Abnormality processing method and two-out-of-three protection device

Abstract

The invention relates to an exception handling method and a two-out-of-three protection device. The method comprises the following steps: acquiring running state information of each of three overcurrent detection devices; judging whether the acquired running state information meets a preset abnormality determination condition or not; when the acquired running state information meets a preset abnormality determination condition, determining the overcurrent detection device with the running state information meeting the preset abnormality determination condition as a first abnormal overcurrent detection device; first abnormal indication information for indicating the identity and the state of the first abnormal overcurrent detection device is sent to the other one of the two-out-of-three protection devices; and sending a reset command for resetting the at least one first abnormal overcurrent detection device to the at least one first abnormal overcurrent detection device based on information interaction with the other one of the two-out-of-three protection devices. According to the method, self-processing and self-recovery of the abnormal overcurrent detection device can be realized, and the self-healing capability of the energy storage valve control system is enhanced.

Description

Abnormal handling method and three-out-of-two protection device Technical Field

[0001] The present application relates to the technical field of power system energy storage technology, and in particular to an abnormality handling method and a three-out-of-two protection device. Background Art

[0002] The new energy storage valve control system is the core control device of the new energy storage system. In particular, the "Zhangbei ±35kV DC Energy Storage Project Flexible Direct Current Energy Storage Device Technical Specification" sets forth normative requirements: valve-controlled overcurrent protection and valve-controlled unbalance protection are designed as a "three-out-of-two" system. The new energy storage valve control system includes an IGBT valve control host, a protection host, and three-out-of-two protection devices with independent hardware configuration, as well as three independent overcurrent detection devices. If the overcurrent detection device experiences communication interruption, program errors, program bugs, CPU freezes, or abnormal freezes, data loss can occur, and the fault will not automatically resolve. Any failure in this single device can affect the commissioning and decommissioning of the entire converter station, resulting in significant economic impact and disrupting normal social production.

[0003] In traditional technologies, when an overcurrent detection device malfunctions, it is necessary to wait for the converter station to shut down, and manual intervention is required to restart or replace it, resulting in low fault handling efficiency.

[0004] Summary of the Invention

[0005] In view of the above problems, the present application provides an abnormality handling method and a three-out-of-two protection device, which can control the abnormal overcurrent detection device to remotely reset and restart, solve the inconvenience caused by the manual maintenance of the abnormal overcurrent detection device, improve the fault handling efficiency, and enhance the self-healing ability of the energy storage valve control system.

[0006] In a first aspect, the present application provides an abnormality handling method, which is applied to a two-out-of-three redundant structure in an energy storage valve control system, wherein the two-out-of-three redundant structure includes three overcurrent detection devices and two three-out-of-two protection devices, each of the two three-out-of-two protection devices performs a three-out-of-two vote on the overcurrent detection results output by the three overcurrent detection devices and outputs a three-out-of-two voting result, wherein the two three-out-of-two protection devices are communicatively connected to each other, and the method is executed by any one of the two three-out-of-two protection devices, and the method includes: obtaining operating status information of each of the three overcurrent detection devices; judging the obtained whether the acquired operating status information satisfies a preset abnormality determination condition; when the acquired operating status information satisfies the preset abnormality determination condition, determining the overcurrent detection device having the operating status information that satisfies the preset abnormality determination condition as the overcurrent detection device with the first abnormality, and sending first abnormality indication information indicating the identity and status of the overcurrent detection device with the first abnormality to the other of the two three-out-of-two protection devices; and based on the information interaction with the other of the two three-out-of-two protection devices, sending a reset command for resetting at least the overcurrent detection device with the first abnormality to at least the overcurrent detection device with the first abnormality.

[0007] In the embodiment of the present application, the operating status information of the overcurrent detection device is detected in real time by a two-out-of-three protection device. If an abnormality is detected, the two two-out-of-three protection devices communicate with each other, so that any one of the two-out-of-three protection devices can control the abnormal overcurrent detection device to remotely reset and restart, thereby achieving self-processing and self-recovery of the abnormal overcurrent detection device without affecting the operation of the energy storage valve control system.

[0008] In some embodiments, the sending of a reset command for resetting at least the first abnormal overcurrent detection device to at least the first abnormal overcurrent detection device based on information interaction with the other of the two three-out-of-two protection devices includes: receiving second abnormality indication information from the other of the two three-out-of-two protection devices; and when the second abnormal overcurrent detection device indicated by the second abnormality indication information is the same as the first abnormal overcurrent detection device, sending a reset command for resetting the first abnormal overcurrent detection device to the first abnormal overcurrent detection device.

[0009] Through the interaction of abnormal indication information between the two three-out-of-two protection devices, when the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to the same overcurrent detection device, any three-out-of-two protection device controls the first abnormal overcurrent detection device or the second abnormal overcurrent detection device to perform remote reset and restart, thereby realizing self-healing of the abnormal overcurrent detection device.

[0010] In some embodiments, the sending of a reset command for resetting at least the first abnormal overcurrent detection device to at least the first abnormal overcurrent detection device based on information interaction with the other of the two three-out-of-two protection devices includes: receiving second abnormal indication information from the other of the two three-out-of-two protection devices; when the second abnormal overcurrent detection device indicated by the second abnormal indication information is different from the first abnormal overcurrent detection device, locking the second abnormal overcurrent detection device; and sending reset commands for resetting the first abnormal overcurrent detection device and the second abnormal overcurrent detection device to the first abnormal overcurrent detection device and the second abnormal overcurrent detection device, respectively.

[0011] Through the interaction of abnormal indication information between two three-out-of-two protection devices, when the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to different overcurrent detection devices, any three-out-of-two protection device combines the first abnormal indication information and the second abnormal indication information to determine all abnormal overcurrent detection devices, and then controls all abnormal overcurrent detection devices to remotely reset and restart, thereby realizing self-healing of the abnormal overcurrent detection devices.

[0012] In some embodiments, the method further includes: issuing an alarm message when the acquired operating status information meets the preset abnormality determination condition; counting the number of resets for each of the three overcurrent detection devices; and setting the level of the alarm message based on the counted number of resets, wherein the level of the alarm message indicates the severity of the abnormality.

[0013] In some embodiments, setting the level of the alarm information based on the counted number of resets includes: comparing the counted number of resets with a preset threshold number; when the counted number of resets is less than the preset threshold number, setting the level of the alarm information to low; and when the counted number of resets is equal to the preset threshold number, setting the level of the alarm information to high.

[0014] By counting the number of resets of the abnormal overcurrent detection device, the level of the alarm information can be adjusted. When the number of resets is equal to the preset threshold, the alarm level is adjusted to high, and the abnormal overcurrent detection device is no longer reset, waiting for manual maintenance.

[0015] In a second aspect, the present application provides a three-out-of-two protection device, which, together with another three-out-of-two protection device and three overcurrent detection devices, constitutes a two-by-three-out-of-two redundant structure in an energy storage valve control system. The three-out-of-two protection device is configured to perform a three-out-of-two vote on the overcurrent detection results output by the three overcurrent detection devices and output a three-out-of-two voting result, wherein the three-out-of-two protection device is communicatively connected to the other three-out-of-two protection device, and the three-out-of-two protection device is further configured to: obtain operating status information of each of the three overcurrent detection devices; determine whether the acquired operating status information meets a preset abnormality determination condition; when the acquired operating status information meets the preset abnormality determination condition, determine the overcurrent detection device having the operating status information that meets the preset abnormality determination condition as the first abnormal overcurrent detection device, and send first abnormality indication information indicating the identity and status of the first abnormal overcurrent detection device to the other three-out-of-two protection device; and based on information interaction with the other three-out-of-two protection device, send a reset command for resetting at least the first abnormal overcurrent detection device to at least the first abnormal overcurrent detection device.

[0016] In the embodiment of the present application, the three-out-of-two protection device is configured to judge the operating status information of the overcurrent detection device. When the operating status information meets the preset abnormality determination condition, a first abnormal overcurrent detection device is obtained, and the abnormal overcurrent detection device information is exchanged with another three-out-of-two protection device, thereby remotely resetting the abnormal overcurrent detection device, solving the inconvenience caused by the abnormal overcurrent detection device having to be manually repaired, and improving the self-healing capability of the energy storage valve control system.

[0017] In some embodiments, the three-out-of-two protection device is further configured to: receive second abnormality indication information from the other three-out-of-two protection device; and when the second abnormal overcurrent detection device indicated by the second abnormality indication information is the same as the first abnormal overcurrent detection device, send a reset command for resetting the first abnormal overcurrent detection device to the first abnormal overcurrent detection device.

[0018] By configuring a two-out-of-three protection device to exchange information with another two-out-of-three protection device, when the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to the same overcurrent detection device, the first abnormal overcurrent detection device or the second abnormal overcurrent detection device is controlled to be remotely reset and restarted, thereby achieving self-healing of the abnormal overcurrent detection device.

[0019] In some embodiments, the three-out-of-two protection device is further configured to: receive second abnormal indication information from the other three-out-of-two protection device; when the second abnormal overcurrent detection device indicated by the second abnormal indication information is different from the first abnormal overcurrent detection device, lock the second abnormal overcurrent detection device; and send reset commands for resetting the first abnormal overcurrent detection device and the second abnormal overcurrent detection device to the first abnormal overcurrent detection device and the second abnormal overcurrent detection device, respectively.

[0020] When the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to different overcurrent detection devices, the three-out-of-two protection device is configured to lock the second abnormal overcurrent detection device, and determine all abnormal overcurrent detection devices in combination with the first abnormal indication information and the second abnormal indication information, and then control all abnormal overcurrent detection devices to remotely reset and restart, so as to achieve self-healing of the abnormal overcurrent detection devices.

[0021] In some embodiments, the three-out-of-two protection device is further configured to: issue an alarm message when the acquired operating status information meets the preset abnormality determination condition; count the number of resets for each of the three overcurrent detection devices; and set the level of the alarm message based on the counted number of resets, wherein the level of the alarm message indicates the severity of the abnormality.

[0022] In some embodiments, the two-out-of-three protection device is further configured to: compare the counted number of resets with a preset threshold number; when the counted number of resets is less than the preset threshold number, set the level of the alarm information to low; and when the counted number of resets is equal to the preset threshold number, set the level of the alarm information to high.

[0023] By configuring the three-out-of-two device to count the number of resets of the abnormal overcurrent detection device, and then adjusting the level of the alarm information according to the number of resets, when the alarm level is high, the abnormal overcurrent detection device will no longer be reset and will be sent to the background for manual maintenance.

[0024] In a third aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, which implements the steps of the method described in the first aspect when executed by a processor.

[0025] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] FIG1 is a diagram illustrating an application environment of an exception handling method according to some embodiments of the present application;

[0027] FIG2 is a flow chart of an exception handling method according to some embodiments of the present application;

[0028] FIG3 is a schematic flow chart of step S240 in FIG2 according to some embodiments of the present application;

[0029] FIG4 is a schematic flow chart of step S240 in FIG2 according to other embodiments of the present application;

[0030] FIG5 is a flow chart of an exception handling method according to other embodiments of the present application;

[0031] FIG6 is a schematic diagram of a specific flow chart of an exception handling method according to some embodiments of the present application. DETAILED DESCRIPTION

[0032] The following embodiments of the technical solution of the present application will be described in detail with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present application and are therefore only examples and are not intended to limit the scope of protection of the present application.

[0033] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which this application belongs; the terms used herein are only for the purpose of describing specific embodiments and are not intended to limit this application; the terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned figure descriptions are intended to cover non-exclusive inclusions.

[0034] In the description of the embodiments of this application, the technical terms "first" and "second" are used only to distinguish different objects and should not be understood to indicate or imply relative importance or implicitly specify the quantity, specific order, or primary and secondary relationship of the indicated technical features. In the description of the embodiments of this application, the meaning of "plurality" is more than two, unless otherwise clearly and specifically defined.

[0035] References herein to "embodiments" mean that a particular feature, structure, or characteristic described in connection with the embodiments may be included in at least one embodiment of the present application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor does it constitute an independent or alternative embodiment that is mutually exclusive of other embodiments. It is understood, both explicitly and implicitly, by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0036] In the description of the embodiments of this application, the term "and / or" is simply a description of the association relationship between associated objects, indicating that three relationships can exist. For example, A and / or B can represent the following three situations: A exists alone, A and B exist simultaneously, and B exists alone. In addition, the character " / " in this document generally indicates that the associated objects are in an "or" relationship.

[0037] In the description of the embodiments of the present application, the term "multiple" refers to more than two (including two). Similarly, "multiple groups" refers to more than two groups (including two groups), and "multiple pieces" refers to more than two pieces (including two pieces).

[0038] In the description of the embodiments of the present application, the technical terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise", "axial", "radial", "circumferential", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the embodiments of the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the embodiments of the present application.

[0039] In the description of the embodiments of the present application, unless otherwise expressly specified or limited, technical terms such as "installed," "connected," "connected," and "fixed" should be understood in a broad sense. For example, they can refer to fixed connections, detachable connections, or integration; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; internal connections between two components or interactions between two components. Those skilled in the art can understand the specific meanings of the above terms in the embodiments of the present application based on specific circumstances.

[0040] In traditional technology, when an overcurrent detection device experiences communication interruption, program failure, program bugs, CPU crashes, or abnormal crashes, data loss is likely to occur, and the fault will not automatically resolve. In this case, the converter station must be shut down, and manual intervention is required to restart or replace it. The energy storage valve control system has poor self-healing capabilities. Such anomalies in a single device can affect the commissioning and decommissioning of the entire converter station, causing significant economic impact and disrupting normal social production. The fundamental reason for single-device anomalies is a lack of in-depth consideration of the reliability and self-healing capabilities of individual devices. The inventors have discovered that by using a two-out-of-three protection device to perform real-time assessments of the overcurrent detection device and, if an anomaly occurs, remotely resetting and restarting the abnormal overcurrent detection device, this can resolve the inconvenience of requiring manual maintenance of the overcurrent detection device, solve the problem of power outages caused by single-device failures, enhance the self-healing capabilities of the secondary valve control system, enhance the level of intelligent operation and maintenance, and improve the operational reliability of the energy storage valve control system. This allows for self-processing and self-recovery of device issues without affecting system operation.

[0041] Therefore, the present application proposes a single-device reset mechanism for the overcurrent detection device of the new energy storage valve control system, which is suitable for the valve control system in the engineering integration application of AC / DC microgrid / distribution network technology and battery energy storage technology. The three-out-of-two protection device detects the data source and quality of the overcurrent detection device. If an abnormality is found in the detection, the two three-out-of-two protection devices communicate with each other, lock the abnormal overcurrent detection device, and perform a communication soft reset and restart on it. The abnormal overcurrent detection device is reloaded. If it returns to normal after reset, the reset count is cleared to 0. When the number of consecutive resets is equal to the preset threshold number, it will no longer be reset, and the alarm level will be adjusted to high, waiting for manual maintenance.

[0042] Please refer to Figure 1, which is an application environment diagram of the abnormality handling method according to some embodiments of the present application. Figure 1 shows a two-out-of-three redundant structure 100 as part of the energy storage valve control system. The two-out-of-three redundant structure 100 includes three overcurrent detection devices and two three-out-of-two protection devices. The three overcurrent detection devices operate in parallel, including a first overcurrent detection device 110, a second overcurrent detection device 120, and a third overcurrent detection device 130. The two three-out-of-two protection devices operate in parallel, including a first three-out-of-two protection device 140 and a second three-out-of-two protection device 150. Each of the two three-out-of-two protection devices performs a three-out-of-two vote on the overcurrent detection results output by the first overcurrent detection device 110, the second overcurrent detection device 120, and the third overcurrent detection device 130 and outputs the three-out-of-two vote result. It can be understood that the two-out-of-three redundant structure 100 can be regarded as including two two-out-of-three redundant structures, wherein the two-out-of-three redundant structure includes three overcurrent detection devices and one two-out-of-three protection device, and the two two-out-of-three redundant structures reuse the three overcurrent detection devices.

[0043] Compared to the traditional energy storage valve control system's independently configured two-out-of-three protection devices and the one-way data upload channels between each overcurrent detection device and its corresponding two-out-of-three protection device, this embodiment adds a communication control line and a data exchange line from the two-out-of-three protection device to the overcurrent detection device. The communication control line, represented by the one-way dashed arrow in Figure 1, controls the reset and restart of the overcurrent detection device. The data exchange line, represented by the two-way solid arrow in Figure 1, enables the overcurrent detection device to obtain the overcurrent protection setting and time limit from the two-out-of-three protection device and simultaneously uploads the protection action results and channel analog information to the two-out-of-three protection device. Communication connections between the two-out-of-three protection devices are also added to enable data sharing.

[0044] It can be understood that the first 2-out-of-3 protection device 140 and the second 2-out-of-3 protection device 150 are 2-out-of-3 protection devices having the same configuration and performing the same function, and they are named differently only for the convenience of description.

[0045] In some embodiments, as shown in FIG2 , an exception handling method is provided, which is illustrated by applying the method to the two-by-three two-out-of-redundancy structure 100 in the energy storage valve control system shown in FIG1 .

[0046] The method is performed by any one of the first two-out-of-three protection device 140 and the second two-out-of-three protection device 150 , and the method may include:

[0047] Step S210 , obtaining operating status information of each of the three overcurrent detection devices.

[0048] Specifically, the operating status information may include the communication status, communication data, protection judgment action status and maintenance status of the overcurrent detection device, among which the communication data may include the CT (Current Transformer, abbreviated as CT) current value message sent by the overcurrent detection device to the merging unit.

[0049] Step S220: Determine whether the acquired operating status information meets a preset abnormality determination condition.

[0050] Specifically, the preset abnormality determination conditions may include communication interruption, abnormal communication data quality, communication data loss, inconsistency between the protection judgment action and the other two, and inconsistent maintenance during the operation phase. Among them, when it is detected that the external communication status of the overcurrent detection device is interrupted or disconnected, it is determined that its communication is interrupted; the communication data quality is derived from the current quality and other information of the overcurrent detection device. When it is detected that the quality of the CT current value message sent by the merging unit received by the overcurrent detection device is abnormal or the link is lost, it is determined that its communication data quality is abnormal; when it is detected that the interval period between two consecutive current sampling points of the overcurrent detection device is greater than or equal to two message periods, it is determined that its communication data is lost; when it is detected that the action of a single overcurrent detection device is inconsistent with that of the other two overcurrent detection devices, it is determined that the protection judgment action of the single overcurrent detection device is inconsistent; when it is detected that the state of the maintenance pressure plate externally input to the overcurrent detection device is inconsistent with the maintenance mark of the message, it is determined that the maintenance during the operation phase is inconsistent.

[0051] When it is detected that the overcurrent detection device has any one or more of the above-mentioned communication interruption, abnormal communication data quality, communication data loss, inconsistent protection judgment action with the other two, inconsistent maintenance during the operation stage, etc., it can be determined that the overcurrent detection device has an abnormality.

[0052] Step S230, when the acquired operating status information satisfies the preset abnormality determination condition, the overcurrent detection device having the operating status information that satisfies the preset abnormality determination condition is determined as the overcurrent detection device of the first abnormality, and the first abnormality indication information indicating the identity and status of the overcurrent detection device of the first abnormality is sent to the other of the two three-out-of-two protection devices.

[0053] Specifically, the operating status information of each of the three overcurrent detection devices is detected, and the overcurrent detection device that meets the preset abnormality determination conditions is determined as the first abnormal overcurrent detection device. It can be understood that the number of first abnormal overcurrent detection devices can be one, two, or three.

[0054] When a 2-out-of-3 protection device detects an abnormal overcurrent detection device, it will block that overcurrent detection device and switch the current 2-out-of-3 logic state to a corresponding logic state based on the number of abnormal overcurrent detection devices. For example, if there is only one abnormal overcurrent detection device, the logic state switches to 1-out-of-2; if there are two abnormal overcurrent detection devices, the logic state switches to 1-out-of-1; if there are three abnormal overcurrent detection devices, all overcurrent detection devices are blocked. A blocked overcurrent detection device means that the 2-out-of-3 protection device does not make a decision based on the overcurrent detection results of the blocked overcurrent detection device.

[0055] In the energy storage valve control system, a protocol can be used to define the serial number status corresponding to the identities of the three overcurrent detection devices. Therefore, through a high-speed communication protocol with another two-out-of-three protection device, the serial number status indicating the identity of the overcurrent detection device indicating the first abnormality can be sent to the other two-out-of-three protection device, and the switched logic state can also be transmitted to and from the other two-out-of-three protection device.

[0056] Step S240: Based on the information interaction with the other of the two two-out-of-three protection devices, a reset command for resetting at least the first abnormal overcurrent detection device is sent to at least the first abnormal overcurrent detection device.

[0057] Specifically, the present two-out-of-three protection device can receive the serial number status of the abnormal overcurrent detection device detected by another two-out-of-three protection device, and then control all abnormal overcurrent detection devices to perform remote reset and restart based on the information interaction between the two.

[0058] It can be understood that the three-out-of-two protection device in the present application can not only trigger the reset and restart of the overcurrent detection device through a reset command, but also trigger the reset and restart of the overcurrent detection device through other control methods. For example, the overcurrent detection device can be triggered to reset and restart through an optical modulation signal. For example, an optical modulation signal with a bandwidth of 5MHz indicates reset and restart, and an optical modulation signal with a bandwidth of 50KHz indicates no reset and restart.

[0059] In addition, there are two ways to reset and restart the overcurrent detection device. One is soft reset and restart, that is, starting the watchdog through communication to trigger the restart, and then reloading and initializing the program; the other is to add a power control device and receive control commands through the power control device to perform power-off restart.

[0060] In this embodiment, the operating status information of the overcurrent detection device is detected by a three-out-of-two protection device. If an abnormality is detected, the two three-out-of-two devices communicate with each other, lock the abnormal overcurrent detection device, and any three-out-of-two protection device controls all abnormal overcurrent detection devices to reset and restart, thereby realizing self-processing and self-recovery of the faulty device and avoiding the inconvenience caused by manual maintenance.

[0061] In some embodiments, as shown in FIG3 , step S240 in FIG2 may include:

[0062] Step S310: receiving second abnormality indication information from the other of the two two-out-of-three protection devices.

[0063] Specifically, through the high-speed communication protocol between the two 2-out-of-3 protection devices, the 2-out-of-3 protection device can receive the second abnormality indication information of the other 2-out-of-3 protection device.

[0064] Step S320: When the second abnormal overcurrent detection device indicated by the second abnormal indication information is the same as the first abnormal overcurrent detection device, a reset command for resetting the first abnormal overcurrent detection device is sent to the first abnormal overcurrent detection device.

[0065] Specifically, the two-out-of-three protection device compares the serial number corresponding to the second abnormal overcurrent detection device indicated by the second abnormal indication information with the serial number corresponding to the first abnormal overcurrent detection device. When the serial number comparison result is the same, that is, the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to the same overcurrent detection device, the redundant two-out-of-three protection device is notified to suspend operation and send a reset command to the first abnormal overcurrent detection device or the second abnormal overcurrent detection device.

[0066] In some other embodiments, as shown in FIG4 , step S240 in FIG2 may include:

[0067] Step S410: receiving second abnormality indication information from the other of the two two-out-of-three protection devices.

[0068] Step S420: When the second abnormal overcurrent detection device indicated by the second abnormal indication information is different from the first abnormal overcurrent detection device, the second abnormal overcurrent detection device is locked.

[0069] Specifically, when the serial number comparison results are different, it can be considered that the first abnormal overcurrent detection device is completely different from the second abnormal overcurrent detection device. For example, the present two-out-of-three protection device finds that one of the three overcurrent detection devices is abnormal, while the other two-out-of-three protection device finds that another of the three overcurrent detection devices is abnormal. At this time, the present two-out-of-three protection device locks the other abnormal overcurrent detection device; it can also be considered that the first abnormal overcurrent detection device is not exactly the same as the second abnormal overcurrent detection device. For example, the present two-out-of-three protection device finds that the first overcurrent detection device 110 and the second overcurrent detection device 120 are abnormal, while the other two-out-of-three protection device finds that the first overcurrent detection device 110 and the third overcurrent detection device 130 are abnormal. At this time, the present two-out-of-three protection device locks the third overcurrent detection device 130.

[0070] It can be understood that the overcurrent detection device with the first abnormality indicated by the first abnormality indication information may be any one or more of the first overcurrent detection device 110, the second overcurrent detection device 120, and the third overcurrent detection device 130, and the overcurrent detection device with the second abnormality indicated by the second abnormality indication information may also be any one or more of the first overcurrent detection device 110, the second overcurrent detection device 120, and the third overcurrent detection device 130. Any two-out-of-three protection device can identify the overcurrent detection device with the abnormality based on the overcurrent detection devices indicated by the first abnormality indication information and the second abnormality indication information. For example, when the first abnormality indication information indicates that the first overcurrent detection device 110 is abnormal and the second abnormality indication information indicates that the third overcurrent detection device 130 is abnormal, the two-out-of-three protection device determines that the first overcurrent detection device 110 and the third overcurrent detection device 130 are abnormal. For example, when the first abnormality indication information indicates that the first overcurrent detection device 110 is abnormal and the second abnormality indication information indicates that the first overcurrent detection device 110 and the third overcurrent detection device 130 are abnormal, the two-out-of-three protection device determines that the first overcurrent detection device 110 and the third overcurrent detection device 130 are abnormal. It is understood that there are other combinations of abnormal devices indicated by the first abnormality indication information and the second abnormality indication information, which are not listed here.

[0071] Step S430: sending reset commands for resetting the first abnormal overcurrent detection device and the second abnormal overcurrent detection device to the first abnormal overcurrent detection device and the second abnormal overcurrent detection device respectively.

[0072] Specifically, when the present two-out-of-three protection device receives an overcurrent detection device indicating a second abnormality different from the first abnormal overcurrent detection device from the redundant two-out-of-three protection device, in addition to sending a reset command to the overcurrent detection device with the first abnormality detected by itself, it also sends a reset command to the overcurrent detection device with the second abnormality detected by the redundant two-out-of-three protection device.

[0073] In the above embodiment, after the two three-out-of-two protection devices exchange information about the abnormal device, any one of the three-out-of-two protection devices controls the reset and restart of the abnormal device. In the valve control system, the two three-out-of-two protection devices are redundant with each other, and the upper-layer device (such as the valve control unit) can make a judgment in real time based on the status sent by the two three-out-of-two protection devices, and send duty status information to one three-out-of-two protection device and send off-duty status information to the other three-out-of-two protection device. The two three-out-of-two protection devices can transmit duty information to each other, wherein the three-out-of-two protection device in the duty state is the host machine, and the three-out-of-two protection device in the off-duty state is the backup machine. In some specific examples, after the two three-out-of-two protection devices exchange information about the abnormal device, the reset and restart of the abnormal device can be controlled only by the three-out-of-two protection device in the duty state.

[0074] In some embodiments, after the two two-out-of-three protection devices exchange information about the abnormal device, both of the two two-out-of-three protection devices may send a reset command to ensure the reliability of the restart.

[0075] In some embodiments, when the present two-out-of-three protection device detects an abnormal overcurrent detection device and, after communicating with another two-out-of-three protection device, discovers that the other two-out-of-three protection device has not detected the abnormal overcurrent detection device, both two-out-of-three protection devices simultaneously block the abnormal overcurrent detection device and switch it to the corresponding logical state. Subsequently, any one of the two-out-of-three protection devices remotely resets and restarts the abnormal overcurrent detection device. This scenario typically occurs when an overcurrent detection device is in a borderline state, seemingly bad but not bad, and is controlled to reset and restart. For energy storage valve control systems, pre-processing overcurrent detection devices in this borderline state can improve the reliability of the overcurrent detection device.

[0076] In some embodiments, as shown in FIG5 , the method may further include:

[0077] Step S250: When the acquired operating status information meets the preset abnormality determination condition, an alarm message is issued.

[0078] Specifically, when an abnormal overcurrent detection device is detected, an alarm message is sent to the backend.

[0079] In step S260 , for each of the three over-current detection devices, the number of resets is counted.

[0080] Specifically, after the overcurrent detection device that controls the abnormality is reset for the first time, the waiting restart time of the three-out-of-two protection device is compared with the restart operation time of the abnormal overcurrent detection device, where the waiting restart time refers to the time from the issuance of the reset command by the three-out-of-two protection device to the completion of the restart of the abnormal overcurrent detection device, and the restart operation time refers to the time from the response of the abnormal overcurrent detection device to the normal operation of data sampling after restart.

[0081] When the wait-for-restart time is greater than the restart operating time, the two-out-of-three protection device checks whether the overcurrent detection device has returned to normal after the restart, that is, determines whether its operating status information meets the preset abnormality determination conditions. If it has not returned to normal, the abnormal overcurrent detection device is controlled to reset and restart again, and the number of resets is recorded as 2. Similarly, the number of consecutive resets is counted. If it returns to normal, the reset count is reset to zero.

[0082] Step S270: setting the level of the alarm information based on the counted number of resets, where the level of the alarm information indicates the severity of the abnormality.

[0083] Specifically, the severity of the abnormality can include minor and severe. When the severity of the abnormality is severe, it needs to be sent to the backend to apply for the energy storage valve control system to stop operation and wait for manual maintenance intervention.

[0084] In some embodiments, step S270: Based on the counted number of resets, setting the level of the alarm information may include: comparing the counted number of resets with a preset threshold number. In a specific example, the threshold number is preset to three times. When the counted number of resets is less than three times, the level of the alarm information is set to low, and the severity of the abnormality is correspondingly mild; when the counted number of resets is equal to three times, the level of the alarm information is set to high, and the severity of the abnormality is correspondingly severe. At this time, the abnormal overcurrent detection device is no longer controlled to be reset, but the level of the alarm information is sent to the background for manual intervention and maintenance.

[0085] In some embodiments, the present 2-out-of-3 protection device can further first determine the logical state transmitted between the two 2-out-of-3 protection devices, and then compare the sequence numbers corresponding to the abnormal devices indicated by the first abnormality indication information and the second abnormality indication information. For example, if both 2-out-of-3 protection devices switch to the 1-out-of-2 logical state, it indicates that each has detected an abnormality in one of the overcurrent detection devices, and the sequence numbers of the two abnormal devices are then compared. To further illustrate the technical solution of this embodiment, it is described below in conjunction with Figure 6.

[0086] The new energy storage valve control system is powered on and started, with three overcurrent detection devices and two three-out-of-two protection devices put into operation. The two three-out-of-two protection devices enable data sharing and initiate the overcurrent detection discrimination logic, determining whether the operating status information of each overcurrent detection device meets the preset abnormality determination conditions. At this time, the initialization reset count n is zero. When an abnormal overcurrent detection device is detected, the three-out-of-two protection device locks the abnormal device and switches the current three-out-of-two logic state to the corresponding logic state based on the number of abnormal devices. Furthermore, the two three-out-of-two protection devices transmit their logic states to each other, with either three-out-of-two protection device determining the logical state of both.

[0087] If both three-out-of-two protection devices switch to the two-out-of-one logic state, it means that the two three-out-of-two protection devices have each discovered that one overcurrent detection device is abnormal. Further, the serial numbers of the two abnormal devices are compared. If the two abnormal devices are the same overcurrent detection device, any one of the three-out-of-two protection devices or the two three-out-of-two protection devices will control the abnormal overcurrent detection device to reset and restart; if the two abnormal devices are different overcurrent detection devices, any one of the three-out-of-two protection devices will control the two abnormal devices to reset and restart, and at the same time notify the redundant three-out-of-two device to suspend operation.

[0088] If only one of the two three-out-of-two protection devices switches to the two-out-of-one logic state, it means that only one of the three-out-of-two protection devices has discovered that one overcurrent detection device has an abnormality. For example, the first three-out-of-two protection device 140 has discovered that the first overcurrent detection device 110 is abnormal, and the second three-out-of-two protection device 150 has not discovered any abnormal device. Further, the second three-out-of-two protection device 150 locks the first overcurrent detection device 110 and switches to the two-out-one logic state. Further, any one of the three-out-of-two protection devices or two three-out-of-two protection devices controls the abnormal overcurrent detection device to reset and restart.

[0089] In either case, the abnormal overcurrent detection device reloads the program and initializes after receiving the reset command until the data sampling runs normally. At this time, the three-out-of-two protection device that issues the reset command compares the waiting restart time and the restart operation time of the abnormal device. If the waiting restart time is greater than the restart operation time, the three-out-of-two protection device detects whether the abnormal device has returned to normal. If the abnormality is resolved, the reset times are cleared; if the abnormality is not resolved, repeat the above steps, and the reset times are increased by one. When the consecutive reset times are equal to the preset threshold times, the abnormal device will no longer be controlled to reset, and the alarm information level will be set to high. At the same time, it will be sent to the background to request the energy storage valve control system to stop operating and wait for manual maintenance intervention.

[0090] It should be understood that, although the various steps in the flowcharts involved in the various embodiments described above are displayed in sequence according to the instructions of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowcharts involved in the various embodiments described above can include multiple steps or multiple stages, and these steps or stages are not necessarily executed and completed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of steps or stages in other steps.

[0091] In some embodiments, the present application provides a two-out-of-three protection device. The two-out-of-three protection device includes a processor and a memory. The memory stores executable instructions. When the processor executes the executable instructions, the two-out-of-three protection device performs corresponding operations.

[0092] The following is an example of the application of the two-out-of-three protection device to the two-by-three-out-of-two redundant structure 100 in the energy storage valve control system shown in Figure 1. Further, taking the first two-out-of-three protection device 140 as an example, the first two-out-of-three protection device 140 is configured to: obtain operating status information of each of the three overcurrent detection devices; determine whether the obtained operating status information meets a preset abnormality determination condition; when the obtained operating status information meets the preset abnormality determination condition, determine the overcurrent detection device having the operating status information that meets the preset abnormality determination condition as the first abnormal overcurrent detection device, and send first abnormality indication information indicating the identity and status of the first abnormal overcurrent detection device to the second two-out-of-three protection device 150; and based on the information interaction with the second two-out-of-three protection device 150, send a reset command for resetting at least the first abnormal overcurrent detection device to at least the first abnormal overcurrent detection device.

[0093] In the embodiment of the present application, the first two-out-of-three protection device 140 is configured to judge the operating status information of the overcurrent detection device. When the operating status information meets the preset abnormality determination condition, a first abnormal overcurrent detection device is obtained, and the abnormal overcurrent detection device information is exchanged with the second two-out-of-three protection device 150, thereby remotely resetting all abnormal overcurrent detection devices, solving the inconvenience caused by the manual maintenance of abnormal overcurrent detection devices and improving the self-healing capability of the energy storage valve control system.

[0094] In some embodiments, the first two-out-of-three protection device 140 is further configured to: receive second abnormality indication information from the second two-out-of-three protection device 150; and when the second abnormal overcurrent detection device indicated by the second abnormality indication information is the same as the first abnormal overcurrent detection device, send a reset command for resetting the first abnormal overcurrent detection device to the first abnormal overcurrent detection device.

[0095] By configuring the three-out-of-two protection device to interact with the second three-out-of-two protection device 150, when the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to the same overcurrent detection device, the first abnormal overcurrent detection device or the second abnormal overcurrent detection device is controlled to be remotely reset and restarted, thereby realizing self-healing of the abnormal overcurrent detection device.

[0096] In some embodiments, the first two-out-of-three protection device 140 is further configured to: receive second abnormal indication information from the second two-out-of-three protection device 150; when the second abnormal overcurrent detection device indicated by the second abnormal indication information is different from the first abnormal overcurrent detection device, lock the second abnormal overcurrent detection device; and send reset commands for resetting the first abnormal overcurrent detection device and the second abnormal overcurrent detection device to the first abnormal overcurrent detection device and the second abnormal overcurrent detection device, respectively.

[0097] When the first abnormal overcurrent detection device and the second abnormal overcurrent detection device correspond to different overcurrent detection devices, the first three-out-of-two protection device 140 is configured to lock the second abnormal overcurrent detection device, and determine all abnormal overcurrent detection devices in combination with the first abnormal indication information and the second abnormal indication information, and then control all abnormal overcurrent detection devices to remotely reset and restart, thereby realizing self-healing of the abnormal overcurrent detection device.

[0098] In some embodiments, the first three-out-of-two protection device 140 is also configured to: issue an alarm message when the acquired operating status information meets a preset abnormality determination condition; count the number of resets for each of the three overcurrent detection devices; and set the level of the alarm message based on the counted number of resets, where the level of the alarm message indicates the severity of the abnormality.

[0099] In some embodiments, the first two-out-of-three protection device 140 is further configured to: compare the counted number of resets with a preset threshold number; when the counted number of resets is less than the preset threshold number, set the level of the alarm information to low; and when the counted number of resets is equal to the preset threshold number, set the level of the alarm information to high.

[0100] By configuring the first three-to-two device to count the number of resets of the abnormal overcurrent detection device, and then adjusting the level of the alarm information according to the number of resets, when the alarm level is high, the abnormal overcurrent detection device will no longer be reset and will be sent to the background for manual maintenance.

[0101] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0102] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiment methods can be implemented by dedicated circuits, or can be completed by instructing related hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, database or other media used in the embodiments provided in this application may include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory may include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in the various embodiments provided herein may include at least one of a relational database and a non-relational database. Non-relational databases may include, but are not limited to, distributed databases based on blockchains. The processor involved in the various embodiments provided herein may be, but are not limited to, a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic unit, a data processing logic unit based on quantum computing, and the like.

[0103] The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0104] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present application. It should be noted that a person of ordinary skill in the art may make various modifications and improvements without departing from the spirit of the present application, and these modifications and improvements fall within the scope of protection of the present application. Therefore, the scope of protection of the present application shall be determined by the appended claims.

Claims

1. An abnormality handling method, the method being applied to a two-out-of-three redundant structure in an energy storage valve control system, the two-out-of-three redundant structure comprising three overcurrent detection devices and two two-out-of-three protection devices, each of the two two-out-of-three protection devices performing a two-out-of-three voting on the overcurrent detection results output by the three overcurrent detection devices and outputting a two-out-of-three voting result, wherein: The two two-out-of-three protection devices are communicatively connected to each other, and the method is performed by any one of the two two-out-of-three protection devices, and the method includes: obtaining operating status information of each of the three overcurrent detection devices; Determining whether the acquired operating status information meets the preset abnormality determination conditions; When the acquired operating status information satisfies the preset abnormality determination condition, determining the overcurrent detection device having the operating status information satisfying the preset abnormality determination condition as the first abnormal overcurrent detection device, and sending first abnormality indication information indicating the identity and status of the first abnormal overcurrent detection device to the other of the two two-out-of-three protection devices; and Based on information interaction with the other of the two two-out-of-three protection devices, a reset command for resetting at least the first abnormal overcurrent detection device is sent to at least the first abnormal overcurrent detection device.

2. The method according to claim 1, characterized in that The sending, based on information interaction with the other of the two two-out-of-three protection devices, a reset command for resetting at least the first abnormal overcurrent detection device to at least the first abnormal overcurrent detection device comprises: receiving second abnormality indication information from the other of the two two-out-of-three protection devices; and When the second abnormal overcurrent detection device indicated by the second abnormality indication information is the same as the first abnormal overcurrent detection device, a reset command for resetting the first abnormal overcurrent detection device is sent to the first abnormal overcurrent detection device.

3. The method according to claim 1, characterized in that The sending, based on information interaction with the other of the two two-out-of-three protection devices, a reset command for resetting at least the first abnormal overcurrent detection device to at least the first abnormal overcurrent detection device comprises: receiving second abnormality indication information from the other of the two two-out-of-three protection devices; When the overcurrent detection device for the second abnormality indicated by the second abnormality indication information is different from the overcurrent detection device for the first abnormality, locking the overcurrent detection device for the second abnormality; and Reset commands for resetting the first abnormal overcurrent detection device and the second abnormal overcurrent detection device are sent to the first abnormal overcurrent detection device and the second abnormal overcurrent detection device, respectively.

4. The method according to any one of claims 1 to 3, characterized in that The method further comprises: When the acquired operating status information meets the preset abnormality determination condition, an alarm message is issued; For each of the three overcurrent detection devices, counting the number of resets; and The level of the alarm information is set based on the counted number of resets, where the level of the alarm information indicates the severity of the abnormality.

5. The method according to claim 4, characterized in that The setting of the level of the alarm information based on the counted number of resets includes: Comparing the counted number of resets with a preset threshold number; When the counted number of resets is less than the preset threshold number, setting the level of the alarm information to low; and When the counted number of resets is equal to the preset threshold number, the level of the alarm information is set to high.

6. A two-out-of-three protection device, which, together with another two-out-of-three protection device and three overcurrent detection devices, forms a two-by-three-out-of-two redundant structure in an energy storage valve control system, wherein the two-out-of-three protection device is configured to perform a two-out-of-three vote on the overcurrent detection results output by the three overcurrent detection devices and output the two-out-of-three voting result, wherein: The two-out-of-three protection device is communicatively connected to the other two-out-of-three protection device, and the two-out-of-three protection device is further configured as: obtaining operating status information of each of the three overcurrent detection devices; Determining whether the acquired operating status information meets the preset abnormality determination conditions; When the acquired operating status information satisfies the preset abnormality determination condition, determining the overcurrent detection device having the operating status information satisfying the preset abnormality determination condition as the first abnormal overcurrent detection device, and sending first abnormality indication information indicating the identity and status of the first abnormal overcurrent detection device to the other two-out-of-three protection device; as well as Based on information interaction with the other two-out-of-three protection device, a reset command for resetting at least the first abnormal overcurrent detection device is sent to at least the first abnormal overcurrent detection device.

7. The two-out-of-three protection device according to claim 6, characterized in that: The two-out-of-three protection device is further configured as follows: receiving second abnormal indication information from the other two-out-of-three protection device; and When the second abnormal overcurrent detection device indicated by the second abnormality indication information is the same as the first abnormal overcurrent detection device, a reset command for resetting the first abnormal overcurrent detection device is sent to the first abnormal overcurrent detection device.

8. The two-out-of-three protection device according to claim 6, characterized in that: The two-out-of-three protection device is further configured as follows: receiving second abnormal indication information from the other two-out-of-three protection device; When the overcurrent detection device of the second abnormality indicated by the second abnormality indication information is different from the overcurrent detection device of the first abnormality, locking the overcurrent detection device of the second abnormality; as well as Reset commands for resetting the first abnormal overcurrent detection device and the second abnormal overcurrent detection device are sent to the first abnormal overcurrent detection device and the second abnormal overcurrent detection device, respectively.

9. The two-out-of-three protection device according to any one of claims 6 to 8, characterized in that: The two-out-of-three protection device is further configured as follows: When the acquired operating status information meets the preset abnormality determination condition, an alarm message is issued; For each of the three overcurrent detection devices, counting the number of resets; as well as The level of the alarm information is set based on the counted number of resets, where the level of the alarm information indicates the severity of the abnormality.

10. The device according to claim 9, characterized in that The two-out-of-three protection device is further configured as follows: Comparing the counted number of resets with a preset threshold number; When the counted number of resets is less than the preset threshold number, setting the level of the alarm information to low; as well as When the counted number of resets is equal to the preset threshold number, the level of the alarm information is set to high.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented.

Images