Protection method and device of energy storage system, energy storage system, equipment and storage medium

Abstract

The invention relates to an energy storage system protection method and device, an energy storage system, equipment and a storage medium. The method comprises the following steps: acquiring a first communication state from a monitoring background to a system controller in the energy storage system, a first communication state from each battery management controller to the monitoring background, and a first communication state from each battery management controller to the monitoring background through the system controller; if at least one first communication state indicates that the energy storage system has a communication fault, executing a processing action corresponding to the communication fault; wherein the processing action comprises stopping the operation and maintaining the current state. According to the invention, the risk of information loss can be reduced, and the stability and reliability of the energy storage system are improved.

Description

Technical Field

[0001] This application relates to the field of new energy technology, specifically to a protection method, device, energy storage system, equipment, and storage medium for an energy storage system. Background Technology

[0002] In today's energy sector, energy storage systems are playing an increasingly important role. With the rapid development of renewable energy and the transformation of power grids, energy storage systems are widely used in grid dispatching, power stability, and energy management. Energy storage systems are equipped with various controllers, which are interconnected via communication links, enabling functions such as data acquisition and system control.

[0003] Communication failures between controllers can lead to information loss, severely impacting energy storage systems and creating various safety hazards. Summary of the Invention

[0004] To address the aforementioned issues, this application provides a protection method, apparatus, energy storage system, equipment, and storage medium for an energy storage system, which can reduce the risk of information loss and improve the stability and reliability of the energy storage system.

[0005] In a first aspect, this application provides a protection method for an energy storage system. The method includes: acquiring a first communication status from the monitoring backend to the system controller, a first communication status from each battery management controller to the monitoring backend, and a first communication status from each battery management controller to the monitoring backend via the system controller; if at least one first communication status indicates that there is a communication fault in the energy storage system, then executing a processing action corresponding to the communication fault; wherein the processing action includes shutdown and maintaining the current state.

[0006] In the technical solution of this application embodiment, two communication paths are set up: one from the battery management controller to the monitoring backend, and the other from the battery management controller to the monitoring backend via the system controller. The redundant communication paths can improve communication reliability and reduce the risk of information loss. Furthermore, if a communication failure occurs, actions such as shutdown or maintaining the current state can be taken based on the communication failure, thereby improving the reliability and stability of the energy storage system.

[0007] In some embodiments, if at least one first communication state indicates a communication failure in the energy storage system, then the corresponding processing action for the communication failure is executed, including: if the first communication state from the monitoring backend to the system controller is normal, and if the first communication state from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then the energy storage system is shut down. In the technical solution of this application embodiment, shutting down the energy storage system when the downlink communication path from the monitoring backend to the system controller is normal, but both uplink communication paths from the battery management controller to the monitoring backend are abnormal, can reduce the risk of information loss and help improve the stability and reliability of the energy storage system.

[0008] In some embodiments, if at least one first communication state indicates a communication failure in the energy storage system, the corresponding processing action for the communication failure is executed, including: if the first communication state from the monitoring backend to the system controller is a communication failure, and if the first communication state from each battery management controller to the monitoring backend, and / or the first communication state from each battery management controller via the corresponding module controller and system controller to the monitoring backend is normal, then the current state of the energy storage system is maintained. In the technical solution of this application embodiment, on the one hand, the risk caused by erroneous processing actions in the energy storage system can be reduced, and on the other hand, unnecessary downtime can be reduced, helping to minimize system downtime and improve system availability and operating efficiency.

[0009] In some embodiments, the method further includes: if multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, obtaining the second communication state between the battery management controller and each battery management unit; performing statistical processing on the second communication states to obtain the number of communication failures; and performing corresponding processing actions based on the number of communication failures, wherein the processing actions further include outputting warning information. In the technical solution of this application embodiment, detecting the information loss risk of energy storage submodules when there is no risk of overall information loss can effectively prevent energy storage system failures and shutdowns caused by the loss of information from a single or multiple energy storage submodules, which helps improve the reliability and stability of the energy storage system.

[0010] In some embodiments, corresponding processing actions are performed based on the number of communication failures, including: if the number of communication failures corresponding to any energy storage submodule is greater than a first threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than a second threshold, then the energy storage system is shut down. The technical solution of this application embodiment can respond promptly to the loss of information from a single electrical cabinet, which helps prevent potential safety risks, such as electrical failures and overheating caused by the loss of information from one or more electrical cabinets.

[0011] In some embodiments, corresponding processing actions are performed based on the number of communication failures, including: if the number of communication failures corresponding to each energy storage submodule is less than or equal to a first quantity threshold, then obtaining the switching status of the bus switch and the fire protection status of each energy storage submodule; and controlling the energy storage system to shut down when the switch status is closed or the fire protection status is activated. In the technical solution of this application embodiment, it is possible to reasonably determine whether to shut down the energy storage system according to different situations, which helps to minimize system downtime and improve system availability and operating efficiency.

[0012] In some embodiments, the method further includes: when the switch state is in the open position and the fire suppression state is not activated, performing state-of-charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, then controlling the energy storage system to shut down. In the technical solution of this application embodiment, it is possible to reasonably determine whether to shut down the energy storage system based on different situations, which helps to minimize system downtime and improve system availability and operating efficiency.

[0013] In some embodiments, the state of charge (SOC) statistics of a target energy storage submodule with a communication failure are performed to obtain the minimum SOC. This includes: for the target energy storage submodule, if the battery management controller has a communication failure with the first battery management unit in the target energy storage submodule, the SOC statistics of the battery cells corresponding to the first battery management unit are performed, and the statistically obtained first SOC is determined as the minimum SOC. In the technical solution of this application embodiment, by statistically determining the minimum SOC, corresponding measures can be taken based on the minimum SOC to reduce the risk of over-discharge and other problems caused by over-discharge.

[0014] In some embodiments, the method further includes: for the target energy storage submodule, if the battery management controller fails to communicate with the second battery management unit (excluding the first battery management unit) in the energy storage submodule, then performing state-of-charge (SOC) statistics on the battery cells corresponding to the second SOC to obtain a second SOC; if the difference between the first SOC and the second SOC is greater than a preset difference, then updating the second SOC to the minimum SOC. In the technical solution of this application embodiment, newly emerging communication faults can be detected in a timely manner, and the minimum SOC can be updated based on the newly emerging communication faults. This makes the control of the energy storage system more consistent with the actual situation, thereby improving the safety of the energy storage system.

[0015] In some embodiments, the method further includes: if the minimum state of charge is greater than or equal to a preset charge threshold, calculating the safe discharge duration corresponding to the minimum state of charge, and performing corresponding processing actions based on the safe discharge duration. In the technical solution of this application embodiment, the minimum state of charge can be updated according to newly occurring communication faults, thereby taking corresponding processing actions to improve the safety of the energy storage system.

[0016] In some embodiments, corresponding processing actions are performed based on the safe discharge duration, including: after calculating the safe discharge duration, obtaining the discharged duration; if the discharged duration exceeds the safe discharge duration, controlling the energy storage system to shut down. In the technical solution of this application embodiment, controlling the energy storage system to shut down after exceeding the safe discharge duration helps ensure the safe operation of the energy storage system, preventing overheating, overvoltage, and other problems from occurring in faulty energy storage submodules during discharge, thereby improving the safety of the energy storage system.

[0017] In some embodiments, the method further includes: determining a warning duration based on the safe discharge duration; if the discharged duration is longer than the warning duration but shorter than the safe discharge duration, then outputting a warning message. The technical solution of this application embodiment can provide warnings to the energy storage system, reminding relevant operators to pay attention and reducing the risk of over-discharge.

[0018] Secondly, this application also provides a protection device for an energy storage system, the device comprising:

[0019] The first state acquisition module is used to acquire the first communication status from the monitoring backend to the system controller in the energy storage system, as well as from each battery management controller to the monitoring backend and from each battery management controller to the monitoring backend via the system controller.

[0020] The first protection module is used to execute the corresponding processing action if a communication failure exists in at least one first communication state; wherein the processing action includes stopping operation and maintaining the current state.

[0021] Thirdly, this application also provides an energy storage system, which includes a monitoring backend, a system controller, multiple energy storage sub-modules, a battery management controller and a module controller corresponding to each energy storage sub-module, and the battery management controller and the module controller are connected in a one-to-one communication manner; the monitoring backend is connected in communication with the system controller and each battery management controller, and the system controller is also connected in communication with each module controller; the battery management controller is used to obtain the status information of the corresponding energy storage sub-module; the module controller is used to control the corresponding energy storage sub-module; the monitoring backend is used to perform status monitoring; and the system controller is used to execute the method described in any one of the first aspects.

[0022] Fourthly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the method of any one of the first aspects.

[0023] Fifthly, this application also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the method of any one of the first aspects.

[0024] Sixthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the method of any one of the first aspects. Attached Figure Description

[0025] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the alternative embodiments below. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0026] Figure 1a This is a schematic diagram of the structure of an energy storage system according to an embodiment of this application;

[0027] Figure 1b This is a schematic diagram of the structure of an energy storage submodule according to an embodiment of this application;

[0028] Figure 2 This is a schematic flowchart of a protection method for an energy storage system according to an embodiment of this application;

[0029] Figure 3 This is a schematic diagram of a process for protecting against communication failures in an energy storage submodule according to an embodiment of this application;

[0030] Figure 4 This is a flowchart illustrating the steps of performing processing actions based on the number of communication failures according to an embodiment of this application;

[0031] Figure 5 This is a flowchart illustrating the step of updating the minimum state of charge according to an embodiment of this application;

[0032] Figure 6 This is a flowchart illustrating the steps of performing processing actions based on the safe discharge duration according to an embodiment of this application;

[0033] Figure 7 This is a flowchart illustrating the steps of outputting warning information based on the warning duration according to an embodiment of this application;

[0034] Figure 8 This is a structural block diagram of a protection device for an energy storage system according to an embodiment of this application;

[0035] Figure 9 This is a structural block diagram of a protection device for an energy storage system according to an embodiment of this application;

[0036] Figure 10 This is an internal structural diagram of a computer device according to an embodiment of this application. Detailed Implementation

[0037] The embodiments of the technical solution of this application will now be described in detail with reference to the accompanying drawings. These embodiments are only used to more clearly illustrate the technical solution of this application and are therefore merely examples, and should not be used to limit the scope of protection of this application.

[0038] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains; the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the application; the terms “comprising” and “having”, and any variations thereof, in the specification, claims, and foregoing description of the drawings are intended to cover non-exclusive inclusion.

[0039] In the description of the embodiments of this application, technical terms such as "first" and "second" are used only to distinguish different objects and should not be construed as indicating or implying relative importance or implicitly specifying the number, specific order, or primary and secondary relationship of the indicated technical features. In the description of the embodiments of this application, "multiple" means two or more, unless otherwise explicitly defined.

[0040] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0041] In the description of the embodiments in this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Additionally, the character " / " in this document generally indicates that the preceding and following related objects have an "or" relationship.

[0042] In the description of the embodiments of this application, the term "multiple" refers to two or more (including two), similarly, "multiple sets" refers to two or more (including two sets), and "multiple pieces" refers to two or more (including two pieces).

[0043] In the description of the embodiments of this application, unless otherwise expressly specified and limited, technical terms such as "installation," "connection," "joining," and "fixing" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components. For those skilled in the art, the specific meaning of the above terms in the embodiments of this application can be understood according to the specific circumstances.

[0044] In today's energy sector, energy storage systems are playing an increasingly important role. With the rapid development of renewable energy and the transformation of power grids, energy storage systems are widely used in grid dispatching, power stability, and energy management. Energy storage systems are equipped with various controllers, which are interconnected via communication links to achieve functions such as data acquisition and system control. Communication failures between controllers can lead to information loss, severely impacting the energy storage system and creating various safety hazards.

[0045] This application provides a protection scheme for an energy storage system. First, it acquires the first communication status from the monitoring backend to the system controller, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller via the system controller to the monitoring backend. If multiple first communication statuses indicate a communication failure in the energy storage system, it executes actions such as shutting down the energy storage system or maintaining its current state. In this scheme, two communication paths are established: one from the battery management controller to the monitoring backend, and another from the battery management controller via the system controller to the monitoring backend. This redundant communication path improves communication reliability and reduces the risk of information loss. Furthermore, if a communication failure occurs, actions such as shutting down the system or maintaining its current state can be taken based on the communication failure, thereby improving the reliability and stability of the energy storage system.

[0046] The energy storage system protection method provided in this application embodiment can be applied to... Figure 1aThe energy storage system shown includes a monitoring backend 101, a system controller (VBC) 102, multiple energy storage sub-modules 103, a battery management controller (BMC) 104 and a sub-module controller (SMC) 105 corresponding to each energy storage sub-module (SM) 103. The battery management controller 104 and the sub-module controller 105 are connected in a one-to-one communication manner. The monitoring backend 101 is connected to the system controller 102 and each battery management controller 104, and the system controller 102 is also connected to each sub-module controller 105. The battery management controller 104 is used to obtain the status information of the corresponding energy storage sub-module 103. The sub-module controller 105 is used to control the corresponding energy storage sub-module 103. The monitoring backend 101 is used for status monitoring. The system controller 102 is used to obtain the communication status of each communication path in the energy storage system and perform corresponding processing actions according to the communication status.

[0047] In this embodiment of the application, the energy storage system includes multiple energy storage submodules 103. Each energy storage submodule 103 can be composed of multiple electrical cabinets connected in series and / or in parallel. Each electrical cabinet can be composed of multiple electrical boxes connected in series and / or in parallel. Each electrical box can be composed of multiple batteries connected in series and / or in parallel. Figure 1b As shown.

[0048] The energy storage system also includes a battery management controller 104 corresponding to the energy storage submodule 103. The battery management controller 104 can collect the status information of the corresponding energy storage submodule 103 and is responsible for detecting the battery's status, performance, and health status. The aforementioned status information may include voltage, current, temperature, state of charge / discharge, state of charge (SOC), state of health (SOH), etc.

[0049] The energy storage system also includes module controllers 105 that are communicatively connected to the battery management controller 104. The battery management controller 104 can transmit the collected status information to the module controllers 105, and the module controllers 105 can also transmit control commands to the battery management controller 104, thereby controlling the corresponding energy storage sub-modules 103. For example, controlling the energy storage sub-modules 103 to enter or leave the energy storage system, and also controlling the charging and discharging of the energy storage sub-modules 103.

[0050] The energy storage system also includes a system controller 102 and a monitoring backend 101. The system controller 102 is communicatively connected to multiple module controllers 105 and the monitoring backend 101, respectively. The monitoring backend 101 is also communicatively connected to multiple battery management controllers 104. The system controller 102 can obtain status information collected by the battery management controllers 104 through the module controllers 105 and transmit the status information to the monitoring backend 101. The system controller 102 can also obtain status information collected by the battery management controllers 104 through the monitoring backend 101. The system controller 102 can send control commands to the module controllers 105 based on the status information, thereby controlling each energy storage submodule 103. The system controller 102 can determine the communication status of each communication path and take corresponding actions when a communication failure occurs. The monitoring backend 101 can monitor the status of the system controller 102 through communication with the system controller 102, and can also monitor the status of the battery management controllers 104 through communication with them. The monitoring backend 101 is mainly used for monitoring status. In some embodiments, the monitoring backend 101 and the system controller 102 can be integrated as two components into a single hardware device.

[0051] In some embodiments, when the module controller 105 is omitted, the battery management controller 104 is connected to both the monitoring backend 101 and the system controller 102. For example, the energy storage system includes an energy storage submodule 103, with the battery management controller 104 replacing the module controller 105. It should be noted that the direct connection of the battery management controller 104 to the system controller 102 is not limited to the above example and can be configured according to actual conditions.

[0052] In some embodiments, fiber optic communication is used between the monitoring backend 101, the system controller 102, the battery management controller 104, and the module controller 105.

[0053] In some embodiments, the energy storage system further includes multiple Battery Management Units (BMUs), each corresponding to a power cabinet. The battery management controller 104 corresponding to each energy storage submodule 103 is communicatively connected to the battery management unit corresponding to each power cabinet within that submodule. The battery management unit can collect the status information of the power cabinet and transmit the collected information to the battery management controller 104.

[0054] In some embodiments, the energy storage system further includes a bus switch and a bypass switch. The bus switch enables the connection between the battery and external devices of the energy storage system, and the bypass switch enables the activation and deactivation of the energy storage submodule 103.

[0055] In the technical solution of this application embodiment, the energy storage system includes a monitoring backend, a system controller, multiple energy storage sub-modules, a battery management controller and a module controller corresponding to each energy storage sub-module; the battery management controller acquires the status information of the corresponding energy storage sub-module; the module controller controls the corresponding energy storage sub-module; the monitoring backend performs status monitoring; the system controller acquires the communication status of each communication path in the energy storage system and executes corresponding processing actions according to the communication status. This solution sets up two communication paths: one from the battery management controller to the monitoring backend, and the other from the battery management controller through the corresponding module controller and system controller to the monitoring backend. The redundant communication paths can improve communication reliability, reduce the risk of information loss, and improve the stability and reliability of the energy storage system.

[0056] According to some embodiments of this application, refer to Figure 2 This paper provides a protection method for an energy storage system. Taking the system controller in Figure 1 as an example, the method may include the following steps:

[0057] Step 201: Obtain the first communication status from the monitoring backend to the system controller in the energy storage system, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the system controller.

[0058] The first communication state is used to characterize whether the two parties in the communication connection are communicating normally or experiencing a communication failure.

[0059] The monitoring backend can detect whether communication between the module controller and the system controller, as well as between the module controller and the corresponding battery management controller, is normal or faulty. The battery management controller can also detect whether communication between the module controller and the system controller, as well as between the module controller and the corresponding battery management controller, is normal or faulty.

[0060] The above method for detecting whether communication is normal or faulty can be to send a communication request to the communication target. If the request is sent successfully, communication is considered normal; if the request fails, communication is considered faulty.

[0061] The monitoring backend, module controller, and battery management controller can send detection results to the system controller. If the system controller successfully receives the detection results from the monitoring backend, module controller, and battery management controller, it determines the first communication status from the monitoring backend to the system controller, from each battery management controller to the monitoring backend, and from each battery management controller through the corresponding module controller and the system controller to the monitoring backend.

[0062] If the system controller fails to receive a detection result from at least one of the monitoring backend, module controller, and battery management controller, the first communication status is determined based on the failure to receive the result: from the monitoring backend to the system controller, from each battery management controller to the monitoring backend, and from each battery management controller through the corresponding module controller and system controller to the monitoring backend.

[0063] For example, if the system controller does not receive the detection results directly from the module controller, but receives the detection results from the monitoring backend, and receives the detection results from the battery management controller and the module controller through the monitoring backend, it can be determined that there is a communication failure between the module controller and the system controller.

[0064] In some embodiments, if the module controller is omitted, if the system controller successfully receives the detection results sent by the monitoring backend and the battery management controller, then the first communication state from the monitoring backend to the system controller, and from each battery management controller to the monitoring backend, and from each battery management controller through the system controller to the monitoring backend is determined based on the received detection results.

[0065] It should be noted that the methods for detecting and determining the communication status are not limited to the examples above. In practical applications, other methods can also be used.

[0066] Step 202: If at least one first communication status indicates that there is a communication fault in the energy storage system, then the corresponding processing action for the communication fault is executed.

[0067] The actions taken include shutting down operations and maintaining the current state.

[0068] At least one communication failure may exist in multiple first communication states. For example, there may be a communication failure between the monitoring backend and the system controller, a communication failure between at least one battery management controller and the monitoring backend, a communication failure between at least one battery management controller and its corresponding module controller, a communication failure between at least one module controller and the system controller, a communication failure between the system controller and the monitoring backend, and so on. It should be noted that communication failures are not limited to the above situations. In practical applications, combinations of the above failures or situations other than those mentioned above may also occur.

[0069] The system controller can perform different actions based on different communication failures. For example, based on one type of communication failure, it can send a shutdown control command to each module controller. Upon receiving the shutdown control command, each module controller will shut down the corresponding energy storage submodule, thus controlling the energy storage system to shut down. Alternatively, if it determines that the current state of the energy storage system should be maintained based on one type of communication failure, no control command will be sent.

[0070] In the above embodiments, the first communication status from the monitoring backend to the system controller, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the system controller are obtained in the energy storage system. If at least one first communication status indicates a communication fault in the energy storage system, the corresponding processing action for the communication fault is executed. In the technical solution of this application embodiment, two communication paths are set: one from the battery management controller to the monitoring backend and the other from the battery management controller to the monitoring backend via the system controller. The redundant communication paths can improve communication reliability and reduce the risk of information loss. Furthermore, if a communication fault occurs, processing actions such as shutdown or maintaining the current state can be taken according to the communication fault, thereby improving the reliability and stability of the energy storage system.

[0071] According to some embodiments of this application, the step "if at least one first communication state indicates that there is a communication failure in the energy storage system, then perform the corresponding processing action for the communication failure" in the above embodiments may include: when the first communication state from the monitoring backend to the system controller is normal, if the first communication state from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then control the energy storage system to shut down.

[0072] The system controller can determine whether communication between the monitoring backend and the system controller is normal or faulty based on multiple first communication states. If communication between the monitoring backend and the system controller is normal, it can then determine whether communication between the battery management controller and the monitoring backend is normal or faulty, and further determine whether communication between the battery management controller and the corresponding module controller and system controller is normal or faulty.

[0073] If there is a communication failure between the battery management controller and the monitoring backend, and also between the battery management controller and the corresponding module controller, then it is determined that the downlink communication path from the monitoring backend to the system controller is normal, but the two uplink communication paths from the battery management controller to the monitoring backend are abnormal. In this case, the system controller will shut down the energy storage system.

[0074] If there is a communication failure between the battery management controller and the monitoring backend, and also between the module controller and the system controller, it indicates that the downlink communication path from the monitoring backend to the system controller is normal, but both uplink communication paths from the battery management controller to the monitoring backend are abnormal. In this situation, the system controller will shut down the energy storage system.

[0075] If there is a communication failure between the battery management controller and the monitoring backend, and also between the system controller and the monitoring backend, it indicates that the downlink communication path from the monitoring backend to the system controller is normal, but both uplink communication paths from the battery management controller to the monitoring backend are abnormal. In this case, the system controller will shut down the energy storage system.

[0076] In the above embodiments, if the first communication state from the monitoring backend to the system controller is normal, and if the first communication state from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then the energy storage system is shut down. In the technical solution of this application embodiment, shutting down the energy storage system when the downlink communication path from the monitoring backend to the system controller is normal, but both uplink communication paths from the battery management controller to the monitoring backend are abnormal, can reduce the risk of information loss and help improve the stability and reliability of the energy storage system.

[0077] According to some embodiments of this application, the step "if at least one first communication state indicates that there is a communication failure in the energy storage system, then perform the corresponding processing action for the communication failure" in the above embodiments may include: if the first communication state from the monitoring backend to the system controller is a communication failure, and / or the first communication state from each battery management controller to the monitoring backend via the corresponding module controller and system controller to the monitoring backend is a normal communication state, then maintain the current state of the energy storage system.

[0078] The system controller can determine whether communication between the monitoring backend and the system controller is normal or faulty based on multiple first communication states. If a communication fault is determined between the monitoring backend and the system controller, it can then determine whether communication between the battery management controller and the monitoring backend is normal or faulty, and further determine whether communication between the battery management controller and the corresponding module controller and system controller is normal or faulty.

[0079] If communication between the battery management controller and the monitoring backend is normal, and communication between each battery management controller and its corresponding module controller, each module controller and the system controller, and the system controller and the monitoring backend are also normal, then it is determined that both uplink communication paths from the battery management controller to the monitoring backend are normal. However, the downlink communication path from the monitoring backend to the system controller is abnormal. In this case, a communication failure between the monitoring backend and the system controller may cause data synchronization delays, data loss, or data errors, leading to inconsistencies between the data stored in the battery management controller and the data stored in the monitoring backend or the system controller. This could result in erroneous processing actions or other potential problems in the energy storage system. Therefore, the system controller disables the information loss protection function to maintain the current state of the energy storage system.

[0080] In the above embodiments, if the first communication status from the monitoring backend to the system controller is a communication failure, and the first communication status from each battery management controller to the monitoring backend, and / or the first communication status from each battery management controller via the corresponding module controller and system controller to the monitoring backend is normal, then the current state of the energy storage system is maintained. The technical solution of this application embodiment can, on the one hand, reduce the risk of erroneous processing actions in the energy storage system, and on the other hand, reduce unnecessary downtime, helping to minimize system downtime and improve system availability and operating efficiency.

[0081] According to some embodiments of this application, refer to Figure 3 It may also include the following steps:

[0082] Step 301: If multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, obtain the second communication state between the battery management controller and each battery management unit.

[0083] If communication between the monitoring backend and the system controller is normal, and communication between each battery management controller and the monitoring backend, each battery management controller and its corresponding module controller, each module controller and the system controller, and the system controller and the monitoring backend are all normal—meaning the downlink communication path from the monitoring backend to the system controller is normal, and both uplink communication paths from the battery management controllers to the monitoring backend are normal—then the risk of overall information loss in the energy storage system is relatively low. In this scenario, the focus should be on checking each energy storage submodule for any potential information loss risks.

[0084] Each energy storage submodule includes multiple battery cells. Each submodule corresponds to a battery management controller, and each battery cell corresponds to a battery management unit (BMU). The battery management controller communicates with multiple BMUs. When detecting the risk of information loss in each energy storage submodule, the second communication status between the battery management controller and each BMU can be determined first, i.e., whether the communication between the battery management controller and each BMU is normal or faulty.

[0085] Step 302: Perform statistical processing on the second communication state to obtain the number of communication failures.

[0086] For each energy storage submodule, the second communication status between the battery management controller and each battery management unit is statistically analyzed to obtain the number of communication faults corresponding to each energy storage submodule.

[0087] For example, if a battery management controller communicates with three battery management units, and the communication between the battery management controller and all three battery management units is normal, then the number of communication failures is determined to be 0; if the battery management controller communicates normally with two of the battery management units but fails to communicate with the third battery management unit, then the number of communication failures is determined to be 1.

[0088] Subsequently, the number of communication failures corresponding to multiple energy storage sub-modules in the energy storage system was counted to obtain the total number of communication failures.

[0089] Step 303: Perform corresponding processing actions based on the number of communication failures, including outputting early warning information.

[0090] Different actions are taken depending on the number of communication failures. For example, if the number of communication failures is 0, the current state is maintained; if the number of communication failures n is greater than a and less than b, an early warning message is output; if the number of communication failures is greater than b, the energy storage submodule or energy storage system is shut down, where a is less than b.

[0091] The aforementioned warning message can be displayed by illuminating an alarm light or by emitting an audible warning. It should be noted that the method of outputting warning messages is not limited to the examples above; other methods can be used in practical applications.

[0092] In the above embodiments, if multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, the second communication state between the battery management controller and each battery management unit is obtained; the second communication states are statistically processed to obtain the number of communication failures; and corresponding processing actions are executed according to the number of communication failures, wherein the processing actions also include outputting early warning information. In the technical solution of this application embodiment, when it is determined that there is no risk of overall information loss, the risk of information loss of energy storage submodules is detected, which can effectively prevent energy storage system failures and shutdowns caused by the loss of information from one or more energy storage submodules, which helps to improve the reliability and stability of the energy storage system.

[0093] According to some embodiments of this application, the step "execute corresponding processing actions according to the number of communication failures" in the above embodiments may include: if the number of communication failures corresponding to any energy storage submodule is greater than a first number threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than a second number threshold, then control the energy storage system to shut down.

[0094] In the process of detecting whether there is a risk of information loss in the energy storage submodule, if it is determined that the number of communication failures corresponding to one or more energy storage submodules is greater than the first number threshold, it indicates that there are many communication failures between the battery management controller and the battery management unit in a single energy storage submodule, which may affect the overall reliability and stability of the energy storage system. In this case, the energy storage system is shut down.

[0095] Alternatively, the total number of communication failures can be calculated by summing the number of communication failures corresponding to multiple energy storage submodules. If the total number of communication failures exceeds a second threshold, it indicates that there are many communication failures between the battery management controller and the battery management unit in the energy storage system, which may affect the overall reliability and stability of the energy storage system. In this case, the energy storage system should be shut down.

[0096] The first and second quantity thresholds can be set according to the actual situation. The second quantity threshold can be equal to or greater than the first quantity threshold.

[0097] In the above embodiments, if the number of communication failures corresponding to any energy storage submodule exceeds a first threshold, or the total number of communication failures corresponding to multiple energy storage submodules exceeds a second threshold, the energy storage system is shut down. The technical solution of this application embodiment can respond promptly to the loss of information from a single electrical cabinet, which helps prevent potential safety risks, such as electrical faults and overheating caused by the loss of information from one or more electrical cabinets.

[0098] According to some embodiments of this application, refer to Figure 4 The step "execute corresponding processing actions according to the number of communication failures" in the above embodiments may include:

[0099] Step 401: If the number of communication faults corresponding to each energy storage submodule is less than or equal to the first quantity threshold, then obtain the switching status of the bus switch and the fire protection status of each energy storage submodule.

[0100] In the process of detecting whether there is a risk of information loss in the energy storage submodule, if the number of communication failures corresponding to each energy storage submodule is less than or equal to the first number threshold, it indicates that the number of communication failures between the battery management controller and the battery management unit in a single energy storage submodule is within an acceptable range. Then, the switching status of the bus switch and the fire protection status of each energy storage submodule are obtained.

[0101] The function of the aforementioned bus switch is to control the connection between the energy storage system and external devices. When the bus switch is in the closed position, it indicates that the energy storage system is connected to the external devices, and when the bus switch is in the open position, it indicates that the connection between the energy storage system and the external devices is disconnected.

[0102] The above fire status indicates whether the fire protection module corresponding to the energy storage submodule is activated. If the fire protection status is activated, it means that the fire protection module corresponding to the energy storage submodule is activated; if the fire protection status is not activated, it means that the fire protection module corresponding to the energy storage submodule is not activated.

[0103] Step 402: When the switch is in the closed position or the fire protection system is in the activated position, control the energy storage system to shut down.

[0104] If the combiner switch is in the closed position, it indicates that the energy storage system is connected to external devices despite a certain number of communication failures. In this situation, the stability of the energy storage system is easily affected, which in turn affects the safety of the external devices. Therefore, the energy storage system should be shut down. Understandably, shutdown prevents the battery from continuing to provide power in the event of a communication failure leading to the loss of cabinet information, thereby preventing potential safety issues or unforeseen operational risks.

[0105] Fire suppression module activation refers to emergency measures taken in response to potential fires or thermal runaway in energy storage submodules. If the fire suppression status of at least one energy storage submodule is activated, it indicates a possible battery overheating, short circuit, or other hazardous situation. Shutting down the energy storage system can prevent the battery pack from continuing to discharge, thus avoiding the spread of fire or further escalation of the danger.

[0106] Step 403: When the switch is in the open position and the fire protection status is not activated, perform state of charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge.

[0107] If the bus switch is in the open position, it indicates that although there are a certain number of communication faults in the energy storage system, the energy storage system is not connected to external devices. In this case, corresponding actions can be taken based on the state of charge (SBC). Therefore, the SBC of the faulty target energy storage submodules can be statistically analyzed first, and then the minimum SBC can be determined based on the SBCs of multiple target energy storage submodules.

[0108] For example, the state of charge of target energy storage submodule 1 is SOC1, the state of charge of target energy storage submodule 2 is SOC2, and the state of charge of target energy storage submodule 3 is SOC3. Among them, SOC1 is the smallest, so the smallest state of charge is determined to be SOC1.

[0109] Step 404: If the minimum state of charge is less than the preset state of charge threshold, then control the energy storage system to shut down.

[0110] After obtaining the minimum state of charge, the minimum state of charge is compared with the preset state of charge threshold. If the minimum state of charge is greater than or equal to the preset state of charge threshold, it indicates that even if the target energy storage submodule corresponding to the minimum state of charge continues to self-discharge, the risk of over-discharge is relatively low. Therefore, the current state of the energy storage system can be maintained.

[0111] If the minimum state of charge is less than the preset charge threshold, it indicates that the target energy storage submodule corresponding to the minimum state of charge continues to self-discharge, which poses a high risk of over-discharge and may even lead to damage or other safety issues, affecting the reliability of the energy storage system. Therefore, the energy storage system is shut down.

[0112] In the above embodiments, if the number of communication faults corresponding to each energy storage submodule is less than or equal to a first threshold, the switch status of the combiner switch and the fire protection status of each energy storage submodule are obtained; if the switch status is closed or the fire protection status is activated, the energy storage system is shut down; if the switch status is open and the fire protection status is not activated, the state of charge of the target energy storage submodule with communication faults is statistically analyzed to obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, the energy storage system is shut down. In the technical solution of this application embodiment, it is possible to reasonably determine whether to shut down the energy storage system according to different situations, which helps to minimize system downtime and improve system availability and operating efficiency.

[0113] According to some embodiments of this application, the step "to perform state of charge statistics on the target energy storage submodule with communication failure and obtain the minimum state of charge" in the above embodiments may include: for the target energy storage submodule, if the battery management controller has a communication failure with the first battery management unit in the target energy storage submodule, then perform state of charge statistics on the battery cells corresponding to the first battery management unit, and determine the first state of charge as the minimum state of charge.

[0114] For each target energy storage submodule with a communication failure, if the battery management controller fails to communicate with one of the battery management units but communicates normally with other battery management units, then the state of charge (SOC) statistics are performed on the battery cells corresponding to the battery management unit with the communication failure, and the first SOC statistics is determined as the minimum SOC.

[0115] Taking a battery cell as the cabinet and an energy storage submodule consisting of three cabinets as an example, if the communication between the battery management controller and the battery management unit corresponding to cabinet 1 fails, the state of charge of cabinet 1 is calculated and the state of charge of cabinet 1 is determined as the minimum state of charge.

[0116] In some embodiments, after determining the minimum state of charge, the minimum state of charge and the time of occurrence of the communication failure are stored.

[0117] In the above embodiments, if the communication between the battery management controller and the first battery management unit in the target energy storage submodule fails, the state of charge (SOC) of the battery cells corresponding to the first battery management unit is statistically analyzed, and the statistically analyzed first SOC is determined as the minimum SOC. In the technical solution of this application embodiment, by statistically analyzing the minimum SOC, corresponding measures can be taken based on the minimum SOC to reduce the risk of over-discharge and other problems caused by over-discharge.

[0118] Based on the above embodiments, referring to Figure 5 The embodiments of this application may further include the following steps:

[0119] Step 501: For the target energy storage submodule, if the communication between the battery management controller and the second battery management unit (excluding the first battery management unit) in the energy storage submodule fails, then the state of charge (SOC) statistics of the battery cells corresponding to the second battery management unit are performed to obtain the second SOC.

[0120] In practical applications, the state of charge (SOC) statistics can be performed according to a preset period. If a communication failure occurs between the battery management controller and the second battery management unit (excluding the first battery management unit) in the energy storage submodule, the SOC statistics of the battery cells corresponding to the second battery management unit are performed to obtain the second SOC.

[0121] Taking a battery unit as the cabinet and an energy storage submodule comprising three cabinets as an example, if the communication between the battery management controller and the battery management unit corresponding to cabinet 1 fails, the state of charge (SOC) of cabinet 1 is statistically analyzed to obtain the first SOC. Subsequently, SOC statistics are performed according to a preset period. If a communication failure is found between the battery management controller and the battery management unit corresponding to cabinet 2, the SOC of cabinet 2 is statistically analyzed to obtain the second SOC.

[0122] The preset period can be set hourly or daily, depending on the actual situation.

[0123] Step 502: If the difference between the first state of charge and the second state of charge is greater than a preset difference, then the second state of charge is updated to the minimum state of charge.

[0124] If the second state of charge is greater than the first state of charge, then the first state of charge is determined to be the minimum state of charge.

[0125] If the second state of charge is less than the first state of charge, the difference between the two states of charge is calculated. If this difference is less than or equal to a preset difference, it indicates that the difference in the states of charge between the two cabinets is small, and there is no need to update the minimum state of charge. If the difference is greater than the preset difference, it indicates that the second state of charge is smaller than the first state of charge, and the difference is significant. In this case, the second state of charge is used to replace the first state of charge as the minimum state of charge.

[0126] In some embodiments, after updating the minimum state of charge, the updated minimum state of charge and the time of occurrence of the new communication failure are stored.

[0127] Step 503: If the minimum state of charge is greater than or equal to the preset state of charge threshold, calculate the safe discharge duration corresponding to the minimum state of charge and perform the corresponding processing action according to the safe discharge duration.

[0128] If the minimum state of charge (MSC) is greater than or equal to a preset charge threshold, it indicates that even if the target energy storage submodule corresponding to the MSC continues to self-discharge, the risk of over-discharge is relatively low. In this case, the safe discharge duration can be calculated based on the self-discharge amount and the MSC. For example, the safe discharge duration can be obtained by dividing the MSC by the self-discharge amount.

[0129] Then, the cutoff discharge time can be calculated based on the stored occurrence time of communication failures and the safe discharge duration. Before the cutoff discharge time, the current state of the energy storage system can be maintained; when the cutoff discharge time is reached, a warning message can be output, or the energy storage system can be shut down.

[0130] In the above embodiments, for the target energy storage submodule, if there is a communication failure between the battery management controller and the second battery management unit (excluding the first battery management unit) in the energy storage submodule, the state of charge (SOC) of the battery cells corresponding to the second battery management unit is statistically analyzed to obtain the second SOC. If the difference between the first SOC and the second SOC is greater than a preset difference, the second SOC is updated to the minimum SOC. If the minimum SOC is greater than or equal to a preset SOC threshold, the safe discharge duration corresponding to the minimum SOC is calculated, and the corresponding processing action is executed according to the safe discharge duration. In the technical solution of this application embodiment, newly emerging communication failures can be detected in a timely manner, and the minimum SOC can be updated according to the newly emerging communication failures. This makes the control of the energy storage system more consistent with the actual situation, thereby improving the safety of the energy storage system.

[0131] According to some embodiments of this application, refer to Figure 6 The step "execute corresponding processing actions according to the safe discharge duration" in the above embodiments includes:

[0132] Step 601: After calculating the safe discharge duration, obtain the discharged duration.

[0133] After calculating the safe discharge duration, the time from the occurrence of the communication failure to the current time can be determined as the discharged duration.

[0134] In some embodiments, after updating the minimum state of charge, the safe discharge duration needs to be recalculated based on the updated minimum state of charge, and the discharged duration needs to be re-determined based on the occurrence time of the new communication failure and the current time.

[0135] Step 602: If the discharge duration exceeds the safe discharge duration, then control the energy storage system to shut down.

[0136] If the discharge duration exceeds the safe discharge duration, it indicates that over-discharge may have occurred, and the energy storage system should be shut down.

[0137] In some embodiments, considering the possibility of errors or jumps in the time (year, month, day), time protection logic can be added to prevent the energy storage system from shutting down due to system time errors. If a significant error is detected in the generator controller time (such as a jump in year, month, day, etc.), the shutdown function caused by exceeding the safe discharge time is disabled, the safe discharge time is no longer calculated, the time before the system time error is latched, and the shutdown function is re-enabled after the monitoring background sends a signal that the system time is normal.

[0138] In the above embodiments, after calculating the safe discharge duration, the already discharged duration is obtained; if the already discharged duration exceeds the safe discharge duration, the energy storage system is shut down. In the technical solution of this application embodiment, controlling the energy storage system to shut down after exceeding the safe discharge duration helps ensure the safe operation of the energy storage system, preventing overheating and overvoltage problems in faulty energy storage submodules during discharge, and improving the safety of the energy storage system.

[0139] Based on the above embodiments, referring to Figure 7 The embodiments of this application may further include the following steps:

[0140] Step 701: Determine the warning duration based on the safe discharge duration.

[0141] After calculating the safe discharge duration, the warning duration can be determined according to a preset ratio and the safe discharge duration, or it can be determined according to a reserved duration. For example, if the safe discharge duration is 30 days and the preset ratio is 90%, then the warning duration is determined to be 27 days; or, if the reserved duration is 1 day, then the warning duration is determined to be 29 days.

[0142] It should be noted that the method for determining the warning duration is not limited to the above example, and other methods can also be used.

[0143] Step 702: If the discharge duration is greater than the warning duration but less than the safe discharge duration, then output the warning information.

[0144] If the discharged duration is greater than the warning duration but less than the safe discharge duration, a warning message will be output. For example, if the discharged duration is 28 days, which is greater than the warning duration of 27 days but less than the safe discharge duration of 30 days, the alarm light will illuminate.

[0145] In the above embodiments, the warning duration is determined based on the safe discharge duration; if the discharged duration is longer than the warning duration but shorter than the safe discharge duration, a warning message is output. In the technical solution of this application embodiment, a warning can be issued to the energy storage system, reminding relevant operators to pay attention and reducing the risk of over-discharge.

[0146] According to some embodiments of this application, a protection method for an energy storage system is provided. Taking the system controller in Figure 1 as an example, the method may include the following steps:

[0147] Step 1: Obtain the first communication status from the monitoring backend to the system controller in the energy storage system, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and system controller.

[0148] Step 2: If the first communication status from the monitoring backend to the system controller is normal, and if the first communication status from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication statuses from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then the energy storage system shall be shut down.

[0149] Step 3: If the first communication status from the monitoring backend to the system controller is a communication failure, and / or the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and system controller to the monitoring backend is a normal communication status, then the current state of the energy storage system shall be maintained.

[0150] Step 4: If multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, obtain the second communication state between the battery management controller and each battery management unit; perform statistical processing on the second communication states to obtain the number of communication failures.

[0151] Step 5: If the number of communication failures corresponding to any energy storage submodule is greater than the first threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than the second threshold, then control the energy storage system to shut down.

[0152] Step 6: If the number of communication faults corresponding to each energy storage submodule is less than or equal to the first quantity threshold, then obtain the switching status of the bus switch and the fire protection status of each energy storage submodule.

[0153] Step 7: When the switch is in the closed position or the fire protection system is in the activated position, shut down the energy storage system.

[0154] Step 8: When the switch is in the open position and the fire alarm is not activated, for a target energy storage submodule with a communication failure, if the battery management controller fails to communicate with the first battery management unit in the target energy storage submodule, then the state of charge (SOC) of the battery cells corresponding to the first battery management unit is statistically analyzed, and the statistically analyzed first SOC is determined as the minimum SOC; if the battery management controller fails to communicate with the second battery management unit in the energy storage submodule other than the first battery management unit, then the SOC of the battery cells corresponding to the second battery management unit is statistically analyzed to obtain the second SOC; if the difference between the first SOC and the second SOC is greater than a preset difference, then the second SOC is updated to the minimum SOC.

[0155] Step 9: If the minimum state of charge is less than the preset charge threshold, then control the energy storage system to shut down.

[0156] Step 10: If the minimum state of charge is greater than or equal to the preset state of charge threshold, calculate the safe discharge duration corresponding to the minimum state of charge.

[0157] Step 11: Determine the warning duration based on the safe discharge duration; if the discharged duration is longer than the warning duration but shorter than the safe discharge duration, then output the warning information.

[0158] Step 12: If the discharge duration exceeds the safe discharge duration, then control the energy storage system to shut down.

[0159] In the above embodiments, two communication paths are set up: one from the battery management controller to the monitoring backend, and the other from the battery management controller to the monitoring backend via the corresponding module controller and system controller. The redundant communication paths can improve communication reliability and reduce the risk of information loss. Furthermore, regardless of whether there is an overall communication failure or a communication failure of a single energy storage submodule, actions such as shutdown or maintaining the current state can be taken based on the communication failure. In this way, the system downtime can be minimized, the availability and operating efficiency of the energy storage system can be improved, and the reliability and stability of the energy storage system can be enhanced, preventing potential safety risks.

[0160] It should be understood that although the steps in the flowchart above are shown sequentially as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowchart above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps.

[0161] Based on the same inventive concept, this application also provides a protection device for an energy storage system for implementing the protection method for the energy storage system described above. The solution provided by this device is similar to the solution described in the above method; therefore, the specific limitations in one or more embodiments of the protection device for the energy storage system provided below can be found in the limitations of the protection method for the energy storage system described above, and will not be repeated here.

[0162] According to some embodiments of this application, refer to Figure 8 A protection device for an energy storage system is provided, the device comprising:

[0163] The first state acquisition module 801 is used to acquire the first communication state from the monitoring backend to the system controller in the energy storage system, the first communication state from each battery management controller to the monitoring backend, and the first communication state from each battery management controller to the monitoring backend via the system controller.

[0164] The first protection module 802 is used to execute the corresponding processing action if at least one first communication status indicates that there is a communication failure in the energy storage system; wherein the processing action includes shutdown and maintaining the current status.

[0165] In some embodiments, the first protection module 802 is specifically used to control the energy storage system to shut down when the first communication state from the monitoring backend to the system controller is normal, and at least one of the first communication states from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure.

[0166] In some embodiments, the first protection module 802 is specifically used to maintain the current state of the energy storage system if the first communication status from each battery management controller to the monitoring backend and / or the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and system controller is normal, in the case of a communication failure in the first communication status from the monitoring backend to the system controller.

[0167] In some embodiments, refer to Figure 9 The device also includes:

[0168] The second state acquisition module 803 is used to acquire the second communication state between the battery management controller and each battery management unit for each energy storage submodule in the energy storage system if multiple first communication states are all normal.

[0169] The quantity statistics module 804 is used to perform statistical processing on the second communication state to obtain the number of communication failures;

[0170] The second protection module 805 is used to perform corresponding processing actions based on the number of communication failures, including outputting early warning information.

[0171] In some embodiments, the second protection module 805 is specifically used to control the energy storage system to shut down if the number of communication faults corresponding to any energy storage submodule is greater than a first quantity threshold, or the total number of communication faults corresponding to multiple energy storage submodules is greater than a second quantity threshold.

[0172] In some embodiments, the second protection module 805 is specifically used to obtain the switching status of the bus switch and the fire protection status of each energy storage submodule if the number of communication faults corresponding to each energy storage submodule is less than or equal to a first quantity threshold; and to control the energy storage system to shut down when the switching status is closed or the fire protection status is activated.

[0173] In some embodiments, the second protection module 805 is further configured to perform state of charge statistics on the target energy storage submodule with communication failure when the switch state is open and the fire protection state is not activated, and obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, then control the energy storage system to shut down.

[0174] In some embodiments, the second protection module 805 is specifically used to perform state of charge statistics on the battery cells corresponding to the first battery management unit if the communication between the battery management controller and the first battery management unit in the target energy storage submodule fails, and to determine the first state of charge as the minimum state of charge.

[0175] In some embodiments, the second protection module 805 is specifically used to perform state of charge statistics on the battery cells corresponding to the second battery management unit to obtain the second state of charge if the battery management controller fails to communicate with the second battery management unit in the energy storage submodule other than the first battery management unit.

[0176] If the difference between the first state of charge and the second state of charge is greater than a preset difference, then the second state of charge is updated to the minimum state of charge.

[0177] In some embodiments, the second protection module 805 is further configured to calculate the safe discharge duration corresponding to the minimum state of charge if the minimum state of charge is greater than or equal to a preset state of charge threshold, and to perform corresponding processing actions based on the safe discharge duration.

[0178] In some embodiments, the second protection module 805 is further configured to obtain the discharged duration after calculating the safe discharge duration; if the discharged duration is longer than the safe discharge duration, then control the energy storage system to shut down.

[0179] In some embodiments, the second protection module 805 is further configured to determine the warning duration based on the safe discharge duration; if the discharge duration is longer than the warning duration but shorter than the safe discharge duration, then the warning information is output.

[0180] The various modules in the protection device of the aforementioned energy storage system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of the electronic device in hardware form or independent of it, or stored in the memory of the electronic device in software form, so that the processor can call and execute the operations corresponding to each module.

[0181] According to some embodiments of this application, a computer device is provided, which can be a system controller in an energy storage system, and its internal structure diagram can be as follows: Figure 10 As shown, the computer device includes a processor, memory, input / output interface, communication interface, display unit, and input device. The processor, memory, and input / output interface are connected via a system bus, and the communication interface, display unit, and input device are also connected to the system bus via the input / output interface. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When executed by the processor, the computer program implements a protection method for an energy storage system. The display unit is used to form a visually visible image and can be a display screen, projection device, or virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the computer device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the computer device, or external keyboards, touchpads, or mice, etc.

[0182] Those skilled in the art will understand that Figure 10 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0183] According to some embodiments of this application, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory including instructions that can be executed by a processor of an electronic device to perform the above-described method. For example, the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0184] According to some embodiments of this application, a computer program product is also provided, which, when executed by a processor, can implement the above-described methods. The computer program product includes one or more computer instructions. When these computer instructions are loaded and executed on a computer, some or all of the above-described methods can be implemented, wholly or partially, according to the processes or functions described in the embodiments of this application.

[0185] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0186] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0187] The embodiments described above merely illustrate several implementation methods of this application to facilitate a detailed understanding of the technical solutions of this application, but should not be construed as limiting the scope of protection of the invention patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the scope of protection of this application. It should be understood that technical solutions obtained by those skilled in the art based on the technical solutions provided in this application through logical analysis, reasoning, or limited experimentation are all within the scope of protection of the appended claims. Therefore, the scope of protection of this patent application should be determined by the content of the appended claims, and the specification and drawings can be used to interpret the content of the claims.

Claims

1. A protection method for an energy storage system, characterized in that, The method includes: The system acquires the first communication status from the monitoring backend to the system controller in the energy storage system, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the system controller. If at least one of the first communication states indicates that the energy storage system has a communication failure, then the processing action corresponding to the communication failure is executed; wherein, the processing action includes shutdown and maintaining the current state.

2. The method according to claim 1, characterized in that, If at least one of the first communication states indicates a communication failure in the energy storage system, then the processing action corresponding to the communication failure is executed, including: If the first communication status from the monitoring backend to the system controller is normal, and if the first communication status from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication statuses from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then the energy storage system is controlled to shut down.

3. The method according to claim 1, characterized in that, If at least one of the first communication states indicates a communication failure in the energy storage system, the corresponding processing action for the communication failure is executed, including: If the first communication status from the monitoring backend to the system controller is a communication failure, and the first communication status from each battery management controller to the monitoring backend, and / or the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and the system controller is a normal communication status, then the current state of the energy storage system shall be maintained.

4. The method according to any one of claims 1-3, characterized in that, The method further includes: If multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, the second communication state between the battery management controller and each battery management unit is obtained; The second communication state is statistically processed to obtain the number of communication failures; The corresponding processing action is executed according to the number of communication failures, wherein the processing action also includes outputting early warning information.

5. The method according to claim 4, characterized in that, The step of performing corresponding processing actions based on the number of communication failures includes: If the number of communication failures corresponding to any of the energy storage submodules exceeds a first threshold, or the total number of communication failures corresponding to multiple energy storage submodules exceeds a second threshold, then the energy storage system is shut down.

6. The method according to claim 5, characterized in that, The step of performing corresponding processing actions based on the number of communication failures includes: If the number of communication faults corresponding to each of the energy storage sub-modules is less than or equal to the first number threshold, then the switching status of the bus switch and the fire protection status of each of the energy storage sub-modules are obtained. When the switch is in the closed position or the fire protection is activated, the energy storage system is shut down.

7. The method according to claim 6, characterized in that, The method further includes: When the switch is in the open position and the fire protection is not activated, the state of charge of the target energy storage submodule with communication failure is statistically analyzed to obtain the minimum state of charge. If the minimum state of charge is less than a preset charge threshold, the energy storage system is shut down.

8. The method according to claim 7, characterized in that, The step of performing state-of-charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge includes: For the target energy storage submodule, if the battery management controller fails to communicate with the first battery management unit in the target energy storage submodule, then the state of charge (SOC) of the battery cells corresponding to the first battery management unit is statistically analyzed, and the first SOC is determined as the minimum SOC.

9. The method according to claim 8, characterized in that, The method further includes: For the target energy storage submodule, if the battery management controller fails to communicate with the second battery management unit in the energy storage submodule other than the first battery management unit, then the state of charge of the battery cells corresponding to the second battery management unit is statistically analyzed to obtain the second state of charge. If the difference between the first state of charge and the second state of charge is greater than a preset difference, then the second state of charge is updated to the minimum state of charge.

10. The method according to claim 7, characterized in that, The method further includes: If the minimum state of charge is greater than or equal to the preset state of charge threshold, the safe discharge duration corresponding to the minimum state of charge is calculated, and the corresponding processing action is performed according to the safe discharge duration.

11. The method according to claim 10, characterized in that, The step of performing corresponding processing actions based on the safe discharge duration includes: After calculating the safe discharge duration, the discharged duration is obtained; If the discharged duration exceeds the safe discharge duration, the energy storage system is shut down.

12. The method according to claim 11, characterized in that, The method further includes: The warning duration is determined based on the safe discharge duration. If the discharged duration is greater than the warning duration but less than the safe discharge duration, then a warning message is output.

13. A protection device for an energy storage system, characterized in that, The device includes: The first state acquisition module is used to acquire the first communication state from the monitoring backend to the system controller in the energy storage system, the first communication state from each battery management controller to the monitoring backend, and the first communication state from each battery management controller to the monitoring backend via the system controller. The first protection module is configured to execute a processing action corresponding to the communication fault if at least one of the first communication states indicates that the energy storage system has a communication fault; wherein the processing action includes shutdown and maintaining the current state.

14. An energy storage system, characterized in that, The energy storage system includes a monitoring backend, a system controller, multiple energy storage sub-modules, a battery management controller and a module controller corresponding to each of the energy storage sub-modules, and the battery management controller and the module controller are connected in a one-to-one communication connection; the monitoring backend is connected in communication with the system controller and each of the battery management controllers, and the system controller is also connected in communication with each of the module controllers; The battery management controller is used to obtain the status information of the corresponding energy storage submodule; The module controller is used to control the corresponding energy storage sub-module; The monitoring backend is used for status monitoring; The system controller is configured to perform the method according to any one of claims 1 to 12.

15. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the method of any one of claims 1 to 12.

16. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method of any one of claims 1 to 12.

17. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method of any one of claims 1 to 12.

Images