A safe prevention and control system for energy storage power station based on distributed control

Abstract

The application discloses a kind of energy storage power station safety prevention and control systems based on distributed control, comprising: alarm event module, for generating alarm event set;Spread state parameter module, for constructing spread speed field, obtain spread state parameter set;Dynamic blocking window module, for calculating the remaining time of hot runaway propagation to target location, as dynamic blocking window;Guard level decision instruction module, for generating guard level decision instruction;Pre-deployed protection resource module, for pre-deployed protection resources, generate resource in place state signal;Execution module, for automatically executing fire extinguishing, cooling, power-off or inerting explosion action according to resource in place state signal.The present application constructs hot runaway propagation speed field by distributed detection and pre-deploys protection resources, realizes the leap from post-disaster response to pre-disaster deployment, has the advantages of fast response, no rekindling and explosion prevention.

Description

Technical Field

[0001] This invention relates to the field of safety control in energy storage power stations, and in particular to a safety control system for energy storage power stations based on distributed control. Background Technology

[0002] Electrochemical energy storage power stations are developing rapidly, but fires and explosions caused by thermal runaway of lithium batteries occur frequently, and energy storage safety issues are becoming increasingly prominent. Existing energy storage fire protection systems generally adopt traditional building fire protection schemes, which determine whether a fire has occurred through smoke or heat detectors. Once an alarm is triggered, gas fire extinguishing devices such as heptafluoropropane are activated to flood the entire compartment. Some schemes further deploy detectors at the battery cluster or PACK level to achieve graded alarms.

[0003] The existing technology has the following drawbacks: the detector can only determine whether a fire has occurred, but cannot predict the propagation speed and direction of thermal runaway. The system cannot predict when thermal runaway will spread to adjacent PACKs or battery clusters, and can only passively wait for the fire to occur before starting fire suppression. This results in the protective action always lagging behind the propagation of thermal runaway and missing the best suppression window. In addition, heptafluoropropane only has the function of fire suppression and cannot effectively cool the battery, which can easily lead to reignition. Furthermore, it lacks the function of inerting and explosion suppression, and cannot prevent the explosion caused by the accumulation of flammable gas. Summary of the Invention

[0004] One objective of this invention is to propose a safety control system for energy storage power stations based on distributed control. This invention constructs a thermal runaway propagation velocity field through distributed detection and pre-deploys protective resources, achieving a leap from post-disaster response to pre-disaster deployment, and has the advantages of fast response, no reignition, and explosion prevention.

[0005] A safety control system for an energy storage power station based on distributed control, according to an embodiment of the present invention, includes: The alarm event module is used to monitor the concentration of characteristic gases in real time through three levels of detectors distributed in the battery PACK, the top of the battery cluster, and the battery compartment space. When any detector detects that the concentration exceeds the warning threshold, it records the detection time of the detector and its spatial coordinates, and generates an alarm event set. The propagation state parameter module is used to calculate the propagation velocity vector based on the detection time difference and spatial coordinate difference of adjacent level detectors in the alarm event set, fuse the propagation velocity vectors to construct the propagation velocity field, invert the propagation direction of thermal runaway, and obtain the propagation state parameter set. The dynamic blocking window module is used to calculate the remaining time for thermal runaway to propagate to the target location using the propagation velocity field and propagation direction in the propagation state parameter set, and serves as the dynamic blocking window. The protection level decision instruction module is used to compare the dynamic blocking window with the preset safety threshold and the propagation speed vector magnitude with the preset high-speed propagation threshold to generate protection level decision instructions including PACK level, cluster level or compartment level. The pre-deployment protection resource module is used to pre-deploy protection resources according to the instruction type before thermal runaway reaches the target location based on protection level decision instructions. The protection resources include perfluorohexanone pump sets, solenoid valves or cluster control valves, BMS pre-power-off instructions and inerting explosion suppression devices, and generate resource in-situ status signals. The execution module is used to automatically perform fire extinguishing, cooling, power outage, or inerting explosion suppression actions based on the resource availability status signal.

[0006] Optionally, the alarm event module includes: Each detector is pre-configured with its hierarchical identifier and spatial coordinates of its installation location. The three-level detectors include the first-level detectors deployed inside the battery pack, the second-level detectors deployed on top of each battery cluster, and the third-level detectors deployed throughout the battery compartment. The configuration information is then summarized to generate a detector configuration table. Using the three-level detectors in the detector configuration table, characteristic gas concentration data of their respective deployment locations are collected in real time according to their preset sampling frequencies, generating a raw monitoring data stream containing detector identification, spatial coordinates, collection timestamps, and concentration values. The concentrations of each characteristic gas in the raw monitoring data stream are compared item by item with the pre-stored warning thresholds, which are set separately for different levels of detectors, to generate a threshold comparison result set. When any comparison result in the threshold comparison result set indicates that the concentration exceeds the warning threshold, an alarm event is triggered. The detection time and spatial coordinates of the detector are extracted from the original monitoring data stream to generate a single alarm record. Summarize all single alarm records generated by all triggered alarm events, arrange them in chronological order of trigger time, and generate an alarm event set.

[0007] Optionally, the propagation state parameter module includes: Extract the detection time and spatial coordinates of each alarm record from the alarm event set, and identify the detector level to which each alarm record belongs; Select a pair of detector alarm records from adjacent levels, and subtract the detection time of the earlier alarm from the detection time of the later alarm to obtain the detection time difference; The spatial coordinate difference is obtained by subtracting the spatial coordinates of the first alarm detector from the spatial coordinates of the later alarm detector. Divide the spatial coordinate difference by the detection time difference, and the resulting quotient is used as the propagation velocity vector of thermal runaway from the position of the first alarm detector to the position of the second alarm detector; For all detector alarm pairs in the alarm event set that satisfy the adjacent hierarchical relationship and have a sequential order, calculate their respective propagation velocity vectors to obtain multiple propagation velocity vectors; Multiple propagation velocity vectors are mapped to a unified spatial coordinate system. For each grid point in the spatial coordinate system, the average value of all propagation velocity vectors falling within the neighborhood of that grid point is taken as the velocity vector of that point. The velocity vectors of all grid points are combined to construct a propagation velocity field covering the inside of the battery pack, the top of the battery cluster, and the battery compartment space. Traverse all grid points in the propagation velocity field, count the direction angle of the velocity vector of each grid point, and take the direction corresponding to the direction angle with the highest frequency as the propagation direction of thermal runaway; The propagation velocity field, propagation direction, and magnitude of each propagation velocity vector are summed to generate a propagation state parameter set.

[0008] Optionally, the dynamic blocking window module includes: Extract the propagation velocity field and propagation direction of thermal runaway from the propagation state parameter set; Based on the propagation direction, identify one or more potential propagation paths from the current thermal runaway detection location to the target location, where the target location includes adjacent battery packs, adjacent battery clusters, and battery compartment walls; For each identified potential propagation path, obtain the spatial distance between the current detection position and the target position on that path; Divide the spatial distance by the magnitude of the velocity vector of the propagation velocity field at the current detection position, and the quotient is the remaining time required for thermal runaway to propagate along the propagation path to the target position. When there are multiple propagation paths, select the one with the smallest remaining time from the remaining time corresponding to each path as the required remaining time; The remaining time obtained is defined as the dynamic blocking window.

[0009] Optionally, the protection level decision instruction module includes: The dynamic blocking window is compared with the preset security threshold. When the dynamic blocking window is less than or equal to the preset security threshold, a first decision instruction is generated to upgrade from the current PACK level to cluster level protection. The propagation velocity vector magnitude is numerically compared with a preset high-speed propagation threshold. When the propagation velocity vector magnitude is greater than the preset high-speed propagation threshold, a second decision command is generated to trigger the cabin-level space total flooding protection. When the dynamic blocking window is greater than the preset security threshold and the propagation speed vector magnitude is less than or equal to the preset high-speed propagation threshold, a third decision instruction to maintain the current PACK level protection is generated. When both the first and second decision instructions are generated simultaneously, the second decision instruction is output first. The finalized decision instructions will be used as the protection level decision instructions.

[0010] Optionally, the pre-deployed protection resource module includes: Receive protection level decision instructions and identify the instruction type, which includes PACK-level instructions, cluster-level instructions, or compartment-level instructions; When the instruction type is a PACK level instruction, the perfluorohexanone pump group corresponding to the PACK is pre-started to the standby speed, the solenoid valve corresponding to the PACK is pre-opened, and the pre-power-off instruction of the PACK is sent to the BMS via the CAN bus. When the instruction type is a cluster-level instruction, the perfluorohexanone pump group corresponding to the battery cluster is pre-started to the standby speed, the cluster control valve corresponding to the battery cluster is pre-opened, the pre-power-off instruction of the battery cluster is sent to the BMS via the CAN bus, and the inerting and explosion suppression device corresponding to the battery cluster is pre-activated. When the command type is a compartment-level command, the perfluorohexanone pump group is pre-started to the rated speed, all in-compartment solenoid valves and cluster control valves are pre-opened, a pre-power-off command for the entire battery compartment is sent to the BMS via the CAN bus, and all inerting and explosion suppression devices in the compartment are pre-activated. It was confirmed that all pre-deployment operations were completed before thermal runaway actually reached the target location; Summarize the pre-deployment completion status of each protective resource and generate a resource availability status signal.

[0011] Optionally, the execution module includes: Receive resource availability status signal to confirm that the perfluorohexanone pump set, solenoid valve or cluster control valve, BMS and inerting explosion suppression device are all in the pre-deployment completed state. Continuously monitor the location of thermal runaway propagation and compare it with the target location in real time; When the thermal runaway propagation location is detected to have reached the target location, the execution phase is triggered; Send a spray command to the pre-deployed perfluorohexanone pump unit, control the pump unit to release perfluorohexanone extinguishing agent to the target location according to the predetermined spray strategy, and automatically perform fire extinguishing and cooling actions; Send an opening confirmation command to the pre-opened solenoid valve or cluster control valve to ensure that the extinguishing agent flow path is unobstructed and that the extinguishing agent can be accurately delivered to the target protected area. Send a power-off execution command to the BMS to confirm that the BMS has completed the pre-power-off action or immediately execute the power-off action, cut off the power supply to the target protected area, and automatically execute the power-off action. Send a start command to the pre-activated inerting and explosion suppression device to control the device to release inert gas into the battery compartment space, reduce the concentration of combustible gas, and automatically perform explosion suppression actions.

[0012] The beneficial effects of this invention are: This invention breaks away from the passive "post-disaster response" mode of traditional energy storage fire protection systems. By introducing a distributed detection architecture and constructing a thermal runaway propagation velocity field, it achieves for the first time a quantitative inversion of the propagation velocity and direction of lithium battery thermal runaway. Based on the detection time difference and spatial coordinate difference of adjacent level detectors in the alarm event set, the system can accurately calculate the propagation velocity vector of thermal runaway between battery PACKs, clusters, and bulkheads, and fuse them to form a continuous spatial velocity field. This technology enables the system to predict the thermal runaway propagation path, thereby dynamically calculating the remaining time for thermal runaway to propagate to adjacent PACKs, clusters, or bulkheads, i.e., the dynamic blocking window. Based on this time window, the system can adaptively perform dynamic upgrades of protection levels and advance deployment of resources before thermal runaway actually reaches the target location, fundamentally shifting the time anchor point of protection actions from "post-disaster" to "pre-disaster," completely solving the problems of protection lag and missed suppression windows in existing technologies.

[0013] This invention significantly improves the safety and economic efficiency of energy storage power stations through refined decision-making hierarchy and execution coordination. Specifically, the protection level decision command module compares the dynamic blocking window with a preset safety threshold and the propagation speed vector magnitude with a preset high-speed propagation threshold to generate differentiated decision commands including PACK level, cluster level, or compartment level. When the thermal runaway speed is slow, it maintains precise PACK level local spraying to save resources. When the thermal runaway spreads rapidly, it directly triggers compartment level total flooding to block the spread of disaster. At the same time, the pre-deployment protection resource module eliminates equipment start-up delay by pre-starting the perfluorohexanone pump group, pre-opening valves, and pre-activating the inerting and explosion suppression device. The execution module achieves the dual effect of fire extinguishing and continuous cooling through the three-stage spraying strategy of perfluorohexanone, effectively suppressing the industry pain point of easy reignition of lithium batteries. Combined with the inerting and explosion suppression device, it reduces the risk of explosion caused by the accumulation of flammable gas. In summary, this invention has outstanding advantages such as fast response speed, good reignition suppression effect, strong explosion-proof capability, and high resource utilization efficiency. Attached Figure Description

[0014] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used in conjunction with embodiments of the invention to explain the invention and do not constitute a limitation thereof. In the drawings: Figure 1 This is a flowchart of a safety control system for an energy storage power station based on distributed control, as proposed in this invention. Figure 2 This is a schematic diagram illustrating the propagation velocity vector and velocity field construction of a distributed control-based safety control system for energy storage power stations proposed in this invention. Figure 3 This is a protection hierarchy decision logic diagram of a distributed control-based energy storage power station safety control system proposed in this invention. Detailed Implementation

[0015] The present invention will now be described in further detail with reference to the accompanying drawings. These drawings are simplified schematic diagrams, illustrating only the basic structure of the invention, and therefore only show the components relevant to the invention.

[0016] refer to Figures 1-3 A safety control system for energy storage power stations based on distributed control, comprising: The alarm event module is used to monitor the concentration of characteristic gases in real time through three levels of detectors distributed in the battery PACK, the top of the battery cluster, and the battery compartment space. When any detector detects that the concentration exceeds the warning threshold, it records the detection time of the detector and its spatial coordinates, and generates an alarm event set. The propagation state parameter module is used to calculate the propagation velocity vector based on the detection time difference and spatial coordinate difference of adjacent level detectors in the alarm event set, fuse the propagation velocity vectors to construct the propagation velocity field, invert the propagation direction of thermal runaway, and obtain the propagation state parameter set. The dynamic blocking window module is used to calculate the remaining time for thermal runaway to propagate to the target location using the propagation velocity field and propagation direction in the propagation state parameter set, and serves as the dynamic blocking window. The protection level decision instruction module is used to compare the dynamic blocking window with the preset safety threshold and the propagation speed vector magnitude with the preset high-speed propagation threshold to generate protection level decision instructions including PACK level, cluster level or compartment level. The pre-deployment protection resource module is used to pre-deploy protection resources according to the instruction type before thermal runaway reaches the target location based on protection level decision instructions. The protection resources include perfluorohexanone pump sets, solenoid valves or cluster control valves, BMS pre-power-off instructions and inerting explosion suppression devices, and generate resource in-situ status signals. The execution module is used to automatically perform fire extinguishing, cooling, power outage, or inerting explosion suppression actions based on the resource availability status signal.

[0017] In this embodiment, the alarm event module includes: Each detector is pre-configured with its hierarchical identifier and spatial coordinates of its installation location. The three-level detectors include the first-level detectors deployed inside the battery pack, the second-level detectors deployed on top of each battery cluster, and the third-level detectors deployed throughout the battery compartment. The configuration information is then summarized to generate a detector configuration table. Using the three-level detectors in the detector configuration table, characteristic gas concentration data of their respective deployment locations are collected in real time according to their preset sampling frequencies, generating a raw monitoring data stream containing detector identification, spatial coordinates, collection timestamps, and concentration values. The concentrations of each characteristic gas in the raw monitoring data stream are compared item by item with the pre-stored warning thresholds, which are set separately for different levels of detectors, to generate a threshold comparison result set. When any comparison result in the threshold comparison result set indicates that the concentration exceeds the warning threshold, an alarm event is triggered. The detection time and spatial coordinates of the detector are extracted from the original monitoring data stream to generate a single alarm record. Summarize all single alarm records generated by all triggered alarm events, arrange them in chronological order of trigger time, and generate an alarm event set.

[0018] In this embodiment, the propagation state parameter module includes: Extract the detection time and spatial coordinates of each alarm record from the alarm event set, and identify the detector level to which each alarm record belongs; Select a pair of detector alarm records from adjacent levels, and subtract the detection time of the earlier alarm from the detection time of the later alarm to obtain the detection time difference; The spatial coordinate difference is obtained by subtracting the spatial coordinates of the first alarm detector from the spatial coordinates of the later alarm detector. Divide the spatial coordinate difference by the detection time difference, and the resulting quotient is used as the propagation velocity vector of thermal runaway from the position of the first alarm detector to the position of the second alarm detector; The generation of the propagation velocity vector specifically includes: Obtain the spatial coordinates and detection time of the first and second alarm detectors; subtract the corresponding coordinate components of the first alarm detector from each coordinate component of the second alarm detector to obtain three coordinate differences: horizontal, vertical, and longitudinal, forming the spatial coordinate difference; subtract the detection time of the first alarm detector from the detection time of the second alarm detector to obtain the detection time difference; divide the three components of the spatial coordinate difference by the detection time difference to obtain the three components of the propagation velocity vector, which together form the propagation velocity vector; when the detection time difference is greater than zero and less than the preset maximum time difference threshold, the propagation velocity vector is determined to be valid; when the detection time difference is not greater than zero, a timing error is determined and the vector is discarded; when the detection time difference is not less than the maximum time difference threshold, a direct propagation relationship is determined and the vector is discarded. For all detector alarm pairs in the alarm event set that satisfy the adjacent hierarchical relationship and have a sequential order, calculate their respective propagation velocity vectors to obtain multiple propagation velocity vectors; Multiple propagation velocity vectors are mapped to a unified spatial coordinate system. For each grid point in the spatial coordinate system, the average value of all propagation velocity vectors falling within the neighborhood of that grid point is taken as the velocity vector of that point. The velocity vectors of all grid points are combined to construct a propagation velocity field covering the inside of the battery pack, the top of the battery cluster, and the battery compartment space. The generation of the propagation velocity field specifically includes: A unified spatial coordinate system covering the entire energy storage power station is established, and the spatial coordinates of each detector are mapped to this coordinate system. Each propagation velocity vector is placed at the coordinate point of its corresponding alarm detector, so that the vector at that coordinate point represents the propagation direction and speed of thermal runaway from that point. The energy storage power station space is divided into multiple grid points, and the spacing between adjacent grid points is preset according to the deployment density of detectors. For each grid point, a spherical or cubic neighborhood is defined with the grid point as the center and a preset radius, and all propagation velocity vectors whose spatial positions fall within the neighborhood are found. The average value of all propagation velocity vectors falling within the neighborhood is calculated as the velocity vector of the grid point. When no propagation velocity vector falls within the neighborhood of a certain grid point, the nearest propagation velocity vectors to the grid point are taken, and a weighted average value is calculated using the reciprocal of the distance as the weight, which is the velocity vector of the grid point. The velocity vectors of all grid points are arranged and combined according to their grid positions to construct a continuous propagation velocity field covering the inside of the battery PACK, the top of the battery cluster, and the battery compartment space. Traverse all grid points in the propagation velocity field, count the direction angle of the velocity vector of each grid point, and take the direction corresponding to the direction angle with the highest frequency as the propagation direction of thermal runaway; The generation of the propagation direction specifically includes: Traverse all grid points in the propagation velocity field and read the velocity vector at each grid point. For each grid point's velocity vector, calculate the projection direction of the vector onto the horizontal plane. Using due east as the reference zero degree, rotate counterclockwise to calculate the angle between the projection direction and due east, and use this angle as the orientation angle of the grid point. Divide the angle range from zero to 360 degrees into multiple equally wide intervals, each interval representing an orientation angle range. Traverse the orientation angles of all grid points, count the number of orientation angles falling within each interval, and generate an orientation angle frequency distribution. Find the interval with the highest frequency, and use the median direction of the angle range corresponding to this interval as the propagation direction of thermal runaway. When multiple intervals have the same frequency and are all the highest, calculate the average of the median angles of these intervals as the final propagation direction. The propagation velocity field, propagation direction, and magnitude of each propagation velocity vector are summed to generate a propagation state parameter set.

[0019] In this embodiment, the dynamic blocking window module includes: Extract the propagation velocity field and propagation direction of thermal runaway from the propagation state parameter set; Based on the propagation direction, identify one or more potential propagation paths from the current thermal runaway detection location to the target location, which includes adjacent battery packs, adjacent battery clusters, and battery compartment walls; The identification of potential propagation paths specifically includes: Obtain the spatial coordinates of the current detection location as the starting point of thermal runaway propagation; draw a ray along the propagation direction from this starting point as the endpoint, and the direction of this ray is the main propagation direction of thermal runaway; obtain the pre-calibrated spatial coordinate ranges of the entrances of adjacent battery packs, the entrance spatial coordinate ranges of adjacent battery clusters, and the spatial coordinate ranges of the battery compartment walls; calculate the first intersection point between the ray and the entrance range of the adjacent battery packs; if a first intersection point exists, the line segment of the ray from the starting point to the first intersection point is taken as the first potential propagation path pointing to the adjacent battery pack; calculate the second intersection point between the ray and the entrance range of the adjacent battery clusters; if a second intersection point exists, the line segment of the ray from the starting point to the second intersection point is taken as the second potential propagation path pointing to the adjacent battery clusters; calculate the third intersection point between the ray and the range of the battery compartment walls; if a third intersection point exists, the line segment of the ray from the starting point to the third intersection point is taken as the third potential propagation path pointing to the battery compartment walls; For each identified potential propagation path, obtain the spatial distance between the current detection position and the target position on that path; Divide the spatial distance by the magnitude of the velocity vector of the propagation velocity field at the current detection position, and the quotient is the remaining time required for thermal runaway to propagate along the propagation path to the target position. When there are multiple propagation paths, select the one with the smallest remaining time from the remaining time corresponding to each path as the required remaining time; The remaining time obtained is defined as the dynamic blocking window; The dynamic blocking window represents the length of time from the current moment until thermal runaway propagates to the target location, during which the system can take protective measures. This dynamic blocking window is updated in real time as thermal runaway continues to propagate. Whenever a new detector triggers an alarm, the system recalculates a new dynamic blocking window. The value of the dynamic blocking window directly determines the upgrade decision of the protection level: a smaller window value indicates that thermal runaway is about to reach the target location, requiring the triggering of cluster-level protection or compartment-level protection; a larger window value indicates that there is still sufficient reaction time to maintain the current PACK-level protection.

[0020] In this embodiment, the protection level decision instruction module includes: The dynamic blocking window is compared with the preset security threshold. When the dynamic blocking window is less than or equal to the preset security threshold, a first decision instruction is generated to upgrade from the current PACK level to cluster level protection. The core function of the first decision command is to expand the protection range from the single PACK that triggered the alarm to the entire battery cluster to which that PACK belongs. The preset safety threshold is determined based on the system response time, including the sum of command transmission delay, pump start-up time, valve opening time, and extinguishing agent delivery time, multiplied by a safety margin factor. The typical value ranges from 3 to 10 seconds, and the specific value is pre-calibrated based on the scale of the energy storage power station and the performance of the equipment. When the dynamic blocking window is less than or equal to this safety threshold, it indicates that thermal runaway will propagate to adjacent PACKs in a very short time. Local spraying of a single PACK is insufficient to prevent the spread of thermal runaway, and cluster activation is necessary. Level 1 protection; after the first decision command is triggered, the system performs the following actions: opens the cluster control valve corresponding to the target battery cluster, opens the solenoid valves of all PACKs in the cluster, starts the perfluorohexanone pump group at medium speed, and sends a pre-power-off command for the battery cluster to the BMS via the CAN bus; the first decision command has a lower priority than the second decision command. When the two commands are triggered at the same time, the second decision command is executed first. The first decision command and the third decision command are mutually exclusive and will not be generated at the same time; through the first decision command, this invention realizes proactive upgrade in advance when thermal runaway is about to propagate across PACKs, effectively blocking the chain propagation of thermal runaway within the battery cluster; The propagation velocity vector magnitude is numerically compared with a preset high-speed propagation threshold. When the propagation velocity vector magnitude is greater than the preset high-speed propagation threshold, a second decision command is generated to trigger the cabin-level space total flooding protection. The core function of the second decision command is to skip the multi-level protection at the PACK and cluster levels and directly activate the cabin-level total flooding protection. A preset high-speed propagation threshold represents the critical value for the dangerous propagation speed of thermal runaway. This threshold is pre-calibrated based on the material characteristics, structural layout, and thermal runaway propagation experimental data of the battery modules, with a typical range of 0.3 m / s to 1.0 m / s. The specific value is determined based on the battery type, such as lithium iron phosphate, ternary lithium, and the arrangement density of the battery clusters. When the propagation velocity vector magnitude exceeds this threshold, it indicates that thermal runaway is spreading at an abnormally high speed. Upgrading protection level by level from PACK to cluster to cabin would result in a response lag, and thermal runaway might have already spread throughout the entire battery cabin before protection resources are in place. Therefore, the second decision command adopts a skip-level triggering mechanism to directly activate the protection. The highest level of compartment-level protection; upon triggering the second decision command, the system executes the following actions: opening all cluster control valves and all PACK solenoid valves in the battery compartment, starting the perfluorohexanone pump group at full speed to spray total flood extinguishing agent into the entire battery compartment space, and simultaneously sending a pre-power-off command for the entire battery compartment to the BMS via the CAN bus, and sending a pre-activation command to the inerting and explosion suppression device; the second decision command has a higher priority than the first and third decision commands. When the second decision command is triggered simultaneously with other commands, the system prioritizes executing the second decision command to ensure that the most comprehensive protective measures are taken in the most dangerous situation; through the second decision command, this invention achieves a rapid response to high-speed propagation thermal runaway, avoiding missing the optimal suppression window due to escalation; When the dynamic blocking window is greater than the preset security threshold and the propagation speed vector magnitude is less than or equal to the preset high-speed propagation threshold, a third decision instruction to maintain the current PACK level protection is generated. The core function of the third decision command is to maintain the current PACK-level protection without any upgrades. The triggering conditions for this command indicate that thermal runaway is under control: a large dynamic blocking window means there is still sufficient time for thermal runaway to propagate to the target location, and the system does not need to rush to upgrade its protection; a small propagation velocity vector magnitude means the thermal runaway propagation speed is normal and there is no abnormal acceleration. In this state, the single PACK currently triggering the alarm does not pose a direct threat to other PACKs, and PACK-level localized spraying can effectively suppress thermal runaway without using cluster-level or compartment-level resources. After an alarm occurs, the system maintains its original protection configuration: extinguishing agent is sprayed only on the single PACK that triggered the alarm, the cluster control valve is not opened, other normal PACKs in the same cluster are not affected, the pump set can meet the requirements by running at low speed, and the BMS only needs to execute a power-off command on the single PACK; the third decision command has the lowest priority, and when the first decision command or the second decision command is triggered at the same time, the third decision command is overridden; through the third decision command, the present invention achieves precise protection under controllable thermal runaway conditions, avoids unnecessary waste caused by premature use of high-level protection resources, and achieves economy under the premise of ensuring safety; When both the first and second decision instructions are generated simultaneously, the second decision instruction is output first. The specific instructions for prioritizing the output of the second decision include: The priority rule is designed based on the following safety principles: When thermal runaway simultaneously possesses the characteristics of "limited remaining time" and "excessively rapid propagation speed," it is at the highest level of danger, with extremely strong propagation capabilities. Cluster-level protection may be insufficient to effectively suppress it before it arrives, necessitating direct activation of the compartment-level total flooding protection. After the second decision command is output first, the system skips intermediate levels in the multi-level protection and directly executes the highest level of protection actions, including opening all cluster control valves and solenoid valves within the compartment, starting the pump group at full speed, shutting off power to the entire compartment, and pre-activating the inerting and explosion suppression device. This priority rule is irreversible; that is, regardless of whether the first decision command is generated before the second decision command or both are generated simultaneously, the final output decision command is always the second decision command. Through this priority design, the present invention adopts the most comprehensive protective measures under the most dangerous circumstances, embodying the design concept of safety priority and avoiding delays in the best suppression opportunity due to step-by-step decision-making. The finalized decision instructions will be used as the protection level decision instructions.

[0021] In this embodiment, the pre-deployed protection resource module includes: Receive protection level decision instructions and identify the instruction type, which may include PACK-level instructions, cluster-level instructions, or compartment-level instructions. When the instruction type is a PACK level instruction, the perfluorohexanone pump group corresponding to the PACK is pre-started to the standby speed, the solenoid valve corresponding to the PACK is pre-opened, and the pre-power-off instruction of the PACK is sent to the BMS via the CAN bus. When the instruction type is PACK level, it indicates that the current thermal runaway is under control. The system determines that only local protection of the single battery PACK that triggered the alarm is needed to effectively suppress thermal runaway. The execution logic of PACK level pre-deployment is as follows: 1. The perfluorohexanone pump unit starts at standby speed, which is about 20% to 30% of the rated speed. This speed is sufficient to maintain the circulation and base pressure of the extinguishing agent in the pipeline, but insufficient for spraying. When formal spraying is required, the pump unit can rise to the rated speed within 0.5 seconds; 2. The solenoid valve corresponding to this PACK is pre-opened. This solenoid valve is normally closed. The pre-opening instruction causes its valve core to move to the critical opening position in advance. Upon receiving the formal injection command, the valves are fully opened immediately to eliminate opening delays. Third, a pre-power-off command for the PACK is sent to the BMS via the CAN bus. Upon receiving the command, the BMS pre-cuts the power supply to the PACK to prevent continuous power input from exacerbating thermal runaway. The resource scope of PACK-level pre-deployment is strictly limited to the single PACK that triggered the alarm, excluding other normal PACKs within the same cluster, as well as cluster control valves or inerting and explosion suppression devices, reflecting a design philosophy of precise protection and resource conservation. The completion time of this level of pre-deployment must be before thermal runaway actually propagates to adjacent PACKs, ensuring that all protective resources are in place before thermal runaway occurs. When the instruction type is a cluster-level instruction, the perfluorohexanone pump group corresponding to the battery cluster is pre-started to the standby speed, the cluster control valve corresponding to the battery cluster is pre-opened, the pre-power-off instruction of the battery cluster is sent to the BMS via the CAN bus, and the inerting and explosion suppression device corresponding to the battery cluster is pre-activated. When the command type is cluster-level, it indicates that thermal runaway will propagate to adjacent PACKs in a very short time. The local protection of a single PACK is insufficient to prevent the spread of thermal runaway. The system determines that the protection range needs to be expanded to the entire battery cluster to which the PACK belongs. The execution logic of cluster-level pre-deployment is as follows: 1. The perfluorohexanone pump group starts at the standby speed, the same as the PACK level, but the standby speed corresponding to the cluster-level command can be slightly higher than that of the PACK level, about 30% to 40% of the rated speed, to cope with the greater demand for extinguishing agent flow; 2. Pre-open the cluster control valve corresponding to the battery cluster. The cluster control valve is the main valve that controls whether the extinguishing agent flows into the entire battery cluster. Pre-opening this valve allows the extinguishing agent to flow unimpeded to all PACKs in the cluster during the actual spray. At the same time, pre-open the solenoid valves of all PACKs in the cluster to ensure that the spray path of each PACK is unobstructed; 3. Through CA The N bus sends a pre-power-off command for the battery cluster to the BMS. Upon receiving the command, the BMS preemptively cuts off the power supply to all PACKs within the battery cluster to prevent continuous power input during thermal runaway propagation across PACKs within the cluster. Fourth, the pre-activation of the inerting and explosion suppression device corresponding to the battery cluster is performed. Pre-activation of the inerting and explosion suppression device means starting the gas generator of the device in advance or opening the gas storage tank valve to keep the inert gas in a state of pending release, but not releasing it temporarily. Once the concentration of combustible gas is detected to reach the explosion threshold, it will be released immediately, eliminating the start-up delay. The resource scope of the cluster-level pre-deployment covers the entire battery cluster, including PACKs that have been alarmed and adjacent PACKs that have not been alarmed, realizing the upgrade from single-point protection to whole-cluster protection. The completion time of this level of pre-deployment must be before thermal runaway actually propagates to adjacent PACKs within the same cluster, ensuring that the protective barrier has been established before thermal runaway propagates across PACKs. When the command type is a compartment-level command, the perfluorohexanone pump group is pre-started to the rated speed, all in-compartment solenoid valves and cluster control valves are pre-opened, a pre-power-off command for the entire battery compartment is sent to the BMS via the CAN bus, and all inerting and explosion suppression devices in the compartment are pre-activated. When the command type is a compartment-level command, it indicates that thermal runaway is spreading at an abnormally high speed. The system judges that thermal runaway is at the highest danger level. Upgrading protection level by level will lead to a response lag, and the compartment-level total flooding protection must be activated directly. The execution logic of compartment-level pre-deployment is as follows: 1. The perfluorohexanone pump set is directly started to the rated speed, that is, the maximum operating speed of the pump set. Unlike the standby speed of the PACK and cluster levels, compartment-level pre-deployment does not need to wait for the formal spray command before speeding up. The pump set operates directly at full flow output, so that the extinguishing agent can be released at full power at any time. This is because compartment-level protection needs to cover the entire battery compartment space, and the extinguishing agent flow requirement is much greater than that of the PACK and cluster levels. 2. All solenoid valves and cluster control valves in the compartment are pre-opened, including all PACK solenoid valves and all battery cluster cluster control valves, to ensure that the extinguishing agent can reach any position in the compartment without obstruction and achieve total flooding spray. 3. The pre-disconnection of the entire battery compartment is sent to the BMS via the CAN bus. The first step is to issue an electrical command. Upon receiving the command, the BMS will preemptively cut off the power supply to the entire battery compartment, eliminating the continuous input of electrical energy to thermal runaway at its source. The second step is to pre-activate all inerting and explosion suppression devices within the compartment. Each device is in a ready-to-release state; once the concentration of flammable gas in the compartment reaches the explosive threshold, all devices can simultaneously or in a preset sequence release inert gas to rapidly reduce the concentration of flammable gas and prevent an explosion. The pre-deployed resources at the compartment level cover the entire battery compartment, including all battery clusters, all PACKs, and all inerting and explosion suppression devices, representing the highest level of protection preparation. This level of pre-deployment must be completed before thermal runaway actually propagates to the compartment walls, ensuring that the entire compartment's protective barrier is fully established before thermal runaway spreads to the entire battery compartment. The compartment-level command is usually triggered by the second decision command, and its priority is higher than cluster-level and PACK-level commands, reflecting the safety-first design philosophy of taking the most comprehensive protective measures in the most dangerous situations. It was confirmed that all pre-deployment operations were completed before thermal runaway actually reached the target location; Ensuring that all pre-deployment operations are completed before thermal runaway actually reaches the target location is a crucial step in guaranteeing the effectiveness of the pre-deployment strategy. Its core lies in establishing time constraints and a confirmation mechanism. The physical meaning of this time constraint is that the essential value of pre-deployment is "advance"—only by completing resource deployment before thermal runaway arrives can the goal of "protective resources being ready when thermal runaway arrives" be achieved. If pre-deployment is completed after thermal runaway arrives, it degenerates into the traditional post-deployment mode, failing to eliminate startup delays. The system confirms the completion of pre-deployment operations through the following methods: monitoring the speed feedback signal of the perfluorohexanone pump unit to confirm that the pump unit has reached the standby speed or rated speed; and monitoring the valve position feedback signals of the solenoid valves and cluster control valves. The system confirms that the valve is in the pre-open position; monitors the pre-power-off confirmation signal returned by the BMS to confirm that the power supply to the target level has been cut off; monitors the pre-activation status signal of the inerting explosion suppression device to confirm that the device is in the ready-to-release state; when all feedback signals are in place, the system determines that the pre-deployment operation has been completed. If all in-place signals are not received before the dynamic blocking window returns to zero, the system determines that the pre-deployment has timed out. At this time, the emergency spray mode is triggered, and all protective resources are started directly at maximum power without waiting for the pre-deployment completion signal. Through the pre-deployment time confirmation mechanism, this invention ensures that protective resources are in place before thermal runaway occurs, realizing a fundamental shift from "post-disaster response" to "pre-disaster pre-deployment". Summarize the pre-deployment completion status of each protective resource and generate a resource availability status signal.

[0022] In this embodiment, the execution module includes: Receive resource availability status signal to confirm that the perfluorohexanone pump set, solenoid valve or cluster control valve, BMS and inerting explosion suppression device are all in the pre-deployment completed state. Continuously monitor the location of thermal runaway propagation and compare it with the target location in real time; Monitoring the propagation location of thermal runaway specifically includes: when any detector in the three-level detector network triggers a new alarm, the system records the spatial coordinates of that detector and uses these coordinates as the current actual propagation location of the thermal runaway; due to the deployment spacing between detectors, a monitoring blind zone will be formed between adjacent detectors. The system uses a linear interpolation method to estimate the propagation location of the thermal runaway within the blind zone, that is, based on the difference in spatial coordinates and the time difference between the two most recent alarm detectors, the average propagation velocity of the thermal runaway within this interval is calculated, and the estimated location of the thermal runaway at any time between the two alarms is calculated accordingly; the thermal runaway propagation location includes the actual propagation location and the estimated location. After obtaining the thermal runaway propagation location, the system compares the location coordinates with the pre-defined location coordinates. The system performs real-time comparisons of the coordinate ranges of the calibrated target locations. The target locations include the ranges of adjacent PACK inlets, adjacent cluster inlets, and bulkheads. Each target location corresponds to a spatial region rather than a single coordinate point. When the coordinates of the thermal runaway propagation location first fall within the coordinate range of any target location, the system determines that thermal runaway has reached that target location and immediately triggers the execution phase. If the coordinates have not yet fallen within the range of any target location, monitoring continues, waiting for the next alarm event to trigger a new location update. This monitoring and comparison mechanism ensures a seamless connection between the execution phase and the pre-deployment phase, enabling protective resources to be activated the moment thermal runaway reaches the target location, achieving precise triggering from pre-deployment to formal execution. When the thermal runaway propagation location is detected to have reached the target location, the execution phase is triggered; The trigger execution phase includes: when the thermal runaway propagation location is detected to have reached the target location, the system immediately triggers the execution phase. This phase is a crucial transition point between the pre-deployment and execution phases. Trigger judgment is based on real-time comparison results: once the coordinates of the thermal runaway propagation location fall within the target location's coordinate range for the first time, the trigger condition is met. This triggering mechanism has three core characteristics: 1. Real-time: Trigger judgment is performed immediately after each thermal runaway location update, without periodic polling delays, ensuring millisecond-level response; 2. Irreversibility: Once the execution phase is triggered, the system will not cancel the issued execution command due to subsequent changes in location information; 3. Correspondence: the target location type of the trigger execution phase directly determines the range of protection resources activated during the execution phase. Specifically, the correspondence is: thermal runaway reaching an adjacent PACK... Upon entry, a PACK-level execution action is triggered; upon reaching the entry of an adjacent cluster, a cluster-level execution action is triggered; upon reaching the bulkhead, a bulkhead-level execution action is triggered. To prevent missed triggers due to detector blind spots or communication delays, the system also features a timeout-forced triggering mechanism: when the dynamic blocking window reaches zero, if thermal runaway has not yet been detected reaching the target location, the system determines an anomaly and forcibly triggers the execution phase via a timeout signal, activating protective resources in a backup mode. Simultaneously with triggering the execution phase, the system sends a synchronous start signal to all execution modules, ensuring that actions such as perfluorohexanone pump injection, full valve opening, BMS power-off, and inert gas release are activated simultaneously. Through this triggering mechanism, the present invention achieves seamless integration of pre-deployment and execution, ensuring that protective resources are activated immediately the moment thermal runaway reaches the target location. Send a spray command to the pre-deployed perfluorohexanone pump unit, control the pump unit to release perfluorohexanone extinguishing agent to the target location according to the predetermined spray strategy, and automatically perform fire extinguishing and cooling actions; Performing fire extinguishing and cooling actions specifically includes: After sending a spray command to the pre-deployed perfluorohexanone pump unit, the pump unit switches from standby speed or rated speed to spray mode, releasing perfluorohexanone extinguishing agent to the target location according to the predetermined spray strategy. This spray strategy includes three stages: 1. Initial spray stage: The pump unit sprays continuously at rated speed for 10 to 30 seconds to quickly extinguish open flames and cover the target protected area; 2. Interval waiting stage: The pump unit temporarily suspends spraying and remains in standby mode for 30 to 60 seconds. During this stage, the vaporization endothermic properties of perfluorohexanone are utilized to allow the released extinguishing agent to fully absorb the heat inside the battery, reducing the cell temperature and preventing the continuous chain reaction of thermal runaway; 3. Secondary spray stage: The pump unit restarts and sprays continuously at rated speed. The spraying time is 10 to 20 seconds to suppress potential reignition. The extinguishing mechanism of perfluorohexanone (PFH) fire extinguishing agent includes two aspects: physical endothermic reaction and chemical inhibition. In terms of physical endothermic reaction, PFH rapidly vaporizes after spraying, absorbing a large amount of heat and quickly reducing the battery temperature below the thermal runaway critical temperature. In terms of chemical inhibition, the free radical scavengers generated by the decomposition of PFH can interrupt the combustion chain reaction. Compared with the traditional fire extinguishing agent heptafluoropropane, PFH has a higher latent heat of vaporization, a more significant cooling effect, a shorter atmospheric survival time, and better environmental friendliness. Through this three-stage spraying strategy, the dual effects of extinguishing and cooling the thermal runaway of lithium batteries are achieved, effectively suppressing the reignition problem commonly found in traditional fire extinguishing schemes. Send an opening confirmation command to the pre-opened solenoid valve or cluster control valve to ensure that the extinguishing agent flow path is unobstructed and that the extinguishing agent can be accurately delivered to the target protected area. Send a power-off execution command to the BMS to confirm that the BMS has completed the pre-power-off action or immediately execute the power-off action, cut off the power supply to the target protected area, and automatically execute the power-off action. Send a start command to the pre-activated inerting explosion suppression device to control the device to release inert gas into the battery compartment space, reduce the concentration of combustible gas, and automatically perform explosion suppression actions. The explosion suppression action specifically includes: after sending a start command to the pre-activated inerting explosion suppression device, the device switches from the pre-activated, ready-to-release state to the release state, releasing inert gas into the battery compartment space to rapidly reduce the concentration of combustible gas and oxygen in the compartment, and automatically executing the explosion suppression action; the inerting explosion suppression device uses nitrogen or IG541 mixed gas as the explosion suppression medium, wherein the IG541 mixed gas is composed of nitrogen, argon, and carbon dioxide mixed in a specific ratio; in the pre-activation stage, the device has opened the gas cylinder valve or started the gas generator, so that the inert gas is in the ready-to-release state but has not yet been sprayed out. After the start command triggers the release mechanism, the inert gas is evenly sprayed into the entire battery compartment space through the preset nozzle within 1 to 3 seconds; the physical principle of inerting explosion suppression is to inject inert gas into the confined space to dilute the oxygen concentration in the compartment to a level that cannot support the explosion. The inerting explosion suppression device, which reduces the concentration of combustible gas to below the lower explosive limit while simultaneously diluting it below the lower explosive limit, typically aims to reduce the oxygen concentration to below 15% or the combustible gas concentration to below 50% of the lower explosive limit. The device is usually activated upon triggering a compartment-level command and works in conjunction with perfluorohexanone (PFH) extinguishing agent to form a synergistic protection: PFH extinguishes open flames and lowers battery temperature, while the inert gas reduces the overall combustible gas concentration within the compartment to prevent an explosion. Even after PFH spraying, if an explosion risk remains within the compartment, the inerting explosion suppression device continues to function as an independent layer of protection, buying time for personnel evacuation and subsequent handling. Through this explosion suppression action, the invention achieves a complete safety chain from fire extinguishing to explosion prevention, filling the technical gap in traditional energy storage fire protection solutions that only extinguish fires without providing explosion prevention.

[0023] Example 1: To verify the feasibility of this invention in practice, it was applied to a 100 MWh lithium iron phosphate battery energy storage power station of a power company located in East China. This power station consists of dozens of prefabricated modular battery compartments, each containing multiple battery clusters arranged longitudinally, and each cluster composed of multiple stacked battery packs. Initially, the power station was equipped with a traditional fire suppression system, which involved installing smoke and heat detectors on the top of each battery compartment and arranging heptafluoropropane gas extinguishing devices inside. However, this traditional fire suppression system exhibited significant drawbacks in actual operation. The shortcomings were apparent: the detector only issued an alarm when the smoke concentration or temperature reached a high threshold, by which time the battery had often already caught fire, and thermal runaway had spread from a single cell to the entire PACK; although the heptafluoropropane injection could temporarily extinguish the open flame, it could not effectively cool the inside of the battery, and reignition frequently occurred after about 30 to 60 seconds, ultimately leading to the destruction of the entire battery compartment. During a peak summer electricity consumption period, the power station experienced a thermal runaway accident during the waiting period after charging. Due to the lack of early warning and continuous suppression capabilities, the fire spread rapidly and triggered an explosion, causing serious economic losses and safety hazards. Based on these lessons, the power company decided to upgrade the safety control system of the energy storage power station and selected the distributed control-based energy storage power station safety control system proposed in this invention.

[0024] In the retrofitting of this energy storage power station, the system first deployed a three-tiered detection network for each battery compartment. Specifically, an integrated composite fire detector was installed inside each battery pack. This detector integrates temperature, carbon monoxide, hydrogen, and volatile organic compound (VOC) sensors to capture trace amounts of characteristic gases released and temperature changes in the very early stages of battery thermal runaway. An active aspirating detection device was installed at the top center of each battery cluster. This device actively extracts gas from the outlets of each pack within the cluster through sampling pipelines, continuously monitoring carbon monoxide, hydrogen, and electrolyte volatiles with ppm-level accuracy. Multiple composite fire detectors were evenly distributed in the top space of each battery compartment for full-coverage monitoring of the entire compartment space. All detectors are connected to the fire control host via a CAN bus, forming a distributed detection network.

[0025] The operating scenario of this energy storage power station is set as follows: A battery pack located in the middle of a battery cluster experiences an irreversible side reaction after long-term cyclic use, leading to the generation of trace amounts of carbon monoxide and volatile organic compounds (VOCs). At this point, the integrated composite detector within the pack detects the abnormal increase in the concentration of these characteristic gases. Once the first-level warning threshold is triggered, the system immediately records the detector's detection time and its precise location in the spatial coordinate system, generating the first alarm event. Upon receiving this alarm event, the fire control host does not simply issue an audible and visual alarm and wait for manual intervention, as is typical in traditional systems. Instead, it immediately activates the propagation status parameter module. Since only one detector is alarming at this time, the propagation speed cannot be calculated, so the system enters continuous monitoring mode. Simultaneously, it sends a current reduction request for the pack to the battery management system via the CAN bus, slightly reducing the pack's charging and discharging power to prevent the situation from worsening.

[0026] Approximately twenty seconds later, thermal runaway began to spread to adjacent cells within the PACK. The electrolyte further decomposed, producing a higher concentration of hydrogen gas. The hydrogen concentration in the detectors within the PACK exceeded the secondary warning threshold, triggering a second alarm event. At this point, the alarm event set contained two alarm records, both originating from different cell locations within the same PACK. The propagation state parameter module extracted the detection time and spatial coordinates of these two alarm records from the alarm event set. The detection time difference was obtained by subtracting the earlier alarm time from the later alarm time, and the spatial coordinate difference was obtained by subtracting the earlier alarm coordinates from the later alarm coordinates. The spatial coordinate difference was divided by the detection time difference to calculate the propagation velocity vector of thermal runaway between cells within the PACK. Since the PACK contained multiple detection points, the system obtained multiple propagation velocity vectors. After mapping these vectors to a unified spatial coordinate system, a continuous propagation velocity field within the PACK was constructed using the neighborhood averaging method. By statistically analyzing the frequency of the orientation angles of all grid points in the velocity field, the system deduced that the main propagation direction of thermal runaway was pointing towards the PACK shell.

[0027] The dynamic blocking window module then uses the aforementioned propagation velocity field and propagation direction to identify the potential propagation path of thermal runaway from the current detection position to the adjacent battery PACK. The system obtains the spatial distance between the current detection position and the entrance of the adjacent PACK, divides this distance by the velocity vector magnitude at the current detection position, and calculates the remaining time required for thermal runaway to propagate to the adjacent PACK. This remaining time is used as the dynamic blocking window. The protection level decision command module compares this dynamic blocking window with a preset safety threshold and finds that the window is approximately eight seconds, while the preset safety threshold is ten seconds. Since the window is less than the threshold, a first decision command is generated to upgrade from the current PACK level to the cluster level protection. At the same time, the system compares the propagation velocity vector magnitude with a preset high-speed propagation threshold and finds that the magnitude is approximately 0.3 meters per second, which does not exceed the high-speed propagation threshold. Therefore, no cabin-level command is triggered. Since the first decision command is generated separately, the system outputs it as the final protection level decision command.

[0028] Upon receiving the cluster-level command, the pre-deployment protection resource module immediately initiated pre-deployment operations before thermal runaway actually reached the adjacent PACK. The system pre-started the perfluorohexanone pump group corresponding to the battery cluster to standby speed, placing the pump group in a low-speed standby state, ready to rapidly increase speed upon formal spraying. The system pre-opened the cluster control valve corresponding to the battery cluster and the solenoid valves of all PACKs within the cluster, ensuring a completely unobstructed flow path for the extinguishing agent. Simultaneously, the system sent a pre-power-off command for the battery cluster to the battery management system via the CAN bus, allowing the battery management system to cut off the power supply to the cluster in advance. Furthermore, the system pre-activated the inerting and explosion suppression device corresponding to the battery cluster, placing it in a ready-to-release state. All pre-deployment operations were completed approximately three seconds before thermal runaway actually reached the adjacent PACK. The system then aggregated the availability status of each resource and generated a resource availability status signal.

[0029] After confirming that all resources are in place, the execution module continuously monitors the actual propagation location of thermal runaway. When the coordinates of the thermal runaway propagation location fall within the coordinate range of the adjacent PACK entry point for the first time, the system immediately triggers the execution phase. The execution module sends a spray command to the pre-deployed perfluorohexanone pump set. Within 0.3 seconds, the pump set accelerates from standby speed to rated speed and releases perfluorohexanone extinguishing agent into the target area according to the predetermined three-stage spray strategy. The first spray lasts for 15 seconds, quickly covering all PACKs in the battery cluster and extinguishing any open flames. After a 40-second interval, the system performs a second spray, lasting 12 seconds, to deeply cool the battery and suppress reignition. At the same time, the execution module sends an opening confirmation command to the pre-opened cluster control valve and solenoid valve, switching them to the fully open position to ensure that the extinguishing agent is delivered at maximum flow. The execution module sends a power-off execution command to the battery management system to confirm that the power supply to the battery cluster has been completely cut off. The execution module sends an activation command to the pre-activated inerting and explosion suppression device. Inert gas is uniformly sprayed into the battery compartment space within three seconds, diluting the concentration of flammable gas in the compartment to below the lower explosive limit.

[0030] This scenario validates the effectiveness of the invention in a real-world energy storage power station. Through a distributed three-level detection network, the system detected anomaly signals in the very early stages of thermal runaway, when only trace amounts of gas were escaping. This enabled early warning of internal side reactions within the battery. By calculating the propagation velocity vector and dynamic blocking window, the system predicted that thermal runaway would propagate to adjacent PACKs approximately eight seconds later. Based on this, pre-deployment operations were initiated approximately five seconds in advance, ensuring that the perfluorohexanone pump group, valves, battery management system were powered off, and the inerting and explosion suppression device were all in place before thermal runaway arrived. When thermal runaway actually reached the adjacent PACK, the protective resources were already in standby mode. The system has achieved a fundamental shift from traditional passive response to proactive pre-deployment. The three-stage spraying strategy of perfluorohexanone not only extinguishes the fire but also continuously cools the battery, effectively suppressing reignition. The inerting and explosion suppression device promptly reduces the concentration of flammable gases in the compartment after the extinguishing agent is sprayed, eliminating the risk of explosion. Throughout the process, the system does not unnecessarily spray other normal battery clusters in the same compartment, achieving a balance between precise protection and resource conservation. The energy storage power station has been operating safely for more than a year since its upgrade and renovation, during which it has successfully handled multiple early battery anomalies without any safety accidents caused by thermal runaway.

[0031] Table 1. Performance Comparison of the Invention's Solution with Traditional Firefighting Solutions

[0032] As shown in Table 1, in terms of detection time, the traditional solution takes an average of 48 seconds from the onset of thermal runaway to the first alarm. This is because smoke detectors need to wait for visible smoke to be generated and for the concentration to accumulate to a high level before they can be triggered. Thermal runaway has already been heating up for tens of seconds before visible smoke is generated. The present invention, through an integrated composite detector deployed inside the battery PACK, can directly monitor characteristic gases such as carbon monoxide, hydrogen, and volatile organic compounds. These gases appear in the very early stages of thermal runaway. Therefore, the first alarm time is significantly reduced to 12 seconds, providing 36 seconds of preprocessing time for subsequent protection. This 36-second lead time is crucial for the execution of pre-deployment strategies.

[0033] In terms of response speed, traditional solutions require 8 seconds from alarm to activation of protective resources, including manual confirmation and operation time for manually activating fire extinguishing devices. This invention, through a fully automated pre-deployment mechanism, automatically calculates the propagation speed and dynamically assesses the blocking window upon receiving an alarm, requiring no manual intervention. The transmission of decision and execution commands is completed in milliseconds. Simultaneously, the pump group and valves are already in standby mode through pre-deployment, and formal activation only requires 2.5 seconds to increase from standby speed to rated speed. Therefore, the time from alarm to resource activation is shortened to 2.5 seconds. Further decomposition of the response chain reveals that the traditional solution requires 5 seconds for signal transmission from the detector to the controller, while this invention compresses this time to 2.5 seconds through the CAN bus. The traditional solution requires 3 seconds for command transmission from the controller to the actuator, while this invention sends the decision command in advance through the pre-deployment mechanism, requiring only confirmation signals during the execution phase, shortening the transmission time to 0.5 seconds.

[0034] The improved detection accuracy is a direct reflection of the breakthrough in the core technology of this invention. In traditional solutions, the minimum smoke concentration that a smoke detector can detect is about 5% of the light density per meter, which corresponds to a characteristic gas concentration of about 150 ppm to stably trigger an alarm. The composite detector used in this invention, based on the principle of electrochemical sensors, can achieve a detection accuracy of 15 ppm for carbon monoxide and hydrogen, improving sensitivity tenfold. This high sensitivity enables the system to issue an early warning when the battery is only undergoing a side reaction and has not yet entered the irreversible stage of thermal runaway, creating the prerequisites for subsequent propagation speed calculation and dynamic window assessment.

[0035] The difference in temperature control capability is the key to solving the problem of lithium battery reignition in this invention. After traditional heptafluoropropane extinguishing, the highest surface temperature of the battery is still as high as 185 degrees Celsius 30 seconds later, which is far higher than the critical temperature for thermal runaway of lithium batteries. This is because heptafluoropropane only isolates oxygen through physical means and does not have the ability to absorb heat and cool down. The residual heat inside the battery will continue to drive the thermal runaway reaction, resulting in an average of 2.8 reignitions within 30 minutes. The perfluorohexanone extinguishing agent used in this invention vaporizes rapidly after spraying. The vaporization process absorbs a large amount of heat, causing the surface temperature of the battery to drop to 95 degrees Celsius 30 seconds after extinguishing, which is lower than the temperature threshold required for the continuation of thermal runaway. Therefore, the number of reignitions is reduced to 0.3, a reduction of 89%.

[0036] In terms of resource utilization efficiency, the traditional solution requires the release of 320 liters of extinguishing agent per accident. This is because the total flooding spray at the compartment level covers the entire battery compartment space, with most of the extinguishing agent being sprayed onto normal equipment that has not malfunctioned. The present invention, through a graded protection strategy, only requires the release of 150 liters of extinguishing agent to achieve effective suppression in the cluster-level protection mode, reducing resource consumption by 53%. At the same time, the frequency of protection malfunctions in the traditional solution is 6.5 times per 100 compartments per year, meaning that an average of 6.5 false sprays occur per 100 battery compartments per year. Each false spray causes a large amount of extinguishing agent waste and downtime losses. The present invention, through multi-source verification of three-level detectors and quantitative judgment of dynamic blocking windows, reduces the frequency of false sprays to 1.8 times per 100 compartments per year, a reduction of 72%, improving the economy and reliability of the system.

[0037] The above are merely preferred embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A safety control system for an energy storage power station based on distributed control, characterized in that, include: The alarm event module is used to monitor the concentration of characteristic gases in real time through three levels of detectors distributed in the battery PACK, the top of the battery cluster, and the battery compartment space. When any detector detects that the concentration exceeds the warning threshold, it records the detection time of the detector and its spatial coordinates, and generates an alarm event set. The propagation state parameter module is used to calculate the propagation velocity vector based on the detection time difference and spatial coordinate difference of adjacent level detectors in the alarm event set, fuse the propagation velocity vectors to construct the propagation velocity field, invert the propagation direction of thermal runaway, and obtain the propagation state parameter set. The dynamic blocking window module is used to calculate the remaining time for thermal runaway to propagate to the target location using the propagation velocity field and propagation direction in the propagation state parameter set, and serves as the dynamic blocking window. The protection level decision instruction module is used to compare the dynamic blocking window with the preset safety threshold and the propagation speed vector magnitude with the preset high-speed propagation threshold to generate protection level decision instructions including PACK level, cluster level or compartment level. The pre-deployment protection resource module is used to pre-deploy protection resources according to the instruction type before thermal runaway reaches the target location based on protection level decision instructions. The protection resources include perfluorohexanone pump sets, solenoid valves or cluster control valves, BMS pre-power-off instructions and inerting explosion suppression devices, and generate resource in-situ status signals. The execution module is used to automatically perform fire extinguishing, cooling, power outage, or inerting explosion suppression actions based on the resource availability status signal.

2. The energy storage power station safety control system based on distributed control according to claim 1, characterized in that, The alarm event module includes: Each detector is pre-configured with its hierarchical identifier and spatial coordinates of its installation location. The three-level detectors include the first-level detectors deployed inside the battery pack, the second-level detectors deployed on top of each battery cluster, and the third-level detectors deployed throughout the battery compartment. The configuration information is then summarized to generate a detector configuration table. Using the three-level detectors in the detector configuration table, characteristic gas concentration data of their respective deployment locations are collected in real time according to their preset sampling frequencies, generating a raw monitoring data stream containing detector identification, spatial coordinates, collection timestamps, and concentration values. The concentrations of each characteristic gas in the raw monitoring data stream are compared item by item with the pre-stored warning thresholds, which are set separately for different levels of detectors, to generate a threshold comparison result set. When any comparison result in the threshold comparison result set indicates that the concentration exceeds the warning threshold, an alarm event is triggered. The detection time and spatial coordinates of the detector are extracted from the original monitoring data stream to generate a single alarm record. Summarize all single alarm records generated by all triggered alarm events, arrange them in chronological order of trigger time, and generate an alarm event set.

3. The energy storage power station safety control system based on distributed control according to claim 1, characterized in that, The propagation state parameter module includes: Extract the detection time and spatial coordinates of each alarm record from the alarm event set, and identify the detector level to which each alarm record belongs; Select a pair of detector alarm records from adjacent levels, and subtract the detection time of the earlier alarm from the detection time of the later alarm to obtain the detection time difference; The spatial coordinate difference is obtained by subtracting the spatial coordinates of the first alarm detector from the spatial coordinates of the later alarm detector. Divide the spatial coordinate difference by the detection time difference, and the resulting quotient is used as the propagation velocity vector of thermal runaway from the position of the first alarm detector to the position of the second alarm detector; For all detector alarm pairs in the alarm event set that satisfy the adjacent hierarchical relationship and have a sequential order, calculate their respective propagation velocity vectors to obtain multiple propagation velocity vectors; Multiple propagation velocity vectors are mapped to a unified spatial coordinate system. For each grid point in the spatial coordinate system, the average value of all propagation velocity vectors falling within the neighborhood of that grid point is taken as the velocity vector of that point. The velocity vectors of all grid points are combined to construct a propagation velocity field covering the inside of the battery pack, the top of the battery cluster, and the battery compartment space. Traverse all grid points in the propagation velocity field, count the direction angle of the velocity vector of each grid point, and take the direction corresponding to the direction angle with the highest frequency as the propagation direction of thermal runaway; The propagation velocity field, propagation direction, and magnitude of each propagation velocity vector are summed to generate a propagation state parameter set.

4. The energy storage power station safety control system based on distributed control according to claim 1, characterized in that, The dynamic blocking window module includes: Extract the propagation velocity field and propagation direction of thermal runaway from the propagation state parameter set; Based on the propagation direction, identify one or more potential propagation paths from the current thermal runaway detection location to the target location, where the target location includes adjacent battery packs, adjacent battery clusters, and battery compartment walls; For each identified potential propagation path, obtain the spatial distance between the current detection position and the target position on that path; Divide the spatial distance by the magnitude of the velocity vector of the propagation velocity field at the current detection position, and the quotient is the remaining time required for thermal runaway to propagate along the propagation path to the target position. When there are multiple propagation paths, select the one with the smallest remaining time from the remaining time corresponding to each path as the required remaining time; The remaining time obtained is defined as the dynamic blocking window.

5. A safety control system for an energy storage power station based on distributed control according to claim 1, characterized in that, The protection level decision instruction module includes: The dynamic blocking window is compared with the preset security threshold. When the dynamic blocking window is less than or equal to the preset security threshold, a first decision instruction is generated to upgrade from the current PACK level to cluster level protection. The propagation velocity vector magnitude is numerically compared with a preset high-speed propagation threshold. When the propagation velocity vector magnitude is greater than the preset high-speed propagation threshold, a second decision command is generated to trigger the cabin-level space total flooding protection. When the dynamic blocking window is greater than the preset security threshold and the propagation speed vector magnitude is less than or equal to the preset high-speed propagation threshold, a third decision instruction to maintain the current PACK level protection is generated. When both the first and second decision instructions are generated simultaneously, the second decision instruction is output first. The finalized decision instructions will be used as the protection level decision instructions.

6. The energy storage power station safety control system based on distributed control according to claim 1, characterized in that, The pre-deployed protection resource module includes: Receive protection level decision instructions and identify the instruction type, which includes PACK-level instructions, cluster-level instructions, or compartment-level instructions; When the instruction type is a PACK level instruction, the perfluorohexanone pump group corresponding to the PACK is pre-started to the standby speed, the solenoid valve corresponding to the PACK is pre-opened, and the pre-power-off instruction of the PACK is sent to the BMS via the CAN bus. When the instruction type is a cluster-level instruction, the perfluorohexanone pump group corresponding to the battery cluster is pre-started to the standby speed, the cluster control valve corresponding to the battery cluster is pre-opened, the pre-power-off instruction of the battery cluster is sent to the BMS via the CAN bus, and the inerting and explosion suppression device corresponding to the battery cluster is pre-activated. When the command type is a compartment-level command, the perfluorohexanone pump group is pre-started to the rated speed, all in-compartment solenoid valves and cluster control valves are pre-opened, a pre-power-off command for the entire battery compartment is sent to the BMS via the CAN bus, and all inerting and explosion suppression devices in the compartment are pre-activated. It was confirmed that all pre-deployment operations were completed before thermal runaway actually reached the target location; Summarize the pre-deployment completion status of each protective resource and generate a resource availability status signal.

7. A safety control system for an energy storage power station based on distributed control according to claim 1, characterized in that, The execution module includes: Receive resource availability status signal to confirm that the perfluorohexanone pump set, solenoid valve or cluster control valve, BMS and inerting explosion suppression device are all in the pre-deployment completed state. Continuously monitor the location of thermal runaway propagation and compare it with the target location in real time; When the thermal runaway propagation location is detected to have reached the target location, the execution phase is triggered; Send a spray command to the pre-deployed perfluorohexanone pump unit, control the pump unit to release perfluorohexanone extinguishing agent to the target location according to the predetermined spray strategy, and automatically perform fire extinguishing and cooling actions; Send an opening confirmation command to the pre-opened solenoid valve or cluster control valve to ensure that the extinguishing agent flow path is unobstructed and that the extinguishing agent can be accurately delivered to the target protected area. Send a power-off execution command to the BMS to confirm that the BMS has completed the pre-power-off action or immediately execute the power-off action, cut off the power supply to the target protected area, and automatically execute the power-off action. Send a start command to the pre-activated inerting and explosion suppression device to control the device to release inert gas into the battery compartment space, reduce the concentration of combustible gas, and automatically perform explosion suppression actions.

Images