Self-checking method suitable for fuel cell power system

Abstract

The invention relates to a self-checking method suitable for a fuel cell power system. The method comprises the following steps: when the fuel cell power system meets a self-checking condition, obtaining first battery performance data collected by main data collection equipment and second battery performance data collected by standby data collection equipment, and receiving third battery performance data sent by a target energy module through a communication link meeting a preset state condition; determining a system feedback state based on the first battery performance data, the second battery performance data and the third battery performance data; and if the system feedback state is an abnormal state, performing detection based on a target fault-tolerant strategy corresponding to the system feedback state, and determining a system self-inspection result and a battery control signal. By adopting the method, the fault detection accuracy of the fuel cell power system in the operation process can be improved.

Description

Technical Field

[0001] This application relates to the field of fuel cell hybrid power system control technology, and in particular to a self-testing method, apparatus, computer equipment, readable storage medium and program product suitable for fuel cell power systems. Background Technology

[0002] Fuel cell hybrid power systems, especially those used in high-reliability fields such as aviation and special vehicles, typically consist of multiple core energy components (such as fuel cell stacks and battery packs) and a power distribution management system. To ensure the safe and reliable start-up and shutdown of the fuel cell, related technologies often employ energy management controllers to perform simple detection logic checks on the fuel cell hybrid power system. For example, they judge the analog quantities returned by received sensor signals; if the sensor signal exceeds the abnormal range, it is considered that the sensor has malfunctioned; if the sensor self-test fails, the system is shut down. This results in low accuracy in fault detection during the operation of the fuel cell power system. Summary of the Invention

[0003] Therefore, it is necessary to provide a self-testing method for fuel cell power systems that can improve the accuracy of fault detection during operation, addressing the aforementioned technical problems.

[0004] Firstly, this application provides a self-testing method applicable to fuel cell power systems, including:

[0005] When the fuel cell power system meets the self-test conditions, the system acquires the first battery performance data collected by the primary data acquisition device and the second battery performance data collected by the backup data acquisition device, and receives the third battery performance data sent by the target energy module through a communication link that meets the preset state conditions.

[0006] Based on the first battery performance data, the second battery performance data, and the third battery performance data, the system feedback status is determined;

[0007] If the system feedback status is abnormal, then the system self-test result and battery control signal are determined based on the target fault-tolerant strategy corresponding to the system feedback status.

[0008] In one embodiment, determining the system feedback state based on the first battery performance data, the second battery performance data, and the third battery performance data includes:

[0009] If the first battery performance data and the second battery performance data are consistent, and the first battery performance data and the third battery performance data are consistent, then the system feedback status is determined to be normal.

[0010] The method further includes:

[0011] If the system feedback status is normal, then the system self-test result is determined to be a successful test result and the first battery performance data is determined to be a battery control signal.

[0012] In one embodiment, determining the system feedback state based on the first battery performance data, the second battery performance data, and the third battery performance data includes:

[0013] If the first battery performance data is consistent with the second battery performance data, and the first battery performance data is inconsistent with the third battery performance data, then the system feedback state is determined to be the first abnormal state.

[0014] If the first battery performance data and the second battery performance data are inconsistent, and the first battery performance data and the third battery performance data are consistent, then the system feedback state is determined to be the second abnormal state.

[0015] If the first battery performance data and the second battery performance data are inconsistent, and the first battery performance data and the third battery performance data are inconsistent, and the second battery performance data and the third battery performance data are inconsistent, then the system feedback state is determined to be a third abnormal state.

[0016] If the first battery performance data and the second battery performance data are inconsistent, and the first battery performance data and the third battery performance data are inconsistent, and the second battery performance data and the third battery performance data are consistent, then the system feedback state is determined to be the fourth abnormal state.

[0017] In one embodiment, the step of detecting based on the target fault-tolerant strategy corresponding to the system feedback state to determine the system self-test result and battery control signal includes:

[0018] If the system feedback state is the first abnormal state or the third abnormal state, the target fault tolerance strategy is determined to be another data acquisition strategy, and based on the other data acquisition strategy, the fourth battery performance data sent by other energy modules through a communication link that meets the preset state conditions is obtained.

[0019] If the fourth battery performance data is inconsistent with the first battery performance data, the second battery performance data, and the third battery performance data, a fault control signal is generated, and the system self-test result is determined to be a component detection failure result, and the battery control signal is determined to be the target signal value; if the fourth battery performance data is consistent with any one of the first battery performance data, the second battery performance data, and the third battery performance data, a fault tolerance control signal is generated, and the system self-test result is determined to be a component detection failure result, and the fourth battery performance data is determined to be the battery control signal.

[0020] In one embodiment, the step of detecting based on the target fault-tolerant strategy corresponding to the system feedback state to determine the system self-test result and battery control signal includes:

[0021] If the system feedback state is the second abnormal state, then the target fault tolerance strategy is determined to be generating a fault tolerance control signal; and if the system self-test result is determined to be a component detection failure result, then the first battery performance data is determined to be a battery control signal.

[0022] If the system feedback status is the fourth abnormal status, then the target fault-tolerant strategy is determined to be generating a fault-tolerant control signal; the system self-test result is determined to be a component detection failure result; and the second battery performance data is determined to be a battery control signal.

[0023] In one embodiment, the method further includes:

[0024] For each communication link, calculate the life signal difference between the first life signal value at the target time and the second life signal value at the previous time.

[0025] If the difference in the vital signs is a preset threshold, then the communication link is determined to meet the preset state condition.

[0026] If the difference in the life signal is not the preset threshold but is within the preset threshold range, then within the preset anti-jitter duration, the step of calculating the difference in the life signal between the first life signal value at the target time and the second life signal value at the previous time of the target time is re-executed. If the difference in the life signal is determined to be the preset threshold, then the communication link is determined to meet the preset state condition.

[0027] Secondly, this application also provides a self-testing device suitable for fuel cell power systems, comprising:

[0028] The receiving module is used to acquire first battery performance data collected by the main data acquisition device and second battery performance data collected by the backup data acquisition device when the fuel cell power system meets the self-test conditions, and to receive third battery performance data sent by the target energy module through a communication link that meets preset state conditions.

[0029] The first determining module is used to determine the system feedback status based on the first battery performance data, the second battery performance data, and the third battery performance data;

[0030] The second determining module is used to determine the system self-test result and battery control signal based on the target fault-tolerant strategy corresponding to the system feedback state if the system feedback state is an abnormal state.

[0031] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0032] When the fuel cell power system meets the self-test conditions, the system acquires the first battery performance data collected by the primary data acquisition device and the second battery performance data collected by the backup data acquisition device, and receives the third battery performance data sent by the target energy module through a communication link that meets the preset state conditions.

[0033] Based on the first battery performance data, the second battery performance data, and the third battery performance data, the system feedback status is determined;

[0034] If the system feedback status is abnormal, then the system self-test result and battery control signal are determined based on the target fault-tolerant strategy corresponding to the system feedback status.

[0035] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, performs the following steps:

[0036] When the fuel cell power system meets the self-test conditions, the system acquires the first battery performance data collected by the primary data acquisition device and the second battery performance data collected by the backup data acquisition device, and receives the third battery performance data sent by the target energy module through a communication link that meets the preset state conditions.

[0037] Based on the first battery performance data, the second battery performance data, and the third battery performance data, the system feedback status is determined;

[0038] If the system feedback status is abnormal, then the system self-test result and battery control signal are determined based on the target fault-tolerant strategy corresponding to the system feedback status.

[0039] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, performs the following steps:

[0040] When the fuel cell power system meets the self-test conditions, the system acquires the first battery performance data collected by the primary data acquisition device and the second battery performance data collected by the backup data acquisition device, and receives the third battery performance data sent by the target energy module through a communication link that meets the preset state conditions.

[0041] Based on the first battery performance data, the second battery performance data, and the third battery performance data, the system feedback status is determined;

[0042] If the system feedback status is abnormal, then the system self-test result and battery control signal are determined based on the target fault-tolerant strategy corresponding to the system feedback status.

[0043] The aforementioned self-testing method for fuel cell power systems acquires first battery performance data from the primary data acquisition device and second battery performance data from the backup data acquisition device, as well as third battery performance data sent by the target energy module through a communication link that meets preset state conditions, when the fuel cell power system meets self-testing conditions. Based on the first, second, and third battery performance data, the system feedback state is determined. By comparing battery performance data from different data sources, the state of sensors at different data sources is judged, thereby achieving self-testing of the acquired signals of each sensor. If the system feedback state is abnormal, the system self-testing result and battery control signals are determined based on the target fault-tolerant strategy corresponding to the system feedback state. This achieves fault tolerance for each data source when the system feedback state is abnormal, enabling switching between data from different sources. When a component sensor fails, reliable control signals can be selected to participate in the control of the fuel cell power system, ensuring the stability and reliability of the continuous operation of the fuel cell power system, thereby significantly improving the safety of the system during operation. Attached Figure Description

[0044] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0045] Figure 1 This is a flowchart illustrating a self-testing method applicable to a fuel cell power system in one embodiment;

[0046] Figure 2 This is a flowchart illustrating a self-testing method applicable to a fuel cell power system in one embodiment;

[0047] Figure 3 This is a flowchart illustrating a self-testing method applicable to a fuel cell power system in one embodiment;

[0048] Figure 4 This is a flowchart illustrating a self-testing method applicable to a fuel cell power system in one embodiment;

[0049] Figure 5 This is a flowchart illustrating a self-testing method applicable to a fuel cell power system in one embodiment;

[0050] Figure 6 This is a flowchart illustrating a self-testing method applicable to a fuel cell power system in one embodiment;

[0051] Figure 7 This is a structural block diagram of a self-testing device applicable to a fuel cell power system in one embodiment;

[0052] Figure 8 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0053] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0054] In one exemplary embodiment, such as Figure 1 As shown, a self-testing method suitable for a fuel cell power system is provided. This embodiment illustrates the application of this method to a terminal. Optionally, the terminal can be the controller of the fuel cell power system. It is understood that the method can also be applied to a server, and can also be applied to a system including a terminal and a server, and implemented through the interaction between the terminal and the server. In this embodiment, the method includes the following steps:

[0055] Step 101: When the fuel cell power system meets the self-test conditions, acquire the first battery performance data collected by the primary data acquisition device and the second battery performance data collected by the backup data acquisition device, and receive the third battery performance data sent by the target energy module through the communication link that meets the preset state conditions.

[0056] The self-test condition is that the fuel cell power system is in operation. The fuel cell power system includes at least a controller and multiple energy modules. Each energy module in the fuel cell power system has a primary data acquisition device and a backup data acquisition device at its output end, and both are hardwired to the controller. The output end of the energy module can be a bus in the fuel cell power system. The controller and each energy module transmit signals via communication links, which can be connected using the CAN communication protocol. The preset condition is that the communication link transmits data according to the normal transmission cycle. Battery performance data can include the voltage and current of the fuel cell power system. Optionally, the first battery performance data and the second battery performance data are obtained by the primary controller sensor and the backup controller sensor, respectively, by collecting battery performance data from the bus in the fuel cell power system. Each energy module can collect its corresponding battery performance data based on its component sensors and send the battery performance data to the controller via the communication link.

[0057] Specifically, after the fuel cell power system is powered on and enters the operating state, it is determined that the fuel cell power system meets the self-test conditions. The primary data acquisition device can collect the first battery performance data from the output end of the energy module and periodically transmit this first battery performance data to the controller via hardwire according to a preset signal acquisition cycle. The backup data acquisition device can collect the second battery performance data from the output end of the energy module and periodically transmit this second battery performance data to the controller via hardwire according to a preset signal acquisition cycle. Each energy module is equipped with a sensor, which can collect the battery performance data of the corresponding energy module and transmit the battery performance data to the controller via a communication link according to a preset signal acquisition cycle. The controller can determine the status of each communication link according to the status judgment strategy and obtain the third battery performance data of the communication link that meets the preset status conditions. Optionally, the preset status condition is that the life signal difference of the communication link meets the preset self-test success condition. This life signal difference can reflect the status of the communication link in sending battery performance data to the controller within the preset signal acquisition cycle.

[0058] For example, the controller can be an Energy Management Controller (EMC). The primary data acquisition device can be a primary controller sensor, and the backup data acquisition device can be a backup controller sensor. The energy modules in the fuel cell power system include a fuel cell, a power battery, and a distribution panel. The target energy module includes the distribution panel, and other energy modules include the fuel cell and the power battery. Sensors are installed in the fuel cell, the power battery, and the distribution panel respectively. These sensors are used to collect battery performance data of the modules; that is, the third battery performance data is obtained by the distribution panel sensor. The sensors can include voltage sensors and current sensors.

[0059] In addition, the self-test condition can be a sensor self-test enable condition. This sensor self-test enable condition can be that the fuel cell system in operation receives performance data from each battery. That is, when the performance data of each battery is received, the fuel cell power system self-test step is performed.

[0060] Step 102: Determine the system feedback status based on the first battery performance data, the second battery performance data, and the third battery performance data.

[0061] The system feedback status can include system feedback status values, with different feedback status bits including a normal state and multiple abnormal states. The normal state indicates that the performance data of the first, second, and third batteries are all reliable, while the abnormal state indicates that at least one of the performance data of the first, second, and third batteries is unreliable. Each abnormal state is of a different type, and each type of abnormal state indicates that at least one source of sensor data is abnormal.

[0062] Specifically, the controller can compare the first battery performance data with the second battery performance data to obtain a first comparison result, and compare the first battery performance data with the third battery performance data to obtain a second comparison result. Based on the first and second comparison results, the controller determines the system feedback state. Optionally, the controller compares the second battery performance data with the third battery performance data to obtain a third comparison result, and determines the system feedback state based on the first, second, and third comparison results. It should be understood that determining the system feedback state based on the comparison results is related to each specific comparison result. The specific process of obtaining the comparison results is described in subsequent embodiments and will not be repeated here.

[0063] Step 103: If the system feedback status is abnormal, then perform detection based on the target fault tolerance strategy corresponding to the system feedback status to determine the system self-test result and battery control signal.

[0064] The target fault-tolerance strategy is a system fault-tolerance judgment strategy. This strategy compares the fault tolerance of various data sources and selects the most reliable data source when unreliable data is found. The system self-test result is the self-test result of the fuel cell power system on the components and sensors of each data source. Optionally, the data sources include sensors from the primary controller, backup controller, target energy module, and other energy modules. The battery control signal refers to the reliable battery performance data determined from each data source through the target fault-tolerance strategy. This battery control signal can be used to calculate the output power of the fuel cell power system.

[0065] Specifically, if the system feedback state is an abnormal state, the controller can determine the target fault tolerance strategy corresponding to the system feedback state in the correspondence between the feedback state and the fault tolerance strategy, and perform detection based on the target fault tolerance strategy corresponding to the system feedback state to determine the system self-test result, and determine the battery control signal corresponding to the system self-test result.

[0066] Optionally, the fuel cell control system isolates battery performance data from other data sources and employs a target fault-tolerant strategy to select reliable battery performance data as the control data for the fuel cell power system. For example, the battery control signal can be the voltage and current values ​​of the fuel cell power system, and the power of the system calculated based on these values. The fuel cell operating system can then supply power to the equipment where the fuel cell operating system is located based on the power values; this equipment could be from the aerospace industry or other fields.

[0067] The aforementioned self-testing method for fuel cell power systems acquires first battery performance data from the primary data acquisition device and second battery performance data from the backup data acquisition device, as well as third battery performance data sent by the target energy module through a communication link that meets preset state conditions, when the fuel cell power system meets self-testing conditions. Based on the first, second, and third battery performance data, the system feedback state is determined. By comparing battery performance data from different data sources, the state of sensors at different data sources is judged, thereby achieving self-testing of the acquired signals of each sensor. If the system feedback state is abnormal, the system self-testing result and battery control signals are determined based on the target fault-tolerant strategy corresponding to the system feedback state. This achieves fault tolerance for each data source when the system feedback state is abnormal, enabling switching between data from different sources. When a component sensor fails, reliable control signals can be selected to participate in the control of the fuel cell power system, ensuring the stability and reliability of the continuous operation of the fuel cell power system, thereby significantly improving the safety of the system during operation.

[0068] In an exemplary embodiment, the specific implementation process of step 102, "determining the system feedback state based on the first battery performance data, the second battery performance data, and the third battery performance data," may include:

[0069] If the performance data of the first battery and the second battery are consistent, and the performance data of the first battery and the third battery are consistent, then the system feedback status is determined to be normal.

[0070] In the normal state, the sensors for the first battery performance data, the second battery performance data, and the third battery performance data pass the self-test, which means that the sensors of each data source component are in a normal data acquisition state.

[0071] Specifically, if the first comparison result is that the performance data of the first battery is consistent with the performance data of the second battery, and the second comparison result is that the performance data of the first battery is consistent with the performance data of the third battery, the controller determines that the system feedback state is normal.

[0072] In this embodiment, the system feedback status is determined by comparing battery performance data from multiple data sources, which improves the reliability and accuracy of system self-testing and enhances the safety of system operation.

[0073] In one exemplary embodiment, the self-testing method for a fuel cell power system further includes:

[0074] If the system feedback status is normal, then the system self-test result is determined to be a successful test result, and the first battery performance data is determined to be a battery control signal.

[0075] The successful detection result indicates that the sensors that provide the data in the fuel cell power system at the current moment are reliable.

[0076] Specifically, if the system feedback status is normal, the controller determines that the system self-test result is a successful test result and that the first battery performance data is the battery control signal. Optionally, the controller determines the output power of the fuel cell power system based on the first battery performance data.

[0077] Optionally, after the controller determines that the system detection result is a successful result, it records the self-test status bit of the fuel cell power system at that moment as a normal identifier, and the terminal can store the self-test status bit at each moment to the data storage module.

[0078] In this embodiment, by determining the system self-test result as a successful test result and determining the first battery performance data as a battery control signal if the system feedback status is normal, the accuracy of the test result judgment is improved.

[0079] In an exemplary embodiment, the specific implementation process of step 102, "determining the system feedback state based on the first battery performance data, the second battery performance data, and the third battery performance data," may include the following four methods:

[0080] The first implementation method is as follows: If the performance data of the first battery is consistent with the performance data of the second battery, but the performance data of the first battery is inconsistent with the performance data of the third battery, then the system feedback status is determined to be the first abnormal status.

[0081] The first abnormal state refers to the self-test state of the component sensor that collects the performance data of the third battery in the fuel cell power system being abnormal, or the self-test state of the component sensors that collect the performance data of the third battery, such as the main controller sensor and the backup controller sensor, being abnormal; optionally, the sensor of the target energy module is faulty, or the communication link of the target energy module is abnormal.

[0082] Specifically, if the first comparison result is that the performance data of the first battery is consistent with the performance data of the second battery, and the second comparison result is that the performance data of the first battery is inconsistent with the performance data of the third battery, then the system feedback state is determined to be the first abnormal state.

[0083] The second implementation method: If the performance data of the first battery and the performance data of the second battery are inconsistent, and the performance data of the first battery and the performance data of the third battery are consistent, then the system feedback state is determined to be the second abnormal state.

[0084] The second abnormal state refers to the abnormal state of the self-test status of the sensor component that collects the second battery performance data in the fuel cell power system.

[0085] Specifically, if the first comparison result is that the first battery performance data is inconsistent with the second battery performance data, and the second comparison result is that the first battery performance data is consistent with the third battery performance data, the controller determines that the system feedback state is the second abnormal state.

[0086] The third implementation method: If the performance data of the first battery and the performance data of the second battery are inconsistent, and the performance data of the first battery and the performance data of the third battery are inconsistent, and the performance data of the second battery and the performance data of the third battery are inconsistent, then the system feedback status is determined to be the third abnormal status.

[0087] The third abnormal state refers to the self-test status of the components and sensors in the fuel cell power system that collect the performance data of the first battery, the second battery, and the third battery all being abnormal, or the self-test status of the components and sensors that collect the performance data of the first battery and the third battery being abnormal, or the self-test status of the components and sensors that collect the performance data of the second battery and the third battery being abnormal.

[0088] Specifically, if the first comparison result is that the first battery performance data is inconsistent with the second battery performance data, and the second comparison result is that the first battery performance data is inconsistent with the third battery performance data, the controller will compare the second battery performance data with the third battery performance data to obtain a third comparison result; if the third comparison result is that the second battery performance data is inconsistent with the third battery performance data, the system feedback state is determined to be a third abnormal state.

[0089] The fourth implementation method: If the performance data of the first battery and the performance data of the second battery are inconsistent, and the performance data of the first battery and the performance data of the third battery are inconsistent, and the performance data of the second battery and the performance data of the third battery are consistent, then the system feedback state is determined to be the fourth abnormal state.

[0090] The fourth abnormal state refers to the abnormal state of the self-test status of the components and sensors in the fuel cell power system that collect the performance data of the first and third batteries.

[0091] Specifically, if the first comparison result is that the first battery performance data is inconsistent with the second battery performance data, and the second comparison result is that the first battery performance data is inconsistent with the third battery performance data, the controller will compare the second battery performance data with the third battery performance data to obtain a third comparison result; if the third comparison result is that the second battery performance data is consistent with the third battery performance data, the system feedback state is determined to be a third abnormal state.

[0092] In this embodiment, the system feedback status is determined based on the first battery performance data, the second battery performance data, and the third battery performance data. The authenticity of each signal is judged, and self-testing of sensors in various parts of the fuel cell power system is realized. This facilitates the subsequent determination of fault-tolerant strategies, ensures the normal operation of the system, and provides log information for subsequent repair and testing of the fuel cell power system.

[0093] In an exemplary embodiment, the specific implementation process of step 103, "based on the target fault-tolerant strategy corresponding to the system feedback state, perform detection to determine the system self-test result and battery control signal," may include:

[0094] If the system feedback status is either the first or third abnormal state, the target fault-tolerant strategy is determined to be another data acquisition strategy. Based on this strategy, the fourth battery performance data sent by other energy modules through a communication link that meets preset state conditions is acquired. If the fourth battery performance data is inconsistent with the first, second, and third battery performance data, a fault control signal is generated, and the system self-test result is determined to be a component detection failure, and the battery control signal is determined to be the target signal value. If the fourth battery performance data is consistent with any of the first, second, and third battery performance data, a fault-tolerant control signal is generated, and the system self-test result is determined to be a component detection failure, and the fourth battery performance data is determined to be the battery control signal.

[0095] Other data acquisition strategies include fault-tolerant judgment of abnormal states by receiving data from component sensors on other communication links. Fault control signals are used to control the system to enter a fault mode, which can involve controlling each energy module to power down sequentially in a specified order and sending a fault signal to the control center. The target signal value is a fixed signal value preset when in fault mode. For example, this target signal value can be a signal threshold, which can be 0. Fault-tolerant control signals refer to the system initiating self-test fault-tolerant control, operating normally based on battery control signals.

[0096] Specifically, when the system feedback state is either the first or third abnormal state, the controller determines the target fault-tolerant strategy corresponding to this system feedback state as another data acquisition strategy. Sensors from other energy modules can periodically send acquired fourth battery performance data to the controller via communication links during a preset signal acquisition period. The controller can determine the state of each communication link according to the state judgment strategy and obtain the fourth battery performance data from the communication links that meet the preset state conditions. The controller can compare the fourth battery performance data with the first, second, and third battery performance data respectively. If the fourth battery performance data is inconsistent with all three, a fault control signal is generated, and the system self-test result is determined to be a component detection failure, and the battery control signal is determined to be the target signal value. If the fourth battery performance data is consistent with any one of the first, second, or third battery performance data, a fault-tolerant control signal is generated; the system self-test result is determined to be a component detection failure, and the fourth battery performance data is determined to be the battery control signal.

[0097] Optionally, if the fourth battery performance data is inconsistent with the first, second, and third battery performance data respectively, the controller can determine that the self-test status bits of the component sensors corresponding to the first, second, third, and fourth battery performance data are all failed.

[0098] If the fourth battery performance data is consistent with any of the first, second, or third battery performance data, the controller and the self-test status bit of the sensor corresponding to the inconsistent battery performance data will be set to failure.

[0099] In this embodiment, by introducing other different communication links, switching between signals from multiple sources is achieved, ensuring that after a single component sensor fails, the correct battery performance data can be selected as the control signal to participate in control, thereby improving the system's fault tolerance, improving the accuracy of system fault diagnosis, and ensuring the stability of continuous system operation.

[0100] In an exemplary embodiment, the specific implementation process of step 103, "based on the target fault-tolerant strategy corresponding to the system feedback state, perform detection to determine the system self-test result and battery control signal," may include:

[0101] If the system feedback state is the second abnormal state, the target fault tolerance strategy is determined to be generating a fault tolerance control signal; and the system self-test result is determined to be a component detection failure result, and the first battery performance data is determined to be the battery control signal; if the system feedback state is the fourth abnormal state, the target fault tolerance strategy is determined to be generating a fault tolerance control signal; the system self-test result is determined to be a component detection failure result, and the second battery performance data is determined to be the battery control signal.

[0102] Specifically, if the system feedback state is the second abnormal state, the controller determines the target fault-tolerant strategy to generate a fault-tolerant control signal; determines the system self-test result to be a component detection failure result; determines the first battery performance data to be a battery control signal; and isolates the erroneous voltage collected by the backup controller sensor. If the system feedback state is the fourth abnormal state, the controller determines the target fault-tolerant strategy to generate a fault-tolerant control signal; determines the system self-test result to be a component detection failure result; determines the second battery performance data to be a battery control signal; and isolates the erroneous voltage collected by the primary controller sensor.

[0103] In this embodiment, the corresponding target fault-tolerant strategy and the corresponding battery control signal are determined by the system feedback status, ensuring stable system operation when there are abnormalities in sensor data.

[0104] In one exemplary embodiment, such as Figure 2 As shown, self-testing methods applicable to fuel cell power systems also include:

[0105] Step 201: For each communication link, calculate the life signal difference between the first life signal value at the target time and the second life signal value at the previous time.

[0106] Optionally, the controller can specify a preset signal acquisition period. If a battery performance signal transmitted by the communication link is received within the preset acquisition period, and the battery performance signal is within a preset threshold range, the life signal value corresponding to the communication link is updated. For example, if the battery performance signal of the communication link is received at the first acquisition time, the life signal value is set to a first value; if the battery performance signal of the communication link is received at the second acquisition time, the life signal value is set to a second value. The difference between the first acquisition time and the second acquisition time is the preset signal acquisition period.

[0107] Specifically, for each communication link, the controller can acquire the first life signal value at the target time, acquire the second life signal value at the previous time of the target time, and determine the difference between the first life signal value and the second life signal value as the life signal difference.

[0108] Step 202: If the difference in life signals is a preset threshold, then the communication link is determined to meet the preset state conditions.

[0109] Specifically, if the life signal difference is a preset threshold, and the life signal difference remains at the preset threshold within a preset anti-jitter duration, then the communication link is determined to meet the preset state condition. Optionally, the preset anti-jitter duration can be determined based on a preset signal acquisition period. For example, the preset anti-jitter duration can be 5 times the signal acquisition period. That is, the life signal difference corresponding to the communication link remains at the preset threshold within 5 preset signal acquisition periods. It should be understood that this example is for illustrative purposes only and does not constitute a specific limitation. Optionally, if the life signal difference is a preset threshold, the self-test result of the communication link is a complete success.

[0110] Step 203: If the life signal difference is not at the preset threshold but is within the preset threshold range, then within the preset anti-jitter duration, re-execute the step of calculating the life signal difference between the first life signal value at the target time and the second life signal value at the previous time of the target time. If the life signal difference is determined to be at the preset threshold, then determine that the communication link meets the preset state conditions.

[0111] Specifically, if the life signal difference is not at a preset threshold but is within a preset threshold range, the controller re-executes the step of calculating the life signal difference between the first life signal value at the target time and the second life signal value at the previous time within a preset anti-jitter duration. If, within the preset anti-jitter duration, the life signal difference is determined to be at the preset threshold, the communication link is determined to meet the preset state condition. Optionally, if the life signal difference is not at the preset threshold but is within a preset threshold range, and reaches the preset threshold within the preset anti-jitter time, the self-test result of the communication link is a successful self-test and it is usable.

[0112] Optionally, if the life signal difference is not at a preset threshold and is not within the preset threshold range, and if the life signal difference still is not at a preset threshold and is not within the preset threshold range after exceeding a preset anti-jitter duration, then the communication link is determined not to meet the preset state conditions. For example, the preset threshold range can be greater than a preset threshold and less than a maximum threshold; not being at a preset threshold and not within the preset threshold range can be less than a preset threshold or greater than or equal to a maximum threshold. If the life signal difference is less than the preset threshold, it indicates that the signal has not been updated in the current stage, and after time anti-jitter, the life signal difference still has not been updated, then the self-test is determined to have completely failed. If the life signal difference is greater than or equal to the maximum threshold, it indicates that there is a large deviation in the signal in the current stage, the communication link quality is abnormal, and after time anti-jitter, the life signal difference is still abnormal, then the self-test is determined to have failed and is unusable.

[0113] Optionally, if the received battery performance signal is outside the signal threshold range, the controller will treat the battery performance signal as erroneous data and determine that the data transmission of the communication link is abnormal. That is, the life signal value will not be updated.

[0114] In this embodiment, segmented self-testing of the communication link improves the accuracy of the communication link (CAN communication) test, thereby enhancing the security and reliability of the system.

[0115] In one instance, the controller can preset a battery performance range. If the received battery performance data is not within the battery performance range, the controller determines that the battery performance data is abnormal and marks the communication link as an abnormal link. If at least one of the following conditions is met: the life signal difference is not a preset threshold, or the link is not within the preset range, the controller determines that the communication link does not meet the preset state conditions.

[0116] In one example, the self-testing method applicable to fuel cell power systems also includes:

[0117] If the communication link of the main energy module does not meet the preset state conditions, then obtain the fourth battery performance data sent by the communication link of other energy modules that meets the preset state conditions.

[0118] If the performance data of the first battery is inconsistent with the performance data of the second battery, and the performance data of the fourth battery is inconsistent with both the performance data of the first battery and the performance data of the second battery, then the system feedback state is determined to be an abnormal state; and the target fault tolerance strategy is to generate a fault control signal, and the battery control signal is the target signal value.

[0119] If the performance data of the first battery and the performance data of the second battery are consistent, and the performance data of the first battery is consistent with the performance data of the fourth battery, then the system feedback status is determined to be in normal state, and the battery control signal is determined to be the performance data of the first battery.

[0120] If the first battery performance data is inconsistent with the second battery performance data, and the fourth battery performance data is consistent with either the first battery performance data or the second battery performance data, then the system feedback state is determined to be an abnormal state; and the target fault-tolerant strategy is to generate a fault-tolerant control signal, and the battery control signal is the fourth battery performance data.

[0121] If the performance data of the first battery and the performance data of the second battery are consistent, and the performance data of the fourth battery is inconsistent with both the performance data of the first battery and the performance data of the second battery, then the system feedback state is determined to be an abnormal state; and the target fault tolerance strategy is to generate a fault control signal, and the battery control signal is the target signal value.

[0122] Optionally, if all communication links corresponding to the fourth battery performance data are abnormal links, then the other data acquisition strategy is to generate a fault control signal.

[0123] Optionally, if the backup controller sensor fails, the comparison is based solely on the performance data of the first battery and the performance data of the third battery.

[0124] In one instance, such as Figure 3 As shown, the self-testing method applicable to fuel cell power systems specifically includes the following steps:

[0125] After the system enters self-test mode, it checks whether each sensor is in normal condition through sensor self-test. If the self-test fails, it enters the fault-tolerant control stage, which isolates and replaces faulty sensor signals. In the CAN self-test stage, a segmented self-test is adopted, which is divided into four stages: complete self-test failure, complete self-test success, successful self-test and usable, and self-test failure and unusable. If the CAN test is successful and the sensor self-test is successful, or the self-test status is failed but the system is running normally, then the system self-test is successful. If the sensor self-test fails or the CAN communication link is abnormal, then the self-test failure condition is met, and the system enters fault mode.

[0126] In this embodiment, a multi-dimensional self-check judgment and self-check fault tolerance logic is introduced. During the system operation phase, when a single fault occurs, the system can identify and isolate the fault without affecting the normal operation of the system, thus ensuring the reliability of the system.

[0127] In one instance, such as Figure 4 As shown, self-testing methods applicable to fuel cell power systems also include:

[0128] The CAN self-test is determined by calculating the update difference of the life signal in partitioned data, and a debounce module is added for timing judgment. The CAN self-test is divided into four stages: complete self-test failure, complete self-test success, successful self-test and usable, and self-test failure and unusable. Complete self-test failure and self-test failure and unusable are judged as self-test failure, and complete self-test success and self-test success and usable self-test are judged as self-test success. The specific status judgment may include the following process:

[0129] (1) Self-test completely failed: When the life signal difference is equal to 0, it means that the signal has not been updated in the current stage, and the life signal difference has not been updated after time jitter, then the self-test is completely failed.

[0130] (2) Self-test is completely successful: When the life signal difference is equal to 1, it means that the signal is updated normally in the current stage, and after time jitter, the life signal difference is still updated normally, then the self-test is completely successful.

[0131] (3) Self-test successful and usable: When the difference in life signal is greater than 1 and less than 2, it indicates that there is a slight deviation in the signal at the current stage, but it does not affect normal use. After time jitter, the difference in life signal is still updated normally, and the self-test is determined to be successful and usable.

[0132] (4) Self-test failure and unusable: When the difference in life signal is greater than 2, it indicates that there is a large deviation in the signal at the current stage, the CAN quality is abnormal, and the use is affected. If the difference in life signal is still abnormal after time jitter, then the self-test failure and unusable is determined.

[0133] In this embodiment, the accuracy of CAN self-test is ensured through CAN partition self-testing, and the quality of CAN signals can also be evaluated. Sensor self-testing allows for more accurate determination of the authenticity of sensor faults, eliminating false faults at their source and significantly improving the system's safety and reliability.

[0134] In one example, a self-testing method applicable to a fuel cell power system also includes: using multiple sensor signal sources for self-testing. These multiple sensor signal sources include primary controller sensor signal acquisition, backup controller sensor signal acquisition, fuel cell CAN signal transmission, power battery CAN signal transmission, and power distribution CAN signal transmission. The controller's self-test module compares different signal sources to determine whether the self-test passes, and uses fault-tolerant judgment to decide which voltage path to select, such as... Figure 5 As shown, it specifically includes:

[0135] When self-test is enabled, multiple sensor data are evaluated. If no abnormalities are found, the self-test passes, the status bit is updated to normal, and the battery control signal is determined. If multiple sensor data are abnormal, the self-test fails, the system feedback status and the corresponding target fault tolerance strategy are determined, and based on the target fault tolerance strategy, signal fault tolerance judgment is performed. If the signal fault tolerance judgment passes, the appropriate self-tested sensor data is selected as the control signal. If the signal fault tolerance judgment fails, the sensor is determined to be abnormal, and the self-test fails.

[0136] In one instance, such as Figure 6 As shown, self-testing methods applicable to fuel cell power systems also include:

[0137] (1) When the main controller sensor data, the backup controller sensor data, and the power distribution box CAN sensor data are consistent, the self-test is passed, the system feedback status is normal, and the system feedback status is marked as 1, the main controller sensor data is used as the battery control signal (control voltage).

[0138] (2) When the sensor data of the main controller and the sensor data of the backup controller are inconsistent, and the sensor data of the main controller is consistent with the CAN sensor data of the distribution panel box, the self-test fails, the system feedback status is the second abnormal status, and the system feedback status is marked as 2; the self-test fault-tolerant control is started, the fuel cell power system runs normally, the erroneous voltage collected by the backup controller sensor is isolated, and the voltage collected by the main controller sensor is used as the control voltage;

[0139] (3) When the sensor data of the main controller and the sensor data of the backup controller are inconsistent, and the sensor data of the backup controller is consistent with the CAN sensor data of the distribution panel box, the self-test fails, the system feedback status is the fourth abnormal status, and the system feedback status is marked as 3; the self-test fault-tolerant control is started, the fuel cell power system runs normally, the erroneous voltage collected by the main controller sensor is isolated, and the voltage collected by the backup controller sensor is used as the control voltage;

[0140] (4) When the voltage acquisition of the main controller sensor and the backup controller sensor is consistent, but inconsistent with the data of the CAN sensor in the distribution box, the self-test fails; the system feedback status is the first abnormal status, the self-test fault-tolerant control is started, and the sensor data of other energy modules is introduced for comparison. If the sensor data of other energy modules is consistent with any of the three voltages, the other voltage is selected as the control voltage, and the system feedback status is marked as 4, and the system is running normally.

[0141] (5) When the voltage acquisition of the main controller sensor and the backup controller sensor is inconsistent, but inconsistent with the CAN sensor data of the distribution panel box, the system feedback status is determined to be the fourth abnormal status, and the self-test fails; the self-test fault-tolerant control is started, and the sensor data of other energy modules is introduced for comparison. If the sensor data of other energy modules is inconsistent with any of the three voltage channels, the sensor self-test is determined to fail, the feedback status is 5, and the system enters the fault mode.

[0142] In this embodiment, the fault tolerance of the sensor enables the switching between signals from different sources, ensuring that even if a single sensor fails, the correct sensor value can still be used as a control signal to participate in the control, thus ensuring the stability of the system's continuous operation.

[0143] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0144] Based on the same inventive concept, this application also provides a self-testing device for a fuel cell power system to implement the self-testing method for a fuel cell power system described above. The solution provided by this device is similar to the solution described in the above method. Therefore, the specific limitations of one or more self-testing device embodiments for a fuel cell power system provided below can be found in the limitations of the self-testing method for a fuel cell power system described above, and will not be repeated here.

[0145] In one exemplary embodiment, such as Figure 7 As shown, a self-testing device 70 suitable for a fuel cell power system is provided, comprising: a receiving module 71, a first determining module 72, and a second determining module 73, wherein:

[0146] The receiving module 71 is used to acquire first battery performance data collected by the main data acquisition device and second battery performance data collected by the backup data acquisition device when the fuel cell power system meets the self-test conditions, and to receive third battery performance data sent by the target energy module through a communication link that meets preset state conditions.

[0147] The first determining module 72 is used to determine the system feedback status based on the first battery performance data, the second battery performance data and the third battery performance data;

[0148] The second determining module 73 is used to perform detection based on the target fault-tolerant strategy corresponding to the system feedback state if the system feedback state is an abnormal state, and to determine the system self-test result and the battery control signal.

[0149] In one embodiment, the first determining module 72 is specifically used to determine the system feedback state as normal if the first battery performance data and the second battery performance data are consistent, and the first battery performance data and the third battery performance data are consistent.

[0150] In one embodiment, the self-testing device for a fuel cell power system further includes:

[0151] The third determining module is used to determine the system self-test result as a successful test result and to determine the first battery performance data as a battery control signal if the system feedback status is normal.

[0152] In one embodiment, the first determining module 72 is specifically used to determine the system feedback state as a first abnormal state if the first battery performance data is consistent with the second battery performance data and the first battery performance data is inconsistent with the third battery performance data.

[0153] If the first battery performance data and the second battery performance data are inconsistent, and the first battery performance data and the third battery performance data are consistent, then the system feedback state is determined to be the second abnormal state.

[0154] If the first battery performance data and the second battery performance data are inconsistent, and the first battery performance data and the third battery performance data are inconsistent, and the second battery performance data and the third battery performance data are inconsistent, then the system feedback state is determined to be a third abnormal state.

[0155] If the first battery performance data and the second battery performance data are inconsistent, and the first battery performance data and the third battery performance data are inconsistent, and the second battery performance data and the third battery performance data are consistent, then the system feedback state is determined to be the fourth abnormal state.

[0156] In one embodiment, the second determining module 73 is specifically used to determine the target fault tolerance strategy as other data acquisition strategy when the system feedback state is the first abnormal state or the third abnormal state, and to obtain the fourth battery performance data sent by other energy modules through a communication link that meets preset state conditions based on the other data acquisition strategy.

[0157] If the fourth battery performance data is inconsistent with the first battery performance data, the second battery performance data, and the third battery performance data, a fault control signal is generated, and the system self-test result is determined to be a component detection failure result, and the battery control signal is determined to be the target signal value; if the fourth battery performance data is consistent with any one of the first battery performance data, the second battery performance data, and the third battery performance data, a fault tolerance control signal is generated, and the system self-test result is determined to be a component detection failure result, and the fourth battery performance data is determined to be the battery control signal.

[0158] In one embodiment, the second determining module 73 is specifically configured to determine the target fault-tolerant strategy as generating a fault-tolerant control signal when the system feedback state is the second abnormal state; and to determine the first battery performance data as a battery control signal when the system self-test result is a component detection failure result.

[0159] If the system feedback status is the fourth abnormal status, then the target fault-tolerant strategy is determined to be generating a fault-tolerant control signal; the system self-test result is determined to be a component detection failure result; and the second battery performance data is determined to be a battery control signal.

[0160] In one embodiment, the self-testing device for a fuel cell power system further includes:

[0161] The calculation module is used to calculate the life signal difference between the first life signal value at the target time and the second life signal value at the previous time for each communication link.

[0162] The fourth determining module is used to determine that the communication link meets the preset state condition if the difference in the life signal is a preset threshold.

[0163] The fifth determining module is used to, within a preset anti-jitter duration, re-execute the step of calculating the life signal difference between the first life signal value at the target time and the second life signal value at the previous time of the target time if the life signal difference is not the preset threshold but within the preset threshold range, and determine that the communication link meets the preset state condition if the life signal difference is determined to be the preset threshold.

[0164] The modules in the self-testing device applicable to fuel cell power systems described above can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device in hardware form, or stored in the memory of a computer device in software form, so that the processor can call and execute the corresponding operations of each module.

[0165] In one exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 8As shown, the computer device includes a processor, memory, input / output interface, communication interface, display unit, and input device. The processor, memory, and input / output interface are connected via a system bus, and the communication interface, display unit, and input device are also connected to the system bus via the input / output interface. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, Near Field Communication (NFC), or other technologies. When executed by the processor, the computer program implements a self-testing method suitable for fuel cell power systems. The display unit is used to form a visually visible image and can be a display screen, projection device, or virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the computer device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the computer device, or external keyboards, touchpads, or mice, etc.

[0166] Those skilled in the art will understand that Figure 8 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0167] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.

[0168] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon that, when executed by a processor, implements the steps in the above method embodiments.

[0169] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.

[0170] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0171] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0172] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0173] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A self-checking method suitable for use in a fuel cell power system, characterized by, The method comprises: When the fuel cell power system meets a self-check condition, acquiring first cell performance data collected by a main data acquisition device and second cell performance data collected by a backup data acquisition device, and receiving third cell performance data sent by a target energy module through a communication link meeting a preset state condition; Based on the first cell performance data, the second cell performance data and the third cell performance data, determining a system feedback state; If the system feedback state is an abnormal state, detecting a target fault-tolerant strategy corresponding to the system feedback state, determining a system self-check result and a cell control signal.

2. The method of claim 1, wherein, The method further comprises: If the system feedback state is a normal state, determining that the system self-check result is a detection success result and determining that the first cell performance data is the cell control signal. The method further comprises: If the system feedback state is a normal state, determining that the system self-check result is a detection success result and determining that the first cell performance data is the cell control signal.

3. The method of claim 2, wherein, The method further comprises: If the system feedback state is a normal state, determining that the system self-check result is a detection success result and determining that the first cell performance data is the cell control signal. If the first cell performance data is consistent with the second cell performance data, and the first cell performance data is inconsistent with the third cell performance data, it is determined that the system feedback state is a first abnormal state; If the first cell performance data is inconsistent with the second cell performance data, and the first cell performance data is consistent with the third cell performance data, it is determined that the system feedback state is a second abnormal state; If the first cell performance data is inconsistent with the second cell performance data, and the first cell performance data is inconsistent with the third cell performance data, and the second cell performance data is inconsistent with the third cell performance data, it is determined that the system feedback state is a third abnormal state; 4. The method of claim 3, wherein, If the first cell performance data is inconsistent with the second cell performance data, and the first cell performance data is inconsistent with the third cell performance data, and the second cell performance data is consistent with the third cell performance data, it is determined that the system feedback state is a fourth abnormal state. The method further comprises: In the case that the system feedback state is the first abnormal state or the third abnormal state, it is determined that the target fault-tolerant strategy is an other data acquisition strategy, and fourth cell performance data sent by an other energy module through a communication link meeting a preset state condition is acquired based on the other data acquisition strategy; If the fourth battery performance data is inconsistent with the first battery performance data, the second battery performance data, and the third battery performance data, respectively, a fault control signal is generated, the system self-checking result is determined as a component detection failure result, and the battery control signal is determined as a target signal value; If the fourth battery performance data is consistent with any one of the first battery performance data, the second battery performance data, and the third battery performance data, a fault-tolerant control signal is generated, the system self-checking result is determined as a component detection failure result, and the fourth battery performance data is determined as the battery control signal.

5. The method of claim 3, wherein, The method further comprises: If the system feedback state is the fourth abnormal state, the target fault-tolerant strategy is determined as generating a fault-tolerant control signal, the system self-checking result is determined as a component detection failure result, and the second battery performance data is determined as the battery control signal. The method further comprises:

6. The method of claim 1, wherein, For each communication link, a life signal difference value of a first life signal value at a target time and a second life signal value at a previous time of the target time is calculated; If the life signal difference value is a preset threshold value, it is determined that the communication link meets the preset state condition; If the life signal difference value is not the preset threshold value but within a preset threshold range, the step of calculating the life signal difference value of the first life signal value at the target time and the second life signal value at the previous time of the target time is re-executed within a preset anti-jitter duration, and in the case where the life signal difference value is determined as the preset threshold value, it is determined that the communication link meets the preset state condition. The device comprises:

7. A self-checking device suitable for use in a fuel cell power system, characterized by, The receiving module is configured to, when the fuel cell power system meets a self-checking condition, acquire first battery performance data collected by a main data acquisition device and second battery performance data collected by a backup data acquisition device, and receive third battery performance data sent by a target energy module through a communication link meeting a preset state condition; The first determining module is configured to determine a system feedback state based on the first battery performance data, the second battery performance data, and the third battery performance data; The second determining module is configured to, if the system feedback state is an abnormal state, detect a target fault-tolerant strategy corresponding to the system feedback state, determine a system self-checking result, and determine a battery control signal. The processor executes the computer program to implement the steps of the method of any one of claims 1 to 6.

8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 6.

9. A computer-readable storage medium having stored thereon a computer program, characterized in that The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 6.

10. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1 to 6.

Images