Energy storage system, safety management method of energy storage system and control system

Abstract

The invention relates to an energy storage system, a safety management method of the energy storage system and a control system. The energy storage system comprises: a plurality of energy storage units; and the energy storage controller is configured to communicate with the plurality of energy storage units, receive the abnormal signals of the plurality of energy storage units and send the abnormal signals to an external control unit. The plurality of energy storage units are further configured to be capable of sending abnormal signals to an external control unit. According to the energy storage system, the safety management method of the energy storage system and the control system, redundant alarm and protection functions can be provided, preferably, each energy storage module can be independently monitored and controlled, abnormal signals can be sent as early as possible to start the alarm and protection functions, and the safety of the energy storage system is improved. And when the energy storage modules of part of the energy storage units in the plurality of energy storage units are abnormal, only the circuit of the abnormal energy storage module needs to be cut off, and sudden power failure of the whole energy storage system cannot be caused.

Description

Technical Field

[0001] The present invention relates to an energy storage system, and more particularly, to an energy storage system and a safety management method thereof and a related control system. Background Art

[0002] The contents in this section merely provide background information related to the present invention and may not constitute prior art.

[0003] Energy storage systems are widely used in various fields. For example, in the aviation field, energy storage systems are widely used in hybrid helicopters, commercial aircraft, electric vertical take-off and landing aircraft, etc. Compared with the application of energy storage systems in other technical fields (for example, ground application fields, such as vehicles), the aviation field has higher requirements for the safety of energy storage systems. In existing energy storage systems, the safety management system of energy storage systems (including fuel cells, power batteries, supercapacitors, etc.) usually adopts a central energy storage controller to monitor, balance and control all energy storage units, and all signals are processed by the central energy storage controller. This management system has long communication lines, long processing time and delays. In addition, in this existing energy storage system, only one signal circuit is connected to the external central control unit, and there is no redundant alarm and protection function. Once the central energy storage controller fails, it is not possible to send an alarm signal to the outside in time, so the corresponding protection mechanism cannot be triggered. On the other hand, if another backup energy storage system is set up to provide redundant alarms and protection functions, it will increase the weight unfavorably and adversely affect the energy density and endurance (for example, driving distance or flight distance).

[0004] In addition, in existing energy storage systems, once an abnormal signal is detected, the central energy storage controller will cut off the high-voltage circuit of the entire energy storage system to avoid serious dangerous conditions. However, sudden power outages may cause secondary safety hazards, especially in aviation applications, where sudden power outages of energy storage systems are usually not allowed.

[0005] Therefore, improving the safety of energy storage systems and improving the safety management of energy storage systems are the improvement directions of energy storage systems. Summary of the invention

[0006] One object of the present invention is to provide an energy storage system that can provide redundant alarm and protection functions to improve the safety of the energy storage system. Another object of the present invention is to improve the safety management of the energy storage system, to individually control each energy storage module of the energy storage system, and to avoid cutting off the power supply of the entire energy storage system when an abnormality occurs in a certain energy storage module of the energy storage system. Another object of the present invention is to provide an early warning of abnormalities in the energy storage system.

[0007] One aspect of the present invention is to provide an energy storage system, comprising: a plurality of energy storage units; an energy storage controller, the energy storage controller being configured to communicate with the plurality of energy storage units and receive abnormal signals of the plurality of energy storage units, and send the abnormal signals to an external control unit. The plurality of energy storage units are also configured to be able to send abnormal signals to the external control unit.

[0008] The energy storage system according to the present invention can provide redundant alarm and protection functions. Even when the energy storage controller fails, the abnormal signal of the energy storage system can be sent to the external control unit to activate the alarm and corresponding protection functions. Therefore, there is no need to set up another backup energy storage system separately, thereby avoiding the problems of weight increase and impact on endurance (for example, driving distance or flight distance) caused by setting up another energy storage system.

[0009] Each energy storage unit includes: an energy storage module; a module distributor, the energy storage distributor is configured to connect or disconnect the circuit connection of the energy storage module; and a module controller, the module controller includes: a signal acquisition port, the signal acquisition port is configured to receive detection parameters of the energy storage module; a microprocessor, the microprocessor is configured to: receive the detection parameters from the signal acquisition port to monitor the status of the energy storage module, and when an abnormality of the energy storage module is detected, send an abnormal signal to the energy storage controller and the external control unit, and send a control signal to the module distributor to disconnect the circuit connection of the energy storage module.

[0010] In one embodiment, the module controller is configured to send an abnormal signal to an external control unit when failure of the energy storage controller is detected.

[0011] In one embodiment, the energy storage modules of the multiple energy storage units are connected in parallel with each other, and the module distributor includes a first high-voltage contactor and a second high-voltage contactor respectively connected to the positive and negative poles of the energy storage modules. When the module distributor of an energy storage unit receives a control signal, the first high-voltage contactor and the second high-voltage contactor of the energy storage unit are disconnected to disconnect the circuit connection of the energy storage module of the energy storage unit. Thus, active protection of parallel energy storage units is provided.

[0012] In one embodiment, the energy storage modules of the multiple energy storage units are connected in series with each other, and the module distributor includes a first high-voltage contactor and a second high-voltage contactor respectively connected to the positive and negative poles of the energy storage modules, and the module distributor also includes a third high-voltage contactor, and the third high-voltage contactor is configured to: when the first high-voltage contactor and the second high-voltage contactor are closed, the third high-voltage contactor is disconnected. When the module distributor of an energy storage unit receives a control signal, the first high-voltage contactor and the second high-voltage contactor of the energy storage unit are disconnected, and the third high-voltage contactor of the energy storage unit is closed to disconnect the circuit connection of the energy storage module of the energy storage unit and form a path for the energy storage modules of other energy storage units. Thus, active protection of energy storage units connected in series is provided.

[0013] Therefore, the energy storage system according to the present invention can monitor and control each energy storage module individually. Once an abnormality is detected in a certain energy storage module, a signal of the abnormality of the energy storage module can be sent to an external control unit, which can trigger an alarm and protection function as early as possible. In addition, only the circuit of the energy storage module with the abnormality can be powered off without causing a sudden power outage of the entire energy storage system.

[0014] The module distributor also includes a first fuse and a second fuse respectively connected to the positive and negative electrodes of the energy storage module. When the current in the energy storage module is too large, the first fuse and the second fuse are blown to disconnect the circuit connection of the energy storage module. Thus, passive protection of each energy storage module can be provided.

[0015] The energy storage module is a fuel cell, a power battery or a supercapacitor.

[0016] Preferably, the detection parameters include voltage, current, temperature and strain.

[0017] In one embodiment, an energy storage module includes a plurality of battery cells, each of which has a flexible sensor strip embedded therein to detect temperature and strain.

[0018] In one embodiment, the energy storage system is an aviation energy storage system.

[0019] Another aspect of the present invention is to provide a safety management method for an energy storage system, the energy storage system comprising a plurality of energy storage modules and an energy storage controller. The safety management method comprises: monitoring the status of the plurality of energy storage modules; when an abnormality of the plurality of energy storage modules is detected, sending an abnormality signal to the energy storage controller, and sending the abnormality signal to an external control unit through the energy storage controller. The safety management method also comprises directly sending an abnormality signal to the external control unit.

[0020] In one embodiment, monitoring the status of the multiple energy storage modules includes: obtaining detection parameters of each energy storage module and determining the status of each energy storage module. The safety management method also includes: after sending an abnormal signal, cutting off the circuit connection of the energy storage module with abnormality among the multiple energy storage modules.

[0021] In one embodiment, the energy storage module includes a plurality of battery cells, and the safety management method includes obtaining a detection parameter of each of the plurality of battery cells.

[0022] In one embodiment, the detection parameters include voltage, current, temperature, and strain.

[0023] In one embodiment, when the energy storage controller fails, an abnormal signal is directly sent to the external control unit.

[0024] In one embodiment, the energy storage system is an aviation energy storage system.

[0025] Another aspect of the present invention is to provide a control system, which includes a central control system and an energy storage system according to the present invention. The central control system is an external control unit configured to receive an abnormal signal and activate an alarm and a corresponding protection device according to the abnormal signal.

[0026] The present invention provides an improved energy storage system, a safety management method for an energy storage system, and a control system, which can provide redundant alarms and protection functions, and can monitor and control each energy storage module individually, and monitor the status of each energy storage unit in each energy storage module. Therefore, an abnormal signal can be sent as early as possible to start the alarm and protection functions earlier, and when an abnormality occurs in the energy storage module of some energy storage units among multiple energy storage units, only the circuit of the abnormal energy storage module needs to be cut off, without cutting off the circuit of all energy storage modules, so that the entire energy storage system will not be suddenly powered off, and thus the adverse effects caused by the sudden power outage of the energy storage system are avoided. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Embodiments of the present invention will be described below by way of example only with reference to the accompanying drawings. In the accompanying drawings, the same features or components are indicated by the same reference numerals, and the drawings are not necessarily drawn to scale, and in the accompanying drawings:

[0028] Figure 1 A schematic diagram of an energy storage system according to an embodiment of the present invention is shown;

[0029] Figure 2 Shows Figure 1 The circuit diagram of the energy storage system shown in;

[0030] Figure 3A schematic diagram showing an energy storage unit of an energy storage system;

[0031] Figure 4 A schematic diagram showing a module controller of an energy storage unit monitoring the state of an energy storage module;

[0032] Figure 5 A schematic diagram showing an internal connection of an energy storage unit;

[0033] Figure 6 A schematic diagram showing another internal connection of an energy storage unit;

[0034] Figure 7 A schematic diagram showing a control system according to an embodiment of the present invention; and

[0035] Figure 8 The signal flow diagram of the abnormal signal of the energy storage system in the control system is shown. DETAILED DESCRIPTION

[0036] The following description is merely exemplary in nature and is not intended to limit the present invention and its application and use. It should be understood that in all of these drawings, similar reference numerals indicate the same or similar parts and features. The various drawings only schematically represent the concepts and principles of the embodiments of the present invention, and do not necessarily show the specific dimensions and proportions of the various embodiments of the present invention. Specific parts in specific drawings may be exaggerated to illustrate the relevant details or structures of the embodiments of the present invention.

[0037] Figure 1 A schematic diagram of an energy storage system according to an embodiment of the present invention is shown. Figure 2 The energy storage system 1 includes a plurality of energy storage units, an energy storage controller 20 and an energy distribution unit 30. The energy storage system 1 may be an aviation energy storage system, or a vehicle energy storage system, or an energy storage system in other applications. Figure 1Four energy storage units are shown, namely, a first energy storage unit 11, a second energy storage unit 12, a third energy storage unit 13, and a fourth energy storage unit 14. The first energy storage unit 11, the second energy storage unit 12, the third energy storage unit 13, and the fourth energy storage unit 14 are connected in series with each other through a bus bar 120. However, the present invention is not limited thereto, and the energy storage system 1 may also include more or fewer energy storage units, and each energy storage unit may also be connected in parallel as required. The first energy storage unit 11 sends a status signal of the first energy storage unit 11 to the energy storage controller 20 through line L11, the second energy storage unit 12 sends a status signal of the second energy storage unit 12 to the energy storage controller 20 through line L21, the third energy storage unit 13 sends a status signal of the third energy storage unit 13 to the energy storage controller 20 through line L31, and the fourth energy storage unit 14 sends a status signal of the fourth energy storage unit 14 to the energy storage controller 20 through line L41. The energy storage controller 20 is used to monitor and manage each energy storage unit, and is configured to communicate with each energy storage unit and receive status signals of each energy storage unit, including status abnormality signals. Once the energy storage controller 20 receives the status abnormality signals of each energy storage unit, the energy storage controller 20 sends the signal that the energy storage module is abnormal to an external control unit, such as the central control system of an aircraft or vehicle, to trigger an alarm device and start a corresponding protection mechanism. In addition, the energy storage controller 20 can also monitor the gas in the entire energy storage system through the gas sensor S, for example, the CO and CH 4 , C 3 H 8 Once the gas content is detected to exceed a predetermined range, the gas sensor S sends an abnormal signal to the energy storage controller 20 .

[0038] In addition, the first energy storage unit 11, the second energy storage unit 12, the third energy storage unit 13, and the fourth energy storage unit 14 are also configured to send abnormal signals to the external control unit through lines L12, L22, L32, and L42, respectively, when the state of each energy storage unit is detected to be abnormal. For example, when the energy storage controller 20 fails, the first energy storage unit 11 can send its abnormal signal to the external control unit through line L12, and can still trigger the alarm device and start the corresponding protection measures. Therefore, this design provides a redundant alarm and protection function without the need to set up another backup battery system to provide such redundant alarm and protection functions, thereby avoiding the problems of increased weight and impact on battery life caused by setting up a backup battery system.

[0039] The first energy storage unit 11, the second energy storage unit 12, the third energy storage unit 13, and the fourth energy storage unit 14 have the same structure. The structure of each energy storage unit will be described below by taking the second energy storage unit 12 as an example.

[0040] The second energy storage unit 12 includes an energy storage module 121, a module distributor MDU2 and a module controller MCU2. The energy storage module 121 may be a fuel cell, a power battery or a supercapacitor, and may include multiple energy storage units (eg, multiple battery units). Figure 2 The energy storage module 121 schematically shows that it includes ten battery cells, namely, battery cell 2-1, battery cell 2-2, battery cell 2-3, battery cell 2-4, ... battery cell 2-7, battery cell 2-8, battery cell 2-9 and battery cell 2-10. However, it is obvious that the energy storage module 121 may include more or fewer battery cells or other energy storage units.

[0041] Figure 3 A schematic diagram of the connection (connected via SPI or bus) between the module controller MCU2, the module distributor MDU2 and the energy storage module 121 is shown. The module controller MCU2 is used to monitor the state of the energy storage module 121, and send the state of the energy storage module 121 to the energy storage controller 20 via line L21. The module distributor MDU2 is used to connect the energy storage module 121 to the energy distribution unit 30 of the energy storage system 1 at high voltage, and is configured to be able to connect or disconnect the circuit connection of the energy storage module 121, and can provide active protection and passive protection. The module distributor MDU2 includes four connection ports 31, 32, 33, and 34. Among them, ports 31 and 32 are used to connect to the energy storage module 121. Ports 33 and 34 are used to connect to the corresponding ports of the adjacent module distributor to connect the energy storage module 121 to the energy storage modules in other energy storage units.

[0042] like Figure 3 As shown, the module controller MCU2 includes a signal acquisition port 21 , a microprocessor 22 and a memory 23 . Figure 4 The flowchart of the module controller MCU2 monitoring the state of the energy storage module 121 is shown. The signal acquisition port 21 is configured to collect the detection parameters of the energy storage module 111 and send them to the microprocessor 22. The signal acquisition port 21 collects the detection parameters of all energy storage units (e.g., battery cells 2-1 to battery cells 2-10) in the energy storage module 121, including voltage, current, temperature and strain. The voltage and current can be measured by the Hall voltage sensor 130 (only in Figure 1 Preferably, the detection parameters of all battery cells 2-1 to 2-10 are measured in real time. And more preferably, each battery cell in the energy storage module 121 is embedded with a sensor for measuring its parameters, for example, a flexible sensor belt 150 for measuring temperature and strain (only in Figure 1), to detect the temperature and strain of each battery cell. Preferably, the flexible sensor strip 150 is a FBG sensor strip. The strain state within the battery cell can generally reflect the state of the physicochemical reaction inside the battery cell. Before a battery cell fails, gas and / or heat are often generated, resulting in an abnormal increase in strain. Therefore, by measuring the strain of each battery cell, the state of the physicochemical reaction inside the battery cell can be detected, which is conducive to the early identification of the failure of a single battery cell in the energy storage module, thereby providing an early warning of abnormalities of the battery cell and the energy storage module in which it is located. The measured current, voltage, temperature and strain are transmitted to the flexible printed circuit 140 (only in Figure 1 ), and sent to the signal acquisition port 21 of the module controller MCU2 through line 123.

[0043] The microprocessor 22 receives the detection parameters of the energy storage module 121 from the signal acquisition port 21, and calls the data judgment rules of each parameter item stored in the memory 23, thereby judging the state of the energy storage module 121, and sending the real-time state information to the energy storage controller 20 via the line L21 in a predefined format, and then sending it to the external control unit through the energy storage controller 20. For example, it is judged whether the received voltage, current, temperature and strain exceed the corresponding threshold range. For example, when the voltage exceeds the threshold range (for example, higher than 4.25V or lower than 2.45V), or the current exceeds the threshold range, or when the temperature exceeds the threshold range (for example, more than 60°C), or when the strain exceeds the threshold range (for example, more than 10%), the microprocessor 22 determines that the battery cell is abnormal, and then judges that the energy storage module 121 is abnormal. When it is judged that an abnormality occurs in the energy storage module 121, the microprocessor 22 sends the abnormal signal to the energy storage controller 20 via the line L21, and sends it to the external control unit via the energy storage controller 20 to trigger an alarm and start the corresponding protection mechanism. In addition, the microprocessor 22 can also communicate with the external control unit and send an abnormal signal to the external control unit through line L22, thereby providing redundant alarm and protection functions. After sending the abnormal signal, the microprocessor 22 also sends a control signal to the module distributor MDU2 through line L24 to disconnect the circuit connection of the energy storage module 121.

[0044] Figure 5 FIG. 2 shows a schematic diagram of an internal connection of the module distributor MDU2, which is used when adjacent energy storage modules are connected in series. Figure 5As shown, a fuse (fuse) FU1 and a first high-voltage contactor Q1 are connected between port 31 and port 33 of the module distributor MDU2, and a fuse (fuse) FU2 and a second high-voltage contactor Q2 are connected between port 32 and port 34 of the module distributor MDU2. A third high-voltage contactor Q3 is also provided between port 33 and port 34. When the energy storage module 121 is in a normal state, the first high-voltage contactor Q1 and the second high-voltage contactor Q2 are connected, and the third high-voltage contactor Q3 is disconnected, and the energy storage module 121 is connected to the high-voltage circuit of the energy storage system 1, and is connected in series with the energy storage modules of other energy storage units.

[0045] When an abnormally large current is generated inside the energy storage module 121, for example, when the current inside the energy storage module 121 exceeds the current threshold, fuse FU1 and fuse FU2 are directly blown, thereby cutting off the power to the energy storage module 121 and disconnecting the abnormal energy storage module 121 from the main high-voltage circuit of the energy storage system 1, thereby providing passive protection.

[0046] When the microprocessor 22 of the module controller MCU2 sends an abnormal signal and sends a control signal to the module distributor MDU2, the first high-voltage contactor Q1 and the second high-voltage contactor Q2 of the module distributor MDU2 are disconnected, and the third high-voltage contactor Q3 is connected, thereby achieving power failure of the circuit of the energy storage module 121, disconnecting the abnormal energy storage module 121 from the main high-voltage circuit, thereby providing active protection, and forming a path for the energy storage modules of other energy storage units to ensure the normal operation of other energy storage modules.

[0047] Figure 6 FIG. 2 shows another schematic diagram of the internal connection of the module distributor MDU2, which is used when adjacent energy storage modules are connected in parallel. Figure 6 As shown, the internal connection of the module distributor MDU2 for parallel connection is substantially the same as the internal connection of the module distributor for series connection, except that the third high-voltage contactor Q3 is not provided.

[0048] When the energy storage module 121 is in a normal state, the first high-voltage contactor Q1 and the second high-voltage contactor Q2 are turned on, and the energy storage module 121 is connected to the main high-voltage circuit of the energy storage system 1, and is connected in parallel with the energy storage modules of other energy storage units. When an abnormally large current is generated inside the energy storage module 121, the fuse FU1 and the fuse FU2 are directly blown, thereby powering off the energy storage module 121, disconnecting the abnormal energy storage module 121 from the main high-voltage circuit of the energy storage system 1, thereby providing passive protection. When the microprocessor 22 of the module controller MCU2 sends an abnormal signal and sends a control signal to the module distributor MDU2, the first high-voltage contactor Q1 and the second high-voltage contactor Q2 of the module distributor MDU2 are disconnected, disconnecting the abnormal energy storage module 121 from the main high-voltage circuit, and providing active protection.

[0049] The above description about the second energy storage unit 12 is also applicable to the first energy storage unit 11, the third energy storage unit 13, and the fourth energy storage unit 14. Figure 2 As shown, the first energy storage unit 11 includes an energy storage module 111, a module distributor MDU1, and a module controller MCU1. The third energy storage unit 13 includes an energy storage module 131, a module distributor MDU3, and a module controller MCU3. The fourth energy storage unit 14 includes an energy storage module 141, a module distributor MDU4, and a module controller MCU4.

[0050] During operation, the module controller MCU1 of the first energy storage unit 11, the module controller MCU2 of the second energy storage unit 12, the module controller MCU3 of the third energy storage unit 13, and the module controller MCU4 of the fourth energy storage unit 14 communicate with the energy storage controller 20 through lines L11, L21, L31, and L41, respectively, and send the status information of the energy storage module 111, the energy storage module 121, the energy storage module 131, and the energy storage module 141, respectively, and can send the abnormal signal of each energy storage module to the energy storage controller 20, and can also send it to the external control unit through lines L12, L22, L32, and L42, respectively, so that the alarm can be triggered as soon as possible. In addition, when any one of the energy storage modules 111, the energy storage modules 121, the energy storage modules 131, and the energy storage modules 141 is abnormal, only the circuit of the abnormal energy storage module is cut off. For example, when an abnormality occurs in the energy storage module 121, the module controller MCU2 cuts off the circuit connection of the abnormal energy storage module 121, while the energy storage modules 111, 131, and 141 operate normally. Therefore, the energy storage system 1 can realize separate monitoring and control of each energy storage module. When an abnormality occurs in the energy storage module of some energy storage units among multiple energy storage units, it is only necessary to cut off the circuit of the abnormal energy storage module without cutting off the circuit of all energy storage modules, so as not to cause a sudden power failure of the entire energy storage system, and thus avoid the adverse effects caused by the sudden power failure of the energy storage system.

[0051] Figure 7 A schematic diagram of a control system according to the present invention is shown. The control system includes an energy storage system 1 and a central control system 2. The control system may be, for example, an aviation control system, a vehicle control system, or a control system in other applications. The energy storage controller 20 of the energy storage system 1 and the module controllers (MCU1, MCU2, MCU3, MCU4) of each energy storage unit may communicate with the central control system 2 and send status signals of each energy storage module. The central control system 2 is equivalent to the above-mentioned external control unit.

[0052] Figure 8 The signal flow diagram of the control system in handling abnormal conditions of the energy storage system is shown. Figure 8 As shown, the module controller MCU1 of the first energy storage unit 11, the module controller MCU2 of the second energy storage unit 12, the module controller MCU3 of the third energy storage unit 13, and the module controller MCU4 of the fourth energy storage unit 14 of the energy storage system 1 can send abnormal signals of each energy storage module to the energy storage controller 20, and can be sent to an external control unit, that is, the central control system 2. In the example shown in the figure, the module controller MCU1, the module controller MCU2, the module controller MCU3, and the module controller MCU4 send abnormal signals to the central control system 2 when determining that the energy storage controller 20 fails due to a fault. When the module controller MCU1, the module controller MCU2, the module controller MCU3, and the module controller MCU4 send an abnormal signal to the energy storage controller 20, when the abnormal signal sent is correctly received by the energy storage controller 20, the module controller MCU1, the module controller MCU2, the module controller MCU3, and the module controller MCU4 will receive a feedback signal, and when the energy storage controller 20 fails, the module controller MCU1, the module controller MCU2, the module controller MCU3, and the module controller MCU4 will not receive a feedback signal. Therefore, if no feedback signal is received after sending an abnormal signal, the module controller MCU1, the module controller MCU2, the module controller MCU3, and the module controller MCU4 can determine that the energy storage controller 20 has failed, and therefore, send the abnormal signal to the external control unit, that is, the central control system 2. However, it should be noted that the present invention is not limited to this. Module controller MCU1, module controller MCU2, module controller MCU3, and module controller MCU4 may also send abnormal signals to both the energy storage controller 20 and the central control system 2 at the same time, instead of sending abnormal signals to the central control system 2 only when the energy storage controller 20 fails.

[0053] In addition, when the gas in the entire energy storage system (for example, CO, CH 4 , C 3 H 8 ) exceeds a predetermined range, the gas sensor S sends an abnormal signal to the energy storage controller 20.

[0054] When the energy storage controller 20 receives an abnormal signal from module controller MCU1, module controller MCU2, module controller MCU3, module controller MCU4 and / or receives a signal indicating abnormal gas content in the energy storage system from the gas sensor S, the energy storage controller 20 sends the abnormal signal to the central control system 2.

[0055] The central control system 2 classifies and determines the risk level of the received abnormal signal, and activates the corresponding alarm and protection mechanism. For example, when it is determined that the received abnormal signal is at a high risk level, the central control system 2 will activate a high-risk alarm, and take necessary protection mechanisms, and activate the protection device, for example, starting the cooling pump for forced cooling. When it is determined that the received abnormal signal is at a medium risk level, the central control system 2 will activate a medium risk alarm and take corresponding restrictions on the power application of the system. For example, the central control system 2 will control the power consumption of the external device, and the energy distribution unit 30 will adapt the output power of each energy storage unit accordingly. When it is determined that the received abnormal signal is at a low risk level, the central control system 2 will only activate a low risk alarm.

[0056] Here, exemplary embodiments of the energy storage system, the safety management method of the energy storage system, and the control system of the present invention have been described in detail in conjunction with the accompanying drawings, but it should be understood that the present invention is not limited to the specific embodiments described and shown in detail above. Without departing from the spirit and scope of the present invention, those skilled in the art can make various modifications and variations to the present invention. All these modifications and variations fall within the scope of the present invention. Moreover, all components described herein can be replaced by other technically equivalent components.

Claims

1. An energy storage system, include: Multiple energy storage units; an energy storage controller configured to communicate with the plurality of energy storage units and receive abnormal signals of the plurality of energy storage units, and send the abnormal signals to an external control unit; It is characterized in that the multiple energy storage units are also configured to be able to send the abnormal signal to the external control unit.

2. The energy storage system according to claim 1, in, Each energy storage unit includes: Energy storage module; a module distributor, the energy storage distributor being configured to connect or disconnect the circuit connection of the energy storage module; and A module controller, the module controller comprising: A signal acquisition port, wherein the signal acquisition port is configured to receive detection parameters of the energy storage module; A microprocessor, wherein the microprocessor is configured to: receive the detection parameters from the signal acquisition port to monitor the state of the energy storage module, and when an abnormality of the energy storage module is detected, send the abnormal signal to the energy storage controller and the external control unit, and send a control signal to the module distributor to disconnect the circuit connection of the energy storage module.

3. The energy storage system according to claim 2, in, The module controller is configured to send the abnormal signal to the external control unit when it is detected that the energy storage controller fails.

4. The energy storage system according to claim 2, in, The energy storage modules of the plurality of energy storage units are connected in parallel with each other, and the module distributor comprises a first high-voltage contactor and a second high-voltage contactor respectively connected to the positive and negative electrodes of the energy storage modules; When the module distributor of an energy storage unit receives the control signal, the first high-voltage contactor and the second high-voltage contactor of the energy storage unit are disconnected to disconnect the circuit connection of the energy storage module of the energy storage unit.

5. The energy storage system according to claim 2, in, The energy storage modules of the plurality of energy storage units are connected in series with each other, the module distributor comprises a first high-voltage contactor and a second high-voltage contactor respectively connected to the positive and negative electrodes of the energy storage modules, and the module distributor further comprises a third high-voltage contactor, the third high-voltage contactor being configured such that: when the first high-voltage contactor and the second high-voltage contactor are closed, the third high-voltage contactor is disconnected; as well as In which, when the module distributor of an energy storage unit receives the control signal, the first high-voltage contactor and the second high-voltage contactor of the energy storage unit are disconnected, and the third high-voltage contactor of the energy storage unit is closed to disconnect the circuit connection of the energy storage module of the energy storage unit and form a passage for the energy storage modules of other energy storage units.

6. The energy storage system according to claim 4 or 5, in, The module distributor also includes a first fuse and a second fuse respectively connected to the positive and negative electrodes of the energy storage module; When the current in the energy storage module is too large, the first fuse and the second fuse blow to disconnect the circuit connection of the energy storage module.

7. The energy storage system according to any one of claims 2 to 5, in, The energy storage module is a fuel cell, a power battery or a supercapacitor.

8. The energy storage system according to any one of claims 2 to 5, in, The detection parameters include voltage, current, temperature and strain.

9. The energy storage system according to any one of claims 2 to 5, in, The energy storage module includes a plurality of battery cells, and a flexible sensor strip is embedded inside each of the plurality of battery cells to detect temperature and strain.

10. The energy storage system according to any one of claims 2 to 5, in, The energy storage system is an aviation energy storage system.

11. A safety management method for an energy storage system, the energy storage system comprising a plurality of energy storage modules and an energy storage controller, the safety management method include: Monitoring the status of the multiple energy storage modules; When an abnormality of the plurality of energy storage modules is detected, an abnormality signal is sent to the energy storage controller, and the abnormality signal is sent to an external control unit through the energy storage controller. Characterized in that the safety management method also includes directly sending the abnormal signal to the external control unit.

12. The method for safety management of an energy storage system according to claim 11, in, Monitoring the status of the plurality of energy storage modules includes: acquiring detection parameters of each energy storage module, and determining the status of each energy storage module; Wherein, the safety management method further includes: after sending the abnormal signal, cutting off the circuit connection of the energy storage module having the abnormality among the multiple energy storage modules.

13. The method for safety management of an energy storage system according to claim 11, in, The energy storage module includes a plurality of battery cells, and the safety management method includes obtaining detection parameters of each of the plurality of battery cells.

14. The method for safety management of an energy storage system according to claim 12, in, The detection parameters include voltage, current, temperature and strain.

15. The method for safety management of an energy storage system according to any one of claims 11 to 14, in, When the energy storage controller fails, the abnormal signal is directly sent to the external control unit.

16. The method for safety management of an energy storage system according to any one of claims 11 to 14, in, The energy storage system is an aviation energy storage system.

17. A control system, comprising a central control system, It is characterized in that The control system further comprises an energy storage system according to any one of claims 1 to 10, The central control system is the external control unit and is configured to receive the abnormal signal and activate an alarm and a corresponding protection device according to the abnormal signal.

Images