ENERGY SYSTEM WITH A FLUSHING SYSTEM, AND METHOD FOR MONITORING THE SAME

Description

[0001] The present invention relates firstly to an energy system with a purging system for purging components of the energy system according to the preambles of independent patent claims 1 and 3 (see, for example, DE 10 2014 103724 A1). Furthermore, the invention also relates to a method for monitoring a purging system in such an energy system, see claim 15.

[0002] Energy systems of this generic type are already known in the state of the art in a variety of forms. Such systems are typically used to generate and provide energy for a wide variety of applications.

[0003] In one known type of such energy system, energy is generated in a first energy source. The generated energy can be hydrogen, for example. The hydrogen is generated, for example, in an electrolysis device and stored in a second energy source device, which is a storage device. This is, for example, a first mode of operation of the energy system. During operation of the energy system, the hydrogen is removed from the storage device and consumed in a first energy sink device. This is, for example, a second mode of operation of the energy system. Such a first energy sink device is, for example, a fuel cell device. The above-described components of the energy system are usually spatially separated from one another and connected to one another via a connecting line device.Both of the aforementioned operating modes typically require different pressure levels. While pressures of 20 to 60 bar prevail in the first operating mode with electrolysis, pressures of less than 20 bar are required for the operation of the fuel cell device in the second operating mode. Such a known energy system is disclosed, for example, in DE 103 07 112 A1.

[0004] During operation of such an energy system, it is necessary to regularly purge the fuel cell device, particularly on its anode side, and / or the electrolysis device, particularly on its cathode side. Purging, also referred to as "purging," is particularly necessary to remove unwanted foreign gas components, as well as liquid water that accumulates locally in the cell structures, which can negatively impact the performance and service life of the fuel cell device and / or the electrolysis device, at regular intervals or depending on the operating conditions. Purging is carried out with the aid of a suitable purging system.

[0005] A known purging system, from which the present invention is based, is disclosed and described in WO 2017 / 089466 A1 by the applicant. In this known solution, a hydrogen-laden purging volume flow is generated during the purging process and initially stored in a storage chamber associated with a purging device. The storage chamber serves as a buffer or intermediate storage device. The hydrogen-laden purging volume flow is then released from the storage chamber to the environment as a discharge volume flow via an outlet device. Another purging system for purging a fuel cell device is disclosed in DE 10 2014 103 724 A1.

[0006] For example, the fuel cell device, the electrolysis device, and the purging system are components of a first subsystem of the energy system, which is housed, for example, in a system cabinet. The discharge volume flow, which contains several percent hydrogen, is then released into the environment via the discharge device into a specific area in the system cabinet known as the mixing zone. This area is specially designed for this purpose. Due to the hydrogen content, which is a harmful gas at this point, the discharge volume flow is an explosive gas mixture, so no ignition sources may be present in the vicinity of the outlet.To reduce the hydrogen content to a value below the lower explosion limit, the hydrogen-laden discharge flow must be diluted to such an extent that the hydrogen content in the flow falls below the lower explosion limit. This can be achieved, for example, by mixing the discharge flow with another air flow in the mixing zone. This additional air flow could be, for example, an exhaust air flow generated elsewhere during operation of the energy system.

[0007] The purging system typically comprises various components connected to one another via sections of a connecting line. During operation of the purging system, it must be prevented at all times that hydrogen can escape uncontrollably at any point in the purging system. This occurs particularly if a fault occurs somewhere in the purging system. For example, individual sections of the purging system's line may become leaky. The same applies to valve devices and the like. The storage chamber of the purging system is often designed as a variable-volume storage chamber, for example in the form of a bellows. Such a storage chamber is a variable-volume pressure vessel containing gas, which can create a dangerously explosive atmosphere if it escapes as intended or incorrectly.In particular, a bellows is not overpressure-proof, and its material is subject to embrittlement, which makes leaks possible. Due to the risk of explosion from escaping hydrogen, non-explosion-proof devices, such as sensor devices, cannot be used to monitor the purge system. However, the use of special explosion-proof safety devices is costly and should therefore be avoided if possible.

[0008] Based on the cited prior art, the present invention is therefore based on the object of further advantageously modifying a purging system of the energy system by means of simple constructive and cost-effective measures in such a way that safety-related monitoring of the purging system is enabled, without the use of corresponding, explosion-proof special safety devices such as hydrogen sensors or the like.

[0009] This object is achieved according to the invention by the energy system with the features according to independent patent claim 1, which represents the first aspect of the invention, by the energy system with the features according to independent patent claim 3, which represents the second aspect of the invention, and by the method with the features according to independent patent claim 15, which represents the third aspect of the invention. Further features and details of the invention emerge from the subclaims, the description and the drawings. Features and details disclosed in connection with the first aspect of the invention also apply in full in connection with the second and third aspects of the invention, and vice versa, so that with regard to the disclosure of one of the aspects of the invention, reference is always made in full to the other aspects of the invention and reference is made to them.

[0010] The fundamental idea of ​​the present invention is to provide a safety concept for the purging system in an energy system. The present invention, as it results from the various aspects of the invention, provides monitoring of the purging system, in particular of the condition of individual components of the purging system, by means of which, in particular, errors can be detected and, upon detection of errors, appropriate error reactions can be initiated. The purging system is preferably provided for continuous condition monitoring and condition analysis. A fundamental component of the purging system is a specially designed safety control device, by means of which safety-related functions are executed.In particular, according to the various aspects of the invention, the present invention can ensure that no dangerous explosive atmospheres can arise unnoticed during normal operation and fault operation of the flushing system.

[0011] The invention is initially directed to an energy system with a purging system through which individual components of an energy system are purged. The purging system is, in particular, a whole consisting of several components, wherein the components are connected to one another to form a dedicated unit. According to the invention, the purging system is a component of the energy system. The energy system, in turn, is, in particular, a whole consisting of several components, wherein the components are connected to one another to form a dedicated unit. In the present case, the energy system is preferably a system for generating or providing energy, preferably electrical energy. In principle, the invention is not limited to specific types of energy systems. Various preferred exemplary embodiments are described below in this regard.

[0012] In a preferred embodiment, the energy system is a home energy system. Home energy systems are generally known from the prior art and serve to supply houses, for example low-energy houses, passive houses, or zero-energy houses, with energy in the form of heat and, in particular, in the form of electricity, for example electricity from renewable energy sources such as photovoltaic (PV) generators or small wind turbines. Such a home energy system creates the basis for the energy requirements of a house, in particular a low-energy house, a passive house, or a zero-energy house, to be fully covered from renewable energy sources, both in terms of electricity and heat requirements, thus ensuring complete CO2-free operation.At least, however, the electricity needs of a house can be covered almost entirely from renewable energy sources, in particular by means of a PV generator and / or a small wind turbine, in order to achieve an increase in self-consumption.

[0013] Such a home energy system is disclosed and described, for example, in the applicant's patent applications WO 2017 / 089468 A1 and WO 2017 / 089469 A1, the disclosure content of which is incorporated into the description of the present patent application.

[0014] According to a preferred embodiment, a home energy system of the type mentioned has the following basic features: a DC feed point, preferably designed for a nominal voltage of 48 volts, and / or an AC feed point, preferably designed for a voltage of 230 volts or 110 volts, wherein the DC feed point and / or the AC feed point is at least temporarily connected to an electrical consumer having a consumption power during operation, a PV generator electrically connected to the DC feed point at least temporarily for generating electrical PV power, a fuel cell unit electrically connected to the DC feed point or to the AC feed point at least temporarily for generating electrical fuel cell power, an electrolysis unit electrically connected to the DC feed point for generating hydrogen to be consumed by the fuel cell unit, wherein the electrolysis unit is supplied with an electrical electrolysis input power during operation, a hydrogen tank,in particular as a long-term energy storage device, which is at least temporarily fluidly connected to the fuel cell unit and the electrolysis unit and is designed to store hydrogen to be generated by the electrolysis unit and consumed by the fuel cell unit, a storage battery unit, in particular as a short-term energy storage device, which is electrically connected or to be connected to the DC feed-in point, so that an electrical PV power and an electrical fuel cell power can be stored in the storage battery unit and an electrical electrolysis input power and a consumption power can be taken from the storage battery unit; and a control module for controlling the domestic energy system.

[0015] According to the first and second aspects of the invention, an energy system with a purge system is provided, see claims 1 and 3.

[0016] A flushing system on which the present invention is based is disclosed and described, for example, in the applicant's patent application WO 2017 / 089466 A1, the disclosure content of which is incorporated into the description of the present patent application.

[0017] First, the basic structure and basic functioning of the purging system are described. The purging system, also referred to as a "purge system," serves to purge at least one energy source device and / or at least one energy sink device. This purging process is also referred to as "purging." These two components represent components of an energy system, which is described above in the general description and in detail below, so that reference is also made to the corresponding explanations at this point. In a preferred embodiment, using which the invention is explained by way of example, the energy source device is an electrolysis device, in particular for producing hydrogen. The energy sink device is preferably a fuel cell device.

[0018] The purging system comprises a purging device configured to generate a purge volume flow during a purging process. This purge volume flow, which contains hydrogen, which is a harmful gas at this point, arises, for example, when the fuel cell device, in particular on its anode side, and / or the electrolysis device, in particular on its cathode side, is / are purged.

[0019] In a preferred embodiment, the purging system comprises a purging device with a purging channel having a first and at least one second purging channel section, which are fluidically connectable to one another via a purge valve of the purging device, and with a buffer storage device fluidically connected to the purging channel and downstream of the purge valve, having at least one storage chamber which is provided for the temporary storage of a fluid mass to be purged from the fuel cell device and / or the electrolysis device in a pulsed manner with a purge mass flow, so that this fluid mass can be discharged from an outflow device fluidically connected to the second purge channel section with a discharge mass flow, which is the discharge volume flow that is lower than the purge mass flow.The vent mass flow, which typically consists largely of hydrogen, can be mixed with an air mass flow, which is the air volume flow, so that the resulting gas mixture has a hydrogen concentration well below the lower ignition limit of hydrogen in air in all operating conditions. This air volume flow is preferably one such as an exhaust air volume flow that is generated elsewhere during operation of the energy system. This dilution effect enables safe operation of the energy system. Because a buffer tank with a storage chamber is connected downstream of the purge valve, a fluid mass discharged in pulses with the purge mass flow can be discharged with a vent mass flow that is lower than the purge mass flow.This advantageously results in a smoothing of the pulse-like purge mass flow, which advantageously leads to the avoidance of critical hydrogen concentrations while at the same time lowering the exhaust air mass flow.

[0020] In a preferred embodiment, the storage chamber is expandable, i.e., its volume can be variable. The storage chamber can be expanded by the fluid mass flushed out of the fuel cell device and / or the electrolysis device in pulses with the purge mass flow. Particularly preferably, the storage chamber is designed as a bellows, which can accommodate a respective purge volume, i.e., the purge mass flow multiplied by a pulse duration of a purge, with no or only a slight buildup of counterpressure. Such a bellows is also referred to as a "purge bellows." A storage chamber designed as a bellows can be designed to be moved back into its non-expanded state by a gravitational force, in particular exclusively by a gravitational force of a preferably freely movable end plate of the bellows.To specifically adjust the force that moves the bellows back to its non-expanded state, and thus the discharge time and the pressure curve of the bellows buffer over time, the gravitational force can also be amplified or partially compensated by an attached spring device.

[0021] As already mentioned, the discharge volume flow is provided from the storage chamber, which is designed in particular as a bellows. However, the present invention is not limited to this embodiment. In another embodiment, the storage chamber can be designed as a bladder accumulator or as a piston accumulator. As an alternative to an expandable design of the storage chamber, the storage chamber can also be designed as a rigid pressure vessel, in which the storage chamber is designed such that the fluid mass flushed out of the fuel cell device and / or the electrolysis device in pulsed fashion with the flushing mass flow leads to a pressure increase in the storage chamber.

[0022] The purging system can be configured to reduce a purging volume flow to a discharge volume flow of less than 10%, preferably less than 3%, of the purging volume flow. The discharge volume flow is preferably discharged to the environment via an exhaust air volume flow of at least 50 Nm 3 / h, which is also referred to as the exhaust air volume flow. Preferably, a nominal operating pressure of the storage chamber is less than 50 millibars, preferably less than 20 millibars, above an operating pressure of the exhaust air volume flow or exhaust air volume flow.

[0023] During the purging process, liquid water can be discharged as intended. In a preferred variant, the water is first separated from the gas stream and then advantageously returned to the fuel cell and / or electrolysis process. The water separation can advantageously be implemented in the storage chamber, since the flow velocities of the carrier gas there are advantageously low for separation of the liquid via gravitational forces. The storage chamber preferably has at least one inlet and / or one outlet for the purge gas.Liquid that enters the storage chamber via the inlet at high flow velocity together with the hydrogen-containing purge gas can be separated from the gas stream there, preferably gravimetrically and / or by flow-guiding and / or droplet-eliminating internals and / or, with appropriate tangential introduction, by centrifugal forces or by other common state-of-the-art methods. The liquid can preferably be collected at the bottom of the storage chamber and drained via the closed liquid outlet, preferably returning it to the process.

[0024] The storage chamber can be connected to a surge tank device, which includes a surge tank. The surge tank device can serve as overpressure protection for the storage chamber. The hydrogen then flowing into the surge tank relieves the pressure in the storage chamber. Water that accumulates in the storage chamber can also be released from the storage chamber into the surge tank device. From there, the water from the flushing process can be recirculated for use, for example, in the electrolysis system.

[0025] The purging device has a fill level sensor device, in particular a fill level sensor device assigned to the storage chamber. The fill level sensor device can preferably be designed and arranged to detect an expansion state of the storage chamber. The fill level sensor device can be designed, for example, as an optical sensor, a magnetic sensor, or an ultrasonic sensor and is preferably permitted for operation in a potentially hydrogen-containing environment. The fill level sensor device is preferably arranged and adjusted such that, in the event of an expansion state of preferably a maximum of 80% of the maximum volume, which can occur, for example, if a valve device, such as a solenoid valve, no longer closes incorrectly, it triggers a safety chain and prevents further escape of hydrogen.In a preferred method, the fill level sensor device can also be used to monitor the quality of the flushing process and / or to convert the flushing process from a controlled process to a regulated process by detecting the actual flushed volume.

[0026] According to the first aspect of the invention, a first preferred embodiment of an energy system with a purge system is disclosed, which has the features of independent claim 1. In this first embodiment of the invention, a fill level measurement of a storage chamber is realized via pressure measurement.

[0027] The purging system is designed to purge an energy source device and / or an energy sink device of the energy system and has a purging device with a storage chamber. In this regard, reference is made to the general explanations above. On the inlet side, the purging chamber is fluidly connected to a first line section designed as a purging line leading from the energy source device and / or to a second line section designed as a purging line leading from the energy sink device, preferably to both. A fluid is generally a flowing medium that can be liquid or gaseous. According to the present invention, the fluid is preferably a gaseous medium, which in particular can also have liquid components, for example a hydrogen-containing gas mixture with a certain water content."Fluid-connected" means, in particular, that the connection between the components is designed such that the fluid can flow through this connection. Such a connection is preferably a pipe, a hose line, or a section thereof, and the like.

[0028] The flushing system has a monitoring device for monitoring the condition of the storage chamber. The monitoring device has at least one sensor device assigned to the storage chamber for monitoring the fill level of the storage chamber. Depending on the embodiment of the invention, this sensor device for monitoring the fill level of the storage chamber can be configured in different ways. Some preferred embodiments will be explained in more detail in the course of the description.

[0029] According to the invention, the flushing system has a safety control device. This safety control device functions to implement safety-related monitoring of the flushing system. In particular, the safety control device is designed such that it is capable of detecting fault conditions in the flushing system and initiating appropriate fault reactions upon detection of such fault conditions. The safety control device is preferably provided for continuous monitoring of the flushing system. The safety control device can be designed in various ways. Some preferred exemplary embodiments will be explained in more detail later in the description.

[0030] The sensor device for monitoring the fill level of the storage chamber is connected to the safety control device via an interface assigned to it. A definition of the interface in the light of the present invention, which applies to all aspects of the invention, is, in particular, a connection between two components: The term "interface" is intended to also encompass the connecting line between the components themselves. The interface can be unidirectional or bidirectional. Depending on the design of the components, the interface can be designed differently. For example, the interface can be a communication interface via which the components are communicatively connected. This means, in particular, that communication takes place via the interface, for example in the form of data transmission or signal transmission.The interface can be either wired or wireless. Values ​​detected by one component, for example a sensor device, are transmitted via the interface to another component, for example the safety control device. Commands, in particular control commands, can be sent from the safety control device via the interface. Other forms of interfaces allow fluids to be transmitted via the interface. Such interfaces are then, for example, line interfaces via which the components are connected via lines, for example via lines, pipes, hoses, or the like. In the present invention according to the various aspects of the invention, both types of interfaces are preferably used.

[0031] According to the first aspect of the invention, the sensor device for monitoring the fill level of the storage chamber has at least one pressure measuring device or is designed as a pressure measuring device. The pressure prevailing in the storage chamber, which allows a conclusion to be drawn about the fill level of the storage chamber, is detected by means of the pressure measuring device. This can be done, for example, by directly measuring the pressure in the storage chamber. In another embodiment, the pressure can be determined from other parameters, for example, calculated. By using a pressure measurement in the storage chamber, which is preferably designed as a volume-variable storage chamber, the detection of all error states is possible, such as a leak in the supply, a leak in the storage chamber, a blockage in the discharge, a limitation of the maximum quantity, or the like.Monitoring can preferably be carried out by comparing the current pressure or fill level with minimum and / or maximum reference values ​​or final values, which will be explained in more detail below.

[0032] The pressure measuring device can preferably be designed as a pressure measuring device for detecting a differential pressure and / or for detecting a relative pressure and / or for detecting an absolute pressure. If the flushing system is located in a divided system cabinet with a right and a left cabinet half, as described further below in the context of a preferred exemplary embodiment, a differential pressure determination and reference pressure determination are preferably carried out with a pressure in the right half of the cabinet. For a differential pressure determination, the pressure measuring device itself can be located outside the system cabinet. For a relative pressure determination, the pressure measuring device must be located inside the system cabinet. The evaluation and initiation of the error reaction preferably takes place via the safety control device. Alongside temperature, pressure is one of the most important physical state variables.The different types of printing are differentiated particularly according to the reference pressure.

[0033] The most definitive reference pressure is zero pressure, which exists in the vacuum of the universe. A pressure relative to this reference pressure is called absolute pressure. Absolute pressure sensors, for example, measure pressure relative to a vacuum enclosed within the sensor device.

[0034] The difference between two pressures is called the pressure difference dp. In cases where the difference between two pressures itself represents the measured quantity, it is referred to as differential pressure. To measure differential pressure, two different pressures are recorded in a pressure measuring device. A differential pressure is only displayed if the measured values ​​differ. Differential pressure measuring devices, in particular, have two separate pressure connections.

[0035] Relative pressure sensors measure pressure relative to the ambient air pressure. Air pressure fluctuations, caused, for example, by changes in weather or altitude, are directly transferred to the current pressure reading with these sensors. If the pressure at the relative pressure sensor is greater than the ambient pressure, it is referred to as overpressure. A pressure that is less than atmospheric pressure is referred to as negative pressure.

[0036] In a first embodiment, the pressure measuring device according to the invention comprises a pressure sensor device or is designed as such a pressure sensor device. The pressure sensor device can be arranged or designed on or in the storage chamber. This pressure sensor device can be directly connected, preferably communicatively connected, to the safety control device via an interface. The pressure sensor device measures the pressure in the storage chamber and transmits the measured values ​​to the safety control device, where the measured values ​​are evaluated.

[0037] In another embodiment, the pressure measuring device comprises a pressure sensor device that is connected to another component of the pressure measuring device via an interface, in particular by a cable connection. This other component of the pressure measuring device is then preferably connected to the safety control device via an interface, for example, by a communication connection. In such a case, the pressure measuring device is preferably a pressure measuring device for determining the differential pressure.

[0038] In a preferred embodiment, the pressure sensor device of the pressure measuring device is designed in the form of a pressure measuring cell, for example, a capacitive pressure measuring cell. Pressure measuring cells are familiar to those skilled in the art and therefore require no further detailed explanation here. In principle, the invention is not limited to specific types of pressure measuring devices.

[0039] The pressure in the storage chamber can also be determined in other ways, for example, by determining it, for example, by calculating it, using other parameters of the flushing system or components of the flushing system. This will be described in more detail below in connection with the second aspect of the invention using various exemplary embodiments.

[0040] According to the second aspect of the invention, a second preferred embodiment of an energy system with a purge system is disclosed, which has the features of independent claim 3.

[0041] The flushing system also serves to flush an energy source device and / or an energy sink device of the energy system and comprises a flushing device with a storage chamber, which is fluidically connected on the inlet side to a first line section extending from the energy source device and configured as a flushing line, and / or to a second line section extending from the energy sink device and configured as a flushing line. In this respect, the flushing system corresponds to the flushing system of the first aspect of the invention and the flushing system explained in the general description, so that at this point, to avoid repetition, reference is made in full to the corresponding explanations above.

[0042] The flushing system has a first monitoring device for monitoring the state of the storage chamber, wherein the first monitoring device has at least one sensor device assigned to the storage chamber for monitoring the fill level of the storage chamber. In the second aspect of the invention, a specific design of the first monitoring device is not yet relevant at this point. However, some preferred embodiments of the first monitoring device are specified below.

[0043] Additionally, the flushing system of the second aspect of the invention comprises a compensating reservoir device fluidly connected to the storage chamber. The compensating reservoir device serves to provide compensation for the storage chamber, particularly when it has reached a maximum or critical filling level with regard to filling quantity and / or filling pressure. Preferred embodiments of this are explained in detail in the general description above and below.

[0044] As with the first aspect of the invention, the flushing system of the second aspect of the invention also has a safety control device, so that with regard to the design and functioning of the safety control device, reference is made in full to the corresponding explanations above. Accordingly, the safety control device is provided for safety-related monitoring of the flushing system, in particular for detecting fault conditions and initiating fault reactions.

[0045] As with the first aspect of the invention, the sensor device for monitoring the fill level of the storage chamber is connected to the safety control device via an interface assigned to it in a suitable manner resulting from the design of the sensor device. Regarding the design and function of the interface and the connection, reference is also made in full to the corresponding statements regarding the first aspect of the invention above.

[0046] In contrast to the flushing system of the first aspect of the invention, the flushing system of the second aspect of the invention has at least one further, second, monitoring device, which is designed to monitor the state of the expansion tank device and which, analogously to the first monitoring device, is connected to the safety control device via an interface assigned to it. Some preferred embodiments of the second monitoring device are also described below.

[0047] The safety control device according to the various aspects of the invention can be designed in different ways. The safety control device preferably has hardware components and / or software components and / or electrical components and / or a combination of hardware components, software components, and electrical components. For example, the safety control device can have a data processing device or be designed as a data processing device. Software that carries out the safety-related monitoring of the flushing system can be implemented in the data processing device. In this case, the evaluation and initiation of the error response is carried out by the data processing device. Alternatively or additionally, the safety control device can have a safety controller or be designed as a safety controller.A safety controller is, in particular, a control device by means of which certain processes, in this case the monitoring of the flushing system, are electronically controlled. Such a safety controller generally has at least one integrated circuit. In this case, the safety controller evaluates and initiates the error response. Alternatively or additionally, the safety control device can have, or be designed as, a safety logic with at least one safety relay. In this case, the safety logic with safety relay evaluates and initiates the error response.

[0048] The purging system is preferably arranged in a system cabinet, in particular an airtight one. The system cabinet is preferably a system cabinet in which various components of the energy system, for example the electrolysis device and the fuel cell device, are also accommodated. The system cabinet can, for example, be divided into a right-hand cabinet half and a left-hand cabinet half with a partition wall in between. If, for example, the storage chamber is located in the left-hand cabinet half and the pressure measuring device in the right-hand cabinet half, when the right-hand cabinet half is opened while there is pressure in the storage chamber, the pressure drop in the ambient pressure should lead to a brief pressure increase in the measurement. This can be detected by the pressure measuring device and evaluated in the safety control device.This makes it possible, for example, to detect whether the right half of the cabinet is leaking and whether the air flow in the system cabinet is not being released to the environment via the exhaust air, but rather to the outside via the leak in the system cabinet.

[0049] As already explained above in the general part of the description, the storage chamber is preferably designed as a volume-variable storage chamber, for example as a bellows or purge bellows. In such a case, the sensor device for monitoring the fill level of the storage chamber is preferably designed as a sensor device for detecting the expansion of the storage chamber. In a manner as described above, this sensor device is connected to the safety control device via a suitable interface, for example, by communication. Such a sensor device for detecting the expansion of the storage chamber can be designed in various ways. In a preferred embodiment, the sensor device for detecting the expansion of the storage chamber is designed as an optical light barrier device.Such a light barrier device offers good protection against overpressure in the storage chamber, which, in the case of a variable-volume storage chamber, becomes particularly apparent due to excessive deflection of the storage chamber. In an alternative embodiment, such a sensor device can also be designed, for example, as a laser-based distance measuring device or a strain gauge device. The invention is not limited to the examples mentioned.

[0050] Alternatively or additionally, the sensor device for monitoring the fill level of the storage chamber can have a pressure measuring device or be designed as a pressure measuring device, in particular for detecting the pressure within the storage chamber. The pressure measuring device, which is connected to the safety control device via a suitable interface, for example, connected by a cable and / or connected by communication, can be designed in particular as a pressure measuring device for detecting a differential pressure and / or for detecting a relative pressure and / or for detecting an absolute pressure. Such a pressure measuring device is preferably one that is described in detail in connection with the first aspect of the invention, so that to avoid repetition, reference is made in full to the corresponding explanations above.

[0051] The expansion tank device, which has already been explained in general terms above, so that at this point reference is also made in full to the above explanations, is described in greater detail. The expansion tank device preferably has an expansion tank which is or can be filled with a liquid, at least in some areas. The liquid is preferably water, in particular ultrapure water. Ultrapure water can also be used for other processes in the energy system, for example in the electrolysis device. Furthermore, the expansion tank device has an expansion pipe which is connected, in particular in an airtight manner, to the storage chamber and which opens into the expansion tank.Optionally, the expansion tank has a third line section designed as a supply line to the expansion tank and / or a fourth line section designed as a discharge line from the expansion tank.

[0052] Such an expansion tank device is described below using a more specific preferred embodiment. The expansion tank is preferably located below the storage chamber, for example the bellows. The storage chamber is hermetically connected at the bottom to the expansion pipe. The expansion pipe ends in the expansion tank. Since the expansion tank is partially filled with the liquid, in particular water, the expansion pipe ends within the liquid column located in the expansion tank. Gas containing a harmful gas, in particular hydrogen, and also liquid, in particular water, located in the storage chamber can flow out of the storage chamber into the expansion tank via the expansion pipe. The expansion tank thus serves, on the one hand, to compensate for excess pressure in the storage chamber.If the pressure in the storage chamber is too high, or if the storage chamber is over-expanded, the gas mixture from the storage chamber presses against the liquid column in the expansion tube and the expansion tank. The gas is forced through the liquid column in the expansion tube and bubbles into the space in the expansion tank, which is located between the surface of the liquid column and an upper cover of the expansion tank. As the pressure in the storage chamber increases, the level in the expansion tube drops, so that the level in the expansion tube, if detected accordingly, can be used as a measure of the pressure prevailing in the storage chamber. One such example is described in more detail below.

[0053] In addition, the storage chamber also contains liquid, in particular water, which also flows into the expansion tank via the expansion pipe. This preferably occurs according to the known principle of communicating tubes. When the liquid column in the expansion tank has reached a maximum height, the liquid can be drained via the drain. For this purpose, the drain preferably has a valve device. The maximum height of the liquid column in the expansion tank is preferably measured using a suitable sensor device. The measured values ​​from the sensor device are evaluated in the safety control device, which is connected to the sensor device via an interface as described above, in particular is connected for communication purposes. One such example is explained in more detail below. Liquid, in particular water, can be poured into the expansion tank via the supply line.The supply line therefore also preferably has a valve device. The valve devices are, for example, shut-off valves, in particular solenoid valves. The pressure behavior in the storage chamber can be influenced and adjusted, for example, by the height of the liquid column filled in the expansion tank. In the case of different air pressures or changing maximum permissible pressures in the storage chamber, for example, the height of the liquid column in the expansion tank can be adjusted differently. The draining and filling of liquid from and into the expansion tank is preferably controlled via the safety control device, which in such a case is preferably connected to the valve devices via an interface, in particular by communication, as described above. One such example is explained in detail below.

[0054] Such a design of the expansion tank device also enables regular replacement of the fluid, particularly water, in the expansion tank, for example, to protect against microbial contamination. For example, it can be provided that, via appropriate commands from the safety control device, the fluid is drained from the expansion tank at defined intervals or at defined times and then refilled. By integrating a dedicated fluid treatment system, particularly water treatment, into the flushing system or energy system, a simple fluid, such as tap water, can be used.

[0055] As already indicated above, it is preferred if the monitoring device for monitoring the condition of the expansion tank device has a device for monitoring the liquid column within the expansion tank. This measure is preferably carried out in addition to the measures already described above. The device for monitoring the liquid column can in particular have a switch device for emptying and filling the expansion tank or interact with this. The switch device is preferably a so-called reed switch. Reed switches per se are familiar to those skilled in the art. As described above, the device for monitoring the liquid column, preferably the switch device, is connected to the safety control device via an interface, in particular by means of a communication connection.This allows the safety control device to activate the device for monitoring the liquid column when required, for example when the liquid in the expansion tank needs to be replaced at specific times or intervals, or when the liquid column in the expansion tank is too low or too high. This enables the safety control device to monitor the expansion tank via the device for monitoring the liquid column. For example, the safety control device can enable regular testing of the device for monitoring the liquid column by emptying and filling the expansion tank, for example by controlled actuation of the switch device. Depending on the design, it is possible, for example, for the switch device to actuate an inlet or outlet located directly on the expansion tank, i.e. to open or close it.If valve devices are arranged in a supply line and a discharge line of the expansion tank in the manner described above, via which the inflow and outflow are controlled, corresponding switch devices are preferably located in interaction with the valve devices or are components of the valve devices, so that the valve devices are opened or closed when the switch devices are actuated.

[0056] Preferably, a time function is implemented in the safety control device, which is provided to monitor the refill time of the liquid in the expansion tank after emptying. In this case, in particular, the time required to refill the expansion tank after emptying is measured. This measured time can be compared with predetermined reference values ​​in the safety control device. If, for example, a reference value is exceeded or undershot, this can indicate an error in the safety control device. Likewise, the time function can be used to ensure that the expansion tank is emptied and refilled at specific times or at specific intervals. In another embodiment, an event-related function can be implemented in the safety control device.This makes it possible, for example, to detect whether a specific event has occurred, such as whether the liquid column in the expansion tank is too high or too low. This is also preferably done by comparing it with corresponding reference values ​​in the safety control device. In a preferred embodiment, the time function for monitoring the refill time of the liquid, preferably water, is evaluated in the safety control device after the switch device is triggered, for example, compared with maximum and / or minimum reference values.

[0057] In a further embodiment, the monitoring device for monitoring the condition of the expansion tank device preferably has a device for detecting the height of the liquid column in the expansion tank, which is designed in particular as a float sensor device or as a weight measuring device. This measure is preferably carried out in addition to the measures already described above or as an alternative to the measure described immediately above. The actual height of the liquid column within the expansion tank can be detected via this device. For this purpose, the device for detecting the height of the liquid column is in turn connected to the safety control device via an interface as described above, for example, by communication.The values ​​recorded by the liquid column height detection device are transmitted to the safety control device via the interface, where they are evaluated, for example, by comparing them with corresponding reference values. If the liquid column is too low, for example, this could indicate a leak in the expansion tank. If the liquid column is too high, this could indicate that the fluid drain from the expansion tank is not working properly.

[0058] In a further preferred embodiment, the device for detecting the height of the liquid column in the equalizing tank comprises a pressure measuring device for determining the differential pressure between the pressure in the storage chamber and the pressure of the liquid column in the equalizing tank. This measure is preferably carried out in addition to the measures already described above or as an alternative to the previously described measures. This pressure measuring device can, for example, be designed as a separate, independent, second pressure measuring device compared to the first pressure measuring device described above. Alternatively, the further second pressure measuring device can be a component of the first pressure measuring device described above. In this case, the further pressure measuring device represents, in particular, a functionality of the first pressure measuring device described above.The latter variant has the particular advantage that the number of required components can be reduced. The further - second - pressure measuring device, regardless of the variant, is, as described above, connected to the safety control device via a suitable interface, for example, connected by a cable and / or a communication connection. The further - second - pressure measuring device is preferably designed in a manner as described in the context of the first aspect of the invention, so that in order to avoid repetition regarding the design and functioning of the further - second - pressure measuring device, as well as its interaction with the safety control device, reference is made in full to the above statements regarding the first aspect of the invention. The aforementioned pressure measurement can be carried out in different ways. A preferred exemplary embodiment is described below.

[0059] According to this exemplary embodiment, the pressure measuring device, which is particularly designed as a pressure measuring device for determining the differential pressure, preferably cooperates with a measuring tube extending outward from the expansion tank. This measuring tube is preferably closed at its free end. The measuring tube partially contains fluid from the expansion tank and air. The further - second - pressure measuring device for determining the differential pressure is designed to determine the differential pressure between the pressure in the storage chamber and the pressure of the air in the measuring tube. The determined differential pressure is evaluated in the safety control device, for example, by comparing the determined differential pressure values ​​with reference values ​​in the manner described above.

[0060] To adjust the measuring tube, it is preferably connected to a pump device for air, in particular a bubble pump device. The use of such a pump device serves in particular to "zero" the measuring tube. An overpressure exists within the measuring tube due to the backpressure of the liquid column. If the measuring tube is leaking, the overpressure can dissipate and distort the signal. Such errors can be detected by regularly activating the pump device, which fills the measuring tube with air until air "bubbles out" into the compensation tank. The pump device is preferably controlled via the safety control device. For this purpose, the pump device is connected to the safety control device, for example, via a suitable interface, for example, via a communication connection.The pumping device can be activated via the safety control device, for example, within a timer function as described above. The measuring tube with the pumping device also serves, in particular, for maintenance-free, safe monitoring of the fill level in the expansion tank. The pumping device, as the ignition source, is located sufficiently far away, for example, outside the system cabinet or in the right half of the cabinet. The liquid level or the liquid column can be detected over a long period of time.

[0061] In a preferred development of the flushing system, the further - second - monitoring device for monitoring the condition of the equalization tank device and / or the first monitoring device for monitoring the condition of the storage chamber has / have a device for detecting the height of the liquid column, i.e. the water level, in the equalization pipe. This measure is preferably carried out in addition to the measures already described above or as an alternative to the previously described measures. As explained above, the equalization tank serves, on the one hand, to equalize excess pressure in the storage chamber. If the pressure in the storage chamber is too high, or if the storage chamber is too expanded, the gas mixture from the storage chamber presses against the water column in the equalization pipe. The gas is forced through and bubbles into the space between the liquid column and the cover in the equalization tank.The water level in the equalizing pipe drops as the pressure in the storage chamber rises. Knowing the water level thus allows conclusions to be drawn about the pressure prevailing in the storage chamber. The device for detecting the water level in the equalizing pipe can be implemented, for example, optically, e.g., with the aid of a measuring scale, or by means of another sensor device, such as a float sensor device. If a sensor device is used, it is preferably connected to the safety control device via a suitable interface, e.g., via a communication connection. The evaluation thus takes place in the safety control device, e.g., as described above.

[0062] As already described above, a valve device is arranged in at least one of the line sections. The flushing system preferably has a further - third - monitoring device for monitoring the functionality of the valve device(s), wherein the further - third - monitoring device is connected, in particular communicatively connected, to the safety control device via an interface assigned to it in the manner described above. This measure is preferably carried out in addition to the measures already described above or as an alternative to the previously described measures. This further - third - monitoring device is provided in such a way that it is capable of connecting the valve device(s) to the safety control device via suitable interfaces and, in particular, enabling them to communicate.The safety control device can, as generally described above, for example, issue commands to open and close the valve devices according to specifications. The further - third - monitoring device can additionally or alternatively also have at least one sensor device that is designed to check the tightness of the valve device(s). The commands and any sensor values ​​determined are then transmitted via the interface. The further - third - monitoring device thus monitors, in particular, the states of the inlet and outlet valve devices. The safety control device, for example, gives approval as to whether a valve device may be opened. In addition, it is possible to continuously check whether valve devices are significantly leaking. After approval, a check can also be carried out to determine how long a valve device has been open.The valve devices are preferably shut-off valves, for example solenoid valves.

[0063] The safety control device preferably has a comparison device for comparing detected sensor device values ​​and / or pressure measuring device values ​​with reference values, in particular with maximum and / or minimum reference values. Alternatively or additionally, command functions can be stored in the safety control device, for example in a module with commands. Using such comparison processes and command functions, the safety control device can monitor and control individual components of the flushing system in the manner already described above. For example, command functions can be time-related and triggered, i.e., related to the circumstances of the time. For example, control and / or monitoring can take place at specific times, at specific time intervals, at specific points in time, for specific time intervals, or the like.Alternatively or additionally, command functions can be event-related and triggered, for example, when a specific event occurs. When such an event occurs, an activity is derived from it.

[0064] In a further embodiment, the safety control device preferably has an interface, for example a communication interface, to an operational management device of the flushing system or the energy system. This allows safety-relevant states of the flushing system to be utilized for non-safety-related functions.

[0065] The individual monitoring measures described above can be carried out either individually or in any combination. The more monitoring measures are carried out in parallel, the more precise and comprehensive the monitoring of the purging system. In particular, the present invention enables continuous monitoring, in particular continuous condition analysis. The purging system according to the invention makes it possible to monitor the condition of the purging system, in particular of individual components of the purging system, without the need to use components that represent ignition sources. Such ignition sources are not permitted or undesirable due to the possible escape of hydrogen in the relevant sensitive areas of the purging system. The purging system designed according to the invention makes comprehensive monitoring possible.

[0066] When error conditions are detected, suitable error reactions are then preferably initiated, particularly via the safety control device. Such error reactions can, for example, involve displaying the error conditions on a display device so that the error conditions can be rectified. Additionally or alternatively, acoustic warning signals can be generated. Depending on the type and severity of the error, individual components of the flushing system, up to the entire flushing system, can be shut down when an error condition is detected. In another embodiment, a ventilation process can be activated when an error condition is detected. The invention is not limited to the error reactions mentioned.

[0067] The invention system is in particular a home energy system.

[0068] The energy system comprises an energy source device, which is designed in particular as an electrolysis device, preferably for producing hydrogen. Additionally or alternatively, the energy system comprises an energy sink device, which is designed in particular as a fuel cell device. Furthermore, the energy system can optionally comprise a second energy source device, which is designed in particular as a high-pressure storage device, in particular for storing hydrogen, and / or a second energy sink device, which is preferably designed as a medium-pressure storage device, in particular for temporarily storing hydrogen.

[0069] The energy system also has a purging system for purging the energy source device and / or the energy sink device, which is designed according to the first and second aspects of the invention.

[0070] In a preferred embodiment, the energy system comprises a first subsystem, which is arranged in particular in a system cabinet. The energy source device and / or the energy sink device as well as the purging system are then components of the first subsystem. Depending on the configuration, individual components of the storage system, for example, pressure measuring devices, can also be arranged outside the system cabinet.

[0071] According to the third aspect of the invention, a method for monitoring a storage system in an energy system is provided, which method has the features of independent claim 15.

[0072] According to the method, an energy system is operated with a purging system according to the first and second aspects of the invention. The purging system is a component of the energy system. To avoid repetition, reference is made in full to the above explanations regarding the first and second aspects of the invention, as well as to the general explanations above, regarding the functioning of the method.

[0073] According to the method according to the invention, values ​​and / or data are exchanged between the at least one monitoring device for monitoring the condition of the flushing system and the safety control device of the flushing system via suitable interfaces. Data is preferably exchanged via interfaces in the form of a communication connection, while values, which are in particular sensor values, can also be transmitted via interfaces in the form of a line connection, depending on the design of the monitoring device(s).

[0074] The safety control device monitors the flushing system in a safety-related manner based on the values ​​and / or data exchanged with the monitoring devices. In particular, error conditions are detected.

[0075] When error conditions are detected, suitable error reactions are preferably initiated, which are preferably initiated by the safety control device. Such error reactions can, for example, involve displaying the error conditions on a display device so that the error conditions can be rectified. Additionally or alternatively, acoustic warning signals can be generated. Depending on the type and severity of the error, individual components of the flushing system, up to the entire flushing system, can be shut down when an error condition is detected. In another embodiment, a ventilation process can be activated when an error condition is detected. The invention is not limited to the error reactions mentioned.

[0076] The present invention allows for a number of advantages. For example, the use of special explosion-proof components, such as hydrogen sensors, can be dispensed with. With suitable sensor devices, such as a pressure measuring device, a large part of the monitoring can be performed. Especially when the purging system is installed in a system cabinet, an explosion-proof design is not necessary, since the system cabinet is technically ventilated. With the present invention, all states of the purging system are known and can be monitored in a safety-related manner. The monitored states can also be made available for non-safety-critical functions, such as operational management.

[0077] The invention will now be explained in more detail using an exemplary embodiment with reference to the accompanying drawings. Figure 1 shows a schematic view of an energy system according to the invention with a purging system; and Figure 2 shows the purging system in detail.

[0078] In the Figures 1 and 2 An energy system 10 is shown schematically, which is used as a home energy system. In Figure 1 First, the basic structure of the energy system 10 is described.

[0079] As from Figure 1As can be seen, the energy system 10 initially has a first subsystem 11, which is designed as an indoor system. This means that the first subsystem 11 is located inside the house. The individual components of the first subsystem 11 are housed in a first system cabinet 12. In addition, the energy system 10 has a second subsystem 13 in the form of an outdoor system. This means that the second subsystem 13 is located outside the house. The second subsystem 13 also has a number of different components, which are housed in a second system cabinet 14.

[0080] The first subsystem 11 has a first energy source device 15, which is an electrolysis device for producing hydrogen. The first subsystem 11 also has a first energy sink device 16, which is a fuel cell device. The second subsystem 13 has a second energy source device 22, which is a high-pressure storage device. The hydrogen produced in the electrolysis device is stored in the high-pressure storage device at up to 700 bar. In addition, the second subsystem 13 has a second energy sink device 23 in the form of a medium-pressure storage device, in which the produced hydrogen is temporarily stored at pressures between 20 and 60 bar before it is finally stored in the high-pressure storage device.

[0081] The individual components of the energy system 10 are connected to one another via a connecting line device 17, which consists of a number of different line sections. Individual line sections are designed as so-called bidirectional line sections.

[0082] The hydrogen produced in the first energy source device 15 by electrolysis leaves the first energy source device 15 via a line section of the connecting line device 17, in which, in the flow direction of the produced hydrogen, there are, for example, a check valve device 18 and, downstream, a filter device 19 and a dryer device 20 in which the produced hydrogen is filtered and dried. The filter device 19 and the dryer device 20 can alternatively also be located in the second subsystem 13.

[0083] From the dryer device 20, the generated hydrogen flows via further line sections of the connecting line device 17 to a further check valve device 26 in the second subsystem 13. From there, the generated hydrogen reaches the second energy sink device 23, which functions as a medium-pressure accumulator and is connected to the connecting line device 17 via a valve device 24, which is designed in particular as a shut-off valve, for example in the form of a solenoid valve. Upstream of the second energy source device 22, designed as a high-pressure accumulator device, there is a compressor device 25, in particular in the form of a piston compressor, in the connecting line device 17. The hydrogen temporarily stored in the second energy sink device 23 is stored in the second energy source device 22 by actuating the compressor device 25.

[0084] This hydrogen production process up to its storage in the second energy source device 22 represents a first mode of operation of the energy system 10. In this first mode of operation of the energy system 10, a pressure of 20 to 60 bar prevails in the connecting line device 17. A similar pressure also prevails in the second energy sink device 23. The compressor device 25 compresses the hydrogen extracted from the second energy sink device 23, which is an intermediate storage device, to such an extent that it can be stored at pressures of up to 700 bar in the second energy source device 22, which is a high-pressure storage device.

[0085] The hydrogen stored in the second energy source device 22 is used to operate the first energy sink device 16 in the form of the fuel cell device. The fuel cell device operates in the second operating mode of the energy system 10. However, the fuel cell device can only operate at pressures below 20 bar. In the second operating mode of the energy system 10, the hydrogen is withdrawn from the second energy source device 22 and expanded via an expansion device 27 in the form of a pressure reducer before entering the first energy sink device 16 designed as a fuel cell device. At least one pressure measuring device 21, for example in the form of a pressure sensor, is provided to measure the pressure.

[0086] The Figures 1 and 2The energy system 10 shown represents a sub-area of ​​an overall home energy system, which is an electrically self-sufficient and fully renewable energy-based multi-hybrid home energy storage system.

[0087] The multi-hybrid home energy storage system makes it possible to distribute the electrical energy generated by a photovoltaic (PV) system, a small wind turbine, or similar system as needed throughout the year. The system operates as an off-grid system, independent of the electrical grid. Rather, the system is designed to ensure the home's electrical self-sufficiency, eliminating the need to draw electrical energy from the grid throughout the year.

[0088] The primary task of a home energy system is to make the electrical energy generated from photovoltaic (PV) modules or similar devices available to the consumer in the home. Secondarily, surplus electrical energy can be temporarily stored in a short-term battery storage system during periods of low load or high irradiation. Tertiary, the electrical energy can be stored as gaseous hydrogen in a long-term hydrogen storage system for the medium to long term during periods of low irradiation, such as at night, in winter, or similar periods, and then made available again as needed using a fuel cell.

[0089] In addition to energy-related tasks, the system also functions as controlled living space ventilation through a built-in ventilation unit.

[0090] The hydrogen produced in the electrolysis plant flows via the hydrogen pipeline into the external pressure storage system.

[0091] If PV energy is missing or insufficient, energy is drawn from the battery to cover the consumer load. If the energy stored in the short-term storage system is insufficient, the fuel cell system can cover the additional electrical energy demand. In fuel cell operation, the hydrogen flows from the pressure storage system to the fuel cell system via the hydrogen line.

[0092] Simultaneous operation of the fuel cell system and the electrolysis system is impossible. The entire system is operated centrally via an energy manager with predictive energy management.

[0093] The second subsystem is principally intended for outdoor operation, but under certain conditions can also be installed and operated within a specific area of ​​the house.

[0094] During operation of the energy system 10, it is necessary for the first energy source device 15 in the form of the electrolysis device and the first energy sink device 16 in the form of the fuel cell device to be regularly purged, with the fuel cell device being purged in particular on the anode side and the electrolysis device being purged in particular on the cathode side. Purging is particularly necessary to remove unwanted foreign gas components, as well as liquid water accumulating locally in the cell structures, which can negatively affect the performance and service life of the fuel cell device and / or the electrolysis device, at regular intervals or depending on the operating conditions.

[0095] Flushing is carried out with the aid of a flushing system 40, the structure and function of which will now be described in more detail. As can be seen from the Figures 1 and 2As can be seen, the rinsing system 40 is arranged within the system cabinet 12, wherein the system cabinet 12, as can be seen from Figure 2 As can be seen, it has a left system cabinet side 12a and a right system cabinet side 12b, which are separated from each other by a system cabinet wall 12c. The system cabinet 12 is an airtight cabinet construction.

[0096] The purging system 40 initially comprises a purging device 41, which, for example, has at least one storage chamber 45, in particular a volume-variable storage chamber 45, for example in the form of a bellows. The purging device 41, in particular the storage chamber 45, is connected via a first line section 46 to the first energy source device 15 in the form of the electrolysis device and via a second line section 47 to the first energy sink device 16 in the form of the fuel cell device 16. In each of the two line sections 46, 47 there is a valve device 48, 49, which is preferably designed as a shut-off valve, for example as a solenoid valve. During the purging process, a discharge volume flow 42 containing hydrogen, which represents a harmful gas at this point, emerges from the purging device 41.This fundamentally creates an explosive atmosphere, making it necessary to reduce the release of hydrogen during the purging process to below the explosion limit. This is achieved, for example, by mixing the hydrogen-containing discharge volume flow 42 with an air flow 28 of the energy system 10, in particular an exhaust air volume flow, in a mixing zone 29 of the first system cabinet 12, which represents a zone specially provided and designed for this purpose and is preferably equipped with appropriate safety measures, and thus diluting it such that the hydrogen content in the resulting exhaust air volume flow 30 is only below the explosion limit, for example, less than 10,000 ppm (1 vol%).The discharge volume flow 42 into the environment, i.e., into the mixing zone 29, generally occurs via a suitable outlet device 43, which may be configured, for example, as an orifice, throttle, nozzle, or the like. The exhaust air volume flow 30 generated during the mixing process is discharged from the first subsystem 11 or the first system cabinet 12 via an exhaust air duct 31 and can be made available for other functions, such as ventilation and / or heating and / or cooling. To reliably dilute the discharge volume flow 42, a mixing device 44 may preferably be provided in the mixing zone 29, in which the discharge volume flow 42 is mixed with the air flow 28.

[0097] In Figure 2The flushing system 40 is shown in detail. According to the invention, the flushing system 40 is designed in such a way that it enables safety-related monitoring. This is achieved according to the invention through a series of different monitoring measures. Figure 2 For illustrative purposes, a number of these monitoring measures are shown in parallel and side by side. However, it is understood that the present invention, as set forth in the general description, may also comprise only a subcombination of the monitoring measures.

[0098] The flushing system 40 has a first monitoring device 50 for monitoring the state of the storage chamber 45, which has at least one sensor device 50a assigned to the storage chamber 45 for monitoring the fill level of the storage chamber 45. In addition, the flushing system 45 has an equalizing reservoir device 54 fluidly connected to the storage chamber 45. The equalizing reservoir device 54 serves to provide equalization for the storage chamber 45, in particular when it has reached a maximum or critical fill level with regard to fill quantity and / or fill pressure.

[0099] A central feature of the flushing system 40 is a safety control device 53. The safety control device 53, which is designed, for example, as a safety controller, has the function of implementing safety-related monitoring of the flushing system 40. In particular, the safety control device 53 is designed such that it is capable of detecting error states in the flushing system 40 and initiating appropriate error responses upon detection of such error states.

[0100] In addition, the flushing system 40 has a second monitoring device 66 which is designed to monitor the condition of the expansion tank device 54.

[0101] To monitor the state of the variable-volume storage chamber 45, the sensor device 50a for monitoring the fill level of the storage chamber 45, which is part of the first monitoring device 50 for monitoring the state of the storage chamber 45, has a sensor device 52 for detecting the expansion of the storage chamber 45, which in the exemplary embodiment is designed as an optical sensor device in the form of an optical light barrier device. This sensor device 52 is connected to the safety control device 53 via a suitable interface 82, for example, by communication.

[0102] Alternatively or additionally, the sensor device 50a for monitoring the fill level of the storage chamber 45 can have a pressure measuring device 51 or be designed as a pressure measuring device, in particular for detecting the pressure within the storage chamber 45. The pressure measuring device 51, which is preferably designed as a pressure measuring device for determining a differential pressure, is connected to the safety control device 53 via a suitable interface 80, for example, depending on the design, by a line connection and / or a communication connection. The pressure measuring device 52 can have a sensor element arranged on or in the storage chamber 45, for example, a pressure measuring cell, which is connected by a line connection to the actual pressure measuring device 52 via an interface 82.

[0103] The expansion tank device 54 has an expansion tank 55, which is or can be filled at least partially with water, in particular with ultrapure water. The expansion tank device 54 also has an expansion pipe 60, which is connected to the storage chamber 45 and opens into the expansion tank 55. An overflow 61 is also located in the expansion tank 55. In addition, the expansion tank 55 has a third line section 56, designed as a supply line to the expansion tank 55, in which a valve device 57 is located, as well as a fourth line section 58, designed as a discharge line from the expansion tank 55, in which a valve device 59 is located. Both valve devices 57, 59 are preferably shut-off valves, preferably solenoid valves. The expansion tank 55 is preferably located below the storage chamber 45, for example, the bellows.The storage chamber 45 is hermetically connected at the bottom to the equalizing pipe 60. The equalizing pipe 60 ends in the equalizing tank 55. Since the equalizing tank 55 is partially filled with water, the equalizing pipe 55 ends within the water column in the equalizing tank 55. Hydrogen-containing gas and water in the storage chamber 45 can flow from the storage chamber 45 into the equalizing tank 55 via the equalizing pipe 60. The equalizing tank 55 thus serves, on the one hand, to compensate for excess pressure in the storage chamber 45. If the pressure in the storage chamber 45 is too high, or if the storage chamber 45 is over-expanded, the gas mixture from the storage chamber 45 presses against the water column in the equalizing pipe 60 and in the equalizing tank 60.The gas is forced through the water column in the equalizing tube 60 and bubbles into the gap 55a of the equalizing tank 55, which is located between the surface of the water column and an upper cover of the equalizing tank 55. As the pressure in the storage chamber 45 increases, the level in the equalizing tube 60 decreases, so that the level in the equalizing tube 60, if detected accordingly, can be used as a measure of the pressure prevailing in the storage chamber 45.

[0104] Furthermore, water is also located in the storage chamber 45, which also reaches the compensation tank 55 via the compensation pipe 60. This preferably occurs according to the known principle of communicating tubes. When the water column in the compensation tank 55 has reached a maximum height, the water can be drained via the fourth line section 58. For this purpose, this section has the valve device 59. The maximum height of the water column in the compensation tank 55 is measured using a suitable device 65 for detecting the height of the water column in the form of a float sensor device 68 or as a sensor device for weight measurement. The measured values ​​of the sensor device 68 are evaluated in the safety control device 53, which is connected to the sensor device 68 via an interface 83, in particular connected for communication purposes.Water can be filled into the expansion tank 55 via the third line section 56 with the valve device 57. The height of the water column in the expansion tank 55 can, for example, influence and adjust the pressure behavior in the storage chamber 45. The draining and filling of water from and into the expansion tank 55 is controlled by the safety control device 53. The valve devices 57, 59 are connected to the safety control device 53 via suitable interfaces 86, 87, in particular by means of communication. In the same way, the valve devices 48, 49 are also connected to the safety control device 53 via suitable interfaces 84, 85, in particular by means of communication.

[0105] Such a configuration of the expansion tank device 54 also enables, in particular, a regular exchange of the water in the expansion tank 55, for example, to protect against microbial contamination. For example, it can be provided that, via appropriate commands from the safety control device 53, the water is drained from the expansion tank 55 at defined intervals or at defined times and then refilled.

[0106] In a further embodiment, the monitoring device 66 for monitoring the state of the expansion tank device 54 has a device 67 for monitoring the liquid column within the expansion tank 55. The device 67 for monitoring the liquid column can, in particular, have or interact with a switch device for emptying and filling the expansion tank 55, which is connected to the safety control device 53 via an interface, in particular by means of communication.

[0107] In addition, the device 65 for detecting the height of the liquid column in the equalizing tank 55 has a pressure measuring device 62 for determining the differential pressure between the pressure in the storage chamber 45 and the pressure of the water column in the equalizing tank 55. This pressure measuring device 62 can, for example, be designed as a separate second pressure measuring device that is independent of the first pressure measuring device 51 described above. Or the pressure measuring device 62 is a component of the first pressure measuring device 51. The second pressure measuring device 62, regardless of the variant, is connected to the safety control device 53 via a suitable interface 80, for example, by means of a communication connection. The second pressure measuring device 62 interacts via an interface 88 with a measuring tube 63 leading outward from the equalizing tank 55. This measuring tube is preferably closed at its free end.The measuring tube 63 partially contains water from the expansion tank 55 and air. The second pressure measuring device 62 for determining the differential pressure is designed to determine the differential pressure between the pressure in the storage chamber 45 and the air pressure in the measuring tube 63. The determined differential pressure is evaluated in the safety control device 53, for example, by comparing the determined differential pressure values ​​with reference values. To adjust the measuring tube 63, it is connected to a pump device 64 for air, in particular a bubble pump device. The use of such a pump device 64 serves in particular to "zero" the measuring tube 63. The pump device 64 is connected to the safety control device 53 via a suitable interface 89, for example, by communication.

[0108] The second monitoring device 66 for monitoring the condition of the equalizing tank device 54 and / or the first monitoring device 50 for monitoring the condition of the storage chamber 45 finally also have a device 69 for detecting the height of the water column, i.e. the water level, in the equalizing pipe 60. The equalizing tank 55 serves, among other things, to equalize excess pressure in the storage chamber 45. If the pressure in the storage chamber 45 is too high, or if the storage chamber 45 is over-expanded, the gas mixture from the storage chamber 45 presses against the water column in the equalizing pipe 60. The gas is forced through and bubbles into the space 55a between the water column and the cover in the equalizing tank 55. The level in the equalizing pipe 60 drops as the pressure in the storage chamber 45 increases. Knowledge of the water level thus allows conclusions to be drawn about the pressure prevailing in the storage chamber 45.The device 69 for detecting the water level in the compensation pipe 60 can be implemented, for example, optically, for example with the aid of a measuring scale, or by means of another sensor device. If a sensor device is used, it is preferably connected to the safety control device 53 via a suitable interface.

[0109] The flushing system 40 preferably has a third monitoring device 70 for monitoring the functionality of the valve devices 48, 49, 57, 59. The safety control device 53 can, for example, issue commands via the corresponding interfaces to open and close the valve devices 48, 49, 57, 59 according to specifications. The third monitoring device 70 can additionally or alternatively also have at least one sensor device that is provided in such a way that it is capable of checking the tightness of the valve devices 48, 49, 57, 59. The commands and any detected sensor values ​​are then transmitted via the interfaces.

[0110] The safety control device 53 preferably has an interface 90, for example a communication interface, to an operational management device of the purging system 40 or the energy system 10. This allows safety-relevant states of the purging system 40 to also be utilized for non-safety-related functions.

[0111] When error conditions are detected, appropriate error responses are initiated via the safety control device 53. Such error responses may, for example, involve displaying the error conditions on a display device so that the error conditions can be rectified. Additionally or alternatively, acoustic warning signals may be generated. Depending on the type and severity of the error, individual components of the flushing system 40, up to the entire flushing system 40, may be shut down upon detection of an error condition. List of reference symbols

[0112] 10 Energy system (house energy system) 11 First subsystem (indoor system) 12 First system cabinet 12a Left cabinet wall side 12b Right cabinet wall side 12c System cabinet wall 13 Second subsystem (outdoor system) 14 Second system cabinet 15 First energy source device (electrolysis device) 16 First energy sink device (fuel cell device) 17 Connecting line device 18 Check valve device 19 Filter device 20 Dryer device 21 Pressure measuring device 22 Second energy source device (high-pressure storage device) 23 Second energy sink device (medium-pressure storage device) 24 Valve device 25 Compressor device 26 Check valve device 27 Expansion device (pressure reducer) 28 Air volume flow (exhaust air volume flow) 29 Mixing zone 30 Exhaust air volume flow 31 Exhaust air duct 32 Cooler device (emergency cooler) 40Flushing system 41Flushing device 42Discharge volume flow 43Outflow device 44Mixing device 45Storage chamber (variable volume) 46First line section 47Second line section 48Valve device 49Valve device 50Monitoring device for monitoring the condition of the storage chamber 50aSensor device for monitoring the fill level of the storage chamber 51Pressure measuring device 52Sensor device for detecting the expansion of the storage chamber 53Safety control device 54Expansion tank device 55Expansion tank 55aIntermediate space 56Third line section (supply line) 57Valve device 58Fourth line section (discharge line) 59Valve device 60Expansion pipe 61Overflow 62Pressure measuring device 63Measuring pipe 64Pump device 65Device for detecting the height of the liquid column 66Monitoring device for monitoring the condition of the expansion tank device 67Device for monitoring the liquid column within theExpansion tank 68Float sensor device 69Device for detecting the height of the liquid column in the expansion pipe 70Monitoring device for monitoring the functionality of the valve devices 80Interface (communication) 81Interface (communication) 82Interface 83Interface (communication) 84Interface (communication) 85Interface (communication) 86Interface (communication) 87Interface (communication) 88Interface 89Interface (communication) 90Interface to the operational management device (communication)

Claims

1. Energy system (10), with an energy source device (15) and / or with an energy sink system (16), and with a purging system (40) for purging the energy source device (15) and / or the energy sink device (16), comprising a purging device (41) with a storage chamber (45), which is fluidically connected on the inlet side to a line section (46), which leads off from the energy source device (15) and is designed as a purging line, and / or to a line section (47), which leads off from the energy sink device (16) and is designed as a purging line, a monitoring device (50) for monitoring the state of the storage chamber (45), wherein the monitoring device (50) comprises at least one sensor device (50a) assigned to the storage chamber (45) for monitoring the filling level of the storage chamber (45), characterized in that the purging system (40) comprises a safety control device (53), in that the sensor device (50a) for monitoring the filling level of the storage chamber (45) is connected to the safety control device (53 via an interface (80) associated therewith, in that the sensor device (50a) for monitoring the filling level of the storage chamber (45) comprises a pressure measuring device (51) or is designed as a pressure measuring device, in particular for detecting the pressure within the storage chamber (45), and in that the safety control device (53) is provided for the safety-directed monitoring of the purging system (40), in particular for detecting error states and for initiating error reactions.

2. Energy system according to Claim 1, characterized in that the pressure measuring device (51) is provided as a pressure measuring device for detecting a differential pressure and / or for detecting a relative pressure and / or for detecting an absolute pressure.

3. Energy system (10), with an energy source device (15) and / or with an energy sink system (16), and with a purging system (40) for purging the energy source device (15) and / or the energy sink device (16), comprising a purging device (41) with a storage chamber (45), which is fluidically connected on the inlet side to a line section (46), which leads off from the energy source device (15) and is designed as a purging line, and / or to a line section (47), which leads off from the energy sink device (16) and is designed as a purging line, a first monitoring device (50) for monitoring the state of the storage chamber (45), wherein the first monitoring device (50) comprises at least one sensor device (50a) assigned to the storage chamber (45) for monitoring the filling level of the storage chamber (45), and further comprising a compensation container device (54) being fluidically connected to the storage chamber (45) characterized in that the purging system (40) comprises a safety control device (53), in that the sensor device (50a) for monitoring the filling level of the storage chamber (45) is connected to the safety control device (53) via an interface (80, 81) associated therewith, in that the purging system (40) comprises at least one further monitoring device (66) for monitoring the state of the compensation container device (54), which is connected to the safety control device (53) via at least one interface (83, 89) associated therewith, and in that the safety control device (53) is provided for the safety-directed monitoring of the purging system (40), in particular for detecting error states and for initiating error reactions.

4. Energy system according to Claim 3, characterized in that the storage chamber (45) is configured as a storage chamber of variable volume, in that the sensor device (50a) for monitoring the filling level of the storage chamber (45) is configured as a sensor device (52) for detecting the expansion of the storage chamber (45), and in that the sensor device (52) for detecting the expansion of the storage chamber is optionally provided as an optical light-barrier device or as a laser-assisted distance measuring device or as a strain gauge device.

5. Energy system according to anyone of Claims 3 or 4, characterized in that the sensor device (50a) for monitoring the filling level of the storage chamber (45) comprises a pressure measuring device (51) or is provided as a pressure measuring device, in particular for detecting the pressure within the storage chamber (45), and in that the pressure measuring device (51) is configured in particular as a pressure measuring device for detecting a differential pressure and / or for detecting a relative pressure and / or for detecting an absolute pressure.

6. Energy system according to anyone of Claims 3 to 5, characterized in that the compensation container device (54) comprises a compensation container (55), which can be filled or is filled at least partially with a liquid, in particular with water, in that the compensation container device (54) comprises a compensation tube (60) which, in particular in an airtight manner, is connected to the storage chamber (45) and which opens into the compensation container (55), and in that the compensation container (55) optionally comprises a line section (56) configured as a supply line to the compensation container (55) and / or a line section (56) configured as a discharge line from the compensation container (55),and that in particular the monitoring device (66) for monitoring the state of the compensation container device (54) comprises a device (67) for monitoring the liquid column within the compensation container (55), which in particular comprises a switch device for emptying and filling the compensation container (55) or cooperates with the same.

7. Energy system according to Claim 6, characterized in that a time function is implemented in the safety control device (53), which is provided in order to monitor the refill time of the liquid into the compensation container (55) after emptying.

8. Energy system according to anyone of Claims 6 or 7, characterized in that the monitoring device (66) for monitoring the state of the compensation container device (54) comprises a device (65) for detecting the height of the liquid column in the compensation container (55), which device being configured in particular as a float sensor device (68) or as a device for weight measurement and / or which in particular comprises a pressure measuring device (62) for determining the differential pressure between the pressure in the storage chamber (45) and the pressure of the liquid column.

9. Energy system according to claim 8, characterized in that the pressure measuring device (62) for determining the differential pressure interacts with a measuring tube (63) which protrudes outwardly from the compensation container (55), and which in particular is closed at the end, in which measuring tube partially liquid from the compensation container (55) and air is located, and in that the pressure measuring device (62) for determining the differential pressure is provided for differential pressure determination between the pressure in the storage chamber (45) and the pressure of the air in the measuring tube (63) and that optionally, in order to adjust the measuring tube (63), the latter is connected to a pump device (64) for air, in particular a bead pump device.

10. Energy system according to anyone of Claims 6 to 9, characterized in that the monitoring device (66) for monitoring the state of the compensation container device (45) and / or the first monitoring device (50) for monitoring the state of the storage chamber (45) comprises a device (69) for detecting the height of the liquid column in the compensation tube (55).

11. Energy system according to anyone of Claims 1 to 10, characterized in that a valve device (48, 49, 57, 59) is provided in at least one of the line sections, in that the purging system (40) comprises a further monitoring device (70) for monitoring the operability of the valve device(s) (48, 49, 57, 59), and in that the further monitoring device (70) is connected to the safety control device (53) via at least one interface (84, 85, 86, 87) being assigned thereto.

12. Energy system according to anyone of Claims 1 to 11, characterized in that the safety control device (53) comprises a comparison device for comparing detected sensor device values and / or pressure measurement device values with reference values, in particular with maximum and / or minimum reference values, and / or in that command functions for time-related and / or event-related monitoring are stored in the safety control device (53), and / or in that the safety control device (53) comprises an interface (90) to an operating management device of the purging system (40) or of the energy system (10), in order to make safety-relevant states of the purging system (40) usable also for non-safety functions.

13. Energy system according to anyone of Claims 1 to 12, characterized in that the energy source device (15) is configured as an electrolysis device, and / or that the energy sink device (16) is configured as a fuel cell device.

14. Energy system according to anyone of claims 1 to 13, characterized in that the energy system (10) comprises an, in particular air tight, system cabinet (12), and that the purging system (40) is arranged inside the system cabinet (12).

15. Method for monitoring a purging system (40) in an energy system (10) according to anyone of Claims 1 to 145, characterized in that between the at least one monitoring device (50, 66, 70) for monitoring the state of the purging system (40) and the safety control device (53) of the purging system (40), values and / or data are exchanged via suitable interfaces (80 to 89), and in that the safety control device (53) monitors the purging system (40) on the basis of the values and / or data exchanged with the monitoring devices (50, 66, 70) in a safety-oriented manner, in particular detects error states, and initiates error reactions in the event of detection of error states.