Fuel cell system hydrogen safety control method, device, equipment and medium

Abstract

The invention discloses a hydrogen safety control method, device and equipment for a fuel cell system and a medium, and is applied to the technical field of fuel cells, and the method comprises the following steps: detecting the hydrogen leakage rate at the tail exhaust of an anode system when determining that a drain valve in the anode system has a normally open fault; determining a target air discharge amount based on the hydrogen leakage amount; determining a target air demand quantity and a target hydrogen demand quantity based on the target output power; and controlling the fuel cell system to output target output power based on the target hydrogen demand quantity, the target air emission quantity and the target air demand quantity, and diluting hydrogen leaked by the anode system through air provided by the cathode system. By reducing the output power of the fuel cell system, the amount of hydrogen leaked by the drain valve can be reduced, the fuel waste is reduced, and by controlling the operation of the fuel cell system according to the target air discharge amount and the target air demand amount, the hydrogen leaked by the anode system can be diluted by using the air provided by the cathode system, and the risk of hydrogen explosion is avoided.

Description

Technical Field

[0001] This application relates to the field of fuel cell technology, and in particular to a method, apparatus, equipment and medium for hydrogen safety control in a fuel cell system. Background Technology

[0002] A fuel cell system is a system that uses a fuel cell stack to generate electricity and controls the power generation of the stack. In a fuel cell system, the stack is the site of the electrochemical reaction between air and hydrogen. After the electrochemical reaction, the remaining wet hydrogen gas passes through a gas-liquid separator to separate water vapor into liquid water. The hydrogen gas is then recycled back to the hydrogen inlet of the fuel cell stack for reuse. When the liquid water in the gas-liquid separator reaches a certain level, the excess liquid water is discharged by opening a drain valve located below the gas-liquid separator to maintain the liquid water in the gas-liquid separator within a certain range. Therefore, as a drain valve associated with the hydrogen circuit of the fuel cell system, it affects the hydrogen safety of the fuel cell system. Summary of the Invention

[0003] This application provides a hydrogen safety control method, apparatus, equipment, and medium for a fuel cell system, to address the hydrogen safety hazards existing in prior art fuel cell systems. The technical solution provided in this application is as follows:

[0004] On the one hand, this application provides a method for hydrogen safety control in a fuel cell system, including:

[0005] When a normally open fault is detected in the drain valve of the anode system of the fuel cell system, the amount of hydrogen leakage at the tail end of the anode system is measured; wherein, a normally open fault is used to characterize a fault in which the drain valve is in the open state for a period of time that is not within the normal opening time range of the drain valve.

[0006] Based on the amount of hydrogen leakage at the tailpipe of the anode system, the target air emission at the tailpipe of the fuel cell system is determined; wherein, the target air emission is the amount of air used to keep the amount of hydrogen leakage outside the explosion limit.

[0007] Based on the target output power of the fuel cell system, the target air demand and target hydrogen demand are determined; wherein, the target output power is the output power used to reduce the hydrogen pressure in the anode system to the target pressure range, and the target output power is less than the requested power of the whole vehicle.

[0008] The operation of the cathode system of the fuel cell system is controlled based on the target air emissions and the target air demand, and the operation of the anode system is controlled based on the target hydrogen demand, so that the fuel cell system outputs the target output power and the hydrogen leaking from the tail end of the anode system is diluted by the air provided by the cathode system.

[0009] In one possible implementation, determining that a normally open drain valve in the anode system of the fuel cell system has failed includes:

[0010] If the control signal of the drain valve in the anode system is closed, the liquid water level in the gas-liquid separator is below the normal lower limit, and the duration of the actual hydrogen pressure entering the reactor being less than the required hydrogen pressure entering the reactor corresponding to the vehicle's required power is not less than the duration threshold, it is determined that the drain valve in the anode system has a normally open fault.

[0011] In one possible implementation, determining the target air emissions at the fuel cell system exhaust based on the amount of hydrogen leakage at the anode system exhaust includes:

[0012] The target air emissions are calculated as a / (a+b) = m%, where a represents the amount of hydrogen leakage; m% represents the safe hydrogen percentage at the fuel cell system exhaust; and b represents the target air emissions.

[0013] In one possible implementation, controlling the operation of the cathode system based on target air emissions and target air demand includes:

[0014] Based on the target air emissions and target air demand, determine the target speed of the air compressor and the target opening degree of the air bypass valve in the cathode system;

[0015] The air compressor is controlled to operate at the target speed, and the air bypass valve is controlled to operate at the target opening degree, so that the anode system provides the target air demand to the fuel cell stack and discharges the target air discharge to the tail end of the anode system.

[0016] In one possible implementation, when it is determined that a normally open drain valve in the anode system of the fuel cell system has failed, the method further includes:

[0017] The control output is used to characterize alarm information for fuel cell system faults.

[0018] In one possible implementation, the process of controlling the operation of the cathode system based on target air emissions and target air demand, and controlling the operation of the anode system based on target hydrogen demand, further includes:

[0019] The fuel cell system is controlled to charge the power battery until the remaining power of the power battery reaches the maximum allowable value.

[0020] In one possible implementation, the hydrogen safety control method for a fuel cell system provided in this application further includes:

[0021] When the remaining charge of the power battery reaches the maximum allowable value, the fuel cell system is shut down, and the power battery is triggered to respond to the power request from the vehicle.

[0022] On the other hand, this application provides a hydrogen safety control device for a fuel cell system, comprising:

[0023] The leakage detection unit is used to detect the air emission at the tail end of the cathode system and the hydrogen leakage at the tail end of the anode system when the drain valve in the anode system of the fuel cell system has a normally open fault. The normally open fault is used to characterize the drain valve being in the open state for a period of time that is not within the normal opening time range of the drain valve.

[0024] The first determining unit is used to determine the target air emission at the tail end of the fuel cell system based on the amount of hydrogen leakage at the tail end of the anode system; wherein the target air emission is the amount of air emission used to keep the amount of hydrogen leakage outside the explosion limit.

[0025] The second determining unit is used to determine the target air demand and the target hydrogen demand based on the target output power of the fuel cell system; wherein, the target output power is the output power used to reduce the hydrogen pressure in the anode system to a target pressure range, and the target output power is less than the requested power of the whole vehicle.

[0026] The safety control unit is used to control the operation of the cathode system of the fuel cell system based on the target air emission and target air demand, and to control the operation of the anode system based on the target hydrogen demand, so that the fuel cell system outputs the target output power and dilutes the hydrogen leaking at the tail end of the anode system by means of air supplied by the cathode system.

[0027] On the other hand, this application provides a hydrogen safety control device for a fuel cell system, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the aforementioned hydrogen safety control method for the fuel cell system.

[0028] On the other hand, this application provides a computer-readable storage medium storing computer instructions, which, when executed by a processor, implement the above-described hydrogen safety control method for a fuel cell system.

[0029] The beneficial effects of this application are as follows:

[0030] When the drain valve in the anode system of a fuel cell system experiences a normally open failure, this application addresses two issues. First, by reducing the output power of the fuel cell system to the target output power, the hydrogen pressure in the anode system can be reduced, thereby decreasing the pressure difference between the inside and outside of the drain valve and reducing the amount of hydrogen leaking through the drain valve. This reduces fuel waste during a normally open drain valve failure. Second, by controlling the operation of the cathode system based on the target air demand corresponding to the target output power and the target air emission to keep the hydrogen leakage below the explosion limit, the air provided by the cathode system can be used to dilute the hydrogen leaking from the anode system. This maintains the hydrogen concentration at the fuel cell system's exhaust within a safe range, effectively preventing the risk of hydrogen explosion during a normally open drain valve failure.

[0031] Other features and advantages of this application will be set forth in the following description, and will be apparent in part from the description, or may be learned by practicing the application. The objectives and other advantages of this application may be realized and obtained by means of the structures particularly pointed out in the written description, claims, and drawings. Attached Figure Description

[0032] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0033] Figure 1 This is a schematic diagram of the composition and structure of the fuel cell system in this application;

[0034] Figure 2 This is a schematic diagram outlining the hydrogen safety control method for the fuel cell system in this application.

[0035] Figure 3 This is a schematic diagram illustrating the specific process of the hydrogen safety control method for the fuel cell system in this application.

[0036] Figure 4 This is a functional structural diagram of the hydrogen safety control device for the fuel cell system in this application.

[0037] Figure 5 This is a schematic diagram of the hardware structure of the hydrogen safety control device for the fuel cell system in this application. Detailed Implementation

[0038] To make the objectives, technical solutions, and beneficial effects of this application clearer, the technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0039] To facilitate a better understanding of this application by those skilled in the art, the technical terms used in this application will be briefly introduced below.

[0040] The vehicle requested power is the power output of the fuel cell system that the vehicle controller requests from the fuel cell controller to meet the vehicle's requirements.

[0041] The target output power is the power output of the fuel cell system when the hydrogen pressure in the anode system is reduced to the target pressure range.

[0042] The target air requirement is the amount of air that the cathode system needs to provide to meet the target output power.

[0043] The target hydrogen requirement is the amount of hydrogen that the anode system needs to provide to meet the target output power.

[0044] The target air emission rate is the air emission rate at the tail end of the fuel cell system while keeping the hydrogen leakage at the anode system tail end below the explosion limit.

[0045] A normally open fault is a fault in which the drain valve in the anode system of a fuel cell system is in the open state for a period of time that is not within the normal opening time range of the drain valve. In this application, normally open faults include, but are not limited to, the drain valve being stuck in the open state, resulting in it being in the normally open state.

[0046] The Vehicle Control Unit (VCU) is the central control unit of a hydrogen fuel cell vehicle and is the core controller of the vehicle.

[0047] The fuel cell control unit (FCU) is the system in a fuel cell system used to collect and process the status of all sensors and actuators and feed it back to the VCU.

[0048] The Hydrogen Control Unit (HCU) is a system in a fuel cell system used to manage the anode system and to detect and alarm on hydrogen safety. It receives control commands from the FCU and VCU and outputs various signals to the FCU and VCU.

[0049] It should be noted that the terms "first," "second," etc., used in this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that the embodiments described herein can be implemented in a sequence other than that illustrated or described herein.

[0050] After introducing the technical terms used in this application, the application scenarios and design concepts of this application will be briefly introduced next.

[0051] In a fuel cell system, the drain valve in the anode system is mainly responsible for draining excess liquid water from the gas-liquid separator to keep the liquid water in the gas-liquid separator within a certain range. If the drain valve malfunctions and remains open, hydrogen will be discharged from the drain valve to the tailpipe, resulting in the hydrogen concentration at the tailpipe of the fuel cell system not meeting the standard, which in turn leads to a hydrogen explosion hazard at the tailpipe of the fuel cell system.

[0052] Therefore, when a normally open fault is detected in the drain valve of the anode system of the fuel cell system, this application detects the amount of hydrogen leakage at the tail end of the anode system. Based on the amount of hydrogen leakage at the tail end of the anode system, a target air emission amount at the tail end of the fuel cell system is determined to keep the hydrogen leakage amount outside the explosion limit. Based on the target output power of the fuel cell system when the hydrogen pressure in the anode system is reduced to the target pressure range, a target air demand and a target hydrogen demand are determined. Then, the operation of the cathode system of the fuel cell system is controlled based on the target air emission amount and the target air demand, and the operation of the anode system is controlled based on the target hydrogen demand, so that the fuel cell system outputs the target output power and the air provided by the cathode system dilutes the hydrogen leaking at the tail end of the anode system. In this way, when the drain valve in the anode system of the fuel cell system fails to open, on the one hand, by reducing the output power of the fuel cell system to the target output power, the hydrogen pressure in the anode system of the fuel cell system can be reduced, thereby reducing the pressure difference between the inside and outside of the drain valve, reducing the amount of hydrogen leaking through the drain valve, and thus reducing fuel waste when the drain valve fails to open. On the other hand, by controlling the operation of the cathode system of the fuel cell system according to the target air demand corresponding to the target output power and the target air emission to keep the hydrogen leakage outside the explosion limit, the hydrogen leaking from the anode system can be diluted by the air provided by the cathode system, thereby keeping the hydrogen concentration at the tail end of the fuel cell system within a safe range, and thus effectively avoiding the risk of hydrogen explosion when the drain valve fails to open.

[0053] After introducing the application scenarios and design concepts of this application, the technical solutions provided by this application will be described in detail below.

[0054] This application provides a fuel cell system, see embodiments thereof. Figure 1 As shown, the fuel cell system provided in this application embodiment includes at least a fuel cell stack, an anode system for supplying hydrogen to the fuel cell stack, a cathode system for supplying oxygen and air to the fuel cell stack, and a cooling system for cooling the fuel cell stack; wherein, the anode system includes at least a hydrogen injector, a hydrogen circulation pump, a gas-liquid separator, and a drain valve; the cathode system includes at least an air filter, a low-pressure flow sensor, an air compressor, an intercooler, a shut-off valve, a back pressure valve, and an air bypass valve; the cooling system includes at least a radiator assembly, a heater, a cooling water pump, and a cooling bypass valve.

[0055] This application also provides a hydrogen fuel cell vehicle, which includes at least a body, a chassis frame, wheels, a vehicle control system, and a power system, wherein the power system includes at least an electric motor and the fuel cell system provided in this application.

[0056] Based on the above embodiments, this application provides a hydrogen safety control method for a fuel cell system, see below. Figure 2 As shown in the embodiments of this application, the general flow of the hydrogen safety control method for a fuel cell system is as follows:

[0057] Step 201: When a normally open fault occurs in the drain valve of the anode system of the fuel cell system, detect the amount of hydrogen leakage at the tail end of the anode system; wherein, a normally open fault is a fault used to characterize that the drain valve is in the open state for a period of time that is not within the normal opening time range of the drain valve.

[0058] In specific implementation, when it is determined that the drain valve in the anode system of the fuel cell system has a normally open fault, in one embodiment, the drain valve in the anode system can be determined to have a normally open fault when the control signal of the drain valve in the anode system is detected to be closed, and the duration of the liquid water level in the gas-liquid separator being below the normal lower limit is not less than a duration threshold. In another embodiment, the drain valve in the anode system can also be determined to have a normally open fault when the control signal of the drain valve in the anode system is detected to be closed, and the duration of the actual hydrogen pressure entering the stack being less than the requested hydrogen pressure entering the stack corresponding to the requested power of the vehicle is not less than a duration threshold. In yet another embodiment, the drain valve in the anode system can also be determined to have a normally open fault when the control signal of the drain valve in the anode system is detected to be closed, and the duration of the liquid water level in the gas-liquid separator being below the normal lower limit is not less than a duration threshold, and the duration of the actual hydrogen pressure entering the stack being less than the requested hydrogen pressure entering the stack corresponding to the requested power of the vehicle is not less than a duration threshold. In the above embodiments, the lower limit of the normal water level can be, but is not limited to, 0 or 1, and the duration threshold can be, but is not limited to, 5 seconds or 8 seconds.

[0059] In this embodiment of the application, when it is determined that the drain valve in the anode system of the fuel cell system has a normally open fault, on the one hand, the amount of hydrogen leakage at the tail end of the anode system can be calculated by using the hydrogen pressure, atmospheric pressure and drain valve orifice diameter in the anode system, and subsequent hydrogen safety control strategies can be executed based on the amount of hydrogen leakage at the tail end of the anode system; on the other hand, in order to further realize hydrogen safety control, alarm information for characterizing fuel cell system faults can also be output. In specific implementation, at least one output of HCU and FCU can be used to characterize alarm information for fuel cell system faults. When the fuel cell system is applied to a hydrogen fuel cell vehicle, at least one output of VCU and on-board terminal of the hydrogen fuel cell vehicle can also be used to characterize alarm information for fuel cell system faults, thereby enabling timely handling of fuel cell system faults.

[0060] Step 202: Determine the target air emission at the tail end of the fuel cell system based on the hydrogen leakage at the tail end of the anode system; wherein, the target air emission is the amount of air required to keep the hydrogen leakage below the explosion limit.

[0061] In practical implementation, when determining the target air emission at the tail end of the fuel cell system based on the hydrogen leakage at the tail end of the anode system, the target air emission can be calculated as a / (a+b)=m%; where a represents the hydrogen leakage; m% represents the safe hydrogen percentage at the tail end of the fuel cell system, which can be, but is not limited to, 3% or 4%; and b represents the target air emission.

[0062] Step 203: Based on the target output power of the fuel cell system, determine the target air demand and the target hydrogen demand; wherein, the target output power is the output power used to reduce the hydrogen pressure in the anode system to the target pressure range, and the target output power is less than the vehicle's requested power.

[0063] In practical implementation, when determining the target air demand and target hydrogen demand based on the target output power of the fuel cell system, the target air demand and target hydrogen demand can be determined based on the pre-calibrated correspondence between the output power of the fuel cell system and the air demand and hydrogen demand.

[0064] Step 204: Control the operation of the cathode system of the fuel cell system based on the target air emissions and the target air demand, and control the operation of the anode system based on the target hydrogen demand, so that the fuel cell system outputs the target output power and dilutes the hydrogen leaking at the tail end of the anode system by the air provided by the cathode system.

[0065] In practical implementation, the operation of the cathode system can be controlled based on the target air emissions and target air demand, and may be carried out in, but is not limited to, the following ways:

[0066] First, based on the target air emission and target air demand, the target speed of the air compressor and the target opening of the air bypass valve in the cathode system are determined. Specifically, based on a pre-calibrated correspondence between air supply and air compressor speed, the air compressor speed corresponding to the sum of the target air emission and target air demand is determined as the target speed; and based on a pre-calibrated correspondence between air emission and air bypass valve opening, the air bypass valve opening corresponding to the target air emission is determined as the target opening.

[0067] Then, the air compressor is controlled to run at the target speed, and the air bypass valve is controlled to run at the target opening degree, so that the anode system provides the target air demand to the fuel cell stack and discharges the target air discharge to the anode system tailpipe. This allows the fuel cell system to output the target output power while diluting the hydrogen leaking at the anode system tailpipe with the air provided by the cathode system. This keeps the hydrogen concentration at the fuel cell system tailpipe within a safe range and avoids the risk of hydrogen explosion in the event of a normally open drain valve failure.

[0068] In this embodiment, during the process of controlling the operation of the cathode system based on the target air emissions and the target air demand, and controlling the operation of the anode system based on the target hydrogen demand, the target output power of the fuel cell system may be insufficient to meet the power requested by the vehicle. In this case, the target compensation power can be output by the power battery so that the sum of the target compensation power and the target output power meets the power requested by the vehicle. At the same time, the fuel cell system can be controlled to charge the power battery until the remaining charge of the power battery reaches the maximum allowable value. This allows the power battery to maintain power output for a longer period of time, ensuring that the power battery has sufficient charge to sustain the hydrogen fuel cell vehicle for a longer distance until it is parked in a safe location or maintenance station. Furthermore, when it is determined that the remaining charge of the power battery has reached the maximum allowable value, the fuel cell system can be controlled to shut down, and the power battery can be triggered to respond to the power requested by the vehicle.

[0069] The following specific embodiment will be used to further describe the hydrogen safety control method for a fuel cell system provided in this application. See reference [link to relevant documentation]. Figure 3 As shown in the embodiments of this application, the specific flow of the hydrogen safety control method for a fuel cell system is as follows:

[0070] Step 301: When the control signal of the drain valve in the anode system of the fuel cell system is detected to be closed, and the liquid water level in the gas-liquid separator is below the normal lower limit for a duration not less than the duration threshold, and the actual hydrogen pressure entering the stack is less than the requested hydrogen pressure corresponding to the requested power of the vehicle for a duration not less than the duration threshold, it is determined that the drain valve in the anode system has a normally open fault, and steps 302 and 303 are continued; wherein, the normal lower limit can be, but is not limited to, 0 or 1, and the duration threshold can be, but is not limited to, 5 seconds or 8 seconds.

[0071] Step 302: Send alarm information to the VCU to characterize a fuel cell system fault, so that the VCU displays the alarm information on the display interface of the vehicle terminal; wherein, the alarm information may be, but is not limited to, a fuel cell system fault, please contact after-sales service.

[0072] Step 303: Calculate the amount of hydrogen leakage at the tail end of the anode system using the hydrogen pressure, atmospheric pressure, and drain valve orifice diameter within the anode system.

[0073] Step 304: Based on the hydrogen leakage at the tail end of the anode system, calculate the target air emission at the tail end of the fuel cell system according to a / (a+b)=m%; where a represents the hydrogen leakage; m% represents the safe hydrogen percentage at the tail end of the fuel cell system, which can be, but is not limited to, 3% or 4%; b represents the target air emission.

[0074] Step 305: Based on the pre-calibrated correspondence between the output power of the fuel cell system and the air and hydrogen demand, the air and hydrogen demand corresponding to the target output power of the fuel cell system are determined as the target air and hydrogen demand; wherein, the target output power is the pre-set output power used to reduce the hydrogen pressure in the anode system to the target pressure range, and the target output power is less than the requested power of the vehicle.

[0075] Step 306: Based on the pre-calibrated correspondence between air supply and air compressor speed, determine the air compressor speed corresponding to the sum of target air discharge and target air demand as the target speed; and based on the pre-calibrated correspondence between air discharge and air bypass valve opening, determine the air bypass valve opening corresponding to the target air discharge as the target opening.

[0076] Step 307: Control the air compressor to run at the target speed and control the air bypass valve to run at the target opening, so that the anode system provides the target air demand to the fuel cell stack and discharges the target air discharge to the anode system tailpipe, thereby enabling the fuel cell system to output the target output power while diluting the hydrogen leaking at the anode system tailpipe with the air provided by the cathode system.

[0077] Step 308: Output the target compensation power through the power battery so that the sum of the target compensation power and the target output power meets the vehicle's requested power. At the same time, control the fuel cell system to charge the power battery. When the remaining charge of the power battery reaches the maximum allowable value, control the fuel cell system to shut down and trigger the power battery to respond to the vehicle's requested power.

[0078] Based on the above embodiments, this application also provides a hydrogen safety control device for a fuel cell system, which is applied to the hydrogen safety control equipment of a fuel cell system. (See attached document.) Figure 4 As shown, the hydrogen safety control device 400 for a fuel cell system provided in this application embodiment includes at least:

[0079] Leakage detection unit 401 is used to detect the air emission at the tail end of the cathode system and the hydrogen leakage at the tail end of the anode system when the drain valve in the anode system of the fuel cell system has a normally open fault. The normally open fault is used to characterize the drain valve being in the open state for a period of time that is not within the normal opening time range of the drain valve.

[0080] The first determining unit 402 is used to determine the target air emission at the tail end of the fuel cell system based on the amount of hydrogen leakage at the tail end of the anode system; wherein the target air emission is the amount of air emission used to keep the amount of hydrogen leakage outside the explosion limit.

[0081] The second determining unit 403 is used to determine the target air demand and the target hydrogen demand based on the target output power of the fuel cell system; wherein, the target output power is the output power used to reduce the hydrogen pressure in the anode system to a target pressure range, and the target output power is less than the requested power of the whole vehicle.

[0082] Safety control unit 404 is used to control the operation of the cathode system of the fuel cell system based on the target air emission and the target air demand, and to control the operation of the anode system based on the target hydrogen demand, so that the fuel cell system outputs the target output power and dilutes the hydrogen leaking at the tail end of the anode system by the air provided by the cathode system.

[0083] In one possible implementation, the leakage detection unit 401 is specifically used to detect when the control signal of the drain valve in the anode system is to close the drain valve, the liquid water level in the gas-liquid separator is below the normal lower limit, and the duration of the actual hydrogen pressure entering the reactor being less than the requested hydrogen pressure entering the reactor corresponding to the requested power of the vehicle is not less than the duration threshold, and then to determine that the drain valve in the anode system has a normally open fault.

[0084] In one possible implementation, the first determining unit 402 is specifically used to calculate the target air emission amount according to a / (a+b)=m%; where a represents the hydrogen leakage amount; m% represents the safe hydrogen percentage at the tail end of the fuel cell system; and b represents the target air emission amount.

[0085] In one possible implementation, the safety control unit 404 is specifically configured to determine the target speed of the air compressor in the cathode system and the target opening degree of the air bypass valve based on the target air discharge and the target air demand; control the air compressor to operate at the target speed and control the air bypass valve to operate at the target opening degree, so that the anode system provides air corresponding to the target air demand to the fuel cell stack and discharges air corresponding to the target air discharge to the tail end of the anode system.

[0086] In one possible implementation, the hydrogen safety control device 400 for a fuel cell system provided in this application embodiment further includes:

[0087] The alarm control unit 405 is used to control the output of alarm information to characterize the fault of the fuel cell system when the leakage detection unit 401 determines that the drain valve in the anode system of the fuel cell system has a normally open fault.

[0088] In one possible implementation, the hydrogen safety control device 400 for a fuel cell system provided in this application embodiment further includes:

[0089] The charging control unit 406 is used to control the fuel cell system to charge the power battery until the remaining power battery reaches the maximum allowable capacity during the process when the safety control unit 404 controls the operation of the cathode system based on the target air emission and the target air demand and controls the operation of the anode system based on the target hydrogen demand.

[0090] In one possible implementation, the charging control unit 406 is also used to control the fuel cell system to shut down and trigger the power battery to respond to the vehicle's power request when it determines that the remaining charge of the power battery has reached the maximum allowable value.

[0091] It should be noted that the principle of the hydrogen safety control device 400 for fuel cell systems provided in this application embodiment to solve the technical problem is similar to the hydrogen safety control method for fuel cell systems provided in this application embodiment. Therefore, the implementation of the hydrogen safety control device 400 for fuel cell systems provided in this application embodiment can refer to the implementation of the hydrogen safety control method for fuel cell systems provided in this application embodiment, and the repeated parts will not be described again.

[0092] After introducing the fuel cell system, hydrogen fuel cell vehicle, and hydrogen safety control method and device of the fuel cell system provided in the embodiments of this application, the hydrogen safety control device of the fuel cell system provided in the embodiments of this application will be briefly introduced next.

[0093] The hydrogen safety control device for the fuel cell system provided in this application embodiment may be, but is not limited to, the HCU or FCU in the fuel cell system, see reference. Figure 5 As shown, the hydrogen safety control device 500 for a fuel cell system provided in this application embodiment includes at least a processor 501, a memory 502, and a computer program stored in the memory 502 and executable on the processor 501. When the processor 501 executes the computer program, it implements the above-mentioned hydrogen safety control method for a fuel cell system provided in this application embodiment.

[0094] The hydrogen safety control device 500 for a fuel cell system provided in this application embodiment may further include a bus 503 connecting different components (including a processor 501 and a memory 502). The bus 503 represents one or more types of bus structures, including a memory bus, a peripheral bus, a local area bus, etc.

[0095] Memory 502 may include readable media in the form of volatile memory, such as random access memory (RAM) 5021 and / or cache memory 5022, and may further include read-only memory (ROM) 5023. Memory 502 may also include a program tool 5025 having a set (at least one) of program modules 5024, including but not limited to an operating subsystem, one or more application programs, other program modules, and program data, each or some combination of these examples may include an implementation of a network environment.

[0096] Processor 501 can be a single processing element or a collective term for multiple processing elements. For example, processor 501 can be a microcontroller unit (MCU), a central processing unit (CPU), or one or more integrated circuits configured to implement the hydrogen safety control method for the fuel cell system provided in the embodiments of this application. Specifically, processor 501 can be a general-purpose processor, including but not limited to CPUs, application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

[0097] The fuel cell system hydrogen safety control device 500 can also communicate with one or more devices that allow users to interact with the fuel cell system hydrogen safety control device 500 (e.g., mobile phones, computers, etc.), and / or with various external devices 504 that enable the fuel cell system hydrogen safety control device 500 to communicate with one or more other fuel cell system hydrogen safety control devices (e.g., routers, modems, etc.). This communication can be performed through an input / output (I / O) interface 505. Furthermore, the fuel cell system hydrogen safety control device 500 can also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 506. Figure 5 As shown, network adapter 506 communicates with other modules of the fuel cell system hydrogen safety control device 500 via bus 503. It should be understood that, although... Figure 5 As not shown, other hardware and / or software modules can be used in conjunction with the hydrogen safety control device 500 of the fuel cell system, including but not limited to microcode, device drivers, redundant processors, external disk drive arrays, Redundant Arrays of Independent Disks (RAID) subsystems, tape drives, and data backup storage subsystems.

[0098] It should be noted that, Figure 5 The hydrogen safety control device 500 for the fuel cell system shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of this application.

[0099] Based on the above embodiments, this application provides a fuel cell system, which includes at least a fuel cell stack, an anode system for supplying hydrogen to the fuel cell stack, a cathode system for supplying air to the fuel cell stack, a cooling system for cooling the fuel cell stack, and the hydrogen safety control device for the fuel cell system provided in this application.

[0100] Based on the above embodiments, this application provides a new energy vehicle, which includes at least a body, a chassis frame, wheels, a vehicle control system, and a power system, wherein the power system includes at least an electric motor and the fuel cell system provided in this application.

[0101] In addition, this application embodiment also provides a computer-readable storage medium storing computer instructions. When executed by a processor, these computer instructions implement the hydrogen safety control method for a fuel cell system provided in this application embodiment. Specifically, the computer instructions can be built into or installed in a processor, so that the processor can implement the aforementioned hydrogen safety control method for a fuel cell system provided in this application embodiment by executing the built-in or installed computer instructions.

[0102] Furthermore, the hydrogen safety control method for fuel cell systems provided in this application embodiment can also be implemented as a program product, which includes program code. When the program code is executed by a processor, it implements the above-mentioned hydrogen safety control method for fuel cell systems provided in this application embodiment.

[0103] The program product provided in this application embodiment can be any combination of one or more readable media, wherein the readable media can be a readable signal medium or a readable storage medium, and the readable storage medium can be, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination thereof. Specifically, more specific examples of readable storage media (a non-exhaustive list) include electrical connections with one or more wires, portable disks, hard disks, RAM, ROM, erasable programmable read-only memory (EPROM), optical fibers, portable compact disc read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0104] The program product provided in this application embodiment can be a CD-ROM and include program code, and can also run on hydrogen safety control equipment in fuel cell systems such as FCUs. However, the program product provided in this application embodiment is not limited to this. In this application embodiment, the readable storage medium can be any tangible medium that contains or stores a program, which can be used by or in conjunction with an instruction execution system, device, or apparatus.

[0105] It should be noted that although several units or sub-units of the device have been mentioned in the detailed description above, this division is merely exemplary and not mandatory. In fact, according to embodiments of this application, the features and functions of two or more units described above can be embodied in one unit. Conversely, the features and functions of one unit described above can be further divided and embodied by multiple units.

[0106] Furthermore, although the operations of the method of this application are described in a specific order in the accompanying drawings, this does not require or imply that these operations must be performed in that specific order, or that all the operations shown must be performed to achieve the desired result. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step, and / or one step may be broken down into multiple steps.

[0107] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0108] Obviously, those skilled in the art can make various modifications and variations to the embodiments of this application without departing from the spirit and scope of the embodiments of this application. Therefore, if these modifications and variations to the embodiments of this application fall within the scope of the claims of this application and their equivalents, this application also intends to include these modifications and variations.

Claims

1. A hydrogen safety control method for a fuel cell system, characterized by, The method comprises: when a drain valve in an anode system of a fuel cell system is determined to have a constant open fault, detecting a hydrogen leakage amount at a tail end of the anode system; wherein the constant open fault is a fault that indicates that a time when the drain valve is in an open state is not within a normal open time range of the drain valve; based on the hydrogen leakage amount at the tail end of the anode system, determining a target air discharge amount at the tail end of the fuel cell system; wherein the target air discharge amount is an air discharge amount for maintaining the hydrogen leakage amount outside an explosion limit; based on a target output power of the fuel cell system, determining a target air demand amount and a target hydrogen demand amount; wherein the target output power is an output power for reducing a hydrogen pressure in the anode system to a target pressure range, and the target output power is less than a whole vehicle request power; based on the target air discharge amount and the target air demand amount, controlling a cathode system of the fuel cell system to operate, and based on the target hydrogen demand amount, controlling the anode system to operate, so that the fuel cell system outputs the target output power and dilutes the leaked hydrogen at the tail end of the anode system by air provided by the cathode system.

2. The fuel cell system hydrogen gas safety control method according to claim 1, characterized by, The method for determining that a drain valve in an anode system of a fuel cell system has a constant open fault comprises: when a control signal of the drain valve in the anode system is detected to be a closed drain valve, a liquid water level in a gas-liquid separator is below a lower limit of a normal water level, and a duration for which an actual hydrogen pressure entering a stack is less than a request hydrogen pressure entering the stack corresponding to the whole vehicle request power is not less than a duration threshold, it is determined that the drain valve in the anode system has a constant open fault.

3. The fuel cell system hydrogen gas safety control method according to claim 1, wherein The method for determining a target air discharge amount at a tail end of a fuel cell system based on a hydrogen leakage amount at the tail end of the anode system comprises: calculating the target air discharge amount according to a / (a+b)=m%; wherein a represents the hydrogen leakage amount, m% represents a safety hydrogen proportion at the tail end of the fuel cell system, and b represents the target air discharge amount.

4. The fuel cell system hydrogen gas safety control method according to claim 1, wherein The method for controlling a cathode system to operate based on the target air discharge amount and the target air demand amount comprises: based on the target air discharge amount and the target air demand amount, determining a target rotating speed of an air compressor and a target opening degree of an air bypass valve in the cathode system; controlling the air compressor to operate at the target rotating speed, and controlling the air bypass valve to operate at the target opening degree, so that the anode system provides air corresponding to the target air demand amount to an electric stack and discharges air corresponding to the target air discharge amount at the tail end of the anode system.

5. The fuel cell system hydrogen gas safety control method according to claim 1, wherein When the drain valve in the anode system of the fuel cell system has the constant open fault, the method further comprises: controlling an alarm information indicating a fault of the fuel cell system to be output.

6. The fuel cell system hydrogen gas safety control method according to any one of claims 1 to 5, characterized by, In the process of controlling the cathode system to operate based on the target air discharge amount and the target air demand amount, and controlling the anode system to operate based on the target hydrogen demand amount, the method further comprises: controlling the fuel cell system to charge a power battery until a remaining electric quantity of the power battery reaches an allowed maximum value.

7. The fuel cell system hydrogen gas safety control method according to claim 6, wherein The method further comprises: When the remaining power of the power battery reaches the allowed maximum value, the fuel cell system is controlled to shut down, and the power battery is triggered to respond to the vehicle request power.

8. A hydrogen safety control device for a fuel cell system, characterized by comprising: The method comprises: A leakage detection unit is configured to detect an air discharge amount at a cathode system tail of the fuel cell system and a hydrogen leakage amount at an anode system tail of the fuel cell system when a normally open fault occurs in a drain valve in an anode system of the fuel cell system, wherein the normally open fault is a fault indicating that a time when the drain valve is in an open state is not within a normal open time range of the drain valve. A first determination unit is configured to determine a target air discharge amount at the fuel cell system tail based on the hydrogen leakage amount at the anode system tail, wherein the target air discharge amount is an air discharge amount for maintaining the hydrogen leakage amount outside an explosion limit. A second determination unit is configured to determine a target air demand amount and a target hydrogen demand amount based on a target output power of the fuel cell system, wherein the target output power is an output power for reducing a hydrogen pressure in the anode system to a target pressure range, and the target output power is less than a vehicle request power. A safety control unit is configured to control the cathode system of the fuel cell system to operate based on the target air discharge amount and the target air demand amount, and control the anode system to operate based on the target hydrogen demand amount, so that the fuel cell system outputs the target output power and dilutes the leaked hydrogen at the anode system tail by air provided by the cathode system.

9. A hydrogen safety control device for a fuel cell system, characterized in that, The computer readable storage medium stores computer instructions, and the computer instructions are executed by the processor to implement the fuel cell system hydrogen safety control method according to any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer instructions, and the computer instructions are executed by the processor to implement the fuel cell system hydrogen safety control method according to any one of claims 1-7.

Images