing circuit 902 may serve as a controller or control system of computer system 900 for implementing the functionality described herein.

[0101] The computer system 900 may include an input device interface 922 configured to receive input and selections to be transmitted to the computer system 900 when executing instructions, such as from a keyboard, mouse, touch-sensitive surface, etc. Such input devices can be connected to the processor circuit 902 through an input device interface 922 coupled to the system bus 906, but can be connected through other interfaces such as a parallel port, an Institute of Electrical and Electronics Engineers (IEEE) 1394 serial port, a universal serial bus (USB) port, an IR interface, etc. The computer system 900 may include an output device interface 924 configured to forward output to a display, a video display unit (e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT)). The computer system 900 may include a communication interface 926 suitable for communicating with a network as appropriate or as needed.

[0102] Sensor plausibility checking can be defined as a method to check whether a sensor value is plausible. In other words, whether the sensor value is acceptable, reasonable, and understandable.

[0103] The operational actions described in any of the exemplary aspects of this article are described to provide examples and discussions. These actions can be performed by hardware components, can be embodied in machine executable instructions so that a processor performs these actions, or can be performed by a combination of hardware and software. Although a specific order of method actions can be shown or described, the order of actions can be different. In addition, two or more actions can be performed simultaneously or partially simultaneously.

[0104] Examples are also disclosed under the following terms:

[0105] 1. A vehicle fuel cell system assembly (1), comprising: - a first fuel cell system (100) comprising a first sensor (110) and a first control unit (120), the first control unit being adapted to control the first fuel cell system (100) based on a value of the first sensor (110); - a second fuel cell system (200) comprising a second sensor (210) and a second control unit (220), the second control unit being adapted to control the second fuel cell system (200) based on a value of the second sensor (210); and - a common supply source (50) of coolant, air or fuel for the first fuel cell system and the second fuel cell system (100, 200), wherein the vehicle fuel cell system component (1) is configured to perform a sensor rationality check of the first sensor (110) and the second sensor (210), and The value of the sensor (110, 210) that passes the rationality check is used instead of the value of the sensor (110, 210) that fails the rationality check, so that operation of the first fuel cell system and the second fuel cell system (100, 200) is allowed in the event that the sensor (110, 210) fails the rationality check.

[0106] 2. A vehicle fuel cell system assembly (1) according to clause 1, configured to perform a sensor rationality check of the first sensor (110) and the second sensor (210) based on values ​​from the first sensor (110) and the second sensor (210).

[0107] 3. A vehicle fuel cell system assembly (1) according to clause 1 or 2, wherein the first fuel cell system and the second fuel cell system (100, 200) comprise or are connected to a common cooling circuit (60) and thus comprise or are connected to a common supply (50) of coolant.

[0108] 4. The vehicle fuel cell system assembly (1) according to clause 3, wherein the first sensor and the second sensor (110, 210) are temperature sensors and / or pressure sensors.

[0109] 5. A vehicle fuel cell system component (1) according to any of the preceding clauses, The vehicle fuel cell system assembly includes a vehicle sensor (10) associated with the common supply source (50) and a vehicle control unit (20) in communication with the first control unit (120), the second control unit (220) and the vehicle sensor (10), wherein the vehicle control unit (20) is configured to perform a sensor rationality check of the first sensor (110), the second sensor (210) and the vehicle sensor (10) based on values ​​from the first sensor (110), the second sensor (210) and the vehicle sensor (10), or The first fuel cell system (100) optionally includes a third sensor (112), and The second fuel cell system (200) optionally includes a fourth sensor (212), The first control unit (120) and the second control unit (220) are in communication with each other, and the first control unit (120) is configured to perform a sensor rationality check of the first sensor (110) based on values ​​from the first sensor (110), the optional third sensor (112) and the second control unit (220), and the second control unit (220) is configured to perform a sensor rationality check of the second sensor (210) based on values ​​from the second sensor (210), the optional fourth sensor (212) and the first control unit (120).

[0110] 6. A vehicle fuel cell system component (1) according to any preceding clause, comprising a third fuel cell system (300), the third fuel cell system comprising a third sensor (310) and a third control unit (320), wherein the vehicle fuel cell system component (1) is configured to perform a sensor rationality check of the first sensor (110), the second sensor (210) and the third sensor (310) based on values ​​from the first sensor (110), the second sensor (210) and the third sensor (310).

[0111] 7. A vehicle fuel cell system assembly (1) according to any preceding clause, comprising a vehicle control unit (20) communicating with the first control unit (120) of the first fuel cell system (100) and the second control unit (220) of the second fuel cell system (200).

[0112] 8. A vehicle fuel cell system assembly (1) according to clause 7, wherein the vehicle control unit (20) is configured to perform a sensor rationality check of the first sensor (110) and the second sensor (210) based on values ​​from the first sensor (110) and the second sensor (210).

[0113] 9. A vehicle fuel cell system assembly (1) according to any preceding clause, comprising or connected to a vehicle sensor (10) associated with the common supply source (50).

[0114] 10. The vehicle fuel cell system assembly (1) of clause 9, wherein the vehicle sensor (10) is a coolant sensor, an air sensor or a fuel sensor, and wherein the vehicle sensor (10) is configured to measure temperature and / or pressure.

[0115] 11. A vehicle fuel cell system assembly (1) according to clause 7 and clause 9 or 10, wherein the vehicle control unit (20) is configured to perform a sensor rationality check of the first sensor (110), the second sensor (210) and the vehicle sensor (10) based on values ​​from the first sensor (110), the second sensor (210) and the vehicle sensor (10).

[0116] 12. The vehicle fuel cell system assembly (1) according to clause 11, wherein the vehicle sensor (10) is a temperature sensor or a pressure sensor.

[0117] 13. A vehicle fuel cell system assembly (1) according to any preceding clause, wherein the first control unit (120) and the second control unit (220) communicate with each other, the first fuel cell system (100) comprises a third sensor (112), the second fuel cell system (200) comprises a fourth sensor (212), and The first control unit (120) is configured to perform a sensor rationality check of the first sensor (110) based on values ​​from the first sensor (110), the third sensor (112) and the second control unit (220), and The second control unit (220) is configured to perform a sensor rationality check of the second sensor (210) based on values ​​from the second sensor (210), the fourth sensor (212) and the first control unit (120).

[0118] 14. A vehicle fuel cell system assembly (1) according to clause 13, wherein The first control unit (120) is configured to perform a sensor rationality check of the first sensor (110) based on operating parameters (such as fuel cell power output) or health status information of the first fuel cell system and the second fuel cell system (100, 200), and The second control unit (220) is configured to perform a sensor rationality check of the second sensor (210) further based on operating parameters or health status information (such as fuel cell power output) of the first and second fuel cell systems (100, 200).

[0119] 15. A vehicle fuel cell system component (1) according to any preceding clause, wherein the first fuel cell system and the second fuel cell system (100, 200) are substantially identical, or wherein the first fuel cell system and the second fuel cell system (100, 200) are different from each other, and the vehicle fuel cell system component (1) is adapted to take the difference into account when performing the sensor rationality check.

[0120] 16. A vehicle (400) comprising a vehicle fuel cell system assembly (1) according to any preceding clause.

[0121] 17. The vehicle (400) according to clause 16, wherein the vehicle (400) is a heavy vehicle, such as a truck or a bus.

[0122] 18. A method (500) of operating a vehicle fuel cell system assembly (1), the method (500) comprising: - first, controlling (510) the first fuel cell system (100) by means of the first control unit (120) and based on the value of the first fuel cell sensor (110); - secondly, controlling (520) the second fuel cell system (200) by means of the second control unit (220) and based on the value of the second fuel cell sensor (210); - supplying (530) coolant, air or fuel to the first fuel cell system and the second fuel cell system (100, 200) via a common supply source (50); - performing a plausibility check (540) on the first sensor (110) and the second sensor (210); and - operating (550) the first fuel cell system (100) and the second fuel cell system (200) by using values ​​of sensors (110, 210) that pass the plausibility check instead of values ​​of sensors (110, 210) that fail the plausibility check.

[0123] 19. The method (500) of clause 18, wherein the plausibility check (540) is based on values ​​from the first fuel cell sensor (110) and the second fuel cell sensor (210).

[0124] 20. The method (500) of clause 18, wherein the plausibility check (540) is based on values ​​from the first fuel cell sensor (110), the second fuel cell sensor (210), and a vehicle sensor (10) associated with the common supply source (50).

[0125] 21. The method (500) of clause 19 or 20, wherein the rationality check (540) is based on operating parameters (such as fuel cell power output) or health status information of the first fuel cell system and the second fuel cell system (100, 200).

[0126] 22. The method (500) according to clause 20, comprising: if the first fuel cell sensor (110) fails the plausibility check, operating (550) the first fuel cell system and the second fuel cell system (100, 200) using the value of the vehicle sensor (10), if the second fuel cell sensor (210) fails the rationality check, operating (550) the first fuel cell system and the second fuel cell system (100, 200) using the value of the vehicle sensor (10), and If the vehicle sensor (10) fails the plausibility check, the first fuel cell system and the second fuel cell system (100, 200) are operated (550) using the value of the first fuel cell sensor (110) and / or the second fuel cell sensor (210).

[0127] 23. The method (500) according to any of clauses 18 to 22, wherein the plausibility check (540) comprises a control unit (120, 220, 20) notifying another control unit (120, 220, 20) which sensor (110, 210, 10) failed the plausibility check.

[0128] 24. The method (500) of clause 23, wherein the rationality check (540) comprises generating a warning message to an operator of the vehicle fuel cell system component.

[0129] 25. The method (500) of clause 23 or 24, comprising reducing (560) a fuel cell power output of the vehicle fuel cell system assembly (1) if one or more sensors (110, 210, 10) fail the rationality check.

[0130] The terms used herein are only for the purpose of describing specific aspects and are not intended to limit the present disclosure. As used herein, unless the context clearly indicates otherwise, the singular forms "a" and "the" are intended to include the plural forms as well. As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items. It should also be understood that the terms "include" and / or "comprising" when used herein indicate the presence of stated features, integers, actions, steps, operations, elements and / or parts, but do not exclude the presence or addition of one or more other features, integers, actions, steps, operations, elements, parts and / or their groups.

[0131] It should be understood that although the terms first, second, etc. may be used herein to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another element. For example, without departing from the scope of the present disclosure, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element.

[0132] Relative terms such as "below" or "above" or "upper" or "lower" or "horizontal" or "vertical" may be used herein to describe the relationship of one element to another element, as shown in the figures. It should be understood that these terms and those discussed above are intended to cover different device orientations in addition to the orientations depicted in the figures. It should be understood that when an element is referred to as being "connected" or "coupled" to another element, the element may be directly connected or coupled to the other element, or there may be intervening elements. In contrast, when an element is referred to as being "directly connected" or "directly coupled" to another element, there are no intervening elements.

[0133] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as those commonly understood by those skilled in the art to which the present disclosure belongs. It should also be understood that, unless otherwise clearly defined herein, the terms used herein should be interpreted as meanings consistent with their meanings in the context of this specification and the relevant art, and should not be interpreted in an idealized or overly formal sense.

[0134] It should be understood that the present disclosure is not limited to the aspects described above and shown in the accompanying drawings; rather, the skilled person will recognize that many changes and modifications may be made within the scope of the present disclosure and the appended claims. In the drawings and description, various aspects have been disclosed for illustrative purposes only and not for limiting purposes, and the scope of the disclosure is set forth in the appended claims.

Claims

1. A vehicle fuel cell system assembly, comprising: - a first fuel cell system comprising a first sensor and a first control unit, the first control unit being adapted to control the first fuel cell system based on a value of the first sensor; - a second fuel cell system comprising a second sensor and a second control unit, the second control unit being adapted to control the second fuel cell system based on a value of the second sensor; as well as - a common supply of coolant, air or fuel for the first fuel cell system and the second fuel cell system, wherein the vehicle fuel cell system component is configured to perform a sensor rationality check of the first sensor and the second sensor, and Using the values ​​of sensors that passed the rationality check instead of sensors that failed the rationality check allows operation of the first fuel cell system and the second fuel cell system if a sensor fails the rationality check.

2. A vehicle fuel cell system assembly according to claim 1, wherein the first fuel cell system and the second fuel cell system include or are connected to a common cooling circuit and therefore include a common supply source of coolant, and wherein the first sensor and the second sensor are temperature sensors and / or pressure sensors.

3. The vehicle fuel cell system assembly according to claim 1, The vehicle fuel cell system assembly comprises: - vehicle sensors associated with said common supply source, and - a vehicle control unit in communication with the first control unit, the second control unit and the vehicle sensors, wherein the vehicle control unit is configured to perform a sensor rationality check of the first sensor, the second sensor and the vehicle sensor based on values ​​from the first sensor, the second sensor and the vehicle sensor, or - the first fuel cell system optionally comprises a third sensor, and - the second fuel cell system optionally comprises a fourth sensor, wherein the first control unit and the second control unit communicate with each other and the first control unit is configured to perform a sensor rationality check of the first sensor based on values ​​from the first sensor, optionally the third sensor and the second control unit, and the second control unit is configured to perform a sensor rationality check of the second sensor based on values ​​from the second sensor, optionally the fourth sensor and the first control unit, or The vehicle fuel cell system assembly comprises: - a third fuel cell system comprising a third sensor and a third control unit, The vehicle fuel cell system component is configured to perform a sensor rationality check of the first sensor, the second sensor, and the third sensor based on values ​​from the first sensor, the second sensor, and the third sensor.

4. The vehicle fuel cell system component of claim 1 , comprising a vehicle control unit communicating with the first control unit of the first fuel cell system and the second control unit of the second fuel cell system, wherein the vehicle control unit is configured to perform a sensor rationality check of the first sensor and the second sensor based on values ​​from the first sensor and the second sensor.

5. The vehicle fuel cell system assembly of claim 1 including or connected to vehicle sensors associated with the common supply source.

6. A vehicle fuel cell system assembly according to claims 4 and 5, wherein the vehicle control unit is configured to perform a sensor rationality check of the first sensor, the second sensor and the vehicle sensor based on values ​​from the first sensor, the second sensor and the vehicle sensor.

7. The vehicle fuel cell system assembly of claim 1, wherein the first control unit and the second control unit communicate with each other, the first control unit includes a third sensor, the second control unit includes a fourth sensor, and The first control unit is configured to perform a sensor rationality check of the first sensor based on values ​​from the first sensor, the third sensor and the second control unit, and The second control unit is configured to perform a sensor rationality check of the second sensor based on values ​​from the second sensor, the fourth sensor and the first control unit.

8. A vehicle fuel cell system component according to claim 1, wherein the first fuel cell system and the second fuel cell system are substantially identical, or wherein the first fuel cell system and the second fuel cell system are different from each other, and the vehicle fuel cell system component is suitable for taking the difference into account when performing the sensor rationality check.

9. The vehicle fuel cell system assembly of claim 1 including or connected to vehicle sensors associated with the common supply source.

10. The vehicle fuel cell system assembly of claim 9, wherein the vehicle sensor is a coolant sensor, an air sensor, or a fuel sensor, and wherein the vehicle sensor is configured to measure temperature and / or pressure.

11. The vehicle fuel cell system assembly of claim 7 and claim 9, wherein the vehicle control unit is configured to perform a sensor rationality check of the first sensor, the second sensor, and the vehicle sensor based on values ​​from the first sensor, the second sensor, and the vehicle sensor. 12 . The vehicle fuel cell system assembly of claim 11 , wherein the vehicle sensor is a temperature sensor or a pressure sensor.

13. The vehicle fuel cell system assembly of claim 1, wherein the first control unit and the second control unit communicate with each other, the first fuel cell system includes a third sensor, the second fuel cell system includes a fourth sensor, and The first control unit is configured to perform a sensor rationality check of the first sensor based on values ​​from the first sensor, the third sensor and the second control unit, and The second control unit is configured to perform a sensor rationality check of the second sensor based on values ​​from the second sensor, the fourth sensor and the first control unit.

14. A vehicle comprising a vehicle fuel cell system assembly according to claim 1, wherein the vehicle is optionally a heavy vehicle such as a truck or a bus.

15. A method of operating a vehicle fuel cell system assembly, the method comprising: - firstly, controlling the first fuel cell system by means of the first control unit and based on the value of the first fuel cell sensor, - secondly, controlling the second fuel cell system by means of the second control unit and based on the value of the second fuel cell sensor, - supplying coolant, air or fuel to the first fuel cell system and the second fuel cell system via a common supply source; - performing a plausibility check on the first sensor and the second sensor; and - operating the first fuel cell system and the second fuel cell system by using values ​​of sensors that pass the plausibility check instead of values ​​of sensors that fail the plausibility check. 16 . The method of claim 15 , wherein the rationality check is based on values ​​from the first fuel cell sensor, the second fuel cell sensor, and a vehicle sensor.

17. The method according to claim 16, comprising: if the first fuel cell sensor fails the rationality check, operating the first fuel cell system and the second fuel cell system using the value of the vehicle sensor, if the second fuel cell sensor fails the rationality check, operating the first fuel cell system and the second fuel cell system using the value of the vehicle sensor, and If the vehicle sensor fails the plausibility check, the value of the first fuel cell sensor and / or the second fuel cell sensor is used to operate the first fuel cell system and the second fuel cell system.

18. The method of claim 15, wherein the method is computer-implemented.

19. A computer program product comprising program code for performing the method according to claim 15 when executed by a processor device of a controller.

20. A non-transitory computer-readable storage medium comprising instructions that, when executed by a processor device of a controller, cause a processing circuit to perform the method of claim 15.

Images