Electrically powered marine vessel, power control system and control method

Abstract

The application provides an electric ship, a power supply control system and a control method. The power supply control system comprises a first power supply control architecture and a second power supply control architecture which are interconnected through a data transmission line; the first power supply control architecture comprises a first controller and a first power supply system controlled by the first controller; the second power supply control architecture comprises a second controller and a second power supply system controlled by the second controller; the data transmission line is used for transmitting heartbeat signals between the first controller and the second controller; when the first controller and the second controller detect an abnormal situation of the heartbeat signals of the opposite end, it is determined that the opposite end is abnormal, and then a control signal is sent to the power supply system of the opposite end through the data transmission line. The technical scheme of the application realizes cross-architecture signal transmission of the control logic through the data transmission line, and avoids the risk of complete failure of the corresponding power supply system caused by abnormality of the single-sided controller.

Description

Technical Field

[0001] This application relates to the field of marine power system technology, and in particular to an electric ship, a power control system and a control method. Background Technology

[0002] With the development of electric ships, the reliability of monitoring and control of the containerized power system, which is the power source of electric ships, is particularly critical. The control system of the marine containerized power system (hereinafter referred to as the power control system) monitors and manages the charging and discharging of the power system through a controller. The controller interacts with other functional devices (such as temperature control devices and fire-fighting devices) to achieve status perception and corresponding control management, such as thermal management of the power system.

[0003] Currently, the mainstream power control system is a single control architecture. If the power control system loses power or malfunctions, it will not only directly cause the controller to lose control of the power system's output or even completely interrupt it, but also the status of other functions of the power system will not be perceived, thus creating significant safety hazards. Summary of the Invention

[0004] In view of this, the purpose of this application is to provide an electric ship, an electrical box control system and control method, which can specifically solve the existing problems.

[0005] Based on the above objectives, in a first aspect, this application proposes a power control system, which includes a first power control architecture and a second power control architecture interconnected via a data transmission line; the first power control architecture includes a first controller and a first power system controlled by the first controller; the second power control architecture includes a second controller and a second power system controlled by the second controller; the data transmission line is used to transmit heartbeat signals between the first controller and the second controller; when the first controller detects an abnormal heartbeat signal from the second controller, it determines that the second controller is in an abnormal state; when the second controller detects an abnormal heartbeat signal from the first controller, it determines that the first controller is in an abnormal state; an abnormal state refers to a state in which monitoring and management of the controlled power system cannot be performed; the data transmission line is also used to send the control signal of the second controller to the first power system when the first controller is in an abnormal state, or to send the control signal of the first controller to the second power system when the second controller is in an abnormal state.

[0006] By adopting the technical solution of this application, a direct communication channel is established between the first power control architecture and the second power control architecture through a data transmission line. This channel is used to transmit heartbeat signals between the first controller and the second controller, enabling the first controller and the second controller to detect the operating status of the other controller based on the heartbeat signal. Thus, in the case of an abnormal state of the first controller, the control signal of the second controller can be sent to the first power system through the data transmission line, or in the case of an abnormal state of the second controller, the control signal of the first controller can be sent to the second power system through the data transmission line. This facilitates the construction of a cross-architecture control signal transmission path at the control system architecture level, and can overcome the technical defect that a single controller failure can lead to the complete loss of control of its subordinate power systems, thereby improving the control continuity of the dual power system under asymmetrical operating conditions. Furthermore, the first power control architecture includes a first controller and a first power system controlled by the first controller; the second power control architecture includes a second controller and a second power system controlled by the second controller. It can be seen that in this technical solution, the electrical outputs of the two power systems are independent of each other. The cross-architecture signal transmission of control logic is realized through data transmission lines. When the electrical output of either power system is still in a normal state but its controller malfunctions, the controller on the other side can take over the control of the malfunctioning power system through the data transmission lines, so that the malfunctioning power system can still be controlled and operated. This helps to avoid the risk of the corresponding power system failing completely due to the malfunction of a single controller.

[0007] In some embodiments, the first power control architecture includes a first monitoring gateway; the second power control architecture includes a second monitoring gateway; when both the first controller and the second controller are operating normally, the first monitoring gateway is used to send the safety control signal of the first controller to the safety management subsystem included in the first power system; the second monitoring gateway is used to send the safety control signal of the second controller to the safety management subsystem included in the second power system; the safety control signal is transmitted based on a serial communication protocol. Thus, when both the first controller and the second controller are operating normally, the two control architectures independently control the safety management subsystem connected to their respective terminals.

[0008] In some embodiments, the data transmission line includes a monitoring link between a first monitoring gateway and a second monitoring gateway. When both the first and second controllers are operating normally, the monitoring link is configured to transmit the operational status data of the safety management subsystems of the first and second power systems to the peer controller, so that the first controller monitors the operational status data of the safety management subsystem of the second power system, and the second controller monitors the operational status data of the safety management subsystem of the first power system. That is, even when the two control architectures independently control their respective local safety subsystems, they can still bidirectionally monitor the operational status of the peer safety subsystem.

[0009] In some embodiments, the monitoring link is further configured to: in the abnormal state of the first controller, send the safety control signal of the second controller to the safety management subsystem of the first power system via the second monitoring gateway and the first monitoring gateway; or, in the abnormal state of the second controller, send the safety control signal of the first controller to the safety management subsystem of the second power system via the first monitoring gateway and the second monitoring gateway. In this way, a cross-architecture monitoring link is established using monitoring gateways of two control architectures, allowing the normally functioning controller on one side to remotely monitor the safety management subsystem of the abnormal side when one controller malfunctions.

[0010] In some embodiments, the first power control architecture includes a first data bus; the second power control architecture includes a second data bus; when both the first controller and the second controller are operating normally, the first data bus is used to send the power control signal of the first controller to the power management subsystem included in the first power system; the second data bus is used to send the power control signal of the second controller to the power management subsystem included in the second power system; the power control signal is transmitted based on a data communication protocol. It can be seen that, by adopting this implementation, on the one hand, using different communication interfaces to connect power-type devices and safety-type devices to the controller respectively is beneficial for balancing power-type devices and safety-type devices, as well as for the classified management of devices with different functional attributes; on the other hand, when both the first controller and the second controller are operating normally, the two control architectures independently control the power management subsystem connected to their respective ends.

[0011] In some embodiments, the data transmission line further includes a communication bus connecting the first data bus and the second data bus; the communication bus is configured to send the power control signal of the second controller to the power management subsystem of the first power system via the second data bus and the first data bus when the first controller is in an abnormal state; or, when the second controller is in an abnormal state, to send the power control signal of the first controller to the power management subsystem of the second power system via the first data bus and the second data bus. It can be seen that by constructing a cross-architecture power control link, when one controller is malfunctioning and the other controller is functioning normally, the normally functioning controller can perform real-time control of the power management subsystem on the malfunctioning side via the communication bus, thereby ensuring continuous and uninterrupted power supply to critical loads.

[0012] In some embodiments, the data transmission line further includes a network line connecting the first controller and the second controller; the network line is configured to transmit a heartbeat signal between the first controller and the second controller. By transmitting heartbeat signals between the two controllers via the network line, the power control architectures of both parties can perceive the health status of the other controller in real time and accurately, which is beneficial for quickly and reliably triggering the control takeover process.

[0013] In some embodiments, both the first power control architecture and the second power control architecture include network devices; for either the first or second power control architecture, the network device in any power control architecture is communicatively connected to the controller and monitoring gateway in that power control architecture; the network device is configured to forward operational status data from the controller and / or monitoring gateway. This implementation integrates and forwards data from the controller and monitoring gateway, which is beneficial for the operation, maintenance, and management of the power control system.

[0014] In some embodiments, network devices in any power control architecture are communicatively connected to human-machine interface devices (HMIs); the HMIs are configured to display operating status data from the network devices. By locally visualizing the operating status data of the power control system, maintenance personnel can intuitively and conveniently view the system status and perform local operations, which helps improve the maintainability of the system.

[0015] Secondly, this application proposes a power control method applied to the power control system described in any one of the first aspects. The method includes: a first power control architecture and a second power control architecture exchanging operating status data via a data transmission line; the operating status data of the first power control architecture includes operating status data of the first power system read by a first controller; the operating status data of the second power control architecture includes operating status data of the second power system read by a second controller; in an abnormal state of the first controller, the second controller sends a control signal to the first power system via the data transmission line; in an abnormal state of the second controller, the first controller sends a control signal to the second power system via the data transmission line; the abnormal state refers to a state in which monitoring and management of the controlled power system cannot be performed.

[0016] By adopting the technical solution of this application, the first power control architecture and the second power control architecture exchange their respective operating status data through a data transmission line. The operating status data of the first power control architecture includes the operating status data of the first power system read by the first controller, and the operating status data of the second power control architecture includes the operating status data of the second power system read by the second controller. This allows either controller to obtain the real-time operating status of the other power system through this data transmission line, facilitating the establishment of awareness capabilities before the other controller malfunctions, and providing a data foundation for decision-making and smooth takeover in subsequent abnormal states. In this way, when the first controller is in an abnormal state, the second controller sends a control signal to the first power system through this data transmission line; when the second controller is in an abnormal state, the first controller directly sends a control signal to the second power system through this data transmission line. This allows the controller on the normally operating side to control the power system on the abnormal side even when one controller malfunctions, enabling the power system on the abnormal side to still receive control commands and operate uninterruptedly. This avoids the technical risk of complete loss of control of the corresponding power system due to a malfunction of a single controller, improving the availability and robustness of the power control system.

[0017] In some embodiments, the data transmission line includes a monitoring link. The second controller sends control signals to the first power system through the data transmission line, including: when the data transmission line includes a monitoring link, the second controller sends safety control signals to the safety management subsystem of the first power system via the monitoring link; the monitoring link is a link between a first monitoring gateway and a second monitoring gateway, the first monitoring gateway being used to establish a communication connection between the first controller and the safety management subsystem included in the first power system, and the second monitoring gateway being used to establish a communication connection between the second controller and the safety management subsystem included in the second power system. In this way, by using monitoring gateways of two control architectures to establish a cross-architecture monitoring link, when one controller malfunctions, the other controller, which is operating normally, can remotely monitor the safety management subsystem of the malfunctioning side.

[0018] In some embodiments, the data transmission line includes a communication bus. The second controller sends control signals to the first power system through the data transmission line, including: the second controller sending power control signals to the power management subsystem of the first power system via the communication bus; the communication bus is a link connecting the first data bus and the second data bus, the first data bus being used to establish a communication connection between the first controller and the power management subsystem included in the first power system, and the second data bus being used to establish a communication connection between the second controller and the power management subsystem included in the second power system. In this way, a cross-architecture communication bus is established using the data buses of the two control architectures. When one controller malfunctions, the controller on the other side, which is operating normally, can remotely monitor the power management subsystem on the malfunctioning side.

[0019] In some embodiments, the method further includes: the first controller and the second controller mutually monitoring each other's heartbeat signals via a network line; if an abnormality is detected in the heartbeat signal of the first controller, the second controller determines that the first controller is abnormal; the operating status data of the first power control architecture is displayed on the human-machine interface device of the second power system, and / or the operating status data of the first power control architecture is sent to the cabin monitoring and alarm system. In this way, by using heartbeat monitoring to determine the abnormality of the counterpart controller, it is also possible to ensure that the cabin monitoring and alarm system remotely monitors the power control system, so that in abnormal operating conditions, both the power control architecture and the remote monitoring center can promptly obtain the system status and thus intervene in the abnormality in a timely manner.

[0020] In some embodiments, before the first power control architecture and the second power control architecture exchange operating status data through the data transmission line, the method further includes: after the first power control architecture is powered on, the first power control architecture and the first power system perform a functional self-test; after determining that both the first power control architecture and the first power system are functioning normally, the first power control architecture enters a standby state; in response to receiving a control command, the first controller sends a control signal to the corresponding functional system in the first power system to trigger the corresponding functional system in the first power system to enter the corresponding operating mode. By defining a standardized system startup process, it is beneficial to ensure that the hardware and software functions operate well during startup, thereby improving system security.

[0021] In some embodiments, the method further includes: receiving a first control command input from a human-machine interface device of the first power system; and / or, in response to detecting a charging pile connection signal, using the charging signal as a second control command; and / or, receiving an energy dispatch signal from the EMS of the first power system, using the energy dispatch signal as a third control command, wherein the third control command is a grid connection command or a load adjustment command; wherein the first control command has a higher priority than the second control command, and the second control command has a higher priority than the third control command. It is evident that this technical solution defines three control signals from different sources and defines the priority order of the three control signals, which is beneficial for ensuring safe scheduling and control according to a priority strategy under complex operating conditions.

[0022] In some embodiments, the method further includes: periodically monitoring the controlled target power system for faults in either the first controller or the second controller; and, upon detecting a preset type of fault in the target power system, controlling the target power system to shut down urgently. This mechanism can proactively identify and quickly disconnect the fault source, preventing further spread and deterioration of the fault, and significantly improving the safety and reliability of the power control system.

[0023] Thirdly, an electric vessel is also provided, comprising a first power system, a second power system, and a power control system, wherein the power control system is as described in any one of the first aspects.

[0024] Fourthly, an electronic device is also provided, which is a programmable logic controller (PLC), including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the method of the second aspect.

[0025] Fifthly, a computer-readable storage medium is also provided, having a computer program stored thereon, which is executed by a processor to implement the method described in any of the second aspects.

[0026] In a sixth aspect, a computer program product is also provided, comprising a computer program that is executed by a processor to implement the method described in the second aspect.

[0027] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, the following are specific embodiments of this application. Attached Figure Description

[0028] In the accompanying drawings, unless otherwise specified, the same reference numerals throughout the various drawings denote the same or similar parts or elements. These drawings are not necessarily drawn to scale. It should be understood that these drawings depict only some embodiments disclosed in this application and should not be construed as limiting the scope of this application. Furthermore, the same reference numerals denote the same parts throughout all the drawings.

[0029] Figure 1A This invention provides a schematic diagram of the system structure of a first exemplary power control system. Figure 1B This invention provides a schematic diagram of the system structure of a second exemplary power control system. Figure 1C This application shows a schematic diagram of the system structure of a third exemplary power control system. Figure 1D This application shows a schematic diagram of the system structure of a fourth exemplary power control system; Figure 2A A flowchart illustrating the first exemplary power control method of this application is shown. Figure 2B A flowchart illustrating a second exemplary power control method of this application is shown. Figure 2C A flowchart illustrating a third exemplary power control method of this application is shown. Figure 3A A flowchart illustrating an exemplary power control method of a power control architecture of this application is shown. Figure 3B A flowchart illustrating an exemplary method for takeover control between two power control architectures of this application is shown. Figure 4 A schematic diagram illustrating the composition of an exemplary electric vessel of this application is shown; Figure 5 This illustration shows a schematic diagram of the structure of an electronic device according to an embodiment of this application; Figure 6 A schematic diagram of a storage medium provided in one embodiment of this application is shown. Detailed Implementation

[0030] The embodiments of the technical solution of this application will now be described in detail with reference to the accompanying drawings. These embodiments are only used to more clearly illustrate the technical solution of this application and are therefore merely examples, and should not be used to limit the scope of protection of this application.

[0031] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains; the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the application; the terms “comprising” and “having”, and any variations thereof, in the specification, claims, and foregoing description of the drawings are intended to cover non-exclusive inclusion.

[0032] In the description of the embodiments of this application, technical terms such as "first" and "second" are used only to distinguish different objects and should not be construed as indicating or implying relative importance or implicitly specifying the number, specific order, or primary and secondary relationship of the indicated technical features. In the description of the embodiments of this application, "multiple" means two or more, unless otherwise explicitly defined.

[0033] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0034] In the description of the embodiments in this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Additionally, the character " / " in this document generally indicates that the preceding and following related objects have an "or" relationship.

[0035] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0036] The technical solution of this application relates to the power system control technology of electric ships. The power source of the electric ship is a containerized power system, which uses a container as a carrier and integrates multiple functional devices such as batteries, thermal management equipment, fire-fighting devices, ventilation devices, and monitoring systems. It can be applied to scenarios such as DC power supply for ships and shore-based fast charging. In practical implementation scenarios, ships engage in various activities, including docking and navigation. During the navigation phase, there is a need for uninterrupted power supply. Therefore, the reliability of monitoring and control of the containerized power system is particularly critical. In some embodiments, a power control system is used to monitor and control the operating status of the containerized power system. The power control system can manage, schedule, protect, and monitor the operating conditions of the containerized power system. For example, the power control system can be integrated into one or more standardized containers.

[0037] A mainstream marine box-type power system control system (hereinafter referred to as the power control system) may include: a controller (such as a PLC), a battery management system (BMS), a temperature control device, and a fire-fighting device, as well as other functional systems. The BMS and other functional devices can be connected to the controller via a network. The power control system monitors and manages the charging and discharging of the power system through the controller. The controller interacts with other functional systems to perform status perception and corresponding control management, such as thermal management of the power system.

[0038] Because the power control system is a single control architecture, the core control component in this architecture is the controller. Other functional systems, such as the BMS, temperature control devices, and fire-fighting devices, interact with the controller through a single communication link. As a result, once the controller loses power or malfunctions, it will not only directly cause the controller to lose control of the power system output or even completely interrupt it, resulting in the risk of power loss on the ship, but also create a blind spot in the monitoring of other functional systems such as the BMS, temperature control devices, and fire-fighting devices, making it impossible to perceive the status of the BMS, temperature control devices, and fire-fighting devices, thus creating a significant safety hazard.

[0039] To address the problems existing in the aforementioned technical means, this application provides a power control system. The power control system includes a first power control architecture and a second power control architecture. The first power control architecture and the second power control architecture control corresponding power systems respectively. A communication channel is established between the first power control architecture and the second power control architecture through a data transmission line. In this application embodiment, the data transmission line is used as a cross-architecture control signal transmission path. Thus, when the electrical output of any power system is still in a normal state but its controller malfunctions, the controller on the other side can take over the control of the malfunctioning power system through the data transmission line. This allows the malfunctioning power system to still operate under control, which helps to avoid the risk of the corresponding power system completely failing due to a single controller malfunction.

[0040] The technical methods in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings.

[0041] See Figure 1A , Figure 1A An exemplary power control system of this application is shown. The power control system of this application embodiment includes a first power control architecture 1 and a second power control architecture 2. The first power control architecture 1 includes a first controller 10 and a first power system 1000 controlled by the first controller 10. The second power control architecture 2 includes a second controller 20 and a second power system 2000 controlled by the second controller 20.

[0042] The first power control architecture 1 and the second power control architecture 2 are interconnected via a data transmission line 3. Specifically, the data transmission line 3 is used to transmit heartbeat signals between the first controller 10 and the second controller 20. If the first controller 10 detects an abnormal heartbeat signal from the second controller 20, it determines that the second controller 20 is in an abnormal state. Similarly, if the second controller 20 detects an abnormal heartbeat signal from the first controller 10, it determines that the first controller 10 is in an abnormal state. The data transmission line 3 is also used to send the control signals of the second controller 20 to the first power system 1000 when the first controller 10 is in an abnormal state, or to send the control signals of the first controller 10 to the second power system 2000 when the second controller 20 is in an abnormal state.

[0043] In the embodiments of this application, the first power control architecture 1 and the second power control architecture 2 are independent of each other in physical and electrical dimensions. Each of the first power control architecture 1 and the second power control architecture 2 is a complete control system with independent control capabilities, and the controller of the power control system is deployed in either power control architecture. Exemplarily, the first power control architecture 1 and the second power control architecture 2 can be deployed in the same enclosure or in different enclosures; this application embodiment does not limit this.

[0044] The controller is the core control device in the power control architecture, used to perform logical operations, power system data processing, and control command issuance. Both the first controller 10 and the second controller 20 can be implemented as a Programmable Logic Controller (PLC), an embedded industrial computer, or other industrial control equipment with similar functions; this embodiment does not limit this. It should be noted that in actual implementation scenarios, the first controller 10 and the second controller 20 can use the same communication protocol to transmit data. For example, the first controller 10 and the second controller 20 can be the same type of control device, such as both being PLCs.

[0045] In some embodiments, the data transmission line establishes a physical layer and data link layer connection between the first power control architecture 1 and the second power control architecture 2 for transmitting control signals, status data, etc. The data transmission line can be implemented as a wired communication line and / or a wireless communication link. When the data transmission line is implemented as a wired communication line, it may include at least one of an Ethernet cable, a Controller Area Network (CAN) bus, and an RS-485 shielded twisted pair cable. The specific implementation of the data transmission line is related to the specific structure of the power control system, as detailed in the following embodiments.

[0046] For example, the abnormal state of the first controller 10 refers to the state in which the first controller 10 is unable to perform normal monitoring and management functions on the power system it controls. For example, the abnormal state of the first controller 10 may include states such as hardware failure, program crash, communication failure, and power-down maintenance. The situation of the second controller 20 being in an abnormal state is similar to that of the first controller 10, and will not be described in detail here.

[0047] As can be seen, by adopting this implementation method and setting up two independent and interconnected power control architectures, redundancy at the control level is achieved. When either controller malfunctions, the other normal controller can take over the control of the power system on the malfunctioning side through the data transmission line, thereby ensuring the continuity of the power system output and the reliability of power supply.

[0048] The first power system 1000 and the second power system 2000 involved in the embodiments of this application can both include various functional systems that implement power functions, such as Figure 1A , Figure 1B and Figure 1C As shown in either example, both the first power system 1000 and the second power system 2000 can include a power management subsystem and a safety management subsystem. The power management subsystem is a collection of devices directly related to energy conversion, storage, and transmission within the power system. The power management subsystem experiences rapid state changes and has relatively high real-time control requirements. For example... Figure 1B As shown, the power management subsystem may include at least one of a battery device, a charging device, an energy management system (EMS), and a DC-DC converter (DC / DC converter). The safety management subsystem is a collection of devices in the power system used to ensure the safety of equipment and the environment, such as... Figure 1B As shown, the safety management subsystem may include at least one of the following: fire protection devices, temperature control devices, ventilation devices, sensors, and uninterruptible power supply (UPS).

[0049] For either the first power system 1000 or the second power system 2000, fire suppression systems are configured to actively monitor the thermal runaway risk of the power system and provide timely warnings, as well as quickly suppress fire and prevent its spread in the event of a fire. These systems include, for example, smoke detectors, temperature sensors, fire alarm controllers, and fire extinguishing devices. Temperature control systems are configured to regulate the temperature and humidity inside the power system to ensure a suitable operating environment for the power system and other equipment. These systems include, for example, air conditioners, water-cooled units, heaters, and related controllers. Ventilation systems are configured to exhaust flammable gases and heat generated during battery charging and discharging to reduce the risk of thermal runaway and explosion, and to maintain a stable environment inside the enclosure. These systems include, for example, ventilation fans, dampers, and ductwork. Sensors are a collection of various sensing devices that monitor key parameters such as battery voltage, current, temperature, humidity, and gas concentration within the power system in real time. These sensors include, for example, temperature and humidity sensors, flammable gas detectors, smoke sensors, and current / voltage sensors. A UPS (Uninterruptible Power Supply) is an uninterruptible power supply containing energy storage devices that can provide uninterrupted power to equipment in the power control system that requires high power stability (such as controllers and network equipment). The battery unit is the energy system that provides electrical input to the ship within a box-type power system. A battery unit can contain multiple battery clusters, each cluster comprising multiple battery modules and a Battery Management System (BMS). The charging unit is a collection of devices that connect to external charging stations to charge the battery unit. The Energy Management System (EMS) is a control system that optimizes the ship's energy production, storage, distribution, and consumption. The EMS can send scheduling commands to the controller of the power control system. The DC / DC converter can provide low-voltage DC power to loads such as controllers, or be used to enable energy exchange between DC buses of different voltage levels.

[0050] It should be noted that the above is merely an illustrative description and does not constitute a limitation on the functional systems included in the power management subsystem and safety management subsystem of this application. The type and number of functional systems included in the power management subsystem and safety management subsystem can be configured according to application requirements. In one embodiment, to meet basic marine safety standards, the safety management subsystem may include fire-fighting equipment and temperature control equipment. In another embodiment, to meet higher marine safety standards, the safety management subsystem may include fire-fighting equipment, temperature control equipment, ventilation equipment, sensors, and a UPS. In one embodiment, in marine energy storage applications that do not require shore-based charging, the power management subsystem may include battery devices, an EMS, and a DC-DC converter. In another embodiment, in applications equipped with shore-based charging, the power management subsystem also includes a charging device. This application does not limit these aspects.

[0051] Since the first power system 1000 is controlled by the first controller 10, and the second power system 2000 is controlled by the second controller 20, and the communication interfaces, data formats, and real-time requirements of the power management subsystem and the safety management subsystem within the power system differ significantly, based on this, refer to... Figure 1B As shown, the first power control architecture 1 includes a first monitoring gateway 12, and the second power control architecture 2 includes a second monitoring gateway 22. When both the first controller 10 and the second controller 20 are operating normally, the first monitoring gateway 12 is used to send the safety control signals of the first controller 10 to the safety management subsystem included in the first power system 1000; the second monitoring gateway 22 is used to send the safety control signals to the safety management subsystem included in the second power system 2000.

[0052] In some embodiments, reference is made again. Figure 1B The data transmission line 3 includes a monitoring link 301 between the first monitoring gateway 12 and the second monitoring gateway 22. When both the first controller 10 and the second controller 20 are operating normally, the monitoring link 301 is configured to transmit the operating status data of the safety management subsystems of the first power system 1000 and the second power system 2000 to the peer controller, so that the first controller 10 monitors the operating status data of the safety management subsystem of the second power system, and the second controller 20 monitors the operating status data of the safety management subsystem of the first power system.

[0053] The monitoring gateway can be used for data aggregation, protocol conversion, and status monitoring between the controller and the safety management subsystem. It connects safety control devices such as fire-fighting devices, temperature control devices, and temperature and humidity sensors via a serial communication protocol (e.g., Modbus RTU protocol). In some embodiments, both the first monitoring gateway 12 and the second monitoring gateway 22 can be implemented as RS-485 gateways. Taking the first monitoring gateway 12 as an example, it can transmit monitoring data from the safety management subsystem included in the first power system 1000 to the first controller 10, and issue safety control commands to the safety management subsystem. The monitoring data of the safety management subsystem may include the operating status and alarm information of each safety device. The role of the second monitoring gateway 22 in the second power control architecture 2 is the same as that of the first monitoring gateway 12 in the first power control architecture 1, and will not be described in detail here.

[0054] In some embodiments, the first monitoring gateway 12 and the second monitoring gateway 22 can also read the status data of the peer security management subsystem via the monitoring link 301. In this way, the monitoring link 301 can periodically transmit the status data of the abnormal side security management subsystem to the normal side controller. For example, the second controller 20 can query the temperature sensor data under the first monitoring gateway 12 through the monitoring link 301 to realize the status perception of the safety devices in the blind zone on the abnormal side.

[0055] In other embodiments, the monitoring link 301 is also configured to send the safety control signal of the second controller 20 to the safety management subsystem of the first power system 1000 via the second monitoring gateway 22 and the first monitoring gateway 12 when the first controller 10 is in an abnormal state; or, when the second controller 20 is in an abnormal state, send the safety control signal of the first controller 10 to the safety management subsystem of the second power system 2000 via the first monitoring gateway 12 and the second monitoring gateway 22.

[0056] In this embodiment, the monitoring link 301 can be a physical communication line, which connects the first monitoring gateway 12 and the second monitoring gateway 22 through the physical ports of the first monitoring gateway 12 and the second monitoring gateway 22. For example, the monitoring link 301 can be implemented as an RS-485 communication line.

[0057] Safety control signals can be implemented as instructions to control or configure parameters of devices and equipment in the safety management subsystem. For example, the safety control signal may include instructions to start / stop ventilation devices, instructions to adjust the target temperature of temperature control devices, instructions to reset fire alarm devices, or instructions to read sensor data.

[0058] For example, if the first controller 10 malfunctions and crashes, the second controller 20 can send a command to the second monitoring gateway 22 to start the ventilation device. After reaching the second monitoring gateway 22, this command is transmitted to the first monitoring gateway 12 via the RS-485 line (i.e., monitoring link 301). The first monitoring gateway 12, for example, forwards the command to the ventilation device of the first power system 1000. Furthermore, the first controller 10 can also read data such as the combustible gas concentration of the first power system 1000 via the monitoring link 301. Then, if the combustible gas concentration reaches a safety threshold, the first controller 10 can issue a command to stop the ventilation device via the monitoring link 301.

[0059] In this way, by using the monitoring gateways in the two power control architectures to establish a cross-architecture monitoring link, a bidirectional safety status data channel is built without adding extra core hardware. This allows a normal controller on one side to obtain and control the status of the safety management subsystem on the abnormal side when the controller on the other side is abnormal, thereby ensuring continuous monitoring of the safety management subsystem on the abnormal side and thus improving the safety and reliability of the power system.

[0060] Refer again Figure 1B The first power control architecture 1 includes a first data bus 11, and the second power control architecture 2 includes a second data bus 21. The first data bus 11 is used to establish a communication connection between the first controller 10 and the power management subsystem included in the first power system 1000. Similarly, the second data bus 21 is used to establish a communication connection between the second controller 20 and the power management subsystem included in the second power system 2000.

[0061] Due to its high transmission rate and strong real-time performance, the data bus is suitable for transmitting control commands and rapidly changing operating parameters. In some embodiments, both the first data bus 11 and the second data bus 21 can be Controller Area Network (CAN) buses. Taking the first data bus 11 as an example, the first data bus 11 can transmit the operating data of the power management subsystem in the first power system 1000 to the first controller 10 in real time, and transmit the power control commands issued by the first controller 10 to the power management subsystem. The operating data of the power management subsystem may include, for example, operating condition data such as the voltage, current, and state of charge (SOC) of the battery device. The function of the second data bus 21 in the second power control architecture 2 is the same as that of the first data bus 11 in the first power control architecture 1, and will not be described in detail here.

[0062] In this way, for any power control architecture, the controller is connected to the power management subsystem via a data bus, and the controller is connected to the safety management subsystem via a monitoring gateway. This ensures both the real-time and reliable transmission of power control commands and the comprehensiveness and stability of safety monitoring data acquisition. It not only enables the classified management of devices with different functional attributes, but also helps to improve the system's integration and maintainability.

[0063] refer to Figure 1CThe illustrated power control system includes a communication bus 302 connecting the first data bus 11 and the second data bus 21. The communication bus 302 can be configured to, in the event of an abnormal state of the first controller 10, transmit the power control signal of the second controller 20 to the power management subsystem of the first power system 1000 via the second data bus 21 and the first data bus 11; or, in the event of an abnormal state of the second controller 20, transmit the power control signal of the first controller 10 to the power management subsystem of the second power system 2000 via the first data bus 11 and the second data bus 21.

[0064] The power control signals are used to control the operating status of each power unit in the power management subsystem. These signals may include high-voltage power-on / power-off commands for the battery unit, charging / discharging power commands for the charging unit, start / stop commands for the DC / DC converter, and connection / disconnect commands for the charging station.

[0065] In some embodiments, the communication bus 302 can not only transmit control signals across the power control system, but also be used for bidirectional synchronization of operating condition data of the power management subsystems of the first power system 1000 and the second power system 2000. For example, the second controller 20 can periodically read operating condition parameters such as the SOC, State of Health (SOH), and temperature of the battery in the first power system 1000 through the communication bus 302, thereby providing data for cross-system control of the power management subsystem.

[0066] For example, the communication bus 302 can be implemented as a CAN bus or an Ethernet line. Based on this, the physical connection method and data communication protocol between the communication bus 302 and the first data bus 11 and the second data bus 21 can be set according to the type of the communication bus 302. For example, if the data bus is an Ethernet, the communication bus can be implemented by cascading switches; if the data bus is a CAN bus, it can be directly connected through a twisted pair cable. This invention does not limit this.

[0067] It should be noted that in the abnormal state of the first controller 10, the second controller 20 takes over the control of the power management subsystem of the first power system 1000 through the communication bus 302. For example, the second controller 20 can send a charge / discharge control signal through the second data bus 21. This charge / discharge control signal is transmitted to the first data bus 11 via the communication bus 302. Then, the first data bus 11 sends the charge / discharge control signal to the battery device of the first power system 1000 to control the charging and discharging of the battery device of the first power system 1000. The process by which the first controller 10 controls the power management subsystem of the second power system 2000 in the abnormal state of the second controller 20 is similar to the above process and will not be described in detail here.

[0068] In this way, a cross-architecture power control link is constructed by adding a communication bus between the data buses of the two power control systems. This link allows the controller on the other side, which is operating normally, to control the power management subsystem on the abnormal side (such as controlling the charging and discharging of the battery system and starting and stopping the DC-DC converter) through the data bus when the controller on one side malfunctions. This achieves seamless takeover of power load control and ensures the continuity of system power supply.

[0069] refer to Figure 1D The schematic power control system includes a data transmission line 3 that further includes a network line 303 connecting the first controller 10 and the second controller 20, wherein the network line 303 is configured to transmit heartbeat signals between the first controller 10 and the second controller 20.

[0070] For example, network line 303 can be an Ethernet cable, through which the first controller 10 and the second controller 20 can establish a connection via their respective Ethernet interfaces.

[0071] A heartbeat signal is a periodic status signal used to indicate whether a device is online. Typically, when the sender is online, it sends data packets of a specific format at fixed time intervals (e.g., every second). If the receiver receives the data packet from the sender at the fixed time interval, it can determine that the sender is operating normally. If the receiver does not receive the data packet within a preset timeout period (e.g., three consecutive cycles), it can determine that the sender is in an abnormal state.

[0072] In some embodiments, the first controller 10 and the second controller 20 can act as server and client to each other, relying on periodically sending heartbeat signals via network line 303 through the Transmission Control Protocol (TCP). For example, the first controller 10 sends a heartbeat message to the second controller 20 every second through network line 303, and the second controller 20 can update the status flag of the first controller 10 after receiving each heartbeat message. If the second controller 20 does not receive a heartbeat message from the first controller 10 within 3 seconds, it determines that the first controller 10 is abnormal, and then can take over the control of the power management subsystem and safety management subsystem of the first power system 1000.

[0073] In some embodiments, the first controller 10 and the second controller 20 can use a request-response mode for heartbeat detection. For example, the first controller 10 can send a heartbeat request to the second controller 20 via network line 303, and the second controller 20 can respond to the heartbeat request by replying with a response message via network line 303. If the first controller 10 fails to receive a response message multiple times consecutively, it can be determined that the second controller 20 is abnormal.

[0074] By adding a network line between the two controllers, the two controllers can monitor each other's heartbeat signals, thereby enabling the two controllers to accurately perceive the operating status of the other end. This is beneficial for the other end to take over the power control of the abnormal end in time when one end is abnormal.

[0075] Refer again Figure 1D Both the first power control architecture 1 and the second power control architecture 2 include network devices. For either the first power control architecture 1 or the second power control architecture 2, the network device in that power control architecture is communicatively connected to the controller and monitoring gateway in that power control architecture. For example, the network device is configured to forward operational status data from the controller and / or the monitoring gateway.

[0076] In some embodiments, the network device is a data forwarding device used for data exchange, routing, or connection. For example, the network device may be implemented as a switch, router, or PLC module with network routing capabilities. The operational status data involved in the embodiments of this application are data characterizing the operation of the power system and its various subsystems, and may include the operation logs and control modes of the first controller 10 and the second controller 20, the voltage / current / temperature of the battery device, the alarm status of the safety management subsystem (such as fire alarm, temperature control operation mode), and sensor data (such as temperature, humidity, and combustible gas concentration), etc.

[0077] In some embodiments, taking the first power control architecture 1 as an example, the network devices in the first power control architecture 1 are implemented as switches, which can receive status data from the first controller 10, safety operating condition data from the first monitoring gateway 12, and power operating condition data from the first data bus 11. Furthermore, these data can be forwarded via fiber optic or wireless networks to the cloud, the ship's engine room monitoring and alarm system (AMS), or a shore-based remote monitoring center. It should be understood that the connection relationships and functions of the network devices in the second power control architecture 2 are similar to those in the first power control architecture 1, and will not be detailed here in the embodiments of this application.

[0078] In this way, by deploying network equipment, the operating status data of different functional devices in the power system can be integrated and forwarded, thereby supporting remote operation and maintenance and management of the system.

[0079] like Figure 1D As shown, in some embodiments, the network device in this power control architecture is communicatively connected to a human-machine interface (HMI). The HMI can be configured to display operational status data from the network device. In some embodiments, the HMI includes a touchscreen serving as a human-machine interface (HMI), which can be mounted on the control cabinet of a container.

[0080] For example, the data displayed on the HMI's display interface may include the operating status data, device on / off status, and alarm levels of each device included in this power control architecture (e.g., the first power control architecture 1), and may also include various safety data from the safety management subsystem in another power control architecture (e.g., the second power control architecture 2), such as fire protection, temperature control, and ventilation data. The safety data from the other power control architecture is transmitted via... Figure 1B or Figure 1C The monitoring link 301 shown in the diagram transmits the data. In some embodiments, the HMI can visualize the received data in the form of graphics, text, tables, etc.

[0081] In some embodiments, the human-machine interface device can also serve as an input terminal for control commands. For example, the human-machine interface device (HMI) can receive control commands input by the operator, such as "start controller," "stop controller," and "parameter setting."

[0082] As can be seen, by connecting network devices with human-machine interface devices, local visualization of system operating status data is achieved, which makes it easier for operators to intuitively view various operating data, operating modes and alarm information of the power control system, and also facilitates on-site debugging, maintenance and emergency response.

[0083] The power control method of this application embodiment will now be described with reference to the accompanying drawings. The power control method of this application embodiment is applied to… Figures 1A to 1D A schematic diagram of a power control system.

[0084] Figure 2A An exemplary power control method of this application is shown, which can be implemented through steps S11 to S13: In step S11, the first power control architecture and the second power control architecture exchange operating status data through data transmission lines.

[0085] The first power control architecture is as follows: Figures 1A to 1D The first power control architecture 1 and the second power control architecture are shown in the figure. Figures 1A to 1D Any of the following schematic diagrams of the second power control architecture 2, the first power system as shown Figures 1A to 1D The first power system 1000 is shown in any of the diagrams, and the second power system is as follows: Figures 1A to 1D The first power supply system 1000 is shown in any of the diagrams.

[0086] In some embodiments, the operating status data of the first power control architecture includes the operating status data of the first power system read by the first controller, and the operating status data of the second power control architecture includes the operating status data of the second power system read by the second controller. Referring to the descriptions of the first and second power systems in the foregoing embodiments, exemplarily, the operating status data of the first power control architecture includes the operating log and control mode of the first controller 10, the voltage / current / temperature of the battery device in the first power system, and the alarm status (such as fire alarm, temperature control operation mode) and sensor data (such as temperature, humidity, combustible gas concentration) of the safety management subsystem of the first power system. Similarly, the operating status data of the second power control architecture includes the operating log and control mode of the second controller 20, the voltage / current / temperature of the battery device in the second power system, and the alarm status (such as fire alarm, temperature control operation mode) and sensor data (such as temperature, humidity, combustible gas concentration) of the safety management subsystem of the second power system.

[0087] In some embodiments, the first power control architecture and the second power control architecture can periodically exchange operating status data. For example, the first controller 10 broadcasts its own operating status data to the second controller 20 once per second via a data transmission line. Similarly, the second controller 20 can also broadcast its own operating status data to the first controller 10 at a period of 1 second. This allows the first and second power control architectures to promptly grasp the operating status of the other end, facilitating timely detection of anomalies in the other controller and timely takeover of control of the other power control architecture.

[0088] In step S12, when the first controller is in an abnormal state, the second controller sends a control signal to the first power system through the data transmission line.

[0089] The term "abnormal state" for the first controller refers to a state in which the first controller is unable to perform normal monitoring and management functions on the power system it controls. Abnormal states can include, for example, hardware failures, program crashes, communication failures, and power-down maintenance. The type and content of the control signals are related to the linearity of the data transmission lines and the specific functional devices in the first power system.

[0090] In some embodiments, when the data transmission line includes a monitoring link, reference is made to... Figures 1A to 1D As illustrated in any power control system diagram, the monitoring link is a link between the first monitoring gateway and the second monitoring gateway. The first monitoring gateway is used to establish a communication connection between the first controller and the safety management subsystem included in the first power system, and the second monitoring gateway is used to establish a communication connection between the second controller and the safety management subsystem included in the second power system. Each safety management subsystem includes devices such as fire-fighting equipment, temperature control devices, ventilation devices, sensors, and UPS. Therefore, in this embodiment, the second controller sends safety control signals to the safety management subsystem of the first power system via the monitoring link. Safety control signals may include, for example, commands to start / stop the ventilation device, commands to adjust the target temperature of the temperature control device, commands to reset the fire-fighting device alarm, or commands to query sensor data.

[0091] In some embodiments, when the data transmission line includes a communication bus, reference is made to... Figures 1B to 1D As can be seen from any illustrated power control system, the communication bus is a link connecting the first data bus and the second data bus. The first data bus is used to establish a communication connection between the first controller and the power management subsystem included in the first power system, and the second data bus is used to establish a communication connection between the second controller and the power management subsystem included in the second power system. Each power management subsystem includes a battery device, a charging device, an EMS, and a DC / DC converter. Based on this, in this embodiment, the second controller sends power control signals to the power management subsystem of the first power system via the communication bus. Power control signals may include, for example, high-voltage power-on / power-off commands for the battery device, charging / discharging power commands for the charging device, start / stop commands for the DC / DC converter, and connection / disconnect commands for the charging pile, etc.

[0092] In step S13, when the second controller is in an abnormal state, the first controller sends a control signal to the second power system through the data transmission line.

[0093] In the abnormal state of the second controller, the exemplary implementation process of the first controller sending a control signal to the second power system is similar to the implementation process of the second controller sending a control signal to the second power system in step S12, and step S13 will not be described again here.

[0094] By adopting this implementation method, the two power control architectures share operating status data through data transmission lines, thereby realizing the coordinated control of the dual-architecture system under both normal operation and single-sided fault conditions, improving the availability and robustness of the power control system.

[0095] It should be noted that during the execution of step S11, the first controller and the second controller can also monitor each other's heartbeat signals via a network line. If the second controller detects an abnormality in the heartbeat signal of the first controller, the second controller determines that the first controller is abnormal. Then, the second controller can forward the operating status data of the first power control architecture to the human-machine interface device of the second power system via its local network device, so as to display the operating status data of the first power control architecture on the HMI of the second power system's HMI device. In some embodiments, the second controller can also send the operating status data of the first power control architecture to the AMS and / or the cloud. It should be understood that if the first controller detects an abnormality in the heartbeat signal of the second controller, the first controller determines that the second controller is abnormal, and then forwards the operating status data of the second power control architecture to its local HMI device, AMS, and / or the cloud via its local network device.

[0096] In this way, while ensuring timely control takeover, the operational status data of the abnormal side can be visualized and sent to the remote monitoring center, enabling operators to know the system status in a timely manner and intervene in the control of the power system.

[0097] It should be noted that the above-described power control method embodiment includes a startup phase after the power control system enters the operating state and before the first power control architecture and the second power control architecture exchange operating state data through the data transmission line. The following uses the first power control architecture in the power control system as an example to illustrate the operation flow of the startup phase of the power control system. Figure 2B As shown, the operation flow of the power control system during the startup phase includes steps S21 to S23.

[0098] Step S21: After the first power control architecture is powered on, the first power control architecture and the first power system perform a functional self-test.

[0099] Specifically, the first power control architecture will power on upon initial power-on or after a fault reset. Upon power-on, the first power control architecture initializes its internal variables, status flags, and operational logic, and then performs a functional self-test after initialization.

[0100] Functional self-test refers to the process of performing a series of internal hardware and software diagnostic tests on each functional device in the first power control architecture and each functional unit of the first power system. For example, the functional self-test of the first power control architecture may include checking the communication status of the PLC, switch, monitoring gateway, etc., within the first power control architecture; the functional self-test of the first power system may include checking the communication response of each subsystem, such as the BMS, temperature control device, and fire suppression device, as well as verifying operating parameters. If all self-test items are normal, the first power control architecture is confirmed to be functionally normal, and step S22 is executed. If the results of some self-test items are faulty, the first power control architecture is locked and enters a fault alarm state.

[0101] Step S22: After confirming that both the first power control architecture and the first power system are functioning normally, the first power control architecture enters standby mode.

[0102] The standby state is a low-power ready state that does not output power to the outside. In the standby state, the main power circuit of the first power system is disconnected and the high voltage is not powered on, but the first power control architecture is in a ready state, continuously monitoring the internal status and external commands of the first power system, and periodically reporting the status.

[0103] In step S23, in response to receiving the control command, the first controller sends a control signal to the corresponding functional system in the first power system to trigger the corresponding functional system in the first power system to enter the corresponding operating mode.

[0104] The control command can trigger the first power system to enter a specific operating mode. In this embodiment, the control command can come from the local human-machine interface device, remote monitoring system, charging pile, or EMS, etc. The operating mode triggered by the control command input through different channels is different.

[0105] In some embodiments, the first controller receiving control instructions may specifically include receiving a first control instruction input by the human-machine interface device of the first power system; and / or, in response to detecting a charging pile connection signal, using the charging signal as a second control instruction; and / or, receiving an energy dispatch signal from the EMS of the first power system, using the energy dispatch signal as a third control instruction, wherein the third control instruction is a grid connection instruction or a load adjustment instruction.

[0106] For example, the first control command may come from a touch button on the local HMI or a physical button on the enclosure (such as a "local / remote" knob). The second control command may be a charging control command issued by the charging pile system upon detection of a physical connection with an external charging pile (such as the insertion of a charging gun) or automatically generated by the first controller based on the connection status. The third control command may be a control command issued by the EMS, which may specifically be a "grid connection command" requesting grid-connected power generation or a "load regulation command" requiring the first power system to adjust its output power.

[0107] In some implementation scenarios, the first power control architecture can receive one type of control command within a certain time period. In other implementation scenarios, the first power control architecture can receive multiple commands in parallel or sequentially within a short time period. If multiple commands are received in parallel or within a short time period, the control command referenced to start the control mode can be determined according to a preset priority. Among them, the first control command has a higher priority than the second control command, and the second control command has a higher priority than the third control command.

[0108] For example, if an operator inputs a shutdown command (i.e., the first control command) through the HMI for maintenance purposes during the execution of the EMS scheduling command (i.e., the third control command) by the first power control architecture, the first power control architecture should immediately suspend or terminate the EMS scheduling command and instead execute the higher-priority shutdown command to ensure the safety of the operator.

[0109] For example, if the first power control architecture detects a charging pile connection signal (i.e., the second control command) while executing the first control command, the first power control architecture ignores or temporarily stores the charging pile connection signal and continues to execute the first control command until the first control command is completed, and then executes the charging control command.

[0110] It should be noted that during the execution of the first control command, although no other control commands are executed, the first controller can receive and record other control commands, as well as reply with "local lock" status information to the sender of other control commands, in order to synchronize the current control status.

[0111] As can be seen, this technical solution defines three control signals from different sources and defines the priority order of the three control signals, which is beneficial to ensure safe scheduling and control according to the priority strategy under complex working conditions.

[0112] See Figure 2C , Figure 2C An exemplary power control method is shown, which includes steps S31 and S32: Step S31: For either the first controller or the second controller, the controller periodically performs fault monitoring on the controlled target power system.

[0113] In this context, the target power system refers to the first power system and / or the second power system. Taking either controller as the first controller as an example, in some implementation scenarios, if both the first and second controllers are operating normally, then the target power system controlled by the first controller is the first power system. If the first controller is operating normally and the second controller is in an abnormal state, then the first controller not only controls the first power system but also takes over the control of the second power system; that is, in this scenario, the target power system controlled by the first controller is both the first and second power systems.

[0114] In some embodiments, the period for the controller to perform fault monitoring on the target power system can be 100 milliseconds.

[0115] For example, the first controller 10 can read the voltage and temperature data of each cell in the first battery system 1000 every 100 milliseconds through the first data bus 11. When the temperature of any cell rises sharply in a short period of time and exceeds the preset "thermal runaway warning" threshold, the first controller 10 determines that the system has a preset type of fault.

[0116] Step S32: If a preset type of fault is detected in the target power system, any controller controls the target power system to shut down urgently.

[0117] Among them, the preset type of fault is the highest-level fault predefined fault, which is a type of fault that directly endangers the power supply equipment or personal safety. For example, the highest-level fault may include battery thermal runaway (i.e., the battery temperature rises rapidly and uncontrollably), insulation fault (i.e., the system insulation resistance to ground is far below the safety threshold), overheating of important components (such as power switching transistors), and short circuit in the main circuit.

[0118] Emergency shutdown can be specifically achieved by disconnecting all high-voltage contactors of the target power system, disconnecting the target power system from the power grid, and stopping all power output.

[0119] For example, the first controller 10 can send a disconnect command to the high-voltage contactor to control the emergency shutdown of the target power system by cutting off the high-voltage output, and switch the state to fault lockout, ignoring all subsequent control commands, and can display an alarm on the HMI. In some embodiments, if battery thermal runaway or overheating of critical components is detected, the first controller 10 can also trigger fire-fighting linkages (such as releasing fire extinguishing agents) and safety measures such as enhanced ventilation.

[0120] This implementation method supports emergency shutdown when a preset high-level fault is detected. It can proactively identify and quickly cut off the fault source, preventing the fault from spreading and deteriorating further. This helps ensure the safety of equipment and personnel and significantly improves the safety and reliability of the power control system.

[0121] The power control method of this application embodiment is described below with reference to examples. In the following examples, the power control system is implemented as follows: Figure 1D The schematic architecture is illustrated, with the controller in each architecture implemented as a PLC, the monitoring link in each architecture implemented as a 485 gateway, and the data bus in each architecture implemented as a CAN bus.

[0122] See Figure 3A , Figure 3A An exemplary power control method for a power control architecture is shown. Figure 3A The illustrated power control method is a power control method for any power control architecture when both power control architectures are operating normally. This power control method includes steps S110 to S160, after the power control architecture is powered on: In step 110, the PLC, switch, 485 gateway, and various subsystems of the power control architecture are initialized and self-tested.

[0123] The implementation process of power control architecture initialization and self-test is detailed in the above embodiments and will not be described in detail here.

[0124] If all self-test items pass, the power control architecture enters the standby state in step S120.

[0125] In step 120, the power control architecture enters a standby state and periodically checks whether each device has a fault.

[0126] During standby mode, the PLC can periodically send the operating status data of the power control architecture to the HMI via a switch to display the system status and data of each device.

[0127] In step 130, the system continuously monitors whether a control command is received. If a control command is received, step S140 is executed; otherwise, step S130 is executed.

[0128] In step 140, the PLC controls the power supply system to perform the corresponding control mode according to the type of control instruction.

[0129] If the control command is triggered by the operator through the local HMI, then the PLC control power system enters local mode, which means that the system is controlled according to the command input by the operator.

[0130] If the control command is a charging command received via the CAN bus, the PLC controls the battery device to charge according to the charging command and the strategy contained in the charging command (such as constant current / constant voltage) until the charging target (such as full SOC) is reached or a stop command is received. Then, the PLC controls the charging circuit contactor to close.

[0131] If the control command is a scheduling command from the EMS received via the CAN bus, the PLC can parse the scheduling command and then control the device specified by the scheduling command to perform the corresponding charging / discharging operation, and feed back the operating data to the EMS for energy management.

[0132] In step 150, if a preset highest-level fault is detected in the power control architecture, the PLC controls the power control architecture to shut down urgently.

[0133] The implementation examples for the highest-level fault and emergency shutdown control are detailed above and will not be repeated here.

[0134] In step 160, the PLC receives a reset command and executes step S110.

[0135] Among them, the reset command is the highest level of fault clearance. After the fault is cleared, the PLC can receive the reset command input by the operator through the HMI.

[0136] It should be noted that, under normal operating conditions, the dual-power control architecture in this application embodiment is electrically and controllably isolated from each other. When the PLC of either architecture stops operating due to a fault, the PLC of the other architecture can take over the critical load of the faulty architecture. Figure 3B An exemplary method flow for taking over control between two power control architectures is shown.

[0137] exist Figure 3A After step 110, in step 310, the PLC of the first power control architecture and the PLC of the second power control architecture are configured for multi-protocol communication network.

[0138] For example, Modbus TCP communication based on TCP / IP can be configured for data exchange with AMS, HMI, etc., and for communication between the PLCs of the first power control architecture and other PLCs within the first power control architecture. CAN bus communication parameters should also be configured to establish control links with devices such as battery packs, DC / DC converters, and charging piles.

[0139] In step 320, the PLC of the first power control architecture performs heartbeat detection on the PLC of the second power control architecture. If the heartbeat signal of the PLC of the second power control architecture is abnormal, proceed to step 330; otherwise, proceed to step 350.

[0140] Heartbeat detection involves each PLC listening to the heartbeat signal of each sub-device in the architecture to continuously monitor the online status of the devices. If the heartbeat signal is normal, the data of each sub-device (such as voltage, temperature, status word, etc.) is read according to a preset cycle and sent to the HMI for visualization display.

[0141] In step 330, the PLC of the first power control architecture monitors the heartbeat signal of the device to be taken over in the second power control architecture. If the heartbeat signal of the device to be taken over is normal, then step 340 is executed.

[0142] For example, the PLC of the first power control architecture can read the heartbeat signals of the fire-fighting devices, temperature control devices, ventilation devices, and various sensors of the second power control architecture through a 485 gateway, and collect the data of the power system of the second power control architecture, high voltage, DC / DC start and stop through the CAN bus, and realize the heartbeat signals of the external EMS and charging system.

[0143] In step 340, the PLC of the first power control architecture takes over the control of the second power control architecture.

[0144] For example, the PLC of the first power control architecture can control the fire-fighting devices, temperature control devices, ventilation devices, and various sensors of the second power control architecture through a 485 gateway, and collect data on the power system of the second power control architecture, high voltage, DC / DC start and stop through the CAN bus, and realize the control command response of the external EMS and charging system.

[0145] In step 350, the PLC of the second power control architecture monitors the status of the second power system.

[0146] By adopting the technical solution of this application, a direct communication channel is established between the first power control architecture and the second power control architecture through a data transmission line. This channel is used to transmit heartbeat signals between the first controller and the second controller, enabling the first controller and the second controller to detect the operating status of the other controller based on the heartbeat signal. Thus, in the case of an abnormal state of the first controller, the control signal of the second controller can be sent to the first power system through the data transmission line, or in the case of an abnormal state of the second controller, the control signal of the first controller can be sent to the second power system through the data transmission line. This facilitates the construction of a cross-architecture control signal transmission path at the control system architecture level, and can overcome the technical defect that a single controller failure can lead to the complete loss of control of its subordinate power systems, thereby improving the control continuity of the dual power system under asymmetrical operating conditions. Furthermore, the first power control architecture includes a first controller and a first power system controlled by the first controller; the second power control architecture includes a second controller and a second power system controlled by the second controller. It can be seen that in this technical solution, the electrical outputs of the two power systems are independent of each other. The cross-architecture signal transmission of control logic is realized through data transmission lines. When the electrical output of either power system is still in a normal state but its controller malfunctions, the controller on the other side can take over the control of the malfunctioning power system through the data transmission lines, so that the malfunctioning power system can still be controlled and operated. This helps to avoid the risk of the corresponding power system failing completely due to the malfunction of a single controller.

[0147] Figure 4 An exemplary electric vessel of this application is shown, the electric vessel including a first power system 41, a second power system 42, and a power control system 43, the power control system 43 as follows: Figures 1A to 1D As shown in any one of them.

[0148] The electric ships provided in the above embodiments of this application and the power control systems and power control methods provided in the embodiments of this application are based on the same application concept and have the same beneficial effects as the methods adopted, run or implemented by their stored applications.

[0149] This application also provides an electronic device corresponding to the power control method provided in the foregoing embodiments, for executing any of the aforementioned power control methods. The embodiments in this application are not limited to any particular type.

[0150] Please refer to Figure 5 This illustrates a schematic diagram of an electronic device provided by some embodiments of this application. For example... Figure 5As shown, the electronic device 50 is a PLC. The electronic device 50 includes a processor 500, a memory 501, a bus 502, and a communication interface 503. The processor 500, the communication interface 503, and the memory 501 are connected through the bus 502. The memory 501 stores a computer program that can run on the processor 500. When the processor 500 runs the computer program, it executes the method provided in any of the foregoing embodiments of this application.

[0151] The memory 501 may include high-speed random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Communication between this system network element and at least one other network element is achieved through at least one communication interface 503 (which can be wired or wireless), such as the Internet, wide area network, local area network, or metropolitan area network.

[0152] Bus 502 can be an ISA bus, PCI bus, or EISA bus, etc. The bus can be divided into address bus, data bus, control bus, etc. The memory 501 is used to store programs. After receiving an execution instruction, the processor 500 executes the program. The power control method disclosed in any of the aforementioned embodiments of this application can be applied to the processor 500, or implemented by the processor 500.

[0153] The processor 500 may be an integrated circuit chip with signal processing capabilities. In implementation, each step of the above method can be completed by the integrated logic circuitry in the hardware of the processor 500 or by instructions in software form. The processor 500 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules may reside in random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. The storage medium is located in memory 501. The processor 500 reads the messages in memory 501 and completes the steps of the above method in conjunction with its hardware.

[0154] The electronic device and the power control method provided in the embodiments of this application are based on the same application concept and have the same beneficial effects as the methods they adopt, operate or implement.

[0155] This application also provides a computer-readable storage medium corresponding to the power control method provided in the foregoing embodiments. Please refer to... Figure 6 It shows a computer-readable storage medium 60, which may be an optical disc containing a program product, such as an operating system, application software, games, or utility software. The program product includes a computer program, which typically exists in source code or compiled binary form. When the computer program is run by a processor, it executes the power control method provided in any of the aforementioned embodiments.

[0156] It should be noted that examples of computer-readable storage media may also include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical and magnetic storage media, which will not be elaborated here.

[0157] The computer-readable storage medium provided in the above embodiments of this application and the power control method provided in the embodiments of this application are based on the same application concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0158] This application also provides a computer program product corresponding to the method provided in the foregoing embodiments. The computer program product includes a computer program that is executed by a processor to implement the power control method provided in the foregoing embodiments.

[0159] The computer program products provided in the above embodiments of this application and the methods provided in the embodiments of this application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the applications stored therein.

[0160] It should be noted that: In the foregoing text, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of this application is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0161] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods of the various embodiments of this application.

[0162] The embodiments of this application have been described above with reference to the accompanying drawings. These are merely specific implementations of this application, but this application is not limited to the specific implementations described above. The specific implementations described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. A power supply control system, characterized in that, The power control system includes a first power control architecture and a second power control architecture that are interconnected via data transmission lines. The first power control architecture includes a first controller and a first power system controlled by the first controller; the second power control architecture includes a second controller and a second power system controlled by the second controller; the first power system and the second power system are power systems in an electric ship; The data transmission line is used to transmit the heartbeat signals between the first controller and the second controller; If the first controller detects an abnormal heartbeat signal from the second controller, it determines that the second controller is in an abnormal state; if the second controller detects an abnormal heartbeat signal from the first controller, it determines that the first controller is in an abnormal state; the abnormal state refers to a state in which the controlled power system cannot be monitored and managed. The data transmission line is also used to send the control signal of the second controller to the first power system when the first controller is in an abnormal state, or to send the control signal of the first controller to the second power system when the second controller is in an abnormal state.

2. The system according to claim 1, characterized in that, The first power control architecture includes a first monitoring gateway; the second power control architecture includes a second monitoring gateway. When both the first controller and the second controller are operating normally, the first monitoring gateway is used to send the safety control signal of the first controller to the safety management subsystem included in the first power system; The second monitoring gateway is used to send the safety control signal of the second controller to the safety management subsystem included in the second power system; The safety control signals are transmitted based on a serial communication protocol.

3. The system according to claim 2, characterized in that, The data transmission line includes a monitoring link between the first monitoring gateway and the second monitoring gateway; When both the first controller and the second controller are operating normally, the monitoring link is configured to transmit the operating status data of the safety management subsystem of the first power system and the safety management subsystem of the second power system to the peer controller, so that the first controller monitors the operating status data of the safety management subsystem of the second power system, and the second controller monitors the operating status data of the safety management subsystem of the first power system.

4. The system according to claim 3, characterized in that, The monitoring link is also configured to: in the abnormal state of the first controller, send the safety control signal of the second controller to the safety management subsystem of the first power system via the second monitoring gateway and the first monitoring gateway; or, In the event of an abnormal state of the second controller, the safety control signal of the first controller is sent to the safety management subsystem of the second power system via the first monitoring gateway and the second monitoring gateway.

5. The system according to any one of claims 1-4, characterized in that, The first power control architecture includes a first data bus; the second power control architecture includes a second data bus. When both the first controller and the second controller are operating normally, the first data bus is used to send the power control signal of the first controller to the power management subsystem included in the first power system; the second data bus is used to send the power control signal of the second controller to the power management subsystem included in the second power system. The power control signal is transmitted based on a data communication protocol.

6. The system according to claim 4, characterized in that, The data transmission line also includes a communication bus connecting the first data bus and the second data bus; The communication bus is configured to send the power control signal of the second controller to the power management subsystem of the first power system via the second data bus and the first data bus when the first controller is in an abnormal state. or, In the event of an abnormal state of the second controller, the power control signal of the first controller is sent to the power management subsystem of the second power system via the first data bus and the second data bus.

7. The system according to claim 1, characterized in that, The data transmission line also includes a network line connecting the first controller and the second controller; The network line is configured to transmit the heartbeat signal between the first controller and the second controller.

8. The system according to any one of claims 1-4, characterized in that, Both the first power control architecture and the second power control architecture include network devices; For any power control architecture in the first power control architecture and the second power control architecture, the network device in the power control architecture is communicatively connected to the controller and monitoring gateway in the power control architecture. The network device is configured to forward operational status data from the controller and / or the monitoring gateway.

9. The system according to claim 8, characterized in that, In any of the power control architectures, the network device is communicatively connected to the human-machine interface device; the human-machine interface device is configured to display operating status data from the network device.

10. A power supply control method, characterized in that, The method includes: The first power control architecture and the second power control architecture exchange operating status data through a data transmission line. The operating status data of the first power control architecture includes the operating status data of the first power system read by the first controller, and the operating status data of the second power control architecture includes the operating status data of the second power system read by the second controller. The first power system and the second power system are the power systems in an electric ship. In the event of an abnormal state of the first controller, the second controller sends a control signal to the first power system through the data transmission line; In the event of an abnormal state of the second controller, the first controller sends a control signal to the second power system through the data transmission line; The abnormal state refers to a state in which monitoring and management of the controlled power system cannot be performed.

11. The method according to claim 10, characterized in that, The data transmission line includes a monitoring link, and the second controller sends control signals to the first power system through the data transmission line, including: The second controller sends a safety control signal to the safety management subsystem of the first power system via the monitoring link; the monitoring link is a link between the first monitoring gateway and the second monitoring gateway, the first monitoring gateway is used to establish a communication connection between the first controller and the safety management subsystem included in the first power system; the second monitoring gateway is used to establish a communication connection between the second controller and the safety management subsystem included in the second power system.

12. The method according to claim 10 or 11, characterized in that, The data transmission line includes a communication bus, and the second controller sends control signals to the first power system through the data transmission line, including: The second controller sends power control signals to the power management subsystem of the first power system via the communication bus; the communication bus is a link connecting the first data bus and the second data bus, the first data bus is used to establish a communication connection between the first controller and the power management subsystem included in the first power system, and the second data bus is used to establish a communication connection between the second controller and the power management subsystem included in the second power system.

13. The method according to claim 10 or 11, characterized in that, The method further includes: The first controller and the second controller monitor each other's heartbeat signals via a network line; If the second controller detects an abnormal heartbeat signal from the first controller, it determines that the first controller is malfunctioning. The operating status data of the first power control architecture is displayed on the human-machine interface device of the second power system, and / or the operating status data of the first power control architecture is sent to the cabin monitoring and alarm system (AMS).

14. The method according to claim 10, characterized in that, Before the first power control architecture and the second power control architecture exchange operating status data through the data transmission line, the following is also included: After the first power control architecture is powered on, the first power control architecture and the first power system perform a functional self-test. After confirming that both the first power control architecture and the first power system are functioning normally, the first power control architecture enters a standby state. In response to receiving a control command, the first controller sends a control signal to the corresponding functional system in the first power system to trigger the corresponding functional system in the first power system to enter the corresponding operating mode.

15. The method according to claim 14, characterized in that, Also includes: Receive the first control command input from the human-machine interface device of the first power system; And / or, In response to the detection of a charging pile connection signal, the charging signal is used as a second control command; And / or, Receive the energy dispatch signal from the EMS of the first power system, and use the energy dispatch signal as a third control command, wherein the third control command is a grid connection command or a load adjustment command. The first control instruction has a higher priority than the second control instruction, and the second control instruction has a higher priority than the third control instruction.

16. The method according to claim 10, characterized in that, The method further includes: For any one of the first controller and / or the second controller, the controller periodically performs fault monitoring on the controlled target power system, wherein the target power system is the first power system and / or the second power system; If a preset type of fault is detected in the target power system, any one of the controllers controls the target power system to shut down urgently.

17. An electric vessel, characterized in that, The electric ship includes a first power system, a second power system, and a power control system according to any one of claims 1 to 9.

18. An electronic device, characterized in that, The electronic device is a programmable logic controller (PLC), including a memory, a processor, and a computer program stored in the memory and executable on the processor. The processor executes the computer program to implement the method as described in any one of claims 10-16.

19. A computer-readable storage medium having a computer program stored thereon, characterized in that, The program is executed by a processor to implement the method as described in any one of claims 10-16.

20. A computer program product, comprising a computer program, characterized in that, The computer program is executed by a processor to implement the method as described in any one of claims 10-16.

Images