Fuel cell emergency stop processing method and device

Abstract

The application provides a fuel cell emergency stop processing method and device, the method comprising: in response to an emergency stop instruction of a fuel cell system, switching the gas supply of an anode and a cathode of a stack in the fuel cell to inert gas; adjusting the pressure of the anode and the cathode from the current working pressure to a preset purge pressure by supplying gas or exhausting the anode and the cathode with inert gas, the purge pressure being greater than or equal to the minimum pressure value enabling gas replacement in the anode and the cathode; when the pressure of the anode and the cathode reaches the purge pressure, purging the anode and the cathode with inert gas until the fuel cell reaches the emergency stop safety standard. The method can solve the safety risk of forming a high-risk gas environment caused by the residual high-concentration hydrogen and oxygen in the anode and cathode chambers when the gas supply is directly cut off in the traditional emergency stop mode, and the problem of damaging the membrane electrode due to uncontrolled pressure and causing an electric shock hazard due to long-term high temperature and high potential accelerating stack attenuation.

Description

Technical Field

[0001] This application relates to the field of fuel cell technology, and in particular to a fuel cell emergency stop processing method, a fuel cell emergency stop processing device, a computer device, a computer-readable storage medium, and a computer program product. Background Technology

[0002] A fuel cell is a power generation device that directly converts fuel (such as hydrogen) and oxidant (such as oxygen) into electrical energy through an electrochemical reaction. An oxygen-enriched fuel cell, on the other hand, uses a high concentration of oxygen (typically over 90% purity or pure oxygen) instead of air as the oxidant in its cathode reaction gas.

[0003] During operation, an oxygen-enriched fuel cell system will trigger an emergency stop in the event of a serious malfunction (such as failure of a critical component or severe parameter exceedance) or an emergency (such as triggering of a safety interlock). The procedure following an emergency stop typically involves directly cutting off the supply of hydrogen and oxygen, and simultaneously shutting down all actuators, including the air compressor, to immediately bring the system to a standstill.

[0004] Because the gas supply was abruptly cut off, the large amount of oxygen-rich gas remaining in the cathode cavity and the high-purity hydrogen gas trapped in the anode cavity could not be discharged in time, resulting in a highly hazardous gaseous environment inside the fuel cell stack, posing a risk of combustion and explosion. Furthermore, since the system loses its active control capability after the gas supply is cut off, the pressure on both sides of the anode and cathode will fluctuate unpredictably due to residual gas reactions and temperature changes, easily generating excessive transmembrane pressure differences and causing severe mechanical stress damage to the membrane electrodes. Simultaneously, the residual hydrogen and oxygen in the fuel cell stack will continue to undergo uncontrolled chemical reactions under no-load conditions, causing the fuel cell stack to remain in a high-temperature, high-potential state for an extended period. This not only accelerates the decay of the catalyst and carbon support, severely impairing the fuel cell stack's durability, but also keeps the overall stack voltage at a high level for a prolonged period, creating a risk of electric shock during subsequent troubleshooting. Summary of the Invention

[0005] The purpose of this application is to provide a fuel cell emergency stop processing method, a fuel cell emergency stop processing device, a computer device, a computer-readable storage medium, and a computer program product, so as to improve the safety, stack durability, and fault diagnosis operability of the fuel cell system under emergency stop conditions.

[0006] To address the aforementioned technical problems, this application provides the following technical solutions: The first aspect of this application provides a fuel cell emergency stop processing method, the method comprising: in response to an emergency stop command of the fuel cell system, switching the gas supply to the anode and cathode of the fuel cell stack to inert gas; adjusting the pressure of the anode and cathode from the current operating pressure to a preset purging pressure by supplying gas with inert gas or venting gas from the anode and cathode, the purging pressure being greater than or equal to the minimum pressure value that allows gas replacement in the anode and cathode; when the pressure of the anode and cathode reaches the purging pressure, purging the anode and cathode with inert gas until the fuel cell reaches the emergency stop safety standard.

[0007] Compared to existing technologies, the fuel cell emergency stop method provided in the first aspect of this application switches the gas supply to both the anode and cathode of the fuel cell stack to inert gas after an emergency stop is triggered. The inert gas is then actively used to regulate the gas supply or exhaust, smoothly adjusting the anode and cathode pressures from the operating pressure to a preset purging pressure. Subsequently, while maintaining this pressure, the anode and cathode are purged and replaced with inert gas. This method addresses the safety risks associated with directly cutting off the gas supply in traditional emergency stop methods, such as the high concentration of hydrogen and oxygen remaining in the anode and cathode cavities, creating a hazardous gas environment. It also addresses the problems of excessive transmembrane pressure differential causing damage to the membrane electrode assembly due to pressure runaway, and the accelerated stack degradation and electric shock hazard caused by prolonged high temperature and high potential. This significantly improves the inherent safety of the fuel cell system under emergency stop conditions, the durability of the fuel cell stack, the operability of subsequent fault diagnosis, and personnel safety.

[0008] In other embodiments provided in this application, the method further includes: when the pressure difference between the anode and the cathode is greater than a preset pressure difference, adjusting the pressure difference between the anode and the cathode so that the pressure difference between the anode and the cathode is equal to or less than the preset pressure difference.

[0009] By monitoring and actively regulating the pressure difference between the anode and cathode in real time during the emergency stop pressure regulation process, the problem of excessive pressure difference between the anode and cathode caused by pressure fluctuations or control deviations, resulting in irreversible mechanical shear damage to the membrane electrode, can be solved. This significantly improves the structural integrity and long-term durability of the fuel cell stack under emergency stop conditions.

[0010] In other embodiments provided in this application, adjusting the pressure difference between the anode and the cathode includes: determining the target electrode with the higher current pressure from the anode and the cathode; and opening the exhaust valve of the target electrode to release pressure.

[0011] By identifying the side with higher pressure and opening its exhaust valve separately for precise pressure relief, the problem of slow differential pressure control response, overshoot, or even aggravation of differential pressure fluctuations caused by bidirectional regulation or misoperation can be solved, thereby improving the response speed and accuracy of differential pressure control.

[0012] In other embodiments provided in this application, adjusting the pressure of the anode and cathode from the current working pressure to a preset purging pressure includes: acquiring real-time status information of the anode and cathode during the process of adjusting the pressure of the anode and cathode from the current working pressure to the preset purging pressure according to a preset pressure-time curve; when it is determined based on the real-time status information that there is a safety risk to the anode and cathode, determining whether to reduce or increase the current pressure in the pressure-time curve based on the real-time status information; and adjusting the pressure of the anode and cathode to the preset purging pressure based on the reduced or increased pressure.

[0013] By monitoring the anode and cathode states in real time during pressure regulation and dynamically adjusting the pressure based on safety risks, the problem of fixed-rate pressure reduction potentially exacerbating risks or insufficient response under abnormal operating conditions can be solved. This improves the adaptability and control flexibility of the emergency stop process, maximizing the safe transition of the fuel cell stack under different fault scenarios.

[0014] In other embodiments provided in this application, adjusting the pressure of the anode and cathode to a preset purging pressure based on the reduced or increased pressure includes: calculating the pressure difference between the reduced or increased pressure and the pressure at the same time in a preset pressure-time curve; in the preset pressure-time curve, starting from the pressure at the same time, increasing or decreasing the pressure difference at each pressure to obtain a new pressure-time curve; and adjusting the pressure of the anode and cathode to the preset purging pressure according to the new pressure-time curve.

[0015] By calculating the deviation between the real-time pressure and the preset curve, and using this deviation to shift and correct the pressure values ​​at all subsequent time points to generate a new control curve, the problem of disconnection from the original control logic after single-point adjustment, resulting in an unsmooth pressure regulation process or control jumps, can be solved. This ensures the continuity and stability of the entire pressure reduction process in the entire time domain and avoids secondary impact on the fuel cell stack.

[0016] In other embodiments provided in this application, the method further includes: when an abnormal voltage of a single cell in the fuel cell stack is detected, supplying gas with inert gas while simultaneously venting the anode and cathode, and adjusting the pressure of the anode and cathode from the current working pressure to a preset purging pressure.

[0017] By actively replacing the reactive gases in the anode and cathode and adjusting the pressure by simultaneously supplying and venting gas when the voltage of a single cell is abnormal, the problem that passively cutting off the gas supply cannot quickly eliminate local high potential and aggravate catalyst decay under abnormal operating conditions can be solved. Furthermore, by rapidly replacing the high-risk gases and establishing an inert atmosphere, the electrochemical reactions inside the fuel cell stack can be suppressed more efficiently, thus maximizing the protection of the fuel cell stack's durability.

[0018] In other embodiments provided in this application, inert gas is used to purge the anode and cathode, including: opening the exhaust valves of the anode and cathode; when the current pressure of the anode and cathode is detected to be less than the purging pressure, opening the proportional valves of the anode and cathode to replenish the anode and cathode with inert gas.

[0019] By employing a timing control strategy during the purging process—first opening the exhaust valve for active venting and then opening the proportional valve to replenish inert gas after the pressure drops—the problems of gas short-circuiting, low replacement efficiency, or excessive pressure fluctuations caused by synchronous valve opening can be solved. This achieves a more efficient purging and replacement effect, ensuring that residual hydrogen and oxygen in the anode and cathode chambers are completely removed while maintaining stable pressure and improving the safety and reliability of the system after an emergency stop.

[0020] In other embodiments provided in this application, inert gas is used to purge the anode and cathode until the fuel cell reaches the emergency stop safety standard, including: purging the anode and cathode with inert gas according to a preset number of purging cycles.

[0021] By quantitatively purging the anode and cathode according to a preset number of purging cycles, the problems of insufficient purging leading to residual hazards or excessive purging wasting gas resources can be solved. This improves the standardization and operational reliability of the emergency stop procedure, ensuring a consistent safety state after each emergency stop.

[0022] In other embodiments provided in this application, the anode and cathode are purged with inert gas according to a preset number of purging cycles, including: acquiring real-time status information of the anode and cathode during each purging cycle; determining the type of safety risk present in the anode and cathode based on the real-time status information; selecting a target purging measure from increasing or decreasing the duration of a single purging cycle and increasing or decreasing the number of purging cycles based on the type of safety risk, wherein the target purging measure can provide a better solution for the type of safety risk; and purging the anode and cathode with inert gas according to the target purging measure in the next purging cycle.

[0023] By identifying the type of safety risk based on real-time status information during each purging and dynamically adjusting the duration or number of subsequent purgings to match the current risk, the problem that fixed purging strategies cannot adapt to different fault scenarios and lead to insufficient or excessive purging for specific risks can be solved. This enables the purging process to be more precise and adaptive, optimizing gas source utilization efficiency while ensuring safety.

[0024] The second aspect of this application provides a fuel cell emergency stop processing device, comprising: a gas exchange module, used to switch the gas supply to the anode and cathode of the fuel cell stack to inert gas in response to an emergency stop command of the fuel cell system; a pressure regulating module, used to supply gas with inert gas or vent gas from the anode and cathode, adjusting the pressure of the anode and cathode from the current operating pressure to a preset purging pressure, wherein the purging pressure is greater than or equal to the minimum pressure value that allows gas replacement in the anode and cathode; and a purging module, used to purge the anode and cathode with inert gas when the pressure of the anode and cathode reaches the purging pressure, until the fuel cell reaches the emergency stop safety standard.

[0025] A third aspect of this application provides a computer device including a memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the method of the first aspect.

[0026] A fourth aspect of this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method of the first aspect.

[0027] The fifth aspect of this application provides a computer program product, including a computer program that, when executed by a processor, implements the method of the first aspect.

[0028] The fuel cell emergency stop processing device provided in the second aspect of this application, the computer equipment provided in the third aspect, the computer-readable storage medium provided in the fourth aspect, and the computer program product provided in the fifth aspect have the same or similar beneficial effects as the fuel cell emergency stop processing method provided in the first aspect. Attached Figure Description

[0029] The above and other objects, features, and advantages of exemplary embodiments of this application will become readily understood by reading the following detailed description with reference to the accompanying drawings. In the drawings, several embodiments of this application are illustrated by way of example and not limitation, with the same or corresponding reference numerals denoteing the same or corresponding parts, wherein: Figure 1 This is a schematic diagram illustrating the application scenario of the fuel cell emergency stop processing method in the embodiments of this application; Figure 2 This is a flowchart illustrating the fuel cell emergency stop processing method in the embodiments of this application. Figure 1 ; Figure 3 This is a flowchart illustrating the fuel cell emergency stop processing method in the embodiments of this application. Figure 2 ; Figure 4 This is a schematic diagram of the fuel cell emergency stop processing device in the embodiments of this application. Figure 1 ; Figure 5This is a schematic diagram of the fuel cell emergency stop processing device in the embodiments of this application. Figure 2 ; Figure 6 This is a schematic diagram of the structure of the computer device in the embodiments of this application. Detailed Implementation

[0030] Exemplary embodiments of this application will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of this application are shown in the drawings, it should be understood that this application may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of this application and to fully convey the scope of this application to those skilled in the art.

[0031] It should be noted that, unless otherwise stated, the technical or scientific terms used in this application shall have the ordinary meaning as understood by one of ordinary skill in the art to which this application pertains.

[0032] It should be noted that the user data, data acquisition, and / or use involved in the embodiments of this application strictly comply with the laws, regulations, and industry standards of relevant countries and regions. The collection and acquisition of data involved in the embodiments of this application are all done in advance by actively prompting or prominently displaying information to inform users and obtaining authorization, or by obtaining full authorization from all parties. The processing, manipulation, forwarding, and use of data involved in the embodiments of this application are all carried out on the premise that the user or relevant party is fully informed and authorized. In implementing the various embodiments of this application, the types of data or information, scope of use, and usage scenarios that may be involved are informed to users or relevant parties and authorization is obtained through appropriate means. The specific methods of notification and authorization may vary according to the actual situation, and this application is not limited in this regard. The processing of personal information involved in the embodiments of this application is carried out under the premise of having a legal basis (such as obtaining the consent of the personal information subject or being necessary for the performance of a contract), and is only processed within the prescribed or agreed scope. Sensitive personal information such as biometric information, medical and health information, financial account information, and precise location information involved in the embodiments of this application are all processed under the premise of having a specific purpose and sufficient necessity, and with the separate authorization and consent of the user or relevant party. In some embodiments of this application, if the user or related party refuses to process personal information other than the information necessary for the basic functions, it will not affect the use of the basic functions of the embodiments of this application.

[0033] Traditional fuel cell emergency shutdown employs a brutal shutdown strategy that directly cuts off the hydrogen and oxygen supply and shuts down all actuators. This results in the inability to expel residual high-risk gases inside the stack, posing a risk of combustion and explosion; pressure runaway causing mechanical damage to the membrane electrode assembly; and uncontrolled reactions leading to high temperatures and potentials that accelerate stack degradation and pose a risk of electric shock.

[0034] The root of the aforementioned technical problems lies in the fact that traditional emergency stop strategies adopt a passive shutdown approach, forcing the system to shut down by simply cutting off energy and power input. However, they ignore the fact that after the cut-off, the inside of the fuel cell stack is still a complex chemical-physical system filled with reactive gases and in a non-equilibrium state. The residual hydrogen and oxygen-rich bodies will continue to undergo uncontrolled reactions, leading to loss of control over key parameters such as pressure, temperature, and potential, thereby causing safety and durability issues.

[0035] In view of this, embodiments of this application provide a fuel cell emergency stop processing method, a fuel cell emergency stop processing device, a computer device, a computer-readable storage medium, and a computer program product. By abandoning the traditional passive shutdown mode of directly cutting off the gas supply after an emergency stop is triggered, the gas supply to the anode and cathode of the fuel cell stack is actively switched to inert gas. Using this inert gas as the working medium, through coordinated closed-loop control of gas supply and exhaust, the anode and cathode pressures are smoothly and controllably adjusted from the working state to a preset purging pressure. Then, under the condition of maintaining this pressure, the anode and cathode are continuously purged and replaced. By using inert gas to quickly establish a safe atmosphere and maintain the controllability of pressure and pressure difference, the problems of residual high-risk gases, uncontrolled pressure fluctuations, and continuous uncontrolled reactions are fundamentally solved, achieving a technological leap from passive shutdown to active safe shutdown under emergency stop conditions.

[0036] First, the application scenarios of the fuel cell emergency stop processing method provided in the embodiments of this application will be described.

[0037] Figure 1 This is a schematic diagram illustrating the application scenario of the fuel cell emergency stop handling method in the embodiments of this application. See [link / reference]. Figure 1 As shown, this scenario may include: a fuel cell system.

[0038] In practical applications, fuel cells can be various types of fuel cells, such as oxygen-enriched fuel cells, proton exchange membrane fuel cells, direct methanol fuel cells, phosphoric acid fuel cells, molten carbonate fuel cells, and solid oxide fuel cells, which have independent gas supply channels for the anode and cathode and can be replaced with inert gases.

[0039] A fuel cell system may include: a stack (including an anode and a cathode), gas supply lines (including a hydrogen supply line for the anode, a nitrogen supply line for the anode, an oxygen supply line for the cathode, and a nitrogen supply line for the cathode), proportional valves (including an anode hydrogen proportional valve, an anode nitrogen proportional valve, a cathode oxygen proportional valve, and a cathode nitrogen proportional valve), and exhaust valves (including a cathode exhaust valve and an anode exhaust valve).

[0040] During normal operation of the fuel cell system, the anode hydrogen proportional valve and the cathode oxygen proportional valve are open, supplying hydrogen to the anode and oxygen to the cathode, respectively. The anode nitrogen proportional valve and the cathode nitrogen proportional valve are closed. The anode vent valve and the cathode vent valve open intermittently as needed for drainage or pressure control. When the system triggers an emergency stop command, the anode hydrogen proportional valve and the cathode oxygen proportional valve are immediately closed to cut off the hazardous gas source, while the anode nitrogen proportional valve and the cathode nitrogen proportional valve are opened simultaneously, switching the gas supply to both the anode and cathode to nitrogen. As the pressure drops from the operating pressure to the purging pressure, the pressure of the anode and cathode is independently regulated through the closed-loop coordination of the anode nitrogen proportional valve and the anode vent valve, and the closed-loop coordination of the cathode nitrogen proportional valve and the cathode vent valve. When the pressure reaches the purging pressure, the anode vent valve and the cathode vent valve are opened intermittently for drainage and purging, and nitrogen is replenished through the corresponding nitrogen proportional valve when the pressure drops, until nitrogen sealing of the anode and cathode is completed. This completes the safe shutdown and inert atmosphere sealing process of the entire fuel cell system.

[0041] Next, the fuel cell emergency stop processing method provided in the embodiments of this application will be described in detail.

[0042] Figure 2 This is a flowchart illustrating the fuel cell emergency stop processing method in the embodiments of this application. Figure 1 See Figure 2 As shown, the method may include: S21: In response to the emergency stop command of the fuel cell system, the gas supply to the anode and cathode of the fuel cell stack is switched to inert gas.

[0043] The controller in the fuel cell system (such as the vehicle controller, fuel cell system controller, or dedicated safety control unit) monitors sensor signals (such as voltage, pressure, temperature, gas concentration, etc.) and external safety interlock signals in real time. When it detects that the parameters exceed the safety threshold, the critical component fails, or the emergency stop button is triggered, it can identify the emergency stop condition and generate an emergency stop command. Then, according to the preset control logic, it sends action commands to the actuators such as proportional valves and exhaust valves to complete the entire emergency stop process.

[0044] An emergency stop command is a high-priority safety control command generated by a fuel cell system when it detects a serious fault or receives an external emergency signal. In practical applications, it is usually manifested as a flag bit inside the controller (such as emergency_stop_flag=1) or a set of hard-wired signals issued simultaneously to immediately cut off the dangerous gas source and initiate the safe shutdown process.

[0045] Upon receiving an emergency stop command, the controller first sends a shut-off signal to the drive circuits of the anode hydrogen proportional valve and the cathode oxygen proportional valve, cutting off the supply of hydrogen and oxygen. Simultaneously, or according to a preset sequence, it sends an open signal to the anode nitrogen proportional valve and the cathode nitrogen proportional valve, allowing inert gas to enter the anode and cathode flow channels through the gas supply lines.

[0046] The inert gas referred to here is a chemically inert gas that does not react with hydrogen, oxygen, or electrode materials at the fuel cell operating temperature. Specifically, it can include nitrogen (N2), argon (Ar), helium (He), carbon dioxide (CO2), or mixtures thereof. Among these, nitrogen is the preferred embodiment due to its wide availability, low cost, and high safety.

[0047] S22: By supplying inert gas or venting the anode and cathode, the pressure of the anode and cathode is adjusted from the current working pressure to a preset purging pressure, and the purging pressure is greater than or equal to the minimum pressure value that allows gas replacement in the anode and cathode.

[0048] If the fuel cell system is operating under medium to high load conditions, such as when a vehicle is climbing a hill, operating at full power, or when a stationary power station is generating power at its rated capacity, the controller will typically maintain high anode hydrogen pressure and cathode oxygen pressure to meet the high current output demand. These pressure values ​​are usually significantly higher than the preset purging pressure for safe purging, resulting in a situation where the operating pressure exceeds the purging pressure. To address this, the controller actively vents the anode and cathode to lower the pressure, reducing the anode and cathode pressures from the operating pressure to the purging pressure.

[0049] If the fuel cell system is operating under low load or idling conditions, such as when a vehicle is coasting, idling, or in a stationary power station standby mode, the controller typically maintains the pressure of hydrogen at the anode and oxygen at the cathode at a low level to match the extremely low output current demand. This pressure may be lower than the preset purging pressure for safe replacement, resulting in a situation where the operating pressure is lower than the purging pressure. To address this, the controller actively replenishes gas to the anode and cathode to increase the pressure. This is achieved by opening the corresponding inert gas proportional valve, supplying inert gas into the anode and cathode channels, thus raising the anode and cathode pressures from the current lower pressure to the purging pressure.

[0050] If the fuel cell system is operating under specific steady-state conditions, such as when the system is at an intermediate load point where the pressure setpoint is equal to the purging pressure, or when the pressure has been pre-adjusted to near the purging pressure by some control logic before an emergency stop, then the current operating pressures of the anode and cathode may be exactly equal to the preset purging pressure. In this case, the controller does not need to adjust the pressure upwards or downwards; instead, it skips the pressure regulation phase and immediately enters the purging phase.

[0051] During the pressure regulation phase, the controller dynamically generates the target pressure value for each moment based on a preset pressure-time curve. This target pressure changes linearly or non-linearly over time from the initial working pressure until the purging pressure is reached. To accurately track this target curve, the controller employs a closed-loop control strategy that coordinates gas supply and exhaust, acquiring the actual pressure of the anode and cathode in real time. When the actual pressure is higher than the target pressure at the current moment, the exhaust valve on the corresponding side is opened to release pressure, causing the pressure to drop back to the target value. When the actual pressure is lower than the target pressure at the current moment, the inert gas proportional valve on the corresponding side is opened to replenish gas, causing the pressure to rise back to the target value. Throughout the regulation process, exhaust and gas supply are not used in isolation, but are dynamically switched and alternated according to the deviation between the actual pressure and the target pressure. This ensures that the anode and cathode pressures always closely follow the preset curve and change smoothly. This avoids excessive pressure differential caused by excessively rapid pressure drop due to exhaust alone, and also prevents pressure overshoot or gas waste caused by replenishing gas alone, thus establishing a stable and controllable pressure foundation for subsequent purging and replacement.

[0052] The purging pressure here refers to the target pressure value maintained when purging and replacing the anode and cathode with inert gas after an emergency stop. This pressure value is set to be greater than or equal to the minimum pressure value that allows gas replacement in the anode and cathode. This is because: if the purging pressure is lower than this minimum pressure threshold, the gas flow rate in the anode and cathode chambers will be too low to form effective turbulence or convection, resulting in the residual hydrogen and oxygen not being sufficiently diluted and discharged by the inert gas, significantly reducing the replacement efficiency, and even potentially creating a purging dead zone; conversely, maintaining the purging pressure above this minimum pressure value ensures that the gas has sufficient flow rate and driving force in the flow channel, allowing the inert gas to quickly mix with the residual gas and carry it out of the fuel cell stack, thereby achieving a highly efficient and thorough replacement effect, while avoiding gas waste or additional load on the fuel cell stack sealing structure due to excessive pressure.

[0053] In practical applications, the optimal purging pressure setting is the minimum stable pressure value that is slightly higher than atmospheric pressure and can maintain effective gas flow, typically selected within the range of 20 kPa to 100 kPa (gauge pressure). This ensures sufficient gas flow rate within the anode and cathode chambers to fully replace residual hydrogen and oxygen, while avoiding gas waste, increased sealing load, and additional mechanical stress on the fuel cell structure caused by excessive pressure. Simultaneously, it ensures that the pressure fluctuations during purging remain above ambient pressure, preventing external air from flowing back into the fuel cell and creating secondary safety hazards, thus achieving an optimal balance between replacement efficiency, economy, and safety.

[0054] S23: When the pressure of the anode and cathode reaches the purging pressure, inert gas is used to purge the anode and cathode until the fuel cell reaches the emergency stop safety standard.

[0055] The controller collects the actual pressure values ​​of the anode and cathode in real time through pressure sensors and compares them with the preset purging pressure threshold. When the actual pressure of the anode is detected to be consistently stable within the allowable error range of the purging pressure threshold, and the actual pressure of the cathode is also stable within this range, the controller determines that the pressure of the anode and cathode has reached the purging pressure, and then ends the pressure regulation stage and enters the purging stage.

[0056] During the purging phase, the controller keeps the anode nitrogen proportional valve and the cathode nitrogen proportional valve open, allowing inert gas to continuously flow through the anode and cathode chambers, gradually diluting and carrying away any residual hydrogen and oxygen from the fuel cell stack. Simultaneously, the controller uses pressure closed-loop control to dynamically adjust the proportional valve opening or coordinate with the exhaust valve as gas continues to flow out, ensuring that the anode and cathode pressures remain stable near the purging pressure.

[0057] By gradually removing residual hydrogen from the anode chamber and residual oxygen from the cathode chamber through gas replacement, the fuel cell reaches the emergency stop safety standard. At this point, the controller determines that the purging is complete and terminates the gas supply, and the system officially enters the safe storage state.

[0058] The fuel cell reaching the emergency stop safety standard here means that after the fuel cell system has been purged with inert gas, its state has met the preset safety judgment conditions, and it can safely enter the shutdown and storage or fault investigation stage. Specifically, this standard usually includes one or more of the following conditions: the concentrations of hydrogen and oxygen in the anode and cathode chambers have both dropped to safe thresholds below the explosion limits; the anode and cathode pressures have been stably maintained near the purging pressure and the pressure difference has been continuously less than the maximum allowable value; the total voltage of the stack has dropped below the safe voltage; the internal temperature of the stack has dropped to a safe range, etc.

[0059] It should be noted that in the above control process, for the opening degree of each proportional valve and exhaust valve, the controller uses the purging pressure as the given value and the actual anode or cathode pressure fed back in real time by the pressure sensor as the controlled variable. It calculates the deviation using a Proportional-Integral-Derivative (PID) algorithm and outputs a control signal to dynamically adjust the opening degree of the proportional valve (e.g., 0-100% duty cycle or analog control) to achieve precise air replenishment. For the exhaust valve, on / off control or Pulse Width Modulation (PWM) control is used. The valve opening duration or duty cycle is determined according to the pressure deviation to achieve pressure relief. This pressure feedback-based PID+PWM control strategy is a mature and conventional technique in industrial process control. Those skilled in the art can determine specific control parameters (such as PID coefficients, PWM frequency, etc.) through calibration experiments based on system response characteristics (such as volume size, pipeline resistance, etc.), thereby achieving rapid, stable, and error-free precise pressure control.

[0060] As can be seen from the above, the fuel cell emergency stop handling method provided in this application, after the emergency stop is triggered, switches the gas supply to both the anode and cathode of the fuel cell stack to inert gas, and actively regulates the gas supply or exhaust using inert gas to smoothly control the anode and cathode pressures from the working pressure to the preset purging pressure. Then, under the condition of maintaining this pressure, the anode and cathode are purged and replaced with inert gas. This can solve the safety risks of high concentrations of hydrogen and oxygen remaining in the anode and cathode cavities and the formation of a high-risk gas environment caused by directly cutting off the gas supply in the traditional emergency stop method, as well as the problems of excessive transmembrane pressure difference causing damage to the membrane electrode due to pressure runaway, and the accelerated fuel cell stack decay caused by prolonged high temperature and high potential, which brings the risk of electric shock. In this way, it can significantly improve the inherent safety of the fuel cell system under emergency stop conditions, the durability of the fuel cell stack, and the operability and personnel safety of subsequent fault diagnosis.

[0061] Furthermore, as a response to Figure 2 In a refinement and extension of the method shown, this application also provides a fuel cell emergency stop processing method.

[0062] Figure 3 This is a flowchart illustrating the fuel cell emergency stop processing method in the embodiments of this application. Figure 2 See Figure 3 As shown, the method may include: S31: In response to the emergency stop command of the fuel cell system, the gas supply to the anode and cathode of the fuel cell stack is switched to inert gas.

[0063] Step S31 here is the same as the specific implementation of step S21 in the previous embodiment, and can be found in the relevant description in the previous embodiment, which will not be repeated here.

[0064] S32: By supplying gas with inert gas or venting the anode and cathode, and adjusting the pressure of the anode and cathode from the current working pressure to the preset purging pressure according to the preset pressure-time curve, real-time status information of the anode and cathode is obtained; when it is determined that there is a safety risk to the anode and cathode based on the real-time status information, the current pressure in the pressure-time curve is determined to be reduced or increased based on the real-time status information; based on the reduced or increased pressure, the pressure of the anode and cathode is adjusted to the preset purging pressure.

[0065] The preset pressure-time curve refers to a function curve or data sequence stored inside the controller that characterizes the change of target pressure over time. It is derived from empirical data or theoretical models obtained from calibration tests based on stack safety and system response capabilities.

[0066] The controller reads the internally stored preset pressure-time curve, using this curve as the control reference. Based on the current moment, it reads the corresponding target pressure value from the curve and compares it with the actual anode and cathode pressures fed back by the pressure sensors. When the actual pressure is higher than the target pressure, the controller opens the corresponding exhaust valve to release pressure. When the actual pressure is lower than the target pressure, the controller opens the corresponding inert gas proportional valve to replenish gas. This closed-loop regulation based on real-time deviation drives the anode and cathode pressures to dynamically change along the preset curve, ensuring a synchronous and smooth transition from operating pressure to purging pressure.

[0067] However, if a safety risk arises due to unexpected events such as sudden leakage, valve jamming, or sensor malfunction, the fixed preset pressure-time curve can no longer guarantee the safety of the fuel cell stack. Therefore, it is necessary to dynamically adjust the current target pressure value based on real-time risk information (such as pausing pressure reduction, maintaining the current pressure, or reverse pressure increase) to prioritize risk control and prevent the accident from escalating. Pressure adjustment to the purging pressure can be completed after the risk is eliminated.

[0068] Therefore, during the process of adjusting the pressure of the anode and cathode from the current working pressure to the preset purging pressure according to the preset pressure-time curve, it is also necessary to obtain the real-time status information of the anode and cathode. The real-time status information includes, but is not limited to: pressure value, pressure difference value (pressure difference between the anode and cathode), temperature value (anode inlet temperature, cathode inlet temperature and internal temperature of the fuel cell stack), gas concentration, voltage value (total voltage of the fuel cell stack and voltage of each individual cell), and valve status.

[0069] When a safety risk is determined to exist at the anode and cathode based on real-time status information, the pressure at the current pressure in the pressure-time curve is determined to be reduced or increased based on the real-time status information. Then, based on the reduced or increased pressure, the pressure at the anode and cathode is adjusted to the preset purging pressure.

[0070] The safety risks here may include, but are not limited to: the pressure difference between the anode and cathode exceeding the preset safety threshold, abnormal voltage of a single cell (such as reverse polarity or overvoltage), excessive pressure fluctuations, detection of hydrogen or oxygen leakage in gas concentration, abnormal temperature rise, etc., which may lead to combustion and explosion, damage to membrane electrodes or stack damage, and other emergencies.

[0071] The controller compares real-time data such as anode pressure, cathode pressure, differential pressure, single-chip voltage, and temperature with their respective preset safety thresholds. When any data exceeds its safety threshold, a safety risk is identified for both the anode and cathode. For example, if the controller detects that the difference between the anode and cathode pressure consistently exceeds the preset maximum allowable differential pressure, it means that the membrane electrode is experiencing excessive transmembrane shear force. Without timely intervention, this could lead to membrane rupture, thus indicating a safety risk.

[0072] Next, the controller identifies the specific status information and severity of the triggered risk. Then, based on the preset risk-response mapping rules, it determines whether the target pressure on the current pressure-time curve needs to be temporarily maintained, appropriately reduced, or increased in the opposite direction. For example, when the controller detects that the pressure difference between the anode and cathode exceeds 20 kPa and is still increasing, it means that the membrane electrode is experiencing excessive shear stress. At this time, the controller immediately pauses the execution of the original pressure reduction curve, locks the current target pressure near the current actual pressure value, and prioritizes depressurization by opening the exhaust valve on the side with higher pressure to reduce the pressure difference. After the pressure difference falls back to a safe range (such as below 10 kPa), the controller resumes pressure adjustment to the purge pressure according to the original curve or the corrected curve.

[0073] Specifically, for the latter, step S32 may include: S32a: Calculate the pressure difference between the pressure after reduction or increase and the pressure at the same time in the preset pressure-time curve; S32b: Starting from the pressure at the same time in the preset pressure-time curve, increase or decrease the pressure difference at each pressure to obtain a new pressure-time curve; S32c: Adjust the pressure of the anode and cathode to the preset purging pressure according to the new pressure-time curve.

[0074] For example, suppose the preset pressure-time curve is a straight line that linearly decreases from 150 kPa (working pressure) to 50 kPa (purge pressure) over a period of 10 seconds, with a target pressure of 100 kPa at the 5th second. If, at the 5th second, a safety risk is detected, the controller temporarily adjusts the current target pressure to 110 kPa, then the calculated pressure difference is +10 kPa. The controller then, starting from the 5th second, increases the pressure value at all time points after the 5th second of the original curve by 10 kPa, forming a new pressure-time curve. For example, the original pressure at the 6th second was 90 kPa, and the new curve becomes 100 kPa. The original pressure at the 8th second was 70 kPa, and the new curve becomes 80 kPa. The original pressure at the 10th second (purge pressure) was 50 kPa, and the new curve becomes 60 kPa. The controller then continues to perform pressure regulation according to this new curve, which is shifted upwards by 10 kPa overall, gradually decreasing from 110 kPa at the 5th second until the preset purge pressure of 50 kPa is finally reached.

[0075] In addition to the above curve shifting and correction, segmented reconfiguration control can also be used. Specifically, after detecting a safety risk and dynamically adjusting the current target pressure, the controller no longer uses the original preset pressure-time curve. Instead, it generates a new pressure-time curve based on the adjusted current pressure as the starting point and the purge pressure as the ending point, according to the current system state. This new curve can be dynamically generated based on the preset maximum allowable pressure reduction rate, maximum allowable pressure increase rate, and safety time constraints corresponding to the risk level, ensuring a smooth transition of pressure from the current value to the purge pressure. This completely eliminates the constraints of the original curve, allowing for the planning of the optimal pressure transition path according to the real-time state, improving the adaptability and control flexibility of the emergency stop pressure adjustment process. It is particularly suitable for complex scenarios with diverse risk types and significant changes in system dynamic characteristics.

[0076] When regenerating a new pressure-time curve, the current actual pressure value is used as the starting point, and the preset purge pressure is used as the ending point. Based on this, the total allowable pressure regulation time is determined according to the currently identified safety risk level. Higher risk levels require faster regulation before purge, thus requiring a shorter total time; conversely, lower risk levels allow for a longer regulation time to ensure stability. Subsequently, based on the system's preset maximum allowable pressure drop rate and maximum allowable pressure rise rate—two hard constraints—a smooth pressure transition path is planned between the starting and ending points. For example, if the current pressure is higher than the purge pressure, a linearly or exponentially decaying pressure curve will be designed, limited by not exceeding the maximum allowable pressure drop rate. Simultaneously, the total duration of the entire curve is ensured not to exceed the upper limit of the safe time corresponding to the risk level. Finally, a new pressure-time curve is generated that satisfies both the rate constraints and completes regulation within the specified time, for subsequent pressure regulation.

[0077] If an abnormal voltage is detected in a single cell of the stack during the voltage reduction process (such as excessively high, low, or reverse polarity), it indicates that a serious fault has occurred inside the stack, such as local reaction runaway or hydrogen starvation. At this time, conventional pressure regulation alone cannot quickly eliminate the risk of continuous damage caused by the electrochemical reaction. Therefore, it is necessary to simultaneously open the inert gas supply and the corresponding exhaust valve of the opposite polarity to quickly replace the local high-risk gas and establish an inert atmosphere, thereby immediately suppressing the electrochemical reaction and protecting the single cell.

[0078] S33: When an abnormal voltage is detected in a single cell of the fuel cell stack, inert gas is supplied, and the anode and cathode are vented simultaneously to adjust the pressure of the anode and cathode from the current working pressure to the preset purging pressure.

[0079] The voltage of each cell in the fuel cell stack can be acquired in real time by a battery voltage monitoring module. This module typically consists of a multi-channel differential amplifier, an analog-to-digital converter, and an isolated communication circuit. It is connected to the positive and negative terminals of each cell in the fuel cell stack and obtains the real-time voltage value of each cell at a millisecond-level sampling frequency.

[0080] The collected voltage of each chip is compared with the preset normal operating range and the average voltage of adjacent chips. When any chip voltage is detected to be below the undervoltage threshold, above the overvoltage threshold, negative voltage (reverse polarity), or the deviation from the voltage of adjacent chips exceeds the allowable difference or the voltage drop rate exceeds the safety limit, it can be determined that there is an abnormal chip voltage.

[0081] When an abnormal voltage is detected in a single cell of the fuel cell stack, on the one hand, inert gas is continuously supplied to the electrode (anode or cathode) where the abnormal cell is located to dilute the local residual reaction gas and remove the reaction heat. On the other hand, the corresponding exhaust valve on that side is opened simultaneously to quickly discharge the gas containing high concentrations of hydrogen or oxygen from the fuel cell stack.

[0082] Through this coordinated operation of supplying and draining simultaneously, a rapid gas replacement flow field is formed in the abnormal area, which quickly reduces the local reactant concentration, inhibits electrochemical reactions, and lowers the local temperature, thereby preventing further deterioration of the abnormal single cell and protecting the overall safety of the stack. At the same time, pressure closed-loop control is maintained during this process to ensure that the anode and cathode pressures smoothly transition to the purging pressure.

[0083] S34: When the pressure of the anode and cathode reaches the purging pressure, the anode and cathode are purged with inert gas according to the preset number of purging cycles.

[0084] During the purging process, not only can continuous purging be performed at once, but intermittent purging can also be used, that is, purging is performed according to a preset number of purging cycles.

[0085] The number of purging cycles here is the minimum reliable number of replacements determined through extensive prior calibration tests, sufficient to reduce the concentrations of residual hydrogen and oxygen in the anode and cathode cavities below the safe threshold. Each purging process removes a portion of the residual gas from the cavity and dilutes and fills it with inert gas. After a preset number of repeated replacements, the hydrogen and oxygen concentrations in the cavity are gradually reduced to below the explosion limit, while the moisture in the fuel cell stack is also fully removed. The anode and cathode atmosphere is completely occupied by inert gas, and the pressure stabilizes near the purging pressure. At this point, the system state meets the core conditions required by the emergency stop safety standard: no risk of combustion or explosion, no risk of high-voltage electric shock, and no continued electrochemical reaction. Therefore, using a preset number of purging cycles as the purging completion standard allows for reliable emergency stop safety through simple counting logic, reducing system cost and control complexity.

[0086] The controller periodically opens the anode and cathode exhaust valves at preset time intervals, each opening lasting a preset duration, allowing residual hydrogen and oxygen in the chamber to be expelled along with the inert gas. Simultaneously, the controller continuously replenishes inert gas through the anode and cathode nitrogen proportional valves, maintaining a stable pressure near the purging pressure. After each purging cycle, the controller increments the purging count counter. When the accumulated count reaches a preset threshold, the purging is considered complete, and the system enters an emergency stop safety state.

[0087] The aforementioned preset time interval and preset duration can be determined by calibration tests on the flow channel volume, inert gas flow rate and replacement efficiency of a specific fuel cell system to ensure that the residual hydrogen concentration at the anode and cathode can be reduced to below the safe threshold within the set number of purging cycles.

[0088] If a leak, water residue, or abnormal reaction occurs during the purging process using a preset number of purging cycles, the fixed number of purging cycles may not be sufficient to guarantee safety. Therefore, it is necessary to adjust the duration or total number of subsequent purging cycles to specifically strengthen the handling of specific risks.

[0089] Specifically, step S34 above may include: S34a: Acquire real-time status information of the anode and cathode during each purging.

[0090] The real-time status information here may include, but is not limited to: real-time pressure values ​​of the anode and cathode, the pressure difference between the anode and cathode, the total voltage of the fuel cell stack and the voltage of each individual cell, the gas concentration at the anode and cathode vents, the internal temperature of the fuel cell stack, and the feedback status of each proportional valve and vent valve. This information can be used to determine whether there are safety risks during the purging process, such as incomplete gas replacement, abnormal pressure, persistent localized reactions, or equipment malfunctions.

[0091] S34b: Determine the type of safety risk present at the anode and cathode based on real-time status information.

[0092] In determining the type of safety risk, real-time collected status information such as anode pressure, cathode pressure, differential pressure, single-cell voltage, temperature, and gas concentration are compared and logically judged with a preset safety risk feature database to determine the specific type of safety risk. For example, if the anode hydrogen concentration is detected to be higher than the safety threshold after multiple purgings and the rate of decrease is lower than expected, it is determined to be a risk of insufficient replacement efficiency; if the differential pressure fluctuates continuously and exceeds the allowable range, it is determined to be a risk of differential pressure runaway; if the single-cell voltage is abnormal and accompanied by a local temperature increase, it is determined to be a risk of local reaction persistence.

[0093] Safety risk types refer to the classification and identification of specific safety hazards during emergency stop purging based on the characteristic patterns of real-time status information. These include, but are not limited to: insufficient replacement efficiency risks (slow decrease in hydrogen or oxygen concentration, such as hydrogen concentration remaining above 1% after multiple anode purgings), differential pressure runaway risks (continuous fluctuations and exceeding limits in the anode-cathode differential pressure, such as differential pressure exceeding 20 kPa and failing to converge), persistent local reaction risks (abnormal voltage on a single electrode accompanied by localized temperature rise, such as a single electrode voltage consistently above 0.8V and the corresponding area temperature rising by more than 5°C), residual water risks (abnormal drainage from the exhaust valve or severe pressure fluctuations, such as slow pressure recovery after each exhaust), and abnormal equipment response risks (valve feedback inconsistent with commands, such as no pressure change after the exhaust valve is opened). By identifying these risk types, the controller can adjust the purging strategy accordingly.

[0094] S34c: Based on the type of safety risk, select the target purging measure from increasing or decreasing the duration of a single purging and increasing or decreasing the number of purgings. The target purging measure can provide a better solution for the type of safety risk.

[0095] In addition to consulting users based on the type of safety risk to obtain target purging measures through user experience, the controller can also select target purging measures according to a preset risk-measure mapping rule based on the identified safety risk type. If the risk is determined to be insufficient replacement efficiency, the controller will increase the duration of each purging cycle to extend the gas replacement time, or increase the number of purging cycles for more replacements. If the risk is determined to be pressure differential runaway, the controller will decrease the duration of each purging cycle to avoid prolonged venting leading to increased pressure differential fluctuations, while increasing the number of purging cycles to gradually stabilize the pressure differential through multiple short venting cycles. If the risk is determined to be a localized persistent reaction, the controller will increase the duration of each purging cycle to fully remove reaction heat and residual gas, and if necessary, increase the number of purging cycles until the reaction is completely suppressed. If the risk is determined to be water residue, the controller will increase the duration of each purging cycle to ensure sufficient water removal. If the risk is determined to be abnormal equipment response, the controller will reduce the number of purging cycles and prioritize alarms to avoid forced purging under equipment failure conditions. Through targeted adjustments, optimal solutions can be achieved for different types of safety risks.

[0096] Targeted purging measures can provide a better solution for different types of safety risks. This means that after the controller identifies a specific risk type based on real-time status information, it selects a measure that matches the risk type from a variety of preset purging parameter adjustment strategies. This allows the adjusted purging parameters to directly address the cause or key influencing factors of the risk, thereby restoring the system state to a safe range more efficiently and accurately than another measure.

[0097] The specific values ​​for increasing or decreasing the duration of a single purging cycle and increasing or decreasing the number of purging cycles can be determined by conducting calibration tests for different types of safety risks, and then stored in the controller in advance to identify the minimum adjustment range that can effectively eliminate the risk.

[0098] S34d: In the next purging, the anode and cathode will be purged with inert gas in accordance with the target purging measures.

[0099] For example, if the controller detects a slow decrease in anode hydrogen concentration during purging but it remains above the safety threshold, it is considered a risk of insufficient replacement efficiency. In this case, the duration of a single purging cycle is increased (e.g., from the preset 2 seconds to 3 seconds) to extend the gas replacement time. If the anode-cathode pressure difference is detected to fluctuate continuously beyond 20 kPa and cannot converge, it is considered a risk of pressure difference runaway. In this case, the duration of a single purging cycle is reduced (e.g., from 2 seconds to 1 second) to avoid prolonged venting exacerbating the fluctuations. At the same time, the number of purging cycles is increased (e.g., from 5 to 8) to gradually stabilize the pressure difference through multiple short venting cycles. If an abnormal voltage is detected on a single chip accompanied by a localized temperature rise, it is considered a risk of persistent localized reaction. In this case, the duration of a single purging cycle is increased (e.g., from 2 seconds to 4 seconds) to fully remove the reaction heat, and the number of purging cycles is increased (e.g., from 5 to 10) until the voltage returns to normal. If a slow pressure recovery and abnormal drainage volume are detected after venting, it is determined to be a risk of residual water. In this case, the duration of each purging cycle should be increased (e.g., from 2 seconds to 3 seconds) to ensure that the water is fully discharged. If no pressure change is detected after the vent valve is opened, it is determined to be a risk of abnormal equipment response. In this case, the number of purging cycles should be reduced (e.g., from 5 to 2) and the alarm should be triggered first to avoid forced purging when the equipment is in a faulty state.

[0100] During the subsequent purging process, the controller continues to follow the adjusted target purging measures and re-acquires real-time status information after each purging for evaluation. If the risk has been eliminated, the preset parameters are restored or the purging is completed directly. If the risk still exists, dynamic adjustments are continued until all types of safety risks are resolved and the emergency stop safety standard is met, thus completing the entire purging process.

[0101] During the purging process, if the exhaust valve and the proportional valve are opened simultaneously, it may cause gas short circuit, low replacement efficiency, or excessive pressure fluctuation. Therefore, the exhaust valve can be opened first to actively release the residual gas, and the proportional valve can be opened to replenish the inert gas after the pressure drops, so as to ensure that each purging cycle can achieve efficient gas replacement and maintain stable pressure.

[0102] S35: Open the vent valves of the anode and cathode; when the current pressure of the anode and cathode is detected to be less than the purging pressure, open the proportional valves of the anode and cathode to replenish inert gas into the anode and cathode until the fuel cell reaches the emergency stop safety standard.

[0103] Once the anode and cathode pressures reach the purging pressure, the controller first opens the anode and cathode vent valves, allowing residual hydrogen, oxygen, and water vapor in the anode and cathode chambers to be expelled from the fuel cell stack along with the inert gas. At this point, the actual pressure at the anode and cathode decreases due to gas expulsion. The controller monitors the anode and cathode pressures in real time using pressure sensors. When the pressure at either electrode is detected to be lower than the purging pressure, the corresponding inert gas proportional valve is immediately opened. A PID algorithm dynamically adjusts the valve opening to replenish inert gas into the anode or cathode, causing the pressure to rise and stabilize near the purging pressure. The vent valve and proportional valve are then closed, completing one purging cycle. This process is repeated until the preset number of purging cycles or other emergency stop safety standards are met, ultimately achieving nitrogen sealing and safe shutdown of the anode and cathode.

[0104] During pressure regulation and purging, if the pressure difference between the anode and cathode exceeds the preset safety threshold due to uneven gas supply or exhaust, the membrane electrode will be subjected to excessive transmembrane shear stress, which may lead to membrane rupture in severe cases. Therefore, it is necessary to actively adjust the pressure difference to ensure that the pressure difference between the anode and cathode is always maintained within a safe range.

[0105] S36: When the pressure difference between the anode and cathode is greater than the preset pressure difference, adjust the pressure difference between the anode and cathode so that the pressure difference between the anode and cathode is equal to or less than the preset pressure difference.

[0106] The controller collects the actual pressure of the anode and cathode in real time through pressure sensors, and calculates the difference between them in each control cycle, i.e., pressure difference = |anode pressure - cathode pressure|. Then, the controller compares the calculated real-time pressure difference with the preset maximum allowable pressure difference threshold. When the real-time pressure difference continuously exceeds the threshold and the duration exceeds the preset confirmation time, it can be determined that the current pressure difference between the anode and cathode is greater than the preset pressure difference, and pressure difference regulation is triggered.

[0107] When adjusting the differential pressure, the vent valve on the side with higher pressure can be opened to release pressure, thereby improving the adjustment accuracy of the differential pressure control.

[0108] Specifically, step S36 above may include: S36a: Identify the target electrode with the highest current pressure from the anode and cathode.

[0109] The controller collects anode and cathode pressures in real time using pressure sensors and directly compares these two values ​​to determine which value is greater. For example, if the anode pressure reading is 150 kPa and the cathode pressure reading is 120 kPa, the logic that 150 > 120 can directly determine that the anode is the target electrode with the higher current pressure.

[0110] Alternatively, the controller first calculates the difference between the anode and cathode pressures, and then determines the sign of this difference. If the difference is greater than 0, it means the anode pressure is greater than the cathode pressure, and the anode is identified as the target electrode; if the difference is less than 0, it means the cathode pressure is greater than the anode pressure, and the cathode is identified as the target electrode; if the difference is equal to 0, it means the pressures on both sides are equal, and no adjustment is needed. This method can simultaneously obtain the pressure difference information, facilitating the calculation of subsequent adjustment ranges, thereby more smoothly and efficiently adjusting the pressure difference to a safe range and maximizing the protection of the membrane electrode.

[0111] S36b: Open the exhaust valve of the target electrode to release pressure.

[0112] In addition to opening the exhaust valve on the higher-pressure side for pressure relief, bidirectional pressure control can also be used. The controller no longer relies solely on unidirectional adjustment of the exhaust valve; instead, it simultaneously adjusts the inert gas proportional valve on the lower-pressure side to replenish gas, causing the pressure on the low-pressure side to quickly approach the high-pressure side, thereby reducing the pressure difference. Through bidirectional coordinated adjustment of high-pressure side pressure relief and low-pressure side gas replenishment, the pressure difference can be reduced more quickly, while avoiding excessively rapid pressure drops on one side that could lead to other control problems or reverse pressure differentials.

[0113] For example, suppose the anode pressure is 160 kPa and the cathode pressure is 120 kPa, with a pressure difference of 40 kPa, exceeding the preset safety threshold of 20 kPa. If only the anode vent valve is opened to release pressure, the anode pressure needs to drop from 160 kPa to 140 kPa to reduce the pressure difference to 20 kPa. During this process, the cathode pressure remains constant at 120 kPa. An excessively rapid decrease in anode pressure could lead to pressure fluctuations or control overshoot. However, with bidirectional pressure control, the controller simultaneously opens the anode vent valve to release pressure and moderately opens the cathode nitrogen proportional valve to replenish nitrogen to the cathode, raising the cathode pressure from 120 kPa to 130 kPa. At this point, the anode pressure only needs to drop from 160 kPa to 150 kPa to reduce the pressure difference to 20 kPa. Through the coordinated action of "high-pressure side pressure release and low-pressure side gas replenishment," the adjustment range is smaller, the response speed is faster, and the pressure changes on both sides are smoother. This allows for a more stable and efficient restoration of the pressure difference to the safe range, effectively protecting the membrane electrode from shear stress damage.

[0114] Finally, during emergency stop procedures, the fuel cell system needs to simultaneously regulate or purge the pressure at both the anode and cathode, while dynamically maintaining pressure differential balance between the two electrodes. This involves coordination between the proportional valves and vent valves at the anode and cathode, operating independently and in a cross-electrode coordinated manner. The specific coordination process is as follows: the controller executes three levels of operations in parallel within each control cycle. The first level is single-electrode pressure control: the anode controller independently decides the opening degree of the anode proportional valve or the opening / closing of the anode vent valve based on the deviation between the actual anode pressure and the target anode pressure. Similarly, the cathode controller independently decides the cathode proportional valve or the cathode vent valve. The second level is pressure differential monitoring: the controller calculates the difference between the anode and cathode pressures in real time and compares it with a preset pressure differential threshold. The third level is priority adjudication and coordinated output: When the differential pressure is within the safe range, the controller directly outputs the first-level single-pole control command; when the differential pressure exceeds the safe threshold, differential pressure control gains higher priority, and the controller corrects the first-level command. For example, if the anode pressure is higher than the cathode pressure and the differential pressure exceeds the limit, even if the anode currently needs gas replenishment, the controller may prioritize temporarily suspending anode gas replenishment or forcibly opening the anode vent valve to reduce the anode pressure. At the same time, it decides whether to open the cathode proportional valve for gas replenishment according to the strategy, until the differential pressure returns to the safe range before resuming single-pole control. Through a coordination mechanism that prioritizes independent control and differential pressure intervention, while realizing the pressure regulation / purging functions of each electrode, it ensures that the membrane electrode is always protected from damage by excessive transmembrane shear stress.

[0115] This concludes the description of the fuel cell emergency stop method provided in the embodiments of this application.

[0116] Based on the same inventive concept, this application also provides a fuel cell emergency stop processing device.

[0117] Figure 4 This is a schematic diagram of the fuel cell emergency stop processing device in the embodiments of this application. Figure 1 See Figure 4 As shown, the device may include: The ventilation module 41 is used to switch the gas supply to the anode and cathode of the fuel cell stack to inert gas in response to the emergency stop command of the fuel cell system.

[0118] The pressure regulating module 42 is used to supply gas with inert gas or to exhaust gas from the anode and cathode, adjusting the pressure of the anode and cathode from the current working pressure to a preset purging pressure. The purging pressure is greater than or equal to the minimum pressure value that allows gas replacement in the anode and cathode.

[0119] The purging module 43 is used to purge the anode and cathode with inert gas when the pressure of the anode and cathode reaches the purging pressure, until the fuel cell reaches the emergency stop safety standard.

[0120] Furthermore, as a response to Figure 4 In a refinement and extension of the illustrated device, this application also provides a fuel cell emergency stop processing device.

[0121] Figure 5 This is a schematic diagram of the fuel cell emergency stop processing device in the embodiments of this application. Figure 2 See Figure 5 As shown, the device may include: The ventilation module 51 is used to switch the gas supply to the anode and cathode of the fuel cell stack to inert gas in response to the emergency stop command of the fuel cell system.

[0122] The pressure regulating module 52 is used to supply gas via inert gas or to exhaust gas from the anode and cathode. During the process of adjusting the pressure of the anode and cathode from the current operating pressure to a preset purging pressure according to a preset pressure-time curve, it acquires real-time status information of the anode and cathode. When it is determined based on the real-time status information that there is a safety risk to the anode and cathode, it determines whether to decrease or increase the current pressure in the pressure-time curve based on the real-time status information. Based on the decreased or increased pressure, it adjusts the pressure of the anode and cathode to a preset purging pressure, which is greater than or equal to the minimum pressure value that allows gas replacement within the anode and cathode.

[0123] The pressure regulating module 52 is specifically used to calculate the pressure difference between the reduced or increased pressure and the pressure at the same time in the preset pressure-time curve; in the preset pressure-time curve, starting from the pressure at the same time, the pressure difference is increased or decreased at each pressure to obtain a new pressure-time curve; according to the new pressure-time curve, the pressure of the anode and the cathode is adjusted to the preset purging pressure.

[0124] The voltage regulating module 52 is also used to supply gas through the inert gas when an abnormal voltage of a single piece in the fuel cell stack is detected, and to exhaust gas from the anode and the cathode at the same time, so as to adjust the pressure of the anode and the cathode from the current working pressure to the preset purging pressure.

[0125] The purging module 53 is used to open the exhaust valves of the anode and cathode when the pressure of the anode and cathode reaches the purging pressure; when the current pressure of the anode and cathode is detected to be less than the purging pressure, the proportional valves of the anode and cathode are opened to replenish the inert gas into the anode and cathode until the fuel cell reaches the emergency stop safety standard.

[0126] The purging module 53 is also used to purge the anode and the cathode with the inert gas according to a preset number of purging cycles.

[0127] The purging module 53 is specifically used to acquire real-time status information of the anode and the cathode during each purging; determine the type of safety risk existing in the anode and the cathode based on the real-time status information; select a target purging measure from increasing or decreasing the duration of a single purging and increasing or decreasing the number of purgings based on the safety risk type, wherein the target purging measure can provide a better solution for the safety risk type; and in the next purging, purge the anode and the cathode with the inert gas according to the target purging measure.

[0128] The balancing module 54 is used to adjust the pressure difference between the anode and the cathode when the current pressure difference between the anode and the cathode is greater than the preset pressure difference, so that the pressure difference between the anode and the cathode is equal to or less than the preset pressure difference.

[0129] The balancing module 54 is specifically used to determine the target electrode with the higher current pressure from the anode and the cathode; and to open the exhaust valve of the target electrode to relieve pressure.

[0130] It should be noted that the description of the above device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects. For technical details not disclosed in the device embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0131] Based on the same inventive concept, this application also provides a computer device.

[0132] Figure 6 This is a schematic diagram of the structure of the computer device in an embodiment of this application. See also... Figure 6 As shown, the computer device may include: a memory 61, a processor 62, and a computer program stored on the memory 61, wherein the processor 62 executes the computer program to implement the methods described in the foregoing embodiments.

[0133] It should be noted that the description of the above computer device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects. For technical details not disclosed in the computer device embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0134] Based on the same inventive concept, embodiments of this application also provide a computer-readable storage medium. The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the methods described in the foregoing embodiments.

[0135] It should be noted that the description of the above computer-readable storage medium embodiments is similar to the description of the above method embodiments, and has similar beneficial effects. For technical details not disclosed in the computer-readable storage medium embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0136] Based on the same inventive concept, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the methods described in the foregoing embodiments.

[0137] It should be noted that the descriptions of the above computer program product embodiments are similar to those of the above method embodiments, and have similar beneficial effects. For technical details not disclosed in the computer program product embodiments of this application, please refer to the descriptions of the method embodiments of this application for understanding.

[0138] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A fuel cell emergency stop processing method, characterized in that, The method includes: In response to an emergency stop command from the fuel cell system, the gas supply to the anode and cathode of the fuel cell stack is switched to inert gas. By supplying gas with the inert gas or venting gas from the anode and cathode, the pressure of the anode and cathode is adjusted from the current working pressure to a preset purging pressure, wherein the purging pressure is greater than or equal to the minimum pressure value that allows gas replacement in the anode and cathode; When the pressure of the anode and the cathode reaches the purging pressure, the inert gas is used to purge the anode and the cathode until the fuel cell reaches the emergency stop safety standard.

2. The method according to claim 1, characterized in that, The method further includes: When the pressure difference between the anode and the cathode is greater than the preset pressure difference, the pressure difference between the anode and the cathode is adjusted so that the pressure difference between the anode and the cathode is equal to or less than the preset pressure difference.

3. The method according to claim 2, characterized in that, The adjustment of the pressure difference between the anode and the cathode includes: Determine the target electrode with the highest current pressure from the anode and the cathode; Open the vent valve of the target pole to release pressure.

4. The method according to any one of claims 1 to 3, characterized in that, Adjusting the pressure of the anode and the cathode from the current operating pressure to a preset purging pressure includes: During the process of adjusting the pressure of the anode and the cathode from the current working pressure to the preset purging pressure according to the preset pressure-time curve, the real-time status information of the anode and the cathode is obtained. When it is determined that there is a safety risk to the anode and the cathode based on the real-time status information, it is determined whether to reduce or increase the current pressure in the pressure-time curve based on the real-time status information. Based on the reduced or increased pressure, the pressure of the anode and the cathode is adjusted to a preset purging pressure.

5. The method according to claim 4, characterized in that, The step of adjusting the pressure of the anode and the cathode to a preset purging pressure based on the reduced or increased pressure includes: Calculate the pressure difference between the reduced or increased pressure and the pressure at the same time in the preset pressure-time curve; In the preset pressure-time curve, starting from the pressure at the same time, the pressure difference is increased or decreased at each pressure to obtain a new pressure-time curve; According to the new pressure-time curve, the pressures of the anode and the cathode are adjusted to the preset purging pressure.

6. The method according to any one of claims 1 to 3, characterized in that, The method further includes: When an abnormal voltage is detected in a single cell of the fuel cell stack, the inert gas is supplied, and the anode and cathode are vented simultaneously, adjusting the pressure of the anode and cathode from the current operating pressure to a preset purging pressure.

7. The method according to any one of claims 1 to 3, characterized in that, The step of purging the anode and the cathode with the inert gas includes: Open the exhaust valves of the anode and the cathode; When the current pressure of the anode and the cathode is detected to be less than the purging pressure, the proportional valves of the anode and the cathode are opened to replenish the inert gas into the anode and the cathode.

8. The method according to any one of claims 1 to 3, characterized in that, The step of purging the anode and cathode with the inert gas until the fuel cell reaches the emergency stop safety standard includes: The anode and the cathode are purged using the inert gas according to a preset number of purging cycles.

9. The method according to claim 8, characterized in that, The step of purging the anode and the cathode with the inert gas according to a preset number of purging cycles includes: During each purging, real-time status information of the anode and the cathode is acquired; The type of safety risk present in the anode and the cathode is determined based on the real-time status information; Based on the aforementioned safety risk type, target purging measures are selected from increasing or decreasing the duration of a single purging and increasing or decreasing the number of purgings. The target purging measures can provide a better solution for the aforementioned safety risk type. In the next purging, the anode and the cathode are purged with the inert gas according to the target purging measures.

10. A fuel cell emergency stop processing device, characterized in that, The device includes: The ventilation module is used to switch the gas supply to the anode and cathode of the fuel cell stack to inert gas in response to the emergency stop command of the fuel cell system. The pressure regulating module is used to supply gas through the inert gas or to exhaust gas from the anode and the cathode, and to adjust the pressure of the anode and the cathode from the current working pressure to a preset purging pressure, wherein the purging pressure is greater than or equal to the minimum pressure value that allows gas replacement in the anode and the cathode; The purging module is used to purge the anode and cathode with the inert gas when the pressure of the anode and the cathode reaches the purging pressure, until the fuel cell reaches the emergency stop safety standard.

11. A computer device, comprising a memory, a processor, and a computer program stored in the memory, characterized in that, The processor executes the computer program to implement the steps of the method according to any one of claims 1 to 9.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 9.

13. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 9.

Images