Dihydrogen production plant and associated control process

Abstract

The invention relates to an installation (2) comprising an electrochemical device (4) for the production of dihydrogen, and a cooling device (6) comprising: a cooling unit (32) for a heat transfer fluid (30); a heat exchanger (34) configured to ensure heat exchange between the heat transfer fluid (30) and at least a part of the electrochemical device (4); a decoupling tank (36) fluidically connected between the cooling unit (32) and the heat exchanger (34); an electrical energy storage unit (26); at least one electric pump (37) configured to circulate the heat transfer fluid (30) between the decoupling tank (36) and the heat exchanger (34); and a control unit (28) configured to, in the event of a power failure in the cooling unit (32), control the power supply to each electric pump (37) from the electrical energy storage unit (26). Figure 1.

Description

Title of the invention: Hydrogen production plant and associated control method technical field

[0001] The present invention relates to a dihydrogen production installation comprising: • an electrochemical device configured to produce dihydrogen from an inlet stream of water; • a cooling device comprising a cooling circuit, the cooling circuit comprising: • a cooling unit configured to, in operation: • to bring a heat transfer fluid into a predetermined temperature range; and • circulate the heat transfer fluid through the cooling circuit; and • a heat exchanger fluidically connected to the cooling unit for its supply of heat transfer fluid, the heat exchanger being configured to ensure heat exchange between the heat transfer fluid and at least part of the electrochemical device.

[0002] The invention also relates to a method for controlling such an installation.

[0003] The invention applies to the field of industrial production of dihydrogen, and in particular to installations implementing solid oxide electrolysis cells. State of the art

[0004] In the field of dihydrogen production, it is classically known to use electrolysis systems employing a proton exchange membrane (or PEM, from the English "Proton Exchange Membrane"), an anion exchange membrane (or AEM, from the English "Anion Exchange Membrane"), or even an alkaline technology.

[0005] More recently, systems called SOE (from the English "Solid Oxide Electrolysis", or solid oxide electrolysis), which offer better efficiency than conventional systems, have emerged.

[0006] In general, the efficiency of an electrolysis system is defined as the electrical energy consumed by the electrolysis system for one kilogram of dihydrogen produced.

[0007] More specifically, an SOE electrolysis system has an efficiency greater than 80%, which is about 30% better performance than that of PEM electrolysis systems.

[0008] Such an improvement in efficiency is largely due to the implementation, in SOE electrolysis systems, of high-temperature hydrolysis reactions (generally between 700°C and 800°C), which reduces the electrical energy required to split water molecules (vapor) into hydrogen and oxygen.

[0009] A consequence of using SOE electrolysis systems is that the output stream including dihydrogen has a high temperature (on the order of 700°C to 800°C) and contains a significant proportion of vapor (typically on the order of 20% to 50% by volume).

[0010] Now, in general, devices whose operation requires dihydrogen (for example, fuel cells) require that this compound have, on the one hand, a high purity (for example, greater than 99%) and, on the other hand, a low temperature (for example, ambient temperature).

[0011] For these reasons, SOE electrolysis systems classically include drying devices, for example by cooling, condensation and separation to satisfy these criteria.

[0012] For example, such cooling, condensation and separation devices include air-cooled units (or "air coolers"), chiller groups, or similar equipment comprising heat exchangers, pumps, fans, compressors, etc.

[0013] Such SOE electrolysis systems exhibit high thermal inertia. Therefore, to prevent damage to said systems, it is necessary to ensure the continuity of the cooling function, particularly in situations such as a failure of a primary source of electrical power supply to the cooling devices, for example, an electrical network.

[0014] For this purpose, an auxiliary source (i.e. a backup source) is generally provided to supply the cooling devices with the electrical energy necessary for their operation in the event of a failure of the primary power supply.

[0015] However, the cooling devices for SOE electrolysis systems in the prior art do not give complete satisfaction.

[0016] Indeed, conventional cooling devices generally have a significant electrical consumption (on the order of a few tens to a few hundred kilowatts, depending on the capacity of the SOE electrolyzer), with high current demands at start-up or restart (on the order of a hundred amperes).

[0017] Consequently, to cope with such constraints, generator sets (for example, diesel generator sets) are conventionally used as auxiliary sources.

[0018] However, before being able to supply the current necessary to power the installation's cooling devices, such generator sets generally require a transitional period after starting, similar to a start-up time. Typically, such a transitional period lasts on the order of a few tens of seconds.

[0019] It therefore follows that a failure to supply the cooling devices is observed during this transitional period, which is potentially detrimental to the installation, whose cooling requirement remains almost constant, due to thermal inertia.

[0020] One object of the present invention is to remedy at least one of the drawbacks of the prior art.

[0021] Another object of the invention is to provide a SOE electrolysis system with increased safety in the event of a failure of the primary power supply. Description of the invention

[0022] To this end, the invention relates to an installation of the aforementioned type, in which the cooling device further comprises: • a decoupling tank included in the cooling circuit and fluidly connected between the cooling unit and the heat exchanger; • an electrical energy storage unit; • at least one fluidly connected electric pump between the reservoir decoupling tank and heat exchanger, each electric pump being configured, in operation, to circulate the heat transfer fluid between the decoupling tank and the heat exchanger, each electric pump being electrically connected to the electrical energy storage unit; and • a control unit configured to, in the event of detection of a power failure situation in which the cooling unit is no longer powered, control the power supply of each electric pump by the electrical energy storage unit, to circulate the heat transfer fluid between the decoupling tank and the heat exchanger.

[0023] Indeed, thanks to the combined presence of the decoupling tank, which acts as a heat transfer fluid reservoir, the electric pumps, and the electrical energy storage unit, the heat exchanger is supplied with cold heat transfer fluid (i.e., sufficiently cold to extract heat from the device). Electrochemical backup is possible in the event of a failure of the primary power supply to the cooling device, and during the interval required for the auxiliary backup power supply to be activated. In this way, the cooling function is maintained.

[0024] Furthermore, the use of electric pumps to circulate the cold heat transfer fluid is advantageous, due to their relatively low electrical consumption (on the order of kilowatts), and their reduced starting current (on the order of amperes) compared to air coolers and chillers. This results in few constraints on the storage capacity of the electrical energy storage unit, which is thus likely to have a reduced capacity, and therefore a reduced size.

[0025] The use of such low-capacity storage units results in low cost, a small footprint that facilitates easy integration into (even existing) hydrogen production facilities, and reduced operating risks. Furthermore, such low-capacity storage units are likely to be exempt from stringent environmental regulations (e.g., ICPE 2925 in France), unlike the uninterruptible power supplies that would have been required to directly power the cooling system during the transitional commissioning period of the auxiliary source.

[0026] Advantageously, the installation according to the invention has one or more of the following characteristics, taken individually or in any technically possible combination:

[0027] in which the electrochemical device is configured to produce, from the water inlet flow, at least one outlet flow, the at least one outlet flow comprising a first outlet flow comprising dihydrogen, the heat exchanger being configured to ensure heat exchange between the heat transfer fluid and a first discharge line of the first outlet flow;

[0028] the electrochemical device is a solid oxide electrolyzer, the inlet stream comprising water in vapor phase;

[0029] the control unit is configured to, in the event of detection of the end of the power failure situation, command the shutdown of the power supply, by the electrical energy storage unit, of each electric pump;

[0030] The decoupling tank comprises a vessel for storing heat transfer fluid, the vessel comprising: • an inlet connection for heated heat transfer fluid, fluidly connected to an outlet of the heat exchanger; • a heated heat transfer fluid outlet, fluidly connected to an inlet of the cooling unit; • a cold heat transfer fluid inlet connection, fluidly connected to an outlet of the cooling unit; • a cold heat transfer fluid outlet, fluidly connected to an inlet of the heat exchanger, an altitude of each of the heated heat transfer fluid inlet and heated heat transfer fluid outlet connections being greater than an altitude of each of the cold heat transfer fluid inlet and cold heat transfer fluid outlet connections;

[0031] the heat transfer fluid is a mixture of ethylene glycol and water;

[0032] at least one safety-critical component of the electrochemical device is electrically connected to the electrical energy storage unit, the control unit being configured to, in the event of detection of the power failure situation, control the power supply of each critical component by the electrical energy storage unit.

[0033] According to another aspect of the invention, a method for controlling a dihydrogen production installation is proposed, comprising: • an electrochemical device configured to produce dihydrogen from an inlet stream of water; • a cooling device comprising a cooling circuit, the cooling circuit comprising: • a cooling unit configured to, in operation: • to bring a heat transfer fluid into a predetermined temperature range; and • circulate the heat transfer fluid through the cooling circuit; and • a heat exchanger fluidically connected to the cooling unit for its supply of heat transfer fluid, the heat exchanger being configured to ensure heat exchange between the heat transfer fluid and at least part of the electrochemical device; the cooling system also comprising: • a decoupling tank included in the cooling circuit and fluidly connected between the cooling unit and the heat exchanger; • an electrical energy storage unit; and • at least one fluidly connected electric pump between the reservoir decoupling and heat exchanger, each electric pump being configured to, in operation, circulate the heat transfer fluid between the decoupling tank and the heat exchanger, each electric pump being electrically connected to the electrical energy storage unit; the process includes, in the event of detection of a power failure situation in which the cooling unit is no longer supplied, a control of the electrical supply of each electric pump by the electrical energy storage unit, to circulate the heat transfer fluid between the decoupling tank and the heat exchanger. Brief description of the figures

[0034] The invention will be better understood upon reading the following description, given solely by way of non-limiting example and made with reference to the accompanying drawings in which:

[0035] Figure [Fig. 1] is a schematic representation of an installation according to the invention, in a normal operating situation; and

[0036] Figure [Fig.2] is another schematic representation of the installation of [Fig.1], in a situation of power failure of a cooling unit of the installation.

[0037] It is understood that the embodiments described below are in no way limiting. In particular, variants of the invention may be conceived comprising only a selection of the features described below, isolated from the other features described, if this selection of features is sufficient to confer a technical advantage or to differentiate the invention from the prior art. This selection includes at least one preferably functional feature without structural details, or with only a portion of the structural details if this portion alone is sufficient to confer a technical advantage or to differentiate the invention from the prior art.

[0038] In particular, all the variants and all the embodiments described are combinable with each other if nothing prevents this combination from a technical point of view.

[0039] In the figures and in the rest of the description, elements common to several figures retain the same reference. Detailed description

[0040] A dihydrogen production installation 2 according to the invention is illustrated by [Fig.1].

[0041] The installation 2 includes an electrochemical device 4 and a cooling device 6 for cooling at least a part of the electrochemical device 4.

[0042] The electrochemical device 4 is configured to produce dihydrogen from an inlet stream 8 of water.

[0043] For example, the electrochemical device 4 is an electrolyzer, preferably a solid oxide electrolyzer. In the latter case, the inlet stream 8 comprises water in the vapor phase.

[0044] In particular, the electrochemical device 4 is configured to produce at least one output stream 10 from the input stream 8.

[0045] In particular, the at least one outlet stream 10 comprises a first outlet stream 12 containing dihydrogen, evacuated through a first evacuation pipe 14.

[0046] Preferably, at least one outlet stream 10 also includes a second outlet stream 16 containing dioxygen, discharged through a second discharge pipe 18.

[0047] As shown in the figure, each of the input stream 8 and output streams 10 (including the first and second output streams 12 and 16) is illustrated by a white arrow.

[0048] The cooling device 6 includes a cooling circuit 20 (or "cooling loop"), a primary power supply 22 (referred to as "primary supply"), an auxiliary power supply 24 (referred to as "auxiliary supply"), an electrical energy storage unit 26 and a control unit 28.

[0049] Cooling circuit 20

[0050] The cooling circuit 20 is a heat transfer fluid circulation loop 30, intended to extract heat from at least a part of the electrochemical device 4 to lower the temperature of said part of the electrochemical device 4.

[0051] In the figure, the circulation of the heat transfer fluid 30 is illustrated by black arrows.

[0052] Advantageously, the heat transfer fluid is a mixture of ethylene glycol and water.

[0053] In this case, the heat transfer fluid 30 is preferably dosed at a concentration sufficient ethylene glycol to avoid any risk of freezing according to the local climatic conditions of the dihydrogen production installation 2.

[0054] The cooling loop 20 comprises a cooling unit 32, a heat exchanger 34, and a decoupling tank 36 fluidly connected to each other. Furthermore, the cooling loop 20 comprises at least one electric pump 37 fluidly connected between the decoupling tank 36 and the heat exchanger 34.

[0055] For the purposes of the present invention, the expression "A fluidically connected / linked / connected to B" means that "A is in fluidic connection with B", but does not exclude the presence of one or more organ(s) between A and B.

[0056] The decoupling tank 36 is fluidly connected between the cooling unit 32 and the heat exchanger 34.

[0057] More specifically, the cooling unit 32 is fluidly connected to the decoupling tank 36 by means of two first conduits 38. In addition, the heat exchanger 34 is connected to the decoupling tank 36 by means of two second conduits 40 separate from the first two conduits 38.

[0058] Cooling unit 32

[0059] The cooling unit 32 is also configured to, in operation, circulate the heat transfer fluid 30 between said cooling unit 32 and the decoupling tank 36, through the conduits 38. In addition, the cooling unit 32 is configured to, in operation, bring the heat transfer fluid 30 into a predetermined temperature range.

[0060] For example, the cooling unit 32 is a refrigeration unit, or an air cooler.

[0061] The cooling unit 32 is electrically connected to each of the primary source 22 and the auxiliary source 24 to draw the electrical energy necessary for its operation.

[0062] More specifically, the cooling unit 32 is configured to, in a normal operating mode, be supplied with electrical energy by the primary source 22. The primary source 22 is, for example, an electrical network capable of supplying electrical powers from several tens to several hundreds of kilowatts, for example a three-phase network with a line voltage of 400 V.

[0063] Furthermore, in a degraded operating mode, in which the primary source 22 is unable to supply the cooling unit 32 with the energy necessary for its operation (for example, in the event of a failure affecting the primary source 22), the cooling unit 32 is configured to be supplied with electrical energy by the auxiliary source 24. Such an auxiliary source 24 is, in particular, an emergency generator set, for example a diesel generator set.

[0064] Heat exchanger 34

[0065] As previously stated, the heat exchanger 34 is fluidly connected to the decoupling tank 36 for its supply of heat transfer fluid 30.

[0066] The heat exchanger 34 is configured to ensure heat exchange between the heat transfer fluid 30 and at least part of the electrochemical device 4.

[0067] In particular, and as illustrated by [Fig.1], the heat exchanger 34 is configured to ensure heat exchange between the heat transfer fluid 30 and the first discharge pipe 14. Such a feature is, in particular, intended to cause condensation of the water vapor present in the first outlet stream 12.

[0068] Decoupling reservoir 36

[0069] The decoupling tank 36 acts as a reservoir for the heat transfer fluid 30. More specifically, the decoupling tank 36 includes a tank 42 for storing the heat transfer fluid 30.

[0070] In addition, the decoupling tank 36 provides a thermal buffer role between a first part of the cooling loop 20 comprising the cooling unit 32 and a second part of the cooling loop 20 comprising the heat exchanger 34.

[0071] As previously stated, the decoupling tank 36 is fluidly connected between the cooling unit 32 and the heat exchanger 34.

[0072] More specifically, the tank 42 of the decoupling reservoir 36 comprises: • an inlet 44EC of heated heat transfer fluid, fluidly connected (by means of a second conduit 40) to an outlet 34S of the heat exchanger 34; • an outlet 44SC of heated heat transfer fluid, fluidly connected (by means of a first conduit 38) to an inlet 32E of the cooling unit 32; • a cold heat transfer fluid inlet 44EF, fluidly connected (by means of another first conduit 38) to an outlet 32S of the cooling unit 32; and • a cold heat transfer fluid outlet 44SF, fluidly connected (by means of another second conduit 40) to an inlet 34E of the heat exchanger 34.

[0073] Preferably, the elevation of each of the heated heat transfer fluid inlet 44EC and heated heat transfer fluid outlet 44SC is greater than the elevation of each of the cold heat transfer fluid inlet 44EF and cold heat transfer fluid outlet 44SF. This has the effect, in particular, of limiting convective mixing of the heated heat transfer fluid from the heat exchanger 34 with the cooler heat transfer fluid from the cooling unit 32.

[0074] Electric pump 37

[0075] Each electric pump 37 is electrically connected to each of the primary source 22 and auxiliary source 24 to draw the electrical energy necessary for its operation. For example, each electric pump 37 is electrically connected to the primary source 22 and the auxiliary source 24 via a suitable converter.

[0076] Each electric pump 37 is also electrically connected to the electrical energy storage unit 26 for its electrical power supply in the case where neither the primary source 22 nor the auxiliary source 24 can provide such a supply.

[0077] More specifically, the cooling circuit is configured so that, in normal operating mode, each electric pump 37 is supplied with electrical energy from the primary source 22.

[0078] In addition, the cooling circuit 20 is configured so that, in degraded operating mode, each electric pump 37 is supplied with electrical energy by the auxiliary source 24.

[0079] Finally, the cooling circuit 20 is configured so that each electric pump 37 is supplied with electrical energy by the electrical energy storage unit 26 during a power failure situation (described later).

[0080] Preferably, the electrical energy storage unit 26 is a battery, in particular an uninterruptible power supply, also called a static uninterruptible power supply, or UPS. Advantageously, the electrical energy storage unit 26 is sized to supply each electric pump 37 for a period greater than or equal to the transient period required for the operational commissioning of the auxiliary source 24.

[0081] Advantageously, the electrical energy storage unit 26 is electrically connected to the primary source 22 to ensure the recharging of the electrical energy storage unit 26. Thanks to this feature, the electrical energy storage unit 26 has the highest possible state of charge when its use is required.

[0082] Preferably, critical components of the electrochemical device 4 are also electrically connected to the electrical energy storage unit 26. Such critical components (or "safety-critical components"), whose continuous operation is necessary to maintain safety conditions within the installation 2, include, in particular, hydrogen detection devices, ventilation devices, safety controllers, critical valve control devices, etc. In this case, the electrical energy storage unit 26 is advantageously also sized to supply each critical component for a period greater than or equal to the transient period required for the operational commissioning of the auxiliary source 24.

[0083] As previously stated, each electric pump 37 is fluidly connected between the decoupling tank 36 and the heat exchanger 34 to, in operation, circulate the heat transfer fluid 30 between the decoupling tank 36 and the heat exchanger 34.

[0084] Preferably, each electric pump 37 is fluidly connected on a heat transfer fluid circulation line 30 between the decoupling tank 36 and the heat exchanger 34, i.e. between two portions of a second conduit 40.

[0085] Advantageously, at least one electric pump 37 is connected between the cold heat transfer fluid outlet 44SF of the decoupling tank 36 and the inlet 34E of the heat exchanger 34. Such an arrangement is advantageous insofar as it promotes a longer service life for the components. In this case, said electric pump 37 is configured, during operation, to circulate the heat transfer fluid 30 from the decoupling tank 36 to the heat exchanger 34.

[0086] Control unit 28

[0087] The control unit 28 is configured to control the power supply of each electric pump 37. More specifically, the control unit 28 is configured to, in the event of detection of a power supply failure situation, control the power supply of each electric pump 37 by the electrical energy storage unit 26, so as to keep each electric pump 37 in operation to circulate the heat transfer fluid 30 between the decoupling tank 36 and the heat exchanger 34.

[0088] For example, to control such an electrical power supply, the control unit 28 is likely to control a switch 46 connected between the electrical energy storage unit 26 and the electric pump 37 so that the switch 46 is in a conducting state.

[0089] Such a power failure situation corresponds to a situation in which the cooling unit 32 and the electric pump or pump 37 are no longer supplied with electrical energy, for example due to a failure of the primary source 22, or during a transitional period subsequent to said failure and preceding the operational commissioning of the auxiliary source 24.

[0090] In particular, if the electric pump 37 is connected between the inlet 44EC of heated heat transfer fluid from the decoupling tank 36 and the outlet 34S of the heat exchanger 34, then the electric pump 37 is powered by the electrical energy storage unit 26 to continue circulating the heat transfer fluid 30 from the heat exchanger 34 to the decoupling tank 36.

[0091] Furthermore, if the electric pump 37 is connected between the outlet 44SF of the cold heat transfer fluid of the decoupling tank 36 and the inlet 34E of the heat exchanger 34, then the electric pump 37 is powered by the electrical energy storage unit 26 to continue to circulate the heat transfer fluid 30 from the decoupling tank 36 to the heat exchanger 34.

[0092] Advantageously, the control unit 28 is also configured to, in the event of detection of the end of the power supply fault situation, control the power supply in electrical energy of each electric pump 37 by one or the other of the primary source 22 and the auxiliary source 24, according to a state of the primary source 22.

[0093] Such an end to the power failure situation corresponds to a recommissioning of the primary source 22 or to the end of the previously mentioned transitional period, leading in particular to a restart of the cooling unit 32.

[0094] Such a feature is advantageous, insofar as it avoids an unnecessary discharge of the electrical energy storage unit 26.

[0095] Advantageously, in the case where critical components of the electrochemical device 4 are electrically connected to the electrical energy storage unit 26, the control unit 28 is also configured to, in the event of detection of the power supply fault situation, control the power supply of each critical component by the electrical energy storage unit 26, so as to ensure continuity of the power supply to each critical component.

[0096] Operation

[0097] An operation of the installation 2 will now be described with reference to figures 1 and 2.

[0098] In operation, the control unit 28 monitors a state of the primary source 22.

[0099] In a normal operating situation, illustrated by [Fig.1], the heat transfer fluid 30 circulates between the cooling unit 32, the decoupling tank 36 and the heat exchanger 34.

[0100] In this case, each electric pump 37 is supplied with electrical energy from the primary source 22.

[0101] In the event of detection of a power supply failure situation resulting in the shutdown of the cooling unit 32, the control unit 28 controls the power supply of each electric pump 37 from the electrical energy storage unit 26.

[0102] This results in a continuity of circulation of the heat transfer fluid 30 between the decoupling tank 36 and the heat exchanger 34, illustrated by black arrows on [Fig.2],

[0103] In particular, if the electric pump 37 is connected between the outlet 44SF of cold heat transfer fluid from the decoupling tank 36 and the inlet 34E of the heat exchanger 34 ([Fig.2]), then the electric pump 37 continues to circulate the heat transfer fluid 30 from the decoupling tank 36 to the heat exchanger 34.

[0104] Furthermore, if the electric pump 37 is connected between the inlet 44EC of heated heat transfer fluid from the decoupling tank 36 and the outlet 34S of the heat exchanger 34 (case not shown), then the electric pump 37 continues to circulate the heat transfer fluid 30 from the heat exchanger 34 to the decoupling tank 36.

[0105] Advantageously, in the case where critical components of the electrochemical device 4 are electrically connected to the electrical energy storage unit 26, then the control unit 28 also controls the power supply of each critical component by the electrical energy storage unit 26.

[0106] Advantageously, in the event of detection of the end of the power failure situation, the control unit 28 commands the shutdown of the power supply to each electric pump 37 by the electrical energy storage unit 26, and the electrical power supply to each electric pump 37 by one or the other of the primary source 22 and the auxiliary source 24, according to a state of the primary source 22.

[0107] Of course, the invention is not limited to the examples just described.

Claims

1. Demands Installation (2) for the production of dihydrogen comprising: • an electrochemical device (4) configured to produce dihydrogen from an inlet stream of water; • a cooling device (6) comprising a cooling circuit (20), the cooling circuit (20) comprising: • a cooling unit (32) configured to, in operation: • bring a heat transfer fluid (30) into a predetermined temperature range; and • circulate the heat transfer fluid (30) in the cooling circuit (20); and • a heat exchanger (34) fluidly connected to the cooling unit (32) for its supply of heat transfer fluid (30), the heat exchanger (34) being configured to ensure heat exchange between the heat transfer fluid (30) and at least part of the electrochemical device (4); the installation (2) being characterized in that the cooling device (4) further comprises: • a decoupling reservoir (36) included in the cooling circuit (20) and fluidly connected between the cooling unit (32) and the heat exchanger (34); • a unit (26) for electrical energy storage; • at least one electric pump (37) fluidly connected between the decoupling tank (36) and the heat exchanger (34), each electric pump (37) being configured, in operation, to circulate the heat transfer fluid (30) between the decoupling tank (36) and the heat exchanger (34), each electric pump (37) being electrically connected to the electrical energy storage unit (26); and • a control unit (28) configured to, in the event of detection of a power failure situation in which the cooling unit (32) is no longer powered, control the power supply of each electric pump (37) by the electrical energy storage unit (26), to circulate the heat transfer fluid (30) between the decoupling tank (36) and the heat exchanger (34).

2. Installation (2) according to claim 1, wherein the electrochemical device (4) is configured to produce, from the water inlet stream, at least one outlet stream, the at least one outlet stream comprising a first outlet stream comprising dihydrogen, the heat exchanger (34) being configured to ensure heat exchange between the heat transfer fluid (30) and a first discharge line (14) of the first outlet stream.

3. Installation (2) according to claim 1 or 2, wherein the electrochemical device (4) is a solid oxide electrolyzer, the inlet stream comprising water in vapor phase.

4. Installation (2) according to any one of claims 1 to 3, wherein the control unit is configured to, in the event of detection of an end to the power failure situation, command the shutdown of the power supply, by the electrical energy storage unit, of each electric pump (37).

5. Installation (2) according to any one of claims 1 to 4, wherein the decoupling tank comprises a tank for storing heat transfer fluid, the tank comprising: • an inlet fitting for heated heat transfer fluid, fluidly connected to an outlet of the heat exchanger; • an outlet fitting for heated heat transfer fluid, fluidly connected to an inlet of the cooling unit; • an inlet fitting for cold heat transfer fluid, fluidly connected to an outlet of the cooling unit; • a cold heat transfer fluid outlet tap, fluidly connected to a heat exchanger inlet, an altitude of each of the heated heat transfer fluid inlet tap and the heated heat transfer fluid outlet tap being greater than an altitude of each of the cold heat transfer fluid inlet tap and the cold heat transfer fluid outlet tap.

6. Installation (2) according to any one of claims 1 to 5, wherein the heat transfer fluid (30) is a mixture of ethylene glycol and water.

7. Installation (2) according to any one of claims 1 to 6, wherein at least one safety-critical component of the electrochemical device is electrically connected to the electrical energy storage unit (26), the control unit (28) being configured to, in the event of detection of the power failure situation, control the power supply of each critical component by the electrical energy storage unit (26).

8. A method for controlling a hydrogen production installation (2) comprising: • an electrochemical device (4) configured to produce hydrogen from a water inlet stream; • a cooling device (6) comprising a cooling circuit (20), the cooling circuit (20) comprising: • a cooling unit (32) configured to, in operation: • bring a heat transfer fluid (30) to a predetermined temperature range; and • circulate the heat transfer fluid (30) in the cooling circuit (20); and • a heat exchanger (34) fluidly connected to the cooling unit (32) for its supply of heat transfer fluid (30), the heat exchanger (34) being configured to provide heat exchange between the heat transfer fluid (30) and at least part of the electrochemical device (4); the cooling device (4) further comprising: • a decoupling reservoir (36) included in the cooling circuit (20) and fluidly connected between the cooling unit (32) and the heat exchanger (34); • an electrical energy storage unit (26); and • at least one electric pump (37) fluidly connected between the decoupling tank (36) and the heat exchanger (34), each electric pump (37) being configured to, in operation, circulate the heat transfer fluid (30) between the decoupling tank (36) and the heat exchanger (34), each electric pump (37) being electrically connected to the electrical energy storage unit (26); the method comprising, in the event of detection of a power failure situation in which the cooling unit (32) is no longer supplied, a control of the electrical supply of each electric pump (37) by the electrical energy storage unit (26), to circulate the heat transfer fluid (30) between the decoupling tank (36) and the heat exchanger (34).

Images