Mobile energy storage emergency power supply interface with intelligent safety handshake protocol and method

Abstract

The invention discloses a mobile energy storage emergency power supply interface with an intelligent safety handshake protocol and a method, and belongs to the technical field of emergency power supply and electrical safety. The method comprises the following steps: after a mobile energy storage interface and a load interface establish physical connection, maintaining an off state of a main power supply loop; acquiring a power supply capability parameter of an energy storage side and a power utilization demand parameter of a load side; based on a preset safety evaluation rule, carrying out compatibility matching verification on the power supply capability parameter and the power utilization demand parameter to generate a verification result; and when the verification result indicates that the compatibility matching is successful, closing the main power supply loop to establish emergency power supply. According to the mobile energy storage emergency power supply method, intelligent information interaction and safety verification are executed before the main power supply loop is established, a safety handshake protocol of first confirmation and second power supply is constructed, blind connection caused by mismatching of electrical parameters, load side faults and the like is avoided, and equipment safety and personnel safety in the mobile energy storage emergency power supply process are improved.

Description

Technical Field

[0001] This invention relates to the field of power electronics technology, and in particular to a mobile energy storage emergency power supply interface and method with an intelligent security handshake protocol. Background Technology

[0002] Mobile energy storage systems, due to their high flexibility and rapid deployment, play an increasingly important role in outdoor operations, emergency rescue, and temporary power supply scenarios. In emergency situations, the core function is to quickly and safely connect mobile energy storage units to loads or microgrids requiring power. However, current mobile energy storage power supply interfaces are mostly simple physical connectors, such as industrial plugs and sockets, and the connection process relies entirely on the operator's judgment. This "blind" physical connection method poses significant safety hazards. For example, if there is a short circuit fault on the load side, or if the power required by the load far exceeds the capacity of the energy storage unit, forced connection may damage the inverter of the energy storage unit, cause over-discharge of the battery, or even lead to serious safety accidents such as fires and explosions. Therefore, how to design an interface and method that can automatically and intelligently complete safety verification before establishing a high-power electrical connection is a technical problem that urgently needs to be solved in the field of mobile energy storage emergency power supply. Summary of the Invention

[0003] The purpose of this application is to provide a mobile energy storage emergency power supply interface and method with an intelligent security handshake protocol, aiming to solve the technical problem that the connection process of mobile energy storage emergency power supply lacks prior security verification and poses a huge security risk in the prior art.

[0004] To achieve the above objectives, firstly, this application provides a mobile energy storage emergency power supply method with an intelligent security handshake protocol. In a specific implementation, after establishing a physical connection between the mobile energy storage interface and the load interface, this method first maintains the main power supply circuit in an open state. Then, it uses a built-in communication link to exchange electrical parameters between the energy storage side and the load side, and performs a strict compatibility matching check. Finally, it closes the main power supply circuit only when the check passes, thereby constructing a handshake protocol that performs intelligent security confirmation before power supply. This method solves the problem of blind connection caused by information asymmetry in the prior art, achieving the beneficial effect of predicting and avoiding electrical incompatibility risks before establishing high-power electrical connections, thus significantly improving the safety of the entire emergency power supply process.

[0005] The method includes: maintaining the main power supply circuit in an open state after the mobile energy storage interface and the load interface establish a physical connection; acquiring a set of power supply capacity parameters from the energy storage side and a set of power demand parameters from the load side; performing compatibility matching verification on the power supply capacity parameters and the power demand parameters based on preset safety assessment rules to generate a verification result; and closing the main power supply circuit when the verification result indicates successful compatibility matching.

[0006] Optionally, acquiring a set of power supply capacity parameters of the energy storage side and a set of power demand parameters of the load side includes: the energy storage side controller of the mobile energy storage interface collecting a set of power supply capacity parameters of the energy storage side through a first sensor network and sending the power supply capacity parameters to the load side controller of the load interface; and the load side controller collecting a set of power demand parameters of the load side through a second sensor network and sending the power demand parameters to the energy storage side controller.

[0007] Optionally, a set of power supply capability parameters on the energy storage side includes: the current state of charge of the energy storage unit, rated output voltage, rated output frequency, and maximum allowable output power; a set of power demand parameters on the load side includes: the rated operating voltage of the load, rated operating frequency, instantaneous power demand, and load line impedance.

[0008] Optionally, the compatibility matching verification of the power supply capacity parameters and the power demand parameters includes: verifying whether the current state of charge of the energy storage unit is higher than a preset minimum power supply threshold; verifying whether the deviation between the rated output voltage of the energy storage unit and the rated operating voltage of the load is within the allowable range; verifying whether the instantaneous power demand of the load is less than or equal to the maximum allowable output power of the energy storage unit; and verifying whether the line impedance of the load is higher than a preset short-circuit protection impedance threshold.

[0009] Optionally, the method further includes: generating an authentication token for the current connection session before performing the compatibility matching verification, and interacting and verifying the authentication token with the load interface through the mobile energy storage interface; wherein the compatibility matching verification is performed only when the authentication token is verified successfully.

[0010] Optionally, the method further includes: when the verification result indicates that the compatibility matching has failed, maintaining the main power supply circuit in an open state and generating alarm information containing the reason for the failure.

[0011] Secondly, this application provides a mobile energy storage emergency power supply interface with an intelligent security handshake protocol. The interface includes an energy storage side interface and a load side interface.

[0012] The energy storage side interface includes: an energy storage side controller; a first communication unit connected to the energy storage side controller; and a power switch module controlled by the energy storage side controller and disposed on the main power supply circuit.

[0013] The load-side interface includes: a load-side controller; and a second communication unit connected to the load-side controller.

[0014] The energy storage-side controller is configured to: after establishing a physical connection between the energy storage-side interface and the load-side interface, control the power switch module to remain in an open state; communicate with the load-side controller through the first communication unit and the second communication unit to obtain a set of power demand parameters; obtain a set of power supply capacity parameters; perform compatibility matching verification on the power supply capacity parameters and the power demand parameters based on preset safety assessment rules to generate a verification result; and control the power switch module to close when the verification result indicates successful compatibility matching.

[0015] Optionally, the energy storage side interface further includes a first sensor network connected to the energy storage side controller, the first sensor network being used to collect the set of power supply capacity parameters; the load side interface further includes a second sensor network connected to the load side controller, the second sensor network being used to collect the set of electricity demand parameters.

[0016] Optionally, the set of power supply capability parameters includes: the current state of charge of the energy storage unit, rated output voltage, rated output frequency, and maximum allowable output power; the set of power demand parameters includes: the rated operating voltage of the load, rated operating frequency, instantaneous power demand, and load line impedance.

[0017] Optionally, the energy storage side controller is specifically configured to perform the following operations to perform the compatibility matching verification: verifying whether the current state of charge of the energy storage unit is higher than a preset minimum power supply threshold; verifying whether the deviation between the rated output voltage of the energy storage unit and the rated operating voltage of the load is within the allowable range; verifying whether the instantaneous power demand of the load is less than or equal to the maximum allowable output power of the energy storage unit; and verifying whether the line impedance of the load is higher than a preset short-circuit protection impedance threshold.

[0018] Optionally, the energy storage side controller is further configured to: generate an authentication token for the current connection session before performing the compatibility matching verification, and interact with and verify the authentication token with the load side controller through the first communication unit and the second communication unit; wherein the energy storage side controller performs the compatibility matching verification only when the authentication token is verified successfully. Attached Figure Description

[0019] Figure 1 This is a schematic diagram of a system architecture for a mobile energy storage emergency power supply interface with an intelligent security handshake protocol, according to an embodiment of this application.

[0020] Figure 2 This is a flowchart illustrating a mobile energy storage emergency power supply method with an intelligent security handshake protocol according to an embodiment of this application. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below in conjunction with the accompanying drawings and specific embodiments. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0022] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this application, "multiple" means two or more, unless otherwise explicitly specified.

[0023] System Implementation Examples

[0024] Reference Figure 1 One embodiment of this application provides a mobile energy storage emergency power supply interface 100 with an intelligent security handshake protocol. The physical form of this interface 100 can be a connector system integrating a multi-core cable and an intelligent control unit. Its core function is to transform the one-time high-risk physical connection process into a step-by-step, secure process based on information interaction and logical judgment. In a specific implementation, this interface 100 adopts an architecture that first establishes a low-power communication link after physical connection while keeping the main power supply circuit disconnected. This allows for a comprehensive assessment of the electrical parameters of both connected parties without incurring high current risks. This method solves the problem of "blind" power supply caused by the inability to obtain the other party's status before connection in existing technologies, achieving the beneficial effect of accurately identifying and isolating potential risks such as load short circuits, power overloads, and voltage mismatches before power supply operation.

[0025] Specifically, the interface 100 includes an energy storage side interface 10 and a corresponding load side interface 20. These two interfaces are connected through physical plugging and unplugging.

[0026] The energy storage side interface 10 is installed at the output end of the mobile energy storage device (not shown) and integrates an intelligent control and execution system. In some embodiments, the energy storage side interface 10 includes an energy storage side controller 11, a first communication unit 12, a power switch module 13, and a first sensor network 14.

[0027] The energy storage-side controller 11 is responsible for executing the logic of the entire intelligent security handshake protocol. It can be implemented using a programmable logic device such as a microcontroller unit (MCU), digital signal processor (DSP), or field-programmable gate array (FPGA). In terms of hardware implementation, the energy storage-side controller 11 can be integrated onto a dedicated printed circuit board (PCB), which integrates communication, sensing, and drive circuits and is encapsulated within the interface connector housing to withstand harsh environments in emergency scenarios. The firmware of the energy storage-side controller 11 is pre-programmed with complete security assessment rules and protocol procedures, ensuring its ability to make independent decisions.

[0028] The first communication unit 12 is electrically connected to the energy storage-side controller 11 and is responsible for establishing a low-power data communication link between the energy storage-side interface 10 and the load-side interface 20. To ensure communication reliability, the first communication unit 12 can employ various communication protocols. In a preferred embodiment, the Controller Area Network (CAN) bus protocol can be used, as it is highly resistant to interference, highly reliable, and supports multi-node communication, making it very suitable for industrial applications with complex electrical environments. Alternatively, the RS-485 serial communication protocol can be used, whose differential signal transmission method can also effectively resist common-mode interference. At the physical layer, dedicated communication pins are provided in the interface connector. These pins make contact and establish a connection in the initial stage of physical insertion, much earlier than other electrical contacts in the main power supply circuit.

[0029] The power switch module 13 is the final actuator of the main power supply circuit, connected in series between the output of the mobile energy storage device and the main power conductor of the interface. This module is precisely controlled by the energy storage-side controller 11. In one embodiment, the power switch module 13 can be a high-power relay, contactor, or a solid-state switch composed of an insulated-gate bipolar transistor (IGBT) or a metal-oxide-semiconductor field-effect transistor (MOSFET). Compared to mechanical relays, solid-state switches offer advantages such as faster switching speed, no electric arc, and longer lifespan. The energy storage-side controller 11 sends a high-level or low-level signal to the power switch module 13 via a drive circuit to control its ON or OFF state. At any time when the interface is not connected or the handshake protocol has not been successfully completed, the energy storage-side controller 11 ensures that the power switch module 13 is in an absolutely OFF state, thus forming a reliable electrical isolation barrier.

[0030] The first sensor network 14, also connected to the energy storage-side controller 11, is a network composed of multiple sensors responsible for real-time acquisition of the mobile energy storage device's own state parameters, i.e., a set of power supply capacity parameters. This network serves as the data basis for the energy storage-side controller 11 to make decisions. Specifically, the first sensor network 14 may include: A voltage sensor, such as a voltage detection circuit based on the principle of resistive voltage division, is used to measure the real-time output voltage of an energy storage unit (such as a battery pack). .

[0031] A current sensor, such as a Hall effect-based current sensor, is used to monitor the output current. This allows for the calculation of output power and the implementation of overcurrent protection.

[0032] A Battery Management System (BMS) interface allows the energy storage controller 11 to directly read the precise State of Charge (SoC), State of Health (SOH), and maximum allowable charge / discharge power of the battery pack calculated by the BMS.

[0033] A temperature sensor is used to monitor the temperature of the energy storage unit or interface itself to achieve over-temperature protection.

[0034] The analog or digital signals collected by these sensors are transmitted to the input pins of the energy storage side controller 11. After being processed by the internal analog-to-digital converter (ADC), they become numerical information that can be used for logical judgment.

[0035] The load-side interface 20 is primarily responsible for data acquisition and communication relay. In some embodiments, the load-side interface 20 includes a load-side controller 21, a second communication unit 22, and a second sensor network 23.

[0036] The load-side controller 21 is implemented in a similar manner to the energy storage-side controller 11, but its function is more focused, mainly responsible for collecting the status of the load side and communicating with the energy storage side.

[0037] The second communication unit 22 is connected to the load-side controller 21, and its technology and functions are matched with those of the first communication unit 12 to ensure that a stable and reliable communication can be established between the two.

[0038] The second sensor network 23 is connected to the load-side controller 21 and is responsible for collecting a set of power demand parameters from the load side. The second sensor network 23 may include: A voltage sensor for measuring the rated operating voltage at the load terminal. .

[0039] A line impedance measurement unit. To measure the load line impedance without applying high power, this unit, controlled by the load-side controller 21 during the handshake protocol, injects a weak, high-frequency probe signal into the load line and calculates the equivalent impedance of the line by measuring the voltage and current response of this signal. This active detection method can effectively identify short circuits when the main power supply circuit is disconnected. Extremely low) or open circuit ( Extremely high) and other fault states.

[0040] A power demand assessment module, which can be a simple user input interface (e.g., a knob or button) allowing field operators to preset the approximate power demand of the load; or, for smart loads, the load-side controller 21 can directly obtain the instantaneous power demand from the load device via a communication interface. .

[0041] Throughout the operation of the interface system, the energy storage-side controller 11 acts as the primary controller. After the two interfaces are physically connected, the energy storage-side controller 11 first ensures the main power supply circuit is disconnected by controlling the power switch module 13. Then, it initiates communication with the load-side controller 21, requesting the latter to report its power demand parameters. Simultaneously, it collects its own power supply capacity parameters through the first sensor network 14. After collecting all necessary information, the energy storage-side controller 11 performs a series of rigorous compatibility matching checks internally. Only when all check conditions are met, confirming the connection is absolutely secure, will it issue a command to close the power switch module 13, completing the power supply connection from the energy storage device to the load. This process is fully automated, requiring no manual intervention, thus minimizing potential human error and equipment risks.

[0042] Method Implementation Examples

[0043] Reference Figure 2 One embodiment of this application provides a mobile energy storage emergency power supply method with an intelligent security handshake protocol. This method aims to comprehensively assess the compatibility between the energy storage end and the load end through a structured and automated process before establishing a high-power electrical connection, thereby ensuring the safety of equipment and personnel.

[0044] For example, the method includes: S100: After the mobile energy storage interface and the load interface establish a physical connection, the main power supply circuit remains disconnected.

[0045] When the operator physically connects the energy storage side interface 10 to the load side interface 20, the internal mechanical and electrical structure design of the interface ensures the sequence of two key events: First, the pins dedicated to low-power communication and control (such as CAN_H, CAN_L, GND, etc.) contact and establish a reliable connection before the main power conductor pins (such as L, N, PE); second, after the energy storage side controller 11 is initialized upon power-up, its default state is to control the power switch module 13 to be in the normally open (disconnected) position.

[0046] The core purpose of this design is to create a cold-start environment, that is, to establish a safe communication channel before any path that could generate a large current is connected. At this time, the energy of the energy storage device is completely locked before the power switching module 13, and there is only a weak electrical signal for information exchange between the load side and the energy storage side, the power of which is usually in the milliwatt level and is insufficient to pose any electrical hazard.

[0047] For example, suppose an emergency scenario requires connecting a mobile energy storage vehicle (energy storage side) to the distribution box (load side) of a building that has experienced a power outage. The operator connects a specially designed emergency power cable (whose two ends are the energy storage side interface and load side interface described in this application). The moment the plug is fully inserted into the socket, the energy storage side controller 11 in the energy storage side interface and the load side controller 21 in the load side interface are simultaneously activated (e.g., powered by an auxiliary power pin). The energy storage side controller 11 executes its firmware startup program; the first instruction is to check the status of the power switch module 13 and ensure it is in the off state, guaranteeing default safety isolation even in the event of an unexpected power outage and restart. At this point, although the physical connection is complete, electrically, the high-power channel between the energy storage vehicle and the building is completely isolated, creating a risk-free prerequisite for subsequent safe information exchange. This step transforms the high-risk, one-step operation of traditional power supply into the beginning of a logically ordered and risk-controllable safety process.

[0048] S200: Obtain a set of power supply capacity parameters from the energy storage side and a set of power demand parameters from the load side.

[0049] Within the secure communication environment established by S100, the core task of this step is to conduct comprehensive information gathering so that subsequent decisions are based on solid evidence. This process involves two-way data exchange.

[0050] In one embodiment, this step can be specifically broken down into S210 and S220.

[0051] S210: The energy storage side controller collects and sends power supply capacity parameters.

[0052] The energy storage controller 11 actively collects a series of key data reflecting the current status of the mobile energy storage device through its connected first sensor network 14. These data collectively constitute a power supply capability parameter set. This parameter set includes at least: Current state of charge of the energy storage unit This indicates the percentage of remaining battery power. This is a crucial parameter used to determine whether the energy storage device has enough energy to support the load.

[0053] Rated output voltage The nominal value of the AC voltage output by the inverter of the energy storage device, such as 220V or 380V.

[0054] Rated output frequency The frequency of the AC voltage output by the inverter, such as 50Hz or 60Hz.

[0055] Maximum allowable output power The maximum power that an energy storage device (especially its inverter) can continuously output without damage.

[0056] After the data collection is completed, the energy storage controller 11 packages these parameters into a data frame and sends it to the load-side controller 21 through the first communication unit 12 and the established communication link.

[0057] For example, continuing with the aforementioned scenario, the energy storage-side controller 11 obtains information through communication with the BMS of the energy storage vehicle. (Dimensionless). By reading the internal configuration parameters, it was determined that the inverter is set to... , Meanwhile, based on the inverter specifications and current battery temperature, SoC status, etc., the BMS calculates the current maximum safe continuous output power as follows: The energy storage controller 11 encodes this data into a CAN message, for example, with an ID of 0x101 and a data field of [85, 220, 50, 100] (assuming the power unit is 0.1kW). It then broadcasts it via the CAN bus.

[0058] S220: The load-side controller collects and sends power demand parameters.

[0059] In parallel or serial with S210, the load-side controller 21 also actively detects and evaluates the load-side conditions through its connected second sensor network 23, forming a set of power demand parameters. This parameter set includes at least: Rated operating voltage of the load The nominal voltage required for the normal operation of the load device or the entire load network.

[0060] Rated operating frequency of the load The power frequency required for the load device to operate normally.

[0061] Instantaneous power demand The maximum power that the load is expected to require during startup or operation.

[0062] Load line impedance The equivalent AC impedance of the entire load-side line as seen from the interface.

[0063] After the data collection or evaluation is completed, the load-side controller 21 also packages these parameters and sends them to the energy storage-side controller 11 through the second communication unit 22.

[0064] For example, in order to determine the impedance of the load line To perform accurate and safe measurements, the load-side controller 21 can employ a weak signal injection method based on synchronous digital demodulation. This method does not rely on a high-power source, thus ensuring absolute safety when the main power supply circuit is disconnected. The line impedance measurement unit inside the load-side interface 20 may include a Direct Digital Synthesizer (DDS) for generating a probe signal, a coupling circuit for injecting the signal into the line, and two high-speed analog-to-digital converters (ADCs) for synchronously acquiring the line voltage and injected current, respectively.

[0065] In one specific implementation, the load-side controller 21 first controls the DDS to generate a sinusoidal probe signal with a defined frequency and weak amplitude. The frequency is chosen to avoid interference from the power frequency (50 / 60 Hz) and its main harmonics; for example, a non-integer multiple harmonic frequency, such as 1025 Hz, can be selected. The signal amplitude is strictly limited to a safe low-voltage range, for example, a peak-to-peak value of 5 V. This signal is injected between the phase and neutral lines of the load line through a DC-blocking coupling capacitor. Simultaneously, two 16-bit resolution ADCs synchronously begin acquiring the voltage signal sequence at the injection point at a sampling rate of 50 kSPS. and the current signal sequence flowing through the line .

[0066] To accurately extract the amplitude and phase information at a frequency of 1025 Hz from the acquired noisy signal, the load-side controller 21 executes a digital phase-locked amplification algorithm. The controller internally generates two mutually orthogonal digital reference signals: a sinusoidal reference signal... and a cosine reference signal ,in The sampling rate is [value]. The controller will collect the voltage signal sequence. The product is multiplied point-by-point with each of the two reference signals, and then low-pass filtered to remove high-frequency components and noise, thus obtaining the in-phase component of the voltage signal. and orthogonal components Similarly, for current signal sequences... Performing the same operation yields the in-phase component of the current signal. and orthogonal components .

[0067] Based on these demodulated components, the amplitude and phase of the voltage and current can be accurately calculated. Voltage amplitude voltage phase Current amplitude Current phase Ultimately, the complex impedance of the load line... It is calculated. Its modulus is... Its phase angle This complex impedance can be further decomposed into resistive components. and reactance component .

[0068] Continuing with the previous scenario, the load-side controller 21 initiates impedance measurement. Assume that after the aforementioned synchronous demodulation and calculation, the in-phase component of the voltage is obtained. Orthogonal components In-phase component of current Orthogonal components The voltage amplitude can be calculated from this. Current amplitude Therefore, the impedance magnitude At the same time, voltage phase Current phase Impedance phase angle This phase angle, significantly greater than zero, indicates that the load is inductive. This precise complex impedance value, containing both resistive and inductive information, will be sent as a key parameter to the energy storage side.

[0069] S300: Based on preset safety assessment rules, perform compatibility matching verification on the power supply capacity parameters and the power demand parameters to generate verification results.

[0070] As the main controller, the energy storage controller 11 compares and verifies the power demand parameters received from the load side with its own collected power supply capacity parameters. These verification rules are pre-programmed into the firmware of the controller 11, forming a multi-dimensional safety assessment matrix.

[0071] In one embodiment, the verification process includes at least the following key sub-steps: S310: State of charge verification. The energy storage controller 11 checks its own... Is the power supply above a preset minimum threshold? This threshold is to prevent over-discharge of the battery and protect the lifespan of the energy storage unit. For example, It can be set to 20%.

[0072] For example, the energy storage side controller 11 will collect its own data. With preset The comparison was performed. Since 85% > 20%, the check passed.

[0073] S320: Voltage and frequency matching verification. Energy storage side controller 11 comparison. and ,as well as and The verification passes only when the two are exactly equal or the deviation is within a very small permissible range (e.g., voltage deviation less than 5%). This is the basis for ensuring that the power supply equipment and the electrical equipment can function properly.

[0074] For example, controller 11 compares and Both are completely equal. (Compare simultaneously) and They are also completely equal. This check passes.

[0075] S330: Power margin verification. The energy storage side controller 11 will verify the instantaneous power demand reported by the load side. With its own maximum allowable output power Comparison. To allow for a safety margin, rules typically require... Where η is a safety factor less than 1, for example, 0.8.

[0076] For example, controller 11 compares and Assuming a safety factor η of 0.9, the maximum permissible load is 0.9 × 10 kW. Since 8 kW < 9 kW, this verification passes, indicating that the energy storage device has sufficient capacity to safely bear this load.

[0077] S340: Line safety check. The energy storage controller 11 checks the line impedance reported by the load side. Is it higher than a preset short-circuit protection impedance threshold? This threshold is crucial for distinguishing between normal load and short-circuit fault. For example, it can be set to 1Ω. If... If the value is lower than this, it is very likely that there is a short circuit on the load side, and the circuit breaker must not be closed under these circumstances.

[0078] For example, the controller 11 receives the impedance magnitude. With preset The comparison was performed. Since 35.2Ω > 1Ω, this test passed, eliminating the risk of a serious short circuit fault on the load side.

[0079] Only when all verification items from S310 to S340 pass is the final verification result considered a successful compatibility match. Failure of any one item will result in a failed compatibility match.

[0080] In another alternative embodiment, to increase the security of the protocol and prevent unauthorized devices from accessing it, an authentication step can be added before S300.

[0081] S250: Perform the interaction and verification of the authentication token.

[0082] After data exchange but before compatibility verification, the energy storage controller 11 can generate a one-time authentication token based on a timestamp or random number and send it to the load-side controller 21. The load-side controller 21 needs to use a pre-shared key to process the token using an agreed-upon encryption algorithm (e.g., HMAC-SHA256) and return a response value. The energy storage controller 11 performs the same calculation and compares the result with the received response value. Only when they match is the other party considered a legitimate and trusted device, and S300 continues.

[0083] For example, the energy storage-side controller 11 generates a random number nonce = 123456 and sends it to the load side. The shared key between the two parties is key = "EmergencyPower". The load-side controller 21 calculates response = HMAC-SHA256(key, nonce), obtains a hash value, such as 0xabcdef..., and returns it. The energy storage-side controller 11 also calculates expected_response = HMAC-SHA256(key, nonce). If the response is exactly the same as expected_response, authentication is successful. This step effectively prevents malicious access by forged or incompatible third-party interface devices, adding a layer of access control for critical emergency power supply tasks.

[0084] S400: When the verification result indicates that the compatibility match is successful, close the main power supply circuit.

[0085] This step is the final step in the entire process and is the final execution action based on all the information collected and intelligent decisions made earlier. The energy storage controller 11 will send a closing command (e.g., output a high-level signal) to the drive circuit of the power switch module 13 it controls only if all the checks in S300 (and optional S250) pass successfully.

[0086] Upon receiving the instruction, the contacts of the power switch module 13 (whether a relay or a solid-state switch) close, safely delivering the powerful current from the mobile energy storage device to the main power conductor. Through the interface, the current ultimately reaches the load side, establishing a stable and reliable emergency power supply.

[0087] For example, after all the aforementioned checks pass, the GPIO pin of the energy storage controller 11 outputs a 5V high-level signal to a MOSFET driver, which in turn turns on a high-power IGBT. The 220V AC power from the energy storage vehicle instantly flows through the closed IGBT to the cable, supplying power to the emergency equipment inside the building. The entire process, from physical connection to successful power supply, may only take a few hundred milliseconds, but during this time a complex and intelligent set of safety checks is completed, ensuring the flawless operation of the power supply.

[0088] Conversely, if any check in S300 fails, the method will proceed to another branch: S500: Maintain the main power supply circuit in the disconnected state and generate alarm information.

[0089] If the verification result indicates a compatibility failure, the energy storage controller 11 will lock the power switch module 13 in the off state and generate a clear alarm message based on the specific reason for the failure. For example, if the S330 power verification fails, the alarm message could be "Load power exceeded"; if the S340 line verification fails, the alarm message could be "Suspected short circuit in load". This alarm message can be displayed through indicator lights on the interface (e.g., flashing red LEDs), a buzzer, or a small display screen to inform the on-site operators of the problem and guide them to troubleshoot the fault, rather than blindly and repeatedly trying to reconnect.

[0090] In summary, the method provided in this application upgrades the traditional, high-risk manual judgment process into an automatic, intelligent, and reliable machine decision-making process through a rigorous closed-loop process of connection-communication-verification-execution, which greatly improves the safety, reliability, and operational efficiency of mobile energy storage emergency power supply scenarios.

[0091] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0092] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

[0093] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit described above can be implemented in hardware.

[0094] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A mobile energy storage emergency power supply method with intelligent security handshake protocol, characterized in that, The method comprises: maintaining a disconnection state of a main power supply circuit after a physical connection between a mobile energy storage interface and a load interface is established; obtaining a set of power supply capability parameters of an energy storage side and a set of power consumption demand parameters of a load side; based on a preset safety evaluation rule, performing compatibility matching verification on the power supply capability parameters and the power consumption demand parameters to generate a verification result; and when the verification result indicates that the compatibility matching is successful, closing the main power supply circuit.

2. The method of claim 1, wherein, The obtaining of the set of power supply capability parameters of the energy storage side and the set of power consumption demand parameters of the load side comprises: the energy storage side controller of the mobile energy storage interface collects the set of power supply capability parameters of the energy storage side through a first sensing network and sends the power supply capability parameters to the load side controller of the load interface; and the load side controller collects the set of power consumption demand parameters of the load side through a second sensing network and sends the power consumption demand parameters to the energy storage side controller.

3. The method of claim 2, wherein, The set of power supply capability parameters of the energy storage side comprises a current state of charge of an energy storage unit, a rated output voltage, a rated output frequency and a maximum allowed output power; and the set of power consumption demand parameters of the load side comprises a rated working voltage of a load, a rated working frequency, an instantaneous demand power and a load line impedance.

4. The method according to claim 1 or 3, characterized in that, The compatibility matching verification on the power supply capability parameters and the power consumption demand parameters comprises: verifying whether the current state of charge of the energy storage unit is higher than a preset minimum power supply threshold; verifying whether a deviation between the rated output voltage of the energy storage unit and the rated working voltage of the load is within an allowed range; verifying whether the instantaneous demand power of the load is less than or equal to the maximum allowed output power of the energy storage unit; and verifying whether the load line impedance is higher than a preset short-circuit protection impedance threshold.

5. The method of claim 1, wherein, The method further comprises: before the compatibility matching verification is performed, generating an authentication token for a current connection session and performing interaction and verification of the authentication token through the mobile energy storage interface and the load interface; wherein only when the authentication token verification is passed, the compatibility matching verification is performed.

6. The method of claim 1, wherein, The method further comprises: when the verification result indicates that the compatibility matching fails, maintaining the disconnection state of the main power supply circuit and generating alarm information containing a failure cause.

7. A mobile energy storage emergency power supply interface with intelligent security handshake protocol, characterized in that, The method comprises an energy storage side interface and a load side interface, wherein the energy storage side interface comprises: an energy storage side controller; a first communication unit connected to the energy storage side controller; and a power switch module arranged on a main power supply circuit and controlled by the energy storage side controller; the load side interface comprises: a load side controller; a second communication unit connected to the load side controller; and a load side controller. The energy storage side controller is configured to: maintain the power switch module in an open state after the energy storage side interface and the load side interface are physically connected; communicate with the load side controller through the first communication unit and the second communication unit to obtain a set of power consumption demand parameters; obtain a set of power supply capability parameters; perform compatibility matching verification on the power supply capability parameters and the power consumption demand parameters based on a preset safety evaluation rule to generate a verification result; and control the power switch module to close when the verification result indicates that the compatibility matching is successful.

8. The interface of claim 7, wherein, The energy storage side interface further comprises a first sensing network connected to the energy storage side controller, and the first sensing network is configured to collect the set of power supply capability parameters; and the load side interface further comprises a second sensing network connected to the load side controller, and the second sensing network is configured to collect the set of power consumption demand parameters.

9. The interface of claim 8, wherein, The set of power supply capability parameters comprises a current state of charge of the energy storage unit, a rated output voltage, a rated output frequency and a maximum allowable output power; and the set of power consumption demand parameters comprises a rated working voltage of the load, a rated working frequency, an instantaneous demand power and a load line impedance.

10. The interface of claim 7 or 9, wherein, The energy storage side controller is specifically configured to perform the following operations to perform the compatibility matching verification: verify whether the current state of charge of the energy storage unit is higher than a preset minimum power supply threshold; verify whether a deviation between the rated output voltage of the energy storage unit and the rated working voltage of the load is within an allowable range; verify whether the instantaneous demand power of the load is less than or equal to the maximum allowable output power of the energy storage unit; and verify whether the load line impedance is higher than a preset short-circuit protection impedance threshold.

Images