Method for operating a power device, computer program and control device for carrying out such a method, and power assembly comprising such a control device

Abstract

The invention relates to a method for operating a power device (3), wherein a) system values (33) of the power device (3) are transferred to an estimation module (27), said system values (33) comprising measured values (41) measured at least at the power device (3), b) at least one diagnostic value (49) is calculated by the estimation module (27) on the basis of the system values (33), c) a function of the power device (3) is evaluated at least on the basis of the at least one diagnostic value (49), and d) at least one fault-handling step is carried out if a malfunction of the power device (3) is detected during the evaluation of the function.

Description

[0001] DESCRIPTION

[0002] Method for operating a power device, computer program and control device for carrying out such a method and power arrangement with such a control device

[0003] The invention relates to a method for operating a power device, a computer program for carrying out such a method, a control device for carrying out such a method and a power arrangement with such a control device.

[0004] Power devices with numerous components, such as electrolysis systems for hydrogen production, are difficult to control precisely because of the multitude of individually complex components, and especially because of their intricate interactions. While model predictive control can generally achieve good results, a problem arises when significant deviations occur between the underlying control model and the actual behavior of the controlled power device. Furthermore, the control problem may lack a physical solution, at least temporarily, preventing numerical optimization from converging.It has proven difficult to reliably identify such problematic operational situations, which in some cases means that the implementation of necessary actions to rectify such situations or to prevent consequential damage cannot be reliably guaranteed.

[0005] The invention is therefore based on the objective of providing a method for operating a power device, a computer program for carrying out such a method, a control device for carrying out such a method, and a power arrangement with such a control device, wherein the aforementioned disadvantages are reduced, preferably avoided. This objective is achieved by providing the present technical teaching, in particular the teaching of the independent claims and the preferred embodiments disclosed in the dependent claims and the description.

[0006] The problem is solved in particular by creating a method for operating a power device, wherein a) system values ​​of the power device are passed to an estimating module, wherein the system values ​​include at least measured values ​​measured at the power device, wherein b) at least one diagnostic value is calculated by the estimating module on the basis of the system values, wherein c) a function - that is, in particular, a functionality - of the power device is evaluated at least on the basis of the at least one diagnostic value, wherein d) at least one fault handling step is carried out if a malfunction of the power device is detected during the evaluation of the function.

[0007] The diagnostic value calculated by the estimation module offers the advantage of reliably and simply identifying problematic operating situations. This allows for the precise and timely implementation of necessary actions to rectify such situations or prevent consequential damage, including at least one fault handling step. A further advantage is that the estimation module does not need to be specifically configured for a particular application. Instead, it can be used modularly for a wide variety of applications, especially for a wide range of power devices. Consequently, the method itself can be used for numerous applications, particularly for a wide range of power devices, without requiring complex adjustments in each individual case.

[0008] In one embodiment, a plurality of diagnostic values ​​are calculated, in particular a diagnostic vector comprising a plurality of diagnostic values ​​as vector elements. Preferably, a cause for the detected malfunction is inferred from the at least one diagnostic value, or the detected malfunction is identified or classified based on the at least one diagnostic value.

[0009] In particular, the estimation module is based on the model underlying the model predictive control. In the context of the present technical teaching, this preferably means that the estimation module uses this model for calculating the diagnostic value and, in particular, a state estimation of a state of the power device as explained below, or that the estimation module is created – especially mathematically – on the basis of or derived from this model.

[0010] In the context of this technical teaching, a power device is understood to be, in particular, a device configured to provide power, especially electrical and / or mechanical power, or to convert or consume power. The power device can thus be designed, in particular, as a power provision device or as a power conversion device. Specifically, a power provision device is understood to be a device that provides power, especially electrical and / or mechanical power, using electrical, mechanical, chemical, or electrochemical energy—or another form of energy.A power conversion device is understood to be, in particular, a device that utilizes or consumes power, especially electrical or mechanical power, in particular to convert or store energy, for example, to provide chemical energy in the form of certain substances such as hydrogen or methanol, or electrochemical energy, using electrical energy. Specifically, the power device may be an internal combustion engine, an internal combustion engine-generator combination device (i.e., a genset), a fuel cell, an energy storage device (in particular a battery), or an electrolysis device (in particular an electrolyzer). However, the power device may also be a larger, complex system, for example, consisting of several of the aforementioned devices, or, in particular, a data center or a microgrid.In particular, the power device can also be a controllable or adjustable load on an electrical network. In the context of this technical teaching, a module is generally understood to be a conceptually or physically definable or delimited functional unit that is configured to perform at least one specific function. This can be a separate computing device, a part of a computing device, a hardware structure, or a software structure, each configured and designed to fulfill the at least one specific function.

[0011] According to a further development of the invention, in step b) at least one diagnostic value is calculated as a residual between at least one test measurement value and an associated estimated test measurement value calculated by the estimation module. Advantageously, a mismatch between the model underlying the estimation module and the actual, real-world operation of the power device can be detected using this residual as the diagnostic value. This is based on the idea that, at least in the case of significant deviations of the power device's operation from its intended operation, for example, in the case of a sustained and / or drastic exceedance of certain limit values, a clearly identifiable difference can be observed between the measurements predicted by the model and the measurements actually occurring.Therefore, an identified mismatch of the model can be interpreted as indicating irregular operation of the power device.

[0012] The at least one test measurement value is, in particular, a value actually measured on the power device, and the associated estimated test measurement value is a corresponding value, that is, for the same physical quantity, estimated by the estimation module.

[0013] In one embodiment, the at least one residual is calculated by calculating a difference between the estimated test measurement value and the associated test measurement value.

[0014] In one embodiment, the estimation module calculates a plurality of residuals between a plurality of test measurements, in particular all measurements, and the respective estimated test measurements calculated by the estimation module as diagnostic values; preferably, a residual vector is calculated for the plurality of test measurements as a diagnostic vector, in particular for all measurements as test measurements. In this way, a particularly complete and thus high-quality analysis and ultimately evaluation of the operating behavior of the power device can be achieved.

[0015] Preferably, the diagnostic vector is used to infer the cause of the detected malfunction, or to identify or classify the detected malfunction. In particular, based on a multitude of deviations of the estimated test measurements from the corresponding measured values, it is advantageous to be able to pinpoint a specific malfunction or its cause with high accuracy. In one embodiment, it is possible to use an artificial neural network or artificial intelligence to infer the cause of the detected malfunction, or to identify or classify the detected malfunction, based on the diagnostic vector.The neural network or artificial intelligence can be advantageously trained with training data that includes, for example, historically determined assignments of diagnostic vectors to specific operating states of the power device, obtained on a test bench or in the application field.

[0016] According to a further development of the invention, it is provided that the at least one residual is calculated in which a state of the power device is estimated by the estimation module based on the system values, wherein the at least one estimated test measurement value is calculated by the estimation module based on the estimated state, wherein the at least one estimated test measurement value is compared with the associated test measurement value, wherein in particular the difference between the at least one estimated test measurement value and the associated test measurement value is formed.

[0017] The estimation module is thus specifically configured to estimate the state of the power device, and is further configured to calculate estimated measured values ​​from the estimated state – as it were, in reverse. In particular, the estimation module is further configured to calculate an estimated state from the system values, which include measured values, and then to calculate estimated measured values ​​from the calculated estimated state – in reverse – which can finally be compared with the measured values ​​to calculate the at least one residual. According to a further development of the invention, it is provided that the function of the power device in step c) is additionally evaluated based on at least one further diagnostic parameter, in particular at least one diagnostic function, in addition to the at least one diagnostic parameter.This allows the operating condition of the power device to be assessed more reliably and a malfunction to be detected even more safely.

[0018] According to a further development of the invention, at least one additional diagnostic parameter is calculated by a model predictive control module. It is particularly advantageous that the model predictive control module enables reliable, model-based diagnostics of the power device, and preferably – as described in more detail below – simultaneously provides very high-quality control with high control accuracy while requiring minimal computing power.

[0019] Alternatively, it is possible that at least one additional diagnostic parameter is calculated by the estimation module.

[0020] In one embodiment, the model predictive control module also calculates at least one control variable specification for at least one control variable of the power device.

[0021] In one embodiment, the power device continues to be operated based on at least one control variable specification.

[0022] In one particular embodiment, the state estimated by the estimating module is passed to the model predictive control module, whereby the model predictive control module calculates – based on the estimated state – at least one control input for at least one actuator of the power device, and the power device is operated based on this at least one control input. Advantageously, the power device is controlled in this way with very high control performance by the model predictive control module.

[0023] A control variable is understood to be, in particular, a specification for controlling at least one actuator to achieve a specific control variable. The control variable can, in particular, be a direct control variable for an actuator, that is, a variable that is used directly to control the actuator. Alternatively, the control variable can be a variable on which a further control variable, in particular a direct control variable for an actuator, is determined, and in particular calculated. In one embodiment, the control variable is a valve position for a control valve on a water tank serving as a gas separator.

[0024] The at least one actuator can therefore be, in particular, an actuator or control element of the power device. Specifically, the actuator can be a valve or a flap. However, the actuator can also be an actuator outside the power device, for example, an actuator intended to influence an externally supplied cooling circuit, such as a valve, a pump, or the like, or an actuator of an electrical device with which the power device is operatively connected.

[0025] According to a further development of the invention, the at least one additional diagnostic parameter – as a diagnostic function – is selected from a group consisting of a cost function, an injury function, and a combination of at least two of the aforementioned functions. Advantageously, a malfunction of the power device can be detected with particular reliability using at least one of these additional diagnostic functions.

[0026] In the context of this technical teaching, a cost function is understood to be, in particular, a function that represents the operating costs of the power device – in any units – especially such that the operating costs are minimized when the cost function is minimal. A control objective in the regulation of the power device can therefore be to minimize the cost function.

[0027] In one embodiment, the function of the power device is evaluated based on the cost function by examining its behavior over time: If, for example, the cost function is found to decrease over time, normal operating behavior of the power device is recognized; if, on the other hand, the cost function is found to increase more than a predetermined limit within a predetermined, particularly short, time period, a malfunction is recognized. In the context of this technical teaching, a violation function is understood to be, in particular, a function that represents compliance with or violation of at least one limit by the power device. A control objective for the power device can be to keep the violation function below a predetermined violation limit.In a simple form, the violation function can, for example, be the difference between a measured actual value and a predetermined limit value.

[0028] In one embodiment, the function of the power device is evaluated based on the violation function by examining its temporal behavior: For example, if it is found that the violation function remains permanently below the predetermined violation limit or only exceeds the predetermined violation limit briefly, i.e., in particular not for longer than a predetermined violation time interval, normal operating behavior of the power device is recognized; if, on the other hand, it is found that the violation function exceeds the predetermined violation limit for a longer period, in particular for longer than the predetermined violation time interval, a malfunction is recognized.

[0029] According to a further development of the invention, the system values ​​additionally include control variables and environmental measurements of the power device. Advantageously, particularly accurate results can be obtained in this way.

[0030] A control variable is understood to be, in particular, a quantity that directly or indirectly determines the position or functional state of an actuator of the power device.

[0031] An environmental measurement is understood to be, in particular, a value measured in the vicinity of the power device, for example, air pressure, air temperature, and the like.

[0032] According to a further development of the invention, a Luenberger observer or a Kalman filter, in particular a stationary Kalman filter or an extended Kalman filter, is used as the estimation module. A Luenberger observer or, in particular, a Kalman filter are especially suitable for a diagnosis and, in particular, condition estimation that is both very accurate and computationally inefficient. The advantages described here are realized in a particularly significant way in conjunction with an extended Kalman filter as the estimation module.

[0033] According to a further development of the invention, the at least one fault handling step is selected from a group consisting of reducing the power output of the power device, operating the power device in idle mode, and switching off the power device. Advantageously, this allows for a suitable, and in particular graduated, response to a detected malfunction of the power device.

[0034] In one embodiment, the fault handling step is selected depending on a predetermined escalation level of the detected malfunction (quantitatively) and / or depending on the type of detected malfunction (qualitatively). In particular, preferably, in the case of a less serious or less pronounced malfunction, only the power output of the power device is reduced; in the case of a more serious or more pronounced malfunction, the power device is operated in idle mode; and in the case of a severe or pronounced malfunction, especially one posing a high risk to the power device itself, to operators of the power device, or to facilities or persons located in the vicinity of the power device, the power device is shut down.

[0035] According to a further development of the invention, an electrolysis device, in particular an electrolyzer, is used as the power source. The advantages already mentioned are particularly evident in this context, since electrolysis devices typically comprise a large number of components that interact in a complex manner and are difficult to control, especially when they are to be operated on a power grid with fluctuating power and / or with varying control objectives. For example, a control objective in the case of fluctuating power in the power grid, due to a high proportion of renewable energies, might be to provide the best possible support for the grid with flexible, variable load reduction, while the control objective in the case of a permanently high grid load might be to draw as much power as possible from the grid.Alternatively or additionally, a regulatory objective – particularly in both scenarios – can be to produce as much hydrogen as possible per unit of power consumed, i.e., to achieve the highest possible efficiency.

[0036] Alternatively, the power device can be an internal combustion engine, an internal combustion engine-generator combination device (i.e., a genset), a fuel cell, or an energy storage device, particularly a battery. The power device can also be a larger, complex system, for example, consisting of several of the aforementioned devices, or, in particular, a data center or a microgrid. Specifically, the power device can also be a controllable or adjustable load on an electrical network.

[0037] The problem is also solved by creating a computer program that includes machine-readable instructions by virtue of which a method according to the invention or a method according to one or more of the embodiments described above is carried out when the computer program runs on a computing device, in particular a control device according to the invention for a power device or a control device according to one or more of the embodiments described below. The advantages that have already been explained in connection with the method arise particularly in connection with the computer program.

[0038] The invention also includes a data carrier on which a computer program according to the invention or a computer program according to one or more of the previously described embodiments, in particular in machine-readable form, is stored. In one embodiment, the data carrier is designed as a storage device – in particular electronic – especially as a hard drive, SSD, flash memory, magnetic tape, floppy disk or optical disc.

[0039] The problem is also solved by creating a control device for a power device, wherein the control device is configured to carry out a method according to the invention or a method according to one or more of the embodiments described above. In connection with the control device, the advantages are particularly those that have already been explained in connection with the method or the computer program.

[0040] In one embodiment, the control device is a control device for an electrolysis device.

[0041] In one embodiment, the control device includes the estimation module.

[0042] In one embodiment, the control device additionally features the model predictive control module.

[0043] The control device is specifically designed to operate the power device. In one embodiment, the control device is designed to operate an internal combustion engine, an internal combustion engine-generator combination device, a fuel cell, an energy storage device, in particular a battery, an electrolysis device, in particular an electrolyzer, a data center or microgrid, or another controllable or adjustable load on an electrical network.

[0044] According to a further development of the invention, the control device includes a diagnostic module configured to evaluate the function of the power device in step c) based on at least one diagnostic value. Preferably, the diagnostic module is additionally configured to determine a status value based on the evaluation of the power device's function, depending on which at least one fault handling step is performed in step d).

[0045] The problem is also solved by creating a power arrangement comprising a power device and a control device according to the invention, or a control device according to one or more of the embodiments described above, which is operatively connected to the power device for its control. In connection with the power arrangement, the advantages that have already been explained in connection with the method, the computer program, or the control device become particularly apparent. According to a further development of the invention, the power device is designed as an electrolysis device, in particular as an electrolyzer.

[0046] Alternatively, the power device can also be designed as an internal combustion engine, as an internal combustion engine-generator combination device, as a fuel cell, as an energy storage device, in particular a battery, as a data center or microgrid, or as another controllable or adjustable load on an electrical network.

[0047] The invention will be explained in more detail below with reference to the drawing. The drawing shows:

[0048] Figure 1 shows a schematic representation of an exemplary embodiment of a power arrangement, and

[0049] Figure 2 shows a schematic representation of an embodiment of a control device for the power device according to Figure 1.

[0050] Fig. 1 shows a schematic representation of an embodiment of a power arrangement 1 with a power device 3 designed as an electrolysis device 2 - in particular as an electrolyzer - and a control device 5.

[0051] The control device 5 is specifically designed to operate the power device 3. It is schematically indicated that the control device 5 is configured to apply or specify a voltage across a cell stack 7 of the power device 3. For the sake of clarity, other functional connections between the control device 5 and other components are not explicitly shown here.

[0052] Process water 9 is supplied to the cell stack 7 for electrolysis, where it absorbs heat from a product stream 13 of the power device 3 in a first heat exchanger 11. The product stream 13 comprises, in particular, hydrogen and residual water.

[0053] It is possible that the process water 9 is purified upstream of the first heat exchanger 11 for electrolysis and collected in a storage tank (not shown). The product stream 13 is preferably passed downstream of the first heat exchanger 11 via at least one gas separator (not shown) to separate the hydrogen from the residual water, and optionally via a further heat exchanger. The residual water separated in the at least one gas separator can be at least partially returned to the process water stream, preferably at a feed point between the first heat exchanger 11 and a water tank 15.

[0054] The process water 9 is passed downstream of the first heat exchanger 11 through the water tank 15, which also serves as a gas separator; downstream of the water tank 15, the process water is introduced into the cell stack 7.

[0055] In the cell stack 7, the process water 9 is electrochemically split into hydrogen and oxygen 16 in a manner known per se, with the hydrogen being carried away with the product stream 13, and the oxygen 16 being carried away with a waste stream 17 containing residual water. The waste stream 17 is directed via a second heat exchanger 19 into the water tank 15, where, in a first stage, residual water is separated from the oxygen 16, and the separated residual water can then be fed back into the cell stack 7 as process water 9.

[0056] In an embodiment not shown here, the heat extracted from the mass flow 17 in the second heat exchanger 19 can be supplied to the process water 9, in particular via a bypass heat exchanger arranged in a bypass path (not shown), which is connected to the second heat exchanger 19 via a heat transfer medium flow of a coolant 20. The bypass path can branch off from the process water flow between the water tank 15 and the cell stack 7 and rejoin the process water flow between the first heat exchanger 11 and the water tank 15. It is possible that the process water 9 flowing through the bypass path is purified again downstream of the second heat exchanger; alternatively or additionally, it is possible that the bypass heat exchanger arranged in the bypass path is cooled by means of a recooling device. This recooling then also has at least an indirect effect on the second heat exchanger 19.Alternatively or additionally, the second heat exchanger 19 can be directly recooled. In this respect, a recooling device is schematically depicted here as a third heat exchanger 21, which is fluidically connected to the second heat exchanger 19 by the heat exchanger medium flow of the coolant 20, and which can optionally also recool the bypass heat exchanger. In this respect, the bypass heat exchanger can also be referred to as a "third heat exchanger".

[0057] The water-depleted waste stream 17 flows from the water tank 15 to a fourth heat exchanger 23, which is cooled, in particular recooled, by a coolant (not shown). From the fourth heat exchanger 23, the waste stream 17 flows to a gas separator 25 for the separation of the oxygen 16 from the residual water in a second stage. The oxygen 16 is preferably discharged into the environment, while the separated residual water is fed back into the process water stream, which is schematically represented here by a flow-related connection between the gas separator 25 and the first heat exchanger 11. Preferably, the separated residual water is discharged from the gas separator 25 into the storage tank (not shown).

[0058] To generate and / or maintain the various fluid flows, conveying devices, preferably pumps, are provided at suitable locations in a manner known in themselves; these are not shown here for the sake of clarity.

[0059] Fig. 2 shows a schematic representation of an embodiment of the control device 5 for the power device 3 according to Figure 1.

[0060] Identical and functionally equivalent elements are provided with the same reference symbols in all figures, so that reference is made to the preceding description in each case.

[0061] The control device 5 is configured to carry out an embodiment of a method for operating the power device 3, which is described in more detail below.

[0062] In particular, the control device 5 shown here comprises an estimation module 27, a model predictive control module 29, and an automation module 31. The estimation module 27 is preferably an extended Kalman filter, but it can also be a Luenberger observer or another Kalman filter, in particular a stationary Kalman filter.Within the framework of the procedure for operating the power device 3, system values ​​33 of the power device 3 are transmitted to the estimating module 27, in particular by the automation module 31. The estimating module 27 uses the system values ​​33 to estimate a state 35 of the power device 3, and the power device 3 is operated based on the estimated state 35, in particular by transmitting the estimated state 35 to the model predictive control module 29. The model predictive control module 29 then calculates manipulated variable parameters 37 based on the estimated state 35 and transmits them to the automation module 31 for controlling the power device 3. The automation module 31 calculates manipulated variables 39 from the manipulated variable parameters 37 and uses them to control the power device 3.

[0063] The system values ​​33 comprise measured values ​​41 at the power device 3. In particular, these are measured values ​​measured at the power device 3 using real physical sensors, for example, pressures, temperatures, mass flows, electrical voltages and currents, and the like. Preferably, the system values ​​33 also include the control variables 39 and / or environmental measured values ​​43 of the power device 3.

[0064] The model predictive control module 29 preferably receives additionally from the automation module 31 the manipulated variables 39 and constraints 45 or limits of the actuators of the power device 3, as well as optionally status information 47 about an operating state or operating mode of the power device 3.

[0065] The control device 5 also includes a diagnostic module 28, which is configured to evaluate the function of the power device 3 based on at least one diagnostic value 49 calculated by the estimation module 27. Preferably, the diagnostic module 28 is additionally configured to transmit a status value 51 to the automation module 31, depending on the evaluation of the function of the power device 3. The automation module 31 is preferably configured to perform at least one fault handling step depending on the status value 51 if the status value 51 indicates that a malfunction of the power device 3 was detected during the evaluation.

[0066] In particular, the control device 5 is designed to carry out a procedure for

[0067] Operating the power device 3, wherein the system values ​​33 are passed to the estimating module 27, the system values ​​33 comprising the measured values ​​41 at the power device 3. The estimating module 27 calculates at least one diagnostic value 47 based on the system values ​​33, which is passed to the diagnostic module 28. The diagnostic module 28 evaluates the function of the power device 3 based on at least one diagnostic value 49 and preferably also performs at least one fault handling step if a malfunction of the power device 3 is detected during the evaluation of the function.

[0068] In particular, the estimation module 27 calculates a diagnostic vector comprising a plurality of diagnostic values ​​49 as vector elements. Preferably, the diagnostic module 28 uses the at least one diagnostic value 49 to infer a cause for the detected malfunction, or to identify or classify the detected malfunction using the at least one diagnostic value 49.

[0069] In particular, the at least one diagnostic value 49 is calculated as at least a residual between at least one test measurement value of the measurement values ​​41 and an associated estimated test measurement value calculated by the estimation module 27, in particular a residual vector which includes a plurality of such residuals as vector elements.

[0070] Preferably, the at least one residual is calculated in which the state 35 of the power device 3 is estimated by the estimation module 27 based on the system values ​​33, wherein the at least one estimated test measurement value is calculated by the estimation module 27 based on the estimated state 35, and wherein the at least one estimated test measurement value is compared with the associated test measurement value.

[0071] The function of the power device 3 is preferably additionally evaluated by the diagnostic module 28 based on at least one further diagnostic parameter 53, in particular at least one diagnostic function 55. The at least one further diagnostic parameter 53 is preferably calculated by the model predictive control module 29. However, it can also be calculated by the estimation module 27.

[0072] The at least one diagnostic function 55 is preferably selected from a group consisting of a cost function, a violation function, and a combination of at least two of the aforementioned functions. Preferably, the at least one fault handling step is selected from a group consisting of reducing the power output of the power device 3, operating the power device 3 in idle mode, and switching off the power device 3.

[0073] The status value 51 is preferably selected depending on a predetermined escalation level of the detected malfunction (quantitative) and / or depending on the type of detected malfunction (qualitative). In particular, depending on the status value 51, the power output of the power device 3 is preferably reduced in the case of a less serious or less pronounced malfunction; in the case of a more serious or more pronounced malfunction, the power device 3 is operated in idle mode; and in the case of a serious or pronounced malfunction, especially one posing a high risk to the power device 3 itself, to the operator of the power device 3, or to facilities or persons located in the vicinity of the power device 3, the power device 3 is shut down.

Claims

REQUIREMENTS 1. Method for operating a power device (3), wherein a) system values ​​(33) of the power device (3) are passed to an estimating module (27), wherein the system values ​​(33) include at least measured values ​​(41) measured at the power device (3), wherein b) at least one diagnostic value (49) is calculated by the estimating module (27) on the basis of the system values ​​(33), wherein c) a function of the power device (3) is evaluated on the basis of at least one diagnostic value (49), wherein d) at least one fault handling step is carried out if a malfunction of the power device (3) is detected during the evaluation of the function.

2. Method according to claim 1, wherein the at least one diagnostic value (49) is calculated as at least a residual between at least one test measurement value of the measured values ​​(41) and an associated estimated test measurement value calculated by the estimation module (27).

3. Method according to claim 2, wherein the at least one residual is calculated by estimating a state (35) of the power device (3) using the estimating module (27) based on the system values ​​(33), wherein the at least one estimated test measurement value is calculated by the estimating module (27) based on the estimated state (35), and wherein the at least one estimated test measurement value is compared with the associated test measurement value.

4. Method according to one of the preceding claims, wherein the function of the power device (3) in step c) is additionally evaluated on the basis of at least one further diagnostic parameter (53).

5. Method according to claim 4, wherein the at least one further diagnostic parameter (53) is calculated by a model predictive control module (29), wherein preferably the model predictive control module (29) calculates at least one actuator input (37) for at least one actuator (39) of the power device (3), and wherein further preferably the power device (3) is operated on the basis of at least one control variable specification (37).

6. Method according to one of claims 4 or 5, wherein the at least one further diagnostic parameter (53) is selected as a diagnostic function (55) from a group consisting of a cost function, an injury function, and a combination of at least two of the aforementioned functions.

7. Method according to one of the preceding claims, wherein the system values ​​(33) additionally include control variables (39) and environmental measurement values ​​(43) of the power device (3).

8. Method according to one of the preceding claims, wherein the estimation module (27) is a Luenberger observer or a Kalman filter, in particular a stationary Kalman filter or an extended Kalman filter.

9. Method according to any of the preceding claims, wherein the at least one fault handling step is selected from a group consisting of reducing the power of the power device (3), operating the power device (3) in idle mode, and switching off the power device (3).

10. Method according to one of the preceding claims, wherein the power device (3) is an electrolysis device (2).

11. Computer program comprising instructions by virtue of which a method according to any one of claims 1 to 10 is carried out when the computer program runs on a computing device, in particular a control device (5) for a power device (3) - in particular according to claim 12.

12. Control device (5) for a power device (3), configured to carry out a method according to one of claims 1 to 10, wherein the control device (5) preferably comprises the estimation module (27) and optionally a model predictive control module (29).

13. Power arrangement (1), comprising a power device (3) and a control device (5) according to claim 12.

14. Power arrangement (1) according to claim 13, wherein the power device (3) is designed as an electrolysis device (2).

Images