A start-stop control and safety interlocking control method based on EMS and ESS systems

Abstract

The embodiment of the present application provides a start-stop control and safety interlocking control method based on an EMS and an ESS system, and the embodiment of the present application realizes remote starting of the EMS through six-step closed loop: the EMS sends a one-key reset command, receives an ESS ready state, sends a one-key standby command, receives an ESS standby state, sends a one-key start command, and receives an ESS running state; remote shutdown is realized through the EMS sending a one-key shutdown command and receiving an ESS shutdown state. Three-level control is adopted for charge and discharge safety protection. The embodiment of the present application realizes multi-level safety interlocking control through integration of a PLC controller, an EMS remote module and a fire-fighting execution unit, significantly improves the automation level and operation reliability of the marine container-type mobile power supply system, and simultaneously, through a time-sequencing operation chain and an electrical threshold interlocking mechanism, the safety and response reliability of the marine power supply system are significantly improved.

Description

Technical Field

[0001] This invention relates to the field of marine power system technology, and in particular to a start-stop control and safety interlock control method based on EMS and ESS systems. Background Technology

[0002] Currently, remote control of ESS (Energy Storage System) mostly adopts a one-way command transmission mode, lacking a closed-loop status feedback mechanism. This leads to operational response delays and risks of status misjudgment during startup / shutdown. At the same time, existing charging and discharging safety protection generally relies on a single threshold (such as direct shutdown when SOC exceeds the limit), without constructing a multi-level progressive current limiting control strategy. This makes it difficult to balance system efficiency and battery safety. Especially in the case of multiple clusters in parallel operation, the lack of coordinated consideration of parameters such as total current, cluster grid connection status (cluster de-clumping flag), and individual cell voltage balance can easily lead to overcharging / over-discharging or local thermal runaway, forcing maintenance personnel to frequently intervene and make adjustments. This seriously restricts the automation level and operational reliability of the ESS system.

[0003] EMS, ESS, and BMS are the three core components of a ship's energy storage system. They are clearly hierarchical and operate in coordination: ESS is the energy storage body, which is a hardware entity consisting of battery clusters, high-voltage boxes, temperature control systems, fire protection systems, etc., and mainly undertakes the function of storing electrical energy; BMS is the battery management system, deployed on the battery side, responsible for collecting data on individual cell voltage, temperature, and SOC, as well as basic protections such as overcharge, over-discharge, and overheating, and is the first line of defense for battery safety; EMS is the energy management system, located at the system scheduling layer, issuing charging and discharging commands and interlocking controls downwards, and connecting upwards to the ship's power station or the power grid to participate in energy allocation, and is the decision-making center of the entire energy storage system.

[0004] Meanwhile, ship energy storage systems (ESS systems) have long suffered from cumbersome operation and insufficient safety protection in the standby startup, pre-charge management, emergency shutdown, and fire control stages: traditional startup procedures require multiple manual switching between remote / local status and automatic mode, and lack a closed-loop feedback mechanism for the high-voltage box power-on status, which can easily lead to operational failures due to status misjudgment; the pre-charge process lacks dual-stack timing control and contactor action delay strategies, resulting in significant surge current impact risks; the disconnecting switch closing lacks voltage difference interlocking protection (existing systems generally ignore the voltage difference safety threshold of <30V), posing a risk of arc damage; during emergency stop response, the chiller unit is not controlled differently according to the mains / inverter power supply mode, and critical auxiliary equipment may shut down abnormally; the existing shutdown procedure lacks a three-level delayed current detection mechanism (especially the current <20A opening condition), which can easily cause arcing during disconnection; fire operation relies excessively on automatic triggering, lacks a manual priority mechanism and has no release delay buffer, which cannot guarantee the emergency evacuation time of personnel. Therefore, there is an urgent need for an energy management system that integrates a time-sequential operation chain, electrical threshold interlocking, and mode adaptive control to achieve intelligent protection throughout the entire process from vehicle standby to firefighting. Summary of the Invention

[0005] In view of the above-mentioned problems existing in the prior art, the present invention provides a start-stop control and safety interlock control method based on EMS and ESS systems to improve the automation level and operational safety of marine containerized mobile power systems.

[0006] This invention provides a start / stop control and safety interlock control method based on EMS and ESS systems: The ESS remote boot process includes, When the communication connection between EMS and ESS is normal, EMS sends a one-key reset control command to ESS. If ESS does not respond with a ready status, it checks and clears fault and alarm signals, and EMS continues to send one-key reset control commands. After ESS responds with a ready status, EMS sends a one-key standby control command to ESS. If ESS does not respond with a standby signal, EMS continues to send one-key standby control commands to ESS. If ESS completes standby and responds with a standby status, EMS sends a one-key start control command to ESS. If ESS does not respond with a running signal, EMS continues to send one-key start control commands to ESS. After ESS starts successfully, it reports the running status to EMS.

[0007] The ESS remote shutdown procedure includes, EMS sends a one-click shutdown control command to ESS. If ESS does not respond with a shutdown signal, EMS continues to send one-click shutdown control commands to ESS. After ESS completes the shutdown, it reports the shutdown status to EMS. The charging and discharging safety protection adopts a three-level control system. In discharge mode, the PLC controller collects real-time information of the battery system and sends alarm and current limiting information to the EMS. When the EMS receives a level 1 discharge current limiting alarm, it reduces the discharge power according to the preset value. When the EMS receives a level 2 discharge current limiting alarm, it further reduces the discharge power according to the preset value. When the EMS receives a discharge stop alarm, it reduces the discharge power to 0 and stops discharging. In charging mode, when the EMS receives a Level 1 charging current limit alarm, it reduces the charging power by a preset value; when the EMS receives a Level 2 charging current limit alarm, it further reduces the charging power by a preset value; when the EMS receives a charging stop alarm, it reduces the charging power to 0 and stops charging.

[0008] In one embodiment, the ESS remote start, ESS remote shutdown, and charge / discharge operations are all performed when the battery cluster is normally connected to the grid.

[0009] In one embodiment, The discharge current limiting level 1 alarm trigger condition is set as follows: the total current of the battery system ≤ -10A and the dual-cluster SOC ≤ 20% or the single-cluster SOC ≤ 15%; The discharge current limiting level 2 alarm trigger condition is set as follows: dual-cluster SOC ≤ 15% or single-cluster SOC ≤ 5%; The discharge stop alarm trigger condition is set to either a single-unit undervoltage level 2 alarm threshold or a voltage differential level 2 alarm threshold.

[0010] In one embodiment, After the discharge current limiting level 1 alarm is triggered, the discharge power drops to 0.2C; after the discharge current limiting level 2 alarm is triggered, the discharge power drops to 0.1C.

[0011] In one embodiment, The trigger condition for the Level 1 charging current limiting alarm is set as follows: total current ≥ 10A and dual-cluster SOC ≥ 90% or single-cluster SOC ≥ 95%; The trigger condition for the Level 2 charging current limiting alarm is set as follows: dual-cluster SOC ≥ 95% or single-cluster SOC ≥ 100%. The charging stop alarm trigger condition is set to either a single-unit overvoltage level 2 alarm threshold or a voltage differential level 2 alarm threshold.

[0012] In one embodiment, After the Level 1 charging current limiting alarm is triggered, the charging power drops to 0.2C; after the Level 2 charging current limiting alarm is triggered, the charging power drops to 0.1C.

[0013] In one embodiment, the battery system achieves multi-level safety control through a time-sequential operation chain and electrical threshold interlocking.

[0014] In one embodiment, The one-click vehicle preparation process includes: Switch the "Remote / Local" knob on the panel to remote mode and set the touch screen to automatic mode. After the one-click standby command is triggered, the high-voltage box is powered on via UDP command. After the cluster power-on status is fed back to the PLC for confirmation, the inverter power supply is started. The standby is detected and determined to be completed through the aviation plug connection and the indicator light is lit. After the ESS system starts up, it performs a pre-charge operation, the pre-charge operation process of which includes: Confirm that the panel displays the vehicle standby status, the ESS system is in use mode, and the DC socket is normal. First, perform pre-charge of stack 1, delay for 5 seconds to start pre-charge of stack 2, then close the pre-charge negative contactor and delay for 0.5 seconds to close the positive contactor.

[0015] In one embodiment, The shutdown of the ESS system includes remote emergency stop, normal shutdown, and emergency disconnection; When remotely controlled to stop, When the EMS sends a remote emergency stop signal, the ESS system responds to the EMS remote emergency stop signal by immediately disconnecting the isolating switch and controlling the chiller unit differently according to the power supply mode: when the mains power is supplied, the chiller unit is kept running, and when the inverter power is supplied, the chiller unit is stopped synchronously. During normal shutdown, The EMS issues a shutdown command, delays for 5 seconds to stop the inverter power supply, delays for another 5 seconds to power down the high-voltage box via a relay, and then delays for another 5 seconds to check if the absolute value of the stack current is less than 20A. If the condition is met, the isolating switch is disconnected via a time relay. If the stack current is ≥20A, the system is checked for high-power auxiliary equipment or whether all high-voltage boxes are powered down. After troubleshooting, the shutdown command issued by the ESS is executed again. During an emergency shutdown, the inverter power supply is stopped after a 5-second delay, and then the high-voltage box is de-energized via a relay after another 5-second delay. The absolute value of the stack current is continuously monitored. If the absolute value of the stack current is consistently less than 20A, the isolating switch is directly disconnected. If the stack current is ≥20A, the system is checked for high-power auxiliary equipment or whether all high-voltage boxes are de-energized. After troubleshooting, the emergency shutdown operation is continued.

[0016] In one embodiment, the battery system further includes a fire suppression system, which comprises a heptafluoropropane bottle head valve pilot valve, an electric push rod drive mechanism, a release valve status sensor, and a fire alarm panel integrating a "one-time release button." The emergency operation procedure of the fire suppression system includes... After removing the pilot valve from the heptafluoropropane cylinder head valve, switch the push rod in the electric push rod box to the forward rotation state, set the "manual / automatic" switch to manual mode, and trigger the "first release button" through the ESS display screen or fire alarm panel. After triggering, the fire protection system will sequentially execute the pre-alarm, release valve opening alarm, buzzer and audible and visual alarm, and illuminate the venting do not enter indicator light. After the release valve opens, there is a 30-second delay before driving the pilot valve pin to press down.

[0017] Compared with the prior art, the beneficial effects of the start-stop control and safety interlock control method based on EMS and ESS systems provided by the embodiments of the present invention are as follows: The embodiments of the present invention achieve multi-level safety interlock control by integrating PLC controller, EMS remote module and fire-fighting execution unit, which significantly improves the automation level and operational reliability of marine containerized mobile power system. At the same time, through time-sequential operation chain and electrical threshold interlock mechanism, the safety and response reliability of marine power system are significantly improved. Attached Figure Description

[0018] Figure 1 A schematic diagram of the ESS start / stop process based on EMS remote control is provided for an embodiment of the present invention for a start / stop control and safety interlock control method based on EMS and ESS systems. Figure 2 A schematic diagram of a multi-level current-limiting charge and discharge control process involved in a start-stop control and safety interlock control method based on an EMS and ESS system provided in an embodiment of the present invention; Figure 3 A schematic diagram of the start-up process of a box-type power supply, which is provided in an embodiment of the present invention, for a start-up and stop control and safety interlock control method based on an EMS and ESS system; Figure 4 A schematic diagram of the remote control emergency stop, emergency cut-off and normal shutdown process of a box-type power supply, which is provided for the start-stop control and safety interlock control method based on EMS and ESS systems in an embodiment of the present invention; Figure 5 This is a schematic diagram of the emergency action flow of a fire protection system, which is provided as an embodiment of the present invention for a start-stop control and safety interlock control method based on EMS and ESS systems. Detailed Implementation

[0019] To enable those skilled in the art to better understand the technical solution of the present invention, the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0020] Various embodiments and features of this application are described herein with reference to the accompanying drawings.

[0021] These and other features of this application will become apparent from the following description of preferred forms of embodiments given as non-limiting examples, with reference to the accompanying drawings.

[0022] It should also be understood that although this application has been described with reference to some specific examples, those skilled in the art can certainly implement many other equivalent forms of this application, which have the features described in the claims and are therefore all within the scope of protection defined herein.

[0023] The above and other aspects, features and advantages of this application will become more apparent when taken in conjunction with the accompanying drawings and in view of the following detailed description.

[0024] Specific embodiments of this application are described below with reference to the accompanying drawings; however, it should be understood that the claimed embodiments are merely examples of this application, which can be implemented in various ways. Well-known and / or repeated functions and structures are not described in detail to ascertain the true intent based on the user's historical operations, and to avoid unnecessary or redundant details that would obscure this application. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but merely serve as the basis and representative basis for the claims to teach those skilled in the art to use this application in various ways with substantially any suitable detailed structure.

[0025] This specification may use the phrases “in one embodiment,” “in another embodiment,” “in yet another embodiment,” or “in other embodiments,” all of which may refer to one or more of the same or different embodiments according to this application.

[0026] The principles and features of the present invention are described below with reference to the accompanying drawings. The embodiments described are for illustrative purposes only and are not intended to limit the scope of the invention. The following description, in conjunction with... Figure 1-5 The preferred embodiments of the present invention will be described in further detail below: In this embodiment of the invention, the ESS system, or box-type power supply, includes a battery system, a temperature control system, a power distribution system, and a fire protection system. The battery system includes a BMS system and batteries. Specifically, battery cells are grouped into battery packs, battery packs are connected in series to form battery clusters (each cluster has a battery management system, i.e., BMS), and battery clusters are connected in parallel to form battery stacks. Two stacks of batteries constitute the battery system.

[0027] like Figure 1-5 As shown, this invention discloses a start-stop control and safety interlock control method based on an energy management system (EMS) and an energy storage system (ESS). This method realizes remote start of the ESS by the EMS through a six-step closed loop: the EMS sends a one-key reset command, receives the ESS ready status, sends a one-key standby command, receives the ESS standby status, sends a one-key start command, and receives the ESS running status; remote shutdown is achieved by the EMS sending a one-key shutdown command and receiving the ESS shutdown status. The charging and discharging safety protection adopts a three-level control: In discharge mode, when the discharge current limiting level 1 alarm is triggered (total current ≤ -10A and dual-cluster SOC ≤ 20% or single-cluster SOC ≤ 15%), the power is reduced to 0.2C; when the level 2 alarm is triggered (dual-cluster SOC ≤ 15% or single-cluster SOC ≤ 5%), the power is reduced to 0.1C; when the stop alarm is triggered (single-cell undervoltage level 2 / voltage differential level 2), the power returns to zero and the discharge stops. In charging mode, when the charging current limiting level 1 alarm is triggered (total current ≥ 10A and dual-cluster SOC ≥ 90% or single-cluster SOC ≥ 95%), the power is reduced to 0.2C; when the level 2 alarm is triggered (dual-cluster SOC ≥ 95% or single-cluster SOC ≥ 100%), the power is reduced to 0.1C; when the stop alarm is triggered (single-cell overvoltage level 2 / voltage differential level 2), the power returns to zero and the charging stops. All operations must meet the condition of no cluster de-cluster flag (battery clusters are normally connected to the grid). The embodiments of the present invention significantly improve the automation level and operational reliability of marine containerized mobile power systems.

[0028] This invention integrates a PLC controller, an EMS remote module, and a fire-fighting execution unit, and achieves multi-level safety control through a time-sequential operation chain and electrical threshold interlocking: During one-button standby, the power supply operating state needs to be switched to remote control mode and automatic start mode, triggering the PLC controller to send a UDP power-on command. This closes the high-voltage box contactor, completing the power-on of the box-type power supply. The high-voltage box is a control device for the power-on and power-off of a battery cluster, and also a monitoring device for the working status of the cells within the cluster. After the cluster's power-on status is fed back, the inverter power supply is activated. The DC power of the battery system is converted into 380V AC power usable by the equipment inside the box. The standby is detected by the connection of the aviation plug and the indicator light is lit. During the pre-charging process, after the pre-charging of stack 1 is performed, the pre-charging of stack 2 is started after a 5-second delay. The pre-charging negative contactor is closed for 0.5 seconds and then the positive contactor is closed. The closing of the isolating switch must meet the condition that the voltage difference between the battery cluster side and the load side is less than 30V. In case of remote emergency stop, the isolating switch is immediately disconnected and the chiller unit is controlled differently according to the mains power / inverter power supply mode - it continues to operate when the mains power is supplied and stops synchronously when the inverter power is supplied. Normal shutdown employs a three-stage delay sequence: after a 5-second delay following the shutdown command, the inverter power supply stops; after another 5-second delay, the high-voltage box is powered down; and after a further 5-second delay, when the absolute value of the stack current is less than 20A, the isolating switch is disconnected via a time relay (in emergency shutdown, the first two delay stages are skipped, and power-down and current detection tripping are performed directly). For fire-fighting actions, the heptafluoropropane pilot valve must be manually removed, the electric push rod switched to forward rotation, and the "manual / automatic" switch turned to manual mode. Triggering the release button triggers a pre-alarm, audible and visual alarm, and a "do not enter" indicator light. After the release valve opens, a 30-second delay drives the plunger to press down and release the extinguishing agent. This embodiment of the invention significantly improves the safety and reliability of the ship's power system through rigid electrical interlocking (30V differential pressure / 20A current) and precise timing control (5s / 0.5s / 30s delay).

[0029] Specifically, The ESS remote boot process includes, When the communication connection between EMS and ESS is normal, EMS sends a one-key reset control command to ESS. If ESS does not respond with a ready status, it is necessary to check and clear fault and alarm signals. EMS continues to send one-key reset control commands. After ESS responds with a ready status, EMS sends a one-key standby control command. If ESS does not respond with a standby signal, EMS continues to send one-key standby control commands to ESS. After ESS completes standby, it reports the standby status. EMS sends a one-key start control command to ESS. If ESS does not respond with a running signal, EMS continues to send one-key start control commands to ESS. After ESS starts successfully, it reports the running status to EMS. If the start fails, it sends a start timeout message to EMS. The ready status refers to a state where the box-type power supply system is ready to start. At this time, the box-type power supply is not powered by the main power. The standby status refers to a state where the box-type power supply has been powered on and the equipment inside the box can run. If the isolating switch is closed at this time, it will enter the running state.

[0030] The remote shutdown logic includes: EMS sending a one-click shutdown control command to ESS, and ESS reporting the shutdown status back to EMS after shutdown is completed.

[0031] This embodiment of the invention also includes a PLC controller configured in the high-voltage box, used to receive and execute control commands of the above method; an EMS remote control module connected to the PLC for issuing one-click standby, emergency stop and shutdown commands; a pre-charge contactor group, controlled by the PLC and performing pre-charge operation according to the above sequence; and a voltage difference detection circuit, which monitors the voltage difference between the battery cluster side and the load side in real time and triggers the closing of the isolating switch.

[0032] In discharge mode, the PLC controller collects real-time information of the battery system and sends alarm and current limiting information to the EMS. When the EMS receives a discharge current limiting level 1 alarm, it reduces the discharge power according to the preset value; when it receives a discharge current limiting level 2 alarm, it further reduces the discharge power; when it receives a discharge stop alarm, it reduces the discharge power to 0 and stops discharging. The discharge process consists of operation control (mainly power regulation) and start-stop control (stop discharging).

[0033] In charging mode, when the EMS receives a Level 1 charging current limit alarm, it reduces the charging power according to the preset value; when it receives a Level 2 charging current limit alarm, it further reduces the charging power; after receiving a Level 2 alarm, it will continue to receive a charging stop alarm, at which point the charging power will be reduced to 0 and charging will be stopped.

[0034] The discharge stop alarm triggering conditions are: the individual cell voltage undervoltage reaches the level 2 alarm threshold, or the individual cell voltage differential voltage reaches the level 2 alarm threshold.

[0035] The charging stop alarm triggering conditions are: the overvoltage of a single cell reaches the level 2 alarm threshold, or the differential voltage of a single cell reaches the level 2 alarm threshold.

[0036] The trigger condition for the Level 1 discharge current limit alarm is: the total current of the battery system is ≤-10A. Here, a negative current indicates a discharge state, and it meets the following conditions: (SOC≤20% when there are two piles and two clusters without a cluster removal flag) or (SOC≤15% when there are two piles and one cluster without a cluster removal flag). Generally, this refers to a system with two piles and eight clusters. Here, SOC refers to the battery capacity.

[0037] A battery cluster is a battery system composed of several battery modules connected in series and linked to a circuit system. The circuit system typically consists of monitoring and protection circuits, electrical and communication interfaces, and thermal management devices. It is an intermediate level in the battery system, providing a certain voltage and capacity. A battery stack is a battery system composed of several battery clusters connected in parallel to the same power conversion system (PCS), capable of overall power input and output, and controlled by a backend monitoring system. A battery stack is a higher-level combination than a battery cluster, capable of meeting greater power and capacity requirements. As a relatively independent unit, a battery cluster's main function is to integrate the energy of individual batteries through a reasonable battery connection method to meet the basic requirements of specific equipment or systems for voltage, current, and capacity, and to monitor and protect the batteries through its own circuit system. A battery stack, by connecting multiple battery clusters in parallel, further enhances the overall power and capacity of the energy storage system, enabling energy interaction with the grid or other loads, and coordinating the operation of each battery cluster under the control of a backend monitoring system to ensure the stable operation of the entire system.

[0038] The discharge current limiting level 2 alarm trigger condition is: the total current of the two piles ≤ -10A, and meets the following conditions (SOC ≤ 15% when there is no de-cluster flag for the two piles and two clusters) or (SOC ≤ 5% when there is no de-cluster flag for the two piles and one cluster). No additional operation is performed if there is a de-cluster flag.

[0039] The trigger condition for the charging current limit level 1 alarm is: the total current of the two piles is ≥10A, and the SOC is ≥90% when there is no de-cluster flag for the two piles and two clusters or when there is no de-cluster flag for the two piles and one cluster.

[0040] The trigger condition for the charging current limit level 2 alarm is: the total current of the two piles is ≥10A, and the SOC is ≥95% when there is no clustering de-clumping flag in the two piles or ...

[0041] After the discharge current limiting level 1 alarm is triggered, the discharge power drops to 0.2C (C represents the charge / discharge rate, 1C = 1 hour to fully charge / discharge the battery); after the discharge current limiting level 2 alarm is triggered, the discharge power drops to 0.1C.

[0042] After the Level 1 charging current limiting alarm is triggered, the charging power drops to 0.2C; after the Level 2 charging current limiting alarm is triggered, the charging power drops to 0.1C.

[0043] The readiness status, standby status, operating status, and shutdown status reported by the ESS are all transmitted to the EMS in real time via communication protocols.

[0044] The reduction in charging and discharging power is dynamically adjusted based on the real-time SOC status of the ESS battery cluster.

[0045] "No cluster deactivation flag" indicates that the battery cluster is in normal grid-connected state and the isolation protection mechanism has not been triggered.

[0046] One-click standby procedure: The "Remote / Local" knob on the energy storage system panel needs to be switched to remote mode, the "Manual / Automatic Switch" button on the touch screen needs to be set to automatic mode, and after clicking the "One-click standby" command, the system sends a UDP command to the PLC to control the high-voltage box to power on and provide real-time feedback on the power-on status of the cluster. After the high-voltage box is powered on, the inverter power supply is started, and the connection status of the aviation plug is checked. When the inverter power supply is running normally or there is an external AC power input, the standby completion signal is output and the standby indicator light is lit.

[0047] Pre-charge process execution logic: After remote one-button start or local manual start, when the energy storage system panel displays the standby status, is in use mode, and the DC socket connection is normal, stack 1 is started for pre-charge in sequence, stack 2 is started for pre-charge after a 5-second delay, and the pre-charge negative contactor is closed after a 0.5-second delay before the pre-charge positive contactor is closed; the ESS system includes storage mode and use mode. If the energy storage system is in storage mode, the pre-charge operation is executed directly after the remote one-button standby command is issued and the standby status is received. Directly triggering pre-charge means direct pre-charge without any delay operation.

[0048] Disconnect switch closing condition: When the voltage difference between the battery cluster side and the load side is less than 30V, the control disconnect switch closes and detects the closed signal, so that the energy storage system enters the operating state.

[0049] The shutdown of the ESS system includes remote emergency stop, normal shutdown, and emergency disconnection; Remote emergency stop procedure: In response to the remote emergency stop signal issued by EMS, immediately disconnect the high-voltage box isolation switch. If the energy storage system is powered by mains power, the chiller unit will continue to run. If it is powered by inverter power, the chiller unit will stop synchronously.

[0050] Normal shutdown sequence: After issuing the shutdown command, the inverter power supply is stopped after a 5-second delay, and then the high-voltage box is powered down via a relay after another 5-second delay. After another 5-second delay, the absolute value of the stack current is checked to see if it is less than 20A. If the condition is met, the isolating switch is disconnected via a time relay. If the stack current is ≥20A, the system is checked for high-power auxiliary equipment or whether all high-voltage boxes are powered down. After troubleshooting, the shutdown command issued by the ESS is executed again.

[0051] Emergency shutdown logic: In the normal shutdown sequence, when the inverter power supply stops and the high-voltage box is de-energized, if the absolute value of the stack current is consistently less than 20A, the isolating switch is directly disconnected. If the stack current is ≥20A, check whether there are high-power-consuming auxiliary devices in the ESS system or whether all high-voltage boxes are de-energized. After troubleshooting, continue to execute the emergency shutdown operation.

[0052] The fire-fighting actuator includes: a heptafluoropropane cylinder head valve pilot valve, an electric push rod drive mechanism, a release valve status sensor, and a fire alarm panel with an integrated "one-time release button". All components are linked together to release the extinguishing agent according to the following logic.

[0053] Emergency control of the fire protection system: After removing the pilot valve of the heptafluoropropane cylinder head valve, switch the push rod in the electric push rod box to the forward rotation state, set the "manual / automatic" switch to manual mode, and trigger the "first release button" through the energy storage system display screen or fire alarm panel. After triggering, the system will sequentially execute the pre-alarm, release valve opening alarm, buzzer and audible and visual alarm, and illuminate the release and do not enter indicator light. After the release valve opens, it will drive the pilot valve pin to press down after a 30-second delay.

[0054] The above embodiments are merely exemplary embodiments of the present invention and are not intended to limit the present invention. The scope of protection of the present invention is defined by the claims. Those skilled in the art can make various modifications or equivalent substitutions to the present invention within its spirit and scope of protection, and such modifications or equivalent substitutions should also be considered to fall within the scope of protection of the present invention.

Claims

1. A start / stop control and safety interlock control method based on EMS and ESS systems, characterized in that: The ESS remote boot process includes, When the communication connection between EMS and ESS is normal, EMS sends a one-key reset control command to ESS. If ESS does not respond with a ready status, it checks and clears fault and alarm signals, and EMS continues to send one-key reset control commands. After ESS responds with a ready status, EMS sends a one-key standby control command to ESS. If ESS does not respond with a standby signal, EMS continues to send one-key standby control commands to ESS. If ESS completes standby and responds with a standby status, EMS sends a one-key start control command to ESS. If ESS does not respond with a running signal, EMS continues to send one-key start control commands to ESS. After ESS starts successfully, it reports the running status to EMS. The ESS remote shutdown procedure includes, EMS sends a one-click shutdown control command to ESS. If ESS does not respond with a shutdown signal, EMS continues to send one-click shutdown control commands to ESS. After ESS completes the shutdown, it reports the shutdown status to EMS. The charging and discharging safety protection adopts a three-level control system. In discharge mode, the PLC controller collects real-time information of the battery system and sends alarm and current limiting information to the EMS. When the EMS receives a level 1 discharge current limiting alarm, it reduces the discharge power according to the preset value. When the EMS receives a level 2 discharge current limiting alarm, it further reduces the discharge power according to the preset value. When the EMS receives a discharge stop alarm, it reduces the discharge power to 0 and stops discharging. In charging mode, when the EMS receives a Level 1 charging current limit alarm, it reduces the charging power by a preset value; when the EMS receives a Level 2 charging current limit alarm, it further reduces the charging power by a preset value; when the EMS receives a charging stop alarm, it reduces the charging power to 0 and stops charging.

2. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 1, characterized in that: The ESS remote start, ESS remote stop, and charge / discharge operations are all performed under the condition that the battery cluster is normally connected to the grid.

3. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 1, characterized in that: The discharge current limiting level 1 alarm trigger condition is set as follows: the total current of the battery system ≤ -10A and the dual-cluster SOC ≤ 20% or the single-cluster SOC ≤ 15%; The discharge current limiting level 2 alarm trigger condition is set as follows: dual-cluster SOC ≤ 15% or single-cluster SOC ≤ 5%; The discharge stop alarm trigger condition is set to either a single-unit undervoltage level 2 alarm threshold or a voltage differential level 2 alarm threshold.

4. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 3, characterized in that: After the discharge current limiting level 1 alarm is triggered, the discharge power drops to 0.2C; after the discharge current limiting level 2 alarm is triggered, the discharge power drops to 0.1C.

5. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 1, characterized in that: The trigger condition for the Level 1 charging current limiting alarm is set as follows: total current ≥ 10A and dual-cluster SOC ≥ 90% or single-cluster SOC ≥ 95%; The trigger condition for the Level 2 charging current limiting alarm is set as follows: dual-cluster SOC ≥ 95% or single-cluster SOC ≥ 100%. The charging stop alarm trigger condition is set to either a single-unit overvoltage level 2 alarm threshold or a voltage differential level 2 alarm threshold.

6. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 5, characterized in that: After the Level 1 charging current limiting alarm is triggered, the charging power drops to 0.2C; after the Level 2 charging current limiting alarm is triggered, the charging power drops to 0.1C.

7. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 1, characterized in that: The battery system achieves multi-level safety control through a time-sequential operation chain and electrical threshold interlocking.

8. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 7, characterized in that: The one-click vehicle preparation process includes: Switch the "Remote / Local" knob on the panel to remote mode and set the touch screen to automatic mode. After the one-click standby command is triggered, the high-voltage box is powered on via UDP command. After the cluster power-on status is fed back to the PLC for confirmation, the inverter power supply is started. The standby is detected and determined to be completed through the aviation plug connection and the indicator light is lit. After the ESS system starts up, it performs a pre-charge operation, the pre-charge operation process of which includes: Confirm that the panel displays the vehicle standby status, the ESS system is in use mode, and the DC socket is normal. First, perform pre-charge of stack 1, delay for 5 seconds to start pre-charge of stack 2, then close the pre-charge negative contactor and delay for 0.5 seconds to close the positive contactor.

9. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 7, characterized in that: The shutdown of the ESS system includes remote emergency stop, normal shutdown, and emergency disconnection; When remotely controlled to stop, When the EMS sends a remote emergency stop signal, the ESS system responds to the EMS remote emergency stop signal by immediately disconnecting the isolating switch and controlling the chiller unit differently according to the power supply mode: when the mains power is supplied, the chiller unit is kept running, and when the inverter power is supplied, the chiller unit is stopped synchronously. During normal shutdown, The EMS issues a shutdown command, delays for 5 seconds to stop the inverter power supply, delays for another 5 seconds to power down the high-voltage box via a relay, and then delays for another 5 seconds to check if the absolute value of the stack current is less than 20A. If the condition is met, the isolating switch is disconnected via a time relay. If the stack current is ≥20A, the system is checked for high-power auxiliary equipment or whether all high-voltage boxes are powered down. After troubleshooting, the shutdown command issued by the ESS is executed again. During an emergency shutdown, the inverter power supply is stopped after a 5-second delay, and then the high-voltage box is de-energized via a relay after another 5-second delay. The absolute value of the stack current is continuously monitored. If the absolute value of the stack current is consistently less than 20A, the isolating switch is directly disconnected. If the stack current is ≥20A, the system is checked for high-power auxiliary equipment or whether all high-voltage boxes are de-energized. After troubleshooting, the emergency shutdown operation is continued.

10. The start / stop control and safety interlock control method based on EMS and ESS systems according to claim 7, characterized in that: The battery system is also equipped with a fire suppression system, which includes a heptafluoropropane bottle head valve pilot valve, an electric push rod drive mechanism, a release valve status sensor, and a fire alarm panel integrating a "one-time release button." The emergency action procedure of the fire suppression system includes... After removing the pilot valve from the heptafluoropropane cylinder head valve, switch the push rod in the electric push rod box to the forward rotation state, set the "manual / automatic" switch to manual mode, and trigger the "first release button" through the ESS display screen or fire alarm panel. After triggering, the fire protection system will sequentially execute the pre-alarm, release valve opening alarm, buzzer and audible and visual alarm, and illuminate the "do not enter" indicator light for venting. After the release valve opens, there is a 30-second delay before driving the pilot valve pin to press down.

Images