ESS Security Management System

Abstract

The present invention relates to an ESS security management system comprising monitoring means for observing the ESS state, and security means for blocking or suspending the operation of the ESS in another domain separate from the network switch in the event of unauthorized access to the ESS or an abnormal state of the ESS. More specifically, the present invention relates to an ESS security management system that safely manages a system through multi-level network management for maintaining ESS network security.

Description

Technical Field

[0001] The present invention relates to an ESS security management system, and more particularly, to an ESS security management system that safely manages a system through multi-level network management in order to maintain ESS network security.

Background Art

[0002] Unless otherwise specifically indicated herein, the content described in this section is not prior art to the claims of this application and is not admitted to be prior art even though it is included in this section.

[0003] Generally, when the ESS is out of operating conditions, problems such as fire and explosion may occur.

[0004] The operating conditions of this ESS include environmental temperature or battery temperature, battery voltage, charge and discharge conditions, etc. An abnormal phenomenon occurs in the ESS during this process, and in addition, abnormal phenomena occur due to external hacking, disaster situations, accidents, aging, etc.

[0005] The operation of the ESS is usually often performed remotely via a network. However, if the operating conditions are incorrectly entered due to network hacking, it will deviate from the operating conditions and lead to an accident.

[0006] Therefore, in order to solve such abnormal phenomena of the ESS, especially problems caused by network hacking and malfunction, it is necessary to perform security management through monitoring and management.

[0007] However, the fact is that no appropriate technology has been applied to the security management system applied to the ESS yet.

Summary of the Invention

Problems to be Solved by the Invention

[0008] The present invention aims to solve the above-described problems, and has an object to safely operate an ESS and enable detection of the occurrence of abnormalities in advance.

[0009] Therefore, an object of the present invention is to provide a security management system that manages the state of an ESS at multiple levels.

[0010] Another object of the present invention is to provide an ESS security management system that ensures safety by interrupting or suspending the operation of an ESS network in response to unauthorized access to the ESS or the occurrence of an abnormal state of the ESS.

[0011] The object of the present invention is not limited to the above-described objects, and should be understood to include all objects inferable from the configuration of the invention described in the detailed description or claims of the present invention, or all objects achievable by the description or technical idea of the present invention.

Means for Solving the Problems

[0012] To solve the above-described problems, the present invention provides an ESS security management system including monitoring means for observing the state of an ESS, and security means for interrupting or suspending the operation of the ESS in another domain different from a network switch in response to unauthorized access to the ESS or an abnormal state of the ESS.

[0013] According to a preferred embodiment of the present invention, the monitoring means includes two or more monitoring levels having different monitoring ranges, connected to each other via a network communication line, and including functions of signal transmission and reception, command transmission, or coercion.

[0014] According to a preferred embodiment of the present invention, the monitoring level is composed of four levels.

[0015] According to a preferred embodiment of the present invention, the monitoring level includes Level 1 including a module BMS directly connected to a plurality of battery cells; Level 2 including a pack BMS connecting two or more of the module BMSs of Level 1 to each other; Level 3 including two or more system BMSs connecting two or more of the pack BMSs of Level 2 to each other and including a power management system (PMS) including control for any one or more of heating, ventilation, and air conditioning devices; and Level 4 including one or more of Level 3 and including a top-level energy management system (EMS) for controlling any one or more of ESSs, power systems, power grids, power plants, and loads in various regions.

[0016] According to a preferred embodiment of the present invention, Levels 1 and 2 adjust the battery, and the safest state is that the current is minimized and the voltage is fixed within the battery safety voltage range.

[0017] According to a preferred embodiment of the present invention, the module BMS of Level 1 is connected in series to 5 to 50 battery cells, more preferably 10 to 20 battery cells, monitors any one or more of the voltage, current, and temperature of the battery cells to monitor the state of the battery cells, performs cell balancing, obtains and checks the state information data of the battery cells, and transmits the obtained information data of the battery cells to Level 2, which is the upper level.

[0018] According to a preferred embodiment of the present invention, the pack BMS of Level 2 receives information data for the battery cells transmitted from one or more module BMSs of Level 1, makes a state determination, transmits the result data of the state determination to Level 3, which is the upper level, receives an instruction to execute balancing for the battery cells from the system BMS of Level 3, and commands the module BMS of Level 1, which is the lower level, to execute it.

[0019] According to a preferred embodiment of the present invention, the level 3 includes one or more system BMSs to form one PMS, and this PMS controls or communicates with one or more PCSs and includes one or more PCSs. Each system BMS here analyzes the information transmitted from the pack BMSs at each lower level, determines whether to perform battery cell balancing, transmits this to each pack BMS at level 2 to execute the balancing command, and includes the function of commanding On / Off for the switches connected to the pack BMSs.

[0020] According to a preferred embodiment of the present invention, the PMS at level 3 receives information from the PCS and one or more system BMSs, has the right to receive information about abnormal states including alarm situations and reset the alarm, receives information of each pack BMS enclosure unit belonging to the system BMS, and performs activation and deactivation to maintain the normal state of the battery system such as balancing, and includes the function of transmitting the acquired information to the EMS.

[0021] According to a preferred embodiment of the present invention, the level 4 includes an EMS including one or more PMSs, checks the states of air conditioning, load, and grid connected to the EMS, calculates an ESS utilization strategy, transmits necessary commands to the lower-level PMSs connected in parallel, and each EMS commands the PCS via a plurality of PMSs.

[0022] Further, the present invention is an ESS security management system including monitoring means for observing the state of the ESS and security means for blocking or suspending the operation of the ESS in another domain different from the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS,

[0023] a first battery management system for managing a plurality of battery cells;

[0024] A second battery management system located upstream of the first battery management system and providing control to the first battery management system;

[0025] A network communication line providing signal connections between the power grid, the battery, the second management system, and the first battery management system; and

[0026] An ESS security management system including a dual-domain switch control system connected to the network communication line and selectively blocking unauthorized access or abnormal operation to at least one of the first battery management system and the second battery management system.

[0027] According to a preferred embodiment of the present invention, for example, the first battery management system includes one or more module BMSs, and the second battery management system includes a pack BMS including one or more module BMSs, or in addition thereto, a system BMS including one or more pack BMSs, or in addition thereto, a PMS including one or more system BMSs.

[0028] According to a preferred embodiment of the present invention, the dual-domain switching method operates according to an instruction transmitted via the network communication line and controls at least one of the first battery management system and the second battery management system; and

[0029] A physical switch that detects abnormal operations related to potential unauthorized access and physically interrupts or prevents power from being applied to at least one of the first battery management system and the second battery management system without transmitting an instruction via the network communication line;

[0030] including.

[0031] Furthermore, the present invention provides a system comprising monitoring means for observing the ESS state and security means for cutting off or suspending the operation of the ESS in a domain other than the network switch in the event of unauthorized access to the ESS,

[0032] measuring and recording the voltage of each battery from a module BMS that manages the battery cells constituting the ESS and the overall voltage in the PCS;

[0033] accumulating the measured voltage of each battery to estimate the overall voltage of the entire system;

[0034] comparing the estimated overall voltage of the system with the measured overall voltage; and

[0035] when the difference between the two battery voltages to be compared reaches a predetermined level or more, sending an error signal

[0036] characterized by including the above steps to detect measurement errors in the PCS and BMS, and including an error detection system for ESS security management.

[0037] According to a preferred embodiment of the present invention, in the above steps, it further includes any one or more of the steps of measuring and recording the voltage of the entire battery from the PCS; and comparing the voltages of the entire battery measured from the BMS and the PCS with each other. The voltage of the entire battery means the overall voltage of a battery system configured in series or parallel connected to the PCS, but is not limited thereto. Depending on the embodiment, the voltage of some batteries may be regarded as the voltage of the entire battery according to the connection state of the battery system.

[0038] According to a preferred embodiment of the present invention, the system is applied as any one or more of the following systems: a system that sends an error signal when a difference equal to or greater than a predetermined level occurs between state data including one or more of the temperature and humidity of the battery measured in physical domain 1 and data measured in physical domain 2; a system that measures the current amount between these physical domains and, when a sudden difference in the current amount occurs in a specific section, detects it as a leakage and sends an error signal; and a system that accumulates the amount of electric power over a predetermined period and corrects it when the accumulated value is different from the value recorded by an actual integrator.

Advantages of the Invention

[0039] The present invention can adjust the battery, minimize the current, and fix the voltage within the battery safety voltage range in the safest state, enabling the safe operation of the ESS.

[0040] The present invention can, for example, adjust the heating, ventilation, and air conditioning (HVAC) facility or output, fix the battery at the safest temperature, and minimize the output in the safest state, thereby enabling the economical and stable operation of the ESS.

[0041] In the process of ESS operation, the present invention can, in the case of unauthorized access or abnormal conditions, especially when the switch is operated for unauthorized access, prevent switch operation via the network. By applying multiple switches and an emergency detection function, physical interruption of switch operation becomes possible, thereby achieving the effects of maintaining security and preventing hacking.

[0042] It should be understood that the effects of the present invention are not limited to the effects described above, but include all effects that can be inferred from the configuration of the invention described in the detailed description or claims of the present invention.

Brief Description of the Drawings

[0043]

Figure 1a

Figure 1b

Figure 2

Figure 3

Embodiments for Carrying Out the Invention

[0044] Hereinafter, the present invention will be described in more detail by means of one embodiment.

[0045] Here, with reference to the attached drawings, the ESS security management system according to a preferred embodiment will be described in detail.

[0046] For reference, in the attached drawings and their descriptions, each component is omitted or schematically shown for convenience and clarity, but the size and function of each component do not directly reflect the actual size and state as they are, and may include additional functions or some functions may be changed.

[0047] The present invention is for ensuring stability by operating security means against unauthorized access and abnormal states in an ESS. For example, in addition to a network switch, it relates to an ESS security management system that turns off switches in other domains such as a physical switch, or fixes the ESS to a specific normal state to safely operate the ESS. Here, the normal state means a state in which the ESS charges or discharges within a normal range, and is interpreted to include the same or similar states.

[0048] The present invention includes monitoring means for observing the state of the ESS, and security means for cutting off or suspending the operation of the ESS in a domain other than the network switch in response to unauthorized access or abnormal states to the ESS, and grasps and manages the operation state of the ESS.

[0049] According to a preferred embodiment of the present invention, the monitoring means includes two or more monitoring levels with different monitoring ranges. Preferably, there are three or more monitoring levels. As an example, it is preferably composed of four levels.

[0050] According to a preferred embodiment of the present invention, each monitoring level of the monitoring means is connected via a network communication line and includes functions such as signal transmission and reception, command transmission, or coercion. Such an operation state is performed remotely.

[0051] According to a preferred embodiment of the present invention, in addition to the network communication line, a physical switch that can be physically cut off from power is added, and the switch cuts off power under predetermined conditions. Here, the physical switch includes a power cut-off device with the same function. Therefore, here, the physical switch means one that can perform an On / Off function by an appropriate command in the connected system.

[0052] According to a preferred embodiment of the present invention, the monitoring level includes four levels. Specific examples are shown in FIG. 1 (FIG. 1a, FIG. 1b). FIG. 1 is an application example of an ESS security management system according to the present invention, and is a conceptual diagram exemplifying the management range of the operation state when the monitoring level is composed of levels 1 to 4. Here, the level (Level; Lv) is performed in such a way that a plurality of lower levels are connected and the plurality of levels constitute a higher level. For example, it means that a larger range system is configured as the level increases.

[0053] According to a preferred embodiment of the present invention, the monitoring level includes level 1 including a module BMS directly connected to one or more battery cells; level 2 including a pack BMS connecting one or more of the module BMSs of level 1 to each other; level 3 including one or more system BMSs connecting one or more of the pack BMSs of level 2 to each other and including a PMS (Power management system) in which control related to environmental control such as an air conditioner and heating and cooling is performed; and level 4 including one or more of level 3 and including an energy management system (EMS) at the highest level that controls any one or more of ESSs, power systems, power grids, power plants, and loads in various regions.

[0054] Among these, the levels that perform more special functions in the present invention are considered to be level 2 and level 3. At these levels, information data obtained from the battery related to security is analyzed and judged, and for unauthorized access or abnormal states, it is judged whether to turn on / off a physical switch, which is a security device, or actual switching is performed.

[0055] When this monitoring level is configured in four stages, specifically, a multi-level can be configured as follows. This is shown in FIG. 1.

[0056] - Level 1: Generally, BMS directly connected to battery cells such as Slave BMS, Node BMS, and Module BMS; in the present invention, it is the level of Module BMS connected to a plurality of battery cells and includes one or more Module BMS. Usually, one Module BMS can communicate with, measure, or manage 5 to 50, more preferably 10 to 20 battery cells. Level 1 is connected to communicate information with Level 2.

[0057] - Level 2: Generally, a composite BMS that bundles Level 1 BMS such as Master BMS; in the present invention, it is the level of Pack BMS connected to one or more Module BMS and includes one or more Pack BMS. Usually, a Pack BMS can communicate with, measure, or manage 10 to 100 Module BMS. A switch gear is connected to Level 2, enabling communication or control, and it is connected to communicate information with Level 3 described later.

[0058] - Level 3: A power management system for controlling air conditioning, load, grid, etc. In the present invention, it is the level of System BMS connected to a plurality of Pack BMS and includes one or more PMS (Power Management System) connected to one or more System BMS. Usually, a System BMS includes 1 to 20 Pack BMS. One Pack BMS manages one or more strings (battery series connection systems) connected to each Pack BMS and includes one or more enclosures. Level 3 is connected to communicate information with Level 4 described later.

[0059] - Level 4: The highest-level energy management system (EMS) that controls ESS and power systems in various regions. In the present invention, it is connected to one or more PMS corresponding to Level 3, which is the lower level, and is electrically connected to air conditioning, grid, and load means, etc.

[0060] According to a preferred embodiment of the present invention, the level 1 and level 2 adjust the battery, and the safest state is that the current is minimized and the voltage is fixed within the battery safety voltage range.

[0061] Here, expressions such as composite, multiple, and a large number of BMSs mean that one or more, a large number, or all of the BMSs are bundled and connected in any number.

[0062] According to a preferred embodiment of the present invention, the module BMS of the level 1 is connected to 5 to 50 battery cells connected in series, monitors any one or more battery cell states such as the voltage of the battery cell, the temperature of the module, and cell balancing, and acquires and checks the state information data of the battery cell. In addition, it has a function of transmitting the information data of the battery cell thus acquired to level 2 which is the upper level.

[0063] According to a preferred embodiment of the present invention, the level 1 is, for example, an n.BMS (node Battery Management System) which is a module BMS, measures the states such as the voltage, current, and temperature of the battery, and compares this with the recorded values. In addition, level 1 only performs externally predetermined commands with respect to, for example, whether to perform a balancing operation or whether to perform an operation such as controlling an external device with a digital output (Output) terminal such as FAN operation or Relay, and communicates only the measured values and its own operating state to level 2. If an internal error occurs, after outputting an error message, it executes an emergency mode. At this time, the emergency mode includes interruption of the node - to - node switch, interruption of balancing, operation of the cooling fan, etc. Also, in an emergency situation, it is possible to forcibly activate the balancing circuit and perform an operation to reduce the charge amount of the battery.

[0064] According to a preferred embodiment of the present invention, at level 1, a boost circuit shown in FIG. 6 described later is configured so as to maintain the minimum drive voltage at, for example, 2.5V or more, 3V or more, or not less than the minimum drive voltage value required for each BMS.

[0065] According to a preferred embodiment of the present invention, the level 2 pack BMS receives information data for battery cells from one or more module BMSs of the level 1, performs a state determination, transmits the result data of the state determination to the level 3 which is the upper level, instructs the level 3 system BMS to execute balancing for the battery cells, and includes a function of instructing the module BMS of the level 1 which is the lower level to execute the same. Alternatively, it includes a function of managing a switching gear that performs On / Off according to an instruction from the upper level, and managing an abnormal state including communication and connection abnormalities and alarm execution. The switching gear is connected to a power line connected to a power conversion system (PCS) and a battery module or pack, and connects or disconnects the power line and the battery according to an instruction from the pack BMS. The connection or disconnection process includes a pre-charging process for safety. This level 2 can execute only pre-determined instructions from the outside (whether to perform a balancing operation) and maintain security by ignoring other instructions. Also, when a significant difference occurs between the battery data transmitted from the level 1 and its own data (current, voltage, temperature), an error signal is sent. If an internal error occurs, after outputting an error message, an emergency mode is executed. At this time, the emergency mode includes shutting off the node-to-node switch, shutting off the balancing, operating the cooling fan, etc. Also, in an emergency situation, the level 1 can be instructed to forcibly perform a balancing operation and the SoC can be adjusted.

[0066] According to a preferred embodiment of the present invention, at level 3, one or more pack BMSs are connected to form a system BMS. Based on the battery information transmitted from the module BMS or pack BMS, it grasps the SoC state including the minimum voltage and maximum voltage of the battery cells and the positions of the problematic cells, determines whether to perform a balancing operation according to the cell balancing state, and the pack BMS commands a balancing operation for a specific cell. If it is determined that the battery is not in a safe state or is in an abnormal situation, an emergency strategy is implemented. Also, the overall voltage, current, and temperature are accumulated and recorded, and this is transmitted to the PMS at level 3.

[0067] According to a preferred embodiment of the present invention, at level 4, one or more system BMSs are connected to form a PMS. The PMS is connected to the PCS and can perform communication or control. Each system BMS here analyzes the information transmitted from each lower-level pack BMS, determines whether to perform battery cell balancing, transmits this to each pack BMS at level 2 to execute a balancing command, and includes the function of commanding On / Off for the switches connected to the pack BMS.

[0068] According to the present invention, the conventional system checks and determines the information of the module BMS in the pack BMS, directly performs the switch On / Off, grasps the positions of the battery pack and battery cells, and executes the switch operation. However, in the present invention, preferably, in order to solve problems such as the execution burden of the pack BMS and the resulting errors, the pack BMS does not perform the confirmation and determination of the abnormal state, but determines at a higher level whether to perform the determination of the abnormal state and the operation of the switch. The subject of the command for such a switch operation is preferably the PMS that manages the system BMS located at level 3, which is higher than the pack BMS. It manages the determination of the abnormal state and the switch operation state, and performs the actual command through the system BMS. In this process, level 2 is only responsible for executing the command according to the command of the system BMS.

[0069] According to a preferred embodiment of the present invention, the level 3 system BMS manages each pack BMS enclosure composed of one or more strings, receives detailed battery status reports from the pack BMS, activates and deactivates the enclosures, and includes a function of receiving lower-level information including battery abnormal states, alarm situations, and the connection status of the PCS and switches.

[0070] According to a preferred embodiment of the present invention, the level 3 PMS receives information from the PCS and a plurality of system BMSs, has the right to receive information about abnormal states including alarm situations and reset alarms, receives information for each pack BMS enclosure belonging to the system BMS and performs activation and deactivation, and includes a function of transmitting the acquired information to the EMS.

[0071] According to a preferred embodiment of the present invention, the level 3 adjusts one or more of the heating, ventilation, and air conditioning facilities or the output, and the safest state is fixed at the safest temperature for the battery and the output can be minimized.

[0072] According to a preferred embodiment of the present invention, the level 3 is a power management system (PMS), which, for example, performs a charge and discharge strategy based on data transmitted from level 2 or system BMS and data measured by itself, estimates the SoC of the battery and records it. It also determines the operation of the electric load and the air conditioner. Further, it adjusts the current amount of charge and discharge according to a predetermined algorithm and transmits this to level 4. Such a level 3 can maintain security by only executing predetermined commands from the outside and ignoring other commands. If a difference occurs in the data measured by itself and the current, voltage, temperature, etc. transmitted from level 2, an error signal is sent. Also, when an internal error occurs, after outputting an error message, an emergency mode is executed, where the emergency mode includes any one or more of the interruption of the node - to - node switch, the interruption of balancing, the operation of the cooling fan, the suspension of the charge and discharge operation, the suspension of the use of the electric load, and the operation of the emergency safety switch. Further, in an emergency situation, in order to lower the SoC, an operation of forcibly returning the current to the grid can be performed.

[0073] According to a preferred embodiment of the present invention, the EMS at level 4 checks the states of the loads and the grid connected to it, calculates an ESS utilization strategy, and transmits the necessary commands to the lower - level PMSs connected in parallel. Here, each EMS has a function of transmitting commands to a plurality of PMSs. Here, the EMS receives information from one or more PMSs, has the right to receive information about abnormal states including alarm situations and reset the alarm, receives information for each pack BMS enclosure unit belonging to the system BMS to perform activation and de - activation, and includes a function of transmitting the acquired information to the EMS.

[0074] According to a preferred embodiment of the present invention, the level 4 monitors, for example, the data transmitted from level 3 and the power status of the power plant to control the situation, and transmits information such as the predicted usage amount to the power plant. In addition, it transmits the current charging state, etc. to judge the power situation, and transmits the predicted temperature / usage amount data considering weather information, etc. to the PMS. Also, when a usage limit is commanded from the power plant, this is transmitted to the PMS. If a significant difference occurs between the data measured by itself and the current, voltage, temperature, power usage amount, etc. transmitted from level 3, an emergency signal is sent. Also, it detects an external entry and sends an emergency signal. In particular, a system for monitoring security threats such as physical entry or communication is provided. Therefore, if an internal error is detected, an abnormality is reported to the customer or administrator. In addition, when an abnormality occurs in the system due to natural disasters, accidents, etc., additional complementary means may be provided to detect this.

[0075] In the ESS security management system according to the present invention as described above, preferably, it has the following characteristics.

[0076] The switch gear is connected to the battery and the power line, and includes functions such as a contactor, a pre-charger, and a fuse.

[0077] The linear IC receives a command from the pack BMS and turns on the switch (pattern resistance).

[0078] The system BMS at level 3, considering that the computing power of the pack BMS is low, commands a balancing operation based on the data received from the pack BMS in the system BMS. Conventionally, since the pack BMS commanded the balancing operation, difficulties occurred in the calculation.

[0079] The PMS performs temperature control. Conventionally, since the temperature control was performed below the system BMS, sufficient monitoring was impossible, overall control was not performed, and it was difficult to expect an appropriate control effect.

[0080] In the present invention, the features as described above are provided, enabling ESS security management and allowing for efficient response to unauthorized access, abnormal conditions, and the like.

[0081] On the other hand, as an embodiment, the present invention is an ESS security management system including monitoring means for observing the ESS state and security means for blocking or suspending the operation of the ESS in another domain different from the network switch in the event of unauthorized access to the ESS or an abnormal state of the ESS. It is a two-level type system. For example, it is composed of a first battery management system and a second battery management system located upstream thereof for control, and includes a dual-domain switch control system for selectively blocking unauthorized access or abnormal operation.

[0082] According to a preferred embodiment of the present invention, as this ESS security management system, for example, a first battery management system for managing a plurality of battery cells;

[0083] A second battery management system located upstream of the first battery management system and providing control to the first battery management system;

[0084] A network communication line providing a signal connection between the power grid, the battery, the second management system, and the first battery management system; and

[0085] Comprising a dual-domain switch control system connected to the network communication line and selectively blocking unauthorized access or abnormal operation to at least one of the first battery management system and the second battery management system to constitute an ESS security management system.

[0086] According to a preferred embodiment of the present invention, the first battery management system includes a plurality of module BMSs, and the first battery management system includes a pack BMS including a plurality of module BMSs, or in addition thereto, a system BMS including a plurality of pack BMSs, or in addition thereto, a PMS including a plurality of system BMSs.

[0087] According to a preferred embodiment of the present invention, the dual-domain switching method includes a network switch that operates according to a command transmitted via the network communication line and controls at least one of the first battery management system and the second battery management system.

[0088] Further, there is included a physical switch that detects an abnormal operation related to potential unauthorized access and physically cuts off or prevents power from being applied to at least one of the first battery management system and the second battery management system without transmitting a command via the network communication line.

[0089] According to a preferred embodiment of the present invention, activation of the physical switch prevents activation of the network switch, deactivation of the physical switch allows reactivation of the network switch, or activation of the physical switch prevents both activation and reactivation of the network switch.

[0090] According to a preferred embodiment of the present invention, at least one of the first battery management system and the second battery management system is connected to a PCS that compares the voltages of the entire battery measured respectively to determine whether there is potential unauthorized access or an abnormality, and is designed to cooperate with each other.

[0091] According to a preferred embodiment of the present invention, at least one of the first battery management system and the second battery management system is further cooperated with the PCS to compare at least one of the measured environmental temperature, humidity, a rapid increase in these environments, the current power amount during a predetermined period, and the usage amount of the total power, and is designed to determine potential unauthorized access or abnormal operation.

[0092] According to a preferred embodiment of the present invention, the first battery management system, the second battery management system, the network communication line, and the dual-domain switch control system are implemented as an ESS capable of supporting the use of a vanadium-based battery.

[0093] The conventional lithium-ion battery (LIB) has a voltage range of 3 to 5V. In comparison, the vanadium-based battery has a lower voltage range of 1.2 to 1.5V, more preferably 1.25 to 1.45V. In particular, although there is an upper limit voltage, there is no lower limit voltage, so it is possible to use a relatively wide voltage range (window). Therefore, there is an advantage that no problem occurs even when it reaches 0V or a fully discharged state.

[0094] In addition, since the vanadium-based battery has a reversible charge-discharge reaction, there is no difference between the initial capacity and the subsequent capacity. On the other hand, the load for the BMS to perform cell balancing is large. That is, after first connecting in parallel to form a module and then connecting each module in series, the system current controlled by the BMS is large, and the load required for the BMS is large.

[0095] Therefore, such a vanadium-based battery is very suitable for applying the ESS security management system as described above.

[0096] According to a preferred embodiment of the present invention, in at least one of the first battery management system and the second battery management system, the open circuit voltage (OCV) decreases as the temperature increases, and the OCV increases as the temperature decreases.

[0097] According to a preferred embodiment of the present invention, the step of performing the cell balancing by the controller actively or passively maintains the balance of the state of charge (SOC) values, raises the temperature of the vanadium-based battery by 5 °C or more, and performs thermal management on the vanadium-based battery cells to observe battery improvement.

[0098] According to a preferred embodiment of the present invention, thermal management is performed by a controller in a vanadium-based battery cell to maintain an optimal operating efficiency temperature range of 15 to 40 °C and not exceed 50 °C in any case.

[0099] According to a preferred embodiment of the present invention, the security means applicable to the ESS security management system as described above sets the safest state as the default and operates in the default state when the power is cut off.

[0100] Therefore, when the switch operates against unauthorized access to the ESS or an abnormal state, the ESS security management system of the present invention cannot be operated using the network.

[0101] Therefore, the ESS can be operated and used again only after entering the ESS space and turning on the switch.

[0102] In addition, although the dual domain is basically composed of two switches, a network switch and a physical switch, there is also a method to further enhance stability by installing other switches that cannot be restored by the network.

[0103] In addition, the controller that has recognized an emergency immediately turns off the switches under its control, can physically switch between physical domains, and enables physical isolation in the power-off situation using normally open (NO) type switches.

[0104] According to a preferred embodiment of the present invention, the system

[0105] measures the voltage of each battery from the BMS, and measures and records the overall voltage with the PCS;

[0106] accumulates the measured voltages of each battery and estimates the voltage of the entire system;

[0107] compares the estimated voltage of the entire system with the measured overall voltage;

[0108] when the difference between the voltages of two batteries of each battery is equal to or greater than a predetermined level, sends out an error signal

[0109] includes a detection system for detecting measurement errors of the PCS and the BMS including the above steps. In this case, measurement errors of the PCS and the BMS can be preferably detected.

[0110] Therefore, the present invention includes an error detection system for ESS security management including such a detection system.

[0111] According to a preferred embodiment of the present invention, in the above steps, it further includes any one or more of the steps of measuring and recording the voltage of the entire battery from the PCS; comparing the measured voltages of the entire battery from the BMS and the PCS with each other.

[0112] According to a preferred embodiment of the present invention, examples of the security means applied to the ESS security management system typically include a network switch and a physical switch proposed as a dual domain. However, for example, in addition to the switch means, one or more of the operation fixing means and the power cut-off device may be used.

[0113] Although the system of the present invention has been described focusing on the voltage of the overall battery, it can also be preferably applied to other measured values.

[0114] As an example, according to a preferred embodiment of the present invention, when a difference of a predetermined level or more occurs between data such as temperature / humidity measured in the physical domain 1 and data measured in the physical domain 2, the system sends an error signal; a system that measures the current amount between these physical domains and, when a sudden difference in the current amount occurs in a specific section, detects it as a leakage and sends an error signal; and a system that accumulates the power amount during a predetermined period and corrects it when the accumulated value is different from the value recorded by an actual integrator. Therefore, it can be applied as one or more of such applicable systems.

[0115] In addition, the system can also send an error signal for a situation where, for example, the fastening structure of the bus-bar is released and the current is not accurately transmitted or the contact resistance suddenly increases. Also, for example, when there is a battery array, the error occurrence position is measured by means of sequentially integrating and measuring a point where the differential value changes significantly.

[0116] According to a preferred embodiment of the present invention, as shown in FIG. 2, it has been found that when the fastening structure of the bus-bar is released and an open wire (broken wire) occurs, the voltage input to the sensing circuit may become unknown. Therefore, when such a problem occurs and the voltage is accumulated one by one, it has been recognized that the determination of whether the voltage is normal varies depending on the configuration circuit. That is, when an open wire occurs in the conventional BMS, the voltage floats up or down, is 0 (zero) V, or is expressed as the maximum voltage recognizable by the IC. Therefore, in this case, when accumulating the voltage, for example, it has been found that the battery voltage may fall outside the battery voltage range; the battery voltage may fluctuate greatly; or the battery voltage may be recognized as 0 V, etc.

[0117] Therefore, in a preferred embodiment of the present invention, considering this problem point and the need to determine an open wire by logic, for example, as an open detection system for a bus-bar, when an open wire occurs, the upper cell voltage is applied to the sensing IC and designed to generate a high voltage. The resistance is several MΩ and designed not to affect other functions outside the detection of the open wire.

[0118] Such a configuration can be implemented, for example, as a configuration including a boost circuit as shown in FIG. 3. Here, the condition for determining an open wire is that the upper cell voltage of the cell where the open wire occurs is applied to the installed resistor, the voltage is divided according to the resistance ratio, and applied to the lower cell input line. For example, when the same value of resistor is installed and the lower cell operates as an open wire at 0.1 V and the upper cell is 0.6 V, the upper cell is recognized as 0.7 V, and when the lower cell is 0.35 V, which is half of the voltage of the upper cell, it is recognized as an open wire, including the configuration.

[0119] In addition, the system of the present invention can be applied to similar small, medium, or large systems by modifying some technical components, adding or excluding, integrating, etc.

[0120] According to a preferred embodiment of the present invention, the security management system as described above further has means for grasping the breakdown of the use or consumption of the power transmitted from the ESS and analyzing information on energy use and loss. This power use information analysis means can solve problems not only caused by the occurrence of abnormalities in the power transmitted from the ESS, but also problems caused by the difference between the actual power used by the user who uses the transmitted power and the transmitted power.

[0121] According to a preferred embodiment of the present invention, in a situation where the market for electric vehicle charging is growing rapidly and at the same time the technical understanding of electric vehicle users is also developing, this power use information analysis means can analyze and detect abnormal phenomena between the transmitted power and the used power, and improve the problem by methods such as giving warnings.

[0122] In particular, conventionally, since the cost of charging an electric vehicle was low, there was a tendency not to worry deeply about the charging method of the charger and to pay as billed. However, recently, the use of electric vehicle charging stands to which ESS is applied has increased, the electricity charging fee has risen, information on the charging system is shared, and it has begun to be recognized that the charged amount claimed by the charger and the charged amount actually charged to the vehicle's battery may be different. The present invention can be an appropriate means for solving such problems.

[0123] Generally, the power transmitted from the charger of the ESS is used for various elements. For example, it is used as the power for driving the vehicle or the actual charging amount charged to the battery of the electric vehicle; it is used as the power consumed for battery regulation including any one or more of heating, cooling, and balancing; the loss between the charger and the electric vehicle; it is used as auxiliary power when using equipment such as V2L (Vehicle to Load), and there may be power leakage or power theft. Due to one or more of these factors, there may occur a problem that other used power and loss power in addition to the actual used power charged to the electric vehicle battery are charged to the charger user who charges the electric vehicle battery.

[0124] According to a preferred embodiment of the present invention, the power usage information analysis means applicable to the above-mentioned addition can classify or analyze, for example, any one or more of the loss powers of external outflows such as driving power, heater power, BMS balancing power, V2L power, leakage power, and power theft, and according to the analysis result, it can be utilized as a system capable of managing to charge only the pure driving power actually charged by the user.

[0125] Therefore, according to a preferred embodiment of the present invention, the present invention includes charge state information analysis means for classifying or analyzing any one or more of driving power, heater power, BMS balancing power, V2L power, and loss power of external outflow, and performing charge interruption and charge state control based on the analysis result.

[0126] According to a preferred embodiment of the present invention, the power usage information analysis means as described above can confirm power usage information by providing, for example, a power usage measuring device, a controller, monitoring means, a sensor, etc. at a necessary position of the ESS charger, and utilize or accumulate the data.

[0127] According to a preferred embodiment of the present invention, in the power usage information analysis means as described above, when an unexpected discrepancy occurs between the measured values obtained from the power usage measuring device or the like, charge interruption or power leakage prevention is performed.

[0128] Also, according to a preferred embodiment of the present invention, the security management system of the present invention and the power usage information analysis means as described above compare the received power of the electric vehicle with the transmitted power of the charger, and when a difference equal to or greater than the set reference value occurs during the set time, information such as charge interruption or charge execution is provided. If the difference is small, for example, means for preventing diversion to other uses may be further applied.

[0129] According to a preferred embodiment of the present invention, as a specific example, means for comparing the expected charge completion time with the actual charge time based on the input value to be charged by the user is further applied, and the information obtained from the comparison data is used.

[0130] According to a preferred embodiment of the present invention, based on the comparison data, it is possible to check for leakage and perform reasonable billing.

[0131] Also, according to another preferred embodiment of the present invention, when power is used for the battery heater of the ESS, this amount of power can be managed by using the correlation between the current temperature and the battery temperature and warning when a predetermined amount or more is used.

[0132] Also, for example, in the case of battery balancing for the ESS, based on the maximum balancing current, the maximum predictable balancing power can be set and managed by warning when it is exceeded.

[0133] In addition, it can also be managed by comparing the total power consumption with the output power of the charger and warning when a difference of a predetermined value or more occurs. Such management enables security management through pre-checks for leakage, power theft, etc.

[0134] According to a preferred embodiment of the present invention, after charging is stopped, if various warning states as described above occur, for example, information on abnormal situations can be input to the central controller to take subsequent measures. As another example, in order to minimize abnormal occurrences, for example, a system can be constructed in which two or more measuring devices are installed and a plurality of information obtained from them is compared.

[0135] In this way, the ESS security management system according to the present invention can prevent problems such as fires and explosions from occurring when the ESS deviates from the operating conditions.

[0136] In addition, even if the environmental temperature, battery temperature, battery voltage, charge / discharge conditions, etc. are remotely operationally managed according to the ESS operation conditions, by addressing various security vulnerabilities such as incorrect entry of operation conditions due to external factors such as network hacking, accidents can be prevented, and it is useful as a security management system that can stably operate the ESS.

[0137] In addition, when further applying power usage information analysis means and the like to the security management system of the present invention, it is possible to detect other power usage, losses, leakage, power theft, etc. in addition to the actual power usage, and adjust the billing content or suspend charging, etc., enabling reasonable management.

Claims

1. Monitoring means for observing the state of the ESS, and Security means for cutting off or suspending the operation of the ESS in a domain other than the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS. An ESS security management system comprising the same.

2. The monitoring means according to claim 1, comprising two or more monitoring levels with different monitoring ranges, connected to each other via a network communication line, and including functions of signal transmission and reception, command transmission or coercion. The ESS security management system described.

3. The monitoring level includes Level 1 including a module BMS directly connected to a plurality of battery cells; Level 2 including a pack BMS connecting one or more module BMSs of Level 1 to each other; A system BMS connecting one or more pack BMSs of Level 2 to each other, and including a power management system (PMS) in which control is performed on any one or more of heating, ventilation and air conditioning, load, and grid; and including one or more of Level 3, The ESS security management system according to claim 2, characterized in that it includes a level 4 including an energy management system (EMS) for controlling any one or more of ESSs and power systems in various regions.

4. The level 1 or level 2 or level 3 adjusts the battery, and the safest state is that the current is minimized and the voltage is fixed within the battery safety voltage range. The ESS security management system described.

5. The module BMS of Level 1 monitors the state of any one or more of the voltage, current, and temperature of the battery cells when a plurality of battery cells are connected in series, performs cell balancing, obtains and confirms the state information data of the battery cells, and transmits the obtained information data of the battery cells to Level 2, which is a higher level. The ESS security management system according to claim 3, characterized by performing the function.

6. The pack BMS at level 2 receives information data for the battery cells from the plurality of module BMSs at level 1, performs state determination, transmits the result data of the state determination to the level 3 at the upper level, receives an instruction to execute balancing for the battery cells from the system BMS at level 3, and commands the module BMS at level 1, which is the lower level, to execute the same. The ESS security management system according to claim 3, characterized by including such a function.

7. Level 3 includes a plurality of system BMSs to form one PMS, this PMS includes a PCS, and each system BMS analyzes the information transmitted from the pack BMSs at each lower level to determine whether to perform balancing of the battery cells, transmits this to each pack BMS at level 2 to execute the balancing instruction, and commands the switch connected to the pack BMS to turn on / off. The ESS security management system according to claim 3, characterized by including such a function.

8. The PMS at level 3 receives information from the PCS and a plurality of system BMSs, has the right to receive information about abnormal states including alarm situations and reset alarms, receives information for each enclosure unit, performs activation and deactivation to maintain the normal state of the battery system such as balancing, and transmits the acquired information to the EMS. The ESS security management system according to claim 3, characterized by including such a function.

9. Level 4 includes an EMS including a plurality of PMSs, checks the states of air conditioning, load, and grid connected to the EMS to calculate an ESS utilization strategy, transmits necessary instructions to the PMSs at the lower level connected in parallel, and each EMS transmits instructions to the PCS via a plurality of PMSs. The ESS security management system according to claim 3, characterized by including such a function.

10. An ESS security management system comprising monitoring means for observing the state of the ESS and security means for responding to unauthorized access to the ESS to cut off or suspend the operation of the ESS in another domain different from the network switch, a first battery management system for managing a plurality of battery cells; a second battery management system located upstream of the first battery management system and providing control to the first battery management system; A network communication line that provides a signal connection between the power grid, the battery, the second management system, and the first battery management system; and A dual-domain switch control system connected to the network communication line and selectively blocking unauthorized access or abnormal operation to at least one of the first battery management system and the second battery management system An ESS security management system including the above.

11. The first battery management system includes one or more module BMSs. The first battery management system includes one or more pack BMSs connected to the one or more module BMSs, one or more system BMSs connected to the one or more pack BMSs, or a PMS connected to the one or more system BMSs. The ESS security management system according to claim 10.

12. The dual-domain switch control system operates according to commands transmitted via the network communication line and includes a network switch that controls at least one of the first battery management system and the second battery management system; and A physical switch that detects abnormal operations related to potential unauthorized access and can physically block or prevent power from being applied to at least one of the first battery management system and the second battery management system without transmitting commands via the network communication line; The ESS security management system according to claim 10 including the above.

13. Activation of the physical switch prevents activation of the network switch, and deactivation of the physical switch allows reactivation of the network switch, or activation of the physical switch prevents both activation and reactivation of the network switch. The ESS security management system according to claim 10.

14. At least one of the first battery management system and the second battery management system is connected to a PCS that compares the overall battery voltage measured to determine whether there is potential unauthorized access or abnormality, and is designed to cooperate with each other. The ESS security management system according to claim 10.

15. At least one of the first battery management system and the second battery management system further cooperates with the PCS, and compares at least one of the measured environmental temperature, humidity, rapid increase in these environments, current power amount, and total power consumption during a predetermined period, and is designed to determine potential unauthorized access or abnormal operation. The ESS security management system according to claim 10.

16. The first battery management system, the second battery management system, the network communication line, and the dual-domain switch control system are embodied in an ESS capable of supporting the use of a vanadium-based battery. The ESS security management system according to claim 10.

17. In at least one of the first battery management system and the second battery management system, the open circuit voltage (OCV) decreases as the temperature rises and increases as the temperature decreases. The ESS security management system according to claim 10.

18. Performing cell balancing by a controller actively or passively maintains the balance of the state of charge (SOC) values, and in order to observe the improvement of the battery, raises the temperature of the vanadium-based battery by 5 °C or more and performs thermal management of the vanadium-based battery cells. The ESS security management system according to claim 10.

19. Thermal management includes maintaining an optimal operating efficiency temperature range of 15 to 40 °C and not exceeding 50 °C in any case, and is performed by a controller in a vanadium-based battery cell. The ESS security management system according to claim 10.

20. In a system comprising monitoring means for observing the state of the ESS and security means for blocking or suspending the operation of the ESS in another domain different from the network switch in response to unauthorized access to the ESS or an abnormal state of the ESS, Measuring and recording the voltage of each battery from a module BMS that manages the battery cells constituting the ESS and the total voltage in the PCS; Accumulating the measured voltage of each battery and estimating the total voltage of the entire system; Comparing the estimated total system voltage with the measured total voltage; and When a difference of a predetermined level or more occurs in the battery voltage of the comparison target, the step of sending an error signal is included, and an error detection system for ESS security management is characterized by detecting measurement errors of the PCS and BMS.

21. Furthermore, it includes any one or more of the steps of measuring and recording the voltage of the entire battery from the PCS; comparing the voltages of the entire battery measured from the BMS and the PCS with each other. The error detection system for ESS security management according to claim 20, characterized by this.

22. When a difference of a predetermined level or more occurs between the state data including any one or more of the temperature and humidity of the battery measured in the physical domain 1 and the data measured in the physical domain 2, the system for sending an error signal; measuring the current amount between the two physical domains, and when a difference in the current amount suddenly occurs in a specific section, detecting it as a leakage and sending an error signal; and accumulating the amount of electric power during a predetermined period, and when the accumulated value is different from the value recorded by the actual integrator, correcting it. The error detection system for ESS security management according to claim 20, characterized by being applicable as any one or more of the systems.

23. The system according to claim 20, wherein the system includes means for sending an error signal even for a situation where the fastening structure of the bus bar is released and the current is not accurately transmitted or the contact resistance suddenly increases.

24. When there is an array of batteries, the error occurrence position is measured as a point where the differential value changes greatly when sequentially integrated. The error detection system for ESS security management according to claim 20.

25. An open detection system for a bus bar, when an open wire occurs, the upper cell voltage or the output voltage of the boost circuit is divided according to the resistance ratio and applied to the sensing IC, and the resistance is several MΩ and is designed not to affect other functions outside the detection of the open wire. The ESS security management system according to claim 1 or claim 10, including the system.

26. The ESS security management system according to claim 25, including a configuration including a boost circuit.

27. The determination condition of an open wire is that the voltage of the upper cell of the cell where the open wire has occurred is applied to the installed resistor, the voltage is divided according to the resistance ratio, and is applied to the input line of the lower cell. The ESS security management system according to claim 25.

28. When the lower cell operates as an open wire at 0.1 V when resistors of the same value are installed, and when the upper cell is 0.6 V, the upper cell is recognized as 0.7 V, and when the lower cell is 0.35 V which is half the voltage of the upper cell, the ESS security management system according to claim 25, including a configuration recognized as an open wire.

29. The ESS security management system according to claim 1 or claim 10, including charge state information analysis means for classifying or analyzing any one or more of the traveling power, heater power, BMS balancing power, V2L power, and loss power of external outflow, and controlling charge interruption or charge state based on the analysis result.

Images