Energy storage system, sudden stop control method of energy storage system and electric equipment

Abstract

The embodiment of the invention relates to the field of energy storage, and provides an energy storage system, an emergency stop control method of the energy storage system and electric equipment. The energy storage system comprises an emergency stop switch, a first relay, a second relay, a first under-voltage release and a second under-voltage release which are electrically connected. The battery management system is electrically connected with the emergency stop switch and the first relay; the energy storage converter is electrically connected with the battery management system and the second relay; the alternating-current voltage source is electrically connected with the emergency stop switch, the second relay and the first under-voltage release respectively; the direct-current voltage source is electrically connected with the emergency stop switch and the second under-voltage release; and under the condition that the emergency stop signal is received, the emergency stop switch and the second relay are disconnected, the first relay is closed, and the first under-voltage release and the second under-voltage release are released. The energy storage system ensures that direct current and alternating current major loop switches can be cut off by sudden stop triggering, and the reliability and the safety of the system are improved.

Description

Technical Field

[0001] This application relates to the field of energy storage, and in particular to an energy storage system, an emergency stop control method for the energy storage system, and electrical equipment. Background Technology

[0002] In the field of energy storage systems, emergency stop control is one of the important measures to ensure system safety. The purpose of emergency stop control is to quickly cut off the power supply in the event of system abnormalities or emergencies, preventing personal injury and equipment damage. Especially in the event of serious safety problems such as battery fires, the reliability and response speed of the emergency stop function are particularly important.

[0003] Existing emergency stop control schemes in energy storage systems cannot achieve emergency stop control in the event of communication failures or wire detachment / loose connection, resulting in low redundancy and reliability. Summary of the Invention

[0004] This application provides an energy storage system, an emergency stop control method for the energy storage system, and electrical equipment, which at least solves the problem that existing emergency stop control schemes in energy storage systems cannot achieve emergency stop control in the event of communication failure or wire disconnection / loose connection, resulting in low redundancy and reliability.

[0005] According to some embodiments of this application, one aspect of this application provides an energy storage system, including: an emergency stop control circuit, including an emergency stop switch, a first relay, a second relay, a first undervoltage release, and a second undervoltage release electrically connected; a battery management system, electrically connected to the emergency stop switch and the first relay; an energy storage converter, electrically connected to the battery management system and the first relay; an AC voltage source, electrically connected to the emergency stop switch, the second relay, and the first undervoltage release; and a DC voltage source, electrically connected to the emergency stop switch and the second undervoltage release; wherein, upon receiving an emergency stop signal, the emergency stop switch and the second relay disconnect, the first relay closes, and the first and second undervoltage releases trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and disconnect the AC voltage source and the DC voltage source from power supply.

[0006] In some embodiments, the first relay has a first set of contacts, the first set of contacts including a first contact and a second contact, the first contact being electrically connected to the emergency stop switch, the second contact being electrically connected to the input terminal of the battery management system, and the first contact and the second contact not making contact when the emergency stop signal is received.

[0007] In some embodiments, the first relay has a second set of contacts, the second set of contacts including a third contact and a fourth contact, the third contact being electrically connected to the energy storage converter, the fourth contact being electrically connected to a first output terminal of the battery management system, and the third contact and the fourth contact not making contact when the emergency stop signal is received.

[0008] In some embodiments, there are multiple sets of the second group of contacts, multiple energy storage converters, and multiple first output terminals of the battery management system. One set of the third and fourth contacts corresponds to one first output terminal of the energy storage converter and the battery management system.

[0009] In some embodiments, the battery management system further has a plurality of second output terminals, which are electrically connected to the corresponding energy storage converter.

[0010] In some embodiments, the first undervoltage release has a first terminal and a second terminal, the second relay has a fifth contact and a sixth contact, the fifth contact is electrically connected to the emergency stop switch, the sixth contact is electrically connected to the first terminal of the first undervoltage release, the second terminal of the first undervoltage release is electrically connected to the AC main switch of the AC voltage source, and the fifth contact and the sixth contact do not make contact when the emergency stop signal is received.

[0011] In some embodiments, the DC voltage source includes a DC main switch, and the second undervoltage release is electrically connected to the emergency stop switch and the DC main switch, respectively.

[0012] In some embodiments, the emergency stop switch has a first terminal and a second terminal, the DC voltage source includes a selector switch, the selector switch includes a first path and a second path connected in parallel, the selector switch is electrically connected to the first terminal of the emergency stop switch, the second terminal of the emergency stop switch is electrically connected to the DC main switch, when the first path is open, the DC voltage source is locally controlled, when the second path is open, the DC voltage source is controlled by the battery management system.

[0013] In some embodiments, the emergency stop switch includes a first emergency stop switch and a second emergency stop switch connected in series. The first emergency stop switch is a switch controlled by an emergency stop button outside the energy storage system enclosure, and the second emergency stop switch is a switch controlled by an emergency stop button inside the energy storage system enclosure.

[0014] According to some embodiments of this application, another aspect of this application provides an emergency stop control method for an energy storage system, used to control any of the aforementioned energy storage systems. The emergency stop control method for the energy storage system includes: receiving and responding to an emergency stop operation applied to an emergency stop button to obtain an emergency stop signal; and, based on the emergency stop signal, controlling an emergency stop switch and a second relay to open, a first relay to close, and a first undervoltage release and a second undervoltage release to trip, so as to transmit the emergency stop signal to a battery management system and an energy storage converter, and disconnect the AC voltage source and the DC voltage source for power supply.

[0015] In some embodiments, the first relay has a first set of contacts, the first set of contacts including a first contact and a second contact, the first contact being electrically connected to the emergency stop switch, and the second contact being electrically connected to the input terminal of the battery management system. Based on the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is controlled to close, and the first undervoltage release is controlled to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and to disconnect the AC voltage source and the DC voltage source power supply. This includes: based on the emergency stop signal, controlling the emergency stop switch to open and the first contact and the second contact to not contact, so as to transmit the emergency stop signal to the battery management system.

[0016] In some embodiments, the first relay has multiple sets of second contacts, one set of second contacts including a third contact and a fourth contact, the third contact being electrically connected to the corresponding energy storage converter; the fourth contact being electrically connected to the corresponding first output terminal of the battery management system. Based on the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is controlled to close, and the first undervoltage release is controlled to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and to disconnect the AC voltage source and the DC voltage source. This includes: based on the emergency stop signal, controlling the emergency stop switch to open and the third and fourth contacts to not contact, so as to transmit the emergency stop signal to the energy storage converter, causing the energy storage converter to stop operating based on the emergency stop signal.

[0017] In some embodiments, the first undervoltage release has a first terminal and a second terminal, the second relay has a fifth contact and a sixth contact, the fifth contact is electrically connected to the emergency stop switch, the sixth contact is electrically connected to the first terminal of the first undervoltage release, and the second terminal of the first undervoltage release is electrically connected to the AC main switch of the AC voltage source. According to the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is controlled to close, and the first undervoltage release is controlled to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and to disconnect the AC voltage source and the DC voltage source. This includes: according to the emergency stop signal, controlling the emergency stop switch to open, the fifth contact and the sixth contact to not contact, and the first undervoltage release to trip, so that the AC main switch is disconnected under the action of the first undervoltage release.

[0018] In some embodiments, the emergency stop switch is electrically connected to the DC main switch of the DC voltage source. Based on the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is closed, and the first undervoltage release is tripped to transmit the emergency stop signal to the battery management system and the energy storage converter, and to disconnect the AC voltage source and the DC voltage source. This includes: when the DC voltage source is locally controlled or controlled by the battery management system, based on the emergency stop signal, controlling the emergency stop switch to open and the second undervoltage release to trip, so that the DC main switch is disconnected under the action of the second undervoltage release.

[0019] In some embodiments, receiving and responding to an emergency stop operation on an emergency stop button to obtain an emergency stop signal includes: receiving and responding to an emergency stop operation on a first emergency stop button to obtain a first emergency stop signal, wherein the first emergency stop button is an emergency stop button located outside the enclosure of the energy storage system; and / or receiving and responding to an emergency stop operation on a second emergency stop button to obtain a second emergency stop signal, wherein the second emergency stop button is an emergency stop button located inside the enclosure of the energy storage system.

[0020] According to some embodiments of this application, another aspect of this application provides an electrical device, including: any of the aforementioned energy storage systems, wherein, in the event that the energy storage system needs to be stopped urgently, any of the aforementioned energy storage system emergency stop control methods is used to control the energy storage system to stop operating.

[0021] The technical solution provided in this application has at least the following advantages: The scheme of combining undervoltage tripping with its own normally closed emergency stop contact control can avoid risks such as software failure, inability to control normally, problems with the emergency stop contacts, or wire detachment of the emergency stop control signal. The sampling undervoltage tripping method ensures that emergency stop triggering can effectively, safely, and redundantly disconnect the DC and AC main circuit switches, increasing the system's reliability and safety. The emergency stop switch is normally closed when not in an emergency stop state, and changes from normally closed to normally open during an emergency stop. Even if the emergency stop switch contacts experience wire detachment (equivalent to disconnection), the system will still achieve an emergency stop. However, in the prior art, emergency stop switches use normally open contacts, meaning they are normally open when not in an emergency stop state and change from normally open to normally closed during an emergency stop. Therefore, if the emergency stop switch contacts become detached, the emergency stop switch cannot close, and the emergency stop cannot be triggered, leading to safety issues. The first relay provides multiple contacts that can be directly connected to the energy storage converter and the emergency stop switch. In existing technologies, the energy storage converter determines whether an emergency stop occurs through communication signals sent by the battery management system. Therefore, in the event of a software failure in the battery management system, emergency stop control of the energy storage converter cannot be achieved. In this solution, the energy storage converter is connected to the emergency stop switch through the first relay. In the event of a software failure in the battery management system, the activation of the emergency stop switch will trigger the activation of the first relay. From the hardware circuit, the activation of the first relay will send an emergency stop signal to the energy storage converter, achieving an emergency stop and improving system reliability. Attached Figure Description

[0022] One or more embodiments are illustrated by way of example with reference to the accompanying drawings. These illustrations do not constitute a limitation on the embodiments. Unless otherwise stated, the drawings in the accompanying drawings do not constitute a limitation on scale. In order to more clearly illustrate the technical solutions in the embodiments of this application or in the conventional art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0023] Figure 1 A schematic diagram of the structure of an energy storage system provided in an embodiment of this application is shown;

[0024] Figure 2 A schematic diagram of the structure of an emergency stop circuit of a battery management system in an energy storage system according to an embodiment of this application is shown.

[0025] Figure 3 A schematic diagram of the structure of an emergency stop circuit for an energy storage converter in an energy storage system provided in an embodiment of this application is shown.

[0026] Figure 4 A schematic diagram of the structure of an emergency stop circuit for an AC voltage source in an energy storage system provided in an embodiment of this application is shown.

[0027] Figure 5 A schematic diagram of the structure of an emergency stop circuit for an AC voltage source in another energy storage system provided in an embodiment of this application is shown;

[0028] Figure 6 A schematic diagram of the structure of an emergency stop circuit for a DC voltage source in an energy storage system provided in an embodiment of this application is shown.

[0029] Figure 7 A flowchart illustrating an emergency stop control method for an energy storage system provided in an embodiment of this application is shown.

[0030] The above figures include the following reference numerals:

[0031] 10. Emergency stop control circuit; 11. Emergency stop switch; 111. First emergency stop switch; 112. Second emergency stop switch; 12. First relay; 13. Second relay; 14. First undervoltage release; 15. Second undervoltage release; 20. Battery management system; 30. Energy storage converter; 40. AC voltage source; 50. DC voltage source; 51. DC main switch; 52. Selector switch; A. First contact; B. Second contact; C. Third contact; D. Fourth contact; E. Fifth contact; F. Sixth contact. Detailed Implementation

[0032] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0033] In the description of the embodiments of this application, technical terms such as "first" and "second" are used only to distinguish different objects and should not be construed as indicating or implying relative importance or implicitly specifying the number, specific order, or primary and secondary relationship of the indicated technical features. In the description of the embodiments of this application, "multiple" means two or more, unless otherwise explicitly defined.

[0034] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0035] In the description of the embodiments in this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent three cases: A exists, A and B exist simultaneously, and B exists. In addition, the character " / " in this document generally indicates that the related objects before and after it have an "or" relationship.

[0036] In the description of the embodiments of this application, the term "multiple" refers to two or more (including two), similarly, "multiple sets" refers to two or more (including two sets), and "multiple pieces" refers to two or more (including two pieces).

[0037] In the description of the embodiments of this application, the technical terms "center," "longitudinal," "lateral," "length," "width," "thickness," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," "outer," "clockwise," "counterclockwise," "axial," "radial," and "circumferential" indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are only for the convenience of describing the embodiments of this application and simplifying the description, and are not intended to indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on the embodiments of this application.

[0038] In the description of the embodiments of this application, unless otherwise expressly specified and limited, the technical terms such as "installation," "connection," "joining," and "fixing" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components. For those skilled in the art, the specific meaning of the above terms in the embodiments of this application can be understood according to the specific circumstances.

[0039] In the accompanying drawings corresponding to the embodiments of this application, the thickness and area of ​​the layers are enlarged for better understanding and ease of description. When describing a component (such as a layer, film, region, or substrate) on or on the surface of another component, the component may be "directly" located on the surface of the other component, or there may be a third component between the two components. Conversely, when describing a component on the surface of another component, or when another component is formed or disposed on the surface of a component, it indicates that there is no third component between the two components. Furthermore, when describing a component as being "generally" formed on another component, it means that the component is not formed on the entire surface (or front surface) of the other component, nor is it formed on a portion of the edge of the entire surface.

[0040] In the description of the embodiments of this application, when a component "includes" another component, other components are not excluded unless otherwise stated, and other components may be further included. Furthermore, when a component such as a layer, film, region, or plate is referred to as being "on / located" on another component, it can be "directly on" the other component (i.e., located on the surface of the other component with no other components between them), or another component may be present therein. Moreover, when a component such as a layer, film, region, or plate is "directly located" on another component, or when a component such as a layer, film, region, or plate is located on the surface of another component, it indicates that no other components are located therein.

[0041] The terminology used in the description of the various embodiments herein is for the purpose of describing particular embodiments only and is not intended to be limiting. As used in the description of the various embodiments and the appended claims, the term "part" is also intended to include the plural form unless the context clearly indicates otherwise. Components include layers, films, regions, or plates, etc.

[0042] As the background technology shows, most emergency stop control methods in energy storage systems currently employ a shunt trip scheme. This involves triggering the DO (digital output) signal of the BMS (Battery Management System) via a digital input signal, thereby controlling a relay to disconnect the AC incoming line switch. This scheme relies on the normal operation of the software and the integrity of the signal lines, and has the following drawbacks:

[0043] 1. Software failure risk: In extreme cases, if the BMS software malfunctions, the DO signal may fail to output, resulting in emergency stop control failure.

[0044] 2. Signal line failure: The transmission of the emergency stop signal depends on the connection of the signal line. If the signal line is broken or has poor contact, the emergency stop signal cannot reach the BMS, and thus cannot trigger the DO output, affecting the reliability of the emergency stop function.

[0045] 3. Device failure: In the shunt tripping scheme, if the emergency stop button or related control device fails, the emergency stop signal may not be generated, thus failing to guarantee the emergency stop protection of the system.

[0046] 4. Insufficient redundancy: Traditional shunt tripping schemes cannot provide sufficient redundancy. If a certain link fails, the entire emergency stop protection mechanism may fail, failing to effectively cut off the power supply to the equipment, increasing operational risks and the possibility of equipment damage.

[0047] In summary, existing shunt tripping schemes for emergency stop control in energy storage systems suffer from defects such as software failures, signal line faults, device failures, and insufficient redundancy. To address the problem that existing emergency stop control schemes in energy storage systems cannot achieve emergency stop control in the event of communication failures or loose connections, resulting in low redundancy and reliability, this application provides an energy storage system, an emergency stop control method for the energy storage system, and electrical equipment.

[0048] The embodiments of this application will now be described in detail with reference to the accompanying drawings. However, those skilled in the art will understand that many technical details have been provided in the embodiments of this application to facilitate a better understanding of the application. However, the technical solutions claimed in this application can be implemented even without these technical details and various variations and modifications based on the following embodiments.

[0049] This embodiment provides an energy storage system. Figure 1 This is a structural schematic diagram of an energy storage system provided in an embodiment of this application, such as... Figure 1 As shown, the energy storage system includes: an emergency stop control circuit 10, comprising an emergency stop switch 11, a first relay 12, a second relay 13, a first undervoltage release 14, and a second undervoltage release 15, all electrically connected; a battery management system 20, electrically connected to the emergency stop switch 11 and the first relay 12; an energy storage converter 30, electrically connected to the battery management system 20 and the first relay 12; an AC voltage source 40, electrically connected to the emergency stop switch 11, the second relay 13, and the first undervoltage release 14; and a DC voltage source 50, electrically connected to the emergency stop switch 11 and the second undervoltage release 15. Upon receiving an emergency stop signal, the emergency stop switch 11 and the second relay 13 open, the first relay 12 closes, and the first undervoltage release 14 and the second undervoltage release 15 trip, transmitting the emergency stop signal to the battery management system 20 and the energy storage converter 30, and disconnecting the AC voltage source 40 and the DC voltage source 50 from power supply. It should be noted that in the description of the embodiments of this application, the technical terms "electrical connection" and "connection" are interpreted in a broad sense. For example, they can refer to a direct connection or an indirect connection through an intermediate medium.

[0050] A Battery Management System (BMS) is an electronic system used to monitor, control, and protect battery packs, especially in large-scale battery energy storage systems. In energy storage systems, the BMS is crucial for safe operation, enabling real-time monitoring of battery status and timely intervention to prevent safety incidents such as overheating, short circuits, and explosions. When a fault occurs in the system, the BMS can quickly diagnose and implement protective measures to prevent the fault from escalating and protect other parts of the system from impact. For example, upon receiving an emergency stop signal, the BMS will quickly disconnect the energy storage converter to ensure system safety.

[0051] A Power Conversion System (PCS) is a core component of an energy storage system, primarily responsible for converting electrical energy between different forms. Specifically, the PCS performs bidirectional conversion between direct current (DC) and alternating current (AC). In an energy storage system, the PCS typically works in conjunction with battery banks, the power grid, and other electrical equipment. When the system needs to store electrical energy, the PCS converts the AC power from the grid into DC to charge the batteries; when the system needs to release electrical energy, the PCS converts the DC power from the batteries back into AC to supply the power grid or local loads. The PCS acts as a bridge in the energy storage system, facilitating the free flow of electrical energy between different forms. The PCS can adjust its output power according to system needs, controlling the charging and discharging process of the batteries, enabling the energy storage system to respond to grid commands or meet load demands. The PCS can monitor the operating status of the batteries and the grid, and upon detecting abnormalities (such as overcurrent or overvoltage), it immediately takes protective measures, such as cutting off the power supply, to prevent equipment damage or threats to personal safety.

[0052] An AC voltage source is a power supply device capable of providing alternating current (AC) voltage. Alternating current refers to electrical energy in which the current or voltage varies periodically over time according to a sine wave or similar waveform. An AC voltage source can be the power grid itself or a device like an inverter that converts direct current (DC) to AC. AC voltage sources are very common in power systems because most power transmission and distribution systems use AC. Energy storage systems typically need to be connected to an AC power grid, and an AC voltage source (such as the grid) provides an access point for the energy storage system, enabling it to draw energy from the grid when needed or supply energy to the grid when needed. In the energy management system (EMS) of an energy storage system, the AC voltage source is crucial for energy dispatch. The EMS can intelligently control the energy exchange between the energy storage system and the AC voltage source based on real-time grid demand, electricity price changes, and the availability of renewable energy sources to maximize economic benefits or ensure the reliability of power supply.

[0053] A direct current (DC) voltage source is a power supply device capable of providing constant or varying direct current (DC) voltage. DC power is characterized by the fact that the direction of voltage and current does not change over time. Compared to alternating current (AC), DC power experiences less energy loss during transmission and is used as a power source in many electronic devices and energy storage systems. DC voltage sources can be directly supplied by batteries, solar panels, fuel cells, etc., or converted from AC power through a rectifier. In energy storage systems, battery packs are the most common DC voltage sources, used to store electrical energy. In renewable energy systems such as photovoltaic and wind power generation, the generated DC power can be directly stored in batteries. As an energy storage unit in an energy storage system, the charge / discharge state of a DC voltage source is a key focus of monitoring and management by the energy management system (EMS). The EMS achieves optimal energy allocation by controlling the operating state of the DC voltage source. For some loads that directly use DC power, such as data center servers and electric vehicle charging stations, DC voltage sources can directly provide power without AC-DC conversion.

[0054] Therefore, the Battery Management System (BMS), Power Supply System (PCS), AC voltage source, and DC voltage source are crucial components of the power supply system. When a system failure necessitates an emergency stop, the emergency stop strategy allows the BMS to immediately cut off power upon detecting any potential hazards (such as overheating, short circuits, or internal battery faults), preventing further escalation and protecting personnel and equipment. Furthermore, the emergency stop strategy can quickly halt the PCS's charging and discharging operations, disconnecting the AC and DC power supply and reducing the risk of potential electrical fires and electric shocks. The emergency stop strategy can also rapidly disconnect the energy storage system from the AC grid in the event of grid anomalies (such as voltage surges or frequency fluctuations), protecting the energy storage system from grid faults. Finally, the emergency stop strategy ensures that the charging or discharging process of the DC voltage source (primarily the battery) can be immediately stopped under any unsafe conditions, preventing overcharging, over-discharging, or operation under extreme conditions, thus extending battery life.

[0055] Therefore, the emergency stop function is particularly important in energy storage systems. Failure of the emergency stop function can reduce the safety of the energy storage system and pose a significant safety hazard.

[0056] A normally open contact is a contact that is in an open state when no external force is applied or it is not activated. When the contact is triggered (e.g., a button is pressed, a sensor detects a specific condition), the contact changes from an open state to a closed state, allowing current to flow. Normally open contacts are often used in scenarios where a circuit connection needs to be established only when a specific event occurs, such as in start-up or alarm circuits.

[0057] Normally closed contacts, on the other hand, remain closed when no external force is applied or when not activated. When triggered, they change from closed to open, cutting off the current path. Normally closed contacts are commonly used in scenarios where circuit connections need to be broken in the event of a specific event, such as safety disconnection circuits or fault detection circuits.

[0058] In existing technologies, relays responding to emergency stop signals all use normally open contacts. This design means that if the emergency stop contact fails or a wire comes loose, the relay cannot close even when an emergency stop signal is received. This prevents the emergency stop signal from being quickly transmitted to the system, causing the system to fail to respond promptly and cut off power, potentially leading to a safety accident. In other words, existing emergency stop switches use normally open contacts—meaning they are normally open when no emergency stop is needed and change from normally open to normally closed during an emergency. If a wire comes loose from one of the emergency stop switch contacts, the switch cannot close, preventing the emergency stop from being triggered and causing a safety hazard.

[0059] The emergency stop switch in the embodiments of this application is a normally closed switch when there is no emergency stop, and changes from normally closed to normally open when there is an emergency stop. In the event of problems such as wire detachment (equivalent to disconnection) of the emergency stop switch contacts, the system will also achieve an emergency stop, which greatly improves the reliability and safety of the system.

[0060] Overexcitation trip is a circuit breaker tripping method based on electromagnetic force. The shunt trip unit typically contains an electromagnetic coil and a release mechanism mechanically linked to the circuit breaker contacts. Under normal operating conditions, the electromagnetic coil uses a small current to keep the release mechanism closed, thus keeping the circuit breaker contacts closed. When an external trigger signal is received (such as an emergency stop signal from the BMS), the electromagnetic coil receives a large or continuous current, generating a stronger electromagnetic force. This force overcomes the spring force in the closed state, causing the release mechanism to actuate and quickly disconnect the circuit breaker contacts, cutting off the circuit. This method is commonly used in circuit breaker operations requiring rapid response.

[0061] Undervoltage tripping is a voltage-detection-based tripping method. While it also contains an internal electromagnetic coil, it operates by detecting the voltage across the circuit breaker. Under normal voltage conditions, the electromagnetic coil, through sufficient voltage, generates magnetic force to keep the release mechanism closed. When the voltage across the circuit breaker falls below a set threshold, the electromagnetic force is insufficient to overcome the spring tension, causing the release mechanism to activate, opening the circuit breaker contacts and disconnecting the circuit. Undervoltage tripping is commonly used for overload protection, short-circuit protection, and preventing equipment from starting under low voltage conditions.

[0062] The shunt trip relies on an external control signal for triggering. If the signal transmission line fails or the control signal fails to be sent, the trip may not occur. Although the shunt trip response is relatively fast, in some extreme cases, the processing and transmission of the control signal may introduce additional delays. If the shunt trip trigger signal needs to be processed by software (such as a BMS), software failure may result in delayed tripping, affecting system safety.

[0063] Undervoltage release directly detects voltage status and does not rely on external control signals, so it can still operate even if control signals fail or transmission lines malfunction. The primary undervoltage release responds quickly to voltage changes, triggering immediately once the voltage drops below a set value, providing immediate protection. Combining undervoltage release with control signal-triggered release increases system redundancy; if one fails, the other can still provide protection. The undervoltage release mechanism reduces the risk of protection failure due to control signal or line faults, thus improving the overall system reliability. The undervoltage release mechanism is relatively independent, unaffected by software or complex control systems, providing a simple and direct protection method.

[0064] By comparison, it can be seen that undervoltage tripping provides a more reliable and direct circuit breaker tripping mechanism in certain situations (such as control signal failure or line fault).

[0065] In existing technologies, emergency stop control of energy storage systems is usually achieved using a trip unit. This means that the trip unit is controlled by the software of the battery management system. However, if the software of the battery management system fails, the emergency stop signal cannot be transmitted to the trip unit in a timely and effective manner, causing the system to be unable to respond to the emergency stop signal and cut off the power in time, resulting in a safety accident.

[0066] The embodiments of this application adopt an undervoltage trip combined with the emergency stop normally closed contact control scheme, which can avoid the risks of failure to control normally due to software BMS failure, problems with emergency stop contacts, or wire loss of emergency stop control signal. The sampling undervoltage trip method ensures that emergency stop triggering can effectively, safely and redundantly cut off the DC and AC main circuit switches, thereby increasing the reliability and safety of the system.

[0067] Furthermore, the first relay provides multiple contacts that can be directly connected to the energy storage converter and the emergency stop switch. In existing technologies, the energy storage converter determines whether an emergency stop has occurred through communication signals sent by the battery management system (BMS). Therefore, in the event of a software BMS failure, emergency stop control of the energy storage converter cannot be achieved. In this solution, the energy storage converter is connected to the emergency stop switch through the first relay. In the event of a software BMS failure, the operation of the emergency stop switch will trigger the operation of the first relay. Thus, from the hardware circuit, the operation of the first relay will send an emergency stop signal to the energy storage converter, achieving an emergency stop and improving system reliability.

[0068] In summary, the embodiments of this application integrate multiple key components through an emergency stop control circuit and initiate a series of chain reactions upon receiving an emergency stop signal, ensuring rapid response and complete power outage of the energy storage system in emergency situations. When any emergency stop switch is activated, the emergency stop control circuit immediately performs a power-off operation, cutting off all critical power paths, i.e., disconnecting the AC and DC voltage sources, effectively preventing personnel from contacting live parts or equipment from continuing operation under dangerous conditions, and minimizing safety hazards. The first and second relays in the design are programmed to operate synchronously with the emergency stop signal. The first relay closes to trigger the internal protection mechanisms of the BMS and PCS, while the second relay opens to directly disconnect the AC voltage source from the rest of the system. This coordinated action ensures the accurate transmission and execution of protection commands. The addition of an undervoltage release provides a layer of physical-level dual protection, ensuring that even in the event of a failure in the software control of the BMS or PCS, the circuit breaker automatically trips due to a voltage drop, cutting off the power supply. This multi-layered protection strategy improves the overall reliability and response speed of the system.

[0069] In some embodiments, such as Figure 2 As shown, the emergency stop switch 11 includes a first emergency stop switch 111 and a second emergency stop switch 112 connected in series. The first emergency stop switch 111 is a switch controlled by an emergency stop button outside the energy storage system enclosure, and the second emergency stop switch 112 is a switch controlled by an emergency stop button inside the energy storage system enclosure.

[0070] The series-connected emergency stop switch design ensures that an emergency stop signal is immediately transmitted to the system whenever any emergency stop button is activated, whether it is outside or inside the energy storage system enclosure. This dual-trigger mechanism greatly improves system safety, because even if the emergency stop button outside the enclosure fails, the internal emergency stop switch can still function, and vice versa.

[0071] By installing emergency stop switches both inside and outside the enclosure, it is ensured that operators, maintenance personnel, and the system itself can be quickly powered off under any circumstances, preventing accidental injury and equipment damage. This configuration is particularly important for energy storage systems in high-risk environments. The series design provides redundant paths for signal transmission; even if one emergency stop switch fails, the other will still function normally, maintaining the effectiveness of the emergency stop function and increasing the system's fault tolerance and reliability.

[0072] The external emergency stop button allows operators to take swift action when they observe an external emergency, while the internal emergency stop button provides maintenance personnel with a means to quickly cut off power when internal system problems are detected, ensuring the system can adapt to emergency stop requirements in different scenarios. The series-connected emergency stop switch design allows maintenance personnel to check the emergency stop function from inside the enclosure, eliminating the need to go outside for testing each time, thus improving maintenance efficiency and convenience.

[0073] The series-connected first and second emergency stop switches provide a comprehensive, fast, and reliable emergency stop protection mechanism in the energy storage system. This not only enhances the system's safety but also improves the system's response speed and protection effectiveness under various conditions by providing redundant signal paths and adapting to different emergency scenarios.

[0074] In energy storage systems, to improve the reliability of emergency stop protection, a series connection scheme with normally closed contacts is designed to replace the traditional shunt tripping method. Specifically, this scheme connects the normally closed contacts of the container emergency stop switch (first emergency stop switch) and the integrated cabinet emergency stop switch (second emergency stop switch) in series, connecting them to a first relay. The contacts of the first relay then transmit the emergency stop signal to the battery management system (BMS). Under normal circumstances, the first relay is in the energized state, meaning its contacts are closed, allowing signals and current to pass through. When the emergency stop button is pressed, the first relay opens, triggering the BMS's emergency stop response, thereby cutting off the power supply to the energy storage system.

[0075] Using a normally closed contact series connection scheme, even if the emergency stop button's wiring breaks or the button itself malfunctions (such as being stuck), the other emergency stop contact in the series connection will remain connected, ensuring that the emergency stop signal reaches the first relay and is ultimately transmitted to the BMS. This dual-point triggering mechanism significantly enhances the redundancy of signal transmission; even if a fault occurs at one point, the emergency stop signal can still be transmitted at the other, thereby improving the reliability of the system's emergency stop protection.

[0076] In some embodiments, such as Figure 2As shown, the first relay 12 has a first set of contacts, which includes a first contact A and a second contact B. The first contact A is electrically connected to the emergency stop switch 11, and the second contact B is electrically connected to the input terminal of the battery management system 20. The first contact A and the second contact B do not make contact when the emergency stop signal is received.

[0077] The first set of contacts is normally closed. This means that when no emergency stop signal is received, contact A and contact B are in contact. Upon receiving an emergency stop signal, the first set of contacts changes from normally closed to normally open, and contact A and contact B no longer contact. The battery management system (BMS) receives the signal from this change, thus determining that an emergency stop is needed. For example, when the first set of contacts is normally closed, the BMS receives a signal of "0"; when it is normally open, the BMS receives a signal of "1". Therefore, if the wires come loose, the first and second contacts will not contact, and the first set of contacts will change from normally closed to normally open, triggering an emergency stop. This effectively ensures the reliability and safety of the system.

[0078] Compared to the shunt trip scheme, this scheme directly connects the emergency stop signal to the hard-wired layer before the BMS, i.e., the first relay. This means that if the BMS software malfunctions or fails, the emergency stop signal can still trigger a hard-wired response through the first relay, cutting off the system's power supply, thus avoiding the impact of software failure on the emergency stop protection function. When the emergency stop signal is triggered, the first relay immediately disconnects, without waiting for the BMS software processing cycle. This rapid response mechanism significantly shortens the time from when the emergency stop button is pressed to when the energy storage system is completely powered off, providing rapid and effective protection for the system and personnel safety. The status of the first relay (engaged / disengaged) directly reflects whether the emergency stop signal has been successfully triggered, providing intuitive information for fault diagnosis and maintenance. Maintenance personnel can quickly determine whether the emergency stop protection function is normal by checking the status of the first relay, thereby guiding subsequent diagnosis and repair work.

[0079] By connecting the normally closed emergency stop contacts of the container and the integrated container in series, and then directly controlling the emergency stop input of the BMS via the first relay, this solution not only enhances the redundancy and rapid response capability of emergency stop signal transmission, but also avoids the impact of software failure and simplifies the fault diagnosis and maintenance process.

[0080] The energy storage system is located in the container and integrated cabinet, and the first relay can be K176. For example... Figure 2 As shown, Figure 2The DI (Input Interface) is the input interface for the battery management system. The first emergency stop switch 111 and the second emergency stop switch 112 are emergency stop switches for the container and the integrated cabinet. Both switches are normally closed contacts; that is, when no emergency stop signal is received, the contacts of the first and second emergency stop switches 111 and 112 are in contact, and when an emergency stop signal is received, the contacts are not in contact. After the normally closed contacts of the container and the integrated cabinet are connected in series, the controller's first relay 12 sends an emergency stop signal to the BMS through its contacts. Under normal conditions, the first contact A and the second contact B are engaged. When an emergency stop is triggered, the first contact A and the second contact B disengage, triggering the emergency stop signal. Compared with existing technologies, the advantage lies in the use of normally closed emergency stop contacts, avoiding the inability to send an emergency stop signal to the BMS due to line breaks or problems with the emergency stop button itself, thus increasing the reliability of the system's emergency stop protection.

[0081] In some embodiments, such as Figure 3 As shown, the first relay 12 has a second set of contacts, which includes a third contact C and a fourth contact D. The third contact C is electrically connected to the energy storage converter 30, and the fourth contact D is electrically connected to the first output terminal of the battery management system 20. The third contact C and the fourth contact D do not make contact when the emergency stop signal is received.

[0082] Among them, such as Figure 3 As shown, the first output terminals of the battery management system are Relay1_OUT1 and Relay2_OUT1, respectively. Figure 3 Only two first output terminals are shown in the figure. In actual application, multiple first output terminals can be designed according to actual needs, such as Relay1_OUT1, Relay2_OUT1, ..., Relayn_OUT1.

[0083] The second set of contacts is normally closed. This means that when no emergency stop signal is received, the third contact C and the fourth contact D are in contact. Upon receiving an emergency stop signal, the second set of contacts changes from normally closed to normally open, and the third contact C and the fourth contact D no longer contact. At this time, the energy storage converter receives a signal from the change in the second set of contacts from normally closed to normally open, thus determining that the system needs an emergency stop. For example, when the second set of contacts is normally closed, the energy storage converter receives a signal of "0"; when the second set of contacts is normally open, the energy storage converter receives a signal of "1". Thus, if a contact wire comes loose, the third and fourth contacts will not contact, and the second set of contacts will change from normally closed to normally open, triggering an emergency stop. This effectively ensures the reliability and safety of the system.

[0084] The first relay is directly connected in series with the energy storage converter, and its signal is directly output to the converter. The second set of contacts are normally closed; upon emergency stop triggering, these normally closed contacts become normally open, and the energy storage converter receives the emergency stop signal and initiates an emergency stop. In existing technology, the energy storage converter is only connected to the BMS (Battery Management System). The BMS receives the emergency stop signal and sends it to the energy storage converter to initiate an emergency stop. However, this existing emergency stop strategy cannot promptly control the energy storage converter to stop if the BMS software fails and cannot output a signal, posing a safety hazard. In this embodiment, the first relay is directly connected in series with the energy storage converter. The emergency stop signal is directly connected to the energy storage converter through the first relay's operation, bypassing BMS software processing. This avoids the inability to output a signal due to BMS software failure, increasing the reliability of the system's emergency stop protection.

[0085] In the above embodiment, the emergency stop signal is directly connected in series with the dry contact protection signal input terminal of the PCS through the contacts of the first relay. Under normal conditions, the contacts of the first relay are normally closed. Once the emergency stop signal is triggered, the contacts of the first relay become normally open, and the PCS receives the signal change, determining that an emergency stop is required. The emergency stop signal is directly connected in series with the dry contact protection signal of the PCS. Even if the BMS software fails and cannot control the PCS normally through output signals, the emergency stop signal can still directly act on the PCS through the first relay, triggering its protection mechanism and cutting off the power supply. This dual protection mechanism significantly enhances the system's redundancy and improves the reliability of the emergency stop protection. The direct series connection of the first relay means that the process of the emergency stop signal reaching the PCS is not limited by the BMS software processing time, greatly shortening the signal transmission path and accelerating the system response speed. This is particularly important in scenarios requiring rapid action in emergency situations, such as fire prevention or personnel safety protection, where every second of delay can cause irreparable losses. By directly connecting the emergency stop signal to the dry contact protection signal of the PCS, the output stage of the BMS can be bypassed, avoiding the problem of signal failure due to software malfunction or anomaly. This design ensures that even if the BMS encounters a problem, the emergency stop signal can still directly trigger the protection action of the PCS, improving the overall stability of the system.

[0086] In some embodiments, such as Figure 3 As shown, there are multiple sets of the second group of contacts, multiple energy storage converters 30, and multiple first output terminals of the battery management system 20. One set of the third contact C and the fourth contact D corresponds to one first output terminal of the energy storage converter 30 and the battery management system 20.

[0087] Specifically, each group of second contacts of the first relay is connected to a different energy storage converter. Figure 3 A schematic diagram showing two sets of second-group contacts is provided, as follows: Figure 3 As shown, the second set of contacts in each group are connected to different energy storage converters.

[0088] In designing energy storage systems, using multiple sets of contacts that match the multiple outputs of multiple power supply converters (PCS) and battery management systems (BMS) is an effective strategy to enhance system reliability and flexibility. Specifically, the second set of contacts includes the third and fourth contacts, with one set of contacts corresponding to one output of one PCS and one BMS.

[0089] By associating each set of contacts with different PCS and BMS outputs, additional redundancy protection can be provided for the energy storage system. This means that even if a part of the circuit or contact fails, the remaining contacts and the corresponding PCS can still receive control signals, ensuring that some functions of the system can still be maintained, thus improving the overall system stability and safety.

[0090] Independent control of multiple PCS and BMS outputs allows for flexible power distribution among different energy storage units. In case of maintenance or failure, the affected energy storage converter can be shut down individually without affecting the normal operation of other units, improving the system's operational flexibility and maintenance efficiency.

[0091] When a system malfunctions, the multi-contact design simplifies fault location. By detecting specific contacts and outputs, the source of the problem can be quickly identified, the faulty area isolated, the entire system prevented from collapsing, and repair time reduced. Under normal operating conditions, the combination of multiple contacts and multiple PCSs enables more precise energy management. Based on the system's real-time needs, the BMS controls different PCSs to turn on or off, adjusting the charging and discharging process and optimizing energy utilization efficiency. In emergencies, such as upon receiving an emergency stop signal, the multi-contact design ensures immediate response from each PCS and BMS output. Without waiting for a system reset or a command from the central control unit, each relevant energy storage unit can be quickly disconnected, improving the speed and efficiency of emergency response.

[0092] When the energy storage system needs to be expanded, new PCS and BMS outputs, as well as corresponding contact groups, can be easily added without significantly changing the existing system architecture. This design ensures system scalability, which is beneficial for future business growth or technology upgrades. The corresponding design scheme of multiple sets of second contacts with multiple energy storage converters and BMS outputs significantly improves the overall performance and management level of the energy storage system by enhancing system redundancy, improving operational flexibility, simplifying fault tracing and isolation, optimizing energy management, improving emergency response speed, supporting system scalability, and enhancing data monitoring and analysis capabilities.

[0093] In some embodiments, such as Figure 3As shown, the battery management system 20 also has multiple second output terminals, which are electrically connected to the corresponding energy storage converter 30.

[0094] Among them, such as Figure 3 As shown, the second output terminals of the battery management system 20 are Relay1_OUT2 and Relay2_OUT2, respectively. Figure 3 Only two second output terminals are shown in the diagram. In practical applications, multiple second output terminals can be designed according to actual needs, such as Relay1_OUT2, Relay2_OUT2, ..., Relayn_OUT2. In case of emergency stop, the energy storage converter can also obtain an emergency stop signal from the battery management system to perform an emergency stop.

[0095] Each secondary output of the BMS is connected to a specific PCS, meaning the system can independently control each energy storage converter. In complex applications such as microgrids and distributed energy systems, this feature allows the system to precisely adjust the operating mode of each energy storage unit based on real-time demand and battery status, improving energy utilization efficiency and system response performance. The multiple outputs increase system redundancy. Even if a secondary output or its connected PCS fails, other outputs and PCS can still operate normally, ensuring the overall system function is not severely affected and improving system reliability. By connecting multiple secondary outputs to different PCS, the BMS can implement more refined energy management strategies. For example, it can dynamically adjust the power of each PCS to achieve load balancing, reduce grid pressure during peak hours, and ensure balanced charging and discharging of the battery pack, optimizing battery life. The independent output connection design facilitates fault isolation and rapid system recovery. Once an anomaly is detected in a PCS, the BMS can immediately shut down the corresponding output, limiting the impact of the fault to a minimum, avoiding system-wide collapse, and facilitating subsequent fault diagnosis and maintenance. The BMS is equipped with multiple secondary outputs, providing room for system expansion. As energy storage demand grows, the system's energy storage capacity can be easily expanded by adding new PCS (Power Control System) units (PCSs) connected to the BMS's idle outputs, without requiring large-scale modifications to the existing BMS core logic, thus improving system scalability. The independent connection between each secondary output and the PCS reduces data transmission bottlenecks and improves communication efficiency. The BMS can send control commands to each PCS more quickly and receive feedback information from the PCS, which is crucial for large-scale energy storage systems requiring real-time control. The one-to-one connection between each BMS output and the PCS simplifies maintenance procedures. During system updates or PCS replacements, targeted adjustments to relevant connections can be made without disrupting the entire system, reducing maintenance costs and downtime.

[0096] In summary, the BMS establishes electrical connections with the corresponding energy storage converters (PCS) through multiple second output terminals, which not only enhances the control accuracy and energy management capabilities of the energy storage system, but also improves the system's redundancy, fault isolation capabilities, expansion flexibility, and communication efficiency.

[0097] In some embodiments, such as Figure 4 As shown, the first undervoltage release 14 has a first terminal and a second terminal, and the second relay 13 has a fifth contact E and a sixth contact F. The fifth contact E is electrically connected to the emergency stop switch 11, and the sixth contact F is electrically connected to the first terminal of the first undervoltage release 14. The second terminal of the first undervoltage release 14 is electrically connected to the AC main switch of the AC voltage source 40. The fifth contact E and the sixth contact F do not make contact when the emergency stop signal is received.

[0098] The second relay's contacts are normally closed. This means that when no emergency stop signal is received, contacts E and F are in contact. Upon receiving an emergency stop signal, the second relay's contacts change from normally closed to normally open, and contacts E and F become disconnected. At this time, the first undervoltage release device receives the signal from the second relay's contacts changing from normally closed to normally open, thus determining that the system needs an emergency stop. For example, when the second relay's contacts are normally closed, the first undervoltage release device receives a signal of "0"; when the second relay's contacts are normally open, the first undervoltage release device receives a signal of "1". Thus, if the contact wires come loose, contacts E and F will not make contact, and the second relay's contacts will change from normally closed to normally open, triggering an emergency stop. This effectively ensures the system's reliability and safety.

[0099] Specifically, the second relay can be a K179 relay. After receiving the emergency stop signal, the emergency stop switch controls the second relay to operate. Under normal circumstances, the fifth contact E and the sixth contact F of the second relay are closed. After the emergency stop is triggered, the second relay opens, and the first undervoltage release trip trips to cut off the switch. This adds the advantage of directly controlling the switch's disconnection via the normally closed contact of the emergency stop mechanism for the integrated cabinet or container. Compared with the shunt trip solution, the advantage is that the emergency stop signal is directly connected to the disconnection of the control switch, and it is controlled by normally closed contacts. This avoids the problem of emergency stop protection failure due to BMS software failure, the inability of the BMS output to output a signal, or problems with the emergency stop device itself and the risk of cable tripping, thus increasing the reliability of the system's emergency stop protection.

[0100] By employing a second relay and a first undervoltage release, the emergency stop signal can be directly applied to critical components of the system via hard-wired connection, bypassing the BMS control loop which may fail due to software malfunctions. This hard-wired redundancy design significantly enhances the reliability of emergency stop control, ensuring effective response and protection under any circumstances. BMS software failures can affect the normal transmission of its output signals, leading to emergency stop control failure. This risk is avoided by directly connecting the second relay and the first undervoltage release. Even if the BMS fails, the emergency stop signal can still directly trigger protection action via the relay, ensuring the system's responsiveness in emergencies. The stop switch itself may have hardware faults, such as contact sticking or mechanical jamming. The normally closed contact control scheme ensures that even if the emergency stop switch has some problems, the system can still trigger protection by opening the second relay, reducing the possibility of protection failure due to component issues. The mechanism of directly opening the second relay contacts offers a faster response speed compared to methods requiring BMS software processing and outputting control commands. In emergency situations, this speed advantage can significantly shorten the time from the triggering of an emergency stop signal to the system power failure, which is crucial for preventing the accident from escalating and protecting the safety of personnel and equipment.

[0101] In summary, the combined use of the second relay and the first undervoltage release device, through their directly controlled normally closed contacts, significantly enhances the redundancy and response speed of the energy storage system's emergency stop function. This design effectively avoids the risk of protection failure due to software malfunctions, emergency stop device failures, or cable problems, greatly improving the overall safety and operational reliability of the system.

[0102] In some embodiments, such as Figure 5 As shown, the second relay 13 is also connected to the battery management system 20. The first end of the second relay 13 is electrically connected to the DO output terminal of the battery management system 20, and the second end of the second relay 13 is electrically connected to the ground terminal GND of the battery management system 20.

[0103] The second relay is connected to the battery management system, allowing the battery management system to directly control the second relay.

[0104] In energy storage systems, the electrical connection design between the second relay (usually referring to the K179 relay) and the battery management system (BMS), especially the connection of its first terminal to the digital output (DO) port of the BMS and the connection of its second terminal to the ground terminal of the BMS, greatly improves the accuracy of system control, response speed and overall safety.

[0105] The BMS is directly connected to the second relay, enabling the system to remotely control and instantly switch the second relay on and off. This means that operators can remotely perform power-off operations based on system status or safety requirements without physical contact with the equipment, greatly enhancing operational flexibility and response speed. This connection method allows the BMS to remotely monitor the status of the second relay, thereby achieving remote management of the entire system's power supply. In large-scale or distributed energy storage applications, remote control capabilities are particularly important, allowing system administrators to manage multiple devices centrally from a central control room or remote location, improving operational efficiency.

[0106] The BMS can directly control the second relay without requiring an additional control unit or complex signal transmission paths. This means the execution path from the BMS to the relay is the shortest, resulting in the fastest response time. This is crucial for scenarios requiring rapid adjustment of the power state, such as battery charge / discharge management and load balancing. The direct connection between the BMS and the second relay allows the BMS to precisely control the power supply or disconnection based on battery status, system requirements, and safety considerations. This high-precision control helps optimize battery performance, extend its lifespan, and ensure efficient system operation. Specifically, the BMS connects to the first terminal of the second relay via its DO output, meaning the BMS can directly control the relay's opening and closing. Under normal operating conditions, the BMS keeps the relay closed, allowing power flow. However, upon detecting an anomaly, such as battery overheating, voltage instability, or the need for an emergency stop command, the BMS can quickly send a signal through its DO output to disconnect the second relay, cutting off the power supply and providing timely system protection.

[0107] In the event of an emergency stop requiring a shutdown but with the emergency stop switch malfunctioning, the BMS can directly control the second relay to disconnect, providing a backup power outage mechanism for the system. This design ensures that even if the primary emergency stop path fails, the system can still respond promptly through direct control by the BMS, effectively preventing the accident from escalating and protecting personnel and equipment safety. The direct control mechanism allows the BMS to quickly isolate affected circuits upon detecting a fault, preventing fault propagation and facilitating subsequent system recovery and troubleshooting. This rapid isolation capability significantly reduces system downtime due to faults, improving overall operational efficiency and availability. By directly controlling the second relay through the BMS, the energy storage system not only achieves more efficient and precise power management but also greatly enhances system safety and reliability.

[0108] In some embodiments, such as Figure 6 As shown, the DC voltage source includes a DC main switch 51, and the second undervoltage release 15 is electrically connected to the emergency stop switch 11 and the DC main switch 51 respectively.

[0109] In energy storage systems or power electronic devices, DC voltage sources typically consist of a series of batteries or DC power supplies to provide stable DC power. The DC main switch is a crucial component controlling the entire DC voltage source and its output, while the emergency stop switch is a key device ensuring system safety and allowing for rapid power disconnection in emergencies.

[0110] Connecting the second undervoltage release directly to the emergency stop switch means that when an emergency stop signal is triggered, the second undervoltage release responds immediately, without needing an intermediate control unit (such as a BMS). This direct control path reduces signal transmission time and improves power-off efficiency. The second undervoltage release activates immediately upon detecting an emergency stop signal, causing the main DC switch to trip and cutting off power to the entire DC voltage source. This rapid-action mechanism is crucial for preventing electrical accidents in emergency situations, enabling immediate power disconnection and minimizing damage.

[0111] In addition to the BMS control path, the second undervoltage release provides an independent direct path for the emergency stop signal. Even if the BMS or other control circuits fail, the emergency stop function can still be activated through the second undervoltage release, enhancing the system's safety redundancy. After the emergency stop switch is triggered, the direct action of the second undervoltage release avoids protection failures caused by line breaks, control signal transmission delays, or BMS software malfunctions, ensuring the reliability of emergency power cut-off.

[0112] The design of directly connecting the second undervoltage release to the emergency stop switch and the DC main switch not only provides a fast and efficient power-off response but also enhances the system's safety and reliability in emergency situations. This design simplifies maintenance procedures and optimizes safety under different operating modes by providing an emergency stop signal path independent of BMS control.

[0113] The DC main circuit switch is controlled using an undervoltage release mechanism. The emergency stop normally closed contact on the integrated cabinet or container closes, triggering the coil of the second undervoltage release mechanism to disconnect the main switch. Compared to a shunt trip mechanism, this method has the advantage of using a normally closed contact for emergency stop control, avoiding the risk of emergency stop protection failure due to problems with the emergency stop device itself or cable tripping, thus increasing the reliability of the system's emergency stop protection.

[0114] In some embodiments, such as Figure 6As shown, the emergency stop switch 11 has a first terminal and a second terminal. The DC voltage source includes a selection switch 52, which includes a first path and a second path connected in parallel. The selection switch 52 is electrically connected to the first terminal of the emergency stop switch 11, and the second terminal of the emergency stop switch 11 is electrically connected to the DC main switch. When the first path is open, the DC voltage source is locally controlled. When the second path is open, the DC voltage source is controlled by the battery management system.

[0115] In modern energy storage systems and power electronic equipment, the control strategy of the DC main circuit switch is crucial for the safe operation of the system. Using an undervoltage release device to control the DC main circuit switch offers significant advantages over traditional shunt trip devices, particularly in the reliability and safety of the emergency stop function.

[0116] In energy storage systems, the emergency stop function is considered the last line of defense to protect personnel safety and equipment from damage. By directly connecting the normally closed emergency stop contact on the integrated cabinet or container to the undervoltage release device (especially the second undervoltage release device), it can be ensured that the system can quickly and reliably cut off the main power supply in the event of an emergency, whether in local control mode or remote control mode (battery management system control).

[0117] In local control mode, when an operator triggers an emergency stop near the equipment, the normally closed emergency stop contact immediately opens, directly triggering the coil of the second undervoltage release device. This eliminates the need for software processing or remote signal transmission, quickly de-energizing the main switch and providing immediate safety protection.

[0118] In remote control mode, although the battery management system (BMS) or remote monitoring system is responsible for daily control, when the emergency stop signal is triggered, the signal can also directly act on the second undervoltage release device. Even if the BMS fails temporarily or communication is interrupted, the main switch can be reliably tripped to cut off the power supply, demonstrating a strong self-protection capability.

[0119] The direct electrical connection between the emergency stop normally closed contact and the second undervoltage release device forms a hardware-level power-off mechanism. This mechanism is independent of software control, and even if the software fails, power can be cut off purely through hardware, greatly increasing the system's safety redundancy. Compared to traditional shunt trip solutions, the direct control of the emergency stop normally closed contact avoids protection failures caused by line breaks, control signal transmission errors, or software malfunctions. By simplifying the signal path, it reduces potential failure points and improves overall reliability.

[0120] Regardless of the current system control mode, an emergency stop operation will directly trigger the second undervoltage release, achieving consistent emergency stop response in both local and remote control modes. This simplifies system design and facilitates maintenance and training. By directly observing the status of the normally closed emergency stop contact and the second undervoltage release, maintenance personnel can quickly determine whether the emergency stop function is working properly and whether the power outage was caused by the emergency stop operation, simplifying the troubleshooting process and reducing maintenance difficulty.

[0121] In summary, the direct electrical connection mechanism between the normally closed emergency stop contact and the second undervoltage release significantly improves the safety and reliability of energy storage systems in emergency situations by providing immediate response, enhanced hardware-level protection, and simplified system design. This design not only reduces the risk of protection failure but also simplifies maintenance procedures and ensures operator safety.

[0122] Emergency stop control is a crucial function in energy storage control systems, primarily used to quickly cut off power to equipment in emergencies to prevent personal injury, equipment damage, or more serious safety issues caused by battery fires. Therefore, emergency stop protection must ensure reliable operation, guaranteeing safe disconnection even in the event of a single module failure. Based on this, a scheme combining undervoltage tripping with the system's own normally closed emergency stop contact control, coupled with software BMS control, is adopted instead of the conventional shunt tripping scheme. This primarily avoids risks such as software BMS failure leading to inability to control properly, problems with the emergency stop contacts, or the emergency stop control signal wire coming loose. The sampling undervoltage tripping method ensures that emergency stop triggering can effectively, safely, and redundantly disconnect the DC and AC main circuit switches, increasing the system's reliability and safety.

[0123] Embodiments of this application also provide an emergency stop control method for an energy storage system, which is used to control... Figures 1 to 5 Any of the energy storage systems shown, such as Figure 7 As shown, the emergency stop control method of the energy storage system includes the following steps:

[0124] Step S101: Receive and respond to the emergency stop operation applied to the emergency stop button to obtain an emergency stop signal;

[0125] In step S102, according to the emergency stop signal, the emergency stop switch 11 and the second relay 13 are opened, the first relay 12 is closed, and the first undervoltage release 14 and the second undervoltage release 15 are tripped, so as to transmit the emergency stop signal to the battery management system 20 and the energy storage converter 30, and disconnect the AC voltage source 40 and the DC voltage source 50 from power supply.

[0126] In energy storage systems, emergency stop control is a crucial mechanism to ensure the system can quickly and safely shut down in emergencies. When an operator presses the emergency stop button in an emergency, the system immediately receives and responds to this action, acquiring the emergency stop signal. This immediate response ensures that the operator's intention is quickly recognized by the system, buying time for subsequent power-off operations. By directly actuating the emergency stop button, delays and potential signal loss in transmission are avoided, ensuring the accuracy and timeliness of the emergency stop signal.

[0127] Upon receiving an emergency stop signal, the system rapidly executes a series of preset control operations, including disengaging the emergency stop switch 11 and the second relay 13, closing the first relay 12, and triggering the first undervoltage release 14 and the second undervoltage release 15 to trip. These control actions are precisely designed to ensure that the emergency stop signal not only receives an internal response from the system but also effectively disconnects the AC voltage source 40 and the DC voltage source 50, achieving a power outage for the entire system. By controlling the actions of multiple relays and undervoltage releases, a multi-layered protection mechanism is constructed. Even if a single component or control path fails, other components can still respond to the emergency stop signal and cut off the power supply, ensuring the overall safety and reliability of the system.

[0128] The emergency stop signal not only cuts off the power supply but also transmits it to the battery management system and energy storage converter, ensuring that these two core system components immediately cease operation. This prevents any potential electrical accidents or battery safety issues, enhancing the overall safety of the system. By rapidly disconnecting the AC and DC voltage sources, the system can avoid secondary accidents such as circuit overload and short circuits, protecting equipment from damage and ensuring the safety of on-site personnel.

[0129] This design ensures that even if the system's complex control mechanisms fail, the system can still be powered off using hardware-level protection mechanisms (such as undervoltage release devices), reducing reliance on system software or complex communication links and improving the system's maintainability and operational stability.

[0130] Emergency stop control methods significantly enhance the safety and response efficiency of energy storage systems through immediate response, precise control, multi-layered protection, and system-level propagation of emergency stop signals. Clear planning of power outage paths and full utilization of hardware protection mechanisms in the design not only improve system reliability but also simplify maintenance and troubleshooting, which is crucial for building safe, stable, and easily manageable energy storage systems. This method ensures that the system can respond quickly and cut off power in emergency situations.

[0131] In some embodiments, such as Figure 1 and Figure 2As shown, the first relay 12 has a first set of contacts, including a first contact A and a second contact B. The first contact A is electrically connected to the emergency stop switch 11, and the second contact B is electrically connected to the input terminal DI of the battery management system 20. According to the emergency stop signal, the emergency stop switch 11 and the second relay 13 are controlled to open, the first relay 12 is closed, and the first undervoltage release 14 and the second undervoltage release 15 are tripped to transmit the emergency stop signal to the battery management system 20 and the energy storage converter 30, and to disconnect the AC voltage source 40 and the DC voltage source 50. This includes: according to the emergency stop signal, controlling the emergency stop switch 11 to open and the first contact A and the second contact B to not contact, so as to transmit the emergency stop signal to the battery management system 20.

[0132] The first set of contacts is normally closed. This means that when no emergency stop signal is received, contact A and contact B are in contact. Upon receiving an emergency stop signal, the first set of contacts changes from normally closed to normally open, and contact A and contact B no longer contact. At this time, the battery management system receives the signal from the change in the first set of contacts from normally closed to normally open, thus determining that an emergency stop is needed. Under normal conditions, contact A and contact B are engaged. When an emergency stop is triggered, contact A and contact B disconnect, triggering the emergency stop signal. Compared to existing technologies, the advantage lies in the use of normally closed emergency stop contacts, avoiding the inability to input an emergency stop signal to the BMS due to a broken circuit or a problem with the emergency stop button itself, thus increasing the reliability of the system's emergency stop protection.

[0133] When an emergency stop operation is triggered, the emergency stop signal first disconnects the emergency stop switch 11. At this time, if the first contact A and the second contact B of the first relay 12 were originally in contact, they will be controlled to be in the open state. This design ensures that the emergency stop signal can be accurately transmitted from the emergency stop switch 11 to the input terminal DI of the battery management system 20. After the contacts of the first relay 12 are adjusted, the emergency stop signal is directly transmitted to the BMS, triggering its immediate response. As the core control component of the energy storage system, the BMS can quickly identify and process the emergency stop signal, stop the charging and discharging process of the battery, and send corresponding instructions to the energy storage converter 30 to ensure the overall safety of the system. This design enables the BMS to receive the emergency stop signal in the shortest possible time, shortening the time from operation to system response and improving the overall system's reaction speed in the face of emergencies.

[0134] In some embodiments, such as Figure 1 and Figure 3As shown, the battery management system 20 has multiple first output terminals, and the first relay 12 has multiple sets of second contacts. One set of second contacts includes a third contact C and a fourth contact D. The third contact C is electrically connected to the corresponding energy storage converter 30. The fourth contact D is electrically connected to the corresponding first output terminal of the battery management system 20. According to the emergency stop signal, the emergency stop switch 11 and the second relay 13 are controlled to open, the first relay 12 is closed, and the first undervoltage release 14 and the second undervoltage release 15 are tripped to transmit the emergency stop signal to the battery management system 20 and the energy storage converter 30, and to disconnect the AC voltage source 40 and the DC voltage source 50. This includes: according to the emergency stop signal, controlling the emergency stop switch 11 to open and the third contact C and the fourth contact D to not contact, so as to transmit the emergency stop signal to the energy storage converter 30, so that the energy storage converter 30 stops operating according to the emergency stop signal.

[0135] The second set of contacts is normally closed. This means that when no emergency stop signal is received, the third contact C and the fourth contact D are in contact. Upon receiving an emergency stop signal, the second set of contacts changes from normally closed to normally open, and the third contact C and the fourth contact D do not contact. At this time, the energy storage converter receives the signal from the second set of contacts changing from normally closed to normally open, thus determining that the system needs an emergency stop. The first relay is directly connected in series with the energy storage converter, and its signal is directly output to the energy storage converter. The second set of contacts is normally closed. After an emergency stop is triggered, the normally closed contacts become normally open, and the energy storage converter receives the emergency stop signal and performs an emergency stop action. The emergency stop signal is directly connected to the energy storage converter through the action of the first relay, without going through the BMS software processing. This avoids the inability to output a signal due to BMS software failure, increasing the reliability of the system's emergency stop protection.

[0136] Traditional emergency stop signal transmission often relies on software commands to reach the energy storage converter through multiple levels of control components. However, this method may fail to transmit signals effectively in the event of software failure or communication interruption. By directly controlling the third contact C of the first relay 12 to form a direct connection with the energy storage converter 30, even if the battery management system 20 or its first output terminal fails, the emergency stop signal can still be transmitted to the energy storage converter 30 through a direct hardware connection, avoiding the safety risks caused by software failure and enhancing the reliability of the emergency stop function.

[0137] This hardware protection of the normally closed contact of the first relay directly acts on the emergency stop signal transmission of the energy storage converter 30, ensuring that even in complex or harsh working environments, the system can reliably respond to emergency stop operations, cut off the power supply to the AC voltage source 40 and the DC voltage source 50, and protect equipment and personnel from injury.

[0138] Through the multi-contact mechanism of the first relay 12, especially the normally closed contact control of the third contact C and the fourth contact D, the transmission of the emergency stop signal to the energy storage converter 30 is optimized, ensuring immediate response, avoiding the risk of software failure, enhancing hardware-level protection, and simplifying the system maintenance and troubleshooting process. This significantly improves the safety and reliability of the energy storage system in emergency situations and protects equipment and personnel from damage.

[0139] In some embodiments, such as Figure 1 and Figure 4 As shown, the first undervoltage release 14 has a first terminal and a second terminal, and the second relay 13 has a fifth contact E and a sixth contact F. The fifth contact E is electrically connected to the emergency stop switch 11, and the sixth contact F is electrically connected to the first terminal of the first undervoltage release 14. The second terminal of the first undervoltage release 14 is electrically connected to the AC main switch of the AC voltage source 40. According to the emergency stop signal, the emergency stop switch 11 and the second relay 13 are controlled to open, the first relay 12 is closed, and the first undervoltage release 14 and the second undervoltage release 15 are tripped to transmit the emergency stop signal to the battery management system 20 and the energy storage converter 30, and to disconnect the AC voltage source 40 and the DC voltage source 50 from power supply. This includes: according to the emergency stop signal, controlling the emergency stop switch 11 to open, the fifth contact E and the sixth contact F to not contact, and the first undervoltage release 14 to trip, so that the AC main switch is disconnected under the action of the first undervoltage release 14.

[0140] The second relay has normally closed contacts. This means that when no emergency stop signal is received, contacts E and F are in contact. Upon receiving an emergency stop signal, the second relay contacts change from normally closed to normally open, and contacts E and F no longer contact. At this time, the first undervoltage release device receives the signal from the second relay contacts changing from normally closed to normally open, thus determining that the system requires an emergency stop. Normally, contacts E and F of the second relay are closed. After an emergency stop is triggered, the second relay opens, and the first undervoltage release device actuates to cut off the switch. This adds the direct control of the switch's disconnection via the normally closed contacts of the integrated cabinet or container's emergency stop mechanism.

[0141] In the emergency stop control strategy of the energy storage system, the undervoltage release and the second relay work together to ensure the safe and rapid disconnection of the power supply. When the emergency stop signal is triggered, the emergency stop switch 11 opens, and then the fifth contact E and the sixth contact F of the second relay 13 are controlled to be in an open state. This change directly opens the connection with the first terminal of the undervoltage release, no longer relying on software instructions or complex circuits to transmit the emergency stop signal. This means that the response of the emergency stop signal is completely independent of the software system, ensuring that even in the event of software failure or other control failures, the hardware can react immediately and achieve rapid power disconnection.

[0142] The fifth contact E is electrically connected to the emergency stop switch 11, and the sixth contact F is electrically connected to the first terminal of the undervoltage release device, while the second terminal of the undervoltage release device is directly connected to the AC main switch of the AC voltage source 40. An emergency stop signal causes these contacts to separate, thereby triggering the undervoltage release device. The tripping action of the first undervoltage release device 14 directly acts on the AC main switch, causing it to immediately disconnect without BMS or other software control, cutting off the AC power supply and avoiding potential electrical accidents or fire risks. By utilizing the hardware characteristics of the undervoltage release device, this design establishes an independent emergency stop response path, reducing the number of links and potential failure points in signal transmission. The hardware-level response is independent of software state or communication efficiency, thus establishing an additional layer of protection throughout the system and significantly improving the reliability and effectiveness of emergency stop control.

[0143] By coordinating the contacts of the first undervoltage release unit and the second relay, the emergency stop control mechanism can respond immediately in emergency situations without waiting for software commands, ensuring the immediate disconnection of the AC main switch and cutting off the AC power supply. This design not only improves the system's response speed and safety in emergency situations but also enhances system reliability and simplifies maintenance procedures, making it an important component in building efficient and safe energy storage systems.

[0144] In some embodiments, such as Figure 1 and Figure 6 As shown, the emergency stop switch 11 is electrically connected to the DC main switch 51 of the DC voltage source. According to the emergency stop signal, the emergency stop switch 11 and the second relay 13 are controlled to open, the first relay 12 is closed, and the first undervoltage release 14 and the second undervoltage release 15 are tripped to transmit the emergency stop signal to the battery management system 20 and the energy storage converter 30, and to disconnect the AC voltage source 40 and the DC voltage source 50 from power supply. This includes: when the DC voltage source 50 is locally controlled or controlled by the battery management system 20, according to the emergency stop signal, controlling the emergency stop switch 11 to open and the second undervoltage release 15 to trip, so that the DC main switch 51 is disconnected under the action of the second undervoltage release 15.

[0145] When the emergency stop signal is triggered, the emergency stop switch 11 immediately opens, directly activating the first stage of the emergency stop mechanism. Immediately afterwards, the second undervoltage release 15 is tripped, a hardware-level response independent of software control. Unlike conventional software control, hardware control acts directly on the DC main switch 51, with virtually no response delay, enabling rapid disconnection of the DC power supply. This is crucial for emergencies requiring immediate response.

[0146] The emergency stop mechanism is effective whether the DC voltage source 50 is locally controlled or controlled by the battery management system 20. This means that the transmission and response of the emergency stop signal are not limited to a specific control mode, but can flexibly adapt to different situations, ensuring that the disconnection of the DC power supply is not limited by the control mode. This flexibility greatly enhances the practicality of the emergency stop mechanism; regardless of the system's operating state, the emergency stop function can function, improving the overall safety of the system.

[0147] By directly controlling the connection between the emergency stop switch 11 and the DC main switch 51, as well as the operation of the second undervoltage release device 15, the transmission and execution of the emergency stop signal become more direct and reliable. Even in extreme cases such as software failures or network interruptions, the hardware-level control mechanism can ensure the normal operation of the emergency stop function, avoiding the risk of the entire system failing to stop due to a single point of failure, and significantly improving the safety and reliability of the system.

[0148] Furthermore, since the emergency stop mechanism is not entirely software-dependent, the stability and safety of the emergency stop function remain unaffected during software updates or system upgrades, reducing maintenance costs and upgrade risks. The direct electrical connection between the emergency stop switch 11 and the DC main switch 51, along with the immediate response of the second undervoltage release device 15, constitutes a fast, flexible, reliable, and safe emergency stop control mechanism. This not only improves the system's response speed in emergencies but also ensures the availability of the emergency stop function in various control modes, enhancing the system's safety and reliability. This hardware-level control design principle provides robust protection for the energy storage system, helping to prevent major safety accidents and protecting equipment and personnel. Simultaneously, it facilitates system maintenance and upgrades, reducing potential risks during long-term operation.

[0149] In some embodiments, receiving and responding to an emergency stop operation on an emergency stop button to obtain an emergency stop signal includes: receiving and responding to an emergency stop operation on a first emergency stop button to obtain a first emergency stop signal, wherein the first emergency stop button is an emergency stop button located outside the energy storage system enclosure; and / or receiving and responding to an emergency stop operation on a second emergency stop button to obtain a second emergency stop signal, wherein the second emergency stop button is an emergency stop button located inside the energy storage system enclosure.

[0150] The design of both internal and external emergency stop buttons ensures that the emergency stop signal can be triggered quickly, regardless of whether the operator is outside or inside the enclosure. This means that in an emergency, the operator can take immediate action without having to search for a specific location or worry about delays in operation.

[0151] The system features both an external and an internal emergency stop button, forming a dual protection mechanism. The external emergency stop button allows on-site monitoring personnel or those near the enclosure to take immediate action upon detecting external anomalies; the internal emergency stop button provides a direct emergency stop for personnel inside the enclosure, especially when an internal fault is detected or an immediate danger is faced. The presence of these dual emergency stop buttons ensures the system is protected under all circumstances, enhancing the overall safety level.

[0152] By incorporating emergency stop buttons both inside and outside the enclosure, the system's response range is significantly expanded. The external emergency stop button covers the environment surrounding the enclosure, enabling a rapid response to external threats; the internal emergency stop button focuses on the internal environment, including internal risks such as equipment overheating and short circuits. This comprehensive design effectively addresses various emergencies that the energy storage system may encounter, providing more complete protection for the system.

[0153] Emergency stop buttons are typically very intuitive to operate; simply pressing one triggers the system's protection mechanism. Whether it's a simple external intervention or an emergency operation by personnel inside the enclosure, no complex technical knowledge or procedures are required. Simplified procedures mean that operators can react quickly in emergencies, avoiding response delays caused by procedural complexity. In summary, designing internal and external emergency stop buttons ensures immediate system response in emergencies, provides dual safety guarantees, expands system coverage, simplifies procedures, and enhances maintainability and user trust.

[0154] In addition, in energy storage systems or any electrical control system, if a relay failure (i.e., a failure of the first relay and / or the second relay) causes the emergency stop signal to fail to be transmitted properly, it will affect the reliability and effectiveness of emergency stop control.

[0155] During system operation, the system will simulate an emergency stop event and send signals to the main relays (i.e., the first and second relays) to observe whether the system can cut off the power supply (AC and DC) in time. If the power supply is not cut off within the preset time, the main relay is determined to be faulty.

[0156] Alternatively, the BMS and PCS can first monitor the relay voltage. If the relay voltage is outside the preset voltage range (normal operating voltage), a relay fault is suspected. In this case, the system simulates an emergency stop event and sends a signal to the main relay to see if it activates. The system can send signals to the relay multiple times; if the relay still does not activate, a relay fault is confirmed. In other words, the BMS and PCS continuously monitor the relay status and the electrical characteristics of the signal lines through software monitoring functions. Once an anomaly is detected, an alarm is immediately triggered and fault information is recorded.

[0157] To prevent emergency stops from failing due to relay failure, the circuit includes backup relays that can be switched to in case of a main relay failure, ensuring system reliability and safety. The main relays are the first and second relays, and the backup relays are the third and fourth relays. The first and third relays are connected in parallel, as are the second and fourth relays. A single-pole double-throw (SPO) switch is connected in series with the first and third relays. In the event of a first relay failure, the BMS sends a switching signal to the SPO switch, causing it to connect the third relay into the circuit and short-circuit the first relay. Similarly, a SPO switch is also connected in series with the second and fourth relays. In the event of a second relay failure, the BMS sends a switching signal to the SPO switch, causing it to connect the fourth relay into the circuit and short-circuit the second relay.

[0158] The backup relay should have the same electrical characteristics as the main relay (such as rated voltage, current, contact type, etc.) to ensure that switching does not affect the normal operation of the system. In the circuit design, the backup relay is installed in parallel with the main relay, but by default, the backup relay is in an "off" state (i.e., not working) and does not participate in the circuit control. The circuit should include a fault detection circuit to monitor the operating status of the main relay in real time. A single-pole double-throw switch can also be designed as a switching control circuit, which can automatically switch to the backup relay after detecting a fault in the main relay. In the software of the control system, a logic algorithm for fault detection and backup relay switching should be implemented, which can automatically determine whether switching is necessary based on feedback information from the hardware circuit and issue corresponding control commands.

[0159] In addition, during the relay fault detection process, multiple detection steps can be set up. If multiple detections show that the main relay is faulty, then the main relay is confirmed to be faulty, which can prevent the system from making false judgments.

[0160] An embodiment of this application also provides an electrical device, including: any of the energy storage systems described above, wherein, in the event that the energy storage system needs to be stopped urgently, any of the energy storage system's emergency stop control methods described above is used to control the energy storage system to stop operating.

[0161] In this embodiment, integrating an energy storage system with emergency stop control functionality into the electrical equipment significantly improves the overall safety and response efficiency of the equipment. The emergency stop control method can rapidly cut off the power supply to the energy storage system when an emergency is detected (such as overheating, short circuit, fire, etc.), preventing further escalation of the accident, protecting personnel safety, and preventing equipment damage. Employing a dual control strategy of undervoltage tripping and normally closed emergency stop contacts, even if one control path fails, an emergency stop can still be achieved through the other path, ensuring effective power disconnection under any circumstances.

[0162] Emergency stop control not only disconnects the power supply but also prevents the accidental release of energy in the energy storage system, protecting the system from secondary damage. Integrating an energy storage system with emergency stop control into electrical equipment can significantly improve the equipment's safety capabilities, optimize energy management, enhance equipment reliability and stability, simplify maintenance and repair processes, improve user experience, and ensure operator safety.

[0163] Those skilled in the art will understand that the above embodiments are specific examples of implementing this application, and in practical applications, various changes in form and detail can be made without departing from the spirit and scope of this application. Any person skilled in the art can make various alterations and modifications without departing from the spirit and scope of this application; therefore, the scope of protection of this application should be determined by the scope defined in the claims.

Claims

1. An energy storage system, characterized in that, include: The emergency stop control circuit includes an emergency stop switch, a first relay, a second relay, a first undervoltage release, and a second undervoltage release that are electrically connected. The battery management system is electrically connected to the emergency stop switch, the first relay, and the second relay, respectively. The first terminal of the second relay is electrically connected to the output terminal of the battery management system, and the second terminal of the second relay is electrically connected to the ground terminal of the battery management system. The energy storage converter is electrically connected to the battery management system and the first relay, respectively. An AC voltage source is electrically connected to the emergency stop switch, the second relay, and the first undervoltage release device, respectively. A DC voltage source is electrically connected to the emergency stop switch and the second undervoltage release device; In the event of receiving an emergency stop signal, the emergency stop switch and the first relay are disconnected, the second relay is closed, and the first undervoltage release and the second undervoltage release are tripped to transmit the emergency stop signal to the battery management system and the energy storage converter, and to disconnect the AC voltage source and the DC voltage source from power supply. The first relay has a first set of contacts, which includes a first contact and a second contact. The first contact is electrically connected to the emergency stop switch, and the second contact is electrically connected to the input terminal of the battery management system. The first contact and the second contact do not make contact when the emergency stop signal is received.

2. The energy storage system according to claim 1, characterized in that, The first relay has a second set of contacts, which includes a third contact and a fourth contact. The third contact is electrically connected to the energy storage converter, and the fourth contact is electrically connected to the first output terminal of the battery management system. The third contact and the fourth contact do not make contact when the emergency stop signal is received.

3. The energy storage system according to claim 2, characterized in that, The second group of contacts has multiple groups, the energy storage converter has multiple groups, and the battery management system has multiple first output terminals. One group of the third and fourth contacts corresponds to one first output terminal of the energy storage converter and the battery management system.

4. The energy storage system according to claim 1, characterized in that, The battery management system also has multiple second output terminals, which are electrically connected to the corresponding energy storage converters.

5. The energy storage system according to claim 1, characterized in that, The first undervoltage release has a first terminal and a second terminal, and the second relay has a fifth contact and a sixth contact. The fifth contact is electrically connected to the emergency stop switch, and the sixth contact is electrically connected to the first terminal of the first undervoltage release. The second terminal of the first undervoltage release is electrically connected to the AC main switch of the AC voltage source. The fifth contact and the sixth contact do not make contact when the emergency stop signal is received.

6. The energy storage system according to claim 1, characterized in that, The DC voltage source includes a DC main switch, and the second undervoltage release is electrically connected to the emergency stop switch and the DC main switch respectively.

7. The energy storage system according to claim 6, characterized in that, The emergency stop switch has a first terminal and a second terminal. The DC voltage source includes a selector switch, which includes a first path and a second path connected in parallel. The selector switch is electrically connected to the first terminal of the emergency stop switch, and the second terminal of the emergency stop switch is electrically connected to the DC main switch. When the first path is open, the DC voltage source is locally controlled. When the second path is open, the DC voltage source is controlled by the battery management system.

8. The energy storage system according to any one of claims 1 to 7, characterized in that, The emergency stop switch includes a first emergency stop switch and a second emergency stop switch connected in series. The first emergency stop switch is controlled by an emergency stop button outside the energy storage system enclosure, and the second emergency stop switch is controlled by an emergency stop button inside the energy storage system enclosure.

9. An emergency stop control method for an energy storage system, characterized in that, The emergency stop control method for the energy storage system according to any one of claims 1 to 8 includes: Receive and respond to emergency stop operations applied to the emergency stop button to obtain an emergency stop signal; Based on the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is closed, and the first undervoltage release and the second undervoltage release are tripped, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and disconnect the AC voltage source and the DC voltage source.

10. The emergency stop control method for an energy storage system according to claim 9, characterized in that, The first relay has a first set of contacts, including a first contact and a second contact. The first contact is electrically connected to the emergency stop switch, and the second contact is electrically connected to the input terminal of the battery management system. Based on the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is controlled to close, and the first undervoltage release is controlled to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and disconnect the AC voltage source and the DC voltage source power supply. Based on the emergency stop signal, the emergency stop switch is opened and the first and second contacts are not in contact, so as to transmit the emergency stop signal to the battery management system.

11. The emergency stop control method for an energy storage system according to claim 9, characterized in that, The first relay has multiple sets of second group contacts, each set of second group contacts including a third contact and a fourth contact. The third contact is electrically connected to the corresponding energy storage converter; the fourth contact is electrically connected to the corresponding first output terminal of the battery management system. Based on the emergency stop signal, it controls the emergency stop switch and the second relay to open, the first relay to close, and the first undervoltage release to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and disconnect the AC voltage source and DC voltage source power supply, including: Based on the emergency stop signal, the emergency stop switch is opened and a set of the third and fourth contacts are not in contact, so as to transmit the emergency stop signal to the energy storage converter, so that the energy storage converter stops operating according to the emergency stop signal.

12. The emergency stop control method for an energy storage system according to claim 9, characterized in that, The first undervoltage release has a first terminal and a second terminal, and the second relay has a fifth contact and a sixth contact. The fifth contact is electrically connected to the emergency stop switch, and the sixth contact is electrically connected to the first terminal of the first undervoltage release. The second terminal of the first undervoltage release is electrically connected to the AC main switch of the AC voltage source. Based on the emergency stop signal, the emergency stop switch and the second relay are controlled to open, the first relay is controlled to close, and the first undervoltage release is controlled to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and disconnect the AC voltage source and the DC voltage source power supply. This includes: Based on the emergency stop signal, the emergency stop switch is controlled to open, the fifth and sixth contacts are de-contacted, and the first undervoltage release is tripped, so that the AC main switch is disconnected under the action of the first undervoltage release.

13. The emergency stop control method for an energy storage system according to claim 9, characterized in that, The emergency stop switch is electrically connected to the DC main switch of the DC voltage source. Based on the emergency stop signal, it controls the emergency stop switch and the second relay to open, the first relay to close, and the first undervoltage release to trip, so as to transmit the emergency stop signal to the battery management system and the energy storage converter, and disconnect the AC voltage source and the DC voltage source power supply, including: When the DC voltage source is controlled locally or by the battery management system, the emergency stop switch is opened and the second undervoltage release is tripped according to the emergency stop signal, so that the DC main switch is opened under the action of the second undervoltage release.

14. The emergency stop control method for an energy storage system according to claim 9, characterized in that, Receive and respond to emergency stop operations performed on the emergency stop button to obtain an emergency stop signal, including: Receive and respond to an emergency stop operation performed on a first emergency stop button to obtain a first emergency stop signal, wherein the first emergency stop button is an emergency stop button located outside the housing of the energy storage system; And / or, The system receives and responds to an emergency stop operation performed on a second emergency stop button to obtain a second emergency stop signal. The second emergency stop button is an emergency stop button located inside the energy storage system's housing.

15. An electrical appliance, characterized in that, include: The energy storage system according to any one of claims 1 to 8, in the event that the energy storage system needs to be stopped urgently, shall be controlled to stop operation by means of the emergency stop control method of the energy storage system according to any one of claims 9 to 14.

Images