Hydrogen tank system and method for operating a hydrogen tank system

Abstract

The invention presented relates to a hydrogen tank system (100) for storing hydrogen, wherein the hydrogen tank system (100) comprises: - a number of tanks (101), - a computing unit (103), - a first memory (105), - a second memory (107), wherein the computing unit (103) is configured to to store a number of values for predetermined data, which change depending on a state of the hydrogen tank system (100), in the first memory (105) and redundantly in the second memory (107), and wherein the computing unit (103) is configured to to transfer values stored in the second memory (107) to the first memory (105) if a number of predetermined standard values for the predetermined data are stored in the first memory (105) or the computing unit (103) receives a synchronization command via an input interface.

Description

The present invention relates to a hydrogen tank system for storing hydrogen and to a method for operating a hydrogen tank system.Prior ArtIt is known to store safety-relevant information of a hydrogen tank system, such as, for example, an indication of an overpressure situation which requires replacement of a tank, in a persistent, i.e. nonvolatile memory.This persistent storage is generally integrated in a control unit of the hydrogen tank system, so that when the control unit is replaced by a new control unit, for example, the safety-relevant information is lost and a fault response of the hydrogen tank system, which requires, for example, an exchange of the pressure before further operation, is bypassed.Disclosure of the InventionWithin the scope of the present invention, a hydrogen tank system and a method for operating the hydrogen tank system are presented. Further features and details of the invention are evident from the respective dependent claims, the description and the drawings. Features and details which are described in connection with the method according to the invention naturally also apply in connection with the hydrogen tank system according to the invention and vice versa, so that with regard to the disclosure reference is or can always be made reciprocally to the individual aspects of the invention.The present invention serves in particular to ensure safe operation of a hydrogen tank system.Thus, according to a first aspect of the present invention, there is provided a hydrogen tank system for storing hydrogen.The hydrogen tank system includes a plurality of tanks, a computing unit, a first memory, and a second memory, wherein the computing unit is configured to store a plurality of values for predetermined data that change depending on a state of the hydrogen tank system in the first memory and redundantly in the second memory, and wherein the computing unit is further configured to transfer values stored in the second memory to the first memory when a plurality of predetermined standard values for the predetermined data are stored in the first memory or the computing unit receives a synchronization command via an input interface.Given data include characteristic variables, such as, for example, in the context of the present invention. This is understood to mean variables or operating parameters of a hydrogen tank system. Predefined data are in particular relevant to safety, such as a pressure curve in a tank of the hydrogen tank system. Accordingly, a state of the hydrogen tank system can be deduced on the basis of respective values of the predefined data or values of the predefined data change as a function of the state of the hydrogen tank system.The predefined data can be predefined, for example, by a manufacturer of the hydrogen tank system as a selection of parameters determined during operation of the hydrogen tank system.The present invention is based on redundant storage of values of predefined data on two different memories, so that, in the case that the values on the first memory are deleted, for example, they can be reconstructed on the basis of a redundant copy on the second memory.It is provided that such a reconstruction of values takes place when a number of predetermined standard values for the predetermined data are stored in the first memory. Since it can be assumed that the first memory or a corresponding arithmetic unit is new to the factory in the case that a number of predefined standard values are stored in the first memory, the first memory can be automatically adapted to a current state of the hydrogen tank system by a reconstruction of values from the second memory.Accordingly, bypassing an error message output in the past on the basis of a respective critical value is also output the error message again after the arithmetic unit outputting the error message has been replaced by a new-factory arithmetic unit. In other words, the error message cannot be bypassed by replacing the computing unit.As an alternative to a reconstruction of values in the first memory on the basis of standard values in the first memory, the reconstruction of values in the first memory can also be effected by inputting a synchronization command, which is provided, for example, by a technician via a workshop tester.Accordingly, the technician can specifically excite a transfer of values from the second memory into the first memory. In this case, it can be provided that, in the event that the values from the second memory deviate from the values in the first memory, a warning message or a note is output on an output unit, by means of which the technician is alerted to a potentially exchanged computing unit.Alternatively, in the event that the values from the second memory correspond to the values in the first memory, a validation message can be output on an output unit, by means of which the technician or a user can obtain clarity about an exchange of the computing unit or about the state of the hydrogen tank system.It can be provided that, in the event that values stored in the second memory are not transferred into the first memory, a predefined fault response is activated if a number of predefined standard values for the predefined data are stored in the first memory or the arithmetic unit receives a synchronization command via an input interface.By activating a predefined fault reaction, such as an activation lock, which prevents activation of the hydrogen tank system, abuse or environment of fault messages can be counteracted by replacing a computing unit, or a replaced computing unit can be enabled only when the values in the first memory correspond to the values in the second memory.It can be provided that the first memory is an integral component of the computing unit.As an integral component of the arithmetic unit, the first memory is also replaced when the arithmetic unit is replaced, so that when the arithmetic unit is replaced, values stored in the first memory automatically deviate from values stored in the second memory.It can furthermore be provided that the computing unit is configured to transmit the change in the values to the second memory in the event of a change in the values for the predefined data in the first memory.By transmitting the values to the second memory, only when the values in the first memory change, an energy-efficient and yet reliable updating of the values in the second memory is achieved.It may further be provided that the first memory is a persistent memory.A persistent memory, such as an EEPROM, is distinguished in particular in that, in the event of an interruption of a power supply to the memory, it retains the information stored therein or is not erased. Accordingly, a first memory configured as a persistent memory is particularly secure against manipulation by, for example, an interruption of a current supply to the memory or a corresponding arithmetic unit.It can furthermore be provided that the second storage is a persistent storage and / or a cloud storage.By means of a second memory configured as cloud memory, it can be configured as a secure server at a secure location, i.e. protected against the influence by unauthorized persons, so that the values stored in the second memory are particularly reliable and can be verified by a manufacturer, for example.It can furthermore be provided that the computing unit is configured to communicate with the second memory via a wireless communication interface.For communication with, in particular, a cloud memory, the hydrogen tank system can comprise a wireless communication interface, such as, for example, a mobile radio interface or a WLAN interface, or can be configured to communicate by means of a wireless communication interface of a superordinate system, such as, for example, a vehicle comprising the hydrogen tank system.It can furthermore be provided that the second storage is an integral component of the hydrogen tank system.A storage device configured as an integral component of the hydrogen tank system can be arranged separately or structurally and spatially separated from the first storage device, so that when the first storage device or a component comprising the first storage device is replaced, the second storage device remains in the hydrogen tank system.According to a second aspect, the present invention relates to a method for operating a hydrogen tank system.The presented method includes storing a number of values for predetermined data that change depending on a state of the hydrogen tank system in a first memory and redundantly in a second memory, and transferring values stored in the second memory to the first memory when a number of predetermined default values for the predetermined data are stored in the first memory or a synchronization command is provided via an input interface.The presented method is used in particular for operating the presented hydrogen tank system.It can be provided that, in the event that the values from the second memory deviate from the values in the first memory, a warning message is output on an output unit.A warning message notifies a user of a recognized deviation of values from the first memory and values from the second memory, so that the user can exactly check the hydrogen tank system and, if necessary, prevent operation with a tank already charged with overpressure.Advantages that will be described in detail with respect to the hydrogen tank system for storing hydrogen according to the first aspect of the invention apply equally to the method for operating a hydrogen tank system according to the second aspect of the invention.Further advantages, features and details of the invention will become apparent from the following description, in which exemplary embodiments of the invention are described in detail with reference to the drawings. The features mentioned in the claims and in the description can be essential to the invention individually or in any combination.DRAWINGThe following are shown: FIG. 1 shows a schematic illustration of a possible configuration of the hydrogen tank system presented, FIG. 2 shows a possible embodiment of the presented method.DESCRIPTION OF THE EMBODIMENTSReferring to FIG. 1, a hydrogen tank system 100 for storing hydrogen is shown.The hydrogen tank system 100 includes a tank 101, a computing unit 103, a first storage 105, and a second storage 107.The arithmetic unit 103 is configured to store a number of values for predetermined data, which change depending on a state of the hydrogen tank system 100, in the first memory 105 and redundantly in the second memory 107. For this purpose, for example, a change in the values in the first memory 105 can be copied into the second memory 107.The values can be, for example, sensor values determined by a sensor 109, in particular values of a pressure in the tank 101 and / or values of each further operating variable of the hydrogen tank system 100.Furthermore, the arithmetic unit is configured to transfer values stored in the second memory 107 to the first memory 105 if a number of predetermined standard values for the predetermined data are stored in the first memory 105 or the arithmetic unit 103 receives a synchronization command via an input interface, such as a workshop tester.FIG. 2 illustrates a method 200 for operating a hydrogen tank system 100.The presented method 200 comprises a storage step 201, in which a number of values for predefined data, which change depending on a state of the hydrogen tank system, is stored in a first memory and redundantly in a second memory.The method 200 further comprises a transmission step 203, in which values stored in the second memory are transmitted into the first memory if a number of predefined standard values for the predefined data are stored in the first memory or a synchronization command is provided via an input interface.

Claims

A hydrogen tank system (100) for storing hydrogen, the hydrogen tank system (100) comprising: a plurality of tanks (101), a computing unit (103), a first memory (105), a second memory (107), wherein the computing unit (103) is configured to store a plurality of values for predetermined data that change depending on a state of the hydrogen tank system (100) in the first memory (105) and redundantly in the second memory (107), and wherein the computing unit (103) is configured to transfer values stored in the second memory (107) to the first memory (105) when a plurality of predetermined standard values for the predetermined data are stored in the first memory (105) or the computing unit (103) receives a synchronization command via an input interface.The hydrogen tank system (100) according to claim 1, characterized in that in the case that values stored in the second memory (107) are not transferred to the first memory (105), when a number of predetermined default values for the predetermined data are stored in the first memory (105) or the arithmetic unit (103) receives a synchronization command via an input interface, a predetermined fault response is activated.Hydrogen tank system (100) according to Claim 1 or 2, characterized in that the first store (105) is an integral constituent part of the arithmetic unit (103).Hydrogen tank system (100) according to one of the preceding claims, characterized in that the arithmetic unit (103) is configured to transmit the change in the values to the second memory (107) in the event of a change in the values for the predefined data in the first memory (105).Hydrogen tank system (100) according to one of the preceding claims, characterized in that the first storage (105) is a persistent storage.Hydrogen tank system (100) according to one of the preceding claims, characterized in that the second memory (107) is a persistent memory and / or a cloud memory.The hydrogen tank system (100) according to any one of the preceding claims, characterized in that the computing unit (103) is configured to communicate with the second memory (107) via a wireless communication interface.Hydrogen tank system (100) according to one of the preceding claims, characterized in that the second store (107) is an integral constituent part of the hydrogen tank system (100).A method (200) for operating a hydrogen tank system (100), the method (200) comprising: - storing (201) a number of values for predetermined data that change depending on a state of the hydrogen tank system (100) in a first memory (105) and redundantly in a second memory (107), - transmitting (203) values stored in the second memory (107) to the first memory (105) if a number of predetermined default values for the predetermined data are stored in the first memory (105) or a synchronization command is provided via an input interface.Method (200) according to Claim 9, characterized in that, in the event that the values from the second memory (107) deviate from the values in the first memory (105), a warning message is output on an output unit.

Images