energy storage system

Abstract

The embodiment of the application provides a kind of energy storage system.The energy storage system includes total control cabinet and multiple battery cabins, the total control cabinet and each battery cabin are provided with emergency stop button, multiple emergency stop buttons are sequentially connected in series, and the terminal emergency stop button is connected back to the emergency stop button on the total control cabinet, to form annular emergency stop link.When the total control cabinet and multiple battery cabins are in running state, emergency stop link is in passage state;When the emergency stop button on the total control cabinet or the first battery cabin is pressed, the emergency stop link is disconnected, and the total control cabinet and multiple battery cabins detect the disconnected state of the emergency stop link, and execute emergency stop operation in running state.The first battery cabin is any battery cabin with pressed emergency stop button.The energy storage system builds annular emergency stop link, ensures that emergency stop link is interrupted when any cabin triggers emergency stop, and broadcasts emergency stop signal to all cabins in time, so that all cabins stop in time, effectively avoiding the spread and expansion of failure.

Description

Technical Field

[0001] This application relates to the field of energy storage technology, and in particular to an energy storage system. Background Technology

[0002] Modular energy storage systems typically consist of multiple independent battery compartments (battery clusters) connected in parallel or series via a DC bus. During operation, if a battery compartment experiences thermal runaway or insulation failure, the fault circuit must be quickly disconnected to prevent the fault from spreading.

[0003] Existing energy storage systems primarily rely on a centralized control architecture, where a main controller manages all battery modules. In existing systems, when a battery module experiences an internal fault (such as thermal runaway or insulation failure), its emergency stop signal typically only disconnects its own circuit and cannot quickly and reliably notify other parallel-operating battery modules for coordinated protection.

[0004] Therefore, existing technologies lack cross-compartment collaborative protection mechanisms. When a battery compartment fails, other compartments cannot respond in time, which may lead to the spread or escalation of the failure. Summary of the Invention

[0005] This application provides an energy storage system to address the technical problem that the prior art lacks a cross-compartment collaborative protection mechanism, and that when a battery compartment fails, other compartments cannot respond in time, leading to the spread or amplification of the fault.

[0006] In a first aspect, embodiments of this application provide an energy storage system, including: a main control cabinet and multiple battery compartments;

[0007] The main control cabinet and each of the battery compartments are equipped with emergency stop buttons. Multiple emergency stop buttons are connected in series, and the end emergency stop button is connected back to the emergency stop button on the main control cabinet to form a ring-shaped emergency stop link.

[0008] When the main control cabinet and the multiple battery compartments are all in operation, the emergency stop link is in the open state;

[0009] When the emergency stop button on the main control cabinet or the first battery compartment is pressed, the emergency stop link is disconnected. The main control cabinet and the multiple battery compartments detect the disconnection of the emergency stop link and perform an emergency stop operation in the running state.

[0010] The first battery compartment is any battery compartment that has its emergency stop button pressed.

[0011] In one possible implementation, each of the plurality of battery compartments is provided with a sub-controller and a digital quantity module. The digital quantity module in each battery compartment is connected to the sub-controller to transmit the digital signal to the sub-controller when a digital signal is acquired.

[0012] The digital quantity module includes a digital signal input terminal and a digital signal output terminal;

[0013] The main control cabinet includes a main controller.

[0014] In one possible implementation, both the main control cabinet and the plurality of battery compartments detect the disconnection of the emergency stop link and perform an emergency stop operation while in operation, including:

[0015] When the emergency stop link is disconnected, the digital modules on the multiple battery compartments acquire the disconnection status and send the disconnection status to the connected sub-controller, which then controls the corresponding battery compartment to perform an emergency stop operation.

[0016] The main controller detects the disconnection of the emergency stop link and controls the main control cabinet to perform an emergency stop operation.

[0017] In one possible implementation, the main controller and the sub-controllers of the plurality of battery compartments are connected in parallel to form a communication bus;

[0018] The sub-controller acquires the operating data of the corresponding battery compartment and sends the operating data to the main controller through the communication bus;

[0019] The main controller determines whether the multiple battery compartments have reached the emergency stop condition based on the operating data.

[0020] When the second battery compartment reaches the emergency stop condition, the main controller sends an emergency stop command to the second sub-controller of the second battery compartment via the communication bus.

[0021] The second sub-controller controls the second battery compartment to perform an emergency stop operation, the emergency stop link is disconnected, and each of the sub-controllers and the main controller obtains the disconnection status of the emergency stop link;

[0022] Other sub-controllers besides the second sub-controller control the corresponding battery compartments to perform emergency stop operations, and the main controller controls the main control cabinet to perform emergency stop operations.

[0023] In one possible implementation, the digital modules on the multiple battery compartments are connected in series sequentially, with the beginning and end connected to form a ring-shaped interlocked bus.

[0024] When the multiple battery compartments are in operation, the interlock bus is in a connected state;

[0025] When any of the battery compartments is in a stopped state, the interlock bus is in a disconnected state.

[0026] In one possible implementation, when the multiple sub-controllers receive the pre-start command, they control each of the battery compartments to perform a self-test operation and send the self-test results to the main controller.

[0027] The main controller is used to determine whether the energy storage system meets the global interlock verification conditions based on multiple self-test results and the interlock bus; the global interlock verification conditions include: the self-test results of the multiple battery compartments all indicate that the self-test has passed, and the interlock bus forms a loop;

[0028] If the self-test results of the multiple battery compartments and the interlock bus meet the global interlock verification conditions, the main controller sends a start command to the multiple sub-controllers.

[0029] Each of the sub-controllers controls the corresponding battery compartment to perform a startup operation.

[0030] In one possible implementation, the main controller sends the verification result to the client if the self-test result of any battery compartment or the interlock bus does not meet the global interlock verification conditions.

[0031] In one possible implementation, the central controller establishes a communication connection with the client;

[0032] After receiving the start command sent by the client, the main controller generates a pre-start command and sends the pre-start command to multiple sub-controllers through the communication bus.

[0033] In one possible implementation, the self-test operation includes at least: whether the voltage and temperature of the battery compartment are within the normal range, whether the insulation resistance reaches a preset standard value, and whether the main contactor is in the closed state.

[0034] In one possible implementation, the main controller is used to determine whether the plurality of battery compartments have reached the emergency stop condition based on the operating data, including:

[0035] The main controller determines the fault level of each battery compartment based on the operating data, and determines whether the fault level meets the emergency stop conditions, wherein the emergency stop conditions include the fault level reaching the first level.

[0036] The energy storage system provided in this application includes a main control cabinet and multiple battery compartments. Each battery compartment and the main control cabinet is equipped with an emergency stop button. These emergency stop buttons are connected in series, with the last emergency stop button connected back to the emergency stop button on the main control cabinet, forming a circular emergency stop link. When the main control cabinet and all battery compartments are in operation, the emergency stop link is active. When an emergency stop button on the main control cabinet or the first battery compartment is pressed, the emergency stop link is disconnected. The main control cabinet and all battery compartments detect the disconnection and perform an emergency stop operation while in operation. The first battery compartment is any battery compartment whose emergency stop button has been pressed. By constructing a circular emergency stop link, this energy storage system ensures that when any compartment triggers an emergency stop, the emergency stop link is interrupted, and the emergency stop signal is promptly broadcast to all compartments, enabling all compartments to stop immediately and effectively preventing the spread and escalation of the fault. Attached Figure Description

[0037] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0038] Figure 1 A schematic diagram of the energy storage system provided in this application;

[0039] Figure 2 A schematic diagram of an emergency stop control process for an energy storage system provided in an embodiment of this application;

[0040] Figure 3 This is a flowchart illustrating a startup method for an energy storage system provided in an embodiment of this application.

[0041] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0042] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0043] With the global energy structure transforming towards low-carbon, the installed capacity of new energy power generation (such as wind power and photovoltaic) continues to expand. However, new energy power generation is intermittent and volatile, posing severe challenges to grid stability. In this context, electrochemical energy storage systems have become one of the core technologies for solving key scenarios such as power grid peak shaving and frequency modulation, smoothing the output of new energy, and providing emergency backup power.

[0044] Modular energy storage systems are widely used in industrial parks, microgrids, and grid-side energy storage projects. Existing modular energy storage systems usually consist of multiple independent battery compartments (battery clusters) connected in parallel or series through a DC bus. During operation, if a certain battery compartment experiences a fault such as thermal runaway or insulation failure, it is necessary to quickly cut off the faulty circuit and prevent the spread of the fault.

[0045] The existing control methods for energy storage systems mainly rely on a centralized control architecture, that is, the main controller uniformly schedules all battery compartments. In existing energy storage systems, when an internal fault (such as thermal runaway or insulation failure) occurs in a certain battery compartment, its own emergency stop signal is usually only used to cut off the circuit of this compartment, and it cannot quickly and reliably notify other battery compartments operating in parallel to carry out cooperative protection.

[0046] Therefore, the existing technology lacks a cross-compartment cooperative protection mechanism. When a fault occurs in a certain battery compartment, other compartments cannot respond in a timely manner, leading to the problem of fault spread or magnification.

[0047] The energy storage system provided by this application realizes the global linkage control of multiple battery compartments in a modular energy storage system by constructing a hardware-level emergency stop link. Specifically, the emergency stop link adopts a ring-shaped series structure to ensure that when any compartment triggers an emergency stop, the interruption of the link can be immediately broadcast to all compartments, achieving instantaneous shutdown of the entire system. Based on the emergency stop link, this energy storage system constructs a cross-compartment cooperative protection mechanism, solving the problem of isolated safety signals between compartments, where other compartments cannot respond in a timely manner when a fault occurs in a certain battery compartment, resulting in the spread or magnification of the fault.

[0048] The technical solutions of this application and how the technical solutions of this application solve the above technical problems will be described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of this application will be described below in conjunction with the accompanying drawings.

[0049] Figure 1 is a schematic structural diagram of the energy storage system provided by this application. As Figure 1 shown, the method includes: a general control cabinet 101 and multiple battery compartments.

[0050] As Figure 1As shown, multiple battery compartments include battery compartment 102, battery compartment 2 to battery compartments N to N 104. Here, N is a positive integer greater than 3, and N equals the total number of battery compartments in the energy storage system. Each battery compartment is connected in parallel to the energy storage system via a DC bus. The DC bus is the core power transmission channel; the battery compartments are connected in parallel through this DC bus to achieve centralized power output or input.

[0051] like Figure 1 As shown, each battery compartment is connected in parallel via busbar 105 to form a DC bus.

[0052] The main control cabinet 101 and each battery compartment are equipped with an emergency stop button (E-Stop) 106. Multiple emergency stop buttons are connected in series, and the last emergency stop button is connected back to the emergency stop button on the main control cabinet 101, forming a ring-shaped emergency stop link. The emergency stop button 106 is a hardware switch used to trigger an emergency shutdown of the energy storage system.

[0053] The emergency stop button 106 employs a normally closed contact design. When the main control cabinet 101 and multiple battery compartments are all in operation, the emergency stop link is in a continuous state. When the emergency stop button on the main control cabinet or the first battery compartment is pressed, the emergency stop link is disconnected. The main control cabinet and multiple battery compartments detect the disconnection of the emergency stop link and execute an emergency stop operation while in operation. The first battery compartment refers to any battery compartment where the emergency stop button has been pressed.

[0054] Understandably, the aforementioned emergency stop operation includes, but is not limited to, disconnecting the main circuit contactor. When the main control cabinet and all battery compartments have completed the startup process and are in normal operation, all emergency stop buttons are not triggered. At this time, the ring emergency stop link is in a continuous state, and each battery compartment and the main control cabinet can detect the continuity signal of the emergency stop link. Meanwhile, the energy storage system maintains normal operation, and electrical energy is output to the DC bus through the main circuit contactors of each battery compartment. The continuity signal can be, for example, a high-level signal.

[0055] In some embodiments, when the emergency stop button on the main control cabinet is triggered by manual operation or system linkage, the physical contacts of the emergency stop button disconnect, directly causing the interruption of the loop emergency stop link. At this time, the main control cabinet and all battery compartments can detect the disconnection signal of the emergency stop link in real time. Without waiting for the command from the main controller, each battery compartment immediately executes its local emergency stop procedure, that is, disconnects its own main circuit contactor, cuts off the power output channel, and realizes the synchronous shutdown of the entire energy storage system. The disconnection signal can be, for example, a low-level signal. The voltage value corresponding to this low-level signal is lower than the voltage value corresponding to the high-level signal mentioned above.

[0056] In some embodiments, when an emergency stop button is triggered in a battery compartment, the physical contacts of the emergency stop button in that battery compartment disconnect, and the circuit of the ring emergency stop link is interrupted. Since the emergency stop link is a closed-loop structure, the link disconnection signal is transmitted to all components simultaneously: the main control cabinet detects the link disconnection, and at the same time, all the sub-controllers of the other battery compartments can also detect the disconnection signal. Each battery compartment does not need to wait for the coordination command of the main controller and immediately executes its local emergency stop procedure, that is, disconnects its own main circuit contactor, realizing instantaneous synchronous shutdown of the entire system and preventing the risk of a faulty battery compartment from spreading to other normal compartments.

[0057] For example, Figure 1 When the emergency stop button on the battery compartment 103 is pressed, the main circuit contactor of the battery compartment 103 is disconnected, the power path between the battery pack and the external DC bus is cut off, and the battery pack stops supplying power or absorbing electrical energy. There is no voltage at both ends of the emergency stop button on the battery compartment 103. At this time, the emergency stop link is in the open state, and all other battery compartments except the one in the battery compartment 103 and the main control cabinet can detect that the emergency stop link is at a low level.

[0058] The energy storage system provided in this application includes a main control cabinet and multiple battery compartments. Each battery compartment and the main control cabinet is equipped with an emergency stop button. These emergency stop buttons are connected in series, with the last emergency stop button connected back to the emergency stop button on the main control cabinet, forming a circular emergency stop link. When the main control cabinet and all battery compartments are in operation, the emergency stop link is active. When an emergency stop button on the main control cabinet or the first battery compartment is pressed, the emergency stop link is disconnected. The main control cabinet and all battery compartments detect the disconnection and perform an emergency stop operation while in operation. The first battery compartment is any battery compartment whose emergency stop button has been pressed. By constructing a hardware circular emergency stop link, this energy storage system ensures that when any compartment triggers an emergency stop, the emergency stop signal is promptly broadcast to all compartments, achieving a "one-click stop, full-site coordination" effect. This effectively prevents the spread and escalation of faults, thereby improving the operational safety and fault response timeliness of the energy storage system.

[0059] In one possible implementation, each of the multiple battery compartments is equipped with a sub-controller 107 and a digital quantity module 108. The digital quantity module 108 in each battery compartment is connected to the sub-controller 107 to transmit the digital signal to the sub-controller when a digital signal is acquired.

[0060] Among them, sub-controller 107, such as Figure 1 The Sub-controller shown, Sub-controller 107, is the local control core of each battery compartment. It has the functions of signal reception, logic judgment and execution command issuance, and is used to control the emergency stop operation of the battery compartment.

[0061] The digital input module includes a digital input terminal (DI) and a digital output terminal (DO). The digital input terminal (DI) is used to acquire various status signals inside the battery compartment. These status signals are discrete binary states.

[0062] For example, the battery compartment door's open / closed status is monitored, and an "open" or "closed" signal is transmitted to the controller via a door magnetic switch. "Open" corresponds to "1", and "closed" corresponds to "0". In addition, the digital signal input can also collect alarm statuses from temperature switches, level switches, or smoke sensors, as well as receive trigger signals from manual emergency stop buttons or maintenance switches.

[0063] The digital signal output terminal DO is used to output digital control signals to send control commands (high level / low level) to the actuators in the battery compartment to achieve operations such as switching.

[0064] For example, digital control signals can be used to control the engagement and disengagement of relays, thereby connecting or disconnecting the battery circuit, driving indicator lights to display the battery pack's operating, fault, or charging status, and activating the fan or cooling system.

[0065] The main control cabinet 101 includes a main controller 109, which is the global control core of the energy storage system. It is electrically connected to the emergency stop link and performs specific emergency stop link status detection functions. Furthermore, the main controller 109 can independently determine the on / off status of the emergency stop link and control the main control cabinet 101 to execute the corresponding emergency stop operation.

[0066] When the link is disconnected, the digital module 108 on the battery compartment acquires the disconnection status and sends it to the connected sub-controller 107, which then controls the corresponding battery compartment to perform an emergency stop operation. Additionally, the main controller 109 detects the disconnection of the emergency stop link and controls the main control cabinet 101 to perform an emergency stop operation.

[0067] Understandably, the digital signal input terminal DI of the digital quantity module 108 in each battery compartment is electrically connected to the emergency stop link to ensure that the digital quantity module 108 can obtain the on / off status of the emergency stop link in real time. The digital signal output terminal DO of the digital quantity module 108 in each battery compartment is connected to the sub-controller 107 built into the battery compartment through a signal line, forming a signal transmission channel of "emergency stop link status → digital quantity module acquisition → sub-controller reception".

[0068] When the emergency stop link is disconnected, the digital modules 108 of each battery compartment synchronously detect the disconnection state through their digital signal input terminals DI and transmit the acquired disconnection state (such as "0") to the connected sub-controller 107 in real time through their digital signal output terminals DO. After receiving the digital signal (i.e., the disconnection state) indicating the disconnection of the emergency stop link, the sub-controller 107 does not need to wait for the coordination command from the main controller 109, and immediately initiates the local emergency stop control operation. It issues an emergency stop command to control the main circuit contactor inside the battery compartment to disconnect, cut off the power connection between the battery pack and the DC bus, and complete the emergency stop operation of the battery compartment.

[0069] The main controller 109 is directly connected to the emergency stop link, independently constructing a global status monitoring channel of "emergency stop link status → direct detection by the main controller".

[0070] It should be noted that the acquisition logic of the main controller 109 and the digital input module 108 on the battery compartment side operates in parallel without any sequential order. This ensures that the control link at the main control cabinet 101 level and the execution link at the battery compartment level shut down synchronously, avoiding emergency stop failure due to a single link failure. After confirming that the emergency stop link is disconnected, the main controller 109 immediately executes the emergency stop operation of the main control cabinet 101. This emergency stop operation includes, but is not limited to, cutting off the control signal output between the main control cabinet 101 and each battery compartment (102 to 104), stopping the issuance of global commands, and triggering system alarms (such as audible and visual alarms).

[0071] The energy storage system provided in this application embodiment includes sub-controllers and digital quantity modules in multiple battery compartments. Each digital quantity module in the battery compartment is connected to a sub-controller to transmit digital signals to the sub-controller upon acquisition. Each digital quantity module includes a digital signal input terminal and a digital signal output terminal. The main control cabinet includes a main controller. When the emergency stop link is disconnected, the digital quantity modules in multiple battery compartments acquire the disconnection status and send it to the connected sub-controller, which then controls the corresponding battery compartment to perform an emergency stop operation. Furthermore, the main controller detects the disconnection of the emergency stop link and controls the main control cabinet to perform an emergency stop operation. This energy storage system enhances the reliability and response accuracy of emergency stop control by acquiring the emergency stop link status through digital quantity modules and coordinating with the sub-controllers and main controller to perform emergency stop operations, ensuring that the energy storage system achieves full-dimensional coordinated shutdown when the emergency stop link is disconnected.

[0072] Understandably, the causes of an emergency stop include, but are not limited to, pressing the emergency stop button on the main control cabinet, pressing the emergency stop button in any battery compartment, and a malfunction in any battery compartment that meets the emergency stop conditions. Figure 2 This is a schematic diagram illustrating an emergency stop control process for an energy storage system, provided as an embodiment of this application. Figure 2 As shown, the energy storage system includes:

[0073] S201. The sub-controller acquires the operating data of the corresponding battery compartment and sends the operating data to the main controller via the communication bus.

[0074] Understandably, the main controller and the sub-controllers of multiple battery compartments are connected in parallel to form a communication bus. This communication bus serves as a bidirectional transmission channel for operating data and control commands, ensuring the independence and real-time nature of data transmission.

[0075] The operating data is collected by a data acquisition module located inside the battery compartment. The data acquisition module includes, but is not limited to, temperature sensors, voltage acquisition circuits, insulation detection circuits, and current sensors, and is used to collect data such as battery pack voltage, cell temperature, insulation impedance, charging and discharging current, and main contactor status inside the battery compartment.

[0076] Specifically, each battery compartment's sub-controller monitors the corresponding battery compartment's operating data in real time through its built-in operating data acquisition module, and sends the operating data to the main controller via a communication bus, ensuring that the main controller can obtain the operating data of all devices and provide data support for fault diagnosis.

[0077] For example, each sub-controller uploads the collected operating data to the main controller via the communication bus in the format of {battery compartment identifier; parameter type: numerical}. For instance, the operating data uploaded by the sub-controller of battery compartment number two is {ID=2; temperature: 62℃}.

[0078] In this step, the communication bus adopts a parallel structure, ensuring that data uploads from any sub-controller in the battery compartment do not affect data uploads from other sub-controllers, thus guaranteeing the independence and real-time performance of data transmission. This communication bus can be, for example, a CAN (Controller Area Network) bus, an RS485 (Recommended Standard 485) bus, or an Ethernet bus.

[0079] S202, the main controller determines whether multiple battery compartments have reached the emergency stop condition based on the operating data.

[0080] Emergency stop conditions include, but are not limited to, operating data reaching a preset first range. For example, cell temperature greater than or equal to 55°C (leading to thermal runaway), insulation resistance less than 100M ohms (leading to insulation failure), and voltage exceeding the range of 350V to 400V (leading to overvoltage or undervoltage).

[0081] Optionally, the main controller determines the fault level of each battery compartment based on the operating data and determines whether the fault level meets the emergency stop conditions, including the fault level reaching the first level.

[0082] Each fault level corresponds to different fault judgment conditions. Fault levels include Level 1, Level 2, and Level 3. Level 1 is higher than Level 2, and Level 2 is higher than Level 3. Level 1 severely impacts the operational safety of the energy storage system, potentially leading to battery thermal runaway, equipment burnout, electric shock risk, or rapid fault propagation. Fault judgment conditions for Level 1 include, but are not limited to, a cell temperature exceeding a first preset temperature, and insulation resistance being less than an upper limit value. The first preset temperature is the precursor temperature threshold for thermal runaway. Fault judgment conditions for Level 2 include, but are not limited to, operating data being within a second preset range. Fault judgment conditions for Level 3 include, but are not limited to, operating data exceeding a third preset range. The second and third preset ranges are set based on the safety operating limits and application scenarios corresponding to the battery compartment, and this application does not impose any limitations on them.

[0083] Specifically, after receiving operational data from multiple battery compartments, the main controller compares the data with each fault judgment condition to determine the fault level of the corresponding battery compartment. If the fault level of a battery compartment reaches the first level, the controller determines that the corresponding battery compartment has met the emergency stop condition. Otherwise, the controller determines that the corresponding battery compartment has not met the emergency stop condition.

[0084] Optionally, the following situations may occur where the battery compartment does not meet the emergency stop conditions: the battery compartment is in normal operation, the battery compartment's fault level is level two, and the battery compartment's fault level is level three.

[0085] If the battery compartment's fault level is Level 2, it indicates a localized fault that does not affect overall safety. Only the faulty compartment needs to be shut down. Therefore, a first emergency stop command is generated to instruct the faulty battery compartment to perform an emergency stop operation, while other battery compartments continue to operate normally. Furthermore, Level 3 faults correspond to minor anomalies that do not require shutdown; simply displaying the fault status is sufficient.

[0086] Understandably, the main control cabinet and the client establish a communication connection to send fault status information to the client, enabling the client to display and process the fault status. Optionally, the communication connection between the main control cabinet and the client may include, but is not limited to, wired communication connections and wireless communication network connections.

[0087] S203. When the emergency stop condition is met in the second battery compartment, the main controller sends an emergency stop command to the second sub-controller of the second battery compartment via the communication bus.

[0088] The second battery compartment is any battery compartment that meets the emergency stop condition. When the second battery compartment meets the emergency stop condition, the main controller generates an emergency stop command. The format of this emergency stop command can be, for example, {second battery compartment identifier; command type identifier; trigger reason}. The second battery compartment identifier indicates the physical address of the second battery compartment to ensure that the emergency stop command is sent to the second battery compartment accurately.

[0089] S204. The second sub-controller controls the second battery compartment to perform an emergency stop operation. The emergency stop link is disconnected, and each sub-controller and the main controller obtain the disconnection status of the emergency stop link.

[0090] Upon receiving an emergency stop command, the second sub-controller verifies the command based on command verification rules. If the verification passes, it executes the emergency stop operation according to the command. The command verification rules include, but are not limited to, comparing the identifier of the second battery compartment pre-stored in the second sub-controller with the battery compartment identifier in the emergency stop command, and checking whether the emergency stop command contains preset core fields. These preset core fields include, but are not limited to, command type, fault level, and timestamp.

[0091] If the emergency stop command passes verification, the second sub-controller uploads anomaly information indicating a command verification failure to the main controller via the communication bus. This anomaly information includes, but is not limited to, the identifier of the second battery compartment, the timestamp of the anomaly occurrence, and the specific type of verification failure. For example, the specific type of verification failure could be a mismatch in battery compartment identifiers.

[0092] Specifically, after the second sub-controller controls the second battery compartment to perform an emergency stop operation, the main circuit contactor inside the second battery compartment disconnects, cutting off the power connection between the battery pack and the DC bus. Simultaneously, the second sub-controller controls the contact point at the emergency stop button in the second battery compartment to disconnect, thus breaking the emergency stop link. Therefore, each sub-controller obtains the disconnection status of the emergency stop link through a digital module located in its respective battery compartment, and the main controller directly obtains the disconnection status of the emergency stop link.

[0093] S205, Other sub-controllers besides the second sub-controller control the corresponding battery compartment to perform emergency stop operations, and the main controller controls the main control cabinet to perform emergency stop operations.

[0094] Upon detecting a disconnection in the emergency stop link, all sub-controllers except the second sub-controller immediately initiate their local emergency stop procedures without waiting for additional instructions from the main controller, disconnecting their respective main circuit contactors and cutting off power output. At this time, the second battery compartment remains in a stopped state.

[0095] After the master controller detects that the emergency stop link is disconnected, it immediately controls the master control cabinet to perform an emergency stop operation, including stopping the issuance of global instructions, triggering audible and visual alarms, recording fault logs, and cutting off the control power supply of the master control cabinet and each battery compartment. For example, the temperature of the second battery compartment is 62°C and the insulation resistance is 95 megohms. Based on the above step S202, it is determined that the second battery compartment is in a fault state of the first level. Then, an emergency stop instruction for the second battery compartment is generated and sent to the second sub-controller of the second battery compartment. After receiving the emergency stop instruction, the second sub-controller controls the second sub-controller to perform an emergency stop operation, and the emergency stop link is disconnected. The master controller and other sub-controllers obtain the disconnection status of the emergency stop link. Other sub-controllers control the corresponding battery compartments to perform emergency stop operations, and the master controller controls the master control cabinet to perform an emergency stop operation. Thus, through the dual mechanism of "local autonomous execution + global collaborative execution", it is ensured that all battery compartments and the master control cabinet stop operating synchronously, completely blocking the spread of faults.

[0096] In the energy storage system provided by the embodiment of the present application, the master controller is used to determine whether multiple battery compartments meet the emergency stop conditions based on the operating data, and when the second battery compartment meets the emergency stop conditions, send an emergency stop instruction to the second sub-controller of the second battery compartment through the communication bus. After receiving the emergency stop instruction, the second sub-controller controls the second battery compartment to perform an emergency stop operation, and the emergency stop link is disconnected. Each sub-controller and the master controller obtain the disconnection status of the emergency stop link. Finally, each sub-controller controls the corresponding battery compartment to perform an emergency stop operation, and the master controller controls the master control cabinet to perform an emergency stop operation. This energy storage system actively identifies the fault status of each battery compartment based on the operating data, and triggers global linked shutdown when the fault status reaches the emergency stop conditions, blocking the spread of faults. In addition, the transmission of the emergency stop instruction depends on the communication bus, and the disconnection of the emergency stop link depends on hardware cascading. The coordination at the software level and the hardware level ensures the reliability of the emergency stop control, which is beneficial to avoiding the failure of the emergency stop caused by faults at a single level.

[0097] As Figure 1 shown, the digital quantity modules 108 on multiple battery compartments are connected in series in sequence according to the sequence number, and the head and tail are connected to obtain a ring-shaped interlock bus.

[0098] When multiple battery compartments are in the operating state, the interlock bus is in a conductive state. When any battery compartment is in the shutdown state, the interlock bus is in a disconnected state.

[0099] Specifically, the digital signal output terminal of the digital quantity module is a normally open contact, which is directly controlled by the sub-controller. When the sub-controller confirms that the self-check result indicates that the self-check is passed, a control signal is generated to control the digital signal output terminal to switch from the disconnected state to the closed state. If the self-check result indicates that the self-check is not passed, the digital signal output terminal remains in the disconnected state.

[0100] Understandably, the digital signal output terminal is the "access switch" of the interlock bus. Only when it is closed can the corresponding battery compartment be connected to the interlock bus, providing the hardware foundation for forming an effective loop. In addition, the main controller obtains the conduction signal (such as voltage and level changes) of the interlock bus through a dedicated detection interface to determine whether the interlock bus is in a closed or open state.

[0101] Figure 3 This is a flowchart illustrating a startup method for an energy storage system provided in an embodiment of this application. Figure 1-2 Based on the embodiments, a possible startup method for an energy storage system is described in detail, the method including:

[0102] S301. After receiving the start command sent by the client, the main controller generates a pre-start command and sends the pre-start command to multiple sub-controllers through the communication bus.

[0103] The main controller establishes a communication connection with the client. After receiving the start command from the client, the main controller generates a pre-start command based on the start command. The start command can be, for example, {Operation type: Start; Initiator: Client identifier; Timestamp}, and the pre-start command includes {Operation type: Pre-start; Execution requirement: Perform self-check and report results}.

[0104] The main controller sends the generated pre-start instructions to multiple sub-controllers via the communication bus. Understandably, because the communication bus is a parallel structure, the instructions can reach each sub-controller synchronously, with no transmission delay difference.

[0105] S302. When multiple sub-controllers receive the pre-start command, they control each battery compartment to perform a self-test operation and send the self-test results to the main controller.

[0106] The self-test operation includes at least the following: whether the voltage and temperature of the battery compartment are within the normal range, whether the insulation resistance reaches the preset standard value, and whether the main contactor is in the closed state.

[0107] The purpose of this step is to confirm whether each battery compartment meets the startup requirements through local self-testing, avoiding startup with faults. Specifically, the sub-controller receives operating data collected by the data acquisition module built into the battery compartment and performs a self-test based on multiple operating data points to obtain self-test results. These self-test results include a first self-test result and a second self-test result. The first self-test result indicates that the self-test passed, and the second self-test result indicates that the self-test failed.

[0108] Understandably, the data acquisition module includes, but is not limited to, voltage sensors, temperature sensors, and an insulation detection module. The voltage sensor is used to collect voltage data within the battery compartment, the temperature sensor is used to detect the temperature of the battery cells within the battery compartment, and the insulation detection module is used to detect the insulation resistance of the battery compartment to ground. Furthermore, the status data of the main circuit contactor is obtained through digital signals. For example, a status data value of 0 indicates that the main contactor is in the closed state, while a status data value of 1 indicates that the main contactor is in the open state.

[0109] Optionally, the second self-test result mentioned above may also include the reason for the self-test failure, such as "temperature exceeds the limit".

[0110] S303. The main controller determines whether the energy storage system meets the global interlock verification conditions based on multiple self-test results and interlock buses. If the self-test results and interlock buses of multiple battery compartments meet the global interlock verification conditions, the following step S304 is executed. If the self-test result or interlock bus of any battery compartment does not meet the global interlock verification conditions, the following step S306 is executed.

[0111] The global interlock verification conditions include: the self-test results of multiple battery compartments all indicate that the self-test has passed, and the interlock bus forms a loop;

[0112] It should be noted that when the digital signal output terminals of all digital modules in the battery compartments are in the closed state, the interlock bus forms a loop.

[0113] Specifically, the main controller receives the self-test results from each battery compartment and the status data from the digital signal output terminals of the digital modules via the communication bus. Further, the main controller determines whether each self-test result indicates a successful self-test and whether the status data from each digital signal output terminal indicates a closed state, thus obtaining the verification result. If the verification result indicates that all self-test results indicate a successful self-test and that the status data from all digital signal output terminals indicates a closed state, then it is determined that multiple battery compartments meet the global interlock verification conditions. If the verification result indicates that at least one battery compartment's self-test result indicates a failed self-test, or that the status data from at least one battery compartment's digital signal output terminal indicates an open state, then it is determined that multiple battery compartments do not meet the global interlock verification conditions.

[0114] This step establishes a dual verification system of "software results + hardware loop" through self-test results and interlock bus, ensuring that all battery compartments meet startup safety requirements before startup, thereby guaranteeing the startup safety of the energy storage system.

[0115] S304, The main controller sends start commands to multiple sub-controllers.

[0116] If the verification result of step S303 indicates that the energy storage system meets the global interlock verification conditions, it means that all battery compartments are normal and can be started normally. Then, the start command is synchronously sent to each sub-controller through the communication bus to ensure that the start operation of each battery compartment is coordinated and consistent.

[0117] S305, each sub-controller controls the corresponding battery compartment to perform the start-up operation.

[0118] Upon receiving the start command, each sub-controller controls the main circuit contactor of its respective battery compartment to close. After the main circuit contactor closes, the battery packs in each battery compartment are connected to the DC bus of the energy storage system through the DC bus interface, and electrical energy begins to be output externally, marking the official start-up and operation of the energy storage system.

[0119] Understandably, the sub-controller synchronously uploads startup feedback information to the main controller. This startup feedback information may include, for example, a startup completion status indicator. Subsequently, the main controller sends feedback to the client indicating that the system has started successfully.

[0120] S306, the main controller sends the verification result to the client.

[0121] If the verification result of step S303 indicates that the energy storage system does not meet the global interlock verification conditions, the client should be promptly informed of the reason for the startup failure to facilitate troubleshooting by maintenance personnel and avoid blind startup.

[0122] Specifically, the main controller sends the verification results to the client via the communication bus. After receiving the verification results, the client presents them in a visual manner so that maintenance personnel can promptly grasp the abnormal situation and carry out maintenance work.

[0123] For example, the visualization method could be a pop-up window displaying startup failure information. This startup failure information includes, but is not limited to, the identifier of the battery compartment that failed verification and the reason for the failure. For example, the startup failure information could be: "Startup failed: Battery compartment 1 voltage is too low, battery compartment 4 temperature exceeds the limit, and the interlock bus for battery compartment 4 has not formed a loop." Simultaneously, an audible and visual alarm can be triggered.

[0124] Understandably, the client is equipped with a remote monitoring platform to record fault logs and push alarm notifications to maintenance personnel.

[0125] It should be noted that if the energy storage system does not meet the global interlock verification conditions, the main controller does not issue a start command, and multiple battery compartments remain in standby mode until maintenance personnel repair the fault and restart the start process.

[0126] The energy storage system provided in this application embodiment, after receiving a start command from the client, generates a pre-start command and sends it to multiple sub-controllers via a communication bus. Upon receiving the pre-start command, each sub-controller controls its respective battery compartment to perform a self-test and sends the self-test results back to the main controller. The main controller then determines whether the multiple battery compartments meet the global interlock verification conditions based on the multiple self-test results and the interlock bus. If the self-test results of multiple battery compartments all indicate that the self-test has passed, and the interlock bus forms a loop, the energy storage system is determined to meet the global interlock verification conditions. The main controller then sends a start command to the multiple sub-controllers, instructing each sub-controller to control its corresponding battery compartment to perform a start operation. This energy storage system synchronously triggers self-tests for all compartments via the pre-start command and synchronously controls the closing of the main contactors for all compartments via the start command, avoiding circulating current impacts caused by differences in start-up timing.

[0127] In addition, global interlock verification ensures that the energy storage system only starts when all compartments are "health-ready", fundamentally avoiding the risk of equipment damage or short circuits caused by problems such as inconsistent voltage, insulation failure, and contactor adhesion.

[0128] If the self-test results of any battery compartment indicate a failure, or if the interlock bus of any battery compartment forms a loop, the energy storage system is determined to be non-compliant with the global interlock verification conditions, and the verification results are sent to the client. This method directly feeds back specific anomaly information to the user when the energy storage system fails to meet the startup safety conditions, eliminating the need for manual troubleshooting and improving maintenance efficiency.

[0129] The technical solutions of this application have been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it is readily understood by those skilled in the art that the scope of protection of this application is obviously not limited to these specific embodiments. The above embodiments are only used to illustrate the technical solutions of this application and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features therein. These modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of this application.

[0130] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.

Claims

1. An energy storage system, characterized in that, include: The main control cabinet and multiple battery compartments; The main control cabinet and each of the battery compartments are equipped with emergency stop buttons. Multiple emergency stop buttons are connected in series, and the end emergency stop button is connected back to the emergency stop button on the main control cabinet to form a ring-shaped emergency stop link. When the main control cabinet and the multiple battery compartments are all in operation, the emergency stop link is in the open state; When the emergency stop button on the main control cabinet or the first battery compartment is pressed, the emergency stop link is disconnected. The main control cabinet and the multiple battery compartments detect the disconnection of the emergency stop link and perform an emergency stop operation in the running state. The first battery compartment is any battery compartment that has its emergency stop button pressed.

2. The energy storage system according to claim 1, characterized in that, Each of the multiple battery compartments is equipped with a sub-controller and a digital quantity module. The digital quantity module in each battery compartment is connected to the sub-controller and is used to transmit the digital signal to the sub-controller when a digital signal is acquired. The digital quantity module includes a digital signal input terminal and a digital signal output terminal; The main control cabinet includes a main controller.

3. The energy storage system according to claim 2, characterized in that, Both the main control cabinet and the multiple battery compartments detected the disconnection of the emergency stop link and performed an emergency stop operation while in operation, including: When the emergency stop link is disconnected, the digital modules on the multiple battery compartments acquire the disconnection status and send the disconnection status to the connected sub-controller, which then controls the corresponding battery compartment to perform an emergency stop operation. The main controller detects the disconnection of the emergency stop link and controls the main control cabinet to perform an emergency stop operation.

4. The energy storage system according to claim 2 or 3, characterized in that, The main controller and the sub-controllers of the multiple battery compartments are connected in parallel to form a communication bus; The sub-controller acquires the operating data of the corresponding battery compartment and sends the operating data to the main controller through the communication bus; The main controller determines whether the multiple battery compartments have reached the emergency stop condition based on the operating data. When the second battery compartment reaches the emergency stop condition, the main controller sends an emergency stop command to the second sub-controller of the second battery compartment via the communication bus. The second sub-controller controls the second battery compartment to perform an emergency stop operation, the emergency stop link is disconnected, and each of the sub-controllers and the main controller obtains the disconnection status of the emergency stop link; Other sub-controllers besides the second sub-controller control the corresponding battery compartments to perform emergency stop operations, and the main controller controls the main control cabinet to perform emergency stop operations.

5. The energy storage system according to claim 4, characterized in that, The digital modules on the multiple battery compartments are connected in series sequentially, with the beginning and end connected to form a ring-shaped interlocked bus. When the multiple battery compartments are in operation, the interlock bus is in a connected state; When any of the battery compartments is in a stopped state, the interlock bus is in a disconnected state.

6. The energy storage system according to claim 5, characterized in that, When the multiple sub-controllers receive the pre-start command, they control each battery compartment to perform a self-test operation and send the self-test results to the main controller. The main controller is used to determine whether the energy storage system meets the global interlock verification conditions based on multiple self-test results and the interlock bus; The global interlock verification conditions include: the self-test results of the multiple battery compartments all indicate that the self-test has passed, and the interlock bus forms a loop; If the self-test results of the multiple battery compartments and the interlock bus meet the global interlock verification conditions, the main controller sends a start command to the multiple sub-controllers. Each of the sub-controllers controls the corresponding battery compartment to perform a startup operation.

7. The energy storage system according to claim 6, characterized in that, If the self-test result of any battery compartment or the interlock bus does not meet the global interlock verification conditions, the main controller will send the verification result to the client.

8. The energy storage system according to claim 7, characterized in that, The central controller establishes a communication connection with the client. After receiving the start command sent by the client, the main controller generates a pre-start command and sends the pre-start command to multiple sub-controllers through the communication bus.

9. The energy storage system according to claim 6, characterized in that, The self-test operation includes at least: whether the voltage and temperature of the battery compartment are within the normal range, whether the insulation resistance reaches the preset standard value, and whether the main contactor is in the closed state.

10. The energy storage system according to claim 4, characterized in that, The main controller is used to determine whether the multiple battery compartments have reached the emergency stop condition based on the operating data, including: The main controller determines the fault level of each battery compartment based on the operating data, and determines whether the fault level meets the emergency stop conditions, wherein the emergency stop conditions include the fault level reaching the first level.

Images