Hydrogen tank system and method for operating a hydrogen tank system

Abstract

The present invention relates to a hydrogen tank system (100) for storing hydrogen, the hydrogen tank system (100) comprising: - a plurality of tanks (101), - a computing unit (103), - a first memory (105), - a second memory (107), wherein the computing unit (103) is designed to store a plurality of values for predefined data, which vary depending on a state of the hydrogen tank system (100), in the first memory (105) and redundantly in the second memory (107), and wherein the computing unit (103) is designed to transfer values stored in the second memory (107) into the first memory (105) when a plurality of predefined standard values for the predefined data are stored in the first memory (105) or when the computing unit (103) receives a synchronisation command via an input interface.

Description

[0001] Description

[0002] title

[0003] Hydrogen tank system and method for operating a hydrogen tank system

[0004] The presented invention relates to a hydrogen tank system for storing hydrogen and a method for operating a hydrogen tank system.

[0005] State of the art

[0006] It is known to store safety-relevant information of a hydrogen tank system, such as an indication of an overpressure situation requiring replacement of a tank, in a persistent, i.e., non-volatile memory.

[0007] This persistent memory is usually integrated into a control unit of the hydrogen tank system, so that if the control unit is replaced with a brand-new control unit, for example, the safety-relevant information is lost and an error reaction of the hydrogen tank system, which, for example, requires a replacement of the pressure before continued operation, is bypassed.

[0008] Disclosure of the invention

[0009] Within the scope of the invention presented, a hydrogen tank system and a method for operating the hydrogen tank system are presented. Further features and details of the invention emerge from the respective subclaims, the description, and the drawings. Features and details described in connection with the method according to the invention naturally also apply in connection with the hydrogen tank system according to the invention, and vice versa, so that with regard to the disclosure of the individual aspects of the invention, reference is always made to each other.

[0010] The invention presented serves in particular to ensure safe operation of a hydrogen tank system.

[0011] Thus, according to a first aspect of the invention presented, a hydrogen tank system for storing hydrogen is presented.

[0012] The proposed hydrogen tank system comprises a number of tanks, a computing unit, a first memory and a second memory, wherein the computing unit is configured to store a number of values ​​for predetermined data, which change depending on a state of the hydrogen tank system, in the first memory and redundantly in the second memory, and wherein the computing unit is further configured to transfer values ​​stored in the second memory to the first memory when a number of predetermined standard values ​​for the predetermined data are stored in the first memory or the computing unit receives a synchronization command via an input interface.

[0013] In the context of the invention presented, predefined data refers to parameters such as variables or operating parameters of a hydrogen tank system. Predefined data is particularly safety-relevant, such as a pressure profile in a tank of the hydrogen tank system. Accordingly, the respective values ​​of the predefined data can be used to infer the state of the hydrogen tank system, or the values ​​of the predefined data change depending on the state of the hydrogen tank system.

[0014] The predefined data can, for example, be specified by a manufacturer of the hydrogen tank system as a selection of parameters determined during operation of the hydrogen tank system. The presented invention is based on redundantly storing values ​​of predefined data in two different memories, so that if the values ​​in the first memory are deleted, for example, they can be reconstructed using a redundant copy in the second memory.

[0015] It is intended that such a reconstruction of values ​​takes place when a number of predefined default values ​​for the predefined data are stored in the first memory. Since it can be assumed that the first memory or a corresponding computing unit is brand new if a number of predefined default values ​​are stored in the first memory, the first memory can be automatically adapted to the current state of the hydrogen tank system by reconstructing values ​​from the second memory.

[0016] Accordingly, if an error message issued in the past due to a critical value is circumvented, the error message will be issued again even after replacing the processing unit that issued the error message with a brand-new one. In other words, the error message cannot be circumvented by replacing the processing unit.

[0017] As an alternative to reconstructing values ​​in the first memory based on default values ​​in the first memory, the reconstruction of values ​​in the first memory can also be carried out by entering a synchronization command, which is provided, for example, by a technician via a workshop tester.

[0018] Accordingly, the technician can specifically initiate a transfer of values ​​from the second memory to the first memory. In this case, it can be provided that, if the values ​​from the second memory differ from the values ​​in the first memory, a warning message or a note is issued on an output unit, alerting the technician to a potentially replaced computing unit. Alternatively, if the values ​​from the second memory match the values ​​in the first memory, a validation message can be issued on an output unit, allowing the technician or a user to obtain clarity about a replacement of the computing unit or about the status of the hydrogen tank system.

[0019] It can be provided that in the event that values ​​stored in the second memory are not transferred to the first memory, if a number of predetermined standard values ​​for the predetermined data are stored in the first memory or the computing unit receives a synchronization command via an input interface, a predetermined error reaction is activated.

[0020] By activating a predefined error reaction, such as an activation lock that prevents activation of the hydrogen tank system, misuse or an environment of error messages can be counteracted by replacing a computing unit, or a replaced computing unit can only be activated when the values ​​in the first memory correspond to the values ​​in the second memory.

[0021] It can be provided that the first memory is an integral part of the computing unit.

[0022] As an integral part of the computing unit, the first memory is also replaced when the computing unit is replaced, so that when the computing unit is replaced, values ​​stored in the first memory automatically differ from values ​​stored in the second memory.

[0023] It can further be provided that the computing unit is configured to transmit the change in the values ​​to the second memory when the values ​​for the predetermined data in the first memory change.

[0024] By transferring the values ​​to the second memory only when the values ​​in the first memory change, an energy-efficient yet reliable update of the values ​​in the second memory is achieved. It can also be provided that the first memory is a persistent memory.

[0025] A persistent memory, such as an EEPROM, is particularly characterized by the fact that it retains the information stored therein and does not erase it if the power supply to the memory is interrupted. Accordingly, a first memory designed as persistent memory is particularly secure against manipulation, for example, by an interruption of the power supply to the memory or a corresponding processing unit.

[0026] It may further be provided that the second storage is a persistent storage and / or a cloud storage.

[0027] By using a second storage device configured as cloud storage, it can be configured as a secure server in a secure location, i.e., protected from unauthorized access, so that the values ​​stored in the second storage device are particularly reliable and can be verified, for example, by a manufacturer.

[0028] It can further be provided that the computing unit is configured to communicate with the second memory via a wireless communication interface.

[0029] For communication with a cloud storage device in particular, the hydrogen tank system can comprise a wireless communication interface, such as a mobile radio interface or a WLAN interface, or can be configured to communicate by means of a wireless communication interface of a higher-level system, such as a vehicle comprising the hydrogen tank system.

[0030] It may further be provided that the second storage device is an integral part of the hydrogen tank system.

[0031] A storage device designed as an integral component of the hydrogen tank system can be arranged separately or structurally and spatially separated from the first storage device, so that when the first storage device or a component comprising the first storage device is replaced, the second storage device remains in the hydrogen tank system.

[0032] According to a second aspect, the presented invention relates to a method for operating a hydrogen tank system.

[0033] The presented method comprises storing a number of values ​​for predetermined data, which change depending on a state of the hydrogen tank system, in a first memory and redundantly in a second memory and transferring values ​​stored in the second memory to the first memory when a number of predetermined standard values ​​for the predetermined data are stored in the first memory or a synchronization command is provided via an input interface.

[0034] The presented method is used in particular for the operation of the presented hydrogen tank system.

[0035] It can be provided that in the event that the values ​​from the second memory deviate from the values ​​in the first memory, a warning message is output on an output unit.

[0036] A warning message informs a user about a detected deviation between values ​​from the first storage and values ​​from the second storage, so that the user can carefully check the hydrogen tank system and, if necessary, prevent operation with a tank that is already overpressurized.

[0037] Advantages that are described in detail for the hydrogen tank system for storing hydrogen according to the first aspect of the invention apply equally to the method for operating a hydrogen tank system according to the second aspect of the invention. Further advantages, features, and details of the invention emerge from the following description, in which exemplary embodiments of the invention are described in detail with reference to the drawings. The features mentioned in the claims and in the description can each be essential to the invention individually or in any combination.

[0038] drawing

[0039] They show:

[0040] Figure 1 is a schematic representation of a possible design of the proposed hydrogen tank system,

[0041] Figure 2 shows a possible design of the presented procedure.

[0042] Description of the embodiments

[0043] Figure 1 shows a hydrogen tank system 100 for storing hydrogen.

[0044] The hydrogen tank system 100 comprises a tank 101, a computing unit 103, a first memory 105 and a second memory 107.

[0045] The computing unit 103 is configured to store a number of values ​​for predetermined data, which change depending on a state of the hydrogen tank system 100, in the first memory 105 and redundantly in the second memory 107. For this purpose, for example, a change in the values ​​in the first memory 105 can be copied to the second memory 107.

[0046] The values ​​can be, for example, sensor values ​​determined by a sensor 109, in particular values ​​of a pressure in the tank 101 and / or values ​​of any other operating variable of the hydrogen tank system 100. Furthermore, the computing unit is configured to transfer values ​​stored in the second memory 107 to the first memory 105 if a number of predefined standard values ​​for the predefined data are stored in the first memory 105 or the computing unit 103 receives a synchronization command via an input interface, such as a workshop tester.

[0047] Figure 2 shows a method 200 for operating a hydrogen tank system 100.

[0048] The presented method 200 comprises a storage step 201 in which a number of values ​​for predetermined data, which change depending on a state of the hydrogen tank system, are stored in a first memory and redundantly in a second memory.

[0049] Furthermore, the method 200 comprises a transfer step 203 in which values ​​stored in the second memory are transferred to the first memory if a number of predetermined standard values ​​for the predetermined data are stored in the first memory or a synchronization command is provided via an input interface.

Claims

Claims 1. A hydrogen tank system (100) for storing hydrogen, the hydrogen tank system (100) comprising: a number of tanks (101), a computing unit (103), a first memory (105), a second memory (107), the computing unit (103) being configured to store a number of values ​​for predetermined data, which change depending on a state of the hydrogen tank system (100), in the first memory (105) and redundantly in the second memory (107), and the computing unit (103) being configured to transfer values ​​stored in the second memory (107) to the first memory (105) if a number of predetermined standard values ​​for the predetermined data are stored in the first memory (105) or the computing unit (103) receives a synchronization command via an input interface.

2. Hydrogen tank system (100) according to claim 1, characterized in that in the event that values ​​stored in the second memory (107) are not transferred to the first memory (105), if a number of predetermined standard values ​​for the predetermined data are stored in the first memory (105) or the computing unit (103) receives a synchronization command via an input interface, a predetermined error reaction is activated.

3. Hydrogen tank system (100) according to claim 1 or 2, characterized in that the first memory (105) is an integral part of the computing unit (103).

4. Hydrogen tank system (100) according to one of the preceding claims, characterized in that the computing unit (103) is configured to transmit the change in the values ​​to the second memory (107) when the values ​​for the predetermined data in the first memory (105) change.

5. Hydrogen tank system (100) according to one of the preceding claims, characterized in that the first memory (105) is a persistent memory.

6. Hydrogen tank system (100) according to one of the preceding claims, characterized in that the second memory (107) is a persistent memory and / or a cloud memory.

7. Hydrogen tank system (100) according to one of the preceding claims, characterized in that the computing unit (103) is configured to communicate with the second memory (107) via a wireless communication interface.

8. Hydrogen tank system (100) according to one of the preceding claims, characterized in that the second reservoir (107) is an integral part of the hydrogen tank system (100).

9. A method (200) for operating a hydrogen tank system (100), the method (200) comprising: Storing (201) a number of values ​​for predetermined data, which change depending on a state of the hydrogen tank system (100), in a first memory (105) and redundantly in a second memory (107), Transferring (203) values ​​stored in the second memory (107) to the first memory (105) if in the first memory (105) a number of predefined standard values ​​are stored for the predefined data, or a synchronization command is provided via an input interface.

10. The method (200) according to claim 9, characterized in that, if the values ​​from the second memory (107) deviate from the values ​​in the first memory (105), a warning message is output on an output unit.

Images