Fuel cell device, error retry control method, and program

Abstract

To prevent loss of reliability by reducing the number of times of operation exceeding an error threshold at the time of determining an error.SOLUTION: A control unit 30 includes a detection information acquisition unit 31 for acquiring detection information from a detection device, a determination unit 32 for determining whether a detection value obtained from the detection information of the detection information acquisition unit 31 has reached a second threshold value lower than a first threshold value for bringing the operation to a halt state, and an operation control unit 33 for executing an error retry process to automatically restart the operation after stopping the operation once when the determination unit 32 determines that the detection value has reached the second threshold value lower than the first threshold value that brings the operation to a halt state.SELECTED DRAWING: Figure 4

Description

Technical Field

[0001] The present invention relates to a fuel cell device, an error retry control method, and a program.

Background Art

[0002] Recently, as a next-generation energy, a fuel cell device that houses a fuel cell capable of obtaining electric power using hydrogen gas and an oxygen-containing gas and auxiliary equipment for operating the fuel cell in an exterior case, and an operation method thereof have been proposed.

[0003] A fuel cell has excellent convenience as a system that directly converts chemical energy contained in fuel into electric energy. In addition, since a fuel cell electrochemically reacts hydrogen as fuel and oxygen as an oxidant to directly extract electricity, it can extract electric energy with high efficiency and at the same time has the advantage of not emitting noisy and harmful exhaust gases, and is an environmentally friendly device.

[0004] On the other hand, a fuel cell device including a fuel cell is an infrastructure essential for daily life, and operation stability and robustness are required. However, as a device, it is conceivable that robustness may be lost due to some factors.

[0005] In response to the above problems, as a fuel cell device that operates stably without greatly changing the configuration of an existing system and without increasing the risk of failure, a power generation unit, a fuel processing system that supplies fuel to the power generation unit, and a control unit having a protection item that controls the fuel supply operation of the fuel processing system and stops the power generation operation of the power generation unit when the fuel processing system deviates from normal operation. In the fuel cell power generation system, when the control unit detects an abnormality, without reporting a failure, after stopping the power generation operation of the power generation unit, a technique further having a protection item for automatically restarting the power generation unit is disclosed (for example, see Patent Document 1).

Prior Art Documents

[0006] [Patent Document 1] Japanese Patent Publication No. 2009-193936 [Overview of the project] [Problems that the invention aims to solve]

[0007] However, the technology described in Patent Document 1 divides the abnormality level into four stages from mild to severe and performs individual control. However, in the case of relatively mild abnormalities from level 1 to level 3, the system is restarted, and the operation of the fuel cell system is continued until it reaches the most severe level. Therefore, if the system is stopped after a second abnormality detection following the restart, it means that the system has been allowed to operate exceeding the abnormality threshold twice, which could impair the reliability of the fuel cell system in the future.

[0008] The present invention aims to provide a fuel cell device, an error retry control method, and a program that prevent a loss of reliability by reducing the number of operations that exceed the abnormal threshold when an abnormality is detected. [Means for solving the problem]

[0009] Embodiment 1; One or more embodiments of the present invention propose a fuel cell device comprising a fuel cell, auxiliary equipment, and a control unit, wherein the control unit comprises: a detection information acquisition unit that acquires detection information from a detection device; a determination unit that determines whether the detection value obtained from the detection information of the detection information acquisition unit has reached a second threshold lower than a first threshold that causes the operation to stop; and an operation control unit that, when the determination unit determines that the detection value has reached a second threshold lower than a first threshold that causes the operation to stop, executes an error retry process that temporarily stops the operation and then automatically restarts it.

[0010] Embodiment 2; One or more embodiments of the present invention propose a fuel cell device characterized in that the number of executions of the error retry process is set, and the operation control unit stops operation when the number of executions of the error retry process exceeds the set number, and when it exceeds the first threshold.

[0011] Embodiment 3; One or more embodiments of the present invention propose a fuel cell device characterized in that the operation control unit turns on a retry flag when the error retry process is executed, and turns off the retry flag if normal operation continues for a predetermined period after the execution of the error retry process.

[0012] Embodiment 4; One or more embodiments of the present invention propose an error retry control method for a fuel cell device including a fuel cell, auxiliary equipment, and a control unit comprising a detection information acquisition unit, a determination unit, and an operation control unit, the method comprising: a first step in which the detection information acquisition unit acquires detection information from a detection device; a second step in which the determination unit determines whether the detection value obtained in the first step has reached a second threshold lower than a first threshold that causes the operation to stop; and a third step in which the operation control unit, when it determines that the detection value has reached a second threshold lower than a first threshold that causes the operation to stop, executes an error retry process that temporarily stops the operation and then automatically restarts it.

[0013] Embodiment 5; One or more embodiments of the present invention propose an error retry control method characterized in that the number of times the second step is executed is set, and the operation control unit stops the operation when the number of times the second step is executed exceeds the set number, or when it exceeds the first threshold.

[0014] Embodiment 6; One or more embodiments of the present invention propose an error retry control method characterized by turning on a retry flag when the second step is performed, and turning off the retry flag if normal operation continues for a predetermined period after the execution of the second step.

[0015] Embodiment 7; One or more embodiments of the present invention are programs for causing a computer to execute an error retry control method for a fuel cell device including a fuel cell, auxiliary equipment, and a control unit comprising a detection information acquisition unit, a determination unit, and an operation control unit, wherein the program causes the computer to execute: a first step in which the detection information acquisition unit acquires detection information from a detection device; a second step in which the determination unit determines whether the detection value obtained in the first step has reached a second threshold lower than a first threshold that causes the operation to stop; and a third step in which the operation control unit, when it determines that the detection value has reached a second threshold lower than a first threshold that causes the operation to stop, executes an error retry process that temporarily stops the operation and then automatically restarts it.

[0016] Embodiment 8; One or more embodiments of the present invention propose a program characterized in that the number of times the second step is executed is set, and the operation control unit stops the operation when the number of times the second step is executed exceeds the set number, or when it exceeds the first threshold.

[0017] Embodiment 9; One or more embodiments of the present invention propose a program characterized in that a retry flag is turned on when the second step is performed, and the retry flag is turned off if normal operation continues for a predetermined period after the execution of the second step. [Effects of the Invention]

[0018] According to one or more embodiments of the present invention, when an abnormality is detected, the number of operations that exceed the abnormality threshold can be reduced, thereby preventing a loss of reliability.

Brief Description of the Drawings

[0019] [Figure 1] This is a diagram showing the configuration of the fuel cell device according to the present embodiment. [Figure 2] This is a diagram showing the configuration of the abnormality determination block according to the present embodiment. [Figure 3] This is a diagram showing the configuration of the control unit according to the present embodiment. [Figure 4] This is a diagram showing the process of the control unit according to the present embodiment. [Figure 5] This is a diagram showing the process of the control unit according to the present embodiment. [Figure 6] This is a diagram showing the process of the control unit according to the present embodiment.

Mode for Carrying Out the Invention

[0020] <Embodiment> The fuel cell device 1 according to the present embodiment will be described with reference to FIGS. 1 to 6.

[0021] <Configuration of the fuel cell device 1> As shown in FIG. 1, the fuel cell device 1 includes a fuel cell module 10, a cell stack 11, a reformer 12, a fuel gas supply unit 13, an oxygen-containing gas supply unit 14, a ventilation fan 17, a first heat exchanger 22, a heat storage tank 23, a radiator 24, a second heat exchanger 25, a condensate tank 26, a control unit 30, an inverter 40, a temperature sensor TS, a fuel pump B1, an air blower B2, a solenoid valve V1, a heat medium pump P1, and a reforming water pump P2.

[0022] The fuel cell module 10 has a stack structure in which a plurality of fuel cells are stacked. Fuel cell cells of known types, such as flat plate type, hollow flat plate type, cylindrical type, and horizontal stripe type, can be used. A fuel cell cell stack is constructed, for example, by arranging hollow flat plate type fuel cell cells, each having a fuel gas flow path (not shown) through which fuel gas flows longitudinally (up and down during operation), in a row in an upright position, with adjacent fuel cell cells electrically connected in series via current collectors.

[0023] The reformer 12 performs steam reforming on the gas to be reformed, such as natural gas or LPG, to produce fuel gas to be supplied to the cell stack 11. The reformer 12 is connected to a gas to be reformed supply unit 13 (described later) and a reformed water pump P2 that supplies reformed water. The gas to be reformed and the reformed water undergo a reforming reaction in the heated reformer 12, producing a fuel gas containing hydrogen.

[0024] The temperature sensor TS is installed inside a box-shaped container and is a sensor that detects the temperature of, for example, the cell stack 11 or the reformer 12. It constantly monitors the temperature of the object being measured and outputs the monitored value to the control unit 30, which will be described later.

[0025] The reformed gas supply unit 13 receives the reformed gas from the outside via the fuel pump B1 and the solenoid valve V1. Examples of gases to be reformed include natural gas, LPG, and kerosene. The oxygen-containing gas supply unit 14 receives oxygen-containing gas from the outside via the air blower B2.

[0026] The ventilation fan 17 is controlled by a control unit 30, which will be described later, and forcibly ventilates the inside of the fuel cell device 1.

[0027] A first heat exchanger 22 has a first heat medium circulation line formed by connecting a heat storage tank 23, a heat medium pump P1, and a radiator 24 via piping. A heat transfer medium (water) is introduced into this first heat transfer medium circulation line, and in the first heat exchanger 22, heat exchange takes place between this heat transfer medium and the exhaust gas, heating the heat transfer medium.

[0028] The heat storage tank 23 stores the heat transfer medium whose temperature has risen due to heat exchange. The heat transfer medium stored in the heat storage tank 23 is sent to the radiator 24 to be cooled, and after heat exchange with the exhaust gas in the first heat exchanger 22, it is returned to the heat storage tank 23. As a result, a high-temperature heat transfer medium is stored in the heat storage tank 23 from above, forming a temperature stratification.

[0029] The radiator 24 cools the heat transfer medium stored in the heat storage tank 23 and is equipped with a cooling fan.

[0030] The second heat exchanger 25 heats tap water supplied from the outside via a supply channel using a high-temperature heat transfer medium stored in the heat storage tank 23. The heated water is then supplied via the supply channel 29 to an external reheating device such as a water heater.

[0031] The condensate tank 26 stores condensate, which is water separated from the water vapor contained in the exhaust gas generated in the fuel cell module 10. The condensed water stored in the condensed water tank 26 is supplied to the reformer 12 by the reformed water pump P2 in the amount of water required by the reformer 12.

[0032] The control unit 30 controls the operation of the entire fuel cell system 1 using a control program stored in a ROM (Read Only Memory) or the like (not shown). In this embodiment, the control unit 30 detects an operational abnormality of the fuel cell device 1, and if an abnormality is detected, it performs an error retry process that temporarily stops operation and then automatically restarts the device, provided that a second threshold lower than a first threshold that causes the device to stop operation has been reached. Furthermore, if the number of times the error retry process is executed exceeds a set number, the control unit 30 will stop operation when it exceeds the first threshold. Furthermore, the control unit 30 turns on the retry flag when error retry processing is executed, and turns off the retry flag if normal operation continues for a predetermined period after the execution of error retry processing. For example, a specified period could be 25 days.

[0033] The inverter 40 converts the DC power generated in the fuel cell module 10 into AC power and supplies it to the commercial power grid.

[0034] <Configuration of the abnormality detection block> As shown in Figure 2, the abnormality detection block is composed of a control unit 30, a temperature sensor TS, a gas flow meter 310, an air flow meter 320, a rotation detection unit 330, an operation stop unit 340, and a restart unit 350.

[0035] The temperature sensor TS detects the temperature inside the box-shaped container. The detection results from the temperature sensor TS are output to the control unit 30 in real time.

[0036] The gas flow meter 310 measures the flow rate of the reformed gas supplied from an external source. The measurement results from the gas flow meter 310 are output to the control unit 30 in real time. Error modes that can be obtained from the measurement results of the gas flow meter 310 include, for example, abnormal gas flow rate and gas flow stoppage.

[0037] The air flow meter 320 measures the flow rate of oxygen-containing gas supplied from an external source. The measurement results from the air flow meter 320 are output to the control unit 30 in real time. Error modes that can be obtained from the measurement results of the air flow meter 320 include, for example, abnormal air flow.

[0038] The rotation detection unit 330 detects the rotation speed of the ventilation fan 17, heat transfer pump P1, air blower B2, radiator fan, etc. The measurement results from the rotation detection unit 330 are output to the control unit 30 in real time. Error modes obtained from the measurement results by the rotation detection unit 330 include, for example, abnormal rotation of the ventilation fan 17, abnormal rotation of the heat transfer fluid pump P1, abnormal rotation of the air blower B2, and abnormal rotation of the radiator fan.

[0039] The operation stop unit 340 stops the operation of the fuel cell device 1 based on the operation stop signal from the control unit 30. The restart unit 350 performs a restart process that temporarily stops the operation of the fuel cell device 1 based on the restart signal from the control unit 30, and then starts it up again.

[0040] <Configuration of control unit 30> As shown in Figure 3, the control unit 30 according to this embodiment is configured to include a detection information acquisition unit 31, a determination unit 32, an operation control unit 33, a threshold storage unit 34, and a flag storage unit 35.

[0041] The detection information acquisition unit 31 acquires detection information from the temperature sensor TS, gas flow meter 310, air flow meter 320, rotation detection unit 330, etc. The detection information acquired by the detection information acquisition unit 31 is output to the determination unit 32, which will be described later.

[0042] The determination unit 32 determines whether the detected value obtained from the detection information of the detection information acquisition unit 31 has reached a second threshold that is lower than the first threshold that causes the operation to stop. Specifically, the determination unit 32 reads the second threshold stored in the threshold storage unit 34 and determines whether the detected value obtained from the detection information of the detection information acquisition unit 31 has reached the second threshold, which is lower than the first threshold that causes the operation to stop. Here, the first threshold is, for example, an abnormal threshold indicating a clear abnormality in the fuel cell device 1, and the second threshold is a control value that does not reach the abnormal threshold. The control value could, for example, be a value between 40% and 50% of the abnormal threshold.

[0043] When the determination unit 32 determines that the detected value has reached a second threshold that is lower than the first threshold that causes the operation to stop, the operation control unit 33 executes an error retry process that temporarily stops the operation and then automatically restarts it. Furthermore, if the number of times the error retry process has been executed is the second time, the operation control unit 33 will stop the operation of the fuel cell device 1 when the number of times exceeds the first threshold. Specifically, when the determination unit 32 determines that the detected value has reached a second threshold lower than the first threshold that causes the operation to stop, the operation control unit 33 checks the flag information in the flag storage unit 35. If the retry flag is on, the operation of the fuel cell device 1 is stopped when the first threshold is exceeded. Furthermore, the operation control unit 33 turns on the retry flag when error retry processing is executed, and turns off the retry flag if normal operation continues for a predetermined period after the execution of error retry processing. Specifically, when error retry processing is executed, the operation control unit 33 writes information to the flag storage unit 35 indicating that the retry flag is on. After the execution of error retry processing, if normal operation continues for a predetermined period, the operation control unit 33 changes the retry flag in the flag storage unit 35 from on to off.

[0044] The threshold memory unit 34 is a ROM (Read Only Memory) or RAM (Random Access Memory), and stores a first threshold value which is an abnormal threshold and a second threshold value which is a control value. The information in the threshold storage unit 34 is read out by the determination unit 32.

[0045] The flag storage unit 35 is a RAM (Random Access Memory) or the like, and stores retry flag information. The retry flag information in the flag storage unit 35 is read or written by the operation control unit 33.

[0046] <Processing by control unit 30> The processing of the control unit 30 according to this embodiment will be explained using Figure 4.

[0047] First, the detection information acquisition unit 31 acquires detection information from the temperature sensor TS, gas flow meter 310, air flow meter 320, and rotation detection unit 330 (step S110). The detection information obtained by the detection information acquisition unit 31 is sent to the determination unit 32.

[0048] The determination unit 32 determines whether the detected value obtained from the detection information of the detection information acquisition unit 31 has reached a second threshold that is lower than the first threshold that causes the operation to stop (step S120). If the determination unit 32 determines that the detected value obtained from the detection information of the detection information acquisition unit 31 has reached a second threshold that is lower than the first threshold that causes the operation to stop (YES in step S120), it notifies the operation control unit 33 of this fact.

[0049] On the other hand, if the determination unit 32 determines that the detected value obtained from the detection information acquisition unit 31 has not reached the second threshold that causes the operation to stop (NO in step S120), the process returns to step S110.

[0050] The operation control unit 33 reads the retry flag information in the flag storage unit 35 and checks whether the retry flag is off or not (step S130). The operation control unit 33 reads the retry flag information in the flag storage unit 35, and if it confirms that the retry flag is off (YES in step S130), it executes a process to stop the operation of the fuel cell device 1 (step S140).

[0051] Next, the operation control unit 33 performs a process to stop operation of the fuel cell device 1, then performs a process to switch to power generation standby mode (step S150), and after a certain period of time in power generation standby mode, performs a restart process, rewrites the retry flag information in the flag storage unit 35 from off to on (step S160), and terminates the process.

[0052] On the other hand, if the operation control unit 33 reads the retry flag information in the flag storage unit 35 and confirms that the retry flag is on ("NO" in step S130), the determination unit 32 determines whether the detected value obtained from the detection information acquisition unit 31 has reached the first threshold. If the determination unit 32 determines that the detected value obtained from the detection information acquisition unit 31 has reached the first threshold ("YES" in step S170), the operation control unit 33 executes error stop processing (step S200) and terminates the process. If the determination unit 32 determines that the detected value obtained from the detection information acquisition unit 31 has not reached the first threshold ("NO" in step S170), the operation control unit 33 returns the process to step S110.

[0053] <Error stop processing in control unit 30> Using Figure 5, the error termination process in the control unit 30 according to this embodiment will be explained.

[0054] When the operation control unit 33 executes the shutdown of the fuel cell device 1, it notifies the user of the shutdown of the fuel cell device 1 by voice, text, illustration, etc. (step S210).

[0055] The operation control unit 33 executes a process to stop the operation of the fuel cell device 1 (step S220), and then terminates the process.

[0056] <Retry clearing process in control unit 30> The retry clearing process in the control unit 30 according to this embodiment will be explained using Figure 6.

[0057] The operation control unit 33 determines whether the retry flag information has changed from off to on (step S310). If the operation control unit 33 determines that the retry flag information has not changed from off to on ("NO" in step S310), it reverses the process.

[0058] If the operation control unit 33 determines that the retry flag information has changed from off to on (YES in step S310), it starts the timer count (step S320).

[0059] Next, the operation control unit 33 determines whether the timer count has exceeded a predetermined number of days (step S330). Then, if the operation control unit 33 determines that the timer count has not exceeded a predetermined number of days (YES in step S330), it continues the timer count (step S340) and returns the process to step S330.

[0060] On the other hand, when the operation control unit 33 determines that the timer count has exceeded a predetermined number of days ("NO" in step S330), it clears the timer count, rewrites the retry flag information in the flag storage unit 35 from on to off (step S350), and terminates the process.

[0061] <Effects and Actions> As described above, the determination unit 32 of the control unit 30 in the fuel cell device 1 according to this embodiment determines whether the detected value obtained from the detection information of the detection information acquisition unit 31 has reached a second threshold that is lower than the first threshold that causes the operation to stop. Then, when the determination unit 32 determines that the detected value has reached a second threshold that is lower than the first threshold that causes the operation to stop, the operation control unit 33 executes an error retry process that temporarily stops the operation of the fuel cell device 1 and then automatically restarts it. In other words, if the detection value obtained from the detection information of the detection information acquisition unit 31 reaches a second threshold that does not reach the first threshold that puts the operation into a stopped state, the operation control unit 33 executes an error retry process that temporarily stops the operation of the fuel cell device 1 and then automatically restarts it. Therefore, when an anomaly is detected, reducing the number of operations that exceed the anomaly threshold can prevent a loss of reliability.

[0062] Furthermore, in the fuel cell device 1 according to this embodiment, the operation control unit 33 of the control unit 30 will stop operation when the number of executions of the error retry process exceeds a set number, and when it exceeds a first threshold. In other words, if the number of times the error retry process is executed exceeds a set number, the operation control unit 33 will stop the operation of the fuel cell device 1 when the first threshold is exceeded, without executing the error retry process again, thereby avoiding excessive damage. Therefore, when an anomaly is detected, reducing the number of operations that exceed the anomaly threshold can prevent a loss of reliability.

[0063] Furthermore, in the fuel cell device 1 according to this embodiment, the operation control unit 33 of the control unit 30 turns on the retry flag when error retry processing is executed, and turns off the retry flag if normal operation continues for a predetermined period after the execution of error retry processing. In other words, if normal operation continues for a predetermined period after the execution of the error retry process, the operation control unit 33 considers the previous error to be a sudden or accidental error and turns off the retry flag, thereby allowing another error retry process. Therefore, it is possible to prevent the shutdown of the fuel cell device 1 in a manner that does not reflect the actual situation, while reducing the number of operations that exceed the abnormal threshold when an abnormality is detected, thereby preventing a loss of reliability.

[0064] <Example 1> In this embodiment, the control value is exemplified as being between 40% and 50% of the abnormal threshold, but the value of the control value may be determined based on the results of many verification experiments and the operating status of the fuel cell device 1 to date. By doing so, it is possible to achieve efficient operation while maintaining the reliability of the fuel cell device 1.

[0065] <Modification 2> In this embodiment, it has been shown as an example that the number of times the error retry process is executed is predetermined, but it is preferable that the number of times the error retry process is predetermined be 1. In other words, allowing the error retry process to run multiple times could potentially cause significant damage to the fuel cell device 1. By doing so, it is possible to achieve efficient operation while maintaining the reliability of the fuel cell device 1.

[0066] <Variation 3> In this embodiment, the predetermined period is exemplified as 25 days, but the predetermined period may be set individually depending on past failure information and the operating status of the fuel cell device 1 to date. By doing so, it is possible to achieve efficient operation while maintaining the reliability of the fuel cell device 1.

[0067] <Modification 4> Multiple fuel cell devices 1 may be used to learn about error modes and the likelihood of abnormal shutdown, and the relationship between the abnormal threshold and the control value may be determined from the degree to which each error mode leads to abnormal shutdown obtained from the learning results. By doing so, it is possible to achieve efficient operation while maintaining the reliability of the fuel cell device 1.

[0068] Furthermore, the fuel cell device 1 of the present invention can be realized by recording the processing of the control unit 30, etc., on a recording medium that can be read by a computer system, and then having the control unit 30, etc., read and execute the program recorded on this recording medium. The term "computer system" here includes hardware such as the operating system and peripheral devices.

[0069] Furthermore, "computer system" shall also include the homepage provisioning environment (or display environment) if the WWW (World Wide Web) system is being used. Furthermore, the above program may be transmitted from a computer system that stores the program in a memory device or the like to another computer system via a transmission medium or by transmission waves within the transmission medium. Here, the "transmission medium" used to transmit a program refers to a medium that has the function of transmitting information, such as a network (communication network) like the Internet or a communication line (communication line) like a telephone line.

[0070] Furthermore, the above program may be intended to implement some of the functions described above. It may also be a so-called differential file (differential program) that can implement the aforementioned functions in combination with programs already recorded in the computer system.

[0071] While embodiments of this invention have been described in detail above with reference to the drawings, the specific configuration is not limited to these embodiments and includes designs and the like that do not depart from the spirit of this invention. [Explanation of symbols]

[0072] 1;Fuel cell device 10; Fuel cell module 11; Cell stack 12; Reformer 13; Reformed Gas Supply Section 14; Oxygen-containing gas supply unit 17; Ventilation fan 22; First heat exchanger 23; Heat storage tank 24; Radiator 25; Second heat exchanger 26; Condensate tank 29; Supply channel 30; Control unit 31; Detection information acquisition unit 32; Judgment section 33; Operation Control Unit 34; Threshold memory unit 35; Flag storage unit 40; Inverter 310; Gas flow meter 320; Air flow meter 330; Rotation detection unit 340; Operation stop section 350;Restart part TS; Temperature sensor B1; Fuel pump B2; Air blower V1; Solenoid valve P1; Heat transfer pump P2; Water treatment pump

Claims

1. A fuel cell system including a fuel cell, auxiliary equipment, and a control unit, The control unit is A detection information acquisition unit that acquires detection information from a detection device, A determination unit determines whether the detected value obtained from the detection information of the detection information acquisition unit has reached a second threshold that is lower than a first threshold that causes the operation to stop. When the determination unit determines that the detected value has reached a second threshold lower than a first threshold that causes the operation to stop, the operation control unit executes an error retry process that temporarily stops the operation and then automatically restarts it. A fuel cell device characterized by having the following features.

2. The number of times the error retry process is executed is set, The fuel cell apparatus according to claim 1, characterized in that the operation control unit puts the operation into a stopped state when the number of executions of the error retry process exceeds a set number, and the number of executions exceeds the first threshold.

3. The fuel cell apparatus according to claim 1 or 2, characterized in that the operation control unit turns on the retry flag when the error retry process is executed, and turns off the retry flag if normal operation continues for a predetermined period after the execution of the error retry process.

4. An error retry control method for a fuel cell device, which includes a fuel cell, auxiliary equipment, and a control unit comprising a detection information acquisition unit, a determination unit, and an operation control unit, The aforementioned detection information acquisition unit performs a first step of acquiring detection information from a detection device, The determination unit performs a second step in which it determines whether the detected value obtained in the first step has reached a second threshold that is lower than a first threshold that causes the operation to stop. A third step in which, when the operation control unit determines that the detected value has reached a second threshold lower than a first threshold that causes the operation to stop, the operation is temporarily stopped and then automatically restarted; An error retry control method characterized by comprising the following features.

5. The number of times the second step described above is executed is set. The error retry control method according to claim 4, characterized in that the operation control unit stops operation when the number of executions of the second step exceeds a set number, or when it exceeds the first threshold.

6. The error retry control method according to claim 4 or 5, characterized in that the retry flag is turned on when the second step is performed, and the retry flag is turned off if normal operation continues for a predetermined period after the execution of the second step.

7. A program for causing a computer to execute an error retry control method in a fuel cell device, which includes a fuel cell, auxiliary equipment, and a control unit equipped with a detection information acquisition unit, a determination unit, and an operation control unit, The aforementioned detection information acquisition unit performs a first step of acquiring detection information from a detection device, The determination unit performs a second step in which it determines whether the detected value obtained in the first step has reached a second threshold that is lower than a first threshold that causes the operation to stop. A third step in which, when the operation control unit determines that the detected value has reached a second threshold lower than a first threshold that causes the operation to stop, the operation is temporarily stopped and then automatically restarted; A program that causes a computer to execute something.

8. The number of times the second step described above is executed is set. The program according to claim 7, characterized in that the operation control unit stops operation when the number of executions of the second step exceeds a set number, or when it exceeds the first threshold.

9. The program according to claim 7 or 8, characterized in that the retry flag is turned on when the second step is executed, and the retry flag is turned off if normal operation continues for a predetermined period after the execution of the second step.

Images